This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/4989ba-9af3-4e3d-845d-eb977164a7e4/1/CncZY0DSFEuMp7B3iYS7BLwcs3g.mft File: CncZY0DSFEuMp7B3iYS7BLwcs3g.mft (raw, json) Hash identifier: tS5wtqZIAnPCYeUjcZ+xif5qK8i5z84GUKx8PpRy/ic= Subject key identifier: AA:E4:29:22:48:A9:46:58:01:2B:DC:DE:5D:34:FB:4C:E0:E5:83:7C Authority key identifier: 0A:77:19:63:40:D2:14:4B:8C:A7:B0:77:89:84:BB:04:BC:1C:B3:78 Certificate issuer: /CN=0a77196340d2144b8ca7b0778984bb04bc1cb378 Certificate serial: 019B1DCF0995EFC9D53AF5DEDFFD67DA510C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CncZY0DSFEuMp7B3iYS7BLwcs3g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/4989ba-9af3-4e3d-845d-eb977164a7e4/1/CncZY0DSFEuMp7B3iYS7BLwcs3g.mft Manifest number: 14C4 Signing time: Sun 14 Dec 2025 17:01:06 +0000 Manifest this update: Sun 14 Dec 2025 17:01:06 +0000 Manifest next update: Mon 15 Dec 2025 17:01:06 +0000 Files and hashes: 1: 4xZ5ORo-JniyG_UP3X4ZjI8vP5g.roa (hash: aS+lefUlxdDyZxk7hvBM2gPb0KZ4ihSIRGGBXAMkKqI=) 2: CncZY0DSFEuMp7B3iYS7BLwcs3g.crl (hash: nW2/vfv3jdOoO5aPMQbhlzeARs3gREX8e242NuBTW+s=) 3: P5dWxSLpxtp-49eZGd_31_JRHHo.roa (hash: NT3aNwht6fMF/zfz0JOvuz5n/skNMJxnJBDVpcrq8Dc=) 4: c7fpJhGeGEDD59_FpWUO82fzF7I.roa (hash: P2sJUsVRcw69DdEldFG6V18oZpVmrOXfMzx820qI+8E=) 5: oT4_ERJ1NK-RUR-knGGnWo2w3XU.roa (hash: gXeEbcCW9pl3CKjG36RJur3xaPc6GaReOGS3i/R+/dY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/4989ba-9af3-4e3d-845d-eb977164a7e4/1/CncZY0DSFEuMp7B3iYS7BLwcs3g.crl rsync://rpki.ripe.net/repository/DEFAULT/4e/4989ba-9af3-4e3d-845d-eb977164a7e4/1/CncZY0DSFEuMp7B3iYS7BLwcs3g.mft rsync://rpki.ripe.net/repository/DEFAULT/CncZY0DSFEuMp7B3iYS7BLwcs3g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 15 Dec 2025 14:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:1d:cf:09:95:ef:c9:d5:3a:f5:de:df:fd:67:da:51:0c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0a77196340d2144b8ca7b0778984bb04bc1cb378 Validity Not Before: Dec 14 17:01:06 2025 GMT Not After : Dec 15 17:01:06 2025 GMT Subject: CN=aae4292248a94658012bdcde5d34fb4ce0e5837c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:86:01:fd:eb:aa:8f:48:87:f9:d9:95:47:d4: 3e:05:13:f4:61:08:f2:9b:c7:92:54:71:6b:a8:be: e6:53:fe:f3:e4:91:a1:b0:08:a2:e6:af:50:21:b3: 55:3f:b1:54:38:d4:30:7e:49:82:63:1b:39:04:cb: 99:35:85:f3:e9:a0:bd:92:9d:39:89:71:e3:5d:ca: b2:16:12:98:76:fe:26:a1:63:fd:7f:72:3b:4d:5e: a3:f6:22:60:ca:70:17:7e:02:11:50:04:ab:a4:f4: 84:54:52:e9:75:dd:b3:18:fc:66:6d:ba:91:67:5d: 76:4a:30:31:9b:a9:4e:a7:8a:a2:54:4f:22:ac:a4: 5f:19:c2:d1:15:25:4d:4d:27:f1:a9:e8:a9:4b:88: f6:9b:a9:6e:35:b5:ce:2c:ca:55:99:1f:18:44:62: 21:df:12:79:69:96:c4:1e:1e:87:ed:80:8e:27:c3: 61:af:4b:b0:8f:fe:c4:bc:17:8a:2a:b1:76:8d:e7: ab:43:81:39:c0:81:1a:20:60:54:9a:e8:e7:62:07: 9d:e4:e1:2f:f6:e5:a1:ef:18:69:93:01:e7:62:09: a5:ab:8b:0a:80:b8:9e:17:4e:a0:8f:82:e5:7b:b6: f7:06:ef:1d:07:0a:62:48:9c:61:06:66:05:d6:77: c5:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:E4:29:22:48:A9:46:58:01:2B:DC:DE:5D:34:FB:4C:E0:E5:83:7C X509v3 Authority Key Identifier: keyid:0A:77:19:63:40:D2:14:4B:8C:A7:B0:77:89:84:BB:04:BC:1C:B3:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CncZY0DSFEuMp7B3iYS7BLwcs3g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/4989ba-9af3-4e3d-845d-eb977164a7e4/1/CncZY0DSFEuMp7B3iYS7BLwcs3g.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/4989ba-9af3-4e3d-845d-eb977164a7e4/1/CncZY0DSFEuMp7B3iYS7BLwcs3g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 57:d1:1e:ad:1e:2a:c7:4e:41:c4:0d:f4:07:48:ee:77:37:61: b5:18:0a:cc:ea:63:21:d2:00:ac:9c:2b:5b:35:2b:04:fa:61: 00:e4:79:d8:e6:dc:28:b4:54:8e:32:7f:d7:1d:8c:71:71:17: 66:40:ec:f0:9a:8f:31:73:fa:94:e2:27:64:fb:42:7e:58:38: fc:d9:a9:a9:57:dc:49:7b:f7:82:48:c4:db:d0:5b:87:b9:23: 1d:47:f0:30:37:a0:39:37:2f:85:10:36:60:61:f5:22:6a:10: 66:b8:8f:a8:45:33:d6:12:b8:a7:f0:dc:c3:56:78:32:87:8a: 6e:ee:a0:24:d4:0d:88:da:35:84:d3:3b:a5:d4:4f:cb:41:af: 90:d3:ea:c0:47:3b:56:d6:94:5d:cd:03:b1:67:db:38:87:72: 20:58:21:f7:81:3b:22:bf:fd:cc:af:ed:20:e3:ed:20:a5:6b: 15:bf:60:95:40:12:f2:58:58:64:7c:7e:c0:9f:12:07:77:cd: 2e:90:b2:43:3e:7c:de:23:09:09:b7:ce:4c:95:6f:27:91:fe: 50:72:cb:3a:06:c5:49:ae:f0:9d:3c:ac:83:a1:7e:04:e0:13: a4:fb:a8:27:0b:57:fb:e8:88:88:6a:70:ba:23:30:25:3a:52: 49:91:56:b7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsdzwmV78nVOvXe3/1n2lEMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBhNzcxOTYzNDBkMjE0NGI4Y2E3YjA3Nzg5ODRiYjA0YmMx Y2IzNzgwHhcNMjUxMjE0MTcwMTA2WhcNMjUxMjE1MTcwMTA2WjAzMTEwLwYDVQQD EyhhYWU0MjkyMjQ4YTk0NjU4MDEyYmRjZGU1ZDM0ZmI0Y2UwZTU4MzdjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxYYB/euqj0iH+dmVR9Q+BRP0YQjy m8eSVHFrqL7mU/7z5JGhsAii5q9QIbNVP7FUONQwfkmCYxs5BMuZNYXz6aC9kp05 iXHjXcqyFhKYdv4moWP9f3I7TV6j9iJgynAXfgIRUASrpPSEVFLpdd2zGPxmbbqR Z112SjAxm6lOp4qiVE8irKRfGcLRFSVNTSfxqeipS4j2m6luNbXOLMpVmR8YRGIh 3xJ5aZbEHh6H7YCOJ8Nhr0uwj/7EvBeKKrF2jeerQ4E5wIEaIGBUmujnYged5OEv 9uWh7xhpkwHnYgmlq4sKgLieF06gj4Lle7b3Bu8dBwpiSJxhBmYF1nfFSQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKrkKSJIqUZYASvc3l00+0zg5YN8MB8GA1UdIwQY MBaAFAp3GWNA0hRLjKewd4mEuwS8HLN4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ25jWlkwRFNGRXVNcDdCM2lZUzdCTHdjczNnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZS80OTg5YmEtOWFmMy00ZTNkLTg0NWQt ZWI5NzcxNjRhN2U0LzEvQ25jWlkwRFNGRXVNcDdCM2lZUzdCTHdjczNnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80ZS80OTg5YmEtOWFmMy00ZTNkLTg0NWQtZWI5NzcxNjRhN2U0 LzEvQ25jWlkwRFNGRXVNcDdCM2lZUzdCTHdjczNnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAV9EerR4q x05BxA30B0judzdhtRgKzOpjIdIArJwrWzUrBPphAOR52ObcKLRUjjJ/1x2McXEX ZkDs8JqPMXP6lOInZPtCflg4/NmpqVfcSXv3gkjE29Bbh7kjHUfwMDegOTcvhRA2 YGH1ImoQZriPqEUz1hK4p/Dcw1Z4MoeKbu6gJNQNiNo1hNM7pdRPy0GvkNPqwEc7 VtaUXc0DsWfbOIdyIFgh94E7Ir/9zK/tIOPtIKVrFb9glUAS8lhYZHx+wJ8SB3fN LpCyQz583iMJCbfOTJVvJ5H+UHLLOgbFSa7wnTysg6F+BOATpPuoJwtX++iIiGpw uiMwJTpSSZFWtw== -----END CERTIFICATE-----Generated at Sun Dec 14 22:23:39 2025 by rpki-client