This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/cd231b-ff1e-4b93-a5b7-85d634c5bd50/1/0cFfCuwOM2Zi3p9jcVIc4l6N4Q8.mft File: 0cFfCuwOM2Zi3p9jcVIc4l6N4Q8.mft (raw, json) Hash identifier: 2Vg9r4XRiUg67Tu9BAOaKbWEGOpJov5TngCTcoh6QWY= Subject key identifier: 77:DE:2C:CD:CE:BE:8D:03:E4:42:0E:98:CF:5B:3C:FF:AC:FA:45:37 Authority key identifier: D1:C1:5F:0A:EC:0E:33:66:62:DE:9F:63:71:52:1C:E2:5E:8D:E1:0F Certificate issuer: /CN=d1c15f0aec0e336662de9f6371521ce25e8de10f Certificate serial: 019AF19B45E1D52D6E3AC7961023E1C8E340 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0cFfCuwOM2Zi3p9jcVIc4l6N4Q8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/cd231b-ff1e-4b93-a5b7-85d634c5bd50/1/0cFfCuwOM2Zi3p9jcVIc4l6N4Q8.mft Manifest number: 1763 Signing time: Sat 06 Dec 2025 03:01:16 +0000 Manifest this update: Sat 06 Dec 2025 03:01:16 +0000 Manifest next update: Sun 07 Dec 2025 03:01:16 +0000 Files and hashes: 1: 0cFfCuwOM2Zi3p9jcVIc4l6N4Q8.crl (hash: 1ndC5v2R4bwOXwHrHyYKuU5jr9kdocP0dfY6AYaWdGg=) 2: TWeGvhRSmnN9ba3aLN_PX9mER2s.roa (hash: 6BkkLF5ZMW9w4BTie7IiuTOLhKMimv1AW7aDs2REbaI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/cd231b-ff1e-4b93-a5b7-85d634c5bd50/1/0cFfCuwOM2Zi3p9jcVIc4l6N4Q8.crl rsync://rpki.ripe.net/repository/DEFAULT/ea/cd231b-ff1e-4b93-a5b7-85d634c5bd50/1/0cFfCuwOM2Zi3p9jcVIc4l6N4Q8.mft rsync://rpki.ripe.net/repository/DEFAULT/0cFfCuwOM2Zi3p9jcVIc4l6N4Q8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9b:45:e1:d5:2d:6e:3a:c7:96:10:23:e1:c8:e3:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d1c15f0aec0e336662de9f6371521ce25e8de10f Validity Not Before: Dec 6 03:01:16 2025 GMT Not After : Dec 7 03:01:16 2025 GMT Subject: CN=77de2ccdcebe8d03e4420e98cf5b3cffacfa4537 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:c5:08:98:e1:fc:68:f5:9c:39:7f:a0:c3:9d: f0:bb:a8:d9:72:c8:4d:aa:a4:ef:dd:72:b1:c8:a4: 27:17:ad:1b:a9:df:73:f0:b6:32:0f:cd:73:e3:1c: b1:18:85:74:9a:15:a7:5d:c7:00:e1:08:e5:c8:07: 74:64:1c:13:c9:af:68:01:21:bb:ab:df:b6:51:0d: a5:0e:32:da:53:6f:5d:57:f3:53:96:a1:cf:9d:40: 09:d2:79:e8:90:cf:c4:d4:da:7c:58:98:24:a9:77: 42:3b:36:8c:ec:98:e3:84:4e:4f:67:25:05:6c:b4: 44:e3:59:b6:ee:5f:fc:bf:d9:5b:c6:9c:3e:d2:1b: 5c:14:1c:9e:f7:bf:a5:c3:4c:98:54:ae:3f:14:25: 06:38:a4:33:ee:f2:4c:4f:e5:6f:53:e5:2c:db:58: 6d:99:34:3b:21:5b:45:95:1d:b6:6c:11:46:15:99: 6d:fb:3c:6d:39:95:00:0a:5d:9a:49:9d:3b:9f:43: fa:13:88:f7:fd:b2:19:63:0d:9b:f4:90:7a:96:43: c1:8e:c4:51:64:ea:f9:0d:2c:f1:1f:23:d1:b3:eb: 53:c5:7a:b5:9f:35:db:99:d8:a1:31:b4:e0:79:bd: ce:12:a7:50:eb:ba:a3:0f:90:f7:d8:21:b7:72:e2: dc:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:DE:2C:CD:CE:BE:8D:03:E4:42:0E:98:CF:5B:3C:FF:AC:FA:45:37 X509v3 Authority Key Identifier: keyid:D1:C1:5F:0A:EC:0E:33:66:62:DE:9F:63:71:52:1C:E2:5E:8D:E1:0F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0cFfCuwOM2Zi3p9jcVIc4l6N4Q8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/cd231b-ff1e-4b93-a5b7-85d634c5bd50/1/0cFfCuwOM2Zi3p9jcVIc4l6N4Q8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/cd231b-ff1e-4b93-a5b7-85d634c5bd50/1/0cFfCuwOM2Zi3p9jcVIc4l6N4Q8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9d:99:76:bf:37:b7:d5:c3:66:66:8e:49:17:48:2e:64:d1:64: ec:ad:ef:87:8e:41:33:50:32:57:15:79:8d:8d:64:5a:48:6c: d7:50:44:e0:b0:55:e1:8b:fb:dd:3b:6d:39:46:80:75:fd:ca: 70:15:dc:2d:d9:ff:45:70:40:0f:b8:9e:30:a4:43:08:e4:6e: d3:0a:f8:ce:6e:36:6e:6c:23:1b:e3:7c:35:3d:e0:ac:47:36: 70:24:71:1c:d1:85:4f:e3:05:60:80:cc:49:a1:b6:70:7d:9c: 09:9e:c4:2d:e1:e2:93:d5:49:b3:84:0d:58:e6:0a:13:2c:f8: ea:85:4d:ba:97:6b:1e:54:58:04:a9:29:d0:12:6a:82:b3:66: 28:be:67:a4:7a:07:c9:34:b1:c8:2f:14:e5:0b:f6:a7:48:41: b9:be:3f:f9:7a:c1:e4:00:b1:9d:9f:81:93:83:50:1e:5c:80: 2e:15:e1:7f:13:a3:a7:21:40:00:2a:c3:6d:bb:8d:9a:57:15: 4a:fe:60:09:7f:b8:ce:78:fc:7a:d9:2d:92:35:af:8d:55:30: f1:2d:8c:4e:34:e1:ce:9b:c2:db:1c:cb:dd:54:bf:bc:78:a0: d6:88:a9:a3:41:90:b2:8b:cc:c4:05:08:41:48:7d:ac:48:7a: c4:4e:fa:3d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxm0Xh1S1uOseWECPhyONAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQxYzE1ZjBhZWMwZTMzNjY2MmRlOWY2MzcxNTIxY2UyNWU4 ZGUxMGYwHhcNMjUxMjA2MDMwMTE2WhcNMjUxMjA3MDMwMTE2WjAzMTEwLwYDVQQD Eyg3N2RlMmNjZGNlYmU4ZDAzZTQ0MjBlOThjZjViM2NmZmFjZmE0NTM3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoMUImOH8aPWcOX+gw53wu6jZcshN qqTv3XKxyKQnF60bqd9z8LYyD81z4xyxGIV0mhWnXccA4QjlyAd0ZBwTya9oASG7 q9+2UQ2lDjLaU29dV/NTlqHPnUAJ0nnokM/E1Np8WJgkqXdCOzaM7JjjhE5PZyUF bLRE41m27l/8v9lbxpw+0htcFBye97+lw0yYVK4/FCUGOKQz7vJMT+VvU+Us21ht mTQ7IVtFlR22bBFGFZlt+zxtOZUACl2aSZ07n0P6E4j3/bIZYw2b9JB6lkPBjsRR ZOr5DSzxHyPRs+tTxXq1nzXbmdihMbTgeb3OEqdQ67qjD5D32CG3cuLcVwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHfeLM3Ovo0D5EIOmM9bPP+s+kU3MB8GA1UdIwQY MBaAFNHBXwrsDjNmYt6fY3FSHOJejeEPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMGNGZkN1d09NMlppM3A5amNWSWM0bDZONFE4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYS9jZDIzMWItZmYxZS00YjkzLWE1Yjct ODVkNjM0YzViZDUwLzEvMGNGZkN1d09NMlppM3A5amNWSWM0bDZONFE4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYS9jZDIzMWItZmYxZS00YjkzLWE1YjctODVkNjM0YzViZDUw LzEvMGNGZkN1d09NMlppM3A5amNWSWM0bDZONFE4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnZl2vze3 1cNmZo5JF0guZNFk7K3vh45BM1AyVxV5jY1kWkhs11BE4LBV4Yv73TttOUaAdf3K cBXcLdn/RXBAD7ieMKRDCORu0wr4zm42bmwjG+N8NT3grEc2cCRxHNGFT+MFYIDM SaG2cH2cCZ7ELeHik9VJs4QNWOYKEyz46oVNupdrHlRYBKkp0BJqgrNmKL5npHoH yTSxyC8U5Qv2p0hBub4/+XrB5ACxnZ+Bk4NQHlyALhXhfxOjpyFAACrDbbuNmlcV Sv5gCX+4znj8etktkjWvjVUw8S2MTjThzpvC2xzL3VS/vHig1oipo0GQsovMxAUI QUh9rEh6xE76PQ== -----END CERTIFICATE-----Generated at Sat Dec 6 09:59:15 2025 by rpki-client