This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/f649e5-a7cb-4218-93e0-43e31800df0c/1/cKC1rKcx6nHybWPSPCLBI7K7Eg8.mft File: cKC1rKcx6nHybWPSPCLBI7K7Eg8.mft (raw, json) Hash identifier: vTsS/97b2Gv1uc9ae7e7kp//JzTBJEpr4ZEszfBScgc= Subject key identifier: 14:9D:AD:2B:AB:5A:24:7D:A6:81:8D:92:54:58:E5:75:E3:CF:D6:72 Authority key identifier: 70:A0:B5:AC:A7:31:EA:71:F2:6D:63:D2:3C:22:C1:23:B2:BB:12:0F Certificate issuer: /CN=70a0b5aca731ea71f26d63d23c22c123b2bb120f Certificate serial: 019B0DB6D6A678CE4303A934A186E1241D4B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cKC1rKcx6nHybWPSPCLBI7K7Eg8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/f649e5-a7cb-4218-93e0-43e31800df0c/1/cKC1rKcx6nHybWPSPCLBI7K7Eg8.mft Manifest number: 0AA8 Signing time: Thu 11 Dec 2025 14:00:44 +0000 Manifest this update: Thu 11 Dec 2025 14:00:44 +0000 Manifest next update: Fri 12 Dec 2025 14:00:44 +0000 Files and hashes: 1: 5K2zlrIHADlFytOUhc54zx-uCAw.roa (hash: VJ3nEApsPTUcM1XeIb75bGQ+CbjZ/H8pdnWKdP3UYOg=) 2: cKC1rKcx6nHybWPSPCLBI7K7Eg8.crl (hash: prX0136RVEJVlvNBlHqJCgnrr3jYNRSeUTeRY0YYYw4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/f649e5-a7cb-4218-93e0-43e31800df0c/1/cKC1rKcx6nHybWPSPCLBI7K7Eg8.crl rsync://rpki.ripe.net/repository/DEFAULT/18/f649e5-a7cb-4218-93e0-43e31800df0c/1/cKC1rKcx6nHybWPSPCLBI7K7Eg8.mft rsync://rpki.ripe.net/repository/DEFAULT/cKC1rKcx6nHybWPSPCLBI7K7Eg8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 14:00:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0d:b6:d6:a6:78:ce:43:03:a9:34:a1:86:e1:24:1d:4b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=70a0b5aca731ea71f26d63d23c22c123b2bb120f Validity Not Before: Dec 11 14:00:44 2025 GMT Not After : Dec 12 14:00:44 2025 GMT Subject: CN=149dad2bab5a247da6818d925458e575e3cfd672 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:25:65:fe:50:81:70:cc:13:52:f1:a1:19:39: b6:94:30:8b:4b:30:bb:39:ea:71:80:99:4b:e2:45: 81:ba:46:c4:f7:9d:26:9a:88:ff:0e:8e:ee:a8:cc: 33:d6:42:05:2d:1e:e9:16:d6:8c:ba:f1:fc:02:17: 95:f9:cd:4c:9e:0c:fa:b8:45:10:27:f8:5a:2a:4c: c9:a5:b2:bb:4d:fe:99:c0:7b:80:d1:b3:d9:f9:bc: 6a:58:df:df:c4:56:47:8a:39:96:93:5d:57:1a:39: 47:85:ab:eb:11:51:38:c6:0b:cb:f9:7b:be:31:38: 2a:2c:6c:db:01:a0:0e:d5:f6:12:47:f6:97:52:7d: 5b:44:1e:3f:83:d5:5e:7b:41:95:28:d2:f3:ae:f6: 74:39:20:5f:59:7c:53:23:75:87:80:5e:60:ef:22: 98:9d:02:95:79:4b:19:4e:0d:17:27:2b:88:62:05: ae:dc:3c:b6:94:8d:f2:91:0c:09:7b:61:b8:e3:ba: bf:b8:4c:bc:52:ea:98:65:4b:c7:51:47:23:6b:8c: 19:e6:47:46:d6:b6:20:c8:d8:be:4c:22:31:4c:a8: f9:ce:39:5a:da:a6:ca:0e:79:89:b8:64:bb:80:87: df:88:74:a7:c4:94:23:84:7c:d2:9e:d5:8c:f9:41: 45:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:9D:AD:2B:AB:5A:24:7D:A6:81:8D:92:54:58:E5:75:E3:CF:D6:72 X509v3 Authority Key Identifier: keyid:70:A0:B5:AC:A7:31:EA:71:F2:6D:63:D2:3C:22:C1:23:B2:BB:12:0F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cKC1rKcx6nHybWPSPCLBI7K7Eg8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/f649e5-a7cb-4218-93e0-43e31800df0c/1/cKC1rKcx6nHybWPSPCLBI7K7Eg8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/18/f649e5-a7cb-4218-93e0-43e31800df0c/1/cKC1rKcx6nHybWPSPCLBI7K7Eg8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 76:78:62:89:14:f0:24:99:3c:e9:b0:50:a2:6b:eb:b5:dc:af: f8:1b:72:2f:14:c8:a7:98:e8:d1:dc:1c:6a:cc:4c:a4:ce:22: 65:cb:60:db:31:70:f3:9e:2a:08:42:be:2e:29:7e:99:8d:93: 46:6a:0d:ce:30:4d:2d:08:64:a0:93:7a:0f:11:af:d8:4e:8f: 99:86:e8:d3:8c:7e:50:6d:2a:c3:28:70:77:c4:07:fa:26:a6: 13:be:93:24:65:e7:d0:ac:c9:18:12:f1:ce:26:75:f1:3c:43: 66:51:98:fb:92:e6:08:86:fb:ec:ed:a3:4b:07:9a:3a:4e:6e: 26:72:95:31:18:94:e0:f1:61:a3:16:7f:bc:5e:a9:db:d0:bd: c2:20:10:98:67:5a:68:87:79:cf:6e:47:ca:7a:77:41:e7:78: f8:64:31:e0:6f:3b:62:76:59:f6:f3:59:9b:c5:f1:ea:34:50: d5:0a:2e:ea:b8:e4:aa:3f:91:12:1d:15:d5:b4:d0:f3:88:f6: 3b:b1:15:1c:f2:ba:81:9b:e5:34:59:b1:7b:86:85:a1:37:a3: 3a:90:4a:44:c0:a8:f3:8f:70:5f:bc:e7:a5:36:e0:f1:65:f3: 53:6b:8f:b4:18:20:89:49:7a:41:b1:14:16:1e:22:6d:6b:70: 24:c0:59:8f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsNttameM5DA6k0oYbhJB1LMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcwYTBiNWFjYTczMWVhNzFmMjZkNjNkMjNjMjJjMTIzYjJi YjEyMGYwHhcNMjUxMjExMTQwMDQ0WhcNMjUxMjEyMTQwMDQ0WjAzMTEwLwYDVQQD EygxNDlkYWQyYmFiNWEyNDdkYTY4MThkOTI1NDU4ZTU3NWUzY2ZkNjcyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqyVl/lCBcMwTUvGhGTm2lDCLSzC7 OepxgJlL4kWBukbE950mmoj/Do7uqMwz1kIFLR7pFtaMuvH8AheV+c1Mngz6uEUQ J/haKkzJpbK7Tf6ZwHuA0bPZ+bxqWN/fxFZHijmWk11XGjlHhavrEVE4xgvL+Xu+ MTgqLGzbAaAO1fYSR/aXUn1bRB4/g9Vee0GVKNLzrvZ0OSBfWXxTI3WHgF5g7yKY nQKVeUsZTg0XJyuIYgWu3Dy2lI3ykQwJe2G447q/uEy8UuqYZUvHUUcja4wZ5kdG 1rYgyNi+TCIxTKj5zjla2qbKDnmJuGS7gIffiHSnxJQjhHzSntWM+UFF9wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBSdrSurWiR9poGNklRY5XXjz9ZyMB8GA1UdIwQY MBaAFHCgtaynMepx8m1j0jwiwSOyuxIPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY0tDMXJLY3g2bkh5YldQU1BDTEJJN0s3RWc4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOC9mNjQ5ZTUtYTdjYi00MjE4LTkzZTAt NDNlMzE4MDBkZjBjLzEvY0tDMXJLY3g2bkh5YldQU1BDTEJJN0s3RWc4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xOC9mNjQ5ZTUtYTdjYi00MjE4LTkzZTAtNDNlMzE4MDBkZjBj LzEvY0tDMXJLY3g2bkh5YldQU1BDTEJJN0s3RWc4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdnhiiRTw JJk86bBQomvrtdyv+BtyLxTIp5jo0dwcasxMpM4iZctg2zFw854qCEK+Lil+mY2T RmoNzjBNLQhkoJN6DxGv2E6PmYbo04x+UG0qwyhwd8QH+iamE76TJGXn0KzJGBLx ziZ18TxDZlGY+5LmCIb77O2jSweaOk5uJnKVMRiU4PFhoxZ/vF6p29C9wiAQmGda aId5z25Hynp3Qed4+GQx4G87YnZZ9vNZm8Xx6jRQ1Qou6rjkqj+REh0V1bTQ84j2 O7EVHPK6gZvlNFmxe4aFoTejOpBKRMCo849wX7znpTbg8WXzU2uPtBggiUl6QbEU Fh4ibWtwJMBZjw== -----END CERTIFICATE-----Generated at Thu Dec 11 19:24:51 2025 by rpki-client