This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/e26d9c-d851-4a69-95f9-1504ea53e255/1/cK01PMGg0W1ejhSjdXWm89YFY_g.mft File: cK01PMGg0W1ejhSjdXWm89YFY_g.mft (raw, json) Hash identifier: y7oOvnADdEhl1Rg5OcIP9LkaOdT8c3xFARgQzANDQ2Q= Subject key identifier: B3:90:A3:CA:47:9B:79:F9:EC:07:C5:A8:02:C7:CE:F5:3D:58:2A:8D Authority key identifier: 70:AD:35:3C:C1:A0:D1:6D:5E:8E:14:A3:75:75:A6:F3:D6:05:63:F8 Certificate issuer: /CN=70ad353cc1a0d16d5e8e14a37575a6f3d60563f8 Certificate serial: 019B0D801E75D525B99A51AC88DCAE002276 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cK01PMGg0W1ejhSjdXWm89YFY_g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/e26d9c-d851-4a69-95f9-1504ea53e255/1/cK01PMGg0W1ejhSjdXWm89YFY_g.mft Manifest number: 1770 Signing time: Thu 11 Dec 2025 13:00:58 +0000 Manifest this update: Thu 11 Dec 2025 13:00:58 +0000 Manifest next update: Fri 12 Dec 2025 13:00:58 +0000 Files and hashes: 1: 5O-Lg4XDVCjsXNfMtLLsnISMRVo.roa (hash: VmXDM+lE33fYX4GAlA3VUKdsqtXyObkMk9hssfXkX7Q=) 2: CY-tvdBWBt7wOg3GB0icUZ8MPCA.roa (hash: Ejbz7aRM11I5vJNNpK3p8qUEl2ngpQB+ME89yYTVcX4=) 3: cK01PMGg0W1ejhSjdXWm89YFY_g.crl (hash: 4gnmjyvr6wPOGgbqBcs9LL4Vx+6mCIgPOw7CEI8RnQQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/e26d9c-d851-4a69-95f9-1504ea53e255/1/cK01PMGg0W1ejhSjdXWm89YFY_g.crl rsync://rpki.ripe.net/repository/DEFAULT/2a/e26d9c-d851-4a69-95f9-1504ea53e255/1/cK01PMGg0W1ejhSjdXWm89YFY_g.mft rsync://rpki.ripe.net/repository/DEFAULT/cK01PMGg0W1ejhSjdXWm89YFY_g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 13:00:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0d:80:1e:75:d5:25:b9:9a:51:ac:88:dc:ae:00:22:76 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=70ad353cc1a0d16d5e8e14a37575a6f3d60563f8 Validity Not Before: Dec 11 13:00:58 2025 GMT Not After : Dec 12 13:00:58 2025 GMT Subject: CN=b390a3ca479b79f9ec07c5a802c7cef53d582a8d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:8e:32:46:d8:7d:3f:12:79:86:d4:9c:95:8d: 38:11:58:b4:8f:bc:c9:61:df:b7:8b:73:80:01:29: 81:2f:37:f4:78:70:2c:8b:70:3b:12:da:5b:ed:26: 65:9b:5c:6a:a7:28:97:2f:8b:9f:7c:c5:1e:99:d7: 75:29:9b:66:42:56:37:49:04:82:1b:44:13:65:5d: fe:74:5c:ce:02:ff:0e:89:12:c3:a7:25:1f:6d:1f: c3:e8:72:68:20:6e:d7:c7:79:85:03:a9:a0:de:83: a7:30:07:c0:02:3d:58:aa:5a:9d:c2:0b:98:0a:49: ec:45:4c:16:88:f7:6c:3c:f0:69:9f:ac:3f:4e:82: 60:e8:3a:79:aa:80:e2:e5:d3:2b:ae:83:55:cc:ed: ab:c6:14:b6:86:bc:72:6f:c9:b1:34:9c:c4:12:57: e6:08:00:44:23:c1:7b:21:15:01:e5:a6:4a:ea:5d: 29:37:1a:c1:4e:36:94:a6:3f:b2:a4:ad:56:27:ac: d3:82:51:d1:18:c4:74:1f:48:1d:e9:0a:5e:18:a7: ba:47:b6:b3:c9:d1:9e:23:c9:55:d1:dd:8a:b1:ed: d2:e8:03:20:a2:65:82:f8:fc:5b:a4:97:94:2c:f9: 28:78:a4:4b:1a:c5:f0:d0:91:77:7b:60:18:ce:e3: 2f:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:90:A3:CA:47:9B:79:F9:EC:07:C5:A8:02:C7:CE:F5:3D:58:2A:8D X509v3 Authority Key Identifier: keyid:70:AD:35:3C:C1:A0:D1:6D:5E:8E:14:A3:75:75:A6:F3:D6:05:63:F8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cK01PMGg0W1ejhSjdXWm89YFY_g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/e26d9c-d851-4a69-95f9-1504ea53e255/1/cK01PMGg0W1ejhSjdXWm89YFY_g.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/e26d9c-d851-4a69-95f9-1504ea53e255/1/cK01PMGg0W1ejhSjdXWm89YFY_g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5d:68:46:74:f5:82:8c:76:4f:34:5d:90:c7:b8:11:a6:5a:13: 6b:43:44:6d:ea:93:65:79:6f:c0:20:f9:4f:6c:a8:e2:30:19: 45:e4:28:a2:ad:6e:6d:cb:4e:0b:fd:21:e1:bd:74:90:5e:7e: c8:fe:4f:52:20:93:03:c4:d3:56:58:7d:b1:f9:16:b9:b8:f4: 4e:e8:a3:37:a0:3a:aa:2d:93:cf:01:d6:3e:a0:11:d1:a0:06: 5c:af:77:87:b3:e2:07:92:ce:43:90:ec:af:f4:01:32:2d:ca: 1a:8f:2b:58:f0:82:b0:0c:1d:65:f4:e0:23:43:2f:7a:66:65: 09:2b:7f:b9:db:c8:98:76:88:4a:80:39:4d:c0:b7:03:08:29: db:c2:7c:10:7c:54:30:36:95:88:70:ba:a1:e6:90:ff:13:4d: 7a:16:3a:30:d3:b3:f6:76:a6:b9:b4:81:51:30:88:55:28:f8: ac:3a:2b:c8:0b:7b:98:5a:65:95:3e:a5:13:6f:03:f7:00:a2: ab:59:a9:bd:fb:c2:ff:bc:8b:23:a6:36:b7:14:a2:3f:ce:fc: 57:24:f8:57:ae:ac:46:f8:35:d4:52:e6:72:f2:fb:ca:33:58: 44:91:db:35:ad:ee:2c:14:b6:4d:46:d9:bc:65:84:f7:87:fa: 89:a6:98:0a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsNgB511SW5mlGsiNyuACJ2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcwYWQzNTNjYzFhMGQxNmQ1ZThlMTRhMzc1NzVhNmYzZDYw NTYzZjgwHhcNMjUxMjExMTMwMDU4WhcNMjUxMjEyMTMwMDU4WjAzMTEwLwYDVQQD EyhiMzkwYTNjYTQ3OWI3OWY5ZWMwN2M1YTgwMmM3Y2VmNTNkNTgyYThkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn44yRth9PxJ5htSclY04EVi0j7zJ Yd+3i3OAASmBLzf0eHAsi3A7Etpb7SZlm1xqpyiXL4uffMUemdd1KZtmQlY3SQSC G0QTZV3+dFzOAv8OiRLDpyUfbR/D6HJoIG7Xx3mFA6mg3oOnMAfAAj1YqlqdwguY CknsRUwWiPdsPPBpn6w/ToJg6Dp5qoDi5dMrroNVzO2rxhS2hrxyb8mxNJzEElfm CABEI8F7IRUB5aZK6l0pNxrBTjaUpj+ypK1WJ6zTglHRGMR0H0gd6QpeGKe6R7az ydGeI8lV0d2Kse3S6AMgomWC+PxbpJeULPkoeKRLGsXw0JF3e2AYzuMvnwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLOQo8pHm3n57AfFqALHzvU9WCqNMB8GA1UdIwQY MBaAFHCtNTzBoNFtXo4Uo3V1pvPWBWP4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY0swMVBNR2cwVzFlamhTamRYV204OVlGWV9nLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYS9lMjZkOWMtZDg1MS00YTY5LTk1Zjkt MTUwNGVhNTNlMjU1LzEvY0swMVBNR2cwVzFlamhTamRYV204OVlGWV9nLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYS9lMjZkOWMtZDg1MS00YTY5LTk1ZjktMTUwNGVhNTNlMjU1 LzEvY0swMVBNR2cwVzFlamhTamRYV204OVlGWV9nLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXWhGdPWC jHZPNF2Qx7gRploTa0NEbeqTZXlvwCD5T2yo4jAZReQooq1ubctOC/0h4b10kF5+ yP5PUiCTA8TTVlh9sfkWubj0TuijN6A6qi2TzwHWPqAR0aAGXK93h7PiB5LOQ5Ds r/QBMi3KGo8rWPCCsAwdZfTgI0MvemZlCSt/udvImHaISoA5TcC3Awgp28J8EHxU MDaViHC6oeaQ/xNNehY6MNOz9namubSBUTCIVSj4rDoryAt7mFpllT6lE28D9wCi q1mpvfvC/7yLI6Y2txSiP878VyT4V66sRvg11FLmcvL7yjNYRJHbNa3uLBS2TUbZ vGWE94f6iaaYCg== -----END CERTIFICATE-----Generated at Thu Dec 11 23:06:52 2025 by rpki-client