This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/a600f5-9428-485c-b42e-64de34f1f464/1/ctG1y2-wQjmGhx7wHmY_Nlzg2JU.mft File: ctG1y2-wQjmGhx7wHmY_Nlzg2JU.mft (raw, json) Hash identifier: kxXO/KmyJQZQ5nDoGLsc19amPvq7TI1BW/Dl8dxXYak= Subject key identifier: 3C:73:0E:41:10:E5:6F:47:17:78:34:4C:C0:74:36:F8:50:FD:4E:EA Authority key identifier: 72:D1:B5:CB:6F:B0:42:39:86:87:1E:F0:1E:66:3F:36:5C:E0:D8:95 Certificate issuer: /CN=72d1b5cb6fb0423986871ef01e663f365ce0d895 Certificate serial: 019AF27665F9FE97A40E18BF4E1683C7472E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ctG1y2-wQjmGhx7wHmY_Nlzg2JU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/a600f5-9428-485c-b42e-64de34f1f464/1/ctG1y2-wQjmGhx7wHmY_Nlzg2JU.mft Manifest number: 1762 Signing time: Sat 06 Dec 2025 07:00:36 +0000 Manifest this update: Sat 06 Dec 2025 07:00:36 +0000 Manifest next update: Sun 07 Dec 2025 07:00:36 +0000 Files and hashes: 1: HdvygVOruYbTXwlr1NLClydlYqo.roa (hash: sMi8mYGDSncYX0REgUe1LpnyiMZD3xdRzWB6T1gaSas=) 2: ctG1y2-wQjmGhx7wHmY_Nlzg2JU.crl (hash: c/9HRikO9NeoXYwOAsNUisR7o83RBhObWNH6Aey1i8s=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/a600f5-9428-485c-b42e-64de34f1f464/1/ctG1y2-wQjmGhx7wHmY_Nlzg2JU.crl rsync://rpki.ripe.net/repository/DEFAULT/fa/a600f5-9428-485c-b42e-64de34f1f464/1/ctG1y2-wQjmGhx7wHmY_Nlzg2JU.mft rsync://rpki.ripe.net/repository/DEFAULT/ctG1y2-wQjmGhx7wHmY_Nlzg2JU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:76:65:f9:fe:97:a4:0e:18:bf:4e:16:83:c7:47:2e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=72d1b5cb6fb0423986871ef01e663f365ce0d895 Validity Not Before: Dec 6 07:00:36 2025 GMT Not After : Dec 7 07:00:36 2025 GMT Subject: CN=3c730e4110e56f471778344cc07436f850fd4eea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:29:71:5c:d3:93:9d:7a:e2:18:c6:e7:83:46: ad:f3:b0:31:df:df:e9:54:ef:4b:9a:1f:f9:77:8b: 7d:19:15:fa:72:4a:37:94:7d:8e:30:9f:7c:46:5f: 3e:ae:52:eb:04:b2:31:48:0e:a2:d4:c5:a9:e5:87: 17:8d:a2:37:49:48:c1:7e:1e:80:f5:5b:db:17:b4: c6:6f:51:b1:46:77:e2:89:c7:85:1e:df:c3:3d:98: 9a:cf:86:c8:d8:43:2b:df:11:8b:de:b7:66:18:08: 92:31:a7:6c:b3:06:4b:57:13:fc:e4:ae:81:4b:21: 56:d2:ec:3c:27:71:7a:d4:db:7f:7d:12:b6:8a:7c: 40:24:b3:36:18:b7:b1:5b:78:7e:07:cb:02:91:e6: cc:c2:04:c5:a9:84:35:f6:c5:05:61:a9:59:b4:65: 9c:fd:7e:06:1c:31:3f:6d:be:7c:c3:9a:30:7d:6e: eb:48:07:fd:e6:33:81:fc:21:2b:8d:3c:c3:f7:2e: 0d:1b:0c:0d:03:48:7f:6d:95:ce:bf:42:52:12:04: 4d:bd:18:ec:0c:cd:49:0e:b1:2e:59:af:3a:70:a8: b1:83:f7:ab:52:c6:42:8d:67:72:74:3e:43:d8:32: f1:95:4c:46:07:b8:9c:e8:80:82:9e:a0:c3:20:d5: ab:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:73:0E:41:10:E5:6F:47:17:78:34:4C:C0:74:36:F8:50:FD:4E:EA X509v3 Authority Key Identifier: keyid:72:D1:B5:CB:6F:B0:42:39:86:87:1E:F0:1E:66:3F:36:5C:E0:D8:95 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ctG1y2-wQjmGhx7wHmY_Nlzg2JU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/a600f5-9428-485c-b42e-64de34f1f464/1/ctG1y2-wQjmGhx7wHmY_Nlzg2JU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/a600f5-9428-485c-b42e-64de34f1f464/1/ctG1y2-wQjmGhx7wHmY_Nlzg2JU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 04:ca:b6:27:8b:85:a3:2a:90:15:b8:82:f0:8a:7e:f4:48:98: 00:6e:3d:21:76:77:f1:b6:65:70:72:ee:4a:84:81:d7:45:c0: 41:9d:e2:08:99:3a:cc:ca:1e:61:07:fe:e4:d4:b6:5a:68:5b: 4f:2c:a0:e6:f9:f2:17:0f:25:e2:a4:47:63:66:e5:29:cb:12: 39:08:82:8b:85:8d:05:ed:cd:ce:f0:f3:f5:13:bf:1e:2a:4a: 1e:2e:75:ac:4d:98:3e:eb:8c:bf:1b:3a:2d:1d:81:ae:ee:64: 00:16:0f:05:b4:7d:6f:d4:51:37:01:32:c6:c5:f6:0e:74:34: 5d:ed:5e:1f:6e:af:24:15:5f:ea:c6:bc:05:16:50:d2:0b:63: 02:68:89:49:b1:bf:41:28:e5:d3:32:81:f7:86:47:47:63:a9: 06:e8:07:4e:df:94:77:5d:62:7d:2a:ce:c2:e7:08:79:e4:6a: c2:ba:ae:b2:a8:0b:bc:c2:86:2c:2e:9d:3f:33:d8:e3:a9:f5: 38:f0:df:91:07:4c:53:67:56:4b:8f:ad:31:02:fb:23:11:db: fb:bb:48:0e:42:c0:a5:75:d2:72:04:2a:7b:df:6e:cf:86:da: 4a:15:69:0b:86:81:f4:f7:e9:98:d0:84:20:6f:a9:29:c8:2a: 51:27:47:10 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrydmX5/pekDhi/ThaDx0cuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcyZDFiNWNiNmZiMDQyMzk4Njg3MWVmMDFlNjYzZjM2NWNl MGQ4OTUwHhcNMjUxMjA2MDcwMDM2WhcNMjUxMjA3MDcwMDM2WjAzMTEwLwYDVQQD EygzYzczMGU0MTEwZTU2ZjQ3MTc3ODM0NGNjMDc0MzZmODUwZmQ0ZWVhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlilxXNOTnXriGMbng0at87Ax39/p VO9Lmh/5d4t9GRX6cko3lH2OMJ98Rl8+rlLrBLIxSA6i1MWp5YcXjaI3SUjBfh6A 9VvbF7TGb1GxRnfiiceFHt/DPZiaz4bI2EMr3xGL3rdmGAiSMadsswZLVxP85K6B SyFW0uw8J3F61Nt/fRK2inxAJLM2GLexW3h+B8sCkebMwgTFqYQ19sUFYalZtGWc /X4GHDE/bb58w5owfW7rSAf95jOB/CErjTzD9y4NGwwNA0h/bZXOv0JSEgRNvRjs DM1JDrEuWa86cKixg/erUsZCjWdydD5D2DLxlUxGB7ic6ICCnqDDINWr5wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDxzDkEQ5W9HF3g0TMB0NvhQ/U7qMB8GA1UdIwQY MBaAFHLRtctvsEI5hoce8B5mPzZc4NiVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY3RHMXkyLXdRam1HaHg3d0htWV9ObHpnMkpVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS9hNjAwZjUtOTQyOC00ODVjLWI0MmUt NjRkZTM0ZjFmNDY0LzEvY3RHMXkyLXdRam1HaHg3d0htWV9ObHpnMkpVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYS9hNjAwZjUtOTQyOC00ODVjLWI0MmUtNjRkZTM0ZjFmNDY0 LzEvY3RHMXkyLXdRam1HaHg3d0htWV9ObHpnMkpVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABMq2J4uF oyqQFbiC8Ip+9EiYAG49IXZ38bZlcHLuSoSB10XAQZ3iCJk6zMoeYQf+5NS2Wmhb Tyyg5vnyFw8l4qRHY2blKcsSOQiCi4WNBe3NzvDz9RO/HipKHi51rE2YPuuMvxs6 LR2Bru5kABYPBbR9b9RRNwEyxsX2DnQ0Xe1eH26vJBVf6sa8BRZQ0gtjAmiJSbG/ QSjl0zKB94ZHR2OpBugHTt+Ud11ifSrOwucIeeRqwrqusqgLvMKGLC6dPzPY46n1 OPDfkQdMU2dWS4+tMQL7IxHb+7tIDkLApXXScgQqe99uz4baShVpC4aB9PfpmNCE IG+pKcgqUSdHEA== -----END CERTIFICATE-----Generated at Sat Dec 6 09:19:03 2025 by rpki-client