This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/56ae15-1ca5-4d69-9a3a-837b10c2c636/1/cPeLaBtmF_7XDOhn-5qMbyXP2lU.mft File: cPeLaBtmF_7XDOhn-5qMbyXP2lU.mft (raw, json) Hash identifier: t3ldeQofLUs9dY55tkRbWpMiTjWqMYi9fY+XCEAwqdU= Subject key identifier: 72:9E:1A:96:1D:B4:EE:86:90:3B:E3:19:44:09:17:F9:E0:65:23:93 Authority key identifier: 70:F7:8B:68:1B:66:17:FE:D7:0C:E8:67:FB:9A:8C:6F:25:CF:DA:55 Certificate issuer: /CN=70f78b681b6617fed70ce867fb9a8c6f25cfda55 Certificate serial: 019B32D6850C602C96677F00C8743EFE190C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cPeLaBtmF_7XDOhn-5qMbyXP2lU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/56ae15-1ca5-4d69-9a3a-837b10c2c636/1/cPeLaBtmF_7XDOhn-5qMbyXP2lU.mft Manifest number: 0866 Signing time: Thu 18 Dec 2025 19:01:18 +0000 Manifest this update: Thu 18 Dec 2025 19:01:18 +0000 Manifest next update: Fri 19 Dec 2025 19:01:18 +0000 Files and hashes: 1: 7vwEs2K4HN_LwUWqzjIICNGiknc.roa (hash: wTMMtevJNZjpsr8DvgOjhFZoAuNt0W+HiAbIshmL9sQ=) 2: cPeLaBtmF_7XDOhn-5qMbyXP2lU.crl (hash: caDUL5eziuxWk3CP508hVeHuTXshnVqvLPfrB840yK4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/56ae15-1ca5-4d69-9a3a-837b10c2c636/1/cPeLaBtmF_7XDOhn-5qMbyXP2lU.crl rsync://rpki.ripe.net/repository/DEFAULT/37/56ae15-1ca5-4d69-9a3a-837b10c2c636/1/cPeLaBtmF_7XDOhn-5qMbyXP2lU.mft rsync://rpki.ripe.net/repository/DEFAULT/cPeLaBtmF_7XDOhn-5qMbyXP2lU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 19:01:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:32:d6:85:0c:60:2c:96:67:7f:00:c8:74:3e:fe:19:0c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=70f78b681b6617fed70ce867fb9a8c6f25cfda55 Validity Not Before: Dec 18 19:01:18 2025 GMT Not After : Dec 19 19:01:18 2025 GMT Subject: CN=729e1a961db4ee86903be319440917f9e0652393 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:51:72:ea:1e:11:22:95:88:28:a2:36:8e:c0: 18:97:e7:b9:3b:d1:55:76:94:0f:29:db:65:12:61: e6:ec:2d:66:52:13:c0:5b:fb:d7:9c:9c:10:ea:1f: cc:c7:7f:52:52:6d:6a:6b:c2:7c:62:61:5b:85:62: ac:3f:59:38:98:ca:1e:11:e5:e3:cc:b6:89:03:bd: dc:c2:2b:70:9a:a9:58:0d:45:eb:16:83:33:c1:17: b7:d6:3e:a9:c7:aa:b9:b0:01:25:28:2d:97:a8:47: 1c:4d:b8:16:a5:a8:fc:c4:ee:96:38:ad:eb:c2:1a: 18:b8:2e:3b:34:c1:fb:25:d0:65:32:d6:3e:a1:eb: 6a:28:3e:fd:56:d8:df:11:39:bf:60:8e:ce:20:ce: 6f:4a:01:7f:94:45:81:55:70:02:53:c3:f8:ff:78: 46:7c:47:74:12:59:ea:da:30:ca:f9:8a:26:de:58: 2a:83:06:10:0c:58:04:3a:e3:06:76:11:93:02:d0: e3:96:8d:dd:98:f3:4e:a2:f7:3e:0c:dc:38:3c:15: 24:c6:9b:a7:e3:ee:c2:e7:e3:ec:16:65:ad:26:4c: e9:f7:d4:16:39:12:f9:bd:50:96:6a:4e:f1:5a:15: 51:44:f7:a5:7e:f5:42:09:e1:8d:de:a2:e5:40:10: 4b:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:9E:1A:96:1D:B4:EE:86:90:3B:E3:19:44:09:17:F9:E0:65:23:93 X509v3 Authority Key Identifier: keyid:70:F7:8B:68:1B:66:17:FE:D7:0C:E8:67:FB:9A:8C:6F:25:CF:DA:55 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cPeLaBtmF_7XDOhn-5qMbyXP2lU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/56ae15-1ca5-4d69-9a3a-837b10c2c636/1/cPeLaBtmF_7XDOhn-5qMbyXP2lU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/37/56ae15-1ca5-4d69-9a3a-837b10c2c636/1/cPeLaBtmF_7XDOhn-5qMbyXP2lU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c0:b0:50:74:ce:57:f4:6f:ec:17:32:f7:11:a5:ec:74:c5:da: cd:20:32:81:d5:af:78:96:b6:34:79:7f:46:00:9c:51:57:08: c2:ca:9a:e8:e3:d3:e6:d2:ae:90:e4:74:c1:48:79:64:29:f8: f9:a6:15:b7:75:84:0c:df:39:3f:f2:d7:87:a4:c8:65:7d:de: 3e:07:54:8c:5c:40:f7:40:f3:9b:00:9c:37:67:bd:05:96:dd: 5e:48:46:b1:9c:07:76:36:0d:be:5b:b5:e2:f4:4d:67:e8:56: cc:27:cc:8e:a6:6e:dd:e6:21:5a:61:3b:d8:99:ca:55:b0:83: 26:ed:2a:f8:80:ee:13:1f:b3:5d:87:b4:c9:b1:a8:86:55:3e: 57:ac:7e:60:08:b8:0b:31:cc:a2:c6:c7:05:16:62:ca:45:ac: 2c:83:be:de:4c:38:f8:f2:9e:4a:1f:f2:4d:24:11:79:f8:7f: 4b:d4:1e:1a:ba:b8:d7:64:73:a6:8c:8a:bd:b3:66:66:64:ea: 18:1d:9d:29:30:aa:e0:cc:17:db:5b:49:41:b7:96:7f:59:c0: d2:96:ef:2e:2f:34:b7:47:a4:ee:60:46:4b:a1:11:14:07:d7: d2:dc:c4:9a:d7:ca:17:c4:af:f6:ab:f2:56:91:f9:03:77:f5: 58:0e:6e:e6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsy1oUMYCyWZ38AyHQ+/hkMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcwZjc4YjY4MWI2NjE3ZmVkNzBjZTg2N2ZiOWE4YzZmMjVj ZmRhNTUwHhcNMjUxMjE4MTkwMTE4WhcNMjUxMjE5MTkwMTE4WjAzMTEwLwYDVQQD Eyg3MjllMWE5NjFkYjRlZTg2OTAzYmUzMTk0NDA5MTdmOWUwNjUyMzkzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3lFy6h4RIpWIKKI2jsAYl+e5O9FV dpQPKdtlEmHm7C1mUhPAW/vXnJwQ6h/Mx39SUm1qa8J8YmFbhWKsP1k4mMoeEeXj zLaJA73cwitwmqlYDUXrFoMzwRe31j6px6q5sAElKC2XqEccTbgWpaj8xO6WOK3r whoYuC47NMH7JdBlMtY+oetqKD79VtjfETm/YI7OIM5vSgF/lEWBVXACU8P4/3hG fEd0Elnq2jDK+Yom3lgqgwYQDFgEOuMGdhGTAtDjlo3dmPNOovc+DNw4PBUkxpun 4+7C5+PsFmWtJkzp99QWORL5vVCWak7xWhVRRPelfvVCCeGN3qLlQBBLZQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHKeGpYdtO6GkDvjGUQJF/ngZSOTMB8GA1UdIwQY MBaAFHD3i2gbZhf+1wzoZ/uajG8lz9pVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY1BlTGFCdG1GXzdYRE9obi01cU1ieVhQMmxVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNy81NmFlMTUtMWNhNS00ZDY5LTlhM2Et ODM3YjEwYzJjNjM2LzEvY1BlTGFCdG1GXzdYRE9obi01cU1ieVhQMmxVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNy81NmFlMTUtMWNhNS00ZDY5LTlhM2EtODM3YjEwYzJjNjM2 LzEvY1BlTGFCdG1GXzdYRE9obi01cU1ieVhQMmxVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAwLBQdM5X 9G/sFzL3EaXsdMXazSAygdWveJa2NHl/RgCcUVcIwsqa6OPT5tKukOR0wUh5ZCn4 +aYVt3WEDN85P/LXh6TIZX3ePgdUjFxA90DzmwCcN2e9BZbdXkhGsZwHdjYNvlu1 4vRNZ+hWzCfMjqZu3eYhWmE72JnKVbCDJu0q+IDuEx+zXYe0ybGohlU+V6x+YAi4 CzHMosbHBRZiykWsLIO+3kw4+PKeSh/yTSQRefh/S9QeGrq412RzpoyKvbNmZmTq GB2dKTCq4MwX21tJQbeWf1nA0pbvLi80t0ek7mBGS6ERFAfX0tzEmtfKF8Sv9qvy VpH5A3f1WA5u5g== -----END CERTIFICATE-----Generated at Fri Dec 19 03:48:19 2025 by rpki-client