This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/7ec7a2-8318-462f-966e-7a531d483747/1/cTuUBKDEMiOt3I6hsQq3S3d6KgE.mft File: cTuUBKDEMiOt3I6hsQq3S3d6KgE.mft (raw, json) Hash identifier: SWPblacEtw4njVZwSqO7bnxUxFgAv7EeWSdBuIykoZI= Subject key identifier: CF:9C:83:17:24:6F:CF:43:E1:7D:0C:72:7C:69:7D:D9:97:AD:EE:D3 Authority key identifier: 71:3B:94:04:A0:C4:32:23:AD:DC:8E:A1:B1:0A:B7:4B:77:7A:2A:01 Certificate issuer: /CN=713b9404a0c43223addc8ea1b10ab74b777a2a01 Certificate serial: 019B0EC9DA528E0B718E04C7F134FAEE83CF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cTuUBKDEMiOt3I6hsQq3S3d6KgE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/7ec7a2-8318-462f-966e-7a531d483747/1/cTuUBKDEMiOt3I6hsQq3S3d6KgE.mft Manifest number: 1776 Signing time: Thu 11 Dec 2025 19:01:08 +0000 Manifest this update: Thu 11 Dec 2025 19:01:08 +0000 Manifest next update: Fri 12 Dec 2025 19:01:08 +0000 Files and hashes: 1: MTFqs6mA7KUnw1QvYWNmKm0YqCY.roa (hash: q+PYR9H4ojp55utjjPF/ZBfxUxgnsX2OKoLSnPQgWVE=) 2: cTuUBKDEMiOt3I6hsQq3S3d6KgE.crl (hash: 2KuR3csnW7DvOCI27OY+z5jKI8k6jwWMij7kuxRTilI=) 3: fs0ZmJI91FgrAyS_qaO4SZnCnx4.roa (hash: ycybeagUIzrtezPLqz+FSenm/c5GMC1YyzGUnHiNwd0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/7ec7a2-8318-462f-966e-7a531d483747/1/cTuUBKDEMiOt3I6hsQq3S3d6KgE.crl rsync://rpki.ripe.net/repository/DEFAULT/83/7ec7a2-8318-462f-966e-7a531d483747/1/cTuUBKDEMiOt3I6hsQq3S3d6KgE.mft rsync://rpki.ripe.net/repository/DEFAULT/cTuUBKDEMiOt3I6hsQq3S3d6KgE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 14:45:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0e:c9:da:52:8e:0b:71:8e:04:c7:f1:34:fa:ee:83:cf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=713b9404a0c43223addc8ea1b10ab74b777a2a01 Validity Not Before: Dec 11 19:01:08 2025 GMT Not After : Dec 12 19:01:08 2025 GMT Subject: CN=cf9c8317246fcf43e17d0c727c697dd997adeed3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:b4:66:83:e4:3b:9e:39:55:d7:1a:33:35:db: 04:f0:2d:a4:d9:53:e2:8c:3c:8d:37:48:a5:cf:9b: 80:36:aa:4c:ab:61:31:c3:3e:8f:05:a6:fc:e5:3b: e8:79:de:ec:e9:02:b3:20:e5:09:c6:6b:8b:75:c8: 8e:c5:9b:98:3c:07:4e:53:b5:ea:d0:3f:3d:30:c1: 9d:f7:66:7b:66:dc:bc:11:82:4f:50:b9:5e:27:59: e9:c0:56:52:51:2c:58:37:43:15:5f:b7:f8:9c:70: c7:1d:3c:1e:70:96:a2:1d:5c:67:ec:e4:90:ab:5c: 61:3c:40:27:2c:8f:f7:9a:ec:a9:88:2b:dd:b2:df: 4b:12:31:05:11:e6:87:92:cc:0b:b5:0e:9a:25:c1: 4b:f5:8c:42:2a:c2:59:dd:37:c0:31:52:b5:7a:43: dd:e0:f0:4d:eb:b5:34:41:4e:f4:4e:ff:8d:2a:b2: eb:95:21:0b:13:11:cd:80:4a:87:2b:2b:23:3b:79: c1:6c:51:73:6f:66:74:46:04:7e:8b:3e:81:84:62: 4b:3b:e7:85:cb:27:84:83:40:10:f1:48:c0:63:f0: df:1c:ae:e1:b7:56:2b:6d:f5:0e:8a:fa:54:7d:4c: ec:ad:ae:1d:d7:b0:74:1b:17:d5:93:06:1e:2e:b7: b7:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:9C:83:17:24:6F:CF:43:E1:7D:0C:72:7C:69:7D:D9:97:AD:EE:D3 X509v3 Authority Key Identifier: keyid:71:3B:94:04:A0:C4:32:23:AD:DC:8E:A1:B1:0A:B7:4B:77:7A:2A:01 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cTuUBKDEMiOt3I6hsQq3S3d6KgE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/7ec7a2-8318-462f-966e-7a531d483747/1/cTuUBKDEMiOt3I6hsQq3S3d6KgE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/83/7ec7a2-8318-462f-966e-7a531d483747/1/cTuUBKDEMiOt3I6hsQq3S3d6KgE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 36:7a:57:c0:7c:d6:86:4e:04:a6:4d:36:10:40:74:f9:c7:52: dc:b0:3e:0e:83:1c:9e:2c:53:0d:ad:69:00:10:5a:d5:d6:e5: 02:46:29:95:a0:6a:cc:26:98:ec:f6:a7:d7:31:cd:46:d4:42: 16:cf:3c:49:c4:d1:db:a1:66:af:38:70:68:ef:2b:49:d2:af: 93:11:54:5d:a4:9d:b2:4a:d4:88:ca:9b:b3:82:0c:90:32:c5: 22:28:47:31:4a:dc:2c:f7:5c:7a:94:03:01:43:27:43:00:50: 75:23:e8:b1:4b:4e:f6:1f:f2:1e:39:6a:40:e7:42:93:6f:58: ff:df:09:45:cc:87:bb:d2:10:48:4e:40:28:43:27:88:14:6b: 80:27:32:b8:31:6a:53:02:09:2d:33:be:15:1c:d3:d0:0a:ec: 66:12:e0:ac:0e:c2:e2:a8:b1:a0:fe:a1:a3:66:bd:eb:71:68: 4d:97:b3:6d:ea:77:cb:4a:4f:74:3e:4f:b1:5d:2f:6f:b8:2f: 7b:51:a6:11:57:d4:65:0b:7d:03:d0:c8:e8:b8:5b:3a:34:93: 16:14:62:a8:dc:c5:77:5e:d3:f6:a2:74:1e:bb:a0:f2:74:cf: 4b:ab:89:32:cf:ed:15:e7:61:be:96:4e:63:eb:0c:44:1b:bf: fc:1b:72:4c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsOydpSjgtxjgTH8TT67oPPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcxM2I5NDA0YTBjNDMyMjNhZGRjOGVhMWIxMGFiNzRiNzc3 YTJhMDEwHhcNMjUxMjExMTkwMTA4WhcNMjUxMjEyMTkwMTA4WjAzMTEwLwYDVQQD EyhjZjljODMxNzI0NmZjZjQzZTE3ZDBjNzI3YzY5N2RkOTk3YWRlZWQzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr7Rmg+Q7njlV1xozNdsE8C2k2VPi jDyNN0ilz5uANqpMq2Exwz6PBab85Tvoed7s6QKzIOUJxmuLdciOxZuYPAdOU7Xq 0D89MMGd92Z7Zty8EYJPULleJ1npwFZSUSxYN0MVX7f4nHDHHTwecJaiHVxn7OSQ q1xhPEAnLI/3muypiCvdst9LEjEFEeaHkswLtQ6aJcFL9YxCKsJZ3TfAMVK1ekPd 4PBN67U0QU70Tv+NKrLrlSELExHNgEqHKysjO3nBbFFzb2Z0RgR+iz6BhGJLO+eF yyeEg0AQ8UjAY/DfHK7ht1YrbfUOivpUfUzsra4d17B0GxfVkwYeLre3/QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFM+cgxckb89D4X0McnxpfdmXre7TMB8GA1UdIwQY MBaAFHE7lASgxDIjrdyOobEKt0t3eioBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY1R1VUJLREVNaU90M0k2aHNRcTNTM2Q2S2dFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84My83ZWM3YTItODMxOC00NjJmLTk2NmUt N2E1MzFkNDgzNzQ3LzEvY1R1VUJLREVNaU90M0k2aHNRcTNTM2Q2S2dFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84My83ZWM3YTItODMxOC00NjJmLTk2NmUtN2E1MzFkNDgzNzQ3 LzEvY1R1VUJLREVNaU90M0k2aHNRcTNTM2Q2S2dFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANnpXwHzW hk4Epk02EEB0+cdS3LA+DoMcnixTDa1pABBa1dblAkYplaBqzCaY7Pan1zHNRtRC Fs88ScTR26FmrzhwaO8rSdKvkxFUXaSdskrUiMqbs4IMkDLFIihHMUrcLPdcepQD AUMnQwBQdSPosUtO9h/yHjlqQOdCk29Y/98JRcyHu9IQSE5AKEMniBRrgCcyuDFq UwIJLTO+FRzT0ArsZhLgrA7C4qixoP6ho2a963FoTZezbep3y0pPdD5PsV0vb7gv e1GmEVfUZQt9A9DI6LhbOjSTFhRiqNzFd17T9qJ0Hrug8nTPS6uJMs/tFedhvpZO Y+sMRBu//BtyTA== -----END CERTIFICATE-----Generated at Thu Dec 11 23:28:07 2025 by rpki-client