This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/7a1a62-e481-4a14-ad6e-35bff96da4c5/1/0cpnYQKGq3OPhs6TX99e1iDwLZY.mft File: 0cpnYQKGq3OPhs6TX99e1iDwLZY.mft (raw, json) Hash identifier: RJ5jQmVYfNvQD/cBkYuVIFvexSPqaVths7ESr+wcZ1k= Subject key identifier: FE:74:DC:E1:06:13:2B:A2:33:76:67:DC:39:78:8F:09:B4:0B:45:EC Authority key identifier: D1:CA:67:61:02:86:AB:73:8F:86:CE:93:5F:DF:5E:D6:20:F0:2D:96 Certificate issuer: /CN=d1ca67610286ab738f86ce935fdf5ed620f02d96 Certificate serial: 019B0F37BA65DDE02514EA06C099CC9F432A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0cpnYQKGq3OPhs6TX99e1iDwLZY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/7a1a62-e481-4a14-ad6e-35bff96da4c5/1/0cpnYQKGq3OPhs6TX99e1iDwLZY.mft Manifest number: 0669 Signing time: Thu 11 Dec 2025 21:01:08 +0000 Manifest this update: Thu 11 Dec 2025 21:01:08 +0000 Manifest next update: Fri 12 Dec 2025 21:01:08 +0000 Files and hashes: 1: 0cpnYQKGq3OPhs6TX99e1iDwLZY.crl (hash: OAole8wSjSmjoqccCTt+YWMPhmUhnuVAqzJuJ38d7NE=) 2: oFJn2DbPMhZS_Tmm-DmxNkpMyhE.roa (hash: Y5qFxScEcaicbV90jLVdvKg9QlaEEdGk/0uix/Osd6k=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/7a1a62-e481-4a14-ad6e-35bff96da4c5/1/0cpnYQKGq3OPhs6TX99e1iDwLZY.crl rsync://rpki.ripe.net/repository/DEFAULT/3a/7a1a62-e481-4a14-ad6e-35bff96da4c5/1/0cpnYQKGq3OPhs6TX99e1iDwLZY.mft rsync://rpki.ripe.net/repository/DEFAULT/0cpnYQKGq3OPhs6TX99e1iDwLZY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 19:27:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0f:37:ba:65:dd:e0:25:14:ea:06:c0:99:cc:9f:43:2a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d1ca67610286ab738f86ce935fdf5ed620f02d96 Validity Not Before: Dec 11 21:01:08 2025 GMT Not After : Dec 12 21:01:08 2025 GMT Subject: CN=fe74dce106132ba2337667dc39788f09b40b45ec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:a1:58:d2:7b:4a:9f:13:4a:3d:9c:7e:95:f1: 3b:55:45:df:e1:6b:0b:c0:d6:fd:04:e5:a9:db:82: 4a:8c:4f:ad:96:ad:6a:87:7b:5a:ff:d0:b6:e0:0f: af:4e:d5:2a:ed:ab:4c:da:20:98:99:1d:93:d7:bf: eb:b5:7d:ee:93:a8:4f:61:ba:fa:30:ee:db:9b:92: 46:41:28:a9:d9:cc:0f:21:69:ec:46:03:be:de:0e: 55:bf:81:99:04:c4:38:d9:e5:70:5b:a5:87:38:8c: 78:3e:c3:c9:b3:58:d5:04:2f:ba:c9:32:8c:fc:56: 8d:ff:70:c2:d0:86:03:41:20:e5:a5:1d:4e:dd:18: 52:bc:13:4d:33:8a:da:70:51:48:d6:d2:e4:29:bb: 23:29:58:c9:fb:14:3b:1b:bd:90:b4:ab:d3:9c:a7: 90:ed:64:9b:dc:36:6d:f5:59:f5:08:0f:05:6a:46: a8:ee:7d:f1:21:9d:01:d7:14:a9:c9:58:03:d3:24: 01:ac:cc:58:6f:f7:ec:be:bf:e3:13:4c:98:c2:ba: 70:a5:3a:e0:d1:1b:4d:73:4f:bc:7f:27:ef:34:b9: 2c:f5:70:4a:ae:60:4e:00:34:1e:29:b7:1b:df:a4: 7c:6f:81:96:f6:7c:78:9f:e7:90:91:02:87:d1:ec: 7a:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:74:DC:E1:06:13:2B:A2:33:76:67:DC:39:78:8F:09:B4:0B:45:EC X509v3 Authority Key Identifier: keyid:D1:CA:67:61:02:86:AB:73:8F:86:CE:93:5F:DF:5E:D6:20:F0:2D:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0cpnYQKGq3OPhs6TX99e1iDwLZY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/7a1a62-e481-4a14-ad6e-35bff96da4c5/1/0cpnYQKGq3OPhs6TX99e1iDwLZY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/7a1a62-e481-4a14-ad6e-35bff96da4c5/1/0cpnYQKGq3OPhs6TX99e1iDwLZY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5e:8b:e7:f1:63:1e:38:54:08:b1:03:86:e9:fd:ff:40:7b:e5: bc:b7:2b:b9:f4:63:24:e4:81:6e:5c:a9:c7:fc:e7:90:a8:54: 61:db:26:44:21:e8:e5:df:f9:83:15:24:92:7b:e3:77:3d:4d: 22:6d:ca:ca:2b:50:d4:06:63:57:9b:c7:02:cb:7a:20:1c:c0: 40:25:8b:18:13:92:4a:4f:20:50:0c:1a:ad:53:1b:93:f5:1e: c8:a4:19:40:32:5b:3d:6b:ad:d6:e8:6a:dc:3d:26:9a:4d:5a: a0:93:ff:76:65:e8:6b:84:a1:7e:da:89:76:66:67:93:36:65: c4:ca:df:46:51:8a:b7:39:29:8d:db:b5:24:fe:37:87:4c:f3: bc:a6:f1:eb:37:66:02:ab:1c:1f:1e:11:bc:af:90:ab:6b:95: 4c:4d:1a:d4:37:a4:b9:9b:ab:bb:d2:92:d0:74:13:41:1d:fe: bb:0e:24:98:07:d4:30:fa:67:04:12:e6:6a:98:f4:03:11:48: 6e:28:aa:a3:ec:00:80:ea:b3:70:d9:59:63:0d:c1:34:62:3b: 36:47:e4:ee:42:88:a3:02:93:71:28:bd:11:55:87:1e:86:51: 58:75:c5:25:13:3e:41:cc:64:c8:a3:3c:ba:4a:1c:ef:99:51: 6e:ad:1f:88 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsPN7pl3eAlFOoGwJnMn0MqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQxY2E2NzYxMDI4NmFiNzM4Zjg2Y2U5MzVmZGY1ZWQ2MjBm MDJkOTYwHhcNMjUxMjExMjEwMTA4WhcNMjUxMjEyMjEwMTA4WjAzMTEwLwYDVQQD EyhmZTc0ZGNlMTA2MTMyYmEyMzM3NjY3ZGMzOTc4OGYwOWI0MGI0NWVjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwqFY0ntKnxNKPZx+lfE7VUXf4WsL wNb9BOWp24JKjE+tlq1qh3ta/9C24A+vTtUq7atM2iCYmR2T17/rtX3uk6hPYbr6 MO7bm5JGQSip2cwPIWnsRgO+3g5Vv4GZBMQ42eVwW6WHOIx4PsPJs1jVBC+6yTKM /FaN/3DC0IYDQSDlpR1O3RhSvBNNM4racFFI1tLkKbsjKVjJ+xQ7G72QtKvTnKeQ 7WSb3DZt9Vn1CA8Fakao7n3xIZ0B1xSpyVgD0yQBrMxYb/fsvr/jE0yYwrpwpTrg 0RtNc0+8fyfvNLks9XBKrmBOADQeKbcb36R8b4GW9nx4n+eQkQKH0ex6WQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFP503OEGEyuiM3Zn3Dl4jwm0C0XsMB8GA1UdIwQY MBaAFNHKZ2EChqtzj4bOk1/fXtYg8C2WMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMGNwbllRS0dxM09QaHM2VFg5OWUxaUR3TFpZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYS83YTFhNjItZTQ4MS00YTE0LWFkNmUt MzViZmY5NmRhNGM1LzEvMGNwbllRS0dxM09QaHM2VFg5OWUxaUR3TFpZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYS83YTFhNjItZTQ4MS00YTE0LWFkNmUtMzViZmY5NmRhNGM1 LzEvMGNwbllRS0dxM09QaHM2VFg5OWUxaUR3TFpZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXovn8WMe OFQIsQOG6f3/QHvlvLcrufRjJOSBblypx/znkKhUYdsmRCHo5d/5gxUkknvjdz1N Im3KyitQ1AZjV5vHAst6IBzAQCWLGBOSSk8gUAwarVMbk/UeyKQZQDJbPWut1uhq 3D0mmk1aoJP/dmXoa4ShftqJdmZnkzZlxMrfRlGKtzkpjdu1JP43h0zzvKbx6zdm AqscHx4RvK+Qq2uVTE0a1DekuZuru9KS0HQTQR3+uw4kmAfUMPpnBBLmapj0AxFI biiqo+wAgOqzcNlZYw3BNGI7Nkfk7kKIowKTcSi9EVWHHoZRWHXFJRM+QcxkyKM8 ukoc75lRbq0fiA== -----END CERTIFICATE-----Generated at Fri Dec 12 03:42:15 2025 by rpki-client