This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/cae652-a218-42f6-97af-794b28eb16c5/1/cTm8XO866t8yYT99lZ7I5Ap0KRg.mft File: cTm8XO866t8yYT99lZ7I5Ap0KRg.mft (raw, json) Hash identifier: TV3A0ILe2el4HkVEqisOgubx9M2Von3e6wl5e+zZW8w= Subject key identifier: 4C:99:AA:17:E2:30:7F:88:1D:14:61:CC:24:DD:BE:3F:16:54:FF:EF Authority key identifier: 71:39:BC:5C:EF:3A:EA:DF:32:61:3F:7D:95:9E:C8:E4:0A:74:29:18 Certificate issuer: /CN=7139bc5cef3aeadf32613f7d959ec8e40a742918 Certificate serial: 019AABA6C9AE808BFC2519E300236694587D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cTm8XO866t8yYT99lZ7I5Ap0KRg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/cae652-a218-42f6-97af-794b28eb16c5/1/cTm8XO866t8yYT99lZ7I5Ap0KRg.mft Manifest number: 0DA4 Signing time: Sat 22 Nov 2025 13:00:25 +0000 Manifest this update: Sat 22 Nov 2025 13:00:25 +0000 Manifest next update: Sun 23 Nov 2025 13:00:25 +0000 Files and hashes: 1: 1bCVWoklxu9pgUWQ1mLHB-EXkFA.roa (hash: D3wGeYBSZH8FYHWMq5xGTReS6aaUmIPr/PoC2v0b+3Q=) 2: cTm8XO866t8yYT99lZ7I5Ap0KRg.crl (hash: bU2jjpwdUAiBX3eusLD1fJpWGKxkJplMSvA3bNXoNek=) 3: vpqI0SPiMCscv2APIfDksYTh41I.roa (hash: hkscOp/XUtYy+TgoXBDOQozFrFzTsJ23rQpXU2E0uBw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/cae652-a218-42f6-97af-794b28eb16c5/1/cTm8XO866t8yYT99lZ7I5Ap0KRg.crl rsync://rpki.ripe.net/repository/DEFAULT/4d/cae652-a218-42f6-97af-794b28eb16c5/1/cTm8XO866t8yYT99lZ7I5Ap0KRg.mft rsync://rpki.ripe.net/repository/DEFAULT/cTm8XO866t8yYT99lZ7I5Ap0KRg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 23 Nov 2025 12:00:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:ab:a6:c9:ae:80:8b:fc:25:19:e3:00:23:66:94:58:7d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7139bc5cef3aeadf32613f7d959ec8e40a742918 Validity Not Before: Nov 22 13:00:25 2025 GMT Not After : Nov 23 13:00:25 2025 GMT Subject: CN=4c99aa17e2307f881d1461cc24ddbe3f1654ffef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:dd:67:52:e3:6d:09:1a:ef:1f:f6:f8:99:b1: 5d:9c:fd:d8:23:6e:dd:0a:e6:b2:08:7e:77:d1:1d: 2e:d8:6a:e1:bb:71:2a:e1:e3:e2:48:bc:ad:b0:85: eb:6a:28:d5:57:85:0b:4d:71:0a:1d:ba:6f:22:b3: ab:3b:8a:96:a3:5e:65:9f:24:df:f6:fd:2f:40:59: 6b:4e:b3:e5:5a:2d:26:ae:aa:cb:c9:f8:23:2c:c1: 84:fb:56:82:06:4d:de:55:55:c8:36:54:0d:5f:7f: 2f:66:45:19:a8:cb:bc:81:23:0a:3b:03:53:40:fe: 09:31:4f:21:83:c7:b7:48:a3:db:aa:6d:e6:06:59: 08:13:57:66:42:c4:3b:92:43:53:61:a6:d6:a1:32: db:c3:d3:fe:c8:9f:c3:f1:0c:6b:09:f9:91:d0:0d: 76:16:2d:7b:15:53:eb:72:f9:25:dd:d2:16:52:99: cc:8f:96:32:2e:ef:0d:96:f4:f3:2d:8b:fd:c9:e0: 32:02:7d:58:9c:92:36:60:a1:61:00:0b:19:ad:b7: d9:f0:1c:29:86:0c:a4:49:03:bb:1b:e8:bc:47:ce: d3:ab:f4:9e:50:43:f4:91:aa:30:85:79:e6:d3:93: c2:14:e1:44:29:21:60:8f:ba:6d:11:48:93:2c:b5: ad:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:99:AA:17:E2:30:7F:88:1D:14:61:CC:24:DD:BE:3F:16:54:FF:EF X509v3 Authority Key Identifier: keyid:71:39:BC:5C:EF:3A:EA:DF:32:61:3F:7D:95:9E:C8:E4:0A:74:29:18 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cTm8XO866t8yYT99lZ7I5Ap0KRg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/cae652-a218-42f6-97af-794b28eb16c5/1/cTm8XO866t8yYT99lZ7I5Ap0KRg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/cae652-a218-42f6-97af-794b28eb16c5/1/cTm8XO866t8yYT99lZ7I5Ap0KRg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 93:78:dd:57:a6:18:b7:31:4e:bd:38:81:5f:2e:59:bb:a6:b9: 9e:79:02:85:6f:15:66:26:63:0b:1b:78:18:00:04:ec:8d:22: 2a:b9:9f:84:76:c9:95:23:f5:92:cd:c4:89:71:d8:20:3a:4c: 35:71:10:fd:cb:59:a8:89:09:12:f9:9a:c4:4c:46:0b:c5:48: 75:5d:1c:61:41:96:46:c3:50:dc:2d:1a:9e:c5:99:90:28:b5: d2:d8:2a:91:1e:fd:8b:ba:0c:f7:b3:61:58:06:ec:e6:7a:01: 10:ba:e7:4e:a0:95:87:90:4f:4f:7d:c3:f1:75:2b:2c:91:06: 00:9f:4c:11:b6:94:c4:00:bc:fd:3b:b7:b8:d4:12:3d:46:df: 77:d5:19:7d:d4:20:aa:a7:9d:60:46:96:fd:cf:32:b7:b1:70: c1:7a:7c:9e:c4:ea:2e:29:86:8c:2d:d2:ff:2b:69:f8:08:40: a5:4d:2a:80:1e:fa:c6:92:58:f1:8d:bd:83:b1:ad:69:e1:99: b7:af:ce:06:5e:24:3a:97:92:56:38:e4:52:bb:4e:59:73:4e: 73:ee:a4:be:13:cd:91:42:f3:6d:47:14:66:aa:0f:7a:fd:37: 9c:a6:82:70:a1:8e:bf:46:35:0c:9c:60:fa:41:10:95:a6:af: 6e:13:b9:4e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZqrpsmugIv8JRnjACNmlFh9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcxMzliYzVjZWYzYWVhZGYzMjYxM2Y3ZDk1OWVjOGU0MGE3 NDI5MTgwHhcNMjUxMTIyMTMwMDI1WhcNMjUxMTIzMTMwMDI1WjAzMTEwLwYDVQQD Eyg0Yzk5YWExN2UyMzA3Zjg4MWQxNDYxY2MyNGRkYmUzZjE2NTRmZmVmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj91nUuNtCRrvH/b4mbFdnP3YI27d CuayCH530R0u2Grhu3Eq4ePiSLytsIXraijVV4ULTXEKHbpvIrOrO4qWo15lnyTf 9v0vQFlrTrPlWi0mrqrLyfgjLMGE+1aCBk3eVVXINlQNX38vZkUZqMu8gSMKOwNT QP4JMU8hg8e3SKPbqm3mBlkIE1dmQsQ7kkNTYabWoTLbw9P+yJ/D8QxrCfmR0A12 Fi17FVPrcvkl3dIWUpnMj5YyLu8NlvTzLYv9yeAyAn1YnJI2YKFhAAsZrbfZ8Bwp hgykSQO7G+i8R87Tq/SeUEP0kaowhXnm05PCFOFEKSFgj7ptEUiTLLWt4QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEyZqhfiMH+IHRRhzCTdvj8WVP/vMB8GA1UdIwQY MBaAFHE5vFzvOurfMmE/fZWeyOQKdCkYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY1RtOFhPODY2dDh5WVQ5OWxaN0k1QXAwS1JnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZC9jYWU2NTItYTIxOC00MmY2LTk3YWYt Nzk0YjI4ZWIxNmM1LzEvY1RtOFhPODY2dDh5WVQ5OWxaN0k1QXAwS1JnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80ZC9jYWU2NTItYTIxOC00MmY2LTk3YWYtNzk0YjI4ZWIxNmM1 LzEvY1RtOFhPODY2dDh5WVQ5OWxaN0k1QXAwS1JnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAk3jdV6YY tzFOvTiBXy5Zu6a5nnkChW8VZiZjCxt4GAAE7I0iKrmfhHbJlSP1ks3EiXHYIDpM NXEQ/ctZqIkJEvmaxExGC8VIdV0cYUGWRsNQ3C0ansWZkCi10tgqkR79i7oM97Nh WAbs5noBELrnTqCVh5BPT33D8XUrLJEGAJ9MEbaUxAC8/Tu3uNQSPUbfd9UZfdQg qqedYEaW/c8yt7FwwXp8nsTqLimGjC3S/ytp+AhApU0qgB76xpJY8Y29g7GtaeGZ t6/OBl4kOpeSVjjkUrtOWXNOc+6kvhPNkULzbUcUZqoPev03nKaCcKGOv0Y1DJxg +kEQlaavbhO5Tg== -----END CERTIFICATE-----Generated at Sat Nov 22 21:50:00 2025 by rpki-client