This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/ddf529-1536-44f0-9eda-4dad48a16e42/1/cBXtJ1AFQI0qhqIwNwF0RDDto0o.mft File: cBXtJ1AFQI0qhqIwNwF0RDDto0o.mft (raw, json) Hash identifier: Qjw4ViAoMYgmaGV4vc2APPgE+kAjSdWgn8aNwo/2UGQ= Subject key identifier: 79:6F:2B:8B:2A:51:E9:F6:54:69:F1:9E:73:99:C4:4C:13:E0:65:B6 Authority key identifier: 70:15:ED:27:50:05:40:8D:2A:86:A2:30:37:01:74:44:30:ED:A3:4A Certificate issuer: /CN=7015ed275005408d2a86a2303701744430eda34a Certificate serial: 019B3BD99A6606F39E7151230F3B92F6893D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cBXtJ1AFQI0qhqIwNwF0RDDto0o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/ddf529-1536-44f0-9eda-4dad48a16e42/1/cBXtJ1AFQI0qhqIwNwF0RDDto0o.mft Manifest number: 14A0 Signing time: Sat 20 Dec 2025 13:01:15 +0000 Manifest this update: Sat 20 Dec 2025 13:01:15 +0000 Manifest next update: Sun 21 Dec 2025 13:01:15 +0000 Files and hashes: 1: HSf-a0eTcicBmzn4zJZRWXp92WE.roa (hash: vvlQV7Jpi0XVGKQA4HOtArKcD3xjeMm171XNaqqkcT0=) 2: a5SThzVTiz_HAgBiI_2C-cBicRU.roa (hash: cXR8rbnSwDhsbHRTW7l3Pqi32yZZ/V3whRHlpIMP7KU=) 3: cBXtJ1AFQI0qhqIwNwF0RDDto0o.crl (hash: OgBoxWBxlu/CM0gjO5tYbUFPkbtbnQ1azZlahqa+67w=) 4: e8yOi_zjBd2PptdyDsyc4j2wCEY.roa (hash: gTBImvzLksx7wicV0C8XssUh2BDoKizjYT0J7tkJ1HY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/ddf529-1536-44f0-9eda-4dad48a16e42/1/cBXtJ1AFQI0qhqIwNwF0RDDto0o.crl rsync://rpki.ripe.net/repository/DEFAULT/78/ddf529-1536-44f0-9eda-4dad48a16e42/1/cBXtJ1AFQI0qhqIwNwF0RDDto0o.mft rsync://rpki.ripe.net/repository/DEFAULT/cBXtJ1AFQI0qhqIwNwF0RDDto0o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 09:56:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3b:d9:9a:66:06:f3:9e:71:51:23:0f:3b:92:f6:89:3d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7015ed275005408d2a86a2303701744430eda34a Validity Not Before: Dec 20 13:01:15 2025 GMT Not After : Dec 21 13:01:15 2025 GMT Subject: CN=796f2b8b2a51e9f65469f19e7399c44c13e065b6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:47:9e:70:6a:8a:29:65:df:6f:be:dd:5c:5f: b8:f0:0d:c0:e9:f1:d3:1e:90:e6:43:22:5d:fd:db: a4:55:01:cf:bf:c8:c0:64:54:36:a0:18:ef:9b:f3: 22:b6:c8:c7:9d:bc:c6:94:e0:60:a8:e6:bd:e9:a1: 8a:c4:9a:25:cc:c8:fc:3f:84:cf:6f:39:04:0d:e3: c8:94:3b:3b:32:32:28:2a:26:43:8d:59:56:a2:47: 20:15:35:2e:13:1d:b3:4e:a4:74:9e:10:10:46:3b: 09:b2:d3:99:a3:81:bb:c2:ba:03:77:10:2e:dd:fc: ec:6a:cd:1f:bb:ca:b3:a8:13:01:0b:95:be:34:04: 79:28:a4:6b:6e:ed:69:6d:eb:56:65:43:d2:74:0d: c8:de:df:14:8f:30:c4:c2:c1:9a:6e:c1:7f:06:a1: 78:dd:40:5e:8b:27:da:3d:67:f3:d8:f7:cb:8d:1a: 7a:5b:7b:d1:eb:a1:20:04:75:9a:d6:58:48:57:ae: 8b:e8:bf:80:dc:de:45:b2:e3:92:be:79:d3:fd:1f: 49:60:18:f1:2a:43:ba:02:ce:f5:f0:5f:9e:61:a5: af:30:0a:69:e3:c5:f5:89:3d:01:ca:b0:2e:66:8b: b7:5c:51:11:6a:f4:60:f2:61:0b:31:e6:9e:84:02: c0:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:6F:2B:8B:2A:51:E9:F6:54:69:F1:9E:73:99:C4:4C:13:E0:65:B6 X509v3 Authority Key Identifier: keyid:70:15:ED:27:50:05:40:8D:2A:86:A2:30:37:01:74:44:30:ED:A3:4A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cBXtJ1AFQI0qhqIwNwF0RDDto0o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/ddf529-1536-44f0-9eda-4dad48a16e42/1/cBXtJ1AFQI0qhqIwNwF0RDDto0o.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/78/ddf529-1536-44f0-9eda-4dad48a16e42/1/cBXtJ1AFQI0qhqIwNwF0RDDto0o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9b:16:f7:01:de:96:c5:99:08:8b:ec:47:f2:a8:15:3c:ec:ee: 4f:fb:85:9b:2b:35:a7:fc:3d:74:27:58:9e:f0:57:5b:85:8d: 63:70:f1:19:29:06:49:cd:de:26:c5:3f:44:29:50:e4:5a:93: 9a:b4:3c:02:b5:72:65:8c:c8:57:8f:34:b1:a3:f5:b0:fe:06: de:92:9e:f1:ae:b6:f3:ab:13:51:19:eb:ad:d5:b6:d4:74:3d: 2c:14:72:a4:86:a1:d3:49:da:2c:84:de:0a:88:d1:91:8a:b6: 69:b3:e4:29:82:1b:77:61:19:47:00:f4:51:f9:15:95:d7:50: 87:24:d9:9c:d2:09:d7:ee:a8:e2:30:6d:b1:b7:8b:2b:ee:7c: 6f:f7:ee:f0:aa:67:ef:7a:99:f0:67:47:d9:1f:4b:63:8f:df: e5:1a:41:83:d0:0f:01:4b:6d:8b:74:78:ce:ca:ea:5d:d9:57: 9b:9b:93:de:0d:85:3f:f5:96:d4:32:1a:98:c8:81:1f:e0:2d: 4a:e6:8e:9b:58:49:50:0e:0e:d5:d5:6a:b6:5c:e5:62:67:c0: ad:28:24:5a:d8:b0:f8:fe:31:4d:2b:88:33:09:cf:b0:be:7f: 26:c0:96:54:46:43:73:23:38:5a:38:b7:ba:14:a3:a9:aa:d1: 5e:90:85:f8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs72ZpmBvOecVEjDzuS9ok9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcwMTVlZDI3NTAwNTQwOGQyYTg2YTIzMDM3MDE3NDQ0MzBl ZGEzNGEwHhcNMjUxMjIwMTMwMTE1WhcNMjUxMjIxMTMwMTE1WjAzMTEwLwYDVQQD Eyg3OTZmMmI4YjJhNTFlOWY2NTQ2OWYxOWU3Mzk5YzQ0YzEzZTA2NWI2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0EeecGqKKWXfb77dXF+48A3A6fHT HpDmQyJd/dukVQHPv8jAZFQ2oBjvm/MitsjHnbzGlOBgqOa96aGKxJolzMj8P4TP bzkEDePIlDs7MjIoKiZDjVlWokcgFTUuEx2zTqR0nhAQRjsJstOZo4G7wroDdxAu 3fzsas0fu8qzqBMBC5W+NAR5KKRrbu1pbetWZUPSdA3I3t8UjzDEwsGabsF/BqF4 3UBeiyfaPWfz2PfLjRp6W3vR66EgBHWa1lhIV66L6L+A3N5FsuOSvnnT/R9JYBjx KkO6As718F+eYaWvMApp48X1iT0ByrAuZou3XFERavRg8mELMeaehALANQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHlvK4sqUen2VGnxnnOZxEwT4GW2MB8GA1UdIwQY MBaAFHAV7SdQBUCNKoaiMDcBdEQw7aNKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY0JYdEoxQUZRSTBxaHFJd053RjBSRER0bzBvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OC9kZGY1MjktMTUzNi00NGYwLTllZGEt NGRhZDQ4YTE2ZTQyLzEvY0JYdEoxQUZRSTBxaHFJd053RjBSRER0bzBvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83OC9kZGY1MjktMTUzNi00NGYwLTllZGEtNGRhZDQ4YTE2ZTQy LzEvY0JYdEoxQUZRSTBxaHFJd053RjBSRER0bzBvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmxb3Ad6W xZkIi+xH8qgVPOzuT/uFmys1p/w9dCdYnvBXW4WNY3DxGSkGSc3eJsU/RClQ5FqT mrQ8ArVyZYzIV480saP1sP4G3pKe8a6286sTURnrrdW21HQ9LBRypIah00naLITe CojRkYq2abPkKYIbd2EZRwD0UfkVlddQhyTZnNIJ1+6o4jBtsbeLK+58b/fu8Kpn 73qZ8GdH2R9LY4/f5RpBg9APAUtti3R4zsrqXdlXm5uT3g2FP/WW1DIamMiBH+At SuaOm1hJUA4O1dVqtlzlYmfArSgkWtiw+P4xTSuIMwnPsL5/JsCWVEZDcyM4Wji3 uhSjqarRXpCF+A== -----END CERTIFICATE-----Generated at Sat Dec 20 14:03:22 2025 by rpki-client