This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/0e488f-180d-4c8a-a452-4c74bb59c594/1/74RV1AwuPbyyREb8yXoJ7Uut7cM.mft File: 74RV1AwuPbyyREb8yXoJ7Uut7cM.mft (raw, json) Hash identifier: XphUsoUA1l9vTbPs8MDhBOpgd8exRqc7iHqo2okQlHU= Subject key identifier: AA:07:7A:3C:DD:56:E5:5E:D9:2B:53:2C:6A:0F:E5:92:33:93:FC:30 Authority key identifier: EF:84:55:D4:0C:2E:3D:BC:B2:44:46:FC:C9:7A:09:ED:4B:AD:ED:C3 Certificate issuer: /CN=ef8455d40c2e3dbcb24446fcc97a09ed4badedc3 Certificate serial: 019AF540D0BDFD9236DB27C8B2A5D5E77D2A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/74RV1AwuPbyyREb8yXoJ7Uut7cM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/0e488f-180d-4c8a-a452-4c74bb59c594/1/74RV1AwuPbyyREb8yXoJ7Uut7cM.mft Manifest number: 0469 Signing time: Sat 06 Dec 2025 20:00:56 +0000 Manifest this update: Sat 06 Dec 2025 20:00:56 +0000 Manifest next update: Sun 07 Dec 2025 20:00:56 +0000 Files and hashes: 1: 619zNDqmtLKKCjzlIw8zZSm1ZZE.roa (hash: zZAwiAuYtnzM2ojN5bJH5pjkYxQOefSCs6lkaP9dQ7s=) 2: 74RV1AwuPbyyREb8yXoJ7Uut7cM.crl (hash: hercQjcw/GBwjUbNqPuBTz6+Itv1FxCWL4VfVFFpG1Q=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/0e488f-180d-4c8a-a452-4c74bb59c594/1/74RV1AwuPbyyREb8yXoJ7Uut7cM.crl rsync://rpki.ripe.net/repository/DEFAULT/cf/0e488f-180d-4c8a-a452-4c74bb59c594/1/74RV1AwuPbyyREb8yXoJ7Uut7cM.mft rsync://rpki.ripe.net/repository/DEFAULT/74RV1AwuPbyyREb8yXoJ7Uut7cM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 20:00:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:40:d0:bd:fd:92:36:db:27:c8:b2:a5:d5:e7:7d:2a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ef8455d40c2e3dbcb24446fcc97a09ed4badedc3 Validity Not Before: Dec 6 20:00:56 2025 GMT Not After : Dec 7 20:00:56 2025 GMT Subject: CN=aa077a3cdd56e55ed92b532c6a0fe5923393fc30 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:68:43:b8:cd:a3:a4:ca:8a:c1:b5:4e:a0:5e: 42:45:a5:d0:b0:c7:ee:d9:99:71:38:a3:dd:bc:79: 0d:06:97:be:09:18:58:2f:38:c5:4a:bd:b7:e8:f6: 17:72:e1:36:b2:73:01:26:fb:3f:52:31:75:ea:78: c8:ce:ae:76:68:c5:7c:72:0d:d1:7f:d4:1c:60:6f: 3a:a3:05:ff:68:c5:4b:67:13:f1:9a:68:14:5d:de: c7:4f:7e:eb:d6:c4:31:84:07:d3:90:56:69:de:15: ee:4a:99:9d:07:80:a0:b7:9d:27:2c:ab:c5:fa:4d: e6:a4:53:0e:4d:de:8c:c1:d7:df:b1:13:29:63:6a: f4:1d:87:79:3c:23:06:dd:06:f8:af:72:43:11:e7: 62:15:24:ab:72:03:cf:5f:25:7c:e0:52:3a:e7:e6: 05:e5:d1:6d:ae:40:e0:78:63:f1:8d:7f:f2:f5:a0: 8d:95:e3:29:14:90:aa:a9:f0:f4:93:3c:ce:a9:20: cc:8c:20:84:38:9f:35:c0:9f:8d:b0:f7:87:9b:39: 37:0c:85:63:cc:14:fd:72:46:48:da:77:1f:3f:2b: 16:13:49:a6:7b:00:ab:2e:44:a7:cc:dc:23:ba:f2: 7c:e2:6f:e6:9d:45:ae:f1:04:5c:72:a3:4a:41:94: 28:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:07:7A:3C:DD:56:E5:5E:D9:2B:53:2C:6A:0F:E5:92:33:93:FC:30 X509v3 Authority Key Identifier: keyid:EF:84:55:D4:0C:2E:3D:BC:B2:44:46:FC:C9:7A:09:ED:4B:AD:ED:C3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/74RV1AwuPbyyREb8yXoJ7Uut7cM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/0e488f-180d-4c8a-a452-4c74bb59c594/1/74RV1AwuPbyyREb8yXoJ7Uut7cM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/0e488f-180d-4c8a-a452-4c74bb59c594/1/74RV1AwuPbyyREb8yXoJ7Uut7cM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2c:60:4a:26:52:48:f4:d2:b0:30:c6:3c:d3:d8:85:a0:03:d3: c1:94:7d:81:ce:3a:be:c8:2a:b0:e2:e8:31:da:42:08:80:c6: 1d:e4:77:ca:aa:c6:27:a4:c4:b4:db:74:a4:5f:91:a3:c8:58: fe:da:82:47:79:14:1e:ff:7a:8f:8b:50:8e:5a:4f:46:b8:38: 74:70:4d:b4:a0:d3:c2:7d:b4:a4:28:ef:7c:25:4a:e5:da:13: 6d:55:eb:d7:65:1f:4c:2c:3d:46:3c:39:7c:49:74:0a:02:16: 90:fe:53:d7:06:06:9c:d0:83:7e:82:1d:ee:26:56:d5:e8:f6: 8b:85:ea:31:5f:7f:e9:f4:c1:3c:6b:3d:ee:50:d7:89:de:00: d9:94:7f:60:ca:d9:37:84:71:17:38:b9:50:77:87:52:4e:3a: b8:79:59:17:89:db:84:4b:c7:d6:39:6e:db:65:24:00:03:ae: 7a:c0:25:f3:ee:9b:b6:6b:e4:05:c9:52:b8:19:13:eb:ba:b0: e9:96:83:68:f0:46:3e:34:81:a1:ab:d0:1a:c8:07:65:e0:3a: f6:98:5a:44:63:35:df:04:a7:35:69:07:47:f9:62:13:f9:84: da:4e:4b:8a:da:9d:b0:4c:98:ed:95:c6:d0:81:98:6a:bb:d4: e2:42:e9:5e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1QNC9/ZI22yfIsqXV530qMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVmODQ1NWQ0MGMyZTNkYmNiMjQ0NDZmY2M5N2EwOWVkNGJh ZGVkYzMwHhcNMjUxMjA2MjAwMDU2WhcNMjUxMjA3MjAwMDU2WjAzMTEwLwYDVQQD EyhhYTA3N2EzY2RkNTZlNTVlZDkyYjUzMmM2YTBmZTU5MjMzOTNmYzMwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw2hDuM2jpMqKwbVOoF5CRaXQsMfu 2ZlxOKPdvHkNBpe+CRhYLzjFSr236PYXcuE2snMBJvs/UjF16njIzq52aMV8cg3R f9QcYG86owX/aMVLZxPxmmgUXd7HT37r1sQxhAfTkFZp3hXuSpmdB4Cgt50nLKvF +k3mpFMOTd6MwdffsRMpY2r0HYd5PCMG3Qb4r3JDEediFSSrcgPPXyV84FI65+YF 5dFtrkDgeGPxjX/y9aCNleMpFJCqqfD0kzzOqSDMjCCEOJ81wJ+NsPeHmzk3DIVj zBT9ckZI2ncfPysWE0mmewCrLkSnzNwjuvJ84m/mnUWu8QRccqNKQZQoNwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKoHejzdVuVe2StTLGoP5ZIzk/wwMB8GA1UdIwQY MBaAFO+EVdQMLj28skRG/Ml6Ce1Lre3DMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNzRSVjFBd3VQYnl5UkViOHlYb0o3VXV0N2NNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZi8wZTQ4OGYtMTgwZC00YzhhLWE0NTIt NGM3NGJiNTljNTk0LzEvNzRSVjFBd3VQYnl5UkViOHlYb0o3VXV0N2NNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZi8wZTQ4OGYtMTgwZC00YzhhLWE0NTItNGM3NGJiNTljNTk0 LzEvNzRSVjFBd3VQYnl5UkViOHlYb0o3VXV0N2NNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALGBKJlJI 9NKwMMY809iFoAPTwZR9gc46vsgqsOLoMdpCCIDGHeR3yqrGJ6TEtNt0pF+Ro8hY /tqCR3kUHv96j4tQjlpPRrg4dHBNtKDTwn20pCjvfCVK5doTbVXr12UfTCw9Rjw5 fEl0CgIWkP5T1wYGnNCDfoId7iZW1ej2i4XqMV9/6fTBPGs97lDXid4A2ZR/YMrZ N4RxFzi5UHeHUk46uHlZF4nbhEvH1jlu22UkAAOuesAl8+6btmvkBclSuBkT67qw 6ZaDaPBGPjSBoavQGsgHZeA69phaRGM13wSnNWkHR/liE/mE2k5LitqdsEyY7ZXG 0IGYarvU4kLpXg== -----END CERTIFICATE-----Generated at Sun Dec 7 04:14:55 2025 by rpki-client