This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/7766bb-bb48-49be-b21f-0a35b7ed63c7/1/cPK0H9NmFINeM_wIgdskY4s6eHs.mft File: cPK0H9NmFINeM_wIgdskY4s6eHs.mft (raw, json) Hash identifier: eIjxVN/sLugt4qzIQM9MquXdIIrIl3WBQ/ryXLJiDSY= Subject key identifier: 53:EA:70:2A:BD:58:EC:AE:C0:E6:3F:6D:7C:A5:24:7F:BE:2B:45:18 Authority key identifier: 70:F2:B4:1F:D3:66:14:83:5E:33:FC:08:81:DB:24:63:8B:3A:78:7B Certificate issuer: /CN=70f2b41fd36614835e33fc0881db24638b3a787b Certificate serial: 019B341F992419E7C0592CEDB54907C0CA68 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cPK0H9NmFINeM_wIgdskY4s6eHs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/7766bb-bb48-49be-b21f-0a35b7ed63c7/1/cPK0H9NmFINeM_wIgdskY4s6eHs.mft Manifest number: 1473 Signing time: Fri 19 Dec 2025 01:00:44 +0000 Manifest this update: Fri 19 Dec 2025 01:00:44 +0000 Manifest next update: Sat 20 Dec 2025 01:00:44 +0000 Files and hashes: 1: cPK0H9NmFINeM_wIgdskY4s6eHs.crl (hash: M1KMqWiQvH8yYNGmEwzrtsSY5ccbEeFas5Rd0zo0pQc=) 2: iViHONOdVrtJaKvFtb1zW5ZiFfE.roa (hash: y//sfFe0FaBOPBIT3c460VOfTsEZyJ671nHpKb/hUio=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/7766bb-bb48-49be-b21f-0a35b7ed63c7/1/cPK0H9NmFINeM_wIgdskY4s6eHs.crl rsync://rpki.ripe.net/repository/DEFAULT/1b/7766bb-bb48-49be-b21f-0a35b7ed63c7/1/cPK0H9NmFINeM_wIgdskY4s6eHs.mft rsync://rpki.ripe.net/repository/DEFAULT/cPK0H9NmFINeM_wIgdskY4s6eHs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 01:00:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:34:1f:99:24:19:e7:c0:59:2c:ed:b5:49:07:c0:ca:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=70f2b41fd36614835e33fc0881db24638b3a787b Validity Not Before: Dec 19 01:00:44 2025 GMT Not After : Dec 20 01:00:44 2025 GMT Subject: CN=53ea702abd58ecaec0e63f6d7ca5247fbe2b4518 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:ce:65:28:48:92:4f:fa:84:15:1b:e3:c9:cb: 37:d2:6c:90:53:8b:3b:ce:90:c9:07:43:7d:80:1c: 03:55:fa:9e:8d:d4:86:0f:df:d1:0d:cc:f2:c2:00: c1:6f:68:03:fc:eb:10:ba:bc:98:ce:66:96:49:b8: 11:6c:92:21:3a:90:d2:ce:3e:45:e2:e3:96:f9:90: 65:0a:96:fd:4c:8b:22:46:7f:14:93:1b:77:01:49: 53:b1:33:bd:d1:88:bf:bf:e1:a5:c0:db:40:c4:c8: 31:c5:b2:4d:24:9b:31:ac:48:2f:4d:43:f0:68:bc: 4a:74:80:8a:bf:4f:7a:10:2a:6e:92:3d:90:ab:4e: e8:a4:77:93:87:e2:d9:df:ef:5f:7f:6e:c4:39:50: d0:34:9c:a5:de:46:a2:52:84:cd:d6:e2:b5:c6:37: c5:d8:d1:57:c2:15:0b:9c:32:22:0f:3b:0b:0c:e2: 98:39:f3:ef:84:32:a9:8a:2d:f5:df:84:38:a4:06: 09:14:60:17:04:4d:c2:30:2a:16:28:7f:cc:10:18: fe:ad:a6:bc:5f:55:a2:2d:be:be:f8:ed:ab:1c:a5: ca:fd:74:7d:68:c3:bc:35:e5:6f:82:01:f4:4b:91: ce:92:98:4d:cc:25:9c:5a:a5:dd:e1:2a:93:2d:b1: 8a:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:EA:70:2A:BD:58:EC:AE:C0:E6:3F:6D:7C:A5:24:7F:BE:2B:45:18 X509v3 Authority Key Identifier: keyid:70:F2:B4:1F:D3:66:14:83:5E:33:FC:08:81:DB:24:63:8B:3A:78:7B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cPK0H9NmFINeM_wIgdskY4s6eHs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/7766bb-bb48-49be-b21f-0a35b7ed63c7/1/cPK0H9NmFINeM_wIgdskY4s6eHs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/7766bb-bb48-49be-b21f-0a35b7ed63c7/1/cPK0H9NmFINeM_wIgdskY4s6eHs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a3:71:db:89:9a:84:ef:c5:14:6d:14:c2:ad:0b:56:2b:f1:11: 6d:8b:79:a8:b4:25:99:e8:75:59:be:30:29:7c:d3:80:08:fe: ed:b6:09:c2:1b:3e:21:e9:a7:a7:d1:e9:91:1e:07:52:5f:e3: 05:da:30:e7:32:08:17:03:b0:f2:1c:9b:71:13:70:9a:dc:1b: 21:fc:0e:54:65:e3:5a:4c:8d:3c:8f:df:f1:fc:b0:88:bf:84: dd:04:3f:ae:84:5f:e4:1a:bf:27:1b:c0:5b:18:b0:b4:6e:2b: 8f:8d:df:45:62:5f:c6:8a:37:1c:c7:b4:cb:5a:5e:f7:26:e9: ee:64:53:a2:3e:72:53:c6:59:cf:d2:9b:bb:14:75:db:de:a4: c2:e6:b5:f5:0c:2b:7a:de:ae:a8:f8:64:86:86:c6:7a:48:d9: 0f:8e:e6:2a:5a:5c:00:43:99:df:38:70:ee:74:d7:f2:aa:d0: 7f:1e:56:cf:55:d2:73:89:08:47:d5:3d:86:5a:85:cc:4e:c2: 5b:81:be:3d:f7:aa:cc:f0:b8:25:fb:b8:7c:98:f3:83:86:0b: 56:e6:89:55:72:55:6e:99:bf:e2:ba:35:1e:04:e8:dd:cf:2c: a4:f6:b7:c8:91:4b:0a:80:f8:4d:dd:e9:3e:ca:48:9f:12:b7: fc:54:b7:2e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs0H5kkGefAWSzttUkHwMpoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcwZjJiNDFmZDM2NjE0ODM1ZTMzZmMwODgxZGIyNDYzOGIz YTc4N2IwHhcNMjUxMjE5MDEwMDQ0WhcNMjUxMjIwMDEwMDQ0WjAzMTEwLwYDVQQD Eyg1M2VhNzAyYWJkNThlY2FlYzBlNjNmNmQ3Y2E1MjQ3ZmJlMmI0NTE4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxM5lKEiST/qEFRvjycs30myQU4s7 zpDJB0N9gBwDVfqejdSGD9/RDczywgDBb2gD/OsQuryYzmaWSbgRbJIhOpDSzj5F 4uOW+ZBlCpb9TIsiRn8Ukxt3AUlTsTO90Yi/v+GlwNtAxMgxxbJNJJsxrEgvTUPw aLxKdICKv096ECpukj2Qq07opHeTh+LZ3+9ff27EOVDQNJyl3kaiUoTN1uK1xjfF 2NFXwhULnDIiDzsLDOKYOfPvhDKpii3134Q4pAYJFGAXBE3CMCoWKH/MEBj+raa8 X1WiLb6++O2rHKXK/XR9aMO8NeVvggH0S5HOkphNzCWcWqXd4SqTLbGK7QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFPqcCq9WOyuwOY/bXylJH++K0UYMB8GA1UdIwQY MBaAFHDytB/TZhSDXjP8CIHbJGOLOnh7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY1BLMEg5Tm1GSU5lTV93SWdkc2tZNHM2ZUhzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYi83NzY2YmItYmI0OC00OWJlLWIyMWYt MGEzNWI3ZWQ2M2M3LzEvY1BLMEg5Tm1GSU5lTV93SWdkc2tZNHM2ZUhzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYi83NzY2YmItYmI0OC00OWJlLWIyMWYtMGEzNWI3ZWQ2M2M3 LzEvY1BLMEg5Tm1GSU5lTV93SWdkc2tZNHM2ZUhzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAo3HbiZqE 78UUbRTCrQtWK/ERbYt5qLQlmeh1Wb4wKXzTgAj+7bYJwhs+Iemnp9HpkR4HUl/j Bdow5zIIFwOw8hybcRNwmtwbIfwOVGXjWkyNPI/f8fywiL+E3QQ/roRf5Bq/JxvA WxiwtG4rj43fRWJfxoo3HMe0y1pe9ybp7mRToj5yU8ZZz9KbuxR1296kwua19Qwr et6uqPhkhobGekjZD47mKlpcAEOZ3zhw7nTX8qrQfx5Wz1XSc4kIR9U9hlqFzE7C W4G+PfeqzPC4Jfu4fJjzg4YLVuaJVXJVbpm/4ro1HgTo3c8spPa3yJFLCoD4Td3p PspInxK3/FS3Lg== -----END CERTIFICATE-----Generated at Fri Dec 19 10:40:46 2025 by rpki-client