This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/3298e3-9a50-4cfb-84e6-d137ade166d1/1/cG1kE0-qdGKTwDhO2sA3GVDzsiQ.mft File: cG1kE0-qdGKTwDhO2sA3GVDzsiQ.mft (raw, json) Hash identifier: /skiUfBpQG+kRDhz7ZiCu3DwhCLXDs4MOrU1AbeemKI= Subject key identifier: C2:DF:50:21:AF:C6:29:8E:97:49:84:B8:FC:5C:79:24:67:30:A8:5A Authority key identifier: 70:6D:64:13:4F:AA:74:62:93:C0:38:4E:DA:C0:37:19:50:F3:B2:24 Certificate issuer: /CN=706d64134faa746293c0384edac0371950f3b224 Certificate serial: 019B37215B5DF1E5E190505AC9DE9A967C46 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cG1kE0-qdGKTwDhO2sA3GVDzsiQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/3298e3-9a50-4cfb-84e6-d137ade166d1/1/cG1kE0-qdGKTwDhO2sA3GVDzsiQ.mft Manifest number: 1786 Signing time: Fri 19 Dec 2025 15:01:31 +0000 Manifest this update: Fri 19 Dec 2025 15:01:31 +0000 Manifest next update: Sat 20 Dec 2025 15:01:31 +0000 Files and hashes: 1: BGPtN6UeNB6gxVs3merGZGk1kns.roa (hash: hrSuHlNxsE/yi+6e5xU/QtKRxyKAm/eD9FqzGlKPQGg=) 2: K97zp34OToUCQrbZPgRq8uelj_I.roa (hash: fJ0zhSoG7arl9EOrthec9ouC+q/z09fZHsqxXKN/jaE=) 3: UPgAt10tmqeiB0ExLwRVr2_cA2k.roa (hash: PAF5GVkw69ZCI0wlFe0kfCLPkukOPDOR6TAG9hbIZ1k=) 4: cG1kE0-qdGKTwDhO2sA3GVDzsiQ.crl (hash: tDWVu5KtmBeduzBxYrrLo6/zdwH763N4H5Bun3pDjEc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/3298e3-9a50-4cfb-84e6-d137ade166d1/1/cG1kE0-qdGKTwDhO2sA3GVDzsiQ.crl rsync://rpki.ripe.net/repository/DEFAULT/0d/3298e3-9a50-4cfb-84e6-d137ade166d1/1/cG1kE0-qdGKTwDhO2sA3GVDzsiQ.mft rsync://rpki.ripe.net/repository/DEFAULT/cG1kE0-qdGKTwDhO2sA3GVDzsiQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 15:01:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:37:21:5b:5d:f1:e5:e1:90:50:5a:c9:de:9a:96:7c:46 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=706d64134faa746293c0384edac0371950f3b224 Validity Not Before: Dec 19 15:01:31 2025 GMT Not After : Dec 20 15:01:31 2025 GMT Subject: CN=c2df5021afc6298e974984b8fc5c79246730a85a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:6a:5d:5c:70:6a:30:a8:cf:c3:9f:cc:43:6f: 8a:61:dd:98:39:cb:33:38:84:3d:6d:4e:27:09:38: 15:81:4a:d9:f4:e9:23:6b:cc:7d:a8:be:ad:86:a3: 0a:98:dd:1a:11:34:59:28:eb:b4:b4:38:bc:2e:d8: 43:65:67:27:55:af:0f:8b:cc:97:2c:4a:41:81:25: c8:a2:1c:df:35:69:f0:d6:1d:bd:1d:2e:74:85:ba: 47:f1:27:3a:ea:8d:4a:28:e1:9d:fd:b4:45:72:aa: a4:11:70:ef:87:b5:cb:9b:c5:6d:22:16:5a:20:66: e1:c3:fd:a2:c4:93:08:e2:4a:fb:86:8e:56:7b:68: 87:dc:45:17:91:a9:94:83:04:ac:d1:2d:cb:c5:5e: 82:61:f2:e5:5e:48:14:0e:77:f6:67:88:18:ea:aa: 3c:32:d8:f7:2d:46:06:c1:53:28:55:25:05:fe:e5: 0b:51:d8:5b:73:13:d1:db:00:32:ee:4f:f8:8d:b9: 34:64:5d:42:02:3a:65:0e:6b:dd:fe:82:4e:a3:69: d2:d0:fd:86:5e:f0:ff:0a:b8:e8:19:1f:2c:13:ac: b8:f7:4b:a9:5c:cc:22:c9:17:c8:67:bd:01:62:cc: 40:bb:a9:e2:df:56:12:0d:4b:ea:2d:0a:d4:82:16: c5:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:DF:50:21:AF:C6:29:8E:97:49:84:B8:FC:5C:79:24:67:30:A8:5A X509v3 Authority Key Identifier: keyid:70:6D:64:13:4F:AA:74:62:93:C0:38:4E:DA:C0:37:19:50:F3:B2:24 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cG1kE0-qdGKTwDhO2sA3GVDzsiQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/3298e3-9a50-4cfb-84e6-d137ade166d1/1/cG1kE0-qdGKTwDhO2sA3GVDzsiQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/3298e3-9a50-4cfb-84e6-d137ade166d1/1/cG1kE0-qdGKTwDhO2sA3GVDzsiQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 10:66:1e:5e:55:04:ca:6b:48:33:1b:5e:56:12:5e:e1:c1:3a: 45:ed:0a:4d:1a:30:1e:a2:23:3d:53:be:03:e9:e5:ce:b6:38: 8b:b9:d3:4b:b1:82:0c:4f:1c:1b:00:46:83:ba:88:57:7b:8e: 93:21:98:92:e0:f4:38:32:e2:34:5e:e0:98:e4:8e:ed:0c:45: 81:f0:7f:3e:a8:4c:fd:07:9f:1e:bd:ae:16:ff:dd:25:aa:ac: 0e:c8:47:31:72:c7:28:fe:72:7b:6c:98:ab:74:34:12:32:fd: 8b:8a:c6:30:ac:6d:8a:cc:67:bf:f3:73:ca:74:ab:ad:24:c1: 3a:26:ce:1b:28:c2:cb:09:9a:0c:6e:1a:8d:08:7d:52:74:ca: 7f:e1:9a:0c:a6:c7:89:b5:21:75:01:2b:ee:39:94:65:86:83: 31:85:77:23:2c:1d:1a:00:5b:a9:d1:62:b0:49:28:82:3e:d4: 57:3e:61:de:88:51:2c:fa:a9:38:3b:41:0c:41:17:0a:d9:58: 14:96:ae:59:ac:a9:30:71:2a:9d:b4:75:b3:71:df:c5:66:50: 2e:19:7d:67:59:b8:be:d5:b6:be:54:c8:39:11:5e:92:30:8c: b4:f2:11:45:63:66:c1:f9:f2:42:f9:74:70:e5:1a:8d:58:4e: 97:e2:52:1a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs3IVtd8eXhkFBayd6alnxGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcwNmQ2NDEzNGZhYTc0NjI5M2MwMzg0ZWRhYzAzNzE5NTBm M2IyMjQwHhcNMjUxMjE5MTUwMTMxWhcNMjUxMjIwMTUwMTMxWjAzMTEwLwYDVQQD EyhjMmRmNTAyMWFmYzYyOThlOTc0OTg0YjhmYzVjNzkyNDY3MzBhODVhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuGpdXHBqMKjPw5/MQ2+KYd2YOcsz OIQ9bU4nCTgVgUrZ9Okja8x9qL6thqMKmN0aETRZKOu0tDi8LthDZWcnVa8Pi8yX LEpBgSXIohzfNWnw1h29HS50hbpH8Sc66o1KKOGd/bRFcqqkEXDvh7XLm8VtIhZa IGbhw/2ixJMI4kr7ho5We2iH3EUXkamUgwSs0S3LxV6CYfLlXkgUDnf2Z4gY6qo8 Mtj3LUYGwVMoVSUF/uULUdhbcxPR2wAy7k/4jbk0ZF1CAjplDmvd/oJOo2nS0P2G XvD/CrjoGR8sE6y490upXMwiyRfIZ70BYsxAu6ni31YSDUvqLQrUghbFzwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMLfUCGvximOl0mEuPxceSRnMKhaMB8GA1UdIwQY MBaAFHBtZBNPqnRik8A4TtrANxlQ87IkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY0cxa0UwLXFkR0tUd0RoTzJzQTNHVkR6c2lRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZC8zMjk4ZTMtOWE1MC00Y2ZiLTg0ZTYt ZDEzN2FkZTE2NmQxLzEvY0cxa0UwLXFkR0tUd0RoTzJzQTNHVkR6c2lRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZC8zMjk4ZTMtOWE1MC00Y2ZiLTg0ZTYtZDEzN2FkZTE2NmQx LzEvY0cxa0UwLXFkR0tUd0RoTzJzQTNHVkR6c2lRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEGYeXlUE ymtIMxteVhJe4cE6Re0KTRowHqIjPVO+A+nlzrY4i7nTS7GCDE8cGwBGg7qIV3uO kyGYkuD0ODLiNF7gmOSO7QxFgfB/PqhM/QefHr2uFv/dJaqsDshHMXLHKP5ye2yY q3Q0EjL9i4rGMKxtisxnv/NzynSrrSTBOibOGyjCywmaDG4ajQh9UnTKf+GaDKbH ibUhdQEr7jmUZYaDMYV3IywdGgBbqdFisEkogj7UVz5h3ohRLPqpODtBDEEXCtlY FJauWaypMHEqnbR1s3HfxWZQLhl9Z1m4vtW2vlTIORFekjCMtPIRRWNmwfnyQvl0 cOUajVhOl+JSGg== -----END CERTIFICATE-----Generated at Fri Dec 19 21:13:04 2025 by rpki-client