This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/7a1a62-e481-4a14-ad6e-35bff96da4c5/1/0cpnYQKGq3OPhs6TX99e1iDwLZY.mft File: 0cpnYQKGq3OPhs6TX99e1iDwLZY.mft (raw, json) Hash identifier: XICTQPA1ck6+dx3xvpeS+WDudQnV4chxLR2xYDsNyoQ= Subject key identifier: 6D:4B:E4:CC:C4:DD:A7:5C:22:E5:B1:05:2B:8C:F1:E5:36:0A:3A:07 Authority key identifier: D1:CA:67:61:02:86:AB:73:8F:86:CE:93:5F:DF:5E:D6:20:F0:2D:96 Certificate issuer: /CN=d1ca67610286ab738f86ce935fdf5ed620f02d96 Certificate serial: 019B341F7F265C1AD2A41521F504CA5FC4DA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0cpnYQKGq3OPhs6TX99e1iDwLZY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/7a1a62-e481-4a14-ad6e-35bff96da4c5/1/0cpnYQKGq3OPhs6TX99e1iDwLZY.mft Manifest number: 067D Signing time: Fri 19 Dec 2025 01:00:37 +0000 Manifest this update: Fri 19 Dec 2025 01:00:37 +0000 Manifest next update: Sat 20 Dec 2025 01:00:37 +0000 Files and hashes: 1: 0cpnYQKGq3OPhs6TX99e1iDwLZY.crl (hash: G4Xcn45MK/fevJc5wJTUIB5Yh6LyyM4ieRYJdSSxvQw=) 2: i5c6APAQbgFsu6nm48O6UWVFYT4.roa (hash: ZAolUlxg2dnxY02aKMKDXlvl6R7q63Rjwyr4KEJt+D8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/7a1a62-e481-4a14-ad6e-35bff96da4c5/1/0cpnYQKGq3OPhs6TX99e1iDwLZY.crl rsync://rpki.ripe.net/repository/DEFAULT/3a/7a1a62-e481-4a14-ad6e-35bff96da4c5/1/0cpnYQKGq3OPhs6TX99e1iDwLZY.mft rsync://rpki.ripe.net/repository/DEFAULT/0cpnYQKGq3OPhs6TX99e1iDwLZY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:34:1f:7f:26:5c:1a:d2:a4:15:21:f5:04:ca:5f:c4:da Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d1ca67610286ab738f86ce935fdf5ed620f02d96 Validity Not Before: Dec 19 01:00:37 2025 GMT Not After : Dec 20 01:00:37 2025 GMT Subject: CN=6d4be4ccc4dda75c22e5b1052b8cf1e5360a3a07 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:34:5f:45:9e:1b:89:95:4c:36:79:3f:73:84: 83:8d:1b:6a:99:39:2e:a9:f5:9d:3a:4a:4d:10:b6: da:95:ac:9d:44:02:2f:b1:e8:ac:e3:d5:67:cd:33: b4:cf:23:96:ec:5b:5e:24:c4:30:18:bd:a6:50:75: ee:d7:fd:c1:cc:fa:92:3c:8f:f9:fb:94:9d:66:85: b9:8a:1b:70:2d:82:9d:93:8d:6a:22:53:fd:71:4e: 80:75:e0:d9:04:41:16:6c:e5:76:28:26:9b:f8:6d: 3a:b0:33:1d:d2:dc:82:91:fe:09:17:59:78:52:5a: 93:a2:da:f7:e5:1c:20:59:68:00:11:7d:5e:0f:dc: db:7d:a5:b6:e6:a7:b1:d1:86:c9:0f:fa:4d:d6:47: 0f:16:b2:36:aa:a1:4b:f8:63:6f:97:f3:1f:43:e0: e2:12:5a:6a:1e:7a:78:b3:08:9d:36:31:6c:b4:87: a4:61:2f:78:3c:12:ee:80:92:db:2f:da:1f:e3:3c: 72:99:1a:32:7c:05:f4:21:bb:a6:23:15:9b:2e:1e: 6a:c1:f6:aa:63:00:19:32:77:f5:44:e5:01:07:1b: 90:d3:c8:90:67:95:5b:83:eb:5a:33:bd:bd:f3:5b: c0:32:30:c0:9c:d9:c4:c0:d8:61:81:58:62:75:a5: 49:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:4B:E4:CC:C4:DD:A7:5C:22:E5:B1:05:2B:8C:F1:E5:36:0A:3A:07 X509v3 Authority Key Identifier: keyid:D1:CA:67:61:02:86:AB:73:8F:86:CE:93:5F:DF:5E:D6:20:F0:2D:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0cpnYQKGq3OPhs6TX99e1iDwLZY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/7a1a62-e481-4a14-ad6e-35bff96da4c5/1/0cpnYQKGq3OPhs6TX99e1iDwLZY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/7a1a62-e481-4a14-ad6e-35bff96da4c5/1/0cpnYQKGq3OPhs6TX99e1iDwLZY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1f:7d:cb:60:b6:10:78:01:eb:44:f8:ef:37:1d:2a:6c:23:8e: b1:be:75:0b:c2:4b:9e:3c:1f:27:67:fd:33:92:57:b9:5d:07: c9:e5:64:6a:1b:61:80:ab:80:92:ed:f5:4d:cb:30:d2:25:cc: 8e:86:42:35:96:a9:68:48:cc:b0:bd:65:60:63:15:46:19:25: bc:68:57:0d:dd:59:3a:6c:f5:15:4e:b1:32:8c:00:55:ad:8c: 11:03:bc:7f:fd:42:de:59:e2:80:43:86:5e:eb:96:b9:47:d7: d2:79:94:09:47:b7:62:42:e7:27:f8:35:61:16:0b:05:6f:ef: b7:7e:92:f6:63:9d:c5:a4:a1:27:87:d0:c5:ad:58:9e:51:f3: 3a:d7:8d:79:51:f4:53:33:dd:ff:48:e3:68:a9:27:f9:cd:e6: 4f:fe:55:dc:ad:f2:0c:7c:5a:88:ba:8b:42:01:95:05:34:69: 15:bd:c4:9d:7e:c1:0b:08:6b:aa:bf:fb:6b:00:a3:58:b4:7d: a7:3e:79:0d:64:aa:7d:45:85:fc:40:85:9a:ba:ec:66:02:70: 8b:d7:1b:08:6c:30:f4:64:a7:19:a5:bf:67:a5:c9:aa:f7:dd: 59:b3:56:e1:8e:c0:9d:08:01:d7:25:1a:c5:1f:3e:d5:51:3a: 55:db:10:4e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs0H38mXBrSpBUh9QTKX8TaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQxY2E2NzYxMDI4NmFiNzM4Zjg2Y2U5MzVmZGY1ZWQ2MjBm MDJkOTYwHhcNMjUxMjE5MDEwMDM3WhcNMjUxMjIwMDEwMDM3WjAzMTEwLwYDVQQD Eyg2ZDRiZTRjY2M0ZGRhNzVjMjJlNWIxMDUyYjhjZjFlNTM2MGEzYTA3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAizRfRZ4biZVMNnk/c4SDjRtqmTku qfWdOkpNELbalaydRAIvseis49VnzTO0zyOW7FteJMQwGL2mUHXu1/3BzPqSPI/5 +5SdZoW5ihtwLYKdk41qIlP9cU6AdeDZBEEWbOV2KCab+G06sDMd0tyCkf4JF1l4 UlqTotr35RwgWWgAEX1eD9zbfaW25qex0YbJD/pN1kcPFrI2qqFL+GNvl/MfQ+Di ElpqHnp4swidNjFstIekYS94PBLugJLbL9of4zxymRoyfAX0IbumIxWbLh5qwfaq YwAZMnf1ROUBBxuQ08iQZ5Vbg+taM72981vAMjDAnNnEwNhhgVhidaVJ0wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFG1L5MzE3adcIuWxBSuM8eU2CjoHMB8GA1UdIwQY MBaAFNHKZ2EChqtzj4bOk1/fXtYg8C2WMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMGNwbllRS0dxM09QaHM2VFg5OWUxaUR3TFpZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYS83YTFhNjItZTQ4MS00YTE0LWFkNmUt MzViZmY5NmRhNGM1LzEvMGNwbllRS0dxM09QaHM2VFg5OWUxaUR3TFpZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYS83YTFhNjItZTQ4MS00YTE0LWFkNmUtMzViZmY5NmRhNGM1 LzEvMGNwbllRS0dxM09QaHM2VFg5OWUxaUR3TFpZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAH33LYLYQ eAHrRPjvNx0qbCOOsb51C8JLnjwfJ2f9M5JXuV0HyeVkahthgKuAku31Tcsw0iXM joZCNZapaEjMsL1lYGMVRhklvGhXDd1ZOmz1FU6xMowAVa2MEQO8f/1C3lnigEOG XuuWuUfX0nmUCUe3YkLnJ/g1YRYLBW/vt36S9mOdxaShJ4fQxa1YnlHzOteNeVH0 UzPd/0jjaKkn+c3mT/5V3K3yDHxaiLqLQgGVBTRpFb3EnX7BCwhrqr/7awCjWLR9 pz55DWSqfUWF/ECFmrrsZgJwi9cbCGww9GSnGaW/Z6XJqvfdWbNW4Y7AnQgB1yUa xR8+1VE6VdsQTg== -----END CERTIFICATE-----Generated at Fri Dec 19 07:58:39 2025 by rpki-client