This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/065dba-eef9-480d-a880-9175c8408e5e/1/cFngOgjhdBb2ZUYweYg0mZG4Si4.mft File: cFngOgjhdBb2ZUYweYg0mZG4Si4.mft (raw, json) Hash identifier: wstX4xqUzZs8YHGGiiry0TGi1tQvkdClrdtN6tbHU+k= Subject key identifier: E3:01:6C:34:9A:29:E0:D6:41:EA:03:66:94:5C:D8:C1:9B:DA:98:8D Authority key identifier: 70:59:E0:3A:08:E1:74:16:F6:65:46:30:79:88:34:99:91:B8:4A:2E Certificate issuer: /CN=7059e03a08e17416f66546307988349991b84a2e Certificate serial: 019B311F05F32908628830BAF4FA3C96F54E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cFngOgjhdBb2ZUYweYg0mZG4Si4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/065dba-eef9-480d-a880-9175c8408e5e/1/cFngOgjhdBb2ZUYweYg0mZG4Si4.mft Manifest number: 1783 Signing time: Thu 18 Dec 2025 11:01:15 +0000 Manifest this update: Thu 18 Dec 2025 11:01:15 +0000 Manifest next update: Fri 19 Dec 2025 11:01:15 +0000 Files and hashes: 1: _he88goyBeeMgMEtYhNW51-yKRw.roa (hash: bVhU/YoxDPNh8/p9ZgLTw8sJFTf7HVdMt0ALSYqAQ2c=) 2: cFngOgjhdBb2ZUYweYg0mZG4Si4.crl (hash: lX+pJ8oV+xa8B4RO67qJXuYtzaMMMyC37N3nZOQu+xw=) 3: sUWqfK8lQ00leYnkVH10Ne2J_pg.roa (hash: /8L8fVSDnCy6dVHFrdbjnwTMBA89vKnVyPdJKfPn3Kk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/065dba-eef9-480d-a880-9175c8408e5e/1/cFngOgjhdBb2ZUYweYg0mZG4Si4.crl rsync://rpki.ripe.net/repository/DEFAULT/05/065dba-eef9-480d-a880-9175c8408e5e/1/cFngOgjhdBb2ZUYweYg0mZG4Si4.mft rsync://rpki.ripe.net/repository/DEFAULT/cFngOgjhdBb2ZUYweYg0mZG4Si4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 04:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:31:1f:05:f3:29:08:62:88:30:ba:f4:fa:3c:96:f5:4e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7059e03a08e17416f66546307988349991b84a2e Validity Not Before: Dec 18 11:01:15 2025 GMT Not After : Dec 19 11:01:15 2025 GMT Subject: CN=e3016c349a29e0d641ea0366945cd8c19bda988d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:9c:02:ca:7a:f3:d7:06:d6:dd:ba:d4:40:aa: 8e:00:5c:23:c7:12:b9:66:df:44:86:30:87:8e:43: ac:81:88:9e:8b:7c:73:12:a4:3c:02:95:b1:87:dd: ab:18:2c:86:03:2e:c7:ad:14:13:fa:97:e2:77:f2: cf:fd:13:02:c6:f4:51:b7:9f:62:48:7d:d5:0f:2a: d6:dd:ba:70:88:91:ac:6f:28:c0:09:23:73:ba:1a: 58:f8:4f:44:a7:86:ff:e8:1a:9d:07:cf:db:20:81: 58:6e:ac:88:8a:06:67:73:59:12:67:6e:1b:a5:5c: c9:39:9f:af:62:72:31:05:9d:ae:e6:6f:00:d8:fc: 55:46:28:f8:fc:65:98:35:81:54:91:5c:4b:4e:ae: 7b:cb:74:7e:d9:21:82:c2:89:0f:2a:a8:4d:e0:af: e1:06:cb:0d:15:c2:4f:ee:4e:98:14:4e:0b:47:f3: 5f:da:27:0b:76:73:1b:88:a3:46:0d:9f:8a:35:db: fe:9e:85:cb:9f:d4:87:1b:51:91:2a:92:82:15:b1: 88:0c:35:bc:bb:9c:c4:54:b7:bd:72:a2:c3:b0:a9: f9:2b:37:5e:89:85:77:e0:83:c9:c4:82:5b:bf:3e: 50:ec:ad:0b:12:d8:f8:65:5f:5d:56:af:da:d2:23: 5e:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:01:6C:34:9A:29:E0:D6:41:EA:03:66:94:5C:D8:C1:9B:DA:98:8D X509v3 Authority Key Identifier: keyid:70:59:E0:3A:08:E1:74:16:F6:65:46:30:79:88:34:99:91:B8:4A:2E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cFngOgjhdBb2ZUYweYg0mZG4Si4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/065dba-eef9-480d-a880-9175c8408e5e/1/cFngOgjhdBb2ZUYweYg0mZG4Si4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/05/065dba-eef9-480d-a880-9175c8408e5e/1/cFngOgjhdBb2ZUYweYg0mZG4Si4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 65:d5:74:4a:8c:d6:7f:41:37:3c:4d:5d:83:90:cc:0d:b9:50: c9:ba:87:35:dd:a8:fb:99:e7:fa:7b:e0:c2:2e:78:37:c5:bd: c3:e2:56:8b:9d:ad:94:41:ff:9f:4f:02:1d:16:e4:d8:bb:0f: 05:23:f2:ad:ab:1c:eb:54:81:26:58:99:61:a6:7f:1a:08:e4: 22:9f:b4:65:dd:a3:69:3a:c1:1c:7c:76:0a:f0:98:42:05:68: 57:5e:c2:17:3f:66:27:40:aa:d2:0b:3d:69:6a:9f:95:d0:dc: db:6c:b6:1d:4e:f3:b2:04:85:73:79:6b:0a:41:f0:a8:f8:a0: e3:18:41:bf:3e:bc:45:9c:66:69:16:30:2e:1d:b1:91:72:a2: 79:ce:f3:b9:ca:33:df:a0:13:96:0d:68:97:b4:95:51:09:3a: 37:f4:97:72:34:63:19:8d:2d:15:e7:d7:94:f6:0c:79:a9:b9: 7f:dd:a7:b6:c3:71:ac:76:ac:de:33:2a:b9:ba:93:8b:0a:f9: 61:c2:81:d2:c1:d6:8b:05:1f:6e:cd:99:8b:97:ae:7a:ed:8c: d3:bf:82:5c:12:25:e6:7a:d2:6a:8a:63:ac:99:a1:e2:23:57: 8a:ee:5d:cd:de:0f:5f:21:e1:9e:26:69:13:0c:ae:bf:dd:42: 92:87:6f:38 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsxHwXzKQhiiDC69Po8lvVOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcwNTllMDNhMDhlMTc0MTZmNjY1NDYzMDc5ODgzNDk5OTFi ODRhMmUwHhcNMjUxMjE4MTEwMTE1WhcNMjUxMjE5MTEwMTE1WjAzMTEwLwYDVQQD EyhlMzAxNmMzNDlhMjllMGQ2NDFlYTAzNjY5NDVjZDhjMTliZGE5ODhkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuJwCynrz1wbW3brUQKqOAFwjxxK5 Zt9EhjCHjkOsgYiei3xzEqQ8ApWxh92rGCyGAy7HrRQT+pfid/LP/RMCxvRRt59i SH3VDyrW3bpwiJGsbyjACSNzuhpY+E9Ep4b/6BqdB8/bIIFYbqyIigZnc1kSZ24b pVzJOZ+vYnIxBZ2u5m8A2PxVRij4/GWYNYFUkVxLTq57y3R+2SGCwokPKqhN4K/h BssNFcJP7k6YFE4LR/Nf2icLdnMbiKNGDZ+KNdv+noXLn9SHG1GRKpKCFbGIDDW8 u5zEVLe9cqLDsKn5KzdeiYV34IPJxIJbvz5Q7K0LEtj4ZV9dVq/a0iNeYwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOMBbDSaKeDWQeoDZpRc2MGb2piNMB8GA1UdIwQY MBaAFHBZ4DoI4XQW9mVGMHmINJmRuEouMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY0ZuZ09namhkQmIyWlVZd2VZZzBtWkc0U2k0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNS8wNjVkYmEtZWVmOS00ODBkLWE4ODAt OTE3NWM4NDA4ZTVlLzEvY0ZuZ09namhkQmIyWlVZd2VZZzBtWkc0U2k0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNS8wNjVkYmEtZWVmOS00ODBkLWE4ODAtOTE3NWM4NDA4ZTVl LzEvY0ZuZ09namhkQmIyWlVZd2VZZzBtWkc0U2k0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZdV0SozW f0E3PE1dg5DMDblQybqHNd2o+5nn+nvgwi54N8W9w+JWi52tlEH/n08CHRbk2LsP BSPyrasc61SBJliZYaZ/GgjkIp+0Zd2jaTrBHHx2CvCYQgVoV17CFz9mJ0Cq0gs9 aWqfldDc22y2HU7zsgSFc3lrCkHwqPig4xhBvz68RZxmaRYwLh2xkXKiec7zucoz 36ATlg1ol7SVUQk6N/SXcjRjGY0tFefXlPYMeam5f92ntsNxrHas3jMqubqTiwr5 YcKB0sHWiwUfbs2Zi5eueu2M07+CXBIl5nrSaopjrJmh4iNXiu5dzd4PXyHhniZp Ewyuv91CkodvOA== -----END CERTIFICATE-----Generated at Thu Dec 18 14:04:25 2025 by rpki-client