This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/477c86-c7d6-4e37-bff6-a0072bac9f48/1/cms1Dp9PElni-cYJsi5l-9GGIGs.mft File: cms1Dp9PElni-cYJsi5l-9GGIGs.mft (raw, json) Hash identifier: oXfdeYGaimcqRZp1BF5FYVaDD2M6H8KHhqvIcpz3ex8= Subject key identifier: 3F:17:7E:1C:22:7E:79:7A:5D:BC:73:42:BA:B9:D5:22:CE:C8:83:8C Authority key identifier: 72:6B:35:0E:9F:4F:12:59:E2:F9:C6:09:B2:2E:65:FB:D1:86:20:6B Certificate issuer: /CN=726b350e9f4f1259e2f9c609b22e65fbd186206b Certificate serial: 019B08C78BE2EBD58049B72FEE6570435F99 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cms1Dp9PElni-cYJsi5l-9GGIGs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/477c86-c7d6-4e37-bff6-a0072bac9f48/1/cms1Dp9PElni-cYJsi5l-9GGIGs.mft Manifest number: 0A66 Signing time: Wed 10 Dec 2025 15:00:53 +0000 Manifest this update: Wed 10 Dec 2025 15:00:53 +0000 Manifest next update: Thu 11 Dec 2025 15:00:53 +0000 Files and hashes: 1: CgBNGq2vvpW1xEBq_J8TTjYOWu0.roa (hash: CfZUCA05oFbMMXS/ui8XIHr2JUyCob7FGarrcgeEvE0=) 2: _DE8jBpnVZ36FaQjKKqWbHiWbvo.roa (hash: nj3mkL3pbPWWGWLOVhi9o9i9dXTzVhaJgzjUgFTiKuo=) 3: cms1Dp9PElni-cYJsi5l-9GGIGs.crl (hash: 00mcE4UKoNbhDuxOr9P+vLOrNZKXxUBtbJPEYBbfLo4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/477c86-c7d6-4e37-bff6-a0072bac9f48/1/cms1Dp9PElni-cYJsi5l-9GGIGs.crl rsync://rpki.ripe.net/repository/DEFAULT/2a/477c86-c7d6-4e37-bff6-a0072bac9f48/1/cms1Dp9PElni-cYJsi5l-9GGIGs.mft rsync://rpki.ripe.net/repository/DEFAULT/cms1Dp9PElni-cYJsi5l-9GGIGs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 11 Dec 2025 10:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:08:c7:8b:e2:eb:d5:80:49:b7:2f:ee:65:70:43:5f:99 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=726b350e9f4f1259e2f9c609b22e65fbd186206b Validity Not Before: Dec 10 15:00:53 2025 GMT Not After : Dec 11 15:00:53 2025 GMT Subject: CN=3f177e1c227e797a5dbc7342bab9d522cec8838c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:c0:57:c7:f4:5a:18:fe:61:17:3c:f1:2e:e9: 7a:63:bc:4e:3b:e4:74:1d:85:00:15:d9:7c:b1:d4: 88:73:09:ec:5b:8e:43:88:d3:3b:50:c8:30:a0:a7: 16:27:20:b0:9a:e0:b3:52:12:38:0f:f3:f8:f2:9b: 2e:e8:b2:06:fc:6c:86:03:2f:37:6d:51:22:76:03: 4b:3b:49:bd:cb:09:cf:d7:d0:c0:1f:f6:9a:b2:0a: cf:27:e9:e8:2c:6d:f5:b4:d5:b3:46:f2:c1:38:85: 62:0b:8d:58:4b:d6:67:e7:58:72:59:42:fe:49:26: ed:2d:09:a0:bd:bb:70:75:14:b2:83:65:ab:34:85: b1:4f:ac:a6:01:62:a7:bb:7c:fe:84:20:7a:14:4c: 5f:0c:25:35:cf:65:26:95:d2:65:11:13:0d:53:6d: 99:d5:6f:6e:aa:57:5c:dd:a6:3f:d4:b6:3b:c3:32: f1:36:fc:fc:d5:d4:35:e4:e3:84:5f:38:94:b7:f1: 14:1d:f8:7b:16:64:9e:9e:92:41:8d:a2:f7:a8:f0: b2:4d:4e:5e:a1:89:6c:f4:c9:0e:f2:76:0f:14:8e: 4e:f1:05:63:c8:03:fe:06:a9:2c:3a:ca:78:9b:a9: 17:f4:e2:47:2d:3d:24:0b:cc:c1:e0:d1:4a:a5:9f: 6e:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:17:7E:1C:22:7E:79:7A:5D:BC:73:42:BA:B9:D5:22:CE:C8:83:8C X509v3 Authority Key Identifier: keyid:72:6B:35:0E:9F:4F:12:59:E2:F9:C6:09:B2:2E:65:FB:D1:86:20:6B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cms1Dp9PElni-cYJsi5l-9GGIGs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/477c86-c7d6-4e37-bff6-a0072bac9f48/1/cms1Dp9PElni-cYJsi5l-9GGIGs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/477c86-c7d6-4e37-bff6-a0072bac9f48/1/cms1Dp9PElni-cYJsi5l-9GGIGs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5f:8a:24:66:14:37:1a:6b:d7:dd:b7:b3:ba:5e:2d:5a:44:e7: f6:ea:9b:92:87:c4:54:9c:c2:d1:6c:28:9a:63:11:7f:c4:f8: 81:3d:d2:23:fe:8d:e0:95:cc:59:fe:50:14:1c:48:0a:a9:c2: 94:5f:c2:3f:f8:1e:23:4b:9e:19:d2:f0:83:9e:6c:6a:88:4e: 05:70:84:70:68:29:b6:b6:d4:e2:ee:34:d1:5f:29:80:66:97: d8:d2:f0:b5:a1:77:41:b1:78:8e:16:d9:ef:02:26:71:60:c9: 35:97:aa:cb:5c:c3:ef:0c:81:91:4d:c3:67:05:f3:d2:dc:e3: 67:9e:9f:44:88:ad:dc:9b:2e:cd:2e:aa:5b:bb:02:9a:13:23: a6:97:e0:1c:91:e2:85:8d:88:56:d7:c0:b1:21:b8:ae:a0:63: c0:dd:bf:32:23:0e:cc:bf:75:ae:a6:35:7b:5e:2f:9b:32:fb: 64:79:74:5d:4d:6b:8f:14:af:ac:4d:b9:ce:37:46:02:50:43: 77:d6:e4:0b:8c:63:ea:db:68:8d:d0:4e:bd:58:56:c3:b9:0b: fc:7d:1b:3f:e4:21:97:88:7f:ac:de:8a:70:30:e6:5a:f5:36: 72:71:2a:06:5b:45:63:29:cd:94:9c:0c:30:95:7e:15:74:9e: 00:fd:eb:4b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsIx4vi69WASbcv7mVwQ1+ZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcyNmIzNTBlOWY0ZjEyNTllMmY5YzYwOWIyMmU2NWZiZDE4 NjIwNmIwHhcNMjUxMjEwMTUwMDUzWhcNMjUxMjExMTUwMDUzWjAzMTEwLwYDVQQD EygzZjE3N2UxYzIyN2U3OTdhNWRiYzczNDJiYWI5ZDUyMmNlYzg4MzhjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4sBXx/RaGP5hFzzxLul6Y7xOO+R0 HYUAFdl8sdSIcwnsW45DiNM7UMgwoKcWJyCwmuCzUhI4D/P48psu6LIG/GyGAy83 bVEidgNLO0m9ywnP19DAH/aasgrPJ+noLG31tNWzRvLBOIViC41YS9Zn51hyWUL+ SSbtLQmgvbtwdRSyg2WrNIWxT6ymAWKnu3z+hCB6FExfDCU1z2UmldJlERMNU22Z 1W9uqldc3aY/1LY7wzLxNvz81dQ15OOEXziUt/EUHfh7FmSenpJBjaL3qPCyTU5e oYls9MkO8nYPFI5O8QVjyAP+BqksOsp4m6kX9OJHLT0kC8zB4NFKpZ9uRwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFD8Xfhwifnl6XbxzQrq51SLOyIOMMB8GA1UdIwQY MBaAFHJrNQ6fTxJZ4vnGCbIuZfvRhiBrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY21zMURwOVBFbG5pLWNZSnNpNWwtOUdHSUdzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYS80NzdjODYtYzdkNi00ZTM3LWJmZjYt YTAwNzJiYWM5ZjQ4LzEvY21zMURwOVBFbG5pLWNZSnNpNWwtOUdHSUdzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYS80NzdjODYtYzdkNi00ZTM3LWJmZjYtYTAwNzJiYWM5ZjQ4 LzEvY21zMURwOVBFbG5pLWNZSnNpNWwtOUdHSUdzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAX4okZhQ3 GmvX3bezul4tWkTn9uqbkofEVJzC0WwommMRf8T4gT3SI/6N4JXMWf5QFBxICqnC lF/CP/geI0ueGdLwg55saohOBXCEcGgptrbU4u400V8pgGaX2NLwtaF3QbF4jhbZ 7wImcWDJNZeqy1zD7wyBkU3DZwXz0tzjZ56fRIit3JsuzS6qW7sCmhMjppfgHJHi hY2IVtfAsSG4rqBjwN2/MiMOzL91rqY1e14vmzL7ZHl0XU1rjxSvrE25zjdGAlBD d9bkC4xj6ttojdBOvVhWw7kL/H0bP+Qhl4h/rN6KcDDmWvU2cnEqBltFYynNlJwM MJV+FXSeAP3rSw== -----END CERTIFICATE-----Generated at Wed Dec 10 18:04:09 2025 by rpki-client