This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/b7e4ac-8508-4d6b-a2bc-274cd6caa3f3/1/cMuWVD9-GVcj5tEiwpR4v92gPsw.mft File: cMuWVD9-GVcj5tEiwpR4v92gPsw.mft (raw, json) Hash identifier: kjQsQuqmpxq6wfOGYK0BZnnL8ZZWjl3AEgnLwm6p6h8= Subject key identifier: BB:05:2C:65:35:72:9F:F0:24:47:B5:92:7A:F2:92:37:00:E8:17:F1 Authority key identifier: 70:CB:96:54:3F:7E:19:57:23:E6:D1:22:C2:94:78:BF:DD:A0:3E:CC Certificate issuer: /CN=70cb96543f7e195723e6d122c29478bfdda03ecc Certificate serial: 019B5A516A9BBA0DCE05E513BBF5842A3896 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cMuWVD9-GVcj5tEiwpR4v92gPsw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/b7e4ac-8508-4d6b-a2bc-274cd6caa3f3/1/cMuWVD9-GVcj5tEiwpR4v92gPsw.mft Manifest number: 0C2C Signing time: Fri 26 Dec 2025 11:00:43 +0000 Manifest this update: Fri 26 Dec 2025 11:00:43 +0000 Manifest next update: Sat 27 Dec 2025 11:00:43 +0000 Files and hashes: 1: 8anvDKitwmoS5b1R9CoiYAIvV4s.roa (hash: sK8EhnVxeI2sQ1OgOLzF1LkVF8lOtqG5DcBtonQ6uEM=) 2: cMuWVD9-GVcj5tEiwpR4v92gPsw.crl (hash: smc8Az8M4OqehVCojW0jrYim4zHAZXBjhf22LzfucaY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/b7e4ac-8508-4d6b-a2bc-274cd6caa3f3/1/cMuWVD9-GVcj5tEiwpR4v92gPsw.crl rsync://rpki.ripe.net/repository/DEFAULT/dc/b7e4ac-8508-4d6b-a2bc-274cd6caa3f3/1/cMuWVD9-GVcj5tEiwpR4v92gPsw.mft rsync://rpki.ripe.net/repository/DEFAULT/cMuWVD9-GVcj5tEiwpR4v92gPsw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5a:51:6a:9b:ba:0d:ce:05:e5:13:bb:f5:84:2a:38:96 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=70cb96543f7e195723e6d122c29478bfdda03ecc Validity Not Before: Dec 26 11:00:43 2025 GMT Not After : Dec 27 11:00:43 2025 GMT Subject: CN=bb052c6535729ff02447b5927af2923700e817f1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:29:d6:3a:44:ce:d1:2e:d2:07:3f:59:fc:7c: 12:75:1b:ec:d3:1f:3a:93:e0:3c:0e:e4:64:7f:90: 41:36:f2:d3:3f:f0:de:c1:cd:a7:8d:31:24:c2:e0: 77:ea:02:39:ba:65:04:60:06:bd:39:d9:13:42:bb: 5e:07:35:b7:92:18:df:ee:96:71:2d:11:ec:b2:d5: ab:d0:8b:18:3b:96:2b:a2:24:79:c3:49:ed:07:cd: 09:b6:2b:2d:ee:e7:53:26:54:d1:d8:ac:85:a0:5e: ce:47:94:bd:d1:24:26:3b:f3:b3:5d:64:79:69:60: 2f:30:72:70:37:61:83:39:de:af:d8:f4:8d:2b:3d: 49:a0:9b:16:1d:41:bb:96:ff:36:1e:dd:9c:ad:63: 91:ce:98:54:a4:9c:28:68:35:3d:dc:79:e0:20:f7: 7a:fd:9f:33:55:b6:aa:50:00:bf:6f:d4:c4:45:10: 7e:c2:d9:5f:95:0b:b1:12:51:75:63:81:0d:9c:23: 38:c8:3e:bb:7c:e9:51:b1:46:88:d6:5c:5b:89:b3: cc:5f:fb:9b:17:bc:c1:0e:e7:61:54:41:0a:1d:f1: 73:3e:b2:f8:47:8a:55:98:80:10:d4:5d:f0:ff:34: 73:d1:d6:ad:c0:62:40:47:e8:3c:b3:37:d3:8b:4c: 79:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:05:2C:65:35:72:9F:F0:24:47:B5:92:7A:F2:92:37:00:E8:17:F1 X509v3 Authority Key Identifier: keyid:70:CB:96:54:3F:7E:19:57:23:E6:D1:22:C2:94:78:BF:DD:A0:3E:CC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cMuWVD9-GVcj5tEiwpR4v92gPsw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/b7e4ac-8508-4d6b-a2bc-274cd6caa3f3/1/cMuWVD9-GVcj5tEiwpR4v92gPsw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/b7e4ac-8508-4d6b-a2bc-274cd6caa3f3/1/cMuWVD9-GVcj5tEiwpR4v92gPsw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 82:ca:8c:34:cd:ff:ff:59:0f:a4:62:fb:6c:c1:d6:39:6a:3d: b7:c8:58:84:f1:49:c7:41:de:3c:68:d5:b2:f1:f4:1d:ee:4c: 90:a4:9d:28:9a:f7:bf:fb:20:91:9c:cf:21:f2:2a:34:d8:a4: b4:1f:7d:31:79:9b:e2:6f:b5:95:dd:81:f2:6c:3a:57:4b:57: 2e:dc:52:69:e7:aa:07:35:47:72:61:5b:50:66:71:f2:a4:19: dc:d4:4a:c9:ab:26:24:5a:40:8b:57:34:19:58:79:89:4a:c4: 33:e0:67:b9:46:aa:f0:54:a7:e3:45:22:44:24:63:39:6a:d6: 59:50:6a:a8:e1:a0:a2:24:87:35:17:31:c6:e8:8f:75:49:0c: b4:ae:17:46:f9:e2:c7:87:d3:39:b4:c5:47:18:9f:8d:ff:04: 3a:be:10:62:e6:8e:b1:86:3b:2a:9a:7f:60:44:8a:c1:cd:5c: 86:6d:90:5b:be:b9:b1:52:b3:20:b9:74:74:ba:f4:b8:b2:6f: 01:66:7c:5d:6e:4a:1c:64:72:0f:07:0f:b1:13:3f:50:d9:21: 2d:66:06:84:ed:b4:95:21:86:48:41:a2:90:34:52:0e:f3:4e: f4:26:9f:71:96:f5:73:05:d9:2c:0b:95:e8:ff:4d:39:b0:cc: 1e:dc:bd:d9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtaUWqbug3OBeUTu/WEKjiWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcwY2I5NjU0M2Y3ZTE5NTcyM2U2ZDEyMmMyOTQ3OGJmZGRh MDNlY2MwHhcNMjUxMjI2MTEwMDQzWhcNMjUxMjI3MTEwMDQzWjAzMTEwLwYDVQQD EyhiYjA1MmM2NTM1NzI5ZmYwMjQ0N2I1OTI3YWYyOTIzNzAwZTgxN2YxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3inWOkTO0S7SBz9Z/HwSdRvs0x86 k+A8DuRkf5BBNvLTP/Dewc2njTEkwuB36gI5umUEYAa9OdkTQrteBzW3khjf7pZx LRHsstWr0IsYO5YroiR5w0ntB80Jtist7udTJlTR2KyFoF7OR5S90SQmO/OzXWR5 aWAvMHJwN2GDOd6v2PSNKz1JoJsWHUG7lv82Ht2crWORzphUpJwoaDU93HngIPd6 /Z8zVbaqUAC/b9TERRB+wtlflQuxElF1Y4ENnCM4yD67fOlRsUaI1lxbibPMX/ub F7zBDudhVEEKHfFzPrL4R4pVmIAQ1F3w/zRz0datwGJAR+g8szfTi0x5KQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLsFLGU1cp/wJEe1knrykjcA6BfxMB8GA1UdIwQY MBaAFHDLllQ/fhlXI+bRIsKUeL/doD7MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY011V1ZEOS1HVmNqNXRFaXdwUjR2OTJnUHN3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYy9iN2U0YWMtODUwOC00ZDZiLWEyYmMt Mjc0Y2Q2Y2FhM2YzLzEvY011V1ZEOS1HVmNqNXRFaXdwUjR2OTJnUHN3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYy9iN2U0YWMtODUwOC00ZDZiLWEyYmMtMjc0Y2Q2Y2FhM2Yz LzEvY011V1ZEOS1HVmNqNXRFaXdwUjR2OTJnUHN3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgsqMNM3/ /1kPpGL7bMHWOWo9t8hYhPFJx0HePGjVsvH0He5MkKSdKJr3v/sgkZzPIfIqNNik tB99MXmb4m+1ld2B8mw6V0tXLtxSaeeqBzVHcmFbUGZx8qQZ3NRKyasmJFpAi1c0 GVh5iUrEM+BnuUaq8FSn40UiRCRjOWrWWVBqqOGgoiSHNRcxxuiPdUkMtK4XRvni x4fTObTFRxifjf8EOr4QYuaOsYY7Kpp/YESKwc1chm2QW765sVKzILl0dLr0uLJv AWZ8XW5KHGRyDwcPsRM/UNkhLWYGhO20lSGGSEGikDRSDvNO9CafcZb1cwXZLAuV 6P9NObDMHty92Q== -----END CERTIFICATE-----Generated at Fri Dec 26 15:45:38 2025 by rpki-client