This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/f86007-a964-4d1f-835d-70602756cc8d/1/cWhC3EOYNmNaXJ7WwKSVs-Y0SgM.mft File: cWhC3EOYNmNaXJ7WwKSVs-Y0SgM.mft (raw, json) Hash identifier: R3Bh6eiX4CyKbk1bR90OnGz6y2/iiVwYRiov/6bbvtk= Subject key identifier: FB:C3:14:07:4F:3F:04:6B:F3:97:D3:C2:1A:E5:E4:C4:2C:07:13:91 Authority key identifier: 71:68:42:DC:43:98:36:63:5A:5C:9E:D6:C0:A4:95:B3:E6:34:4A:03 Certificate issuer: /CN=716842dc439836635a5c9ed6c0a495b3e6344a03 Certificate serial: 019B4F28EFA143B9F523AC927971B40E985B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cWhC3EOYNmNaXJ7WwKSVs-Y0SgM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/f86007-a964-4d1f-835d-70602756cc8d/1/cWhC3EOYNmNaXJ7WwKSVs-Y0SgM.mft Manifest number: 0776 Signing time: Wed 24 Dec 2025 07:00:41 +0000 Manifest this update: Wed 24 Dec 2025 07:00:41 +0000 Manifest next update: Thu 25 Dec 2025 07:00:41 +0000 Files and hashes: 1: 2eV3LLHue0F4_ix9uAQjG0RjeyM.roa (hash: voDescMFunJFQQ5TLKb+tVFSLAofvJuHvYtHn/Yjp+c=) 2: cWhC3EOYNmNaXJ7WwKSVs-Y0SgM.crl (hash: RAJOoVMPZpuG3aj2u8oJsHh/3OFBaDXKO8xhUX/JiIo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/f86007-a964-4d1f-835d-70602756cc8d/1/cWhC3EOYNmNaXJ7WwKSVs-Y0SgM.crl rsync://rpki.ripe.net/repository/DEFAULT/a6/f86007-a964-4d1f-835d-70602756cc8d/1/cWhC3EOYNmNaXJ7WwKSVs-Y0SgM.mft rsync://rpki.ripe.net/repository/DEFAULT/cWhC3EOYNmNaXJ7WwKSVs-Y0SgM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4f:28:ef:a1:43:b9:f5:23:ac:92:79:71:b4:0e:98:5b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=716842dc439836635a5c9ed6c0a495b3e6344a03 Validity Not Before: Dec 24 07:00:41 2025 GMT Not After : Dec 25 07:00:41 2025 GMT Subject: CN=fbc314074f3f046bf397d3c21ae5e4c42c071391 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:46:f3:4a:7e:97:63:89:08:8a:fb:c0:4e:36: a3:2c:e0:b4:aa:04:23:f0:fa:ed:93:06:9b:56:ab: e0:fd:3c:04:be:d6:2b:5c:9f:9e:cb:79:2f:70:47: 87:cb:18:9b:c8:db:e8:54:83:66:06:e9:ae:cd:9b: cb:0e:c9:ae:b4:d9:67:7b:a9:bf:62:cc:4a:33:dd: df:0c:3b:25:93:5d:60:eb:79:20:e1:ec:0d:a4:96: 38:7d:90:58:bc:64:04:0b:16:14:eb:54:8b:42:00: 67:b7:11:9e:b6:36:f0:4f:63:92:9f:b2:0a:e8:18: 37:a1:cd:1d:e3:aa:f9:c6:2e:df:42:23:30:e4:54: 70:c7:30:07:d8:d6:33:cf:20:e5:ab:85:09:62:a5: 8b:09:23:25:59:1d:59:d4:a4:b3:dc:b9:a6:6c:93: 09:9d:c0:b0:da:23:fc:aa:48:cd:ff:0f:67:62:5c: 8c:82:91:4a:6c:07:45:0d:33:de:23:01:05:5e:19: c7:c1:01:99:1a:5f:13:fa:52:1d:66:da:87:d2:95: 48:35:8b:a6:11:03:a7:64:2a:e3:8b:5e:04:8f:f7: 25:0b:9f:75:0b:d3:83:a4:96:a5:1b:95:a1:bf:03: c7:0e:34:c9:0e:a7:1a:96:49:3e:f3:cc:90:fc:9c: 88:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:C3:14:07:4F:3F:04:6B:F3:97:D3:C2:1A:E5:E4:C4:2C:07:13:91 X509v3 Authority Key Identifier: keyid:71:68:42:DC:43:98:36:63:5A:5C:9E:D6:C0:A4:95:B3:E6:34:4A:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cWhC3EOYNmNaXJ7WwKSVs-Y0SgM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/f86007-a964-4d1f-835d-70602756cc8d/1/cWhC3EOYNmNaXJ7WwKSVs-Y0SgM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/f86007-a964-4d1f-835d-70602756cc8d/1/cWhC3EOYNmNaXJ7WwKSVs-Y0SgM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 21:87:de:0a:5b:4d:d9:50:b4:0a:bb:7a:a5:23:a2:b1:d7:6f: 7e:6a:77:20:98:0d:b0:6d:74:f0:ca:35:f6:94:7f:7b:bd:38: 12:86:ea:94:bc:c7:18:1e:35:af:21:0d:02:5f:97:d4:34:e6: db:ed:ed:e4:cc:58:d1:87:dd:ea:b6:64:d4:aa:83:96:3e:a0: 66:13:49:85:64:8d:be:31:0f:93:fa:8d:4b:f9:97:d1:ab:7a: b7:4f:c8:59:5b:37:5f:04:ee:ca:c0:0c:37:55:0f:86:fe:66: 61:9d:24:5c:60:cc:6e:59:58:1c:58:0a:ae:69:30:63:cc:8b: f2:90:c0:17:ac:66:b2:98:71:07:24:ee:21:a9:03:27:c8:d3: ed:98:6a:62:90:32:00:9c:84:5c:e9:74:34:0f:a0:e0:f6:d0: e6:0f:ba:83:33:8e:d4:87:ec:a6:15:25:3e:44:40:e2:80:36: cc:4c:aa:56:9c:3b:fb:1a:ee:4e:3a:1c:f2:74:11:05:16:90: 7b:38:39:c4:89:d2:4d:c4:da:5d:72:52:55:13:3d:f9:94:0b: 8a:04:61:2c:91:d3:e8:0c:f4:c5:04:e7:f8:8c:e8:84:68:d8: e3:08:99:2f:70:24:74:ec:e7:85:d5:cd:ec:0e:1e:5c:6c:f0: 50:fb:1a:52 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtPKO+hQ7n1I6ySeXG0DphbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcxNjg0MmRjNDM5ODM2NjM1YTVjOWVkNmMwYTQ5NWIzZTYz NDRhMDMwHhcNMjUxMjI0MDcwMDQxWhcNMjUxMjI1MDcwMDQxWjAzMTEwLwYDVQQD EyhmYmMzMTQwNzRmM2YwNDZiZjM5N2QzYzIxYWU1ZTRjNDJjMDcxMzkxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7UbzSn6XY4kIivvATjajLOC0qgQj 8PrtkwabVqvg/TwEvtYrXJ+ey3kvcEeHyxibyNvoVINmBumuzZvLDsmutNlne6m/ YsxKM93fDDslk11g63kg4ewNpJY4fZBYvGQECxYU61SLQgBntxGetjbwT2OSn7IK 6Bg3oc0d46r5xi7fQiMw5FRwxzAH2NYzzyDlq4UJYqWLCSMlWR1Z1KSz3LmmbJMJ ncCw2iP8qkjN/w9nYlyMgpFKbAdFDTPeIwEFXhnHwQGZGl8T+lIdZtqH0pVINYum EQOnZCrji14Ej/clC591C9ODpJalG5WhvwPHDjTJDqcalkk+88yQ/JyIAQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPvDFAdPPwRr85fTwhrl5MQsBxORMB8GA1UdIwQY MBaAFHFoQtxDmDZjWlye1sCklbPmNEoDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY1doQzNFT1lObU5hWEo3V3dLU1ZzLVkwU2dNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNi9mODYwMDctYTk2NC00ZDFmLTgzNWQt NzA2MDI3NTZjYzhkLzEvY1doQzNFT1lObU5hWEo3V3dLU1ZzLVkwU2dNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNi9mODYwMDctYTk2NC00ZDFmLTgzNWQtNzA2MDI3NTZjYzhk LzEvY1doQzNFT1lObU5hWEo3V3dLU1ZzLVkwU2dNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIYfeCltN 2VC0Crt6pSOisddvfmp3IJgNsG108Mo19pR/e704EobqlLzHGB41ryENAl+X1DTm 2+3t5MxY0Yfd6rZk1KqDlj6gZhNJhWSNvjEPk/qNS/mX0at6t0/IWVs3XwTuysAM N1UPhv5mYZ0kXGDMbllYHFgKrmkwY8yL8pDAF6xmsphxByTuIakDJ8jT7ZhqYpAy AJyEXOl0NA+g4PbQ5g+6gzOO1IfsphUlPkRA4oA2zEyqVpw7+xruTjoc8nQRBRaQ ezg5xInSTcTaXXJSVRM9+ZQLigRhLJHT6Az0xQTn+IzohGjY4wiZL3AkdOznhdXN 7A4eXGzwUPsaUg== -----END CERTIFICATE-----Generated at Wed Dec 24 08:46:38 2025 by rpki-client