This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/e2e119-fd78-4b1a-b16a-987da4392056/1/cS-cs8KYsVC-t5CAN290verEOKw.mft File: cS-cs8KYsVC-t5CAN290verEOKw.mft (raw, json) Hash identifier: H6hYO+4tUAEn2kmD6eOcy8hP4dNS1OANNj6KWVnSg0A= Subject key identifier: 74:61:13:29:F1:22:6F:F8:A1:4C:C3:57:CD:DB:48:20:D9:86:76:13 Authority key identifier: 71:2F:9C:B3:C2:98:B1:50:BE:B7:90:80:37:6F:74:BD:EA:C4:38:AC Certificate issuer: /CN=712f9cb3c298b150beb79080376f74bdeac438ac Certificate serial: 019AF1640C8C7D5A4725B77A9D442B9444FB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cS-cs8KYsVC-t5CAN290verEOKw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/e2e119-fd78-4b1a-b16a-987da4392056/1/cS-cs8KYsVC-t5CAN290verEOKw.mft Manifest number: 1767 Signing time: Sat 06 Dec 2025 02:00:57 +0000 Manifest this update: Sat 06 Dec 2025 02:00:57 +0000 Manifest next update: Sun 07 Dec 2025 02:00:57 +0000 Files and hashes: 1: a8fiimQdU18P-F2tOQH9sjS2Djw.asa (hash: SNczP7mStVed+rVQzNAM+CHW/D0tMUWtQ+EIBgCl2dM=) 2: cFDNySQq-BoAAus-f6QDofmomPs.asa (hash: bmD9h4TJUpSAXYuI/gTQnCZ438ljBruFVbyjbe3Styo=) 3: cS-cs8KYsVC-t5CAN290verEOKw.crl (hash: SOJmWoorSaHxv5pofIxMGG+17Yj1A4jJC6TrqSjqIN8=) 4: fXIhT7Ydqm5HytjfeB-NmrbrFRI.roa (hash: EsiKR1dMs1SsEJue6V9U6b9V/XFN9Zx4S62/KpEzEqg=) 5: kzy2fS8wPguMf8v9iXU1Xd6RCJE.roa (hash: T6hfblwKGrCK3Ap3pOGRw0serguSainDEw/sPRZW+uI=) 6: mprfUYWLFFvcoporgivp8S18oz0.roa (hash: uZGl5TRJLtjM+YCzDi4j+2EG/6oM3QIc/9AdR4GUda8=) 7: nqfgPZyBGUMJjXZ82ONF8M_wX2o.roa (hash: cAq2+4Plhv+25M/XxaCNm4UA7TT+v8QHyzJDH25TDn4=) 8: zShwLkkDPGWGSwVW1WaNYQqy4QY.roa (hash: cc7GaLAsHY9PJBKnUzOfoPoWS1viq2gLzvzxAmdtn+k=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/e2e119-fd78-4b1a-b16a-987da4392056/1/cS-cs8KYsVC-t5CAN290verEOKw.crl rsync://rpki.ripe.net/repository/DEFAULT/d9/e2e119-fd78-4b1a-b16a-987da4392056/1/cS-cs8KYsVC-t5CAN290verEOKw.mft rsync://rpki.ripe.net/repository/DEFAULT/cS-cs8KYsVC-t5CAN290verEOKw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:64:0c:8c:7d:5a:47:25:b7:7a:9d:44:2b:94:44:fb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=712f9cb3c298b150beb79080376f74bdeac438ac Validity Not Before: Dec 6 02:00:57 2025 GMT Not After : Dec 7 02:00:57 2025 GMT Subject: CN=74611329f1226ff8a14cc357cddb4820d9867613 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:d9:b9:0f:81:25:90:05:ac:41:ba:cd:4e:87: a2:cc:9b:55:f7:49:d5:59:02:4a:4f:a9:af:f8:02: 14:bb:2e:2f:a9:07:83:e8:cb:f3:ec:c4:6a:05:9d: 0a:3e:26:6b:2d:bc:84:63:d7:6b:3e:d8:e0:82:64: a2:86:5e:47:39:1c:88:39:3d:99:bc:58:5a:9b:f4: 14:aa:61:c8:5f:65:e7:ee:a1:04:cf:01:fa:ac:36: 31:7b:59:ca:63:3f:06:a2:38:ae:a6:13:45:ac:bd: ff:ea:52:05:83:5b:b1:62:29:9f:84:ee:a4:0e:cb: 3c:1d:d4:32:d1:52:ac:7c:96:37:db:d0:67:80:33: 04:73:2a:1e:63:75:73:9b:dd:46:30:27:cc:97:25: 0b:1d:78:37:4b:17:3e:3e:bb:0d:17:d4:6a:38:27: ad:61:f8:14:e0:21:43:b1:99:ab:3f:16:98:fa:16: de:2a:0c:cb:50:89:07:f0:b1:2b:8b:1a:6f:da:aa: 4d:0c:83:cf:50:67:f7:f2:d8:b6:71:b0:d4:48:a6: 60:45:9e:3f:bc:f0:8a:ca:7e:31:37:33:27:19:eb: 74:29:c4:d9:78:88:bd:3a:b7:8a:e2:40:6b:4d:cb: ca:63:bd:e5:c6:bb:7f:69:34:68:ff:47:0f:50:93: 60:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:61:13:29:F1:22:6F:F8:A1:4C:C3:57:CD:DB:48:20:D9:86:76:13 X509v3 Authority Key Identifier: keyid:71:2F:9C:B3:C2:98:B1:50:BE:B7:90:80:37:6F:74:BD:EA:C4:38:AC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cS-cs8KYsVC-t5CAN290verEOKw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/e2e119-fd78-4b1a-b16a-987da4392056/1/cS-cs8KYsVC-t5CAN290verEOKw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/e2e119-fd78-4b1a-b16a-987da4392056/1/cS-cs8KYsVC-t5CAN290verEOKw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 32:03:93:ea:26:1a:c5:88:0a:c5:fa:0b:08:34:92:27:9c:de: e4:1c:5e:d5:99:38:93:02:79:10:cc:0b:4f:60:aa:af:01:a1: 44:82:5a:69:46:3b:92:59:cd:9c:87:5a:0b:fd:7f:ae:aa:c4: 93:a2:a3:31:3b:89:d8:d4:7b:39:47:84:fe:03:b2:51:41:7f: 33:a0:d4:ff:77:c2:35:15:6f:30:20:1c:fc:82:7b:2d:12:91: fb:b6:3e:05:e2:17:ef:2c:b9:db:97:58:1e:f8:77:c3:80:1d: 8b:0a:11:99:37:04:da:1d:05:e1:9b:ab:8f:17:87:bb:63:a2: d4:cf:56:9d:e4:8f:6f:14:0f:f6:1d:47:b0:71:20:07:b1:5c: 63:26:4e:21:b4:f2:55:86:e2:a1:9b:64:f7:02:c8:8c:5c:22: 7d:37:11:77:7f:1e:11:a7:eb:2b:97:5e:5a:aa:60:f4:6c:f8: d4:bb:f1:08:7f:af:1b:86:96:c1:95:c7:9d:e9:3d:ae:3a:51: ed:b6:47:ea:68:ab:95:c7:8b:b0:c5:76:90:e1:3d:ca:8f:e4: 05:28:3a:1f:6e:6b:28:00:f0:0b:0d:1d:e9:46:68:28:07:ec: 6b:dc:85:22:33:9d:0a:81:17:e4:07:c6:0f:a3:18:39:93:76: b3:ac:2d:83 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxZAyMfVpHJbd6nUQrlET7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcxMmY5Y2IzYzI5OGIxNTBiZWI3OTA4MDM3NmY3NGJkZWFj NDM4YWMwHhcNMjUxMjA2MDIwMDU3WhcNMjUxMjA3MDIwMDU3WjAzMTEwLwYDVQQD Eyg3NDYxMTMyOWYxMjI2ZmY4YTE0Y2MzNTdjZGRiNDgyMGQ5ODY3NjEzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1dm5D4ElkAWsQbrNToeizJtV90nV WQJKT6mv+AIUuy4vqQeD6Mvz7MRqBZ0KPiZrLbyEY9drPtjggmSihl5HORyIOT2Z vFham/QUqmHIX2Xn7qEEzwH6rDYxe1nKYz8GojiuphNFrL3/6lIFg1uxYimfhO6k Dss8HdQy0VKsfJY329BngDMEcyoeY3Vzm91GMCfMlyULHXg3Sxc+PrsNF9RqOCet YfgU4CFDsZmrPxaY+hbeKgzLUIkH8LErixpv2qpNDIPPUGf38ti2cbDUSKZgRZ4/ vPCKyn4xNzMnGet0KcTZeIi9OreK4kBrTcvKY73lxrt/aTRo/0cPUJNgHwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHRhEynxIm/4oUzDV83bSCDZhnYTMB8GA1UdIwQY MBaAFHEvnLPCmLFQvreQgDdvdL3qxDisMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY1MtY3M4S1lzVkMtdDVDQU4yOTB2ZXJFT0t3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS9lMmUxMTktZmQ3OC00YjFhLWIxNmEt OTg3ZGE0MzkyMDU2LzEvY1MtY3M4S1lzVkMtdDVDQU4yOTB2ZXJFT0t3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kOS9lMmUxMTktZmQ3OC00YjFhLWIxNmEtOTg3ZGE0MzkyMDU2 LzEvY1MtY3M4S1lzVkMtdDVDQU4yOTB2ZXJFT0t3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMgOT6iYa xYgKxfoLCDSSJ5ze5Bxe1Zk4kwJ5EMwLT2CqrwGhRIJaaUY7klnNnIdaC/1/rqrE k6KjMTuJ2NR7OUeE/gOyUUF/M6DU/3fCNRVvMCAc/IJ7LRKR+7Y+BeIX7yy525dY Hvh3w4AdiwoRmTcE2h0F4ZurjxeHu2Oi1M9WneSPbxQP9h1HsHEgB7FcYyZOIbTy VYbioZtk9wLIjFwifTcRd38eEafrK5deWqpg9Gz41LvxCH+vG4aWwZXHnek9rjpR 7bZH6mirlceLsMV2kOE9yo/kBSg6H25rKADwCw0d6UZoKAfsa9yFIjOdCoEX5AfG D6MYOZN2s6wtgw== -----END CERTIFICATE-----Generated at Sat Dec 6 10:01:03 2025 by rpki-client