This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/1785f1-ae23-40f0-83f2-6def398ce5c9/1/CjC2NdNXRo1_ky0-H1nVNzz59GU.mft File: CjC2NdNXRo1_ky0-H1nVNzz59GU.mft (raw, json) Hash identifier: MYHxze09AoFwnO0BdR4qfjLhBtvhlGEaAKpVKRJXzWg= Subject key identifier: FA:EE:8D:48:B1:AC:5F:87:64:77:3B:FB:49:6C:C1:2B:2F:BE:98:FF Authority key identifier: 0A:30:B6:35:D3:57:46:8D:7F:93:2D:3E:1F:59:D5:37:3C:F9:F4:65 Certificate issuer: /CN=0a30b635d357468d7f932d3e1f59d5373cf9f465 Certificate serial: 019B24ACCB15C9219614626C0F506E6BCB5C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CjC2NdNXRo1_ky0-H1nVNzz59GU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/1785f1-ae23-40f0-83f2-6def398ce5c9/1/CjC2NdNXRo1_ky0-H1nVNzz59GU.mft Manifest number: 178A Signing time: Tue 16 Dec 2025 01:01:02 +0000 Manifest this update: Tue 16 Dec 2025 01:01:02 +0000 Manifest next update: Wed 17 Dec 2025 01:01:02 +0000 Files and hashes: 1: 43hLg4tOOv7SoGn-XftXhK9a-NE.roa (hash: fTCV6jJu7vHlfoEQtZwLz0NW5RubKgDanJcVlL86nkI=) 2: CjC2NdNXRo1_ky0-H1nVNzz59GU.crl (hash: 0tqoCJ/Z5Ti0/KIOFsaPneoxIx5s4aHXa0jrZ4wjdhI=) 3: MxFWnMmlsCx1TmmKhtNcJn8H1K4.roa (hash: r41sfO0em6qrkFr4zaPfNm49MUfMsRWUTWI32MUXIbs=) 4: RservbDL-BVcPWiT5GY7GGmaqNg.roa (hash: 6kmm57SMuR609w7NX9SqjiOxJz1WjZ0ODARP+aV0g60=) 5: SpbFu7cu1hyzijH4Dcq1zO1wfcw.roa (hash: s7llN+uwGj/YltcQ4pU6jWvPZRuwP/LeuHpZEDrxXAg=) 6: nvYcptlp0PUhINL8di32N1PMAlE.roa (hash: pt/p/I9QSvcAJg81FJVs1CNUkiY+sFdwtB0jYLQnIjQ=) 7: wNh0jMOPHCGGtlAG3PiNBZzjcno.roa (hash: NaE5nCG+kp0N7iEIRzHU/rkLw5QEKaxFzRCaxMZ3BjY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/1785f1-ae23-40f0-83f2-6def398ce5c9/1/CjC2NdNXRo1_ky0-H1nVNzz59GU.crl rsync://rpki.ripe.net/repository/DEFAULT/75/1785f1-ae23-40f0-83f2-6def398ce5c9/1/CjC2NdNXRo1_ky0-H1nVNzz59GU.mft rsync://rpki.ripe.net/repository/DEFAULT/CjC2NdNXRo1_ky0-H1nVNzz59GU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:24:ac:cb:15:c9:21:96:14:62:6c:0f:50:6e:6b:cb:5c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0a30b635d357468d7f932d3e1f59d5373cf9f465 Validity Not Before: Dec 16 01:01:02 2025 GMT Not After : Dec 17 01:01:02 2025 GMT Subject: CN=faee8d48b1ac5f8764773bfb496cc12b2fbe98ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:4d:ad:5a:92:8d:79:fe:3f:26:d2:2f:d9:2c: 67:c0:83:fe:d1:c8:df:3f:bd:81:b5:f4:8b:ca:67: f0:a3:d3:97:0b:d0:c5:95:52:f8:bc:82:f1:d4:2c: dc:d7:da:52:66:f0:13:d3:f1:be:75:1a:b4:e1:7d: 96:93:8f:99:4a:7d:b1:25:48:eb:c9:98:c9:d9:e3: e4:6f:1b:33:63:ce:8f:7d:83:b1:af:6f:08:df:96: 2d:c3:c1:4c:19:9e:34:3b:2d:41:c6:df:97:eb:6e: 5f:a9:97:08:ce:6c:aa:64:be:2f:36:c9:ad:ec:c9: 2a:c0:33:ce:ec:68:ae:25:a0:d0:ee:d7:2f:8e:ce: 2c:62:cf:74:2a:3a:a9:9e:34:a3:3f:ad:bc:10:e9: 43:c0:b3:6d:85:8c:63:24:bc:b3:ea:f5:e0:a2:ba: f3:e4:9d:ef:0b:e1:6b:d6:d5:2d:03:f5:61:e8:c7: 82:d7:ef:5a:ec:c6:d3:2f:79:e9:e0:72:bd:7a:5f: 72:fa:71:c9:72:6c:93:75:f7:b8:23:02:66:66:a9: 1d:e4:54:dd:a4:be:d3:5d:c4:a0:07:8b:b9:6a:f2: a3:4a:f3:96:b7:27:5f:79:af:34:70:62:1a:7d:30: 4a:ea:1d:b2:8c:83:e4:69:30:62:76:3f:5f:fc:75: 6d:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:EE:8D:48:B1:AC:5F:87:64:77:3B:FB:49:6C:C1:2B:2F:BE:98:FF X509v3 Authority Key Identifier: keyid:0A:30:B6:35:D3:57:46:8D:7F:93:2D:3E:1F:59:D5:37:3C:F9:F4:65 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CjC2NdNXRo1_ky0-H1nVNzz59GU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/1785f1-ae23-40f0-83f2-6def398ce5c9/1/CjC2NdNXRo1_ky0-H1nVNzz59GU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/75/1785f1-ae23-40f0-83f2-6def398ce5c9/1/CjC2NdNXRo1_ky0-H1nVNzz59GU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 15:e2:09:41:f7:66:3e:b9:0e:6c:3b:4c:1a:fb:08:35:af:12: 62:d3:94:09:07:d4:b2:2d:1f:8a:17:86:16:11:53:1a:24:45: 69:e1:3e:35:0f:22:0f:af:8e:58:33:05:fb:53:53:d5:98:d8: 7e:b5:da:1f:4f:88:1e:fa:14:06:50:5b:17:a8:18:86:b7:3a: 35:15:34:80:03:4e:02:37:25:32:78:2f:89:2b:75:cf:d1:ff: e3:99:e3:c8:6f:78:e6:d3:a1:60:0a:9e:08:08:2d:e2:f5:38: b0:19:91:21:e0:87:22:76:03:02:25:96:0e:66:11:48:c7:b7: 61:a9:f2:ab:b8:5b:36:cf:1d:19:1d:eb:c6:c8:a4:7e:5b:78: 93:25:c2:86:a8:7e:a1:25:cc:b6:8c:79:05:68:cf:bb:dc:14: 8a:42:d3:09:25:7c:36:5e:7e:49:04:26:56:84:b4:3b:e0:1d: 91:46:b0:64:57:fa:21:22:29:29:e9:24:0e:8f:48:47:48:22: 10:63:ef:0a:d2:6f:2e:9c:c5:e9:5d:88:c3:90:d8:6f:54:0d: c7:32:85:c9:44:e3:a2:b0:bf:fc:46:c8:c1:b2:f2:3f:5a:ad: c6:31:cd:1d:a7:64:6c:ba:26:62:81:1c:38:ff:85:fb:98:c9: ec:c4:b9:6d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZskrMsVySGWFGJsD1Bua8tcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBhMzBiNjM1ZDM1NzQ2OGQ3ZjkzMmQzZTFmNTlkNTM3M2Nm OWY0NjUwHhcNMjUxMjE2MDEwMTAyWhcNMjUxMjE3MDEwMTAyWjAzMTEwLwYDVQQD EyhmYWVlOGQ0OGIxYWM1Zjg3NjQ3NzNiZmI0OTZjYzEyYjJmYmU5OGZmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0k2tWpKNef4/JtIv2SxnwIP+0cjf P72BtfSLymfwo9OXC9DFlVL4vILx1Czc19pSZvAT0/G+dRq04X2Wk4+ZSn2xJUjr yZjJ2ePkbxszY86PfYOxr28I35Ytw8FMGZ40Oy1Bxt+X625fqZcIzmyqZL4vNsmt 7MkqwDPO7GiuJaDQ7tcvjs4sYs90KjqpnjSjP628EOlDwLNthYxjJLyz6vXgorrz 5J3vC+Fr1tUtA/Vh6MeC1+9a7MbTL3np4HK9el9y+nHJcmyTdfe4IwJmZqkd5FTd pL7TXcSgB4u5avKjSvOWtydfea80cGIafTBK6h2yjIPkaTBidj9f/HVt0QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPrujUixrF+HZHc7+0lswSsvvpj/MB8GA1UdIwQY MBaAFAowtjXTV0aNf5MtPh9Z1Tc8+fRlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ2pDMk5kTlhSbzFfa3kwLUgxblZOeno1OUdVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NS8xNzg1ZjEtYWUyMy00MGYwLTgzZjIt NmRlZjM5OGNlNWM5LzEvQ2pDMk5kTlhSbzFfa3kwLUgxblZOeno1OUdVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83NS8xNzg1ZjEtYWUyMy00MGYwLTgzZjItNmRlZjM5OGNlNWM5 LzEvQ2pDMk5kTlhSbzFfa3kwLUgxblZOeno1OUdVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFeIJQfdm PrkObDtMGvsINa8SYtOUCQfUsi0fiheGFhFTGiRFaeE+NQ8iD6+OWDMF+1NT1ZjY frXaH0+IHvoUBlBbF6gYhrc6NRU0gANOAjclMngviSt1z9H/45njyG945tOhYAqe CAgt4vU4sBmRIeCHInYDAiWWDmYRSMe3Yanyq7hbNs8dGR3rxsikflt4kyXChqh+ oSXMtox5BWjPu9wUikLTCSV8Nl5+SQQmVoS0O+AdkUawZFf6ISIpKekkDo9IR0gi EGPvCtJvLpzF6V2Iw5DYb1QNxzKFyUTjorC//EbIwbLyP1qtxjHNHadkbLomYoEc OP+F+5jJ7MS5bQ== -----END CERTIFICATE-----Generated at Tue Dec 16 08:55:57 2025 by rpki-client