This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/fe71b6-6aaa-4bd4-8661-6998ab7edf7a/1/cFUm-asN0naCP8Hw66od5jt9ZWw.mft File: cFUm-asN0naCP8Hw66od5jt9ZWw.mft (raw, json) Hash identifier: XE0ldkI2OeBZasasp7T2fImj9TXg6/DGfMsXnvKLOi8= Subject key identifier: 5B:53:F1:10:B1:FA:7D:EB:C1:95:18:85:0F:AB:17:89:F6:2E:8F:43 Authority key identifier: 70:55:26:F9:AB:0D:D2:76:82:3F:C1:F0:EB:AA:1D:E6:3B:7D:65:6C Certificate issuer: /CN=705526f9ab0dd276823fc1f0ebaa1de63b7d656c Certificate serial: 019B4136AEDE3EB8447224FE3BA44385763A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cFUm-asN0naCP8Hw66od5jt9ZWw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/fe71b6-6aaa-4bd4-8661-6998ab7edf7a/1/cFUm-asN0naCP8Hw66od5jt9ZWw.mft Manifest number: 05F3 Signing time: Sun 21 Dec 2025 14:01:01 +0000 Manifest this update: Sun 21 Dec 2025 14:01:01 +0000 Manifest next update: Mon 22 Dec 2025 14:01:01 +0000 Files and hashes: 1: cFUm-asN0naCP8Hw66od5jt9ZWw.crl (hash: 01EDqImljLkUeL5PazAB9nA+WodBBilBlSFZiAJXnFw=) 2: yETJRCulpX8WNZcfOAFqy72Srf8.roa (hash: mwiJGcKb2MAwWuqaRGZUo2KeH/efjz418z+bxhMih0M=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/fe71b6-6aaa-4bd4-8661-6998ab7edf7a/1/cFUm-asN0naCP8Hw66od5jt9ZWw.crl rsync://rpki.ripe.net/repository/DEFAULT/32/fe71b6-6aaa-4bd4-8661-6998ab7edf7a/1/cFUm-asN0naCP8Hw66od5jt9ZWw.mft rsync://rpki.ripe.net/repository/DEFAULT/cFUm-asN0naCP8Hw66od5jt9ZWw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 13:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:41:36:ae:de:3e:b8:44:72:24:fe:3b:a4:43:85:76:3a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=705526f9ab0dd276823fc1f0ebaa1de63b7d656c Validity Not Before: Dec 21 14:01:01 2025 GMT Not After : Dec 22 14:01:01 2025 GMT Subject: CN=5b53f110b1fa7debc19518850fab1789f62e8f43 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:5c:17:94:54:b7:e2:51:a9:96:3b:6c:d0:cc: e7:6f:17:42:85:4d:ae:54:e3:2a:8f:4a:79:b9:dc: f3:87:01:d8:39:f1:a8:39:9b:e0:d0:31:eb:3b:e3: bb:2b:f9:f6:87:32:bd:22:a7:ee:13:e8:cd:18:fb: 07:45:77:94:12:e9:7e:ba:bc:0c:60:91:ab:8d:37: 59:bf:b8:20:2f:9b:6a:9a:05:99:79:3b:19:ce:c5: be:39:f8:47:72:df:12:78:a0:6b:99:a5:27:6c:bf: af:2c:9f:24:e4:13:df:61:00:67:8d:fe:fe:37:35: f9:3e:ae:dd:73:bc:5e:a3:50:d8:ff:9f:a6:46:39: 48:e0:fb:aa:46:01:2b:6f:6f:4c:50:bb:58:68:d8: 2a:81:2b:31:3d:b9:85:ef:ad:46:c9:dc:de:54:cc: c9:8b:71:d1:c1:83:3f:34:0b:b2:34:b8:7e:13:a7: 4a:cf:bc:b0:5b:6d:a4:02:62:bd:25:e5:f1:d9:77: d2:25:56:9a:b0:fa:9d:29:10:2f:03:3b:7a:21:b5: 43:ac:65:7c:35:2e:0d:43:00:c4:5d:91:de:45:a3: c7:fc:bf:4d:9d:af:c2:69:65:17:aa:7d:e6:b3:6f: c5:23:db:98:7a:c5:b3:c4:13:4c:25:11:b4:dd:64: 5f:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:53:F1:10:B1:FA:7D:EB:C1:95:18:85:0F:AB:17:89:F6:2E:8F:43 X509v3 Authority Key Identifier: keyid:70:55:26:F9:AB:0D:D2:76:82:3F:C1:F0:EB:AA:1D:E6:3B:7D:65:6C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cFUm-asN0naCP8Hw66od5jt9ZWw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/fe71b6-6aaa-4bd4-8661-6998ab7edf7a/1/cFUm-asN0naCP8Hw66od5jt9ZWw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/32/fe71b6-6aaa-4bd4-8661-6998ab7edf7a/1/cFUm-asN0naCP8Hw66od5jt9ZWw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c9:73:ca:8d:02:6e:ed:44:da:7c:e4:dd:05:4c:f3:7e:24:0b: 24:03:c7:c5:cf:ef:a7:22:28:76:35:64:3a:50:e8:28:bf:b5: 4f:58:7a:15:77:06:2b:24:f6:fc:72:79:39:25:ca:21:e3:9c: 93:e2:2f:06:19:fc:00:f0:31:2b:bc:9e:30:b3:fc:c5:ea:4a: 66:f6:a3:59:12:7a:ea:43:73:a4:fb:91:7b:9c:bc:8d:35:d6: 15:dd:f3:4f:c3:1f:cd:ff:90:ca:de:db:16:4e:97:15:9c:19: 7a:40:83:05:83:e4:c9:7f:68:58:43:3b:77:d9:dc:41:73:2e: a6:0e:a6:48:6d:9e:ee:87:8e:f6:20:83:a0:6b:d0:33:c2:23: 81:d2:c3:46:cf:9b:cc:c5:81:67:8a:48:8c:c9:fe:89:8c:33: 26:0a:2b:70:59:0c:f6:ce:24:56:4a:ec:22:69:5a:cb:b3:44: a7:18:8d:f0:a7:5e:8e:9b:7e:9b:5f:ec:01:1d:aa:91:19:58: 6a:61:1a:06:df:07:3f:4f:d0:47:2a:cd:6a:82:44:7b:9f:16: 61:52:15:53:b4:d2:e5:0a:68:9d:c8:03:66:c8:a3:41:a1:10: d8:07:17:75:7a:32:5b:21:b5:df:67:e8:58:db:42:91:59:51: 88:db:c6:93 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtBNq7ePrhEciT+O6RDhXY6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcwNTUyNmY5YWIwZGQyNzY4MjNmYzFmMGViYWExZGU2M2I3 ZDY1NmMwHhcNMjUxMjIxMTQwMTAxWhcNMjUxMjIyMTQwMTAxWjAzMTEwLwYDVQQD Eyg1YjUzZjExMGIxZmE3ZGViYzE5NTE4ODUwZmFiMTc4OWY2MmU4ZjQzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz1wXlFS34lGpljts0MznbxdChU2u VOMqj0p5udzzhwHYOfGoOZvg0DHrO+O7K/n2hzK9IqfuE+jNGPsHRXeUEul+urwM YJGrjTdZv7ggL5tqmgWZeTsZzsW+OfhHct8SeKBrmaUnbL+vLJ8k5BPfYQBnjf7+ NzX5Pq7dc7xeo1DY/5+mRjlI4PuqRgErb29MULtYaNgqgSsxPbmF761GydzeVMzJ i3HRwYM/NAuyNLh+E6dKz7ywW22kAmK9JeXx2XfSJVaasPqdKRAvAzt6IbVDrGV8 NS4NQwDEXZHeRaPH/L9Nna/CaWUXqn3ms2/FI9uYesWzxBNMJRG03WRf2QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFtT8RCx+n3rwZUYhQ+rF4n2Lo9DMB8GA1UdIwQY MBaAFHBVJvmrDdJ2gj/B8OuqHeY7fWVsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY0ZVbS1hc04wbmFDUDhIdzY2b2Q1anQ5Wld3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMi9mZTcxYjYtNmFhYS00YmQ0LTg2NjEt Njk5OGFiN2VkZjdhLzEvY0ZVbS1hc04wbmFDUDhIdzY2b2Q1anQ5Wld3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMi9mZTcxYjYtNmFhYS00YmQ0LTg2NjEtNjk5OGFiN2VkZjdh LzEvY0ZVbS1hc04wbmFDUDhIdzY2b2Q1anQ5Wld3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAyXPKjQJu 7UTafOTdBUzzfiQLJAPHxc/vpyIodjVkOlDoKL+1T1h6FXcGKyT2/HJ5OSXKIeOc k+IvBhn8APAxK7yeMLP8xepKZvajWRJ66kNzpPuRe5y8jTXWFd3zT8Mfzf+Qyt7b Fk6XFZwZekCDBYPkyX9oWEM7d9ncQXMupg6mSG2e7oeO9iCDoGvQM8IjgdLDRs+b zMWBZ4pIjMn+iYwzJgorcFkM9s4kVkrsImlay7NEpxiN8Kdejpt+m1/sAR2qkRlY amEaBt8HP0/QRyrNaoJEe58WYVIVU7TS5QponcgDZsijQaEQ2AcXdXoyWyG132fo WNtCkVlRiNvGkw== -----END CERTIFICATE-----Generated at Sun Dec 21 17:27:38 2025 by rpki-client