This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/ca46fb-3734-4a92-87cb-65f12b2e7970/1/cT5FABqFXik4GRnXmdzLbBGQtaw.mft File: cT5FABqFXik4GRnXmdzLbBGQtaw.mft (raw, json) Hash identifier: g5xffp1XCvwtqEzLHa91DHhhNBo+uAY8ULjCptuxQg4= Subject key identifier: 40:9C:F4:57:D0:8E:70:AC:1D:7F:7B:50:5B:89:F9:2B:07:29:B4:91 Authority key identifier: 71:3E:45:00:1A:85:5E:29:38:19:19:D7:99:DC:CB:6C:11:90:B5:AC Certificate issuer: /CN=713e45001a855e29381919d799dccb6c1190b5ac Certificate serial: 019B34C66EC4BFB81E26B86FE2613883D480 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cT5FABqFXik4GRnXmdzLbBGQtaw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/ca46fb-3734-4a92-87cb-65f12b2e7970/1/cT5FABqFXik4GRnXmdzLbBGQtaw.mft Manifest number: 0AB6 Signing time: Fri 19 Dec 2025 04:02:58 +0000 Manifest this update: Fri 19 Dec 2025 04:02:58 +0000 Manifest next update: Sat 20 Dec 2025 04:02:58 +0000 Files and hashes: 1: cT5FABqFXik4GRnXmdzLbBGQtaw.crl (hash: 3KfmBqKToNyrCSflIxVO4Lp31gut+SVDali0iCIWqgg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/ca46fb-3734-4a92-87cb-65f12b2e7970/1/cT5FABqFXik4GRnXmdzLbBGQtaw.crl rsync://rpki.ripe.net/repository/DEFAULT/2c/ca46fb-3734-4a92-87cb-65f12b2e7970/1/cT5FABqFXik4GRnXmdzLbBGQtaw.mft rsync://rpki.ripe.net/repository/DEFAULT/cT5FABqFXik4GRnXmdzLbBGQtaw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 04:02:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:34:c6:6e:c4:bf:b8:1e:26:b8:6f:e2:61:38:83:d4:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=713e45001a855e29381919d799dccb6c1190b5ac Validity Not Before: Dec 19 04:02:58 2025 GMT Not After : Dec 20 04:02:58 2025 GMT Subject: CN=409cf457d08e70ac1d7f7b505b89f92b0729b491 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:66:32:9a:1b:02:55:25:13:93:28:c9:b0:19: 5c:d1:06:b5:64:64:d1:b3:7d:6b:35:88:7b:c6:0a: 72:9c:8f:82:43:b8:df:c0:42:d4:b6:dc:e7:5b:bc: 60:97:ab:53:a4:68:b8:9c:05:17:12:f2:e1:d4:aa: 84:0e:32:62:09:7c:16:d1:e8:7d:c2:f6:6d:ec:c1: f5:d6:1d:de:ab:59:6f:82:c3:55:e0:64:ed:1d:12: f3:da:3d:01:2f:ff:6b:06:84:70:3b:5a:55:b1:52: 60:40:07:7b:58:b2:85:13:50:33:f6:ac:bf:34:e2: 08:70:85:d3:8b:7e:ea:d2:69:00:8e:bb:91:96:f9: 73:e3:98:da:43:ed:0d:d3:ad:33:9c:e0:44:ec:ec: 3b:23:3a:3d:94:1f:4c:01:48:57:be:a3:a8:7e:e2: e4:ef:bf:cb:bf:24:db:29:63:8c:f6:05:63:68:9d: 8a:de:f2:b7:93:2c:dd:9a:28:89:7a:5c:79:08:28: 58:1f:98:b1:f0:5c:49:e5:d6:a9:1d:a8:e3:a8:41: d1:34:b9:61:7a:08:70:71:07:6b:b9:dd:52:18:3c: b4:f7:70:af:4c:38:09:7f:ca:b9:0c:45:23:15:34: ae:49:60:da:0b:52:0d:5e:ce:0d:2b:86:78:a8:09: 73:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:9C:F4:57:D0:8E:70:AC:1D:7F:7B:50:5B:89:F9:2B:07:29:B4:91 X509v3 Authority Key Identifier: keyid:71:3E:45:00:1A:85:5E:29:38:19:19:D7:99:DC:CB:6C:11:90:B5:AC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cT5FABqFXik4GRnXmdzLbBGQtaw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/ca46fb-3734-4a92-87cb-65f12b2e7970/1/cT5FABqFXik4GRnXmdzLbBGQtaw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/ca46fb-3734-4a92-87cb-65f12b2e7970/1/cT5FABqFXik4GRnXmdzLbBGQtaw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3e:74:a8:39:38:54:82:ea:c1:70:b7:c2:2e:57:f0:8c:0e:c1: 1f:3f:8a:dc:55:cc:74:e0:11:ae:fd:ed:a9:6c:94:6c:ee:a7: ab:d3:80:09:bb:d1:fe:c8:4a:78:56:28:f4:a3:8e:1e:be:e0: a3:b9:84:57:44:ca:ed:26:84:00:19:b6:ae:16:4f:fc:72:49: e4:c0:64:6b:87:4e:d0:ef:41:7a:34:21:45:19:4e:b0:3f:fa: 78:d4:ee:6b:c2:3d:ba:9d:a1:d5:c0:70:eb:c0:ea:96:e2:8d: 1f:d2:09:22:6c:80:e9:7d:5e:3f:b0:14:4e:24:01:19:49:80: 3f:23:f9:1c:d9:8d:4d:f7:00:be:3b:2d:17:f1:4c:50:0d:f9: 88:e8:3a:5d:85:2c:8f:01:cd:26:62:c8:bf:58:18:ce:fe:57: 08:bb:ef:4d:b0:80:72:12:b7:b1:6e:74:c2:44:c5:a9:0c:e0: 58:5f:1d:42:29:b0:36:6b:e1:d0:ed:b6:6e:1e:87:ea:29:4e: a0:b0:48:0a:20:9b:e6:8b:60:22:34:87:f2:0e:20:6d:30:4b: 37:dd:4f:7e:ff:3a:99:10:48:d7:f1:d3:46:9f:88:70:0d:c3: a6:b4:b7:5e:1a:f2:bd:23:8f:00:be:bf:af:02:e2:8d:c6:9c: ae:a2:4a:5c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs0xm7Ev7geJrhv4mE4g9SAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcxM2U0NTAwMWE4NTVlMjkzODE5MTlkNzk5ZGNjYjZjMTE5 MGI1YWMwHhcNMjUxMjE5MDQwMjU4WhcNMjUxMjIwMDQwMjU4WjAzMTEwLwYDVQQD Eyg0MDljZjQ1N2QwOGU3MGFjMWQ3ZjdiNTA1Yjg5ZjkyYjA3MjliNDkxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs2YymhsCVSUTkyjJsBlc0Qa1ZGTR s31rNYh7xgpynI+CQ7jfwELUttznW7xgl6tTpGi4nAUXEvLh1KqEDjJiCXwW0eh9 wvZt7MH11h3eq1lvgsNV4GTtHRLz2j0BL/9rBoRwO1pVsVJgQAd7WLKFE1Az9qy/ NOIIcIXTi37q0mkAjruRlvlz45jaQ+0N060znOBE7Ow7Izo9lB9MAUhXvqOofuLk 77/LvyTbKWOM9gVjaJ2K3vK3kyzdmiiJelx5CChYH5ix8FxJ5dapHajjqEHRNLlh eghwcQdrud1SGDy093CvTDgJf8q5DEUjFTSuSWDaC1INXs4NK4Z4qAlzrQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFECc9FfQjnCsHX97UFuJ+SsHKbSRMB8GA1UdIwQY MBaAFHE+RQAahV4pOBkZ15ncy2wRkLWsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY1Q1RkFCcUZYaWs0R1JuWG1kekxiQkdRdGF3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYy9jYTQ2ZmItMzczNC00YTkyLTg3Y2It NjVmMTJiMmU3OTcwLzEvY1Q1RkFCcUZYaWs0R1JuWG1kekxiQkdRdGF3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYy9jYTQ2ZmItMzczNC00YTkyLTg3Y2ItNjVmMTJiMmU3OTcw LzEvY1Q1RkFCcUZYaWs0R1JuWG1kekxiQkdRdGF3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPnSoOThU gurBcLfCLlfwjA7BHz+K3FXMdOARrv3tqWyUbO6nq9OACbvR/shKeFYo9KOOHr7g o7mEV0TK7SaEABm2rhZP/HJJ5MBka4dO0O9BejQhRRlOsD/6eNTua8I9up2h1cBw 68DqluKNH9IJImyA6X1eP7AUTiQBGUmAPyP5HNmNTfcAvjstF/FMUA35iOg6XYUs jwHNJmLIv1gYzv5XCLvvTbCAchK3sW50wkTFqQzgWF8dQimwNmvh0O22bh6H6ilO oLBICiCb5otgIjSH8g4gbTBLN91Pfv86mRBI1/HTRp+IcA3DprS3XhryvSOPAL6/ rwLijcacrqJKXA== -----END CERTIFICATE-----Generated at Fri Dec 19 14:33:15 2025 by rpki-client