This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/963170-58be-46bb-a5de-777373e6055e/1/cJSkJVlekjxLU7nAAKqPGa2SPyA.mft File: cJSkJVlekjxLU7nAAKqPGa2SPyA.mft (raw, json) Hash identifier: t1ZZ6la/e4FHpVzvzcOTpdeedgSak7O0EevGZZdf/iI= Subject key identifier: 85:E5:9A:8E:90:DF:E2:7E:E7:BA:9D:04:0B:31:A3:39:25:DB:CB:55 Authority key identifier: 70:94:A4:25:59:5E:92:3C:4B:53:B9:C0:00:AA:8F:19:AD:92:3F:20 Certificate issuer: /CN=7094a425595e923c4b53b9c000aa8f19ad923f20 Certificate serial: 019B4882E989B716E4334A0D4053690F49D7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cJSkJVlekjxLU7nAAKqPGa2SPyA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/963170-58be-46bb-a5de-777373e6055e/1/cJSkJVlekjxLU7nAAKqPGa2SPyA.mft Manifest number: 13A6 Signing time: Tue 23 Dec 2025 00:01:37 +0000 Manifest this update: Tue 23 Dec 2025 00:01:37 +0000 Manifest next update: Wed 24 Dec 2025 00:01:37 +0000 Files and hashes: 1: 1-YTs4r6zU-8mdejFRdCllU9534c.roa (hash: 1PeguZ92yFC8iaBTSsGvqpeeYV8duXPcAw7VUiDhRiw=) 2: 5z-bgDH8lytiLnfe9VpEMYme7ek.roa (hash: q3gRkg1Wu1TjQxIsHIpzRCg8G07UfeVe/I9XDxRqtvo=) 3: GgOjLst_2cOjWFXXQ04HdoXttH4.roa (hash: z2Rfj6acoKtcXjm6dwLXQBUNElg6LrojkoNiCuSKCms=) 4: cJSkJVlekjxLU7nAAKqPGa2SPyA.crl (hash: WVCnz5xipc7cMiX8jScZVes+dCLUAtTk4U8GwGBF82w=) 5: gp9nHU_cukvMULZAvDnIuT6ptiM.roa (hash: 7wIfWYcUlSAbfRukKEeXPASEhd8fL4WRrL0l2D1YuTg=) 6: hKdzSlgkizVpoLvfGaH8kRoUyB4.roa (hash: eKmXOdDdv5KCQd+EWAKp0FLk1/DsxSq3Ym4RiAI0fek=) 7: rSaIHtGhDT0jOkbwk5w9J-_5svc.roa (hash: DVoLZl1ZXv/1pFpFxvGq3uqDR2CUE2IcgixTkQGHWKU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/963170-58be-46bb-a5de-777373e6055e/1/cJSkJVlekjxLU7nAAKqPGa2SPyA.crl rsync://rpki.ripe.net/repository/DEFAULT/2a/963170-58be-46bb-a5de-777373e6055e/1/cJSkJVlekjxLU7nAAKqPGa2SPyA.mft rsync://rpki.ripe.net/repository/DEFAULT/cJSkJVlekjxLU7nAAKqPGa2SPyA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 23:03:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:48:82:e9:89:b7:16:e4:33:4a:0d:40:53:69:0f:49:d7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7094a425595e923c4b53b9c000aa8f19ad923f20 Validity Not Before: Dec 23 00:01:37 2025 GMT Not After : Dec 24 00:01:37 2025 GMT Subject: CN=85e59a8e90dfe27ee7ba9d040b31a33925dbcb55 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:49:10:8d:57:5e:8d:2a:30:dd:2a:ea:81:3a: 76:72:ed:a5:16:13:88:71:13:c4:62:51:88:06:c1: 46:11:fd:1b:5e:e7:26:f6:6b:ce:04:0d:d2:10:7b: f2:e4:0f:eb:c3:12:ae:8e:f5:56:1c:e7:be:16:66: f9:00:46:93:56:a5:d6:90:76:2b:e2:2c:b8:db:d1: 42:dc:e7:96:fa:61:51:b0:3f:74:5b:b7:36:8b:ac: 7f:54:c6:e9:5c:5b:43:d9:04:09:ee:91:a7:8d:90: 90:dc:b3:5f:96:cf:a4:eb:36:85:07:f1:78:54:a4: 1c:a2:14:f3:59:18:80:4b:33:29:29:b6:70:bd:26: 2f:43:10:af:32:38:42:b9:73:53:35:51:a4:4c:f5: 3f:6b:a3:3a:2c:21:21:ff:58:f8:5a:9a:4f:77:b9: 94:5b:d9:b8:5c:d3:eb:55:c6:a2:fc:01:ed:5d:0d: 80:01:4b:a0:eb:38:cf:49:f5:f4:54:c5:77:41:0a: 3c:56:39:51:2b:95:d6:b4:ca:fd:fc:ae:c0:77:80: b7:c5:b7:51:2a:e5:f6:61:72:a2:1c:df:d9:49:92: 0c:71:d2:c6:88:61:f2:87:41:be:c8:4d:86:3b:ad: 55:3e:a4:08:dc:0d:68:eb:86:28:fb:26:c3:da:22: 6f:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:E5:9A:8E:90:DF:E2:7E:E7:BA:9D:04:0B:31:A3:39:25:DB:CB:55 X509v3 Authority Key Identifier: keyid:70:94:A4:25:59:5E:92:3C:4B:53:B9:C0:00:AA:8F:19:AD:92:3F:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cJSkJVlekjxLU7nAAKqPGa2SPyA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/963170-58be-46bb-a5de-777373e6055e/1/cJSkJVlekjxLU7nAAKqPGa2SPyA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/963170-58be-46bb-a5de-777373e6055e/1/cJSkJVlekjxLU7nAAKqPGa2SPyA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 48:cd:42:46:99:54:e6:b7:97:50:f0:87:74:ba:6d:a1:ce:81: 95:6a:30:70:7f:6f:f5:1b:71:9f:ca:5c:90:93:8d:92:a9:67: 15:8b:4c:6b:47:80:ca:27:d8:1c:6b:e0:87:de:22:15:db:7e: 71:3a:c8:46:4a:a8:42:35:30:b7:a7:5b:22:b4:ee:dd:7c:65: 7e:b4:58:3d:51:f7:b2:b1:d2:20:ce:e0:86:e1:73:1b:6e:dd: d4:b9:33:1e:34:63:1b:c4:88:4d:ea:81:d2:63:de:b8:b3:81: 4b:59:13:65:f8:26:09:1c:07:4c:90:ba:f6:b9:d8:81:58:27: 38:71:8c:f7:7a:1a:3b:63:2c:be:ae:bf:44:34:f4:63:8d:d9: ba:16:95:8d:64:fb:93:0e:67:d3:88:95:55:34:95:9d:dc:43: 8a:c0:9b:7e:3d:b3:6e:08:03:93:4d:b8:bc:61:44:02:3c:66: 51:7a:ad:97:92:31:3a:3c:40:81:6d:7b:06:2b:a9:91:dc:94: 82:7b:30:9c:2b:23:47:cc:21:37:d7:40:58:d9:ba:b0:71:bf: 37:2f:b8:c1:45:76:cc:7a:1a:6f:52:bc:24:67:ae:6b:8f:b4: 01:db:b8:4a:1d:c2:db:fd:11:c1:d9:f5:1d:b1:fc:cb:5c:d3: 15:13:41:5c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtIgumJtxbkM0oNQFNpD0nXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcwOTRhNDI1NTk1ZTkyM2M0YjUzYjljMDAwYWE4ZjE5YWQ5 MjNmMjAwHhcNMjUxMjIzMDAwMTM3WhcNMjUxMjI0MDAwMTM3WjAzMTEwLwYDVQQD Eyg4NWU1OWE4ZTkwZGZlMjdlZTdiYTlkMDQwYjMxYTMzOTI1ZGJjYjU1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAokkQjVdejSow3SrqgTp2cu2lFhOI cRPEYlGIBsFGEf0bXucm9mvOBA3SEHvy5A/rwxKujvVWHOe+Fmb5AEaTVqXWkHYr 4iy429FC3OeW+mFRsD90W7c2i6x/VMbpXFtD2QQJ7pGnjZCQ3LNfls+k6zaFB/F4 VKQcohTzWRiASzMpKbZwvSYvQxCvMjhCuXNTNVGkTPU/a6M6LCEh/1j4WppPd7mU W9m4XNPrVcai/AHtXQ2AAUug6zjPSfX0VMV3QQo8VjlRK5XWtMr9/K7Ad4C3xbdR KuX2YXKiHN/ZSZIMcdLGiGHyh0G+yE2GO61VPqQI3A1o64Yo+ybD2iJv+QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIXlmo6Q3+J+57qdBAsxozkl28tVMB8GA1UdIwQY MBaAFHCUpCVZXpI8S1O5wACqjxmtkj8gMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY0pTa0pWbGVranhMVTduQUFLcVBHYTJTUHlBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYS85NjMxNzAtNThiZS00NmJiLWE1ZGUt Nzc3MzczZTYwNTVlLzEvY0pTa0pWbGVranhMVTduQUFLcVBHYTJTUHlBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYS85NjMxNzAtNThiZS00NmJiLWE1ZGUtNzc3MzczZTYwNTVl LzEvY0pTa0pWbGVranhMVTduQUFLcVBHYTJTUHlBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASM1CRplU 5reXUPCHdLptoc6BlWowcH9v9Rtxn8pckJONkqlnFYtMa0eAyifYHGvgh94iFdt+ cTrIRkqoQjUwt6dbIrTu3XxlfrRYPVH3srHSIM7ghuFzG27d1LkzHjRjG8SITeqB 0mPeuLOBS1kTZfgmCRwHTJC69rnYgVgnOHGM93oaO2Msvq6/RDT0Y43ZuhaVjWT7 kw5n04iVVTSVndxDisCbfj2zbggDk024vGFEAjxmUXqtl5IxOjxAgW17BiupkdyU gnswnCsjR8whN9dAWNm6sHG/Ny+4wUV2zHoab1K8JGeua4+0Adu4Sh3C2/0Rwdn1 HbH8y1zTFRNBXA== -----END CERTIFICATE-----Generated at Tue Dec 23 06:47:59 2025 by rpki-client