This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/766e12-9a09-4553-8f62-2294cdda6a40/1/cVOwKU08jbFTBqsQnVBtp0rnCXk.mft File: cVOwKU08jbFTBqsQnVBtp0rnCXk.mft (raw, json) Hash identifier: WlRq3WfeCGfd7vuak006/GHe7AI4c8DvpEoIozZbV1w= Subject key identifier: 26:44:F8:E6:4B:BE:77:93:88:F9:43:60:A5:9C:E5:F4:7C:9D:70:A3 Authority key identifier: 71:53:B0:29:4D:3C:8D:B1:53:06:AB:10:9D:50:6D:A7:4A:E7:09:79 Certificate issuer: /CN=7153b0294d3c8db15306ab109d506da74ae70979 Certificate serial: 019B2B8A9804CA9D1580A4D0F5369DC65206 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cVOwKU08jbFTBqsQnVBtp0rnCXk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/766e12-9a09-4553-8f62-2294cdda6a40/1/cVOwKU08jbFTBqsQnVBtp0rnCXk.mft Manifest number: 177F Signing time: Wed 17 Dec 2025 09:01:01 +0000 Manifest this update: Wed 17 Dec 2025 09:01:01 +0000 Manifest next update: Thu 18 Dec 2025 09:01:01 +0000 Files and hashes: 1: 5IXXShSjVO7kS96xQpiSIMcLu-s.roa (hash: E67HmQuHQzZNq0YpnE5MfAwnl2TJ0rHXn4iIRjzaf4g=) 2: cVOwKU08jbFTBqsQnVBtp0rnCXk.crl (hash: lG048NmttFPML18wK53+0EFEGE+uJcDSO+CqIt/7Sy8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/766e12-9a09-4553-8f62-2294cdda6a40/1/cVOwKU08jbFTBqsQnVBtp0rnCXk.crl rsync://rpki.ripe.net/repository/DEFAULT/af/766e12-9a09-4553-8f62-2294cdda6a40/1/cVOwKU08jbFTBqsQnVBtp0rnCXk.mft rsync://rpki.ripe.net/repository/DEFAULT/cVOwKU08jbFTBqsQnVBtp0rnCXk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 09:01:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2b:8a:98:04:ca:9d:15:80:a4:d0:f5:36:9d:c6:52:06 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7153b0294d3c8db15306ab109d506da74ae70979 Validity Not Before: Dec 17 09:01:01 2025 GMT Not After : Dec 18 09:01:01 2025 GMT Subject: CN=2644f8e64bbe779388f94360a59ce5f47c9d70a3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:b7:1a:3d:8a:c7:fb:f9:f3:19:47:b0:25:27: 40:c6:38:39:93:d4:7a:1b:85:c6:28:84:8a:6b:19: 4a:11:3e:5f:8b:63:b8:6e:f3:d8:29:b5:8a:46:4c: 4d:2d:2c:bc:45:33:88:5c:34:ee:40:4d:de:88:c7: de:83:0a:d6:b3:7a:cc:12:ed:6a:77:13:5f:9e:3f: 37:1f:f0:67:ee:4e:43:3f:ce:f2:6c:42:fd:65:67: 2f:95:9e:76:85:02:ab:1d:a9:fe:ee:69:50:26:05: 23:b3:d3:b3:86:2c:bf:03:0b:aa:6a:66:0f:58:96: 19:e7:b3:02:02:2b:0c:61:50:16:e4:9b:7a:c5:4e: 56:3e:3d:e5:0f:4b:fb:e6:cb:96:35:56:73:ad:92: d4:96:37:ac:38:cd:5c:16:e9:52:5d:50:e6:dd:b4: 6b:d4:15:48:db:2e:3e:f5:1f:af:c6:ff:30:31:59: 79:c7:a5:e6:9f:53:16:41:f4:c2:e8:5d:37:d0:2a: 4c:2d:f4:12:3d:e4:98:9e:90:6b:d1:55:4f:77:50: 75:4b:bf:8c:ee:b4:7a:ca:38:bd:67:27:28:a8:52: 60:f1:9c:9d:30:fd:00:95:4a:29:df:99:c1:0b:cd: c5:ac:63:e6:a6:5f:61:36:36:fc:68:a1:54:cc:82: df:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:44:F8:E6:4B:BE:77:93:88:F9:43:60:A5:9C:E5:F4:7C:9D:70:A3 X509v3 Authority Key Identifier: keyid:71:53:B0:29:4D:3C:8D:B1:53:06:AB:10:9D:50:6D:A7:4A:E7:09:79 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cVOwKU08jbFTBqsQnVBtp0rnCXk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/766e12-9a09-4553-8f62-2294cdda6a40/1/cVOwKU08jbFTBqsQnVBtp0rnCXk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/af/766e12-9a09-4553-8f62-2294cdda6a40/1/cVOwKU08jbFTBqsQnVBtp0rnCXk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 08:59:a4:3d:aa:dd:63:b0:01:af:20:98:d8:71:9d:c7:70:fe: d3:ea:0b:90:a2:a0:ab:36:65:c4:ef:cb:e8:06:40:75:1a:71: 49:e6:d4:87:7f:99:5b:6a:a5:0e:b7:eb:b5:2c:27:5c:e8:b7: e5:4c:c3:87:f9:ad:f6:76:e6:71:a5:12:74:7a:eb:46:ff:37: 42:7d:69:5d:e1:d4:6d:ef:4b:b4:8a:b1:e3:29:ac:58:f0:34: e7:d9:8a:10:a4:f2:84:38:60:ce:01:98:48:42:2f:23:48:3b: 7f:84:a2:72:2f:55:6c:21:39:e6:3b:2f:c6:d8:0a:46:64:5e: 54:e9:f9:cc:75:e8:40:46:d9:42:ea:a6:d1:5b:ef:c1:d4:36: d1:f0:e7:a5:0c:78:67:dd:0c:c7:79:d2:01:68:c4:c8:b3:c7: ec:0e:82:74:7d:5e:45:ab:f6:4b:54:e4:a7:d5:7e:99:35:b2: 95:3c:68:dc:90:dc:26:77:bd:e0:0b:6d:d8:bb:82:f5:2f:47: d1:12:e3:d3:86:58:25:72:0f:27:b7:b8:e1:0a:c2:52:66:97: f2:68:9b:7f:32:46:ce:99:1d:45:1d:be:87:db:03:34:d4:08: cb:0f:3c:10:e1:fc:14:e2:1e:06:c2:65:fc:06:9e:7b:8f:2e: 66:8c:06:25 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsripgEyp0VgKTQ9TadxlIGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcxNTNiMDI5NGQzYzhkYjE1MzA2YWIxMDlkNTA2ZGE3NGFl NzA5NzkwHhcNMjUxMjE3MDkwMTAxWhcNMjUxMjE4MDkwMTAxWjAzMTEwLwYDVQQD EygyNjQ0ZjhlNjRiYmU3NzkzODhmOTQzNjBhNTljZTVmNDdjOWQ3MGEzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAybcaPYrH+/nzGUewJSdAxjg5k9R6 G4XGKISKaxlKET5fi2O4bvPYKbWKRkxNLSy8RTOIXDTuQE3eiMfegwrWs3rMEu1q dxNfnj83H/Bn7k5DP87ybEL9ZWcvlZ52hQKrHan+7mlQJgUjs9Ozhiy/AwuqamYP WJYZ57MCAisMYVAW5Jt6xU5WPj3lD0v75suWNVZzrZLUljesOM1cFulSXVDm3bRr 1BVI2y4+9R+vxv8wMVl5x6Xmn1MWQfTC6F030CpMLfQSPeSYnpBr0VVPd1B1S7+M 7rR6yji9ZycoqFJg8ZydMP0AlUop35nBC83FrGPmpl9hNjb8aKFUzILf3wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCZE+OZLvneTiPlDYKWc5fR8nXCjMB8GA1UdIwQY MBaAFHFTsClNPI2xUwarEJ1QbadK5wl5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY1ZPd0tVMDhqYkZUQnFzUW5WQnRwMHJuQ1hrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZi83NjZlMTItOWEwOS00NTUzLThmNjIt MjI5NGNkZGE2YTQwLzEvY1ZPd0tVMDhqYkZUQnFzUW5WQnRwMHJuQ1hrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZi83NjZlMTItOWEwOS00NTUzLThmNjItMjI5NGNkZGE2YTQw LzEvY1ZPd0tVMDhqYkZUQnFzUW5WQnRwMHJuQ1hrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACFmkPard Y7ABryCY2HGdx3D+0+oLkKKgqzZlxO/L6AZAdRpxSebUh3+ZW2qlDrfrtSwnXOi3 5UzDh/mt9nbmcaUSdHrrRv83Qn1pXeHUbe9LtIqx4ymsWPA059mKEKTyhDhgzgGY SEIvI0g7f4Sici9VbCE55jsvxtgKRmReVOn5zHXoQEbZQuqm0VvvwdQ20fDnpQx4 Z90Mx3nSAWjEyLPH7A6CdH1eRav2S1Tkp9V+mTWylTxo3JDcJne94Att2LuC9S9H 0RLj04ZYJXIPJ7e44QrCUmaX8mibfzJGzpkdRR2+h9sDNNQIyw88EOH8FOIeBsJl /Aaee48uZowGJQ== -----END CERTIFICATE-----Generated at Wed Dec 17 19:05:34 2025 by rpki-client