This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/992d03-883b-404d-887e-f2435d5cf37b/1/cAHkIiJ_pEzFy5XSqdzOD6W4nAc.mft File: cAHkIiJ_pEzFy5XSqdzOD6W4nAc.mft (raw, json) Hash identifier: I5hZ7/PH7Qq54PSCG331zuve89btpG46Qyjtz/hekG8= Subject key identifier: 4A:41:DF:2F:B8:97:D5:B7:B5:E4:A2:B8:3C:1B:45:DB:DF:9B:6E:4E Authority key identifier: 70:01:E4:22:22:7F:A4:4C:C5:CB:95:D2:A9:DC:CE:0F:A5:B8:9C:07 Certificate issuer: /CN=7001e422227fa44cc5cb95d2a9dcce0fa5b89c07 Certificate serial: 019B3757D022B70C1BB4AF3CA695D8C0A83A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cAHkIiJ_pEzFy5XSqdzOD6W4nAc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/992d03-883b-404d-887e-f2435d5cf37b/1/cAHkIiJ_pEzFy5XSqdzOD6W4nAc.mft Manifest number: 1798 Signing time: Fri 19 Dec 2025 16:01:00 +0000 Manifest this update: Fri 19 Dec 2025 16:01:00 +0000 Manifest next update: Sat 20 Dec 2025 16:01:00 +0000 Files and hashes: 1: 39yOXWjYZyS68AzfLeyRW_eBtf4.roa (hash: Mz12/qdbJKM8FU8F8+Lk+lMxeg4aXuhF1UCiM+rDIsI=) 2: 6l5M-x5AVCV2PGZr6_l_DZJOTeg.roa (hash: 0TyUlVfVnh7he1NVofYJh+27mbZ/WYA8ViwMyPgm6t8=) 3: PvXxIOTmhlDT8Zjl8pOjVtbUjqs.roa (hash: cEmlEEf5hdAMQxuyDOcKJwVECyiRzY+P8vKK1P563lo=) 4: cAHkIiJ_pEzFy5XSqdzOD6W4nAc.crl (hash: 1QJejNnIGlN+mIx5CLCk7OgOJ6GUsN/vQxVxAhVxzNY=) 5: fUQV7hcWr8wDftL_A0d4dRPlV5Y.roa (hash: W1gOWwQgZ2lfD/yK9uLmMV4EF6iXlGj32IeijexRu80=) 6: iRLaERPVRzV8PJ2a_5pZoHTAhfc.roa (hash: MJRfnp4Z+bQNLko611lWRkdCj1xLm4ibkbl4u7vmmHY=) 7: s6g2qeenxmDkGrPs5BM25xHO8xU.roa (hash: BC1HJ2/1smBeQKjZhdC/Dii9NT9VDbWsnbk1hLUwmhI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/992d03-883b-404d-887e-f2435d5cf37b/1/cAHkIiJ_pEzFy5XSqdzOD6W4nAc.crl rsync://rpki.ripe.net/repository/DEFAULT/63/992d03-883b-404d-887e-f2435d5cf37b/1/cAHkIiJ_pEzFy5XSqdzOD6W4nAc.mft rsync://rpki.ripe.net/repository/DEFAULT/cAHkIiJ_pEzFy5XSqdzOD6W4nAc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 16:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:37:57:d0:22:b7:0c:1b:b4:af:3c:a6:95:d8:c0:a8:3a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7001e422227fa44cc5cb95d2a9dcce0fa5b89c07 Validity Not Before: Dec 19 16:01:00 2025 GMT Not After : Dec 20 16:01:00 2025 GMT Subject: CN=4a41df2fb897d5b7b5e4a2b83c1b45dbdf9b6e4e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:d3:d3:11:42:b1:71:d1:f1:88:79:4a:ff:c9: f3:0e:0a:82:19:11:38:1f:4a:fe:98:86:cd:a9:0b: d1:a5:02:1b:26:b5:23:2e:83:60:74:28:55:97:3b: 3d:59:10:1e:13:15:10:24:9a:22:98:ce:4e:31:7a: 77:00:31:25:10:c3:87:2f:06:86:f9:37:90:08:06: 9f:f4:a1:c6:38:65:ff:d8:58:87:5e:1e:f4:ac:f4: cc:5d:3a:53:44:3a:e5:9a:38:dd:93:c1:d7:06:cb: 30:a9:14:82:e4:fc:db:d5:73:88:71:c4:3c:9b:54: c3:12:3c:a9:23:32:32:d9:05:8a:4d:2c:b8:6c:1c: 48:59:04:b5:3c:1e:2a:ae:77:9b:9b:7c:b5:f4:a2: eb:3c:16:65:01:dc:49:3c:d9:51:6e:42:5e:7b:ef: b1:84:53:4d:65:92:a5:0f:56:12:c4:de:21:cd:55: b6:b9:32:7a:ee:34:53:35:94:6d:cd:87:06:9c:3a: fd:07:20:38:a1:4d:ee:16:8b:6e:bb:66:d4:65:5a: 6e:da:c7:e4:4c:25:1f:9c:20:a1:81:0b:3b:11:2f: 82:34:a7:19:6f:e7:62:82:86:ee:d5:ca:c7:9a:54: 8f:b3:2b:81:18:55:28:f3:36:76:d9:d0:c0:46:c3: ac:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:41:DF:2F:B8:97:D5:B7:B5:E4:A2:B8:3C:1B:45:DB:DF:9B:6E:4E X509v3 Authority Key Identifier: keyid:70:01:E4:22:22:7F:A4:4C:C5:CB:95:D2:A9:DC:CE:0F:A5:B8:9C:07 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cAHkIiJ_pEzFy5XSqdzOD6W4nAc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/992d03-883b-404d-887e-f2435d5cf37b/1/cAHkIiJ_pEzFy5XSqdzOD6W4nAc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/63/992d03-883b-404d-887e-f2435d5cf37b/1/cAHkIiJ_pEzFy5XSqdzOD6W4nAc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8a:2e:9a:70:94:4b:4b:85:10:51:9c:18:a8:38:67:25:aa:f8: 9f:04:79:9f:36:b9:87:b6:e7:1c:7f:a4:14:3c:f8:31:66:48: e9:0c:36:fe:ae:e9:4e:60:8d:65:78:d0:0d:bc:ba:84:0b:bd: 6f:25:8f:4b:dd:93:b4:d2:ea:2f:59:5b:27:73:c2:11:ad:29: 27:10:b2:3b:3b:36:45:3e:af:3e:34:f8:25:dc:4c:c8:7e:ad: 34:1a:e7:fb:55:1e:23:a7:b3:3a:ee:f5:f4:a5:ef:78:ae:c5: 91:54:2c:c3:ac:fe:0f:67:49:c6:17:68:4c:6e:f9:84:ca:6c: f8:37:52:98:eb:a2:8b:08:71:86:b9:92:47:ca:9d:66:54:98: 84:c0:19:f5:e3:61:e0:44:ba:36:8f:6b:ee:f7:2f:09:67:05: 54:a1:c7:68:83:9e:39:f5:30:1c:9d:88:ff:61:a6:aa:28:05: e2:23:fc:98:12:1a:db:d7:4a:b0:76:de:d7:78:aa:aa:56:e3: 7b:f5:cc:72:02:e2:f3:5a:95:f1:48:02:67:53:b6:45:0f:3e: 2b:33:1b:b1:9e:05:48:07:50:06:0e:01:da:5f:dd:0d:44:5a: bd:e9:b8:ad:13:b3:a8:10:a7:bc:87:94:4f:b4:ca:f2:64:30: b6:9e:eb:91 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs3V9AitwwbtK88ppXYwKg6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcwMDFlNDIyMjI3ZmE0NGNjNWNiOTVkMmE5ZGNjZTBmYTVi ODljMDcwHhcNMjUxMjE5MTYwMTAwWhcNMjUxMjIwMTYwMTAwWjAzMTEwLwYDVQQD Eyg0YTQxZGYyZmI4OTdkNWI3YjVlNGEyYjgzYzFiNDVkYmRmOWI2ZTRlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5tPTEUKxcdHxiHlK/8nzDgqCGRE4 H0r+mIbNqQvRpQIbJrUjLoNgdChVlzs9WRAeExUQJJoimM5OMXp3ADElEMOHLwaG +TeQCAaf9KHGOGX/2FiHXh70rPTMXTpTRDrlmjjdk8HXBsswqRSC5Pzb1XOIccQ8 m1TDEjypIzIy2QWKTSy4bBxIWQS1PB4qrnebm3y19KLrPBZlAdxJPNlRbkJee++x hFNNZZKlD1YSxN4hzVW2uTJ67jRTNZRtzYcGnDr9ByA4oU3uFotuu2bUZVpu2sfk TCUfnCChgQs7ES+CNKcZb+digobu1crHmlSPsyuBGFUo8zZ22dDARsOszQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEpB3y+4l9W3teSiuDwbRdvfm25OMB8GA1UdIwQY MBaAFHAB5CIif6RMxcuV0qnczg+luJwHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY0FIa0lpSl9wRXpGeTVYU3Fkek9ENlc0bkFjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82My85OTJkMDMtODgzYi00MDRkLTg4N2Ut ZjI0MzVkNWNmMzdiLzEvY0FIa0lpSl9wRXpGeTVYU3Fkek9ENlc0bkFjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82My85OTJkMDMtODgzYi00MDRkLTg4N2UtZjI0MzVkNWNmMzdi LzEvY0FIa0lpSl9wRXpGeTVYU3Fkek9ENlc0bkFjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAii6acJRL S4UQUZwYqDhnJar4nwR5nza5h7bnHH+kFDz4MWZI6Qw2/q7pTmCNZXjQDby6hAu9 byWPS92TtNLqL1lbJ3PCEa0pJxCyOzs2RT6vPjT4JdxMyH6tNBrn+1UeI6ezOu71 9KXveK7FkVQsw6z+D2dJxhdoTG75hMps+DdSmOuiiwhxhrmSR8qdZlSYhMAZ9eNh 4ES6No9r7vcvCWcFVKHHaIOeOfUwHJ2I/2GmqigF4iP8mBIa29dKsHbe13iqqlbj e/XMcgLi81qV8UgCZ1O2RQ8+KzMbsZ4FSAdQBg4B2l/dDURavem4rROzqBCnvIeU T7TK8mQwtp7rkQ== -----END CERTIFICATE-----Generated at Fri Dec 19 21:12:04 2025 by rpki-client