This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/963170-58be-46bb-a5de-777373e6055e/1/cJSkJVlekjxLU7nAAKqPGa2SPyA.mft File: cJSkJVlekjxLU7nAAKqPGa2SPyA.mft (raw, json) Hash identifier: Mq0iXjtZMToy1neh+KFHW+p5oNKAHYFrlX8F4JhIi2A= Subject key identifier: 74:5C:49:A5:C8:ED:8C:88:C4:F4:06:E7:20:C7:07:7F:2A:1C:86:D9 Authority key identifier: 70:94:A4:25:59:5E:92:3C:4B:53:B9:C0:00:AA:8F:19:AD:92:3F:20 Certificate issuer: /CN=7094a425595e923c4b53b9c000aa8f19ad923f20 Certificate serial: 019B0E9339535BF9CE57AFCAA7F5857BDD85 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cJSkJVlekjxLU7nAAKqPGa2SPyA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/963170-58be-46bb-a5de-777373e6055e/1/cJSkJVlekjxLU7nAAKqPGa2SPyA.mft Manifest number: 1388 Signing time: Thu 11 Dec 2025 18:01:27 +0000 Manifest this update: Thu 11 Dec 2025 18:01:27 +0000 Manifest next update: Fri 12 Dec 2025 18:01:27 +0000 Files and hashes: 1: 1-YTs4r6zU-8mdejFRdCllU9534c.roa (hash: 1PeguZ92yFC8iaBTSsGvqpeeYV8duXPcAw7VUiDhRiw=) 2: 5z-bgDH8lytiLnfe9VpEMYme7ek.roa (hash: q3gRkg1Wu1TjQxIsHIpzRCg8G07UfeVe/I9XDxRqtvo=) 3: GgOjLst_2cOjWFXXQ04HdoXttH4.roa (hash: z2Rfj6acoKtcXjm6dwLXQBUNElg6LrojkoNiCuSKCms=) 4: cJSkJVlekjxLU7nAAKqPGa2SPyA.crl (hash: CPRTOI1PvT2+TVXGTaOEkYQJJRnPN4v1fPZoYik+lhI=) 5: gp9nHU_cukvMULZAvDnIuT6ptiM.roa (hash: 7wIfWYcUlSAbfRukKEeXPASEhd8fL4WRrL0l2D1YuTg=) 6: hKdzSlgkizVpoLvfGaH8kRoUyB4.roa (hash: eKmXOdDdv5KCQd+EWAKp0FLk1/DsxSq3Ym4RiAI0fek=) 7: rSaIHtGhDT0jOkbwk5w9J-_5svc.roa (hash: DVoLZl1ZXv/1pFpFxvGq3uqDR2CUE2IcgixTkQGHWKU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/963170-58be-46bb-a5de-777373e6055e/1/cJSkJVlekjxLU7nAAKqPGa2SPyA.crl rsync://rpki.ripe.net/repository/DEFAULT/2a/963170-58be-46bb-a5de-777373e6055e/1/cJSkJVlekjxLU7nAAKqPGa2SPyA.mft rsync://rpki.ripe.net/repository/DEFAULT/cJSkJVlekjxLU7nAAKqPGa2SPyA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 14:45:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0e:93:39:53:5b:f9:ce:57:af:ca:a7:f5:85:7b:dd:85 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7094a425595e923c4b53b9c000aa8f19ad923f20 Validity Not Before: Dec 11 18:01:27 2025 GMT Not After : Dec 12 18:01:27 2025 GMT Subject: CN=745c49a5c8ed8c88c4f406e720c7077f2a1c86d9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:80:e5:f7:6b:72:e4:0b:01:d5:eb:54:79:88: fa:df:65:4d:2d:6b:b9:d6:88:84:1a:1e:77:99:05: 8f:ad:30:35:5b:8c:bd:24:dd:ad:cb:d9:8f:25:a0: 15:79:d0:9f:a3:52:48:54:5d:e5:3f:a6:2b:08:f3: 53:a3:b4:d2:36:f1:2d:70:35:66:65:87:2f:38:be: 5c:87:96:7a:de:85:fa:62:d0:93:97:a6:a0:e7:07: b3:18:9f:34:41:00:12:18:b5:48:6a:93:25:18:e4: ff:94:fd:0c:a7:59:2a:a6:99:d1:d9:43:63:d1:df: ad:cd:9c:bc:e6:aa:52:3f:89:ea:04:91:89:d3:ac: 45:d5:4c:f3:6d:6a:5c:e2:66:aa:e1:d1:0d:38:f1: 90:e0:3d:83:58:d0:a6:6e:df:8a:97:25:67:a5:fe: 77:cf:63:93:3f:f1:3b:e0:c0:c7:d7:80:05:05:40: d3:43:d8:39:78:97:79:49:82:67:36:a9:24:29:01: c7:73:35:08:cd:b2:5b:f9:2a:60:8e:10:15:f3:92: f8:c4:f5:39:c0:4c:7f:2d:0e:86:83:74:d8:8a:62: 69:06:b3:d0:a5:c4:0d:bc:ef:56:e3:36:47:38:35: 35:b6:fb:b2:93:87:2c:b9:ba:47:51:8a:88:3c:5e: cd:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:5C:49:A5:C8:ED:8C:88:C4:F4:06:E7:20:C7:07:7F:2A:1C:86:D9 X509v3 Authority Key Identifier: keyid:70:94:A4:25:59:5E:92:3C:4B:53:B9:C0:00:AA:8F:19:AD:92:3F:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cJSkJVlekjxLU7nAAKqPGa2SPyA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/963170-58be-46bb-a5de-777373e6055e/1/cJSkJVlekjxLU7nAAKqPGa2SPyA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/963170-58be-46bb-a5de-777373e6055e/1/cJSkJVlekjxLU7nAAKqPGa2SPyA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b4:5b:19:d5:a0:81:88:1f:3f:98:df:cf:80:44:ab:ff:79:56: a9:b4:71:06:db:f4:96:f7:8d:7a:49:f5:4d:d1:9c:df:ed:56: b6:0b:41:8c:bf:e2:07:ae:96:36:27:65:fc:8e:c5:2f:ae:07: f6:53:c4:1e:9b:fe:ae:ab:c7:2b:ec:09:3f:ca:e6:90:49:15: f7:fd:e5:95:62:1d:4e:c8:98:51:cf:57:14:66:be:ec:36:30: f0:a4:24:06:db:b8:d7:05:ae:85:e6:84:6b:08:f1:1a:5d:e5: f4:17:a3:83:40:68:33:3f:ef:d3:41:a6:94:f1:0b:95:73:60: 71:51:4f:7c:cd:5e:1b:7d:da:38:b1:a6:40:8e:c9:db:79:2e: 02:85:49:77:e5:5f:17:ea:f7:f9:b3:1a:c5:01:53:8b:ab:a6: fc:a1:9d:15:91:6a:fa:64:ba:21:de:07:64:cc:36:bf:c0:78: 24:94:04:69:4a:13:1f:f8:66:8b:0a:63:9f:3f:90:0b:40:de: 50:9d:d5:d3:71:0e:fb:0e:68:2d:f9:ee:3f:cd:02:72:e2:4c: 92:95:8a:ab:30:45:e0:85:8e:94:57:1f:2b:45:62:95:d6:1d: 2f:01:a1:29:4e:4d:67:6d:af:ee:67:9e:0e:c5:f6:45:20:cc: 5e:cc:2e:d6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsOkzlTW/nOV6/Kp/WFe92FMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcwOTRhNDI1NTk1ZTkyM2M0YjUzYjljMDAwYWE4ZjE5YWQ5 MjNmMjAwHhcNMjUxMjExMTgwMTI3WhcNMjUxMjEyMTgwMTI3WjAzMTEwLwYDVQQD Eyg3NDVjNDlhNWM4ZWQ4Yzg4YzRmNDA2ZTcyMGM3MDc3ZjJhMWM4NmQ5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA14Dl92ty5AsB1etUeYj632VNLWu5 1oiEGh53mQWPrTA1W4y9JN2ty9mPJaAVedCfo1JIVF3lP6YrCPNTo7TSNvEtcDVm ZYcvOL5ch5Z63oX6YtCTl6ag5wezGJ80QQASGLVIapMlGOT/lP0Mp1kqppnR2UNj 0d+tzZy85qpSP4nqBJGJ06xF1UzzbWpc4maq4dENOPGQ4D2DWNCmbt+KlyVnpf53 z2OTP/E74MDH14AFBUDTQ9g5eJd5SYJnNqkkKQHHczUIzbJb+SpgjhAV85L4xPU5 wEx/LQ6Gg3TYimJpBrPQpcQNvO9W4zZHODU1tvuyk4csubpHUYqIPF7NIQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHRcSaXI7YyIxPQG5yDHB38qHIbZMB8GA1UdIwQY MBaAFHCUpCVZXpI8S1O5wACqjxmtkj8gMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY0pTa0pWbGVranhMVTduQUFLcVBHYTJTUHlBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYS85NjMxNzAtNThiZS00NmJiLWE1ZGUt Nzc3MzczZTYwNTVlLzEvY0pTa0pWbGVranhMVTduQUFLcVBHYTJTUHlBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYS85NjMxNzAtNThiZS00NmJiLWE1ZGUtNzc3MzczZTYwNTVl LzEvY0pTa0pWbGVranhMVTduQUFLcVBHYTJTUHlBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtFsZ1aCB iB8/mN/PgESr/3lWqbRxBtv0lveNekn1TdGc3+1WtgtBjL/iB66WNidl/I7FL64H 9lPEHpv+rqvHK+wJP8rmkEkV9/3llWIdTsiYUc9XFGa+7DYw8KQkBtu41wWuheaE awjxGl3l9Bejg0BoMz/v00GmlPELlXNgcVFPfM1eG33aOLGmQI7J23kuAoVJd+Vf F+r3+bMaxQFTi6um/KGdFZFq+mS6Id4HZMw2v8B4JJQEaUoTH/hmiwpjnz+QC0De UJ3V03EO+w5oLfnuP80CcuJMkpWKqzBF4IWOlFcfK0VildYdLwGhKU5NZ22v7mee DsX2RSDMXswu1g== -----END CERTIFICATE-----Generated at Thu Dec 11 23:53:48 2025 by rpki-client