This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/956db9-c8f7-4b9f-a56e-bc6db7248add/1/cPmxat8v0xmIhZkitEV0gd1-70A.mft File: cPmxat8v0xmIhZkitEV0gd1-70A.mft (raw, json) Hash identifier: 7a5YK30vXD72kFVIsM4ul/KumNBe9YnhHS5Y0rGnbu0= Subject key identifier: E5:DF:A3:39:95:76:9D:F6:88:49:C0:A1:68:9E:2F:82:03:1B:79:E0 Authority key identifier: 70:F9:B1:6A:DF:2F:D3:19:88:85:99:22:B4:45:74:81:DD:7E:EF:40 Certificate issuer: /CN=70f9b16adf2fd31988859922b4457481dd7eef40 Certificate serial: 019AEE2CC58BCEAA5DF9BACAC701AAD5D885 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cPmxat8v0xmIhZkitEV0gd1-70A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/956db9-c8f7-4b9f-a56e-bc6db7248add/1/cPmxat8v0xmIhZkitEV0gd1-70A.mft Manifest number: 1506 Signing time: Fri 05 Dec 2025 11:01:42 +0000 Manifest this update: Fri 05 Dec 2025 11:01:42 +0000 Manifest next update: Sat 06 Dec 2025 11:01:42 +0000 Files and hashes: 1: 5WpWrypca4XGx0ISHtuZYRT_cno.roa (hash: R8ZoU8UZw1Z3gy7t3IJTFumdlDzgJjWSubPKAJkbvV0=) 2: 5hhLPsRpw9KA7o9wasEihzJSXoA.roa (hash: rLTFQz+FRyLZFkOs44WSv8ULNMp8Sfi16jOBN6XhYiE=) 3: 8-icgNG9YFfARW17qjTdCn9yD80.roa (hash: vebs5VRK2d7EVc4VYZnrKXN0FKJQS1X4sYhCt1gzy4o=) 4: EmX6XyNl91Tm8cirnJelJMWv5jw.roa (hash: ecaOyMml05HDIHHtJ4OiOiljQ7sD0n4R4TT3SS/C9pQ=) 5: JOBERo-vgg6dldBoWViTCfV7X-A.roa (hash: ce+d5taUPY+G9x5sjcA70ndAe38v7dhbZx0JrAG/CD4=) 6: PV2mCkS-UgVkDARZVBwroYA25_s.roa (hash: IURPukZTcQABJnfofXQZ8uQ6EdE7QIiPt7LuWjaU7ck=) 7: T1V76bxlhezLMl4Tzlvgqgk0pcg.roa (hash: Hk9kWyBSS3VZQ3ORtc2F2qsaXDclUxsqlus/HDJzLds=) 8: TGAbtOOQvJAO29jntkyfdiXsA34.roa (hash: Qa/Pmj8niQ7pWqzQURSMGZYQ5K31JvVZc6izGiwMvgM=) 9: Z5phhVwVfpK6dkc5C1-vYmhcYUU.roa (hash: iIyIPk2NBxkdVR06TYJeH+vh01QOalQb+F2tpumtM+w=) 10: cF-NETmL2tObtWSmyBQoXJnoEx8.roa (hash: A/p/4RndIub/XOYrnQVBToTK2tsLnhe4q2Yyjp+gHrA=) 11: cPmxat8v0xmIhZkitEV0gd1-70A.crl (hash: x3iDHIglrI3G48qTiTYffMSPFutcTTYTasuD/XjwvZA=) 12: ezMLdhISIqr2PAqGoulAf-qQ6FY.roa (hash: MoVmtNQ9G0A/NJidABkGuBmF42AfIIukbBtAhp8lY68=) 13: fC3AtSHj4uWnRNCJOJWyffnxb_c.roa (hash: k4yZxxd7Kbg9gUH1VtnIM62vxLC45Jz4VtvfU0eH3rQ=) 14: irItIVR6u-ZjJg2ky_t330Puetw.roa (hash: jdzhDlqJouvAYoBby6ytKGVftFOiZZckZb8p5RQravo=) 15: mA4IEAHXR0LDJS0AO7AgvdyymfA.roa (hash: B62czMPy2pKQJ5FL2R2C5ZUZdywtpL+Cj+O5hZ16Rv4=) 16: qQMnV_AHkaoypfzXBStNqOIC8i4.roa (hash: 8/gHPP6AgbL3NuW+OG2JLB+jSLFsV5WrdZq7Of0LMpg=) 17: t-GC4kGf7lvSnOYAiTpgmlkKEL4.roa (hash: 9rNbslHDQxGg0Ew50MQa2Fk3HC4+vs4VNNeusuZLYr8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/956db9-c8f7-4b9f-a56e-bc6db7248add/1/cPmxat8v0xmIhZkitEV0gd1-70A.crl rsync://rpki.ripe.net/repository/DEFAULT/5f/956db9-c8f7-4b9f-a56e-bc6db7248add/1/cPmxat8v0xmIhZkitEV0gd1-70A.mft rsync://rpki.ripe.net/repository/DEFAULT/cPmxat8v0xmIhZkitEV0gd1-70A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 11:00:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:ee:2c:c5:8b:ce:aa:5d:f9:ba:ca:c7:01:aa:d5:d8:85 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=70f9b16adf2fd31988859922b4457481dd7eef40 Validity Not Before: Dec 5 11:01:42 2025 GMT Not After : Dec 6 11:01:42 2025 GMT Subject: CN=e5dfa33995769df68849c0a1689e2f82031b79e0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:70:d3:f7:6f:f2:34:ab:92:6f:44:7b:a2:94: ab:58:ac:d1:49:ee:e0:a1:4a:96:3d:92:c7:ac:71: 72:e5:26:7d:32:9d:4a:4e:65:d2:97:89:3e:80:69: 0c:fa:c7:14:b6:48:b2:83:9d:31:72:3b:e8:b4:78: 6f:f4:7e:cc:66:52:f8:d0:4a:21:79:10:53:db:ee: 33:97:f7:21:a6:cb:e9:d2:d1:9f:b8:68:2b:94:d6: ae:28:a8:02:93:75:a0:f4:52:8c:26:24:1f:15:34: ef:6c:a5:b6:23:af:22:51:f6:8b:fc:44:0e:80:8c: c0:cb:31:65:aa:5c:08:24:5e:5d:42:53:1c:0b:d1: 2d:95:3d:cc:dc:ee:b8:44:cf:64:ba:6f:c7:8a:0e: 94:56:ca:4e:8e:ed:0e:2c:48:3e:37:93:ea:0b:71: 49:45:c2:a4:d0:2b:08:ca:f3:4b:1e:d4:ef:53:be: f0:bb:87:31:b6:07:4b:57:62:00:a5:a8:23:c5:2b: 47:f7:c6:8c:f0:64:1a:9b:c2:15:70:70:dc:18:b8: 44:9a:46:47:ca:9c:aa:9f:89:04:0f:1e:7b:f9:e1: 9d:81:f0:cf:70:08:9b:76:26:28:03:b2:e8:22:9d: 67:eb:34:80:34:a9:45:d8:e1:87:89:af:e3:4f:d7: 76:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:DF:A3:39:95:76:9D:F6:88:49:C0:A1:68:9E:2F:82:03:1B:79:E0 X509v3 Authority Key Identifier: keyid:70:F9:B1:6A:DF:2F:D3:19:88:85:99:22:B4:45:74:81:DD:7E:EF:40 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cPmxat8v0xmIhZkitEV0gd1-70A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/956db9-c8f7-4b9f-a56e-bc6db7248add/1/cPmxat8v0xmIhZkitEV0gd1-70A.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/956db9-c8f7-4b9f-a56e-bc6db7248add/1/cPmxat8v0xmIhZkitEV0gd1-70A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 37:ce:12:d1:f5:42:57:0d:d4:d7:8a:50:7a:ff:9a:d9:66:59: 31:b3:bf:41:f0:84:15:17:8d:79:52:66:00:1f:f0:22:76:07: d1:43:e8:7e:1b:d9:ec:a8:d2:02:5e:1d:46:5d:4d:cd:03:4e: d9:eb:23:08:a6:6a:23:c4:50:6b:15:64:74:0c:f6:2a:fc:13: 33:cb:05:6a:56:6c:8e:4d:d8:81:8d:b9:da:3d:4e:f5:97:06: 21:7c:34:9d:71:26:64:99:8b:f8:36:0c:7d:9a:30:91:b4:df: 23:f6:30:87:b5:ed:0f:c6:ef:b7:81:de:eb:3e:b0:87:eb:be: 81:76:0b:a0:c6:89:4b:85:95:17:dd:55:90:b8:c6:65:a7:62: bc:01:4f:e9:15:ff:8d:ad:1b:f0:67:ae:01:16:74:cd:c4:19: 81:8d:a8:00:42:a1:04:95:2a:0f:90:07:87:f5:e5:ea:8e:68: 0e:b8:a2:49:23:e7:3d:0a:39:1f:57:28:4c:1e:dd:f9:23:f6: a5:89:5e:8c:73:81:88:57:da:7e:09:53:74:67:ed:8d:3f:1b: 50:df:42:58:1b:39:38:32:72:8e:b0:18:50:42:7b:33:80:68: 35:5e:e4:4f:91:87:bc:db:90:0f:b4:06:57:c1:3e:a0:f7:d0: f6:07:86:79 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZruLMWLzqpd+brKxwGq1diFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcwZjliMTZhZGYyZmQzMTk4ODg1OTkyMmI0NDU3NDgxZGQ3 ZWVmNDAwHhcNMjUxMjA1MTEwMTQyWhcNMjUxMjA2MTEwMTQyWjAzMTEwLwYDVQQD EyhlNWRmYTMzOTk1NzY5ZGY2ODg0OWMwYTE2ODllMmY4MjAzMWI3OWUwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtnDT92/yNKuSb0R7opSrWKzRSe7g oUqWPZLHrHFy5SZ9Mp1KTmXSl4k+gGkM+scUtkiyg50xcjvotHhv9H7MZlL40Eoh eRBT2+4zl/chpsvp0tGfuGgrlNauKKgCk3Wg9FKMJiQfFTTvbKW2I68iUfaL/EQO gIzAyzFlqlwIJF5dQlMcC9EtlT3M3O64RM9kum/Hig6UVspOju0OLEg+N5PqC3FJ RcKk0CsIyvNLHtTvU77wu4cxtgdLV2IApagjxStH98aM8GQam8IVcHDcGLhEmkZH ypyqn4kEDx57+eGdgfDPcAibdiYoA7LoIp1n6zSANKlF2OGHia/jT9d2GQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOXfozmVdp32iEnAoWieL4IDG3ngMB8GA1UdIwQY MBaAFHD5sWrfL9MZiIWZIrRFdIHdfu9AMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY1BteGF0OHYweG1JaFpraXRFVjBnZDEtNzBBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi85NTZkYjktYzhmNy00YjlmLWE1NmUt YmM2ZGI3MjQ4YWRkLzEvY1BteGF0OHYweG1JaFpraXRFVjBnZDEtNzBBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Zi85NTZkYjktYzhmNy00YjlmLWE1NmUtYmM2ZGI3MjQ4YWRk LzEvY1BteGF0OHYweG1JaFpraXRFVjBnZDEtNzBBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAN84S0fVC Vw3U14pQev+a2WZZMbO/QfCEFReNeVJmAB/wInYH0UPofhvZ7KjSAl4dRl1NzQNO 2esjCKZqI8RQaxVkdAz2KvwTM8sFalZsjk3YgY252j1O9ZcGIXw0nXEmZJmL+DYM fZowkbTfI/Ywh7XtD8bvt4He6z6wh+u+gXYLoMaJS4WVF91VkLjGZadivAFP6RX/ ja0b8GeuARZ0zcQZgY2oAEKhBJUqD5AHh/Xl6o5oDriiSSPnPQo5H1coTB7d+SP2 pYlejHOBiFfafglTdGftjT8bUN9CWBs5ODJyjrAYUEJ7M4BoNV7kT5GHvNuQD7QG V8E+oPfQ9geGeQ== -----END CERTIFICATE-----Generated at Fri Dec 5 16:24:08 2025 by rpki-client