This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/f71d6f-7ea7-45fc-b1b5-3acb814904a0/1/0CfGCfr0psIq3x-MSnCgeufPLoE.mft File: 0CfGCfr0psIq3x-MSnCgeufPLoE.mft (raw, json) Hash identifier: 2KKnAhrZLMraDi2587KuUfcFGqexUbnjNa3im0PtC9Y= Subject key identifier: 30:E2:2E:74:BB:EE:4A:CE:FC:B4:38:6D:EB:C2:C1:F7:D2:CA:17:0D Authority key identifier: D0:27:C6:09:FA:F4:A6:C2:2A:DF:1F:8C:4A:70:A0:7A:E7:CF:2E:81 Certificate issuer: /CN=d027c609faf4a6c22adf1f8c4a70a07ae7cf2e81 Certificate serial: 019B4EF24A479D9C78EEB5E7ACB2767767D6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0CfGCfr0psIq3x-MSnCgeufPLoE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/f71d6f-7ea7-45fc-b1b5-3acb814904a0/1/0CfGCfr0psIq3x-MSnCgeufPLoE.mft Manifest number: 0755 Signing time: Wed 24 Dec 2025 06:01:00 +0000 Manifest this update: Wed 24 Dec 2025 06:01:00 +0000 Manifest next update: Thu 25 Dec 2025 06:01:00 +0000 Files and hashes: 1: 0CfGCfr0psIq3x-MSnCgeufPLoE.crl (hash: sYbm1YVhjyeBrAnj0wXFYn8tl9bG8kaAtHPAm6EgpNc=) 2: pV4EoMyLhIl8Wki8fRcVALT_H0c.roa (hash: wJ9IYCdBLmtOZE5zQTUngRrQwmEhQGL4Uh7Y6dIL3Jk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/f71d6f-7ea7-45fc-b1b5-3acb814904a0/1/0CfGCfr0psIq3x-MSnCgeufPLoE.crl rsync://rpki.ripe.net/repository/DEFAULT/4d/f71d6f-7ea7-45fc-b1b5-3acb814904a0/1/0CfGCfr0psIq3x-MSnCgeufPLoE.mft rsync://rpki.ripe.net/repository/DEFAULT/0CfGCfr0psIq3x-MSnCgeufPLoE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 06:01:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4e:f2:4a:47:9d:9c:78:ee:b5:e7:ac:b2:76:77:67:d6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d027c609faf4a6c22adf1f8c4a70a07ae7cf2e81 Validity Not Before: Dec 24 06:01:00 2025 GMT Not After : Dec 25 06:01:00 2025 GMT Subject: CN=30e22e74bbee4acefcb4386debc2c1f7d2ca170d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:30:90:aa:b0:36:d8:0d:ee:d5:f5:50:1c:2f: d4:a3:8c:65:49:92:14:f8:f7:d2:a1:9d:50:ea:5d: 65:2d:4f:67:37:72:c5:5d:31:01:82:57:08:c4:db: 96:a4:b7:3a:5a:8e:53:a3:1c:44:08:95:f6:a2:9d: ce:f0:ab:87:e2:eb:39:7f:d8:ea:7f:fb:2c:52:ff: a7:c7:b5:10:51:38:fb:30:d1:01:6e:df:67:d8:44: b9:b1:22:d8:b1:6a:71:38:c3:5d:e2:14:75:31:c7: 63:e4:9a:93:04:76:57:f6:88:34:69:70:ba:2d:ed: 91:af:ab:7f:5d:4a:4a:03:09:dd:98:3a:b4:19:f2: de:fc:bf:95:7e:1a:b2:a4:7a:63:0a:60:68:9e:ff: 48:7e:62:19:70:4c:da:35:f1:fa:52:f0:29:56:52: 20:26:f1:f1:f5:c4:ab:0c:5b:ad:05:f4:9e:6f:ed: 52:f9:5e:07:df:48:5e:dc:88:e8:df:90:f3:8f:e1: cc:9d:07:2f:c4:9f:81:ad:33:e2:a6:4e:a5:c0:99: 2d:2f:1e:f4:58:15:b4:09:34:19:6c:21:f5:a1:f8: 17:8e:69:98:38:b8:b2:de:17:b8:be:a3:e2:d9:d7: 69:0a:a5:78:4d:f4:9f:d7:10:b4:9d:a7:ca:b7:1f: 0b:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:E2:2E:74:BB:EE:4A:CE:FC:B4:38:6D:EB:C2:C1:F7:D2:CA:17:0D X509v3 Authority Key Identifier: keyid:D0:27:C6:09:FA:F4:A6:C2:2A:DF:1F:8C:4A:70:A0:7A:E7:CF:2E:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0CfGCfr0psIq3x-MSnCgeufPLoE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/f71d6f-7ea7-45fc-b1b5-3acb814904a0/1/0CfGCfr0psIq3x-MSnCgeufPLoE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/f71d6f-7ea7-45fc-b1b5-3acb814904a0/1/0CfGCfr0psIq3x-MSnCgeufPLoE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3b:b3:fb:c3:9b:96:2c:39:c3:ae:5f:0d:f6:69:13:2f:a0:a6: 75:25:d9:70:c0:b9:2e:00:60:bf:21:34:24:ab:70:c2:2a:e6: 65:28:6d:ea:d5:b2:7d:5e:35:ce:1f:1e:cd:55:b8:7d:36:ab: 2b:3a:87:19:28:04:8a:0e:a1:9f:80:80:21:7c:3e:60:63:19: e4:97:87:6e:86:ae:ed:52:11:ad:e2:a8:99:ae:9e:09:73:30: 32:07:06:24:6d:16:16:a7:9f:fa:f5:2d:0e:c4:8d:96:91:6a: 32:46:d8:00:41:d8:7f:32:af:1f:b2:b0:79:86:2b:91:6c:41: fa:58:76:96:f2:b6:31:2a:3f:43:cd:75:a9:43:65:64:78:9f: eb:93:20:d5:cc:c5:66:e0:05:38:82:aa:60:92:be:23:ae:4a: 8f:c0:1e:07:66:10:a6:1f:0b:f8:ad:30:b3:70:e0:e9:d0:c8: a7:e2:5f:63:54:15:31:ba:73:93:f0:34:60:26:c7:40:92:dc: 36:11:e8:16:4d:3d:8f:90:88:5f:58:3c:1a:e6:f7:a5:18:9c: 68:d3:1f:17:eb:28:e6:88:5c:36:15:e9:2d:55:6f:40:a0:b6: 77:df:99:94:22:d6:d8:f6:e3:51:b2:c6:76:09:e3:c0:a7:b3: 06:01:9a:5a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtO8kpHnZx47rXnrLJ2d2fWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQwMjdjNjA5ZmFmNGE2YzIyYWRmMWY4YzRhNzBhMDdhZTdj ZjJlODEwHhcNMjUxMjI0MDYwMTAwWhcNMjUxMjI1MDYwMTAwWjAzMTEwLwYDVQQD EygzMGUyMmU3NGJiZWU0YWNlZmNiNDM4NmRlYmMyYzFmN2QyY2ExNzBkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxzCQqrA22A3u1fVQHC/Uo4xlSZIU +PfSoZ1Q6l1lLU9nN3LFXTEBglcIxNuWpLc6Wo5ToxxECJX2op3O8KuH4us5f9jq f/ssUv+nx7UQUTj7MNEBbt9n2ES5sSLYsWpxOMNd4hR1Mcdj5JqTBHZX9og0aXC6 Le2Rr6t/XUpKAwndmDq0GfLe/L+VfhqypHpjCmBonv9IfmIZcEzaNfH6UvApVlIg JvHx9cSrDFutBfSeb+1S+V4H30he3Ijo35Dzj+HMnQcvxJ+BrTPipk6lwJktLx70 WBW0CTQZbCH1ofgXjmmYOLiy3he4vqPi2ddpCqV4TfSf1xC0nafKtx8LTQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDDiLnS77krO/LQ4bevCwffSyhcNMB8GA1UdIwQY MBaAFNAnxgn69KbCKt8fjEpwoHrnzy6BMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMENmR0NmcjBwc0lxM3gtTVNuQ2dldWZQTG9FLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZC9mNzFkNmYtN2VhNy00NWZjLWIxYjUt M2FjYjgxNDkwNGEwLzEvMENmR0NmcjBwc0lxM3gtTVNuQ2dldWZQTG9FLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80ZC9mNzFkNmYtN2VhNy00NWZjLWIxYjUtM2FjYjgxNDkwNGEw LzEvMENmR0NmcjBwc0lxM3gtTVNuQ2dldWZQTG9FLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAO7P7w5uW LDnDrl8N9mkTL6CmdSXZcMC5LgBgvyE0JKtwwirmZSht6tWyfV41zh8ezVW4fTar KzqHGSgEig6hn4CAIXw+YGMZ5JeHboau7VIRreKoma6eCXMwMgcGJG0WFqef+vUt DsSNlpFqMkbYAEHYfzKvH7KweYYrkWxB+lh2lvK2MSo/Q811qUNlZHif65Mg1czF ZuAFOIKqYJK+I65Kj8AeB2YQph8L+K0ws3Dg6dDIp+JfY1QVMbpzk/A0YCbHQJLc NhHoFk09j5CIX1g8Gub3pRicaNMfF+so5ohcNhXpLVVvQKC2d9+ZlCLW2PbjUbLG dgnjwKezBgGaWg== -----END CERTIFICATE-----Generated at Wed Dec 24 13:36:06 2025 by rpki-client