This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/d2974f-7efa-4611-8827-260c377a314a/1/cGt_6orTURHKaHqc0ApJ-aTwRZs.mft File: cGt_6orTURHKaHqc0ApJ-aTwRZs.mft (raw, json) Hash identifier: +KzGZZJ7jAip4r7chh3471cjm//L38W1f37pWb8FENY= Subject key identifier: 16:3D:FF:55:9B:C7:1C:DF:E5:11:2C:EC:71:B5:A0:6F:B4:40:B4:3F Authority key identifier: 70:6B:7F:EA:8A:D3:51:11:CA:68:7A:9C:D0:0A:49:F9:A4:F0:45:9B Certificate issuer: /CN=706b7fea8ad35111ca687a9cd00a49f9a4f0459b Certificate serial: 019B0F3791A8391B06FEB17CE60F2F7C4D2B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cGt_6orTURHKaHqc0ApJ-aTwRZs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/d2974f-7efa-4611-8827-260c377a314a/1/cGt_6orTURHKaHqc0ApJ-aTwRZs.mft Manifest number: 1769 Signing time: Thu 11 Dec 2025 21:00:58 +0000 Manifest this update: Thu 11 Dec 2025 21:00:58 +0000 Manifest next update: Fri 12 Dec 2025 21:00:58 +0000 Files and hashes: 1: 1-i7nGTwXEwybr4Pzt1yuXERVK6c.roa (hash: 6WebZuQEVFb53qv4JdObZh7gRJmnrMnS1KiKHpMOHA8=) 2: F98rZRsLL_WSYn3n29uuLg-FPR0.roa (hash: 73uq7x903k93laF4iGlteDX6rFg0Y3etQUcDdi1l7lg=) 3: R66tp2YspSa0WKGVVBRpgjOOMSc.roa (hash: vAJd7pQTatYNcNboScZHezKRexmDJyWedTR7sHg29G0=) 4: VPHhytFNuubbFjm4tYvAl8Nd2ZE.roa (hash: 6/FzWhj3KyFvDY5lx/pXSGk3g0b0b2s63jOD/2yTOio=) 5: cGt_6orTURHKaHqc0ApJ-aTwRZs.crl (hash: UoLbxEj/BDqEAtXgI4RDM0owbKgZRDeEw5ZQUx0/DLw=) 6: zMZkIjmJ2QpgvnpDUAinKvhQb1o.roa (hash: Y7E9I/njb2IhcUidLKH3fAcdQ31FJYDtFn4eagm4C1Q=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/d2974f-7efa-4611-8827-260c377a314a/1/cGt_6orTURHKaHqc0ApJ-aTwRZs.crl rsync://rpki.ripe.net/repository/DEFAULT/37/d2974f-7efa-4611-8827-260c377a314a/1/cGt_6orTURHKaHqc0ApJ-aTwRZs.mft rsync://rpki.ripe.net/repository/DEFAULT/cGt_6orTURHKaHqc0ApJ-aTwRZs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 19:27:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0f:37:91:a8:39:1b:06:fe:b1:7c:e6:0f:2f:7c:4d:2b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=706b7fea8ad35111ca687a9cd00a49f9a4f0459b Validity Not Before: Dec 11 21:00:58 2025 GMT Not After : Dec 12 21:00:58 2025 GMT Subject: CN=163dff559bc71cdfe5112cec71b5a06fb440b43f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:25:33:13:28:21:b9:bf:c9:92:34:40:7b:82: ed:2d:97:79:01:f1:62:9c:40:b4:0b:0b:44:eb:89: 58:88:87:8e:1b:eb:26:6a:30:8e:ea:fb:54:25:41: 19:54:9f:6e:1e:4f:55:d4:98:bd:66:a8:a0:89:8e: 59:33:6b:95:20:08:3c:02:56:5d:49:bc:db:07:4b: d1:c5:2a:7b:1b:1d:1b:f9:9e:dd:cc:e4:30:23:1c: 69:04:64:41:90:13:ce:05:e0:21:10:7c:f8:82:8d: 62:2d:e4:32:84:fb:51:51:4e:bb:71:70:5b:d3:6b: 9d:99:10:c9:46:67:bb:76:88:d2:73:9f:86:02:1d: 57:d0:e1:ad:32:84:66:4c:3b:31:a2:41:dd:1d:c2: 42:b7:d1:05:61:e5:16:87:2f:db:f7:b5:69:63:69: 01:6a:85:a1:57:0d:4d:64:0d:f5:41:53:e4:fa:18: ec:bb:cb:be:e7:59:bd:d8:82:ee:31:c1:e0:1d:c4: 37:a5:d8:fc:5a:c4:d9:15:21:7e:81:08:52:ad:d4: 3b:21:7b:78:66:c0:c0:0b:a7:2e:2b:9e:4e:72:bf: ac:76:16:44:20:f4:70:9b:83:a5:e5:0d:5b:9e:24: c3:32:a3:d3:d2:8b:12:32:8c:31:96:42:81:c8:81: 79:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:3D:FF:55:9B:C7:1C:DF:E5:11:2C:EC:71:B5:A0:6F:B4:40:B4:3F X509v3 Authority Key Identifier: keyid:70:6B:7F:EA:8A:D3:51:11:CA:68:7A:9C:D0:0A:49:F9:A4:F0:45:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cGt_6orTURHKaHqc0ApJ-aTwRZs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/d2974f-7efa-4611-8827-260c377a314a/1/cGt_6orTURHKaHqc0ApJ-aTwRZs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/37/d2974f-7efa-4611-8827-260c377a314a/1/cGt_6orTURHKaHqc0ApJ-aTwRZs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 40:bb:03:81:60:14:07:cf:30:fb:d9:36:57:6d:90:c3:21:cd: dd:65:f1:86:b2:6f:70:7b:c4:f2:7c:2e:eb:2f:10:66:02:4f: 06:f8:74:fa:97:62:0f:01:0e:84:2b:7e:92:60:e0:4f:d2:96: 30:0d:e0:ff:d8:d9:1c:f4:25:6c:d8:7b:97:16:51:c0:53:4c: 86:8b:1e:32:6e:82:a8:14:df:71:d2:c9:cd:ed:e8:20:52:4d: 73:93:fe:c0:d0:e8:f6:10:af:c6:48:72:0e:a2:df:0f:25:ac: 6a:36:12:66:0f:3e:97:5b:d4:9a:74:1b:22:bf:88:26:32:20: 5c:38:bb:92:c8:0a:a5:06:8b:d2:2d:1f:5d:ed:40:6e:ca:92: 39:21:7e:8a:ff:7c:29:ae:23:c1:2c:f7:1f:c5:39:d2:6b:2e: 82:7c:62:bb:54:d7:ec:35:ec:ef:19:85:bd:9d:c6:81:2d:10: ae:21:63:f4:05:82:84:6f:c3:8d:6b:22:d8:b8:60:31:47:40: ca:83:5d:f6:2d:49:78:61:e5:3c:f3:67:f5:ee:fb:9c:0e:de: 8d:e4:dc:88:6e:d7:6d:1b:41:12:e1:db:b7:41:74:31:70:bc: b1:49:b2:f0:45:40:fb:2e:e7:9e:2d:42:ab:58:1a:8b:b1:56: 9a:e5:51:f2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsPN5GoORsG/rF85g8vfE0rMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcwNmI3ZmVhOGFkMzUxMTFjYTY4N2E5Y2QwMGE0OWY5YTRm MDQ1OWIwHhcNMjUxMjExMjEwMDU4WhcNMjUxMjEyMjEwMDU4WjAzMTEwLwYDVQQD EygxNjNkZmY1NTliYzcxY2RmZTUxMTJjZWM3MWI1YTA2ZmI0NDBiNDNmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmSUzEyghub/JkjRAe4LtLZd5AfFi nEC0CwtE64lYiIeOG+smajCO6vtUJUEZVJ9uHk9V1Ji9ZqigiY5ZM2uVIAg8AlZd SbzbB0vRxSp7Gx0b+Z7dzOQwIxxpBGRBkBPOBeAhEHz4go1iLeQyhPtRUU67cXBb 02udmRDJRme7dojSc5+GAh1X0OGtMoRmTDsxokHdHcJCt9EFYeUWhy/b97VpY2kB aoWhVw1NZA31QVPk+hjsu8u+51m92ILuMcHgHcQ3pdj8WsTZFSF+gQhSrdQ7IXt4 ZsDAC6cuK55Ocr+sdhZEIPRwm4Ol5Q1bniTDMqPT0osSMowxlkKByIF5AwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBY9/1Wbxxzf5REs7HG1oG+0QLQ/MB8GA1UdIwQY MBaAFHBrf+qK01ERymh6nNAKSfmk8EWbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY0d0XzZvclRVUkhLYUhxYzBBcEotYVR3UlpzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNy9kMjk3NGYtN2VmYS00NjExLTg4Mjct MjYwYzM3N2EzMTRhLzEvY0d0XzZvclRVUkhLYUhxYzBBcEotYVR3UlpzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNy9kMjk3NGYtN2VmYS00NjExLTg4MjctMjYwYzM3N2EzMTRh LzEvY0d0XzZvclRVUkhLYUhxYzBBcEotYVR3UlpzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQLsDgWAU B88w+9k2V22QwyHN3WXxhrJvcHvE8nwu6y8QZgJPBvh0+pdiDwEOhCt+kmDgT9KW MA3g/9jZHPQlbNh7lxZRwFNMhoseMm6CqBTfcdLJze3oIFJNc5P+wNDo9hCvxkhy DqLfDyWsajYSZg8+l1vUmnQbIr+IJjIgXDi7ksgKpQaL0i0fXe1AbsqSOSF+iv98 Ka4jwSz3H8U50msugnxiu1TX7DXs7xmFvZ3GgS0QriFj9AWChG/DjWsi2LhgMUdA yoNd9i1JeGHlPPNn9e77nA7ejeTciG7XbRtBEuHbt0F0MXC8sUmy8EVA+y7nni1C q1gai7FWmuVR8g== -----END CERTIFICATE-----Generated at Fri Dec 12 02:40:01 2025 by rpki-client