This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/ac9481-6fca-4240-9ed1-c277d3716bd9/1/cGdfald5fFypbD-0XlMb0yeDAWw.mft File: cGdfald5fFypbD-0XlMb0yeDAWw.mft (raw, json) Hash identifier: 6cJPiH7XvKeI6JyvEMWREu0bvVTynCnHzztqMNdfxmM= Subject key identifier: 95:A4:A3:14:11:26:95:51:C0:74:AB:50:A0:53:FD:A8:E4:1E:38:59 Authority key identifier: 70:67:5F:6A:57:79:7C:5C:A9:6C:3F:B4:5E:53:1B:D3:27:83:01:6C Certificate issuer: /CN=70675f6a57797c5ca96c3fb45e531bd32783016c Certificate serial: 019B3757F76690DF67B9A356CF1BA6BF5B04 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cGdfald5fFypbD-0XlMb0yeDAWw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/ac9481-6fca-4240-9ed1-c277d3716bd9/1/cGdfald5fFypbD-0XlMb0yeDAWw.mft Manifest number: 1788 Signing time: Fri 19 Dec 2025 16:01:10 +0000 Manifest this update: Fri 19 Dec 2025 16:01:10 +0000 Manifest next update: Sat 20 Dec 2025 16:01:10 +0000 Files and hashes: 1: OlU6obIQjael3LSg0ssh_4uTiio.roa (hash: PEk/sjzeYnoi97rfsFTmYB012K4urx+cqdtXV/YTu3g=) 2: cGdfald5fFypbD-0XlMb0yeDAWw.crl (hash: BX6iSa4ThKf/n/WVyqJg5wyBt/5vAaOWi0m0pAW2RVg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/ac9481-6fca-4240-9ed1-c277d3716bd9/1/cGdfald5fFypbD-0XlMb0yeDAWw.crl rsync://rpki.ripe.net/repository/DEFAULT/44/ac9481-6fca-4240-9ed1-c277d3716bd9/1/cGdfald5fFypbD-0XlMb0yeDAWw.mft rsync://rpki.ripe.net/repository/DEFAULT/cGdfald5fFypbD-0XlMb0yeDAWw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 16:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:37:57:f7:66:90:df:67:b9:a3:56:cf:1b:a6:bf:5b:04 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=70675f6a57797c5ca96c3fb45e531bd32783016c Validity Not Before: Dec 19 16:01:10 2025 GMT Not After : Dec 20 16:01:10 2025 GMT Subject: CN=95a4a31411269551c074ab50a053fda8e41e3859 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:f3:ae:3b:04:ff:c8:40:41:41:ae:cb:80:93: 5d:0b:a0:da:d0:83:3f:14:5b:b6:f8:37:cb:87:27: 1d:65:da:9d:5d:38:fb:5b:7c:dd:07:4b:5b:54:db: 06:36:8d:13:cb:17:9c:41:6d:c8:54:16:8c:98:f5: 94:a4:e3:e0:97:6a:85:ee:0c:a7:64:09:71:f7:05: 7f:78:11:33:7a:e7:aa:60:ee:10:f9:6e:1b:24:fa: f2:8c:2e:7a:66:ef:94:53:eb:f9:48:40:fc:46:cf: c9:6e:98:cb:2d:3b:8e:5a:2b:ed:71:2d:bf:10:fe: 4b:98:fe:ea:93:3e:19:9e:11:a4:e1:84:38:15:7f: c2:68:af:64:3e:7c:7b:bd:a5:48:7a:ab:62:7f:67: 22:de:05:67:64:7f:37:32:f5:ff:44:02:77:7e:ee: bc:ab:97:52:94:a3:27:47:09:e9:74:f9:80:28:ac: c2:ab:d4:d1:d6:0b:b0:b2:ca:bf:8e:18:e7:f5:2f: 1f:8b:4f:7a:94:9d:56:06:7c:92:7f:60:90:d2:2e: 6e:fb:a6:36:9b:8e:9c:c2:14:f5:93:b9:1e:f3:6d: 28:b4:c0:97:cf:08:fc:6d:ca:57:7c:11:a6:d4:8e: 13:22:6f:68:c0:b1:65:a2:f1:db:ca:97:6c:b0:4b: ce:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:A4:A3:14:11:26:95:51:C0:74:AB:50:A0:53:FD:A8:E4:1E:38:59 X509v3 Authority Key Identifier: keyid:70:67:5F:6A:57:79:7C:5C:A9:6C:3F:B4:5E:53:1B:D3:27:83:01:6C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cGdfald5fFypbD-0XlMb0yeDAWw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/ac9481-6fca-4240-9ed1-c277d3716bd9/1/cGdfald5fFypbD-0XlMb0yeDAWw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/44/ac9481-6fca-4240-9ed1-c277d3716bd9/1/cGdfald5fFypbD-0XlMb0yeDAWw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 69:0d:27:5c:0c:3a:3f:7e:2a:aa:30:a9:31:b6:42:7d:43:45: 5f:10:ee:85:d1:3d:87:f9:a1:c9:b0:98:65:f9:d0:27:53:17: e9:8d:82:ec:c0:bc:3f:1a:cc:e2:f6:d3:24:24:16:72:de:8a: 5b:9f:89:97:8c:0d:c0:ab:da:4c:db:41:54:4d:f8:c4:99:e0: 46:ff:30:dd:32:59:7c:93:22:dc:1e:5d:e6:c4:34:2d:16:72: 84:39:2f:de:75:a5:9c:e1:16:1d:31:ac:c1:a1:2c:54:ff:f6: 76:d1:9b:db:73:d7:55:b6:ec:97:3c:dc:c1:3f:d0:a9:05:65: 80:31:a8:c2:b3:55:45:15:00:69:f5:61:5c:b8:f1:66:62:18: 65:3b:ff:96:66:72:0c:55:ff:ad:c6:ff:93:a6:bd:e8:14:a6: 72:cb:62:15:0d:f3:ff:7d:ba:2c:01:16:82:01:12:a8:ce:a6: 53:38:00:ab:2a:25:dc:13:45:1a:98:37:28:37:64:89:03:a3: 66:b1:89:ad:4f:5e:92:7e:59:3f:0b:9c:94:82:7d:eb:57:1d: dd:27:02:28:d4:08:4f:f7:00:e0:cf:ee:cf:3f:ad:c9:88:0c: 4f:27:a5:05:b8:a4:ed:67:e6:74:7a:ea:81:98:08:4a:25:6e: 7d:95:57:64 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs3V/dmkN9nuaNWzxumv1sEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcwNjc1ZjZhNTc3OTdjNWNhOTZjM2ZiNDVlNTMxYmQzMjc4 MzAxNmMwHhcNMjUxMjE5MTYwMTEwWhcNMjUxMjIwMTYwMTEwWjAzMTEwLwYDVQQD Eyg5NWE0YTMxNDExMjY5NTUxYzA3NGFiNTBhMDUzZmRhOGU0MWUzODU5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjPOuOwT/yEBBQa7LgJNdC6Da0IM/ FFu2+DfLhycdZdqdXTj7W3zdB0tbVNsGNo0TyxecQW3IVBaMmPWUpOPgl2qF7gyn ZAlx9wV/eBEzeueqYO4Q+W4bJPryjC56Zu+UU+v5SED8Rs/JbpjLLTuOWivtcS2/ EP5LmP7qkz4ZnhGk4YQ4FX/CaK9kPnx7vaVIeqtif2ci3gVnZH83MvX/RAJ3fu68 q5dSlKMnRwnpdPmAKKzCq9TR1guwssq/jhjn9S8fi096lJ1WBnySf2CQ0i5u+6Y2 m46cwhT1k7ke820otMCXzwj8bcpXfBGm1I4TIm9owLFlovHbypdssEvOowIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJWkoxQRJpVRwHSrUKBT/ajkHjhZMB8GA1UdIwQY MBaAFHBnX2pXeXxcqWw/tF5TG9MngwFsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY0dkZmFsZDVmRnlwYkQtMFhsTWIweWVEQVd3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NC9hYzk0ODEtNmZjYS00MjQwLTllZDEt YzI3N2QzNzE2YmQ5LzEvY0dkZmFsZDVmRnlwYkQtMFhsTWIweWVEQVd3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80NC9hYzk0ODEtNmZjYS00MjQwLTllZDEtYzI3N2QzNzE2YmQ5 LzEvY0dkZmFsZDVmRnlwYkQtMFhsTWIweWVEQVd3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaQ0nXAw6 P34qqjCpMbZCfUNFXxDuhdE9h/mhybCYZfnQJ1MX6Y2C7MC8PxrM4vbTJCQWct6K W5+Jl4wNwKvaTNtBVE34xJngRv8w3TJZfJMi3B5d5sQ0LRZyhDkv3nWlnOEWHTGs waEsVP/2dtGb23PXVbbslzzcwT/QqQVlgDGowrNVRRUAafVhXLjxZmIYZTv/lmZy DFX/rcb/k6a96BSmcstiFQ3z/326LAEWggESqM6mUzgAqyol3BNFGpg3KDdkiQOj ZrGJrU9ekn5ZPwuclIJ961cd3ScCKNQIT/cA4M/uzz+tyYgMTyelBbik7WfmdHrq gZgISiVufZVXZA== -----END CERTIFICATE-----Generated at Fri Dec 19 22:09:16 2025 by rpki-client