This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/c128bc-cddb-4b07-8d01-62f1a350414c/1/cFtQehAZ98Rlc33FlzbAb93c7-c.mft File: cFtQehAZ98Rlc33FlzbAb93c7-c.mft (raw, json) Hash identifier: pxZUWHcgOvv/6/GkHyyWNoz6LcdiESlVyo1g2dBlpSs= Subject key identifier: B9:57:B5:64:70:6F:88:06:9D:73:FF:96:CA:73:30:AE:4D:20:89:7F Authority key identifier: 70:5B:50:7A:10:19:F7:C4:65:73:7D:C5:97:36:C0:6F:DD:DC:EF:E7 Certificate issuer: /CN=705b507a1019f7c465737dc59736c06fdddcefe7 Certificate serial: 019AF5785C75169AE013192DAF9623971D61 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cFtQehAZ98Rlc33FlzbAb93c7-c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/c128bc-cddb-4b07-8d01-62f1a350414c/1/cFtQehAZ98Rlc33FlzbAb93c7-c.mft Manifest number: 0769 Signing time: Sat 06 Dec 2025 21:01:37 +0000 Manifest this update: Sat 06 Dec 2025 21:01:37 +0000 Manifest next update: Sun 07 Dec 2025 21:01:37 +0000 Files and hashes: 1: I35QWc2nLFeohwH6DngqA3KZZFg.roa (hash: aZgBsm07l1h8BIWKajFFEnRBCv4q5gOkXWvMXnSlf3g=) 2: cFtQehAZ98Rlc33FlzbAb93c7-c.crl (hash: g4iiItOUeMPPlO9ZlRuCZxwdSHgklxdb9qdlMmUiomo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/c128bc-cddb-4b07-8d01-62f1a350414c/1/cFtQehAZ98Rlc33FlzbAb93c7-c.crl rsync://rpki.ripe.net/repository/DEFAULT/6b/c128bc-cddb-4b07-8d01-62f1a350414c/1/cFtQehAZ98Rlc33FlzbAb93c7-c.mft rsync://rpki.ripe.net/repository/DEFAULT/cFtQehAZ98Rlc33FlzbAb93c7-c.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 21:01:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:78:5c:75:16:9a:e0:13:19:2d:af:96:23:97:1d:61 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=705b507a1019f7c465737dc59736c06fdddcefe7 Validity Not Before: Dec 6 21:01:37 2025 GMT Not After : Dec 7 21:01:37 2025 GMT Subject: CN=b957b564706f88069d73ff96ca7330ae4d20897f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:91:8b:e1:12:69:c5:26:6b:9d:8d:27:61:e1: 5a:fc:91:5e:64:0b:ad:bb:2e:c7:fb:98:54:7c:ad: f6:13:6d:ae:d0:cb:74:5f:84:ea:16:54:5b:e1:a4: 83:eb:ea:a8:c2:34:2d:6c:05:63:ef:6a:b7:26:83: e5:73:a0:05:a1:bf:86:3f:2a:0e:44:10:1a:c4:f7: e9:2c:47:97:17:0e:e2:b9:ac:54:e4:69:f4:e2:79: db:f7:a4:55:35:c1:f8:f6:17:60:c2:eb:2b:9a:7b: bb:19:26:ab:5d:99:02:23:6f:f7:72:1d:62:97:49: a1:a5:b1:b1:81:59:c0:2d:b2:25:04:d1:56:08:9e: cf:a0:7f:e5:1e:5c:80:81:2c:cd:c1:92:de:00:d7: 58:42:70:78:94:a8:9f:c9:f8:07:38:0f:b4:a8:fb: 51:8a:36:89:30:0c:c4:be:a9:56:9a:cb:4b:90:0c: 18:86:48:94:fe:1d:82:4c:8b:0a:0b:92:55:23:65: 6c:f0:f0:e4:c9:b7:90:aa:5a:c7:e6:da:2e:57:16: 66:ad:de:26:5f:8f:85:d2:79:c3:34:6a:39:8f:68: ab:0f:38:53:93:b5:b5:52:f8:d7:1e:a1:5b:b5:d1: 6b:72:a9:db:33:26:7b:63:84:5a:c6:c8:29:79:15: 49:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:57:B5:64:70:6F:88:06:9D:73:FF:96:CA:73:30:AE:4D:20:89:7F X509v3 Authority Key Identifier: keyid:70:5B:50:7A:10:19:F7:C4:65:73:7D:C5:97:36:C0:6F:DD:DC:EF:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cFtQehAZ98Rlc33FlzbAb93c7-c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/c128bc-cddb-4b07-8d01-62f1a350414c/1/cFtQehAZ98Rlc33FlzbAb93c7-c.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/c128bc-cddb-4b07-8d01-62f1a350414c/1/cFtQehAZ98Rlc33FlzbAb93c7-c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b4:6a:a7:c1:c9:ce:75:e7:c0:c6:9d:4e:0e:ed:a6:25:62:a5: f5:73:fa:ac:01:25:8f:1b:f2:f0:11:c8:0a:1a:70:54:e0:19: 1a:98:1f:64:0c:87:65:d3:68:4b:68:48:08:9c:a3:cc:81:60: e2:2f:7e:b7:9d:08:a1:b7:0f:04:93:a5:c0:db:81:a8:e4:c3: 2a:6f:fb:e0:16:90:21:b2:95:c3:b6:e1:b2:7b:c4:68:93:6e: 0a:21:87:50:e1:ee:fb:4c:4d:ea:29:4e:f8:b1:d7:31:e2:66: ad:ee:32:bb:bf:bd:ed:6b:31:3f:78:27:e6:ed:ac:ef:a0:f2: 83:5e:72:17:71:c7:c1:73:99:27:e6:e7:fb:c7:52:18:ea:fa: 3c:83:7f:56:77:27:e3:27:9f:c4:de:25:e4:84:cc:61:c0:b5: 2d:b5:99:1a:30:6e:d1:3e:e8:f6:14:3a:61:36:42:a9:6a:58: d9:18:90:01:f1:69:86:1c:66:04:2b:84:a1:2d:26:86:20:ef: 51:45:2c:73:45:f5:40:a2:80:b1:a4:e9:ee:38:a5:78:8c:61: ff:ab:27:a1:52:01:0b:00:7c:ba:b9:69:e8:fc:2b:93:33:bc: b5:c6:bb:6b:98:6f:2a:08:15:69:ec:c1:41:92:3b:3e:0a:ed: 0a:51:2a:ab -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1eFx1FprgExktr5Yjlx1hMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcwNWI1MDdhMTAxOWY3YzQ2NTczN2RjNTk3MzZjMDZmZGRk Y2VmZTcwHhcNMjUxMjA2MjEwMTM3WhcNMjUxMjA3MjEwMTM3WjAzMTEwLwYDVQQD EyhiOTU3YjU2NDcwNmY4ODA2OWQ3M2ZmOTZjYTczMzBhZTRkMjA4OTdmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6JGL4RJpxSZrnY0nYeFa/JFeZAut uy7H+5hUfK32E22u0Mt0X4TqFlRb4aSD6+qowjQtbAVj72q3JoPlc6AFob+GPyoO RBAaxPfpLEeXFw7iuaxU5Gn04nnb96RVNcH49hdgwusrmnu7GSarXZkCI2/3ch1i l0mhpbGxgVnALbIlBNFWCJ7PoH/lHlyAgSzNwZLeANdYQnB4lKifyfgHOA+0qPtR ijaJMAzEvqlWmstLkAwYhkiU/h2CTIsKC5JVI2Vs8PDkybeQqlrH5touVxZmrd4m X4+F0nnDNGo5j2irDzhTk7W1UvjXHqFbtdFrcqnbMyZ7Y4RaxsgpeRVJywIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLlXtWRwb4gGnXP/lspzMK5NIIl/MB8GA1UdIwQY MBaAFHBbUHoQGffEZXN9xZc2wG/d3O/nMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY0Z0UWVoQVo5OFJsYzMzRmx6YkFiOTNjNy1jLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yi9jMTI4YmMtY2RkYi00YjA3LThkMDEt NjJmMWEzNTA0MTRjLzEvY0Z0UWVoQVo5OFJsYzMzRmx6YkFiOTNjNy1jLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Yi9jMTI4YmMtY2RkYi00YjA3LThkMDEtNjJmMWEzNTA0MTRj LzEvY0Z0UWVoQVo5OFJsYzMzRmx6YkFiOTNjNy1jLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtGqnwcnO defAxp1ODu2mJWKl9XP6rAEljxvy8BHIChpwVOAZGpgfZAyHZdNoS2hICJyjzIFg 4i9+t50IobcPBJOlwNuBqOTDKm/74BaQIbKVw7bhsnvEaJNuCiGHUOHu+0xN6ilO +LHXMeJmre4yu7+97WsxP3gn5u2s76Dyg15yF3HHwXOZJ+bn+8dSGOr6PIN/Vncn 4yefxN4l5ITMYcC1LbWZGjBu0T7o9hQ6YTZCqWpY2RiQAfFphhxmBCuEoS0mhiDv UUUsc0X1QKKAsaTp7jileIxh/6snoVIBCwB8urlp6PwrkzO8tca7a5hvKggVaezB QZI7PgrtClEqqw== -----END CERTIFICATE-----Generated at Sun Dec 7 06:00:18 2025 by rpki-client