This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/418fe2-4f7d-40ac-abe4-119bbd761973/1/_CYh7jHgaq3Byjo3bkV9jQSWsQ0.mft File: _CYh7jHgaq3Byjo3bkV9jQSWsQ0.mft (raw, json) Hash identifier: cAeicTcZb6fxTEeR08jUj3r+HKkOUfq4NYRSO1O5/Ww= Subject key identifier: 3A:4C:8D:5A:3D:59:11:C8:E7:77:93:92:FE:E5:E7:6B:6D:B5:91:13 Authority key identifier: FC:26:21:EE:31:E0:6A:AD:C1:CA:3A:37:6E:45:7D:8D:04:96:B1:0D Certificate issuer: /CN=fc2621ee31e06aadc1ca3a376e457d8d0496b10d Certificate serial: 019AF12D09B85B711082BAC6D010E42391E6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_CYh7jHgaq3Byjo3bkV9jQSWsQ0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/418fe2-4f7d-40ac-abe4-119bbd761973/1/_CYh7jHgaq3Byjo3bkV9jQSWsQ0.mft Manifest number: 15E1 Signing time: Sat 06 Dec 2025 01:00:51 +0000 Manifest this update: Sat 06 Dec 2025 01:00:51 +0000 Manifest next update: Sun 07 Dec 2025 01:00:51 +0000 Files and hashes: 1: ZBvl9kgTfl9xpoCDalOQ41fsQlA.roa (hash: eTBJG42QxSY9j5MKHECEE0ZbmMhc6Mb5ITGizx3+EdE=) 2: _CYh7jHgaq3Byjo3bkV9jQSWsQ0.crl (hash: TwpaRGgNPJrZv5MGIzdFm8sML9z+xolj7UepQxSye8c=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/418fe2-4f7d-40ac-abe4-119bbd761973/1/_CYh7jHgaq3Byjo3bkV9jQSWsQ0.crl rsync://rpki.ripe.net/repository/DEFAULT/e5/418fe2-4f7d-40ac-abe4-119bbd761973/1/_CYh7jHgaq3Byjo3bkV9jQSWsQ0.mft rsync://rpki.ripe.net/repository/DEFAULT/_CYh7jHgaq3Byjo3bkV9jQSWsQ0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:00:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2d:09:b8:5b:71:10:82:ba:c6:d0:10:e4:23:91:e6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fc2621ee31e06aadc1ca3a376e457d8d0496b10d Validity Not Before: Dec 6 01:00:51 2025 GMT Not After : Dec 7 01:00:51 2025 GMT Subject: CN=3a4c8d5a3d5911c8e7779392fee5e76b6db59113 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:24:b0:9c:60:2e:49:56:ac:aa:51:57:b5:77: 1a:ee:fa:9b:22:64:df:30:7c:a9:0a:f9:55:c5:fc: 33:cd:99:70:03:eb:65:39:41:3c:3a:3b:89:e9:42: 13:1d:98:c9:c2:d5:80:60:e1:94:99:6f:c2:51:8f: 7f:e7:55:78:0b:e6:a5:91:6c:8c:49:b9:03:ab:9c: 71:82:7d:7e:95:cd:60:d7:ca:46:c8:3a:a6:2b:38: a3:d7:6d:ca:e0:2f:36:92:fd:12:91:7b:f3:06:1c: 97:75:b0:41:46:6c:72:3c:b0:41:d3:12:8a:5a:1f: 46:91:1f:32:c5:13:5d:db:39:97:59:21:d9:5e:3f: 0b:5d:68:e2:12:32:81:c6:c4:6d:66:11:05:73:e4: db:4e:93:ba:a0:a6:fc:d7:4b:6c:8b:c3:3a:9c:58: da:b5:cc:0e:5e:c6:db:93:db:cc:1f:2a:66:0c:4c: 50:d1:34:3f:78:e0:5c:d6:c9:c4:d7:e9:00:e4:ed: 70:f5:48:00:51:72:12:19:15:b1:98:dc:04:4a:af: 84:93:48:d2:48:5d:3e:08:af:ad:82:94:23:bb:36: 2c:0e:86:60:6a:07:fa:bf:4a:7c:79:04:67:9d:b5: f5:e8:ca:af:8f:44:f8:02:73:a1:b2:0f:f6:d7:72: 7e:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:4C:8D:5A:3D:59:11:C8:E7:77:93:92:FE:E5:E7:6B:6D:B5:91:13 X509v3 Authority Key Identifier: keyid:FC:26:21:EE:31:E0:6A:AD:C1:CA:3A:37:6E:45:7D:8D:04:96:B1:0D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_CYh7jHgaq3Byjo3bkV9jQSWsQ0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/418fe2-4f7d-40ac-abe4-119bbd761973/1/_CYh7jHgaq3Byjo3bkV9jQSWsQ0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/418fe2-4f7d-40ac-abe4-119bbd761973/1/_CYh7jHgaq3Byjo3bkV9jQSWsQ0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption be:0a:2c:c3:0b:a2:02:aa:64:84:a0:54:b7:90:de:5c:58:50: b0:67:fc:36:7f:99:7a:1b:0d:35:22:07:9c:0e:c0:74:33:d6: ed:21:a6:ec:e6:27:ac:63:d8:3b:c0:59:29:9d:70:d6:d3:01: 2a:24:00:e0:d0:e3:cd:b6:e3:51:68:a3:aa:d2:30:c2:4b:a5: d8:9b:f4:eb:17:34:1c:6d:d3:80:fb:b6:c7:82:43:8f:cd:78: 36:0d:ad:3e:98:e2:73:75:6e:5d:a3:e0:6b:1d:7a:48:30:67: e6:b9:6b:3a:ee:ab:b8:1b:84:89:1c:aa:51:84:dc:26:58:42: 20:a8:af:a9:46:f4:6d:0c:80:f7:e2:72:cf:90:8c:11:81:69: dc:80:6d:81:8e:0b:98:a5:39:ef:10:c5:83:b1:ef:57:15:ad: fb:31:25:fa:91:5b:2c:58:a9:4d:e2:b4:7f:34:6c:ed:7a:5b: 1f:4a:01:61:f3:c7:fc:65:8d:62:fd:2e:01:d2:7b:5c:95:0e: 17:8a:46:ef:69:9a:29:4c:70:ae:37:29:c6:61:c1:fa:c5:b7: d6:15:bb:cd:06:ba:7f:db:9a:37:0f:26:f0:ff:5e:ea:f9:7a: bd:6a:98:5d:16:2d:b7:87:be:f5:78:04:a1:5b:c7:b3:1a:ba: 96:67:c0:87 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLQm4W3EQgrrG0BDkI5HmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZjMjYyMWVlMzFlMDZhYWRjMWNhM2EzNzZlNDU3ZDhkMDQ5 NmIxMGQwHhcNMjUxMjA2MDEwMDUxWhcNMjUxMjA3MDEwMDUxWjAzMTEwLwYDVQQD EygzYTRjOGQ1YTNkNTkxMWM4ZTc3NzkzOTJmZWU1ZTc2YjZkYjU5MTEzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuCSwnGAuSVasqlFXtXca7vqbImTf MHypCvlVxfwzzZlwA+tlOUE8OjuJ6UITHZjJwtWAYOGUmW/CUY9/51V4C+alkWyM SbkDq5xxgn1+lc1g18pGyDqmKzij123K4C82kv0SkXvzBhyXdbBBRmxyPLBB0xKK Wh9GkR8yxRNd2zmXWSHZXj8LXWjiEjKBxsRtZhEFc+TbTpO6oKb810tsi8M6nFja tcwOXsbbk9vMHypmDExQ0TQ/eOBc1snE1+kA5O1w9UgAUXISGRWxmNwESq+Ek0jS SF0+CK+tgpQjuzYsDoZgagf6v0p8eQRnnbX16Mqvj0T4AnOhsg/213J+nQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDpMjVo9WRHI53eTkv7l52tttZETMB8GA1UdIwQY MBaAFPwmIe4x4Gqtwco6N25FfY0ElrENMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX0NZaDdqSGdhcTNCeWpvM2JrVjlqUVNXc1EwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNS80MThmZTItNGY3ZC00MGFjLWFiZTQt MTE5YmJkNzYxOTczLzEvX0NZaDdqSGdhcTNCeWpvM2JrVjlqUVNXc1EwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNS80MThmZTItNGY3ZC00MGFjLWFiZTQtMTE5YmJkNzYxOTcz LzEvX0NZaDdqSGdhcTNCeWpvM2JrVjlqUVNXc1EwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvgoswwui AqpkhKBUt5DeXFhQsGf8Nn+ZehsNNSIHnA7AdDPW7SGm7OYnrGPYO8BZKZ1w1tMB KiQA4NDjzbbjUWijqtIwwkul2Jv06xc0HG3TgPu2x4JDj814Ng2tPpjic3VuXaPg ax16SDBn5rlrOu6ruBuEiRyqUYTcJlhCIKivqUb0bQyA9+Jyz5CMEYFp3IBtgY4L mKU57xDFg7HvVxWt+zEl+pFbLFipTeK0fzRs7XpbH0oBYfPH/GWNYv0uAdJ7XJUO F4pG72maKUxwrjcpxmHB+sW31hW7zQa6f9uaNw8m8P9e6vl6vWqYXRYtt4e+9XgE oVvHsxq6lmfAhw== -----END CERTIFICATE-----Generated at Sat Dec 6 07:23:09 2025 by rpki-client