This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/53d56a-096e-458a-9a94-08a68632a63a/1/cJ1plX0zNDKsysgQIx4ok4jjAuI.mft File: cJ1plX0zNDKsysgQIx4ok4jjAuI.mft (raw, json) Hash identifier: 9BXwbvJGNiufkhUuBtnnbPKD5zVVRr5/oKMb3LAI3f8= Subject key identifier: 88:88:3A:4C:7B:42:7C:70:A5:14:ED:F0:2A:64:24:41:AE:F6:9D:3F Authority key identifier: 70:9D:69:95:7D:33:34:32:AC:CA:C8:10:23:1E:28:93:88:E3:02:E2 Certificate issuer: /CN=709d69957d333432accac810231e289388e302e2 Certificate serial: 019B0E2647CAA55E6772CA4B0F41BD3DA879 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cJ1plX0zNDKsysgQIx4ok4jjAuI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/53d56a-096e-458a-9a94-08a68632a63a/1/cJ1plX0zNDKsysgQIx4ok4jjAuI.mft Manifest number: 1771 Signing time: Thu 11 Dec 2025 16:02:28 +0000 Manifest this update: Thu 11 Dec 2025 16:02:28 +0000 Manifest next update: Fri 12 Dec 2025 16:02:28 +0000 Files and hashes: 1: 9y87QXHvPreUOvjZ1Oe2QvXling.roa (hash: THAUh6ARfmUeBlEORlfxrZB6XW0KTPM4GpL4IBGKtq4=) 2: cJ1plX0zNDKsysgQIx4ok4jjAuI.crl (hash: pOM0mcZfO7Z+3jTsE30Gz+lwHz9/qoSqij/9CKOYMcg=) 3: dagjZoA2cgv7IOwssRcqkxBEGlA.roa (hash: MlQsKiZwSfxtbg0qv4PHAKQxosBgQWpaFiAz9StErlg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/53d56a-096e-458a-9a94-08a68632a63a/1/cJ1plX0zNDKsysgQIx4ok4jjAuI.crl rsync://rpki.ripe.net/repository/DEFAULT/64/53d56a-096e-458a-9a94-08a68632a63a/1/cJ1plX0zNDKsysgQIx4ok4jjAuI.mft rsync://rpki.ripe.net/repository/DEFAULT/cJ1plX0zNDKsysgQIx4ok4jjAuI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 14:45:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0e:26:47:ca:a5:5e:67:72:ca:4b:0f:41:bd:3d:a8:79 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=709d69957d333432accac810231e289388e302e2 Validity Not Before: Dec 11 16:02:28 2025 GMT Not After : Dec 12 16:02:28 2025 GMT Subject: CN=88883a4c7b427c70a514edf02a642441aef69d3f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:80:cf:75:78:fb:ae:79:47:1e:4e:8d:7e:10: 4e:b4:94:c8:ac:3b:6a:f2:fd:73:fa:f9:8c:6b:00: 88:47:84:e4:ff:7b:7d:91:8a:d4:d4:01:85:61:6e: c2:3f:8e:3a:0c:91:5c:1d:41:cd:e9:2c:ab:cc:21: e2:47:77:6d:12:8f:68:98:3c:ec:99:fc:4c:98:e7: 25:23:2d:8f:9f:25:c3:37:0b:90:23:cd:00:64:07: c8:eb:0c:37:9a:d1:f8:65:5f:81:4e:c1:b2:ff:26: 5d:fd:af:28:a2:91:b7:3e:b3:73:3e:3e:ad:9f:69: 81:a4:f7:e9:fd:c0:21:a5:64:30:52:5e:5c:7f:96: 0f:f2:00:06:20:5e:33:9f:c0:b1:05:20:45:26:35: f6:30:d0:c4:c5:4a:13:44:53:e3:c8:0f:92:18:82: 79:ce:72:82:56:bb:53:6f:55:31:c3:2a:94:3a:4b: 76:a5:a9:c9:9e:91:80:6c:d7:06:9c:2e:95:ee:7f: 66:fd:d0:ad:46:91:4f:4a:63:28:ff:6c:11:43:b5: b6:ad:5b:3c:64:ed:ce:93:28:70:36:9e:aa:d3:4d: ec:9d:2f:63:51:43:72:33:29:38:4e:bb:cb:c1:98: 20:bd:cf:df:f2:a9:c7:42:9d:62:a0:3f:92:64:b7: 40:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:88:3A:4C:7B:42:7C:70:A5:14:ED:F0:2A:64:24:41:AE:F6:9D:3F X509v3 Authority Key Identifier: keyid:70:9D:69:95:7D:33:34:32:AC:CA:C8:10:23:1E:28:93:88:E3:02:E2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cJ1plX0zNDKsysgQIx4ok4jjAuI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/53d56a-096e-458a-9a94-08a68632a63a/1/cJ1plX0zNDKsysgQIx4ok4jjAuI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/64/53d56a-096e-458a-9a94-08a68632a63a/1/cJ1plX0zNDKsysgQIx4ok4jjAuI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 43:e9:5f:2d:8d:85:3b:49:c8:73:67:cf:8b:35:b6:93:06:1f: 29:e1:cd:c2:68:3c:52:bf:1e:fc:a0:33:6a:fb:39:2d:e6:fd: f0:e3:c6:24:e3:f3:7b:24:f2:0d:42:cd:f4:d0:62:b3:1f:2f: 15:48:8b:2c:40:a8:56:de:4e:90:71:4a:7f:b8:56:6d:d2:b6: 26:bb:5e:78:73:82:ed:b3:ad:9d:51:55:ad:79:6c:c7:80:3e: da:e8:ee:2d:d0:28:a8:69:8b:89:aa:c2:57:15:47:43:2f:e3: ee:91:79:ae:d4:d1:db:4d:0b:ed:37:67:4e:8a:a2:6d:2a:af: ad:ff:24:c4:40:02:59:8a:c9:03:9d:93:6d:d4:81:9b:1a:29: 71:82:ee:a7:55:dc:2a:ea:0d:04:31:75:54:5f:0d:f2:66:7b: a9:c6:3e:02:5b:8d:8f:87:b1:83:d6:6f:4a:12:ad:b4:94:41: 48:f1:35:99:c7:39:03:87:d8:e1:27:77:55:8a:aa:ee:2e:3f: 87:bd:17:7b:09:04:91:a5:de:a9:97:05:87:3b:32:da:0d:60: 19:7c:e6:57:b8:d4:e2:f7:d4:d8:df:ab:89:a4:fc:0a:bb:77: cf:99:fc:93:30:88:32:fe:09:a9:5f:72:03:28:88:98:7b:cd: 23:08:b4:53 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsOJkfKpV5ncspLD0G9Pah5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcwOWQ2OTk1N2QzMzM0MzJhY2NhYzgxMDIzMWUyODkzODhl MzAyZTIwHhcNMjUxMjExMTYwMjI4WhcNMjUxMjEyMTYwMjI4WjAzMTEwLwYDVQQD Eyg4ODg4M2E0YzdiNDI3YzcwYTUxNGVkZjAyYTY0MjQ0MWFlZjY5ZDNmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzYDPdXj7rnlHHk6NfhBOtJTIrDtq 8v1z+vmMawCIR4Tk/3t9kYrU1AGFYW7CP446DJFcHUHN6SyrzCHiR3dtEo9omDzs mfxMmOclIy2PnyXDNwuQI80AZAfI6ww3mtH4ZV+BTsGy/yZd/a8oopG3PrNzPj6t n2mBpPfp/cAhpWQwUl5cf5YP8gAGIF4zn8CxBSBFJjX2MNDExUoTRFPjyA+SGIJ5 znKCVrtTb1UxwyqUOkt2panJnpGAbNcGnC6V7n9m/dCtRpFPSmMo/2wRQ7W2rVs8 ZO3OkyhwNp6q003snS9jUUNyMyk4TrvLwZggvc/f8qnHQp1ioD+SZLdAHQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIiIOkx7QnxwpRTt8CpkJEGu9p0/MB8GA1UdIwQY MBaAFHCdaZV9MzQyrMrIECMeKJOI4wLiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY0oxcGxYMHpOREtzeXNnUUl4NG9rNGpqQXVJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NC81M2Q1NmEtMDk2ZS00NThhLTlhOTQt MDhhNjg2MzJhNjNhLzEvY0oxcGxYMHpOREtzeXNnUUl4NG9rNGpqQXVJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NC81M2Q1NmEtMDk2ZS00NThhLTlhOTQtMDhhNjg2MzJhNjNh LzEvY0oxcGxYMHpOREtzeXNnUUl4NG9rNGpqQXVJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQ+lfLY2F O0nIc2fPizW2kwYfKeHNwmg8Ur8e/KAzavs5Leb98OPGJOPzeyTyDULN9NBisx8v FUiLLECoVt5OkHFKf7hWbdK2JrteeHOC7bOtnVFVrXlsx4A+2ujuLdAoqGmLiarC VxVHQy/j7pF5rtTR200L7TdnToqibSqvrf8kxEACWYrJA52TbdSBmxopcYLup1Xc KuoNBDF1VF8N8mZ7qcY+AluNj4exg9ZvShKttJRBSPE1mcc5A4fY4Sd3VYqq7i4/ h70XewkEkaXeqZcFhzsy2g1gGXzmV7jU4vfU2N+riaT8Crt3z5n8kzCIMv4JqV9y AyiImHvNIwi0Uw== -----END CERTIFICATE-----Generated at Thu Dec 11 23:56:51 2025 by rpki-client