This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/212a76-7934-4cc1-82c4-f5618477f8d4/1/cF3hUpBmZK56yfIIesTQBoWl1_A.mft File: cF3hUpBmZK56yfIIesTQBoWl1_A.mft (raw, json) Hash identifier: btkuw3rtwiIEOlBSXh6NyZ5P0ZoZobc9GEEcE94TxVY= Subject key identifier: CD:C4:3C:65:8E:9B:A9:A2:28:0A:22:8A:C5:E8:E7:AC:34:76:3F:2F Authority key identifier: 70:5D:E1:52:90:66:64:AE:7A:C9:F2:08:7A:C4:D0:06:85:A5:D7:F0 Certificate issuer: /CN=705de152906664ae7ac9f2087ac4d00685a5d7f0 Certificate serial: 019AF23F76AFA7C34A0E141B4B209D56F612 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cF3hUpBmZK56yfIIesTQBoWl1_A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/212a76-7934-4cc1-82c4-f5618477f8d4/1/cF3hUpBmZK56yfIIesTQBoWl1_A.mft Manifest number: 1763 Signing time: Sat 06 Dec 2025 06:00:36 +0000 Manifest this update: Sat 06 Dec 2025 06:00:36 +0000 Manifest next update: Sun 07 Dec 2025 06:00:36 +0000 Files and hashes: 1: TKoxALo9u8PRYJQQjNMDBzOManE.roa (hash: e6LRQQhGn2Pm43QUsi5AMgfehOrdW1tISUFnEIiJny4=) 2: cF3hUpBmZK56yfIIesTQBoWl1_A.crl (hash: qy4eB1csrvMUNRsTHq3U3cefcBBt2RGyr+25APJWfmY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/212a76-7934-4cc1-82c4-f5618477f8d4/1/cF3hUpBmZK56yfIIesTQBoWl1_A.crl rsync://rpki.ripe.net/repository/DEFAULT/fb/212a76-7934-4cc1-82c4-f5618477f8d4/1/cF3hUpBmZK56yfIIesTQBoWl1_A.mft rsync://rpki.ripe.net/repository/DEFAULT/cF3hUpBmZK56yfIIesTQBoWl1_A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:3f:76:af:a7:c3:4a:0e:14:1b:4b:20:9d:56:f6:12 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=705de152906664ae7ac9f2087ac4d00685a5d7f0 Validity Not Before: Dec 6 06:00:36 2025 GMT Not After : Dec 7 06:00:36 2025 GMT Subject: CN=cdc43c658e9ba9a2280a228ac5e8e7ac34763f2f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:fa:2b:8d:45:66:27:b5:65:b1:55:ae:14:da: 45:33:ff:8c:53:45:65:5d:3f:81:2d:ef:e0:2b:1c: 2f:10:29:22:17:66:69:e7:d2:49:62:02:f6:70:ac: c2:b2:a5:ee:c7:20:e6:d3:42:aa:d7:07:c3:04:11: 41:b6:8d:0d:9f:42:b9:1a:d3:5c:f6:dd:7c:f8:49: 02:0f:19:c7:44:38:f6:3c:b9:6f:8f:af:5b:eb:cd: 87:b4:a8:a1:94:d3:4b:12:4a:2d:18:2a:28:6a:be: ec:35:0a:21:f8:44:90:ab:09:46:80:c1:a4:c1:19: 92:bc:ff:66:00:8d:36:ca:02:3f:52:63:c7:ce:f7: 10:90:45:47:75:df:6b:13:88:fa:84:1a:a0:8d:46: d3:81:a2:0b:4a:11:5a:36:3b:2e:f8:e9:1c:42:2e: 1a:02:86:f7:b7:89:41:b9:7a:57:8c:9f:00:0b:b5: 9e:df:af:3b:99:c0:ce:42:35:6f:f8:39:f8:b5:5b: 77:b0:06:67:d1:24:b5:2c:15:5f:0f:8c:8a:83:2b: ee:2c:5e:06:7b:d7:29:39:e9:9e:5c:15:a6:f7:86: 1c:d2:f0:3f:a0:d5:24:1e:cc:2b:2f:4d:d8:78:d6: 34:35:09:f3:95:dd:16:04:63:ac:c9:d2:59:8a:2b: 5f:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:C4:3C:65:8E:9B:A9:A2:28:0A:22:8A:C5:E8:E7:AC:34:76:3F:2F X509v3 Authority Key Identifier: keyid:70:5D:E1:52:90:66:64:AE:7A:C9:F2:08:7A:C4:D0:06:85:A5:D7:F0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cF3hUpBmZK56yfIIesTQBoWl1_A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/212a76-7934-4cc1-82c4-f5618477f8d4/1/cF3hUpBmZK56yfIIesTQBoWl1_A.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/212a76-7934-4cc1-82c4-f5618477f8d4/1/cF3hUpBmZK56yfIIesTQBoWl1_A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 19:03:89:da:5f:21:48:15:98:6c:a3:14:c3:11:39:6b:45:4e: b8:f0:b3:20:4f:65:6d:65:6a:16:5d:46:8c:09:6b:3d:96:e6: f7:c4:c9:9d:c2:f2:06:17:03:2a:8f:10:7e:09:30:4e:c1:26: 76:8a:fc:5a:23:9d:73:f8:e8:f3:21:56:4a:13:c3:b0:ca:34: 53:60:5d:63:f5:fb:63:54:fc:fd:6a:6a:60:07:c7:cb:3f:b6: 2d:97:3e:f9:16:cb:34:a7:ae:50:09:2e:bf:1a:73:6e:63:24: 4a:48:20:ce:ea:af:f1:e1:75:26:77:96:99:57:10:46:18:9d: 43:e2:28:14:9a:9b:b2:6b:05:9d:b4:25:d9:38:d0:84:8f:22: 40:b6:31:a3:51:90:74:8c:77:88:8a:d3:67:da:94:71:0c:e7: 25:24:bb:69:25:2e:ad:0c:df:75:47:5b:30:3b:49:27:d6:8b: b2:ad:18:d8:7c:ba:04:7a:c5:0d:13:4a:9f:7f:23:2d:85:e9: d0:0b:b7:49:e6:73:55:ff:d3:56:7e:3d:f4:bd:d4:aa:7e:35: db:47:9a:88:36:8a:53:4b:0a:f7:7e:96:1c:9a:05:8c:20:9d: 6c:c4:79:72:74:6e:10:6b:5f:5b:68:c2:12:5f:35:ad:24:01: 5a:76:c2:5f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryP3avp8NKDhQbSyCdVvYSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcwNWRlMTUyOTA2NjY0YWU3YWM5ZjIwODdhYzRkMDA2ODVh NWQ3ZjAwHhcNMjUxMjA2MDYwMDM2WhcNMjUxMjA3MDYwMDM2WjAzMTEwLwYDVQQD EyhjZGM0M2M2NThlOWJhOWEyMjgwYTIyOGFjNWU4ZTdhYzM0NzYzZjJmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsPorjUVmJ7VlsVWuFNpFM/+MU0Vl XT+BLe/gKxwvECkiF2Zp59JJYgL2cKzCsqXuxyDm00Kq1wfDBBFBto0Nn0K5GtNc 9t18+EkCDxnHRDj2PLlvj69b682HtKihlNNLEkotGCooar7sNQoh+ESQqwlGgMGk wRmSvP9mAI02ygI/UmPHzvcQkEVHdd9rE4j6hBqgjUbTgaILShFaNjsu+OkcQi4a Aob3t4lBuXpXjJ8AC7We3687mcDOQjVv+Dn4tVt3sAZn0SS1LBVfD4yKgyvuLF4G e9cpOemeXBWm94Yc0vA/oNUkHswrL03YeNY0NQnzld0WBGOsydJZiitfkQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFM3EPGWOm6miKAoiisXo56w0dj8vMB8GA1UdIwQY MBaAFHBd4VKQZmSuesnyCHrE0AaFpdfwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY0YzaFVwQm1aSzU2eWZJSWVzVFFCb1dsMV9BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYi8yMTJhNzYtNzkzNC00Y2MxLTgyYzQt ZjU2MTg0NzdmOGQ0LzEvY0YzaFVwQm1aSzU2eWZJSWVzVFFCb1dsMV9BLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYi8yMTJhNzYtNzkzNC00Y2MxLTgyYzQtZjU2MTg0NzdmOGQ0 LzEvY0YzaFVwQm1aSzU2eWZJSWVzVFFCb1dsMV9BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGQOJ2l8h SBWYbKMUwxE5a0VOuPCzIE9lbWVqFl1GjAlrPZbm98TJncLyBhcDKo8QfgkwTsEm dor8WiOdc/jo8yFWShPDsMo0U2BdY/X7Y1T8/WpqYAfHyz+2LZc++RbLNKeuUAku vxpzbmMkSkggzuqv8eF1JneWmVcQRhidQ+IoFJqbsmsFnbQl2TjQhI8iQLYxo1GQ dIx3iIrTZ9qUcQznJSS7aSUurQzfdUdbMDtJJ9aLsq0Y2Hy6BHrFDRNKn38jLYXp 0Au3SeZzVf/TVn499L3Uqn4120eaiDaKU0sK936WHJoFjCCdbMR5cnRuEGtfW2jC El81rSQBWnbCXw== -----END CERTIFICATE-----Generated at Sat Dec 6 13:49:51 2025 by rpki-client