This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/45ac0f-383a-4eb4-b188-996189f9ce14/1/CfDczrdPEYWs2XruqsJd2l6bCTY.mft File: CfDczrdPEYWs2XruqsJd2l6bCTY.mft (raw, json) Hash identifier: as9cEzhWwE+LJ+dYlWX8a3ko92JWJUoBfL/VvrdOj6I= Subject key identifier: 59:6C:9D:50:6E:52:AA:E2:F8:76:85:42:CE:13:03:0B:2D:5D:05:C0 Authority key identifier: 09:F0:DC:CE:B7:4F:11:85:AC:D9:7A:EE:AA:C2:5D:DA:5E:9B:09:36 Certificate issuer: /CN=09f0dcceb74f1185acd97aeeaac25dda5e9b0936 Certificate serial: 019AF2097E5150BDF381672BF8B38DC7963F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CfDczrdPEYWs2XruqsJd2l6bCTY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/45ac0f-383a-4eb4-b188-996189f9ce14/1/CfDczrdPEYWs2XruqsJd2l6bCTY.mft Manifest number: 132C Signing time: Sat 06 Dec 2025 05:01:39 +0000 Manifest this update: Sat 06 Dec 2025 05:01:39 +0000 Manifest next update: Sun 07 Dec 2025 05:01:39 +0000 Files and hashes: 1: 6rcNFpA9OUIHOHJZd3RQ4Nq4JOQ.roa (hash: 8DalHmkqlYHfZ/UiruC9ySCew9dMOULJFQbWBLs8o00=) 2: A0RJOA3D0QS8jyOdklsxwozEZks.roa (hash: sW0q/KPoEvaj+bjphgSA1v3RGwifbXQZawO4nY7ko3U=) 3: CfDczrdPEYWs2XruqsJd2l6bCTY.crl (hash: s6/i6UySL7hJh+lmR6rBh6qwvCvcih5UaqacR1xcg8E=) 4: EiLZXNFLeYaMBuVG79qI9-lFpJ0.roa (hash: pWVGRhAAESPBnV3t2uHYBiBVbQwsb0r95XhCGXUNPKk=) 5: pjH39R69sTwNHovgBG7mjRi0zDA.roa (hash: ///nC0KLmONlIJKYPkTb/i0CXtnKWaQJex/id87l6FQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/45ac0f-383a-4eb4-b188-996189f9ce14/1/CfDczrdPEYWs2XruqsJd2l6bCTY.crl rsync://rpki.ripe.net/repository/DEFAULT/e2/45ac0f-383a-4eb4-b188-996189f9ce14/1/CfDczrdPEYWs2XruqsJd2l6bCTY.mft rsync://rpki.ripe.net/repository/DEFAULT/CfDczrdPEYWs2XruqsJd2l6bCTY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:09:7e:51:50:bd:f3:81:67:2b:f8:b3:8d:c7:96:3f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=09f0dcceb74f1185acd97aeeaac25dda5e9b0936 Validity Not Before: Dec 6 05:01:39 2025 GMT Not After : Dec 7 05:01:39 2025 GMT Subject: CN=596c9d506e52aae2f8768542ce13030b2d5d05c0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:02:a2:67:10:b6:cd:12:b1:fe:af:51:f6:cd: 50:b6:64:72:ba:ca:1e:2d:0f:fb:b5:d9:7f:81:16: 77:33:9b:52:27:ec:da:87:17:db:7b:71:7e:f1:f7: a2:6e:89:65:37:79:04:11:d8:0b:7c:90:fd:8e:a6: dd:2e:b0:82:91:9e:99:16:c0:ef:97:f2:f6:65:60: 73:52:16:bc:b7:12:04:6e:a9:dc:a3:4e:f6:64:9e: 30:ae:b3:a9:24:82:d5:73:ec:e0:48:b3:94:20:a1: c2:95:b7:75:1b:fc:b3:1e:ae:65:55:22:c6:14:cf: 82:e9:eb:80:63:cf:f2:99:c8:c7:90:3f:e9:ed:10: 59:42:34:2a:c7:2d:71:e4:db:81:d2:38:e8:2e:2b: 91:e7:23:a3:06:c4:63:96:82:e1:79:1c:0c:a4:09: 31:20:e1:1b:81:29:cb:6f:d1:57:32:ed:38:62:44: 6e:54:1f:13:1c:bd:7e:01:84:0f:2a:df:6d:d8:1f: ba:56:76:55:ec:85:c9:f6:bf:93:36:c8:cc:13:3f: 64:ef:3e:a0:e7:54:21:bf:2e:6f:b6:9c:4d:6d:ce: 8e:b9:80:29:48:c9:1c:63:a2:7a:a1:6a:d3:99:43: 20:28:95:e1:f6:d6:8a:17:dc:9d:49:e9:b9:7d:2b: 89:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:6C:9D:50:6E:52:AA:E2:F8:76:85:42:CE:13:03:0B:2D:5D:05:C0 X509v3 Authority Key Identifier: keyid:09:F0:DC:CE:B7:4F:11:85:AC:D9:7A:EE:AA:C2:5D:DA:5E:9B:09:36 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CfDczrdPEYWs2XruqsJd2l6bCTY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/45ac0f-383a-4eb4-b188-996189f9ce14/1/CfDczrdPEYWs2XruqsJd2l6bCTY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/45ac0f-383a-4eb4-b188-996189f9ce14/1/CfDczrdPEYWs2XruqsJd2l6bCTY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a7:79:f2:7d:92:a4:26:a0:da:62:00:1f:f4:45:61:f4:85:71: 75:ff:84:22:23:b1:1e:0f:1e:98:22:dc:07:35:7c:cb:d2:71: 50:85:d5:75:25:37:59:07:30:39:04:36:1c:4f:78:4e:74:a5: 9a:86:4c:1a:6b:06:7b:03:03:08:79:b4:83:47:56:64:53:8e: 8b:0f:ea:ac:dd:78:ab:48:1c:d2:14:85:b3:bb:e7:75:26:df: ac:1b:b8:d3:2a:30:71:9b:86:c5:b0:2e:54:39:65:94:dd:0c: 76:69:3d:6a:03:35:1b:ee:67:bf:f6:65:be:02:ef:65:9a:a0: 3e:b4:b6:81:ae:aa:85:56:5a:c8:7b:20:15:df:f0:0b:23:6c: f1:d2:1a:c7:3d:3c:10:c8:2d:e2:c3:a3:32:b5:d2:c8:18:9a: 92:05:1d:54:a3:2a:80:e5:97:dc:55:08:aa:07:0f:a0:e3:9a: b4:fe:49:d3:e1:81:53:bf:01:58:a8:b6:18:d2:a1:ed:87:1e: 1a:93:d3:b1:c8:6e:9c:fa:d1:17:b2:10:b0:fd:24:26:8f:7b: 99:6d:c2:a0:ed:e8:06:eb:d7:7f:91:10:8f:17:c5:df:13:c6: bb:a1:8e:cd:2b:ce:39:65:b5:1f:b4:e5:4c:90:2b:2c:92:71: 67:33:08:30 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCX5RUL3zgWcr+LONx5Y/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA5ZjBkY2NlYjc0ZjExODVhY2Q5N2FlZWFhYzI1ZGRhNWU5 YjA5MzYwHhcNMjUxMjA2MDUwMTM5WhcNMjUxMjA3MDUwMTM5WjAzMTEwLwYDVQQD Eyg1OTZjOWQ1MDZlNTJhYWUyZjg3Njg1NDJjZTEzMDMwYjJkNWQwNWMwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuQKiZxC2zRKx/q9R9s1QtmRyusoe LQ/7tdl/gRZ3M5tSJ+zahxfbe3F+8feibollN3kEEdgLfJD9jqbdLrCCkZ6ZFsDv l/L2ZWBzUha8txIEbqnco072ZJ4wrrOpJILVc+zgSLOUIKHClbd1G/yzHq5lVSLG FM+C6euAY8/ymcjHkD/p7RBZQjQqxy1x5NuB0jjoLiuR5yOjBsRjloLheRwMpAkx IOEbgSnLb9FXMu04YkRuVB8THL1+AYQPKt9t2B+6VnZV7IXJ9r+TNsjMEz9k7z6g 51Qhvy5vtpxNbc6OuYApSMkcY6J6oWrTmUMgKJXh9taKF9ydSem5fSuJ/QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFlsnVBuUqri+HaFQs4TAwstXQXAMB8GA1UdIwQY MBaAFAnw3M63TxGFrNl67qrCXdpemwk2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ2ZEY3pyZFBFWVdzMlhydXFzSmQybDZiQ1RZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMi80NWFjMGYtMzgzYS00ZWI0LWIxODgt OTk2MTg5ZjljZTE0LzEvQ2ZEY3pyZFBFWVdzMlhydXFzSmQybDZiQ1RZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMi80NWFjMGYtMzgzYS00ZWI0LWIxODgtOTk2MTg5ZjljZTE0 LzEvQ2ZEY3pyZFBFWVdzMlhydXFzSmQybDZiQ1RZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAp3nyfZKk JqDaYgAf9EVh9IVxdf+EIiOxHg8emCLcBzV8y9JxUIXVdSU3WQcwOQQ2HE94TnSl moZMGmsGewMDCHm0g0dWZFOOiw/qrN14q0gc0hSFs7vndSbfrBu40yowcZuGxbAu VDlllN0Mdmk9agM1G+5nv/ZlvgLvZZqgPrS2ga6qhVZayHsgFd/wCyNs8dIaxz08 EMgt4sOjMrXSyBiakgUdVKMqgOWX3FUIqgcPoOOatP5J0+GBU78BWKi2GNKh7Yce GpPTschunPrRF7IQsP0kJo97mW3CoO3oBuvXf5EQjxfF3xPGu6GOzSvOOWW1H7Tl TJArLJJxZzMIMA== -----END CERTIFICATE-----Generated at Sat Dec 6 10:11:30 2025 by rpki-client