This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/b9a1a0-6ada-4dde-965b-46ff7ce2c140/1/cHdwf2aXiCaodeuNLrMzvthWlmc.mft File: cHdwf2aXiCaodeuNLrMzvthWlmc.mft (raw, json) Hash identifier: UR19XUN6q0sRDTq0HO3Ow/hOoQj4eHdUiS8BqhYOb4M= Subject key identifier: AD:D7:37:AF:12:53:FD:43:03:82:1C:19:09:A1:86:DF:A2:AD:4D:8D Authority key identifier: 70:77:70:7F:66:97:88:26:A8:75:EB:8D:2E:B3:33:BE:D8:56:96:67 Certificate issuer: /CN=7077707f66978826a875eb8d2eb333bed8569667 Certificate serial: 019AF12E74DCACAC4D7F9C4D91A34A483B8E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cHdwf2aXiCaodeuNLrMzvthWlmc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/b9a1a0-6ada-4dde-965b-46ff7ce2c140/1/cHdwf2aXiCaodeuNLrMzvthWlmc.mft Manifest number: 0947 Signing time: Sat 06 Dec 2025 01:02:24 +0000 Manifest this update: Sat 06 Dec 2025 01:02:24 +0000 Manifest next update: Sun 07 Dec 2025 01:02:24 +0000 Files and hashes: 1: ZBqGiL5Lwt5_4rzPo7SO0cTda9c.roa (hash: KELG75sz8Tw2WawKyeiPVA4v+ezxNcK7f4e9XzFuUUw=) 2: cHdwf2aXiCaodeuNLrMzvthWlmc.crl (hash: XsFF1jerNGlG50/PLIaISkeD4qOY3uJFtii+dIWDXP4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/b9a1a0-6ada-4dde-965b-46ff7ce2c140/1/cHdwf2aXiCaodeuNLrMzvthWlmc.crl rsync://rpki.ripe.net/repository/DEFAULT/eb/b9a1a0-6ada-4dde-965b-46ff7ce2c140/1/cHdwf2aXiCaodeuNLrMzvthWlmc.mft rsync://rpki.ripe.net/repository/DEFAULT/cHdwf2aXiCaodeuNLrMzvthWlmc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:02:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2e:74:dc:ac:ac:4d:7f:9c:4d:91:a3:4a:48:3b:8e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7077707f66978826a875eb8d2eb333bed8569667 Validity Not Before: Dec 6 01:02:24 2025 GMT Not After : Dec 7 01:02:24 2025 GMT Subject: CN=add737af1253fd4303821c1909a186dfa2ad4d8d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:7c:cb:2e:f5:4e:3b:1d:4f:c7:bb:19:3a:cd: b4:c9:4f:84:b8:9a:5e:78:01:d7:66:c7:df:dd:3c: d0:31:d4:8f:78:42:90:fe:d1:1c:87:76:3d:14:20: da:99:f7:f7:32:9c:0f:44:55:62:20:11:ab:c3:55: 49:2e:5f:a6:ce:19:2d:59:12:0c:be:cd:4b:9e:2e: 1a:c5:ab:48:49:56:97:53:43:ae:0f:72:a7:e1:9c: 1e:b6:33:e2:a4:68:fb:90:e7:1c:a8:f6:13:94:dc: e3:4d:b2:96:90:24:3a:f1:19:e6:87:b1:14:4c:08: 1d:3e:d8:68:f8:fc:3f:d3:7b:c1:fd:fc:c4:4d:1d: 36:0e:87:23:37:cb:6c:ce:12:5f:3e:41:0f:f2:d5: 0f:a8:eb:37:c4:1d:eb:d0:a2:31:2e:c9:d3:25:e8: fa:d8:b1:63:e3:7d:b6:3d:c8:dc:c0:3c:e6:ce:73: ec:a0:ec:09:7e:39:5f:e5:1b:95:4a:e8:e7:e3:9a: 0c:18:e8:e5:7e:68:35:0d:56:02:da:49:dd:0a:85: dd:ef:e1:63:f7:ba:c4:6a:2a:63:d9:ea:80:0e:1e: 55:35:28:a0:35:7c:a3:d4:da:9e:33:11:0d:32:d8: a0:95:bd:99:58:0e:13:ce:ea:90:9c:66:73:52:23: 41:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:D7:37:AF:12:53:FD:43:03:82:1C:19:09:A1:86:DF:A2:AD:4D:8D X509v3 Authority Key Identifier: keyid:70:77:70:7F:66:97:88:26:A8:75:EB:8D:2E:B3:33:BE:D8:56:96:67 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cHdwf2aXiCaodeuNLrMzvthWlmc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/b9a1a0-6ada-4dde-965b-46ff7ce2c140/1/cHdwf2aXiCaodeuNLrMzvthWlmc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/b9a1a0-6ada-4dde-965b-46ff7ce2c140/1/cHdwf2aXiCaodeuNLrMzvthWlmc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0a:7d:82:9f:88:80:4e:4f:1c:03:0f:58:b8:9e:5d:8f:b8:8d: 09:f5:b1:28:b2:1a:0c:19:6a:57:a7:f4:f8:ab:bc:39:64:b4: fe:a8:da:45:14:28:17:76:f4:7b:cd:9a:ba:30:15:9d:89:4c: d2:a5:4b:a9:e3:d0:f3:b7:a7:e3:14:74:d8:1f:ea:c6:72:6c: 05:5b:72:36:e1:90:93:3d:15:93:a3:c4:5d:ee:ca:49:e0:36: 76:89:6f:c3:a4:46:4c:bf:42:0b:7b:dd:72:5e:de:fb:48:49: 4f:ab:ec:36:3d:ea:c5:85:49:a0:49:9c:a9:61:71:e2:fc:37: 4c:7e:91:54:ff:18:a6:ae:51:cd:c3:b8:d4:ee:32:37:99:cc: a0:7c:15:1b:24:09:46:a5:3a:35:6b:3b:71:70:9c:8b:56:43: 4f:30:62:39:d3:68:39:08:8b:2e:ff:d6:45:09:39:9f:b0:ee: 79:a6:0e:87:98:8f:c7:f5:f6:7d:2f:0f:28:71:d4:ed:72:0c: d6:42:46:ad:7d:18:fc:03:20:2c:bf:8b:7d:d2:d8:7e:a8:a8: c9:c1:51:ae:18:d7:f3:77:3e:aa:8c:6b:f5:58:cd:e0:4d:fb: 58:35:d1:08:4c:0e:a0:e3:0d:78:87:b3:1b:2f:94:9e:3b:08: e3:b3:c9:47 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLnTcrKxNf5xNkaNKSDuOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcwNzc3MDdmNjY5Nzg4MjZhODc1ZWI4ZDJlYjMzM2JlZDg1 Njk2NjcwHhcNMjUxMjA2MDEwMjI0WhcNMjUxMjA3MDEwMjI0WjAzMTEwLwYDVQQD EyhhZGQ3MzdhZjEyNTNmZDQzMDM4MjFjMTkwOWExODZkZmEyYWQ0ZDhkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnHzLLvVOOx1Px7sZOs20yU+EuJpe eAHXZsff3TzQMdSPeEKQ/tEch3Y9FCDamff3MpwPRFViIBGrw1VJLl+mzhktWRIM vs1Lni4axatISVaXU0OuD3Kn4ZwetjPipGj7kOccqPYTlNzjTbKWkCQ68Rnmh7EU TAgdPtho+Pw/03vB/fzETR02DocjN8tszhJfPkEP8tUPqOs3xB3r0KIxLsnTJej6 2LFj4322PcjcwDzmznPsoOwJfjlf5RuVSujn45oMGOjlfmg1DVYC2kndCoXd7+Fj 97rEaipj2eqADh5VNSigNXyj1NqeMxENMtiglb2ZWA4TzuqQnGZzUiNBjwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFK3XN68SU/1DA4IcGQmhht+irU2NMB8GA1UdIwQY MBaAFHB3cH9ml4gmqHXrjS6zM77YVpZnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY0hkd2YyYVhpQ2FvZGV1TkxyTXp2dGhXbG1jLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi9iOWExYTAtNmFkYS00ZGRlLTk2NWIt NDZmZjdjZTJjMTQwLzEvY0hkd2YyYVhpQ2FvZGV1TkxyTXp2dGhXbG1jLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYi9iOWExYTAtNmFkYS00ZGRlLTk2NWItNDZmZjdjZTJjMTQw LzEvY0hkd2YyYVhpQ2FvZGV1TkxyTXp2dGhXbG1jLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACn2Cn4iA Tk8cAw9YuJ5dj7iNCfWxKLIaDBlqV6f0+Ku8OWS0/qjaRRQoF3b0e82aujAVnYlM 0qVLqePQ87en4xR02B/qxnJsBVtyNuGQkz0Vk6PEXe7KSeA2dolvw6RGTL9CC3vd cl7e+0hJT6vsNj3qxYVJoEmcqWFx4vw3TH6RVP8Ypq5RzcO41O4yN5nMoHwVGyQJ RqU6NWs7cXCci1ZDTzBiOdNoOQiLLv/WRQk5n7DueaYOh5iPx/X2fS8PKHHU7XIM 1kJGrX0Y/AMgLL+LfdLYfqioycFRrhjX83c+qoxr9VjN4E37WDXRCEwOoOMNeIez Gy+UnjsI47PJRw== -----END CERTIFICATE-----Generated at Sat Dec 6 10:00:21 2025 by rpki-client