This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/963170-58be-46bb-a5de-777373e6055e/1/cJSkJVlekjxLU7nAAKqPGa2SPyA.mft File: cJSkJVlekjxLU7nAAKqPGa2SPyA.mft (raw, json) Hash identifier: ayJiB6sz0KxQAbny0acG0Dfsk8TR5cQbhc/OuqSVKik= Subject key identifier: 51:E1:97:A3:08:61:01:CE:9C:83:CA:CE:99:2B:C2:D8:80:AB:D6:3A Authority key identifier: 70:94:A4:25:59:5E:92:3C:4B:53:B9:C0:00:AA:8F:19:AD:92:3F:20 Certificate issuer: /CN=7094a425595e923c4b53b9c000aa8f19ad923f20 Certificate serial: 019B4E4DDA3C2C2C1D8F7422A2F9FA54A6A3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cJSkJVlekjxLU7nAAKqPGa2SPyA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/963170-58be-46bb-a5de-777373e6055e/1/cJSkJVlekjxLU7nAAKqPGa2SPyA.mft Manifest number: 13A9 Signing time: Wed 24 Dec 2025 03:01:23 +0000 Manifest this update: Wed 24 Dec 2025 03:01:23 +0000 Manifest next update: Thu 25 Dec 2025 03:01:23 +0000 Files and hashes: 1: 1-YTs4r6zU-8mdejFRdCllU9534c.roa (hash: 1PeguZ92yFC8iaBTSsGvqpeeYV8duXPcAw7VUiDhRiw=) 2: 5z-bgDH8lytiLnfe9VpEMYme7ek.roa (hash: q3gRkg1Wu1TjQxIsHIpzRCg8G07UfeVe/I9XDxRqtvo=) 3: GgOjLst_2cOjWFXXQ04HdoXttH4.roa (hash: z2Rfj6acoKtcXjm6dwLXQBUNElg6LrojkoNiCuSKCms=) 4: cJSkJVlekjxLU7nAAKqPGa2SPyA.crl (hash: EElrla1behsWMVoezf7CRCQ60wb90iBhFnrI1/bzdDQ=) 5: gp9nHU_cukvMULZAvDnIuT6ptiM.roa (hash: 7wIfWYcUlSAbfRukKEeXPASEhd8fL4WRrL0l2D1YuTg=) 6: hKdzSlgkizVpoLvfGaH8kRoUyB4.roa (hash: eKmXOdDdv5KCQd+EWAKp0FLk1/DsxSq3Ym4RiAI0fek=) 7: rSaIHtGhDT0jOkbwk5w9J-_5svc.roa (hash: DVoLZl1ZXv/1pFpFxvGq3uqDR2CUE2IcgixTkQGHWKU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/963170-58be-46bb-a5de-777373e6055e/1/cJSkJVlekjxLU7nAAKqPGa2SPyA.crl rsync://rpki.ripe.net/repository/DEFAULT/2a/963170-58be-46bb-a5de-777373e6055e/1/cJSkJVlekjxLU7nAAKqPGa2SPyA.mft rsync://rpki.ripe.net/repository/DEFAULT/cJSkJVlekjxLU7nAAKqPGa2SPyA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 24 Dec 2025 19:01:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4e:4d:da:3c:2c:2c:1d:8f:74:22:a2:f9:fa:54:a6:a3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7094a425595e923c4b53b9c000aa8f19ad923f20 Validity Not Before: Dec 24 03:01:23 2025 GMT Not After : Dec 25 03:01:23 2025 GMT Subject: CN=51e197a3086101ce9c83cace992bc2d880abd63a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:73:94:d7:f9:8b:5c:07:ac:71:92:10:65:da: 54:41:02:fe:b8:2a:c0:70:10:2c:a7:b6:1a:46:5b: 00:e8:02:16:fb:82:0e:87:28:a4:23:61:47:01:28: 84:ed:54:f4:57:f1:0b:56:b8:07:5d:7a:1c:3f:27: eb:ce:8d:7d:51:40:74:64:62:98:08:df:e9:5f:5f: f6:20:49:2b:02:fc:7c:dd:4c:9b:6b:db:e8:2e:93: 00:42:5c:5d:83:82:ea:ab:4f:c5:42:92:4c:5e:7e: 27:6e:0a:93:37:00:03:f3:a5:88:9a:e4:14:0a:52: ad:93:a1:9b:8a:44:0f:78:61:1e:26:ef:08:7f:44: a0:20:56:64:ec:72:ad:64:25:69:04:8b:64:a9:ca: ea:94:fc:65:d0:c0:88:02:22:d4:11:01:80:43:2b: 6b:c4:cd:28:fe:65:fa:33:a4:ed:bc:bf:33:9e:e8: 91:1d:73:d7:84:f2:98:b4:1a:09:86:03:c5:4e:70: c7:c5:8b:d7:d2:25:43:75:1e:45:38:ed:cb:4c:e6: 1f:dc:c1:b0:88:7e:e2:08:d9:d7:d0:32:0a:13:47: 81:f1:f3:f6:eb:5c:09:ad:9c:62:e5:09:85:cc:a8: f9:02:6d:a6:1b:41:c9:a8:07:c5:6c:87:d3:04:79: c1:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:E1:97:A3:08:61:01:CE:9C:83:CA:CE:99:2B:C2:D8:80:AB:D6:3A X509v3 Authority Key Identifier: keyid:70:94:A4:25:59:5E:92:3C:4B:53:B9:C0:00:AA:8F:19:AD:92:3F:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cJSkJVlekjxLU7nAAKqPGa2SPyA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/963170-58be-46bb-a5de-777373e6055e/1/cJSkJVlekjxLU7nAAKqPGa2SPyA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/963170-58be-46bb-a5de-777373e6055e/1/cJSkJVlekjxLU7nAAKqPGa2SPyA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3c:6a:b9:b0:bc:c0:03:79:8e:6f:85:47:d6:c3:16:d7:26:58: d2:f8:6b:8e:12:ba:0c:d3:3c:53:75:d5:ee:40:5d:d4:e7:ad: ce:78:49:48:0f:20:f3:24:42:cc:1d:9b:7e:95:78:dd:fd:27: b5:b9:d0:d2:d5:42:32:90:cb:44:6c:8d:07:80:80:a2:d7:32: 09:a2:8e:6f:5c:66:75:da:54:dd:74:08:21:c9:04:93:ff:48: 57:7a:3c:57:e2:00:50:28:18:26:56:31:4e:0d:6a:cd:38:78: 1e:b3:24:ed:01:a1:d9:1f:d1:18:f9:2e:60:44:98:90:7d:94: 3b:77:46:4d:45:4c:dc:9d:16:4b:24:15:c2:4b:b4:65:22:f7: b1:72:c6:fa:3b:48:e7:57:ba:3e:7d:4d:9a:9d:c4:43:c7:21: 32:4f:4a:22:60:0c:e6:ba:5e:93:6f:02:11:e3:e9:10:0b:0c: d8:de:10:b6:c7:9d:38:f7:ed:63:74:1a:19:b3:a3:a0:1d:53: ea:bc:68:bd:e7:d0:4c:17:62:21:65:66:04:0e:6a:a2:46:57: 77:d9:b5:f6:f7:ac:18:5a:53:5a:76:f3:40:d7:7f:ef:0f:6f: 51:94:75:52:4a:f9:01:a4:2e:68:cb:78:c1:27:f2:96:72:24: 86:25:02:11 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtOTdo8LCwdj3Qiovn6VKajMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcwOTRhNDI1NTk1ZTkyM2M0YjUzYjljMDAwYWE4ZjE5YWQ5 MjNmMjAwHhcNMjUxMjI0MDMwMTIzWhcNMjUxMjI1MDMwMTIzWjAzMTEwLwYDVQQD Eyg1MWUxOTdhMzA4NjEwMWNlOWM4M2NhY2U5OTJiYzJkODgwYWJkNjNhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt3OU1/mLXAescZIQZdpUQQL+uCrA cBAsp7YaRlsA6AIW+4IOhyikI2FHASiE7VT0V/ELVrgHXXocPyfrzo19UUB0ZGKY CN/pX1/2IEkrAvx83Uyba9voLpMAQlxdg4Lqq0/FQpJMXn4nbgqTNwAD86WImuQU ClKtk6GbikQPeGEeJu8If0SgIFZk7HKtZCVpBItkqcrqlPxl0MCIAiLUEQGAQytr xM0o/mX6M6TtvL8znuiRHXPXhPKYtBoJhgPFTnDHxYvX0iVDdR5FOO3LTOYf3MGw iH7iCNnX0DIKE0eB8fP261wJrZxi5QmFzKj5Am2mG0HJqAfFbIfTBHnBvQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFHhl6MIYQHOnIPKzpkrwtiAq9Y6MB8GA1UdIwQY MBaAFHCUpCVZXpI8S1O5wACqjxmtkj8gMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY0pTa0pWbGVranhMVTduQUFLcVBHYTJTUHlBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYS85NjMxNzAtNThiZS00NmJiLWE1ZGUt Nzc3MzczZTYwNTVlLzEvY0pTa0pWbGVranhMVTduQUFLcVBHYTJTUHlBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYS85NjMxNzAtNThiZS00NmJiLWE1ZGUtNzc3MzczZTYwNTVl LzEvY0pTa0pWbGVranhMVTduQUFLcVBHYTJTUHlBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPGq5sLzA A3mOb4VH1sMW1yZY0vhrjhK6DNM8U3XV7kBd1OetznhJSA8g8yRCzB2bfpV43f0n tbnQ0tVCMpDLRGyNB4CAotcyCaKOb1xmddpU3XQIIckEk/9IV3o8V+IAUCgYJlYx Tg1qzTh4HrMk7QGh2R/RGPkuYESYkH2UO3dGTUVM3J0WSyQVwku0ZSL3sXLG+jtI 51e6Pn1Nmp3EQ8chMk9KImAM5rpek28CEePpEAsM2N4QtsedOPftY3QaGbOjoB1T 6rxovefQTBdiIWVmBA5qokZXd9m19vesGFpTWnbzQNd/7w9vUZR1Ukr5AaQuaMt4 wSfylnIkhiUCEQ== -----END CERTIFICATE-----Generated at Wed Dec 24 04:45:20 2025 by rpki-client