This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/3298e3-9a50-4cfb-84e6-d137ade166d1/1/cG1kE0-qdGKTwDhO2sA3GVDzsiQ.mft File: cG1kE0-qdGKTwDhO2sA3GVDzsiQ.mft (raw, json) Hash identifier: ne54CDaGHHA/NgDtXn7KjQtDMoya3C1n/+BZ0t7wgT0= Subject key identifier: CC:8F:FD:9C:4E:53:27:F3:B0:1D:86:6F:B2:84:9F:A1:5C:C2:E1:9E Authority key identifier: 70:6D:64:13:4F:AA:74:62:93:C0:38:4E:DA:C0:37:19:50:F3:B2:24 Certificate issuer: /CN=706d64134faa746293c0384edac0371950f3b224 Certificate serial: 019B1C17661C2A6A89FFE5CCD04CCD027228 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cG1kE0-qdGKTwDhO2sA3GVDzsiQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/3298e3-9a50-4cfb-84e6-d137ade166d1/1/cG1kE0-qdGKTwDhO2sA3GVDzsiQ.mft Manifest number: 1778 Signing time: Sun 14 Dec 2025 09:00:54 +0000 Manifest this update: Sun 14 Dec 2025 09:00:54 +0000 Manifest next update: Mon 15 Dec 2025 09:00:54 +0000 Files and hashes: 1: BGPtN6UeNB6gxVs3merGZGk1kns.roa (hash: hrSuHlNxsE/yi+6e5xU/QtKRxyKAm/eD9FqzGlKPQGg=) 2: K97zp34OToUCQrbZPgRq8uelj_I.roa (hash: fJ0zhSoG7arl9EOrthec9ouC+q/z09fZHsqxXKN/jaE=) 3: UPgAt10tmqeiB0ExLwRVr2_cA2k.roa (hash: PAF5GVkw69ZCI0wlFe0kfCLPkukOPDOR6TAG9hbIZ1k=) 4: cG1kE0-qdGKTwDhO2sA3GVDzsiQ.crl (hash: BSxsMoyf1VdAOYX4Tr7HdCXgBkuXJLlfbSj/oB3V8ps=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/3298e3-9a50-4cfb-84e6-d137ade166d1/1/cG1kE0-qdGKTwDhO2sA3GVDzsiQ.crl rsync://rpki.ripe.net/repository/DEFAULT/0d/3298e3-9a50-4cfb-84e6-d137ade166d1/1/cG1kE0-qdGKTwDhO2sA3GVDzsiQ.mft rsync://rpki.ripe.net/repository/DEFAULT/cG1kE0-qdGKTwDhO2sA3GVDzsiQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 15 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:1c:17:66:1c:2a:6a:89:ff:e5:cc:d0:4c:cd:02:72:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=706d64134faa746293c0384edac0371950f3b224 Validity Not Before: Dec 14 09:00:54 2025 GMT Not After : Dec 15 09:00:54 2025 GMT Subject: CN=cc8ffd9c4e5327f3b01d866fb2849fa15cc2e19e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:77:64:4a:29:9b:23:df:13:97:34:3a:db:0a: 12:60:cc:47:2c:c2:78:16:ca:da:7e:df:6d:12:97: 9f:e2:7c:31:74:70:de:bb:aa:fa:d6:e8:e9:76:af: 22:a1:f4:f0:72:65:e2:92:f9:c2:3a:98:30:05:89: ee:3e:11:96:bc:08:5e:22:9b:7a:a7:0e:2d:84:b7: d3:a1:4e:5e:db:a9:50:db:da:58:33:fb:01:ed:0a: 20:02:4d:c8:17:9a:1c:e4:99:f9:3f:e3:31:c1:ee: 19:a7:fb:71:fd:2b:49:60:d3:bb:6b:4c:79:56:48: dc:95:64:a0:71:3a:99:06:e9:b6:e3:8c:96:a4:9c: 09:9a:41:a4:af:b2:fb:2e:c9:81:5d:18:60:59:1e: b9:64:ed:49:9f:58:3c:76:c2:d0:5a:84:d4:71:69: 30:93:1d:25:37:bb:d3:12:09:56:5e:12:cf:5d:25: 48:d0:62:fd:30:50:76:b5:ac:85:f6:56:07:62:aa: e7:8f:f1:06:2f:6e:8b:56:0c:46:21:27:98:07:c3: 9e:d6:a9:c8:51:b6:1d:f3:20:84:2d:e2:c4:a7:f7: 8e:f0:38:8a:49:01:42:1f:48:3a:05:90:7c:ba:5d: e9:66:4e:81:23:d9:d0:b8:b0:e7:5e:21:c7:a9:7e: fc:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:8F:FD:9C:4E:53:27:F3:B0:1D:86:6F:B2:84:9F:A1:5C:C2:E1:9E X509v3 Authority Key Identifier: keyid:70:6D:64:13:4F:AA:74:62:93:C0:38:4E:DA:C0:37:19:50:F3:B2:24 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cG1kE0-qdGKTwDhO2sA3GVDzsiQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/3298e3-9a50-4cfb-84e6-d137ade166d1/1/cG1kE0-qdGKTwDhO2sA3GVDzsiQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/3298e3-9a50-4cfb-84e6-d137ade166d1/1/cG1kE0-qdGKTwDhO2sA3GVDzsiQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a4:29:0b:94:98:b4:db:e1:04:80:51:62:48:b8:8d:aa:08:ad: 1f:a6:c5:5d:d3:8a:cf:c0:18:dd:50:19:98:2b:7f:ac:db:a4: da:f0:c1:c9:68:e3:b7:57:24:96:1b:a3:f6:db:a9:65:01:99: 19:7f:ab:0b:80:ab:53:23:40:fc:a9:5f:5e:27:c4:cf:a8:68: 67:07:36:93:b0:bc:71:de:41:63:f1:74:73:7d:56:52:3f:80: 11:8d:5d:85:ea:f4:8e:35:6e:41:bf:7a:7b:7a:ce:db:5f:aa: 2e:ff:11:0e:1d:ce:c3:ec:35:b0:e5:bf:38:d5:77:3f:98:5a: f0:57:30:31:7e:9a:c6:79:38:40:0f:65:00:6d:f8:af:4e:5a: 83:bc:75:2a:2c:fc:50:9f:96:8d:ff:e1:e7:56:8c:cc:86:87: 5b:cb:0c:a6:32:8e:7f:ff:1f:89:a6:36:c6:45:06:4f:17:42: 05:cc:ff:8c:e9:fd:e8:5c:d3:9f:0d:ef:99:11:1e:26:bb:a7: 8e:4d:fb:2a:c6:f4:fb:4e:f5:cb:22:c8:60:62:65:f5:0a:1f: 04:22:e3:5a:c4:10:44:cb:1e:1e:a9:b5:1a:e4:45:2e:88:04: 41:3c:5b:70:0c:d5:74:8c:42:8f:c4:9a:1a:80:30:bd:cd:8c: 92:b1:63:06 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZscF2YcKmqJ/+XM0EzNAnIoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcwNmQ2NDEzNGZhYTc0NjI5M2MwMzg0ZWRhYzAzNzE5NTBm M2IyMjQwHhcNMjUxMjE0MDkwMDU0WhcNMjUxMjE1MDkwMDU0WjAzMTEwLwYDVQQD EyhjYzhmZmQ5YzRlNTMyN2YzYjAxZDg2NmZiMjg0OWZhMTVjYzJlMTllMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoHdkSimbI98TlzQ62woSYMxHLMJ4 Fsraft9tEpef4nwxdHDeu6r61ujpdq8iofTwcmXikvnCOpgwBYnuPhGWvAheIpt6 pw4thLfToU5e26lQ29pYM/sB7QogAk3IF5oc5Jn5P+Mxwe4Zp/tx/StJYNO7a0x5 VkjclWSgcTqZBum244yWpJwJmkGkr7L7LsmBXRhgWR65ZO1Jn1g8dsLQWoTUcWkw kx0lN7vTEglWXhLPXSVI0GL9MFB2tayF9lYHYqrnj/EGL26LVgxGISeYB8Oe1qnI UbYd8yCELeLEp/eO8DiKSQFCH0g6BZB8ul3pZk6BI9nQuLDnXiHHqX78aQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMyP/ZxOUyfzsB2Gb7KEn6FcwuGeMB8GA1UdIwQY MBaAFHBtZBNPqnRik8A4TtrANxlQ87IkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY0cxa0UwLXFkR0tUd0RoTzJzQTNHVkR6c2lRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZC8zMjk4ZTMtOWE1MC00Y2ZiLTg0ZTYt ZDEzN2FkZTE2NmQxLzEvY0cxa0UwLXFkR0tUd0RoTzJzQTNHVkR6c2lRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZC8zMjk4ZTMtOWE1MC00Y2ZiLTg0ZTYtZDEzN2FkZTE2NmQx LzEvY0cxa0UwLXFkR0tUd0RoTzJzQTNHVkR6c2lRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApCkLlJi0 2+EEgFFiSLiNqgitH6bFXdOKz8AY3VAZmCt/rNuk2vDByWjjt1cklhuj9tupZQGZ GX+rC4CrUyNA/KlfXifEz6hoZwc2k7C8cd5BY/F0c31WUj+AEY1dher0jjVuQb96 e3rO21+qLv8RDh3Ow+w1sOW/ONV3P5ha8FcwMX6axnk4QA9lAG34r05ag7x1Kiz8 UJ+Wjf/h51aMzIaHW8sMpjKOf/8fiaY2xkUGTxdCBcz/jOn96FzTnw3vmREeJrun jk37Ksb0+071yyLIYGJl9QofBCLjWsQQRMseHqm1GuRFLogEQTxbcAzVdIxCj8Sa GoAwvc2MkrFjBg== -----END CERTIFICATE-----Generated at Sun Dec 14 15:05:15 2025 by rpki-client