This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/21bbf7-cbf2-4198-afcc-4be4dd6cd2ec/1/Cs89zOoxfjXnBUGkiyWGpNMr2Uw.mft File: Cs89zOoxfjXnBUGkiyWGpNMr2Uw.mft (raw, json) Hash identifier: CwkKL2LRdyBMZzIr41e3F9lCjjYuo0m3fqXY1cFyoZo= Subject key identifier: FA:BF:9D:91:93:E7:40:13:C0:6A:0F:80:0D:A8:CE:F6:DE:E2:AA:2A Authority key identifier: 0A:CF:3D:CC:EA:31:7E:35:E7:05:41:A4:8B:25:86:A4:D3:2B:D9:4C Certificate issuer: /CN=0acf3dccea317e35e70541a48b2586a4d32bd94c Certificate serial: 019B3C7DFF6068183B64F0BE0345FF091392 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Cs89zOoxfjXnBUGkiyWGpNMr2Uw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/21bbf7-cbf2-4198-afcc-4be4dd6cd2ec/1/Cs89zOoxfjXnBUGkiyWGpNMr2Uw.mft Manifest number: 07FE Signing time: Sat 20 Dec 2025 16:00:48 +0000 Manifest this update: Sat 20 Dec 2025 16:00:48 +0000 Manifest next update: Sun 21 Dec 2025 16:00:48 +0000 Files and hashes: 1: Cs89zOoxfjXnBUGkiyWGpNMr2Uw.crl (hash: m3v5O6p+GLv+KSVQ3Zq1ig90JCGpS6VXUMk0bQ382mE=) 2: PveX9WXxCJj9e18L9V5LXcSlf4I.roa (hash: Gc7ehRUF/Atprjxx4oQFsUeoQdkyLlSY7XL+/gL4J0s=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/21bbf7-cbf2-4198-afcc-4be4dd6cd2ec/1/Cs89zOoxfjXnBUGkiyWGpNMr2Uw.crl rsync://rpki.ripe.net/repository/DEFAULT/e3/21bbf7-cbf2-4198-afcc-4be4dd6cd2ec/1/Cs89zOoxfjXnBUGkiyWGpNMr2Uw.mft rsync://rpki.ripe.net/repository/DEFAULT/Cs89zOoxfjXnBUGkiyWGpNMr2Uw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 10:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:7d:ff:60:68:18:3b:64:f0:be:03:45:ff:09:13:92 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0acf3dccea317e35e70541a48b2586a4d32bd94c Validity Not Before: Dec 20 16:00:48 2025 GMT Not After : Dec 21 16:00:48 2025 GMT Subject: CN=fabf9d9193e74013c06a0f800da8cef6dee2aa2a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:3c:10:6c:65:9f:65:19:73:6e:c1:0c:66:c1: c6:25:33:26:3d:4d:11:5d:95:89:88:f8:27:7d:f9: 12:79:41:8d:11:52:7a:16:5c:f9:02:9a:ef:33:6a: 3d:59:25:98:e7:22:bf:67:9d:b9:7c:e5:f3:7b:79: f7:dc:09:a3:08:15:1a:45:93:c6:8b:56:98:a0:b3: 21:0a:2b:33:fd:1c:b2:24:ad:35:0b:20:88:f8:3c: 33:34:9a:20:bf:17:ec:43:54:83:ea:38:ac:ee:37: 4b:b0:d1:cb:d0:a0:af:d6:b7:90:f1:16:f6:ff:62: 18:60:09:1b:c7:f7:f5:30:ec:6b:8d:c8:76:df:d0: 10:c5:b6:cd:e0:47:46:6e:21:af:ff:21:b3:a4:ce: 39:dc:97:13:a8:6d:64:9b:88:a0:1a:af:dc:23:13: ae:24:ed:63:c9:23:63:50:21:0b:16:b1:1e:85:32: 0d:8e:ce:5c:12:69:1a:75:33:95:4c:ec:62:e1:cb: c6:d8:69:b3:66:97:f6:b2:ba:f9:9f:0b:79:15:6c: bf:ce:16:0c:8b:b6:56:3a:db:7d:a7:dd:9b:d5:10: 93:5b:03:2d:8a:66:60:d7:46:3a:6f:ee:b3:6c:e2: 9e:bd:34:46:a3:dc:02:0d:ed:cc:8b:5f:f9:7a:47: 0a:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:BF:9D:91:93:E7:40:13:C0:6A:0F:80:0D:A8:CE:F6:DE:E2:AA:2A X509v3 Authority Key Identifier: keyid:0A:CF:3D:CC:EA:31:7E:35:E7:05:41:A4:8B:25:86:A4:D3:2B:D9:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cs89zOoxfjXnBUGkiyWGpNMr2Uw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/21bbf7-cbf2-4198-afcc-4be4dd6cd2ec/1/Cs89zOoxfjXnBUGkiyWGpNMr2Uw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/21bbf7-cbf2-4198-afcc-4be4dd6cd2ec/1/Cs89zOoxfjXnBUGkiyWGpNMr2Uw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 65:8b:a5:70:f5:2a:e4:5e:f9:4d:3d:42:5a:15:0a:67:19:49: 21:cf:96:e5:ec:4e:51:ad:07:cc:df:cf:e1:1b:65:3a:2c:c3: fd:d3:2f:9e:88:9c:f0:48:37:39:46:11:63:ba:db:47:bd:44: c3:ca:7d:54:44:07:7e:d0:cc:42:ee:ef:44:af:ea:d5:80:aa: a4:4c:ea:8e:3e:73:33:65:67:de:c0:f1:8b:a1:34:d8:30:fe: e5:01:3b:60:4c:2d:a6:a9:24:e4:31:54:1e:f7:44:94:66:5d: 3f:d2:5b:b5:69:7c:ca:49:31:b8:c4:61:42:58:fa:0c:23:0e: 93:0e:11:bb:ed:63:0a:87:bd:2d:bf:77:dd:d1:34:bd:c5:72: f0:da:e9:41:10:23:19:a7:54:90:87:8b:ff:12:4f:9d:b6:c7: 41:55:89:2f:6c:2d:08:32:ec:6b:b5:60:71:c9:b0:45:1f:09: 33:87:4f:7d:3b:80:df:b8:a9:d2:83:53:99:df:ee:ba:48:59: b8:7f:ba:ab:4b:69:ca:4f:3e:a6:b7:ad:a1:db:91:64:df:af: 38:d7:f1:eb:de:bd:15:5e:e6:5c:82:9f:99:1e:d6:31:75:5c: de:4a:13:55:4b:ae:3d:27:2f:d2:a6:f1:b1:5a:63:02:1c:aa: 34:e7:ad:72 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs8ff9gaBg7ZPC+A0X/CROSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBhY2YzZGNjZWEzMTdlMzVlNzA1NDFhNDhiMjU4NmE0ZDMy YmQ5NGMwHhcNMjUxMjIwMTYwMDQ4WhcNMjUxMjIxMTYwMDQ4WjAzMTEwLwYDVQQD EyhmYWJmOWQ5MTkzZTc0MDEzYzA2YTBmODAwZGE4Y2VmNmRlZTJhYTJhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArDwQbGWfZRlzbsEMZsHGJTMmPU0R XZWJiPgnffkSeUGNEVJ6Flz5AprvM2o9WSWY5yK/Z525fOXze3n33AmjCBUaRZPG i1aYoLMhCisz/RyyJK01CyCI+DwzNJogvxfsQ1SD6jis7jdLsNHL0KCv1reQ8Rb2 /2IYYAkbx/f1MOxrjch239AQxbbN4EdGbiGv/yGzpM453JcTqG1km4igGq/cIxOu JO1jySNjUCELFrEehTINjs5cEmkadTOVTOxi4cvG2GmzZpf2srr5nwt5FWy/zhYM i7ZWOtt9p92b1RCTWwMtimZg10Y6b+6zbOKevTRGo9wCDe3Mi1/5ekcKswIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPq/nZGT50ATwGoPgA2ozvbe4qoqMB8GA1UdIwQY MBaAFArPPczqMX415wVBpIslhqTTK9lMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ3M4OXpPb3hmalhuQlVHa2l5V0dwTk1yMlV3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMy8yMWJiZjctY2JmMi00MTk4LWFmY2Mt NGJlNGRkNmNkMmVjLzEvQ3M4OXpPb3hmalhuQlVHa2l5V0dwTk1yMlV3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMy8yMWJiZjctY2JmMi00MTk4LWFmY2MtNGJlNGRkNmNkMmVj LzEvQ3M4OXpPb3hmalhuQlVHa2l5V0dwTk1yMlV3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZYulcPUq 5F75TT1CWhUKZxlJIc+W5exOUa0HzN/P4RtlOizD/dMvnoic8Eg3OUYRY7rbR71E w8p9VEQHftDMQu7vRK/q1YCqpEzqjj5zM2Vn3sDxi6E02DD+5QE7YEwtpqkk5DFU HvdElGZdP9JbtWl8ykkxuMRhQlj6DCMOkw4Ru+1jCoe9Lb933dE0vcVy8NrpQRAj GadUkIeL/xJPnbbHQVWJL2wtCDLsa7VgccmwRR8JM4dPfTuA37ip0oNTmd/uukhZ uH+6q0tpyk8+pretoduRZN+vONfx6969FV7mXIKfmR7WMXVc3koTVUuuPScv0qbx sVpjAhyqNOetcg== -----END CERTIFICATE-----Generated at Sat Dec 20 18:46:14 2025 by rpki-client