This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/4989ba-9af3-4e3d-845d-eb977164a7e4/1/CncZY0DSFEuMp7B3iYS7BLwcs3g.mft File: CncZY0DSFEuMp7B3iYS7BLwcs3g.mft (raw, json) Hash identifier: a541cbNvWhHY2Mm+5hMK7DnhLkEP8Lg1nk7G2FFSeRA= Subject key identifier: 09:9B:36:1F:82:8B:5C:18:25:A7:B1:E2:B0:40:EA:9D:AD:28:78:CD Authority key identifier: 0A:77:19:63:40:D2:14:4B:8C:A7:B0:77:89:84:BB:04:BC:1C:B3:78 Certificate issuer: /CN=0a77196340d2144b8ca7b0778984bb04bc1cb378 Certificate serial: 019B465D1BEB432C9AD0309F6021A416B255 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CncZY0DSFEuMp7B3iYS7BLwcs3g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/4989ba-9af3-4e3d-845d-eb977164a7e4/1/CncZY0DSFEuMp7B3iYS7BLwcs3g.mft Manifest number: 14D9 Signing time: Mon 22 Dec 2025 14:01:05 +0000 Manifest this update: Mon 22 Dec 2025 14:01:05 +0000 Manifest next update: Tue 23 Dec 2025 14:01:05 +0000 Files and hashes: 1: 4xZ5ORo-JniyG_UP3X4ZjI8vP5g.roa (hash: aS+lefUlxdDyZxk7hvBM2gPb0KZ4ihSIRGGBXAMkKqI=) 2: CncZY0DSFEuMp7B3iYS7BLwcs3g.crl (hash: gmQ7GXtfzAPPuyVdG1kMSc/SpJvL/JTS8UnqdMDCNZk=) 3: P5dWxSLpxtp-49eZGd_31_JRHHo.roa (hash: NT3aNwht6fMF/zfz0JOvuz5n/skNMJxnJBDVpcrq8Dc=) 4: c7fpJhGeGEDD59_FpWUO82fzF7I.roa (hash: P2sJUsVRcw69DdEldFG6V18oZpVmrOXfMzx820qI+8E=) 5: oT4_ERJ1NK-RUR-knGGnWo2w3XU.roa (hash: gXeEbcCW9pl3CKjG36RJur3xaPc6GaReOGS3i/R+/dY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/4989ba-9af3-4e3d-845d-eb977164a7e4/1/CncZY0DSFEuMp7B3iYS7BLwcs3g.crl rsync://rpki.ripe.net/repository/DEFAULT/4e/4989ba-9af3-4e3d-845d-eb977164a7e4/1/CncZY0DSFEuMp7B3iYS7BLwcs3g.mft rsync://rpki.ripe.net/repository/DEFAULT/CncZY0DSFEuMp7B3iYS7BLwcs3g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 14:01:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:46:5d:1b:eb:43:2c:9a:d0:30:9f:60:21:a4:16:b2:55 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0a77196340d2144b8ca7b0778984bb04bc1cb378 Validity Not Before: Dec 22 14:01:05 2025 GMT Not After : Dec 23 14:01:05 2025 GMT Subject: CN=099b361f828b5c1825a7b1e2b040ea9dad2878cd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:d6:57:08:77:1b:2b:83:65:bc:9b:e1:6d:25: 60:55:94:4c:a6:e5:56:41:7d:61:03:63:ee:01:22: 70:39:87:ac:8b:c1:94:a5:3c:84:c1:15:44:b5:86: e6:e7:0b:93:f1:63:a6:2f:c7:b1:aa:4e:d5:38:9b: 27:25:99:6c:cc:ac:b2:09:ff:a9:f4:9a:59:91:f5: 0e:d5:c2:a3:70:eb:dc:59:77:a2:2d:e9:09:ad:82: e7:57:1c:fb:37:57:d0:03:b2:41:b9:01:cd:71:74: 2e:d6:ad:d2:07:32:dd:b4:b9:05:7e:c2:36:58:84: 48:6d:01:02:2e:6d:b2:85:c4:df:7c:1c:99:44:ac: 52:e5:f3:3d:a8:69:1b:5c:92:a1:af:2c:67:ca:87: d6:1a:d3:93:95:e7:93:1f:be:d9:e7:2b:68:d8:b8: a2:e9:66:80:06:d5:5e:3f:7e:26:1b:4d:9b:b7:81: 4b:b2:27:87:33:b8:48:24:83:47:da:1b:22:8f:82: e1:c1:c3:00:1e:14:e7:3c:a8:93:47:fe:f0:f2:4e: 0f:60:ed:3c:0b:92:12:46:3c:05:1c:29:9c:10:b8: ae:e0:b4:72:b6:d5:84:a9:a0:ea:ff:ac:53:f3:8e: 0e:b2:2d:85:b7:65:c2:93:05:f2:89:ed:00:25:3a: 76:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:9B:36:1F:82:8B:5C:18:25:A7:B1:E2:B0:40:EA:9D:AD:28:78:CD X509v3 Authority Key Identifier: keyid:0A:77:19:63:40:D2:14:4B:8C:A7:B0:77:89:84:BB:04:BC:1C:B3:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CncZY0DSFEuMp7B3iYS7BLwcs3g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/4989ba-9af3-4e3d-845d-eb977164a7e4/1/CncZY0DSFEuMp7B3iYS7BLwcs3g.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/4989ba-9af3-4e3d-845d-eb977164a7e4/1/CncZY0DSFEuMp7B3iYS7BLwcs3g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1d:6c:b3:08:21:03:c2:55:fc:10:45:91:a0:ed:d5:8c:dc:64: d1:e6:5e:bf:f3:f0:36:02:38:cd:79:f4:46:56:62:35:4e:e5: 2e:51:5e:21:06:24:6b:0f:c3:bc:06:1f:11:84:5c:c6:52:ec: 43:07:92:18:75:d8:57:6b:8e:29:c8:49:97:59:a8:56:90:2c: e5:3f:7e:bf:42:98:f4:6f:7f:68:ae:fe:ef:52:4c:f8:2f:f6: 8c:5c:54:e2:06:ad:cd:98:7e:b9:8d:de:77:6b:06:b9:16:8d: b7:4a:d6:e2:9f:72:63:d3:a0:df:a9:41:09:fc:88:ff:98:98: 75:52:1f:a9:c9:ad:72:9f:46:b3:ab:e0:5e:19:19:5c:75:87: 12:71:1d:a9:98:f7:7e:2e:9f:b7:76:57:64:52:c9:ed:20:39: d2:77:fc:58:aa:19:6a:80:81:57:21:d4:5a:b7:95:ad:e3:de: 31:e1:83:c8:d1:33:5f:9e:57:fe:a1:b5:73:ff:8e:71:aa:9d: 58:82:45:02:bc:2b:24:6a:52:42:b1:68:12:e4:2d:22:cb:8b: 94:36:0b:53:ee:6e:94:49:a1:f4:56:97:17:4d:c7:e8:aa:a8: 75:a8:56:1a:c5:48:f7:38:00:0f:bf:4c:56:2f:68:ce:32:a7: d1:c9:5e:73 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtGXRvrQyya0DCfYCGkFrJVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBhNzcxOTYzNDBkMjE0NGI4Y2E3YjA3Nzg5ODRiYjA0YmMx Y2IzNzgwHhcNMjUxMjIyMTQwMTA1WhcNMjUxMjIzMTQwMTA1WjAzMTEwLwYDVQQD EygwOTliMzYxZjgyOGI1YzE4MjVhN2IxZTJiMDQwZWE5ZGFkMjg3OGNkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv9ZXCHcbK4NlvJvhbSVgVZRMpuVW QX1hA2PuASJwOYesi8GUpTyEwRVEtYbm5wuT8WOmL8exqk7VOJsnJZlszKyyCf+p 9JpZkfUO1cKjcOvcWXeiLekJrYLnVxz7N1fQA7JBuQHNcXQu1q3SBzLdtLkFfsI2 WIRIbQECLm2yhcTffByZRKxS5fM9qGkbXJKhryxnyofWGtOTleeTH77Z5yto2Lii 6WaABtVeP34mG02bt4FLsieHM7hIJINH2hsij4LhwcMAHhTnPKiTR/7w8k4PYO08 C5ISRjwFHCmcELiu4LRyttWEqaDq/6xT844Osi2Ft2XCkwXyie0AJTp2pQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAmbNh+Ci1wYJaex4rBA6p2tKHjNMB8GA1UdIwQY MBaAFAp3GWNA0hRLjKewd4mEuwS8HLN4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ25jWlkwRFNGRXVNcDdCM2lZUzdCTHdjczNnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZS80OTg5YmEtOWFmMy00ZTNkLTg0NWQt ZWI5NzcxNjRhN2U0LzEvQ25jWlkwRFNGRXVNcDdCM2lZUzdCTHdjczNnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80ZS80OTg5YmEtOWFmMy00ZTNkLTg0NWQtZWI5NzcxNjRhN2U0 LzEvQ25jWlkwRFNGRXVNcDdCM2lZUzdCTHdjczNnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHWyzCCED wlX8EEWRoO3VjNxk0eZev/PwNgI4zXn0RlZiNU7lLlFeIQYkaw/DvAYfEYRcxlLs QweSGHXYV2uOKchJl1moVpAs5T9+v0KY9G9/aK7+71JM+C/2jFxU4gatzZh+uY3e d2sGuRaNt0rW4p9yY9Og36lBCfyI/5iYdVIfqcmtcp9Gs6vgXhkZXHWHEnEdqZj3 fi6ft3ZXZFLJ7SA50nf8WKoZaoCBVyHUWreVrePeMeGDyNEzX55X/qG1c/+Ocaqd WIJFArwrJGpSQrFoEuQtIsuLlDYLU+5ulEmh9FaXF03H6KqodahWGsVI9zgAD79M Vi9ozjKn0clecw== -----END CERTIFICATE-----Generated at Mon Dec 22 22:32:28 2025 by rpki-client