This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/4459b4-1838-4231-bd2c-40c0a652450a/1/c0-mGwhlEDj6-B6_El7IRbGWGIM.mft File: c0-mGwhlEDj6-B6_El7IRbGWGIM.mft (raw, json) Hash identifier: EXYXFv2PL4AE9aQ7DB9QO04cHHNRW3xfLzOzI3ppW8U= Subject key identifier: 17:B5:8B:E3:31:3E:2E:01:6E:52:01:A6:F4:C9:5A:79:6B:78:BC:3D Authority key identifier: 73:4F:A6:1B:08:65:10:38:FA:F8:1E:BF:12:5E:C8:45:B1:96:18:83 Certificate issuer: /CN=734fa61b08651038faf81ebf125ec845b1961883 Certificate serial: 019B047EB2878580D215102E98D910160C16 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c0-mGwhlEDj6-B6_El7IRbGWGIM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/4459b4-1838-4231-bd2c-40c0a652450a/1/c0-mGwhlEDj6-B6_El7IRbGWGIM.mft Manifest number: 087A Signing time: Tue 09 Dec 2025 19:02:50 +0000 Manifest this update: Tue 09 Dec 2025 19:02:50 +0000 Manifest next update: Wed 10 Dec 2025 19:02:50 +0000 Files and hashes: 1: Ef_L0S4-Bp45a4AhicIQvktRdz4.roa (hash: /8pqkPBMXDiyNztqWEzFfiF8Q4r48DyQf1X0AGe+tXU=) 2: KD8apQsVPJ4S-o7CJiMR0Jx51PQ.roa (hash: 8wRRkrMsyRGit65zp+ividrP3xMpOsDdKqxjsreQ+LE=) 3: c0-mGwhlEDj6-B6_El7IRbGWGIM.crl (hash: ov5UECo4pXt/ngC9plo0BOGNkJdviGs9NmqU043fQco=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/4459b4-1838-4231-bd2c-40c0a652450a/1/c0-mGwhlEDj6-B6_El7IRbGWGIM.crl rsync://rpki.ripe.net/repository/DEFAULT/2f/4459b4-1838-4231-bd2c-40c0a652450a/1/c0-mGwhlEDj6-B6_El7IRbGWGIM.mft rsync://rpki.ripe.net/repository/DEFAULT/c0-mGwhlEDj6-B6_El7IRbGWGIM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 10 Dec 2025 16:15:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:04:7e:b2:87:85:80:d2:15:10:2e:98:d9:10:16:0c:16 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=734fa61b08651038faf81ebf125ec845b1961883 Validity Not Before: Dec 9 19:02:50 2025 GMT Not After : Dec 10 19:02:50 2025 GMT Subject: CN=17b58be3313e2e016e5201a6f4c95a796b78bc3d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:27:3b:ee:88:16:73:80:6f:4d:51:d8:5f:4f: db:ea:9c:fa:4d:5d:da:31:f9:40:c3:9f:57:7b:9e: bb:48:16:85:2b:f4:37:0e:6b:8f:58:9f:73:4d:59: e6:12:a3:50:e4:6a:03:82:86:90:6f:42:44:e3:fa: 14:87:8f:8a:9b:8e:0d:03:d9:f4:f6:67:91:0f:86: c5:a4:87:89:b8:5e:fd:79:72:66:3c:04:3d:bd:ca: b8:7b:c6:09:f3:28:18:0b:74:dd:7f:1d:92:b5:fe: 1c:2a:39:89:06:cc:64:ec:3f:ec:f8:7c:e8:39:1e: da:e8:2f:9b:b0:56:d5:69:0f:e0:c5:f6:16:c2:5e: 29:e2:c2:55:57:12:1d:7a:29:94:3a:5e:11:98:8d: 0d:c1:c3:7f:7c:b2:a0:1a:28:d6:df:e8:de:78:95: 82:d7:5c:2d:32:0f:1a:f1:eb:e6:f6:b7:d3:49:06: c4:db:4c:34:e2:11:1b:5f:8c:8d:de:07:a4:68:3a: 42:ba:8a:19:e5:f4:f7:13:7f:b3:60:44:2a:05:66: ff:e0:8e:08:af:04:f5:9e:f0:06:25:f9:dd:b0:4e: 61:4a:6d:74:05:8f:20:51:3b:db:5a:4e:88:d2:f3: 15:a2:9b:2c:07:48:39:20:ef:e0:88:a0:4d:24:5e: be:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:B5:8B:E3:31:3E:2E:01:6E:52:01:A6:F4:C9:5A:79:6B:78:BC:3D X509v3 Authority Key Identifier: keyid:73:4F:A6:1B:08:65:10:38:FA:F8:1E:BF:12:5E:C8:45:B1:96:18:83 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0-mGwhlEDj6-B6_El7IRbGWGIM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/4459b4-1838-4231-bd2c-40c0a652450a/1/c0-mGwhlEDj6-B6_El7IRbGWGIM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/4459b4-1838-4231-bd2c-40c0a652450a/1/c0-mGwhlEDj6-B6_El7IRbGWGIM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 29:c3:e3:c6:96:4f:63:08:fc:c1:0e:cf:e1:3c:e2:71:8c:d7: 0d:08:f5:84:25:3a:57:1d:65:41:bf:29:9d:30:1c:45:5d:93: ce:ca:d0:b4:ce:9d:de:10:54:09:b7:1c:32:c5:10:f7:99:64: 7f:b3:c4:2f:c5:20:5c:18:aa:76:3e:c2:04:1d:d8:dd:db:a3: 4b:ba:93:e2:1e:0e:19:f1:5f:6b:a2:cc:37:34:83:47:da:4e: 55:c7:8b:0a:1e:80:5d:fc:67:89:d4:aa:fc:d6:ab:27:b4:3e: a4:46:7d:83:7e:42:c8:ed:7a:9a:3a:61:ab:55:e8:9b:02:87: 7c:6b:db:96:71:76:a8:40:bd:70:f8:8c:49:c0:c5:cd:12:79: ff:6f:83:34:72:91:67:c1:d5:7a:97:c1:11:ca:37:c0:7e:3d: fe:c4:8a:96:63:b7:96:e7:99:b8:03:e2:cd:48:7a:72:23:9d: 2d:e1:00:f9:ac:c6:70:22:3e:52:b0:4e:4a:23:00:1b:d3:04: cd:e5:72:4c:97:08:7c:90:8b:9a:c4:d7:9b:06:c7:66:db:7c: 79:ea:ef:c1:c3:9e:34:53:fd:1c:c3:5c:82:55:24:c6:3d:e4: 90:c3:47:b1:6b:a6:4a:a9:33:11:26:2e:2a:35:99:fb:4b:59: 6c:b5:8d:e7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsEfrKHhYDSFRAumNkQFgwWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDczNGZhNjFiMDg2NTEwMzhmYWY4MWViZjEyNWVjODQ1YjE5 NjE4ODMwHhcNMjUxMjA5MTkwMjUwWhcNMjUxMjEwMTkwMjUwWjAzMTEwLwYDVQQD EygxN2I1OGJlMzMxM2UyZTAxNmU1MjAxYTZmNGM5NWE3OTZiNzhiYzNkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtCc77ogWc4BvTVHYX0/b6pz6TV3a MflAw59Xe567SBaFK/Q3DmuPWJ9zTVnmEqNQ5GoDgoaQb0JE4/oUh4+Km44NA9n0 9meRD4bFpIeJuF79eXJmPAQ9vcq4e8YJ8ygYC3Tdfx2Stf4cKjmJBsxk7D/s+Hzo OR7a6C+bsFbVaQ/gxfYWwl4p4sJVVxIdeimUOl4RmI0NwcN/fLKgGijW3+jeeJWC 11wtMg8a8evm9rfTSQbE20w04hEbX4yN3gekaDpCuooZ5fT3E3+zYEQqBWb/4I4I rwT1nvAGJfndsE5hSm10BY8gUTvbWk6I0vMVopssB0g5IO/giKBNJF6+swIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBe1i+MxPi4BblIBpvTJWnlreLw9MB8GA1UdIwQY MBaAFHNPphsIZRA4+vgevxJeyEWxlhiDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYzAtbUd3aGxFRGo2LUI2X0VsN0lSYkdXR0lNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZi80NDU5YjQtMTgzOC00MjMxLWJkMmMt NDBjMGE2NTI0NTBhLzEvYzAtbUd3aGxFRGo2LUI2X0VsN0lSYkdXR0lNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZi80NDU5YjQtMTgzOC00MjMxLWJkMmMtNDBjMGE2NTI0NTBh LzEvYzAtbUd3aGxFRGo2LUI2X0VsN0lSYkdXR0lNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKcPjxpZP Ywj8wQ7P4TzicYzXDQj1hCU6Vx1lQb8pnTAcRV2TzsrQtM6d3hBUCbccMsUQ95lk f7PEL8UgXBiqdj7CBB3Y3dujS7qT4h4OGfFfa6LMNzSDR9pOVceLCh6AXfxnidSq /NarJ7Q+pEZ9g35CyO16mjphq1XomwKHfGvblnF2qEC9cPiMScDFzRJ5/2+DNHKR Z8HVepfBEco3wH49/sSKlmO3lueZuAPizUh6ciOdLeEA+azGcCI+UrBOSiMAG9ME zeVyTJcIfJCLmsTXmwbHZtt8eervwcOeNFP9HMNcglUkxj3kkMNHsWumSqkzESYu KjWZ+0tZbLWN5w== -----END CERTIFICATE-----Generated at Wed Dec 10 01:25:17 2025 by rpki-client