This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/033a06-4990-45ff-b38b-2944aead9cda/1/cDeaZxPnnlmNn-qmbcoWkYjgIY0.mft File: cDeaZxPnnlmNn-qmbcoWkYjgIY0.mft (raw, json) Hash identifier: dU7P4cQOx6D4GnK7FLt8BD0FvI3DFsR48x0e4ZAAnbU= Subject key identifier: EC:0C:FF:24:E6:09:EC:7C:3B:A9:E7:AD:DB:F3:21:77:C5:BC:0D:7F Authority key identifier: 70:37:9A:67:13:E7:9E:59:8D:9F:EA:A6:6D:CA:16:91:88:E0:21:8D Certificate issuer: /CN=70379a6713e79e598d9feaa66dca169188e0218d Certificate serial: 019B6C20F37EE8F40AE90F7B6F8F8948CC9B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cDeaZxPnnlmNn-qmbcoWkYjgIY0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/033a06-4990-45ff-b38b-2944aead9cda/1/cDeaZxPnnlmNn-qmbcoWkYjgIY0.mft Manifest number: 0FA5 Signing time: Mon 29 Dec 2025 22:00:57 +0000 Manifest this update: Mon 29 Dec 2025 22:00:57 +0000 Manifest next update: Tue 30 Dec 2025 22:00:57 +0000 Files and hashes: 1: cDeaZxPnnlmNn-qmbcoWkYjgIY0.crl (hash: n+O9UOujCBdxauiH1VLjP+Ee0NdtaGHE/uS2el38UyU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/033a06-4990-45ff-b38b-2944aead9cda/1/cDeaZxPnnlmNn-qmbcoWkYjgIY0.crl rsync://rpki.ripe.net/repository/DEFAULT/26/033a06-4990-45ff-b38b-2944aead9cda/1/cDeaZxPnnlmNn-qmbcoWkYjgIY0.mft rsync://rpki.ripe.net/repository/DEFAULT/cDeaZxPnnlmNn-qmbcoWkYjgIY0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 30 Dec 2025 22:00:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:6c:20:f3:7e:e8:f4:0a:e9:0f:7b:6f:8f:89:48:cc:9b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=70379a6713e79e598d9feaa66dca169188e0218d Validity Not Before: Dec 29 22:00:57 2025 GMT Not After : Dec 30 22:00:57 2025 GMT Subject: CN=ec0cff24e609ec7c3ba9e7addbf32177c5bc0d7f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:f0:09:d6:2b:72:b9:74:91:96:9c:63:62:5a: 51:80:ff:b7:46:d9:e1:8e:8b:1f:02:eb:14:4a:8d: 7c:dc:7c:d9:44:36:50:3d:58:b7:ec:35:4e:ab:47: 0c:96:d6:19:9f:56:f9:a2:9b:c2:70:a7:b0:b2:d5: 13:6b:3b:73:ab:82:d4:e0:cd:5a:99:92:c2:e9:6b: 66:12:cd:24:3e:51:74:de:69:c9:54:bf:f2:cf:78: 2f:c0:12:21:38:ce:64:6e:48:75:e2:84:fe:70:ad: 4f:1a:55:d6:a8:b7:7c:1c:89:5a:51:81:bc:4b:cf: 62:f7:40:df:12:bd:12:32:7f:24:b6:24:bb:3e:56: 46:ba:7f:74:f9:29:eb:82:a2:b4:db:b8:fb:e1:e3: 49:84:e2:6b:94:ae:df:ea:04:08:d0:53:eb:a7:b9: 69:a7:8c:95:ff:95:d6:b6:f0:0e:24:b6:2e:75:65: ea:50:e4:25:bc:51:e8:8a:f5:0b:10:f6:a7:72:27: 18:2b:3a:a0:28:8e:44:b1:c0:55:29:3d:3f:b7:53: c3:28:21:90:20:5d:5d:4c:1c:32:1e:d3:a3:fd:e5: 0e:46:d8:86:90:51:8f:d7:cc:0b:d4:d5:75:b7:97: db:10:ab:57:2c:06:9f:59:ac:e5:60:dd:e2:9c:49: 8b:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:0C:FF:24:E6:09:EC:7C:3B:A9:E7:AD:DB:F3:21:77:C5:BC:0D:7F X509v3 Authority Key Identifier: keyid:70:37:9A:67:13:E7:9E:59:8D:9F:EA:A6:6D:CA:16:91:88:E0:21:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cDeaZxPnnlmNn-qmbcoWkYjgIY0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/033a06-4990-45ff-b38b-2944aead9cda/1/cDeaZxPnnlmNn-qmbcoWkYjgIY0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/26/033a06-4990-45ff-b38b-2944aead9cda/1/cDeaZxPnnlmNn-qmbcoWkYjgIY0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1b:d8:4a:3b:32:98:a7:4a:3a:91:a8:e4:97:99:19:a0:e5:a2: 94:c3:32:de:3d:e3:3f:69:8e:dc:c1:d2:b4:f3:09:91:c9:a1: 2d:66:bb:15:5f:d4:ad:64:14:1f:e5:57:c5:21:7f:60:bb:c8: db:7d:7a:2c:f2:ee:8b:a7:70:85:3d:64:f8:4d:0c:1d:e9:53: fa:4a:24:62:15:97:39:7c:24:88:28:a9:2c:4a:4f:36:ca:59: 5d:01:3b:f7:25:53:d7:76:0c:fb:8a:66:f4:57:a3:4d:88:4e: 77:ee:e9:35:06:ab:98:1d:36:72:ad:94:fe:2e:6f:6b:26:f5: 04:d1:ca:cb:5f:92:df:8b:60:e4:b7:e1:84:c2:e6:d2:35:6b: c9:b5:15:d2:dd:91:73:eb:ef:5b:a1:c1:40:9f:e5:40:db:40: fb:dc:1d:70:b2:8d:ba:15:48:cd:c7:fb:91:d9:f9:af:18:80: 60:47:75:ea:d4:36:50:df:5a:5b:e0:ec:da:5b:6a:65:c0:ea: 4f:3f:dd:a7:21:26:4e:d8:d2:6d:e9:4c:09:20:37:fc:e7:73: af:17:76:dd:b5:10:ec:3e:73:6d:a6:cf:35:86:cf:06:0f:d0: 4a:d6:4f:96:1b:5e:4d:24:eb:e7:af:8f:e1:1b:df:1f:e8:50: 7b:09:d2:72 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtsIPN+6PQK6Q97b4+JSMybMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcwMzc5YTY3MTNlNzllNTk4ZDlmZWFhNjZkY2ExNjkxODhl MDIxOGQwHhcNMjUxMjI5MjIwMDU3WhcNMjUxMjMwMjIwMDU3WjAzMTEwLwYDVQQD EyhlYzBjZmYyNGU2MDllYzdjM2JhOWU3YWRkYmYzMjE3N2M1YmMwZDdmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvPAJ1ityuXSRlpxjYlpRgP+3Rtnh josfAusUSo183HzZRDZQPVi37DVOq0cMltYZn1b5opvCcKewstUTaztzq4LU4M1a mZLC6WtmEs0kPlF03mnJVL/yz3gvwBIhOM5kbkh14oT+cK1PGlXWqLd8HIlaUYG8 S89i90DfEr0SMn8ktiS7PlZGun90+SnrgqK027j74eNJhOJrlK7f6gQI0FPrp7lp p4yV/5XWtvAOJLYudWXqUOQlvFHoivULEPancicYKzqgKI5EscBVKT0/t1PDKCGQ IF1dTBwyHtOj/eUORtiGkFGP18wL1NV1t5fbEKtXLAafWazlYN3inEmL8wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOwM/yTmCex8O6nnrdvzIXfFvA1/MB8GA1UdIwQY MBaAFHA3mmcT555ZjZ/qpm3KFpGI4CGNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY0RlYVp4UG5ubG1Obi1xbWJjb1drWWpnSVkwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNi8wMzNhMDYtNDk5MC00NWZmLWIzOGIt Mjk0NGFlYWQ5Y2RhLzEvY0RlYVp4UG5ubG1Obi1xbWJjb1drWWpnSVkwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNi8wMzNhMDYtNDk5MC00NWZmLWIzOGItMjk0NGFlYWQ5Y2Rh LzEvY0RlYVp4UG5ubG1Obi1xbWJjb1drWWpnSVkwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAG9hKOzKY p0o6kajkl5kZoOWilMMy3j3jP2mO3MHStPMJkcmhLWa7FV/UrWQUH+VXxSF/YLvI 2316LPLui6dwhT1k+E0MHelT+kokYhWXOXwkiCipLEpPNspZXQE79yVT13YM+4pm 9FejTYhOd+7pNQarmB02cq2U/i5vayb1BNHKy1+S34tg5LfhhMLm0jVrybUV0t2R c+vvW6HBQJ/lQNtA+9wdcLKNuhVIzcf7kdn5rxiAYEd16tQ2UN9aW+Ds2ltqZcDq Tz/dpyEmTtjSbelMCSA3/Odzrxd23bUQ7D5zbabPNYbPBg/QStZPlhteTSTr56+P 4RvfH+hQewnScg== -----END CERTIFICATE-----Generated at Tue Dec 30 06:21:08 2025 by rpki-client