This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/23dc61-7e9d-40b3-91b6-46bd7d794fb6/1/cLGQ1viaQ0zOXLjA1LOKFmne-1k.mft File: cLGQ1viaQ0zOXLjA1LOKFmne-1k.mft (raw, json) Hash identifier: nujlSvcZ/f8QnMQErSD405DY9kcLlMUhCQVp0d8Pm3M= Subject key identifier: 6C:12:01:F4:17:FC:A3:F9:98:47:A5:EB:AA:B6:1E:0D:08:FB:F0:53 Authority key identifier: 70:B1:90:D6:F8:9A:43:4C:CE:5C:B8:C0:D4:B3:8A:16:69:DE:FB:59 Certificate issuer: /CN=70b190d6f89a434cce5cb8c0d4b38a1669defb59 Certificate serial: 019AE3A8D5D3F8DEAB60323E340C2150B45F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cLGQ1viaQ0zOXLjA1LOKFmne-1k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/23dc61-7e9d-40b3-91b6-46bd7d794fb6/1/cLGQ1viaQ0zOXLjA1LOKFmne-1k.mft Manifest number: 13A3 Signing time: Wed 03 Dec 2025 10:01:23 +0000 Manifest this update: Wed 03 Dec 2025 10:01:23 +0000 Manifest next update: Thu 04 Dec 2025 10:01:23 +0000 Files and hashes: 1: Pmv8pM8XqssRTrBIwYfMIrBu2co.roa (hash: v4JQsWfqUQF/aizb6/kkH5lzSW7tzkWIy4FJVzppxAI=) 2: RQjHthweEF9-820WAQ_PQzmnlEM.roa (hash: nBMPnR4O6VvmGYLIOUpQxt7mk0o9gXGO9uw/qf7b94A=) 3: Wwvcf_CdHRy8gkrOQZUQURuseiI.roa (hash: xkPyebxyoo94+1+QeBv80ewSsDDTwjJTGd/zo7NXJ5g=) 4: cLGQ1viaQ0zOXLjA1LOKFmne-1k.crl (hash: XWimZiKijKz0o+Lr0u2JQ5e8b+7A/azMba7OBnrFfWU=) 5: lVsIvIm2siK76Iwlc1JEpwaFSPI.roa (hash: TUnieu9UOgS3hw0oaMGHMZ2FiYRQqrhlAMNc6BYERoE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/23dc61-7e9d-40b3-91b6-46bd7d794fb6/1/cLGQ1viaQ0zOXLjA1LOKFmne-1k.crl rsync://rpki.ripe.net/repository/DEFAULT/0d/23dc61-7e9d-40b3-91b6-46bd7d794fb6/1/cLGQ1viaQ0zOXLjA1LOKFmne-1k.mft rsync://rpki.ripe.net/repository/DEFAULT/cLGQ1viaQ0zOXLjA1LOKFmne-1k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 04 Dec 2025 09:57:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:e3:a8:d5:d3:f8:de:ab:60:32:3e:34:0c:21:50:b4:5f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=70b190d6f89a434cce5cb8c0d4b38a1669defb59 Validity Not Before: Dec 3 10:01:23 2025 GMT Not After : Dec 4 10:01:23 2025 GMT Subject: CN=6c1201f417fca3f99847a5ebaab61e0d08fbf053 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fd:26:8e:6a:5a:14:34:5e:31:8a:37:1e:71:83: 6f:82:a5:ae:a1:54:bf:e9:89:26:16:ae:a0:c9:45: 46:cc:eb:c6:d5:cd:9e:98:b4:63:41:5a:df:f8:41: 65:1e:3c:a9:7d:d8:41:af:2b:8e:f2:92:08:f0:ba: f0:12:d2:09:27:a0:cf:15:7d:87:c2:50:a5:0e:7c: 61:ff:10:13:1b:06:cf:3f:e7:1c:52:a0:46:68:7a: f8:f0:06:e8:61:b3:d8:b8:b2:7e:7f:8f:2f:dc:30: c2:53:75:c2:68:32:8b:38:c0:89:8f:d8:48:7a:6a: 50:72:f0:a3:9a:77:ed:fc:d7:8a:9b:30:77:be:40: 25:e5:e3:c8:67:03:91:1b:d2:93:e5:26:5e:ea:0f: b5:7d:78:f1:ff:03:31:c6:fc:38:14:90:cb:ab:fc: c2:72:3d:d6:21:6d:92:90:29:d1:8b:4e:6f:fc:b9: 3e:7c:f3:76:b3:3c:9d:1b:ba:7b:e2:5d:72:f9:26: 95:46:3b:cd:60:f2:3b:61:f0:d2:74:fc:9e:7e:68: ea:60:57:dc:aa:7a:30:db:c2:31:c9:28:54:28:59: 7d:62:ae:6f:4f:bf:04:89:8d:6f:1d:13:1f:ca:c7: 00:65:96:18:47:f1:0a:9b:eb:d2:3a:cb:d4:f1:14: 58:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:12:01:F4:17:FC:A3:F9:98:47:A5:EB:AA:B6:1E:0D:08:FB:F0:53 X509v3 Authority Key Identifier: keyid:70:B1:90:D6:F8:9A:43:4C:CE:5C:B8:C0:D4:B3:8A:16:69:DE:FB:59 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cLGQ1viaQ0zOXLjA1LOKFmne-1k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/23dc61-7e9d-40b3-91b6-46bd7d794fb6/1/cLGQ1viaQ0zOXLjA1LOKFmne-1k.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/23dc61-7e9d-40b3-91b6-46bd7d794fb6/1/cLGQ1viaQ0zOXLjA1LOKFmne-1k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 52:76:28:c2:a4:cd:8c:d2:72:79:79:0c:ea:f2:80:bf:43:01: 32:34:81:cf:b4:3b:dc:15:b8:af:b4:cb:9c:89:75:57:c4:84: 6b:e0:a7:23:53:50:ca:fc:3a:8f:f1:61:11:d1:0c:22:98:fa: 9a:84:97:db:57:b2:1f:a0:ce:59:3d:d9:65:43:aa:ba:a2:68: 3a:e0:d4:7c:80:7c:71:7b:4a:87:7b:1c:c4:48:2c:6c:5e:ee: 3c:a6:e7:04:9b:4c:e8:87:5e:69:28:36:94:11:3e:45:6b:f3: fb:97:bf:40:45:4d:85:d6:d1:aa:fe:ba:f5:30:8b:f2:07:f1: f1:21:44:a3:cb:6e:01:a5:ac:99:35:7d:ef:c0:69:c4:de:38: 59:15:12:1e:f0:03:89:6d:f7:3f:00:8d:3e:bb:21:ca:a9:eb: 00:04:e6:c8:c6:c7:92:be:71:13:80:f2:20:5d:0f:d5:bf:e7: 64:6a:8f:56:d7:d5:dc:2e:21:3e:4b:3a:f2:62:60:ec:f5:98: fb:25:b9:4a:62:78:61:fa:65:a2:1f:e9:ff:d8:7d:8e:78:44: a7:e5:5a:fc:a1:f5:e4:c1:77:33:46:8f:b9:3d:a0:a3:b6:a8: 8d:af:ef:90:5d:ac:a5:dc:76:58:24:dd:a7:94:ed:da:cd:ae: 48:1c:dd:18 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrjqNXT+N6rYDI+NAwhULRfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcwYjE5MGQ2Zjg5YTQzNGNjZTVjYjhjMGQ0YjM4YTE2Njlk ZWZiNTkwHhcNMjUxMjAzMTAwMTIzWhcNMjUxMjA0MTAwMTIzWjAzMTEwLwYDVQQD Eyg2YzEyMDFmNDE3ZmNhM2Y5OTg0N2E1ZWJhYWI2MWUwZDA4ZmJmMDUzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA/SaOaloUNF4xijcecYNvgqWuoVS/ 6YkmFq6gyUVGzOvG1c2emLRjQVrf+EFlHjypfdhBryuO8pII8LrwEtIJJ6DPFX2H wlClDnxh/xATGwbPP+ccUqBGaHr48AboYbPYuLJ+f48v3DDCU3XCaDKLOMCJj9hI empQcvCjmnft/NeKmzB3vkAl5ePIZwORG9KT5SZe6g+1fXjx/wMxxvw4FJDLq/zC cj3WIW2SkCnRi05v/Lk+fPN2szydG7p74l1y+SaVRjvNYPI7YfDSdPyefmjqYFfc qnow28IxyShUKFl9Yq5vT78EiY1vHRMfyscAZZYYR/EKm+vSOsvU8RRYiQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGwSAfQX/KP5mEel66q2Hg0I+/BTMB8GA1UdIwQY MBaAFHCxkNb4mkNMzly4wNSzihZp3vtZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY0xHUTF2aWFRMHpPWExqQTFMT0tGbW5lLTFrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZC8yM2RjNjEtN2U5ZC00MGIzLTkxYjYt NDZiZDdkNzk0ZmI2LzEvY0xHUTF2aWFRMHpPWExqQTFMT0tGbW5lLTFrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZC8yM2RjNjEtN2U5ZC00MGIzLTkxYjYtNDZiZDdkNzk0ZmI2 LzEvY0xHUTF2aWFRMHpPWExqQTFMT0tGbW5lLTFrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUnYowqTN jNJyeXkM6vKAv0MBMjSBz7Q73BW4r7TLnIl1V8SEa+CnI1NQyvw6j/FhEdEMIpj6 moSX21eyH6DOWT3ZZUOquqJoOuDUfIB8cXtKh3scxEgsbF7uPKbnBJtM6IdeaSg2 lBE+RWvz+5e/QEVNhdbRqv669TCL8gfx8SFEo8tuAaWsmTV978BpxN44WRUSHvAD iW33PwCNPrshyqnrAATmyMbHkr5xE4DyIF0P1b/nZGqPVtfV3C4hPks68mJg7PWY +yW5SmJ4Yfploh/p/9h9jnhEp+Va/KH15MF3M0aPuT2go7aoja/vkF2spdx2WCTd p5Tt2s2uSBzdGA== -----END CERTIFICATE-----Generated at Wed Dec 3 12:45:54 2025 by rpki-client