This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/d2bbf6-3b69-442e-b490-7e54c32abed8/1/CFeH5l60_NZuM0C2Kt5HygCRnc4.mft File: CFeH5l60_NZuM0C2Kt5HygCRnc4.mft (raw, json) Hash identifier: Bx3rNIfzocpUB3uKMWoDEZPcfyuTqsSYBP0CUxkzNn0= Subject key identifier: 5C:FC:68:A7:04:D7:83:6A:A8:F1:45:3C:99:EC:C0:B7:CE:AD:DD:2A Authority key identifier: 08:57:87:E6:5E:B4:FC:D6:6E:33:40:B6:2A:DE:47:CA:00:91:9D:CE Certificate issuer: /CN=085787e65eb4fcd66e3340b62ade47ca00919dce Certificate serial: 019B194D388F69949DEAA017367CE8E22B3E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CFeH5l60_NZuM0C2Kt5HygCRnc4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/d2bbf6-3b69-442e-b490-7e54c32abed8/1/CFeH5l60_NZuM0C2Kt5HygCRnc4.mft Manifest number: 06E6 Signing time: Sat 13 Dec 2025 20:00:49 +0000 Manifest this update: Sat 13 Dec 2025 20:00:49 +0000 Manifest next update: Sun 14 Dec 2025 20:00:49 +0000 Files and hashes: 1: ADwJyFTnSoqJo76cybY4gze7w-A.roa (hash: ywnZb2Gs7P4sK9InqI7FaEEZlSRwjtQHnM1qlayDDgw=) 2: CFeH5l60_NZuM0C2Kt5HygCRnc4.crl (hash: hXM+5KwwupnKNGnkE6GrADbsEbCyYRlssLbVNicNkv4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/d2bbf6-3b69-442e-b490-7e54c32abed8/1/CFeH5l60_NZuM0C2Kt5HygCRnc4.crl rsync://rpki.ripe.net/repository/DEFAULT/03/d2bbf6-3b69-442e-b490-7e54c32abed8/1/CFeH5l60_NZuM0C2Kt5HygCRnc4.mft rsync://rpki.ripe.net/repository/DEFAULT/CFeH5l60_NZuM0C2Kt5HygCRnc4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Dec 2025 17:47:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:19:4d:38:8f:69:94:9d:ea:a0:17:36:7c:e8:e2:2b:3e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=085787e65eb4fcd66e3340b62ade47ca00919dce Validity Not Before: Dec 13 20:00:49 2025 GMT Not After : Dec 14 20:00:49 2025 GMT Subject: CN=5cfc68a704d7836aa8f1453c99ecc0b7ceaddd2a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:aa:d2:ce:ea:05:6b:8d:d2:2a:65:e6:1d:62: d7:2d:ff:68:cf:8e:86:d9:ac:fc:9e:ed:7f:e2:15: f6:81:64:a8:32:cd:6c:fb:b2:a2:bf:f5:26:44:85: 01:d4:74:f5:39:8e:ef:52:c9:a8:5a:7c:31:92:d6: 5c:29:58:25:b4:29:51:ea:ca:bc:6b:52:4f:5e:4f: 27:77:a3:7c:d5:6b:66:a2:4d:41:df:8e:3e:cf:5f: d2:15:e0:9c:57:f1:08:cf:98:78:80:ac:42:da:29: 4c:c2:1a:d1:f6:64:5a:cf:de:60:54:f6:56:55:bc: 92:95:43:a5:47:1c:38:6c:50:62:38:c4:6f:f1:7e: 4a:ef:60:9f:d0:5b:57:bb:14:cc:f9:33:1d:3c:b6: c5:94:bb:a0:3e:3a:cd:25:5e:79:52:6e:80:e2:fa: 3f:eb:0e:e1:b8:46:41:a1:c9:87:41:63:4b:91:b9: f4:0c:a0:59:75:7c:b2:9a:85:76:26:0d:95:ac:f0: e3:a5:71:9b:dd:81:fc:28:1a:5b:49:cc:03:58:89: af:ee:c0:fa:d6:55:ee:26:17:91:16:24:12:db:8e: f7:44:0b:81:35:21:6c:e1:5d:46:30:8e:27:ef:10: 1e:67:60:8d:4a:cb:53:ad:0d:37:37:64:9c:36:fc: 47:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:FC:68:A7:04:D7:83:6A:A8:F1:45:3C:99:EC:C0:B7:CE:AD:DD:2A X509v3 Authority Key Identifier: keyid:08:57:87:E6:5E:B4:FC:D6:6E:33:40:B6:2A:DE:47:CA:00:91:9D:CE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CFeH5l60_NZuM0C2Kt5HygCRnc4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/d2bbf6-3b69-442e-b490-7e54c32abed8/1/CFeH5l60_NZuM0C2Kt5HygCRnc4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/03/d2bbf6-3b69-442e-b490-7e54c32abed8/1/CFeH5l60_NZuM0C2Kt5HygCRnc4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption af:6c:cb:d8:b8:e1:ab:c6:f6:7d:47:5c:d3:9e:0f:fb:19:22: 42:7c:17:25:cb:78:24:8e:fe:07:b9:e5:1b:f8:13:fa:35:0c: b9:94:8a:fb:66:3f:4a:56:ef:60:99:24:b4:7f:9f:3d:f2:cf: ef:82:d4:46:7f:70:68:0e:6f:8e:ec:62:8f:0e:ff:4c:56:cc: ca:7d:05:5e:b8:52:29:3e:d8:63:6e:f9:fd:e2:5c:c3:f2:55: 6f:c7:8a:e8:4e:4b:17:c2:49:5a:72:3f:cf:15:93:2e:71:21: 9f:c9:db:d0:f5:e3:b8:77:26:b4:4f:b7:2f:7a:92:ec:7f:a8: 02:48:cd:4b:80:b7:b2:0e:47:bb:8a:8c:94:a8:4c:21:c0:13: 3f:53:1e:f7:72:23:db:a5:9d:3d:9a:ea:33:7f:2a:73:b9:67: e3:f2:98:ea:ae:ff:a9:e0:9c:61:af:1c:d8:2a:de:3d:10:0c: cd:f8:f7:72:63:e6:87:55:db:07:76:03:de:54:3a:e2:7b:70: 0e:37:47:b5:0f:05:0f:bb:36:39:00:59:56:88:0d:e3:40:9e: 94:b6:be:12:97:6a:67:6d:41:ea:da:3e:d4:db:f4:a3:a5:1f: 07:2b:98:58:bc:6a:e5:cd:fa:6d:79:b0:01:4c:62:1e:36:06: bf:c2:6e:35 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsZTTiPaZSd6qAXNnzo4is+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA4NTc4N2U2NWViNGZjZDY2ZTMzNDBiNjJhZGU0N2NhMDA5 MTlkY2UwHhcNMjUxMjEzMjAwMDQ5WhcNMjUxMjE0MjAwMDQ5WjAzMTEwLwYDVQQD Eyg1Y2ZjNjhhNzA0ZDc4MzZhYThmMTQ1M2M5OWVjYzBiN2NlYWRkZDJhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj6rSzuoFa43SKmXmHWLXLf9oz46G 2az8nu1/4hX2gWSoMs1s+7Kiv/UmRIUB1HT1OY7vUsmoWnwxktZcKVgltClR6sq8 a1JPXk8nd6N81Wtmok1B344+z1/SFeCcV/EIz5h4gKxC2ilMwhrR9mRaz95gVPZW VbySlUOlRxw4bFBiOMRv8X5K72Cf0FtXuxTM+TMdPLbFlLugPjrNJV55Um6A4vo/ 6w7huEZBocmHQWNLkbn0DKBZdXyymoV2Jg2VrPDjpXGb3YH8KBpbScwDWImv7sD6 1lXuJheRFiQS2473RAuBNSFs4V1GMI4n7xAeZ2CNSstTrQ03N2ScNvxHUwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFz8aKcE14NqqPFFPJnswLfOrd0qMB8GA1UdIwQY MBaAFAhXh+ZetPzWbjNAtireR8oAkZ3OMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ0ZlSDVsNjBfTlp1TTBDMkt0NUh5Z0NSbmM0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy9kMmJiZjYtM2I2OS00NDJlLWI0OTAt N2U1NGMzMmFiZWQ4LzEvQ0ZlSDVsNjBfTlp1TTBDMkt0NUh5Z0NSbmM0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMy9kMmJiZjYtM2I2OS00NDJlLWI0OTAtN2U1NGMzMmFiZWQ4 LzEvQ0ZlSDVsNjBfTlp1TTBDMkt0NUh5Z0NSbmM0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAr2zL2Ljh q8b2fUdc054P+xkiQnwXJct4JI7+B7nlG/gT+jUMuZSK+2Y/SlbvYJkktH+fPfLP 74LURn9waA5vjuxijw7/TFbMyn0FXrhSKT7YY275/eJcw/JVb8eK6E5LF8JJWnI/ zxWTLnEhn8nb0PXjuHcmtE+3L3qS7H+oAkjNS4C3sg5Hu4qMlKhMIcATP1Me93Ij 26WdPZrqM38qc7ln4/KY6q7/qeCcYa8c2CrePRAMzfj3cmPmh1XbB3YD3lQ64ntw DjdHtQ8FD7s2OQBZVogN40CelLa+EpdqZ21B6to+1Nv0o6UfByuYWLxq5c36bXmw AUxiHjYGv8JuNQ== -----END CERTIFICATE-----Generated at Sun Dec 14 01:58:07 2025 by rpki-client