This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/da1c43-1916-46ae-8491-35883af9a323/1/cDxI7UbLeUkOFmLbAcMdAtAu_-I.mft File: cDxI7UbLeUkOFmLbAcMdAtAu_-I.mft (raw, json) Hash identifier: PwFz53g55M825ZinV5wr/Dc/ARBPNRyRnWpebDURsYE= Subject key identifier: B3:4C:63:EB:A4:78:49:91:55:79:D4:15:CE:33:7A:B4:DE:CE:7C:03 Authority key identifier: 70:3C:48:ED:46:CB:79:49:0E:16:62:DB:01:C3:1D:02:D0:2E:FF:E2 Certificate issuer: /CN=703c48ed46cb79490e1662db01c31d02d02effe2 Certificate serial: 019B1D999429F91D46795B2BE7527EF90DDB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cDxI7UbLeUkOFmLbAcMdAtAu_-I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/da1c43-1916-46ae-8491-35883af9a323/1/cDxI7UbLeUkOFmLbAcMdAtAu_-I.mft Manifest number: 12BC Signing time: Sun 14 Dec 2025 16:02:42 +0000 Manifest this update: Sun 14 Dec 2025 16:02:42 +0000 Manifest next update: Mon 15 Dec 2025 16:02:42 +0000 Files and hashes: 1: PpEWGz-OwlSLlk0QHrICVTcwUWc.roa (hash: WptBbhD5BCS6QBVvLotY3hLMhEGQcn9whh44ucm6M50=) 2: cDxI7UbLeUkOFmLbAcMdAtAu_-I.crl (hash: UmaaY4J18w/IFipI7kbhIr2kW+rjvNYuBQh1u/hs7tE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/da1c43-1916-46ae-8491-35883af9a323/1/cDxI7UbLeUkOFmLbAcMdAtAu_-I.crl rsync://rpki.ripe.net/repository/DEFAULT/0d/da1c43-1916-46ae-8491-35883af9a323/1/cDxI7UbLeUkOFmLbAcMdAtAu_-I.mft rsync://rpki.ripe.net/repository/DEFAULT/cDxI7UbLeUkOFmLbAcMdAtAu_-I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 15 Dec 2025 11:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:1d:99:94:29:f9:1d:46:79:5b:2b:e7:52:7e:f9:0d:db Signature Algorithm: sha256WithRSAEncryption Issuer: CN=703c48ed46cb79490e1662db01c31d02d02effe2 Validity Not Before: Dec 14 16:02:42 2025 GMT Not After : Dec 15 16:02:42 2025 GMT Subject: CN=b34c63eba47849915579d415ce337ab4dece7c03 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:44:85:8a:36:63:bf:8f:57:5c:df:a5:a4:28: 6e:af:2d:ad:f0:80:17:08:32:66:0b:65:01:e2:fd: 1f:c2:9f:fb:10:a3:00:14:57:cf:1b:d5:e1:12:c5: 6e:45:d4:16:9c:ba:8c:e0:e8:51:50:87:5f:cd:84: 36:84:2b:84:1a:da:5e:ac:03:1a:a7:65:ee:f2:02: b8:92:20:97:19:21:53:9e:e7:93:0f:86:40:21:52: 28:95:90:80:38:d0:c0:a4:74:53:1b:45:79:6e:8a: 5f:de:11:af:28:dc:3e:15:9b:7a:00:7c:4c:ef:ba: a0:82:fc:bd:c3:6c:40:5a:8f:87:b1:9c:62:c9:88: 47:a9:66:20:c2:54:22:8c:2e:36:9d:88:ca:d4:75: aa:f4:c4:3e:fe:54:b6:d5:26:b5:0c:09:c9:6c:20: d5:1c:86:10:44:dd:09:8e:cd:fa:a6:c3:5a:f9:32: 26:d2:81:ea:5e:27:d9:d2:fe:04:61:b6:0d:51:9e: 27:62:bf:76:79:b7:5f:4c:50:5a:32:36:74:26:85: f0:da:2a:5c:07:16:75:ac:e7:5c:93:cf:4e:db:46: 03:25:e9:9b:e7:17:61:f1:30:bc:56:d3:b0:59:61: 79:73:d6:dd:c9:62:40:59:93:c7:18:1e:90:ab:56: 32:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:4C:63:EB:A4:78:49:91:55:79:D4:15:CE:33:7A:B4:DE:CE:7C:03 X509v3 Authority Key Identifier: keyid:70:3C:48:ED:46:CB:79:49:0E:16:62:DB:01:C3:1D:02:D0:2E:FF:E2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cDxI7UbLeUkOFmLbAcMdAtAu_-I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/da1c43-1916-46ae-8491-35883af9a323/1/cDxI7UbLeUkOFmLbAcMdAtAu_-I.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/da1c43-1916-46ae-8491-35883af9a323/1/cDxI7UbLeUkOFmLbAcMdAtAu_-I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 13:4e:aa:42:87:26:8f:b6:ab:ef:e4:8c:84:b4:90:74:0e:72: 7f:33:ba:93:80:96:87:fb:07:3f:d5:fa:da:30:fd:4b:90:4a: 01:d2:fe:17:83:58:8b:65:62:7a:ab:4b:71:49:87:70:27:16: 77:d5:84:b1:79:07:18:44:6e:1e:5d:11:a0:44:d0:4e:80:e3: 00:95:3b:49:bc:22:75:72:a0:91:c3:ad:6e:08:f8:8a:86:94: e6:02:28:3f:a3:ce:9e:ec:3c:a0:95:05:86:cb:79:7b:a4:0c: d4:12:20:9c:12:dc:59:2b:2c:56:8d:54:12:ca:ba:2e:f0:c9: 38:6e:b2:8f:06:76:ad:bc:1b:de:8e:54:fb:8e:8d:e6:38:45: 57:04:f4:8f:29:3c:bd:62:b9:e6:0d:7a:02:1d:f3:72:a8:c6: 44:c4:34:d1:8c:ec:e1:e7:f0:44:13:2e:b6:0c:06:a1:7c:b0: 5b:ca:36:09:68:4f:e5:23:5b:76:c9:80:be:03:e1:86:8f:a9: 3c:b9:76:89:e4:af:8c:24:f0:2f:a8:1b:e7:90:00:79:be:b3: f6:24:0a:18:d3:38:a4:e9:8a:ad:17:56:0a:5f:01:75:c0:b3: d0:68:e4:3a:7a:c7:ac:36:a9:2e:91:e2:e8:0a:b9:c3:25:ff: 4a:08:67:95 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsdmZQp+R1GeVsr51J++Q3bMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcwM2M0OGVkNDZjYjc5NDkwZTE2NjJkYjAxYzMxZDAyZDAy ZWZmZTIwHhcNMjUxMjE0MTYwMjQyWhcNMjUxMjE1MTYwMjQyWjAzMTEwLwYDVQQD EyhiMzRjNjNlYmE0Nzg0OTkxNTU3OWQ0MTVjZTMzN2FiNGRlY2U3YzAzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5ESFijZjv49XXN+lpChury2t8IAX CDJmC2UB4v0fwp/7EKMAFFfPG9XhEsVuRdQWnLqM4OhRUIdfzYQ2hCuEGtperAMa p2Xu8gK4kiCXGSFTnueTD4ZAIVIolZCAONDApHRTG0V5bopf3hGvKNw+FZt6AHxM 77qggvy9w2xAWo+HsZxiyYhHqWYgwlQijC42nYjK1HWq9MQ+/lS21Sa1DAnJbCDV HIYQRN0Jjs36psNa+TIm0oHqXifZ0v4EYbYNUZ4nYr92ebdfTFBaMjZ0JoXw2ipc BxZ1rOdck89O20YDJemb5xdh8TC8VtOwWWF5c9bdyWJAWZPHGB6Qq1YyGwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLNMY+ukeEmRVXnUFc4zerTeznwDMB8GA1UdIwQY MBaAFHA8SO1Gy3lJDhZi2wHDHQLQLv/iMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY0R4STdVYkxlVWtPRm1MYkFjTWRBdEF1Xy1JLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZC9kYTFjNDMtMTkxNi00NmFlLTg0OTEt MzU4ODNhZjlhMzIzLzEvY0R4STdVYkxlVWtPRm1MYkFjTWRBdEF1Xy1JLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZC9kYTFjNDMtMTkxNi00NmFlLTg0OTEtMzU4ODNhZjlhMzIz LzEvY0R4STdVYkxlVWtPRm1MYkFjTWRBdEF1Xy1JLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAE06qQocm j7ar7+SMhLSQdA5yfzO6k4CWh/sHP9X62jD9S5BKAdL+F4NYi2VieqtLcUmHcCcW d9WEsXkHGERuHl0RoETQToDjAJU7SbwidXKgkcOtbgj4ioaU5gIoP6POnuw8oJUF hst5e6QM1BIgnBLcWSssVo1UEsq6LvDJOG6yjwZ2rbwb3o5U+46N5jhFVwT0jyk8 vWK55g16Ah3zcqjGRMQ00Yzs4efwRBMutgwGoXywW8o2CWhP5SNbdsmAvgPhho+p PLl2ieSvjCTwL6gb55AAeb6z9iQKGNM4pOmKrRdWCl8BdcCz0GjkOnrHrDapLpHi 6Aq5wyX/SghnlQ== -----END CERTIFICATE-----Generated at Sun Dec 14 19:36:20 2025 by rpki-client