This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/70d450-80e4-44f9-99f3-21bc63f165f8/1/cWdSuRdHlX3M_w5x2mdPMp2DLeM.mft File: cWdSuRdHlX3M_w5x2mdPMp2DLeM.mft (raw, json) Hash identifier: t2EISqG5z4VLMI8kRIOu0J8nubotIFKKLMd9CqiTfEE= Subject key identifier: B7:1A:F2:66:83:49:B4:C3:21:44:76:7F:3D:1A:E0:13:1D:F7:90:9F Authority key identifier: 71:67:52:B9:17:47:95:7D:CC:FF:0E:71:DA:67:4F:32:9D:83:2D:E3 Certificate issuer: /CN=716752b91747957dccff0e71da674f329d832de3 Certificate serial: 019B1F86343D545137D15201F9FF7E83A6BA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cWdSuRdHlX3M_w5x2mdPMp2DLeM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/70d450-80e4-44f9-99f3-21bc63f165f8/1/cWdSuRdHlX3M_w5x2mdPMp2DLeM.mft Manifest number: 1380 Signing time: Mon 15 Dec 2025 01:00:47 +0000 Manifest this update: Mon 15 Dec 2025 01:00:47 +0000 Manifest next update: Tue 16 Dec 2025 01:00:47 +0000 Files and hashes: 1: PNXE3f7nm-ojlPdvV_1yYpzHd1o.roa (hash: TFO2XkeOQG2ZuVhhUVPTDBMBQ7rIutsnw7Dyad/B8zE=) 2: cWdSuRdHlX3M_w5x2mdPMp2DLeM.crl (hash: q4IWan8VYKyu9mrTewbnbZepGjaPg9219semcmaHnYs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/70d450-80e4-44f9-99f3-21bc63f165f8/1/cWdSuRdHlX3M_w5x2mdPMp2DLeM.crl rsync://rpki.ripe.net/repository/DEFAULT/1f/70d450-80e4-44f9-99f3-21bc63f165f8/1/cWdSuRdHlX3M_w5x2mdPMp2DLeM.mft rsync://rpki.ripe.net/repository/DEFAULT/cWdSuRdHlX3M_w5x2mdPMp2DLeM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 15 Dec 2025 23:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:1f:86:34:3d:54:51:37:d1:52:01:f9:ff:7e:83:a6:ba Signature Algorithm: sha256WithRSAEncryption Issuer: CN=716752b91747957dccff0e71da674f329d832de3 Validity Not Before: Dec 15 01:00:47 2025 GMT Not After : Dec 16 01:00:47 2025 GMT Subject: CN=b71af2668349b4c32144767f3d1ae0131df7909f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:fa:fc:e6:86:67:01:06:40:ce:b0:c5:1e:57: de:a2:84:25:85:e0:3f:0a:b9:38:76:34:e8:c2:be: dc:86:91:73:76:9e:7a:51:1a:cb:87:89:91:36:81: e2:bf:b5:ca:30:50:86:2c:d5:db:81:f3:fd:07:09: e0:b0:14:4c:d0:9a:02:97:a2:86:25:93:79:db:19: be:71:c0:21:e6:81:7a:f0:c3:46:ba:31:f3:9a:43: 13:37:eb:f7:8d:ef:89:90:a1:4b:2d:ff:f8:21:46: 50:15:7c:73:d1:57:4c:7e:63:64:54:e5:bf:86:47: 29:a1:1b:7d:15:a9:e5:a4:1f:53:d4:cf:cc:c6:9b: 23:40:38:5d:f5:b4:08:97:93:af:1e:01:ee:a9:6a: 04:e1:44:9d:10:fb:23:c3:02:76:c2:dc:af:26:53: 9d:ac:36:49:90:20:3a:87:cd:56:7a:e3:d2:ff:82: 9c:a8:a2:d2:bf:a6:2d:90:64:ef:87:71:f2:b2:e2: 20:1f:ce:59:b7:34:3f:54:4e:cc:8f:92:54:f9:6d: eb:ef:a1:f1:13:7d:d2:a1:48:3e:8d:74:b4:65:a8: e5:ff:e0:a6:1c:da:6b:79:25:34:dc:e0:32:69:08: 94:93:5f:b8:36:aa:1f:19:59:23:22:28:25:1c:71: 4c:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:1A:F2:66:83:49:B4:C3:21:44:76:7F:3D:1A:E0:13:1D:F7:90:9F X509v3 Authority Key Identifier: keyid:71:67:52:B9:17:47:95:7D:CC:FF:0E:71:DA:67:4F:32:9D:83:2D:E3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cWdSuRdHlX3M_w5x2mdPMp2DLeM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/70d450-80e4-44f9-99f3-21bc63f165f8/1/cWdSuRdHlX3M_w5x2mdPMp2DLeM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/70d450-80e4-44f9-99f3-21bc63f165f8/1/cWdSuRdHlX3M_w5x2mdPMp2DLeM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9d:fa:de:05:f8:9c:c8:07:bf:66:74:53:e9:ca:b1:90:ad:61: f4:16:32:29:ee:ab:c4:33:ce:24:c5:84:f2:78:5d:d6:a7:6c: 86:5e:3b:e4:3b:5f:e3:aa:9e:46:83:4e:f0:94:3d:5c:67:f8: 42:8a:a9:b9:9e:dc:a3:7b:ad:c7:49:3d:9e:6a:b9:5e:99:73: a6:49:34:4f:88:14:11:47:21:0c:bc:12:fa:b3:5d:ae:4e:c3: 4a:59:0c:60:60:27:44:83:d5:82:89:3a:1c:ca:6d:ea:f2:61: fb:f0:d3:f8:37:e7:e0:34:f2:f5:9d:a8:08:24:c6:1f:1d:1c: 45:ea:19:ef:d6:78:54:d9:d2:ec:5f:0c:98:15:a5:06:e4:92: b5:d9:32:23:84:b6:70:80:a8:aa:de:35:4d:f6:2e:ac:f1:c0: 3f:b3:bb:d1:31:48:0d:69:90:88:8c:15:52:31:16:50:41:39: da:0d:60:45:e3:fe:2f:5f:e6:d9:4f:9b:a7:65:a7:1b:d2:11: 54:1f:6c:f3:f3:d3:0f:38:fa:80:16:08:2a:0f:1a:7b:c1:9e: 79:e1:00:9c:dd:1b:c4:a8:a1:6b:2a:04:b9:cf:8c:f5:b3:8c: bf:53:17:22:ce:26:e5:36:75:3f:c6:e7:45:55:fe:c9:fd:26: 10:21:5f:b8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsfhjQ9VFE30VIB+f9+g6a6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcxNjc1MmI5MTc0Nzk1N2RjY2ZmMGU3MWRhNjc0ZjMyOWQ4 MzJkZTMwHhcNMjUxMjE1MDEwMDQ3WhcNMjUxMjE2MDEwMDQ3WjAzMTEwLwYDVQQD EyhiNzFhZjI2NjgzNDliNGMzMjE0NDc2N2YzZDFhZTAxMzFkZjc5MDlmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArfr85oZnAQZAzrDFHlfeooQlheA/ Crk4djTowr7chpFzdp56URrLh4mRNoHiv7XKMFCGLNXbgfP9BwngsBRM0JoCl6KG JZN52xm+ccAh5oF68MNGujHzmkMTN+v3je+JkKFLLf/4IUZQFXxz0VdMfmNkVOW/ hkcpoRt9FanlpB9T1M/MxpsjQDhd9bQIl5OvHgHuqWoE4USdEPsjwwJ2wtyvJlOd rDZJkCA6h81WeuPS/4KcqKLSv6YtkGTvh3HysuIgH85ZtzQ/VE7Mj5JU+W3r76Hx E33SoUg+jXS0Zajl/+CmHNpreSU03OAyaQiUk1+4NqofGVkjIiglHHFM8wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLca8maDSbTDIUR2fz0a4BMd95CfMB8GA1UdIwQY MBaAFHFnUrkXR5V9zP8OcdpnTzKdgy3jMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY1dkU3VSZEhsWDNNX3c1eDJtZFBNcDJETGVNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZi83MGQ0NTAtODBlNC00NGY5LTk5ZjMt MjFiYzYzZjE2NWY4LzEvY1dkU3VSZEhsWDNNX3c1eDJtZFBNcDJETGVNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xZi83MGQ0NTAtODBlNC00NGY5LTk5ZjMtMjFiYzYzZjE2NWY4 LzEvY1dkU3VSZEhsWDNNX3c1eDJtZFBNcDJETGVNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnfreBfic yAe/ZnRT6cqxkK1h9BYyKe6rxDPOJMWE8nhd1qdshl475Dtf46qeRoNO8JQ9XGf4 QoqpuZ7co3utx0k9nmq5Xplzpkk0T4gUEUchDLwS+rNdrk7DSlkMYGAnRIPVgok6 HMpt6vJh+/DT+Dfn4DTy9Z2oCCTGHx0cReoZ79Z4VNnS7F8MmBWlBuSStdkyI4S2 cICoqt41TfYurPHAP7O70TFIDWmQiIwVUjEWUEE52g1gReP+L1/m2U+bp2WnG9IR VB9s8/PTDzj6gBYIKg8ae8GeeeEAnN0bxKihayoEuc+M9bOMv1MXIs4m5TZ1P8bn RVX+yf0mECFfuA== -----END CERTIFICATE-----Generated at Mon Dec 15 04:59:20 2025 by rpki-client