This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/d5a49a-4f1a-4961-9c1f-76b0325c3b07/1/cWAcC4sTzBIQF_bSUResH9BmQ0Q.mft File: cWAcC4sTzBIQF_bSUResH9BmQ0Q.mft (raw, json) Hash identifier: Cz064hzLg94/tofc+2aE90pli4kbFq1ssF+e3DNEeWQ= Subject key identifier: 46:B0:2F:98:22:C3:F3:2B:7D:4D:BE:82:CA:00:5C:F3:3A:EC:6D:FD Authority key identifier: 71:60:1C:0B:8B:13:CC:12:10:17:F6:D2:51:17:AC:1F:D0:66:43:44 Certificate issuer: /CN=71601c0b8b13cc121017f6d25117ac1fd0664344 Certificate serial: 019B46CA6EAA24F5CDCC130633A440B98172 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cWAcC4sTzBIQF_bSUResH9BmQ0Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/d5a49a-4f1a-4961-9c1f-76b0325c3b07/1/cWAcC4sTzBIQF_bSUResH9BmQ0Q.mft Manifest number: 1793 Signing time: Mon 22 Dec 2025 16:00:30 +0000 Manifest this update: Mon 22 Dec 2025 16:00:30 +0000 Manifest next update: Tue 23 Dec 2025 16:00:30 +0000 Files and hashes: 1: 8Tphwf2TdCn6_ko-jZ8YIaCMG4Y.roa (hash: EBGUP9Onjc28Spxu+Bc1P0vLX2s/3Esh3HDfGA5b/yg=) 2: TegEFm13uYuDaVYWPUq_NWyfFhw.roa (hash: Z0NpRN8gnuSXynuy4afFeS+fqs/16nspEy2hNFbDueU=) 3: cWAcC4sTzBIQF_bSUResH9BmQ0Q.crl (hash: u3l1epQxyW6r24oBZxMnUx7j3Sga/zfzANU9hU7wZvE=) 4: fNW98zG8YgdTIxQopzVptDv3vEA.roa (hash: oH5A9HkaHxcIBBsSALBiEtsRJXsDnYZkpZH6oV0XeF4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/d5a49a-4f1a-4961-9c1f-76b0325c3b07/1/cWAcC4sTzBIQF_bSUResH9BmQ0Q.crl rsync://rpki.ripe.net/repository/DEFAULT/7d/d5a49a-4f1a-4961-9c1f-76b0325c3b07/1/cWAcC4sTzBIQF_bSUResH9BmQ0Q.mft rsync://rpki.ripe.net/repository/DEFAULT/cWAcC4sTzBIQF_bSUResH9BmQ0Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:46:ca:6e:aa:24:f5:cd:cc:13:06:33:a4:40:b9:81:72 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=71601c0b8b13cc121017f6d25117ac1fd0664344 Validity Not Before: Dec 22 16:00:30 2025 GMT Not After : Dec 23 16:00:30 2025 GMT Subject: CN=46b02f9822c3f32b7d4dbe82ca005cf33aec6dfd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:59:34:8e:01:cd:22:aa:e2:80:ea:16:cb:0f: 3f:7b:51:9f:cc:a1:ab:1a:aa:4e:fc:fd:c6:96:bd: 45:d9:50:a4:d7:32:56:1a:12:44:aa:46:bb:8a:ff: e7:19:ad:04:2e:ce:a9:09:4e:08:0f:dc:cd:09:71: 6a:0f:ba:a8:2c:5b:b6:ab:98:34:04:a6:73:0b:90: 5a:cf:f7:d9:33:82:80:10:2c:e2:ba:76:e7:54:9f: 7b:bb:40:7a:f3:72:d5:e4:8a:7e:59:81:00:ba:b1: 09:f0:df:ad:c9:ad:27:0b:a1:96:76:97:b5:6e:8e: 97:15:7f:4a:4a:e7:6f:24:5f:71:18:3b:9b:20:d8: 90:d5:2f:db:32:62:85:86:31:00:c3:e4:4e:e7:37: ab:5e:46:d4:5f:e7:40:62:88:ba:7b:6f:00:06:9b: 97:24:a1:0e:1c:ac:13:c5:bb:2b:10:79:46:39:3d: 2d:a2:31:a4:cc:ee:33:3a:ca:8c:1c:05:28:ab:b3: d4:81:f5:05:d7:75:e2:c2:32:cb:22:c4:69:fa:3e: 95:af:14:94:23:35:06:9c:9e:72:e9:10:35:9b:93: 55:8f:8b:b0:9a:5e:27:bb:74:46:00:b8:9d:b8:b1: 85:c7:cb:a0:ee:d4:e5:f6:9e:02:a2:93:8d:29:a5: f4:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:B0:2F:98:22:C3:F3:2B:7D:4D:BE:82:CA:00:5C:F3:3A:EC:6D:FD X509v3 Authority Key Identifier: keyid:71:60:1C:0B:8B:13:CC:12:10:17:F6:D2:51:17:AC:1F:D0:66:43:44 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cWAcC4sTzBIQF_bSUResH9BmQ0Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/d5a49a-4f1a-4961-9c1f-76b0325c3b07/1/cWAcC4sTzBIQF_bSUResH9BmQ0Q.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/d5a49a-4f1a-4961-9c1f-76b0325c3b07/1/cWAcC4sTzBIQF_bSUResH9BmQ0Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption e5:dc:60:84:1a:c8:27:4b:51:77:34:a3:82:5b:42:59:fe:8f: 05:d7:90:55:b4:f2:53:d4:70:91:96:45:94:94:0b:db:d8:fc: 9a:1a:09:61:15:6c:4d:1e:bb:b4:ec:48:f8:47:41:07:9d:4d: c8:43:5e:d3:24:e1:46:46:5d:69:05:28:42:9d:f8:b4:40:a9: ff:2a:e3:64:8f:e4:24:ad:28:48:4d:45:d2:71:99:6d:7d:4e: af:5c:b7:35:75:df:97:68:65:55:3f:b9:5f:26:a0:35:2c:d2: d3:54:96:1a:82:ea:0f:cf:28:6e:fe:0d:a1:52:8d:dd:7d:11: 21:8b:16:4b:b6:46:c5:63:57:89:55:2b:29:a4:03:ed:d6:4d: 6e:72:28:60:b1:85:ed:75:34:cc:39:d7:bf:30:85:a6:e6:18: 54:f0:fa:67:f8:56:69:79:d1:fa:02:4d:78:78:33:39:36:8e: 16:39:5e:55:b4:e9:4d:23:28:20:b8:62:a2:04:3a:8b:2c:64: e1:03:be:b9:be:f3:b7:3e:8c:61:8b:d4:29:66:c8:63:35:d6: d4:c4:d2:6d:40:29:6a:70:d3:5f:26:61:11:45:40:f5:d9:11: 63:8b:7a:7c:5c:28:dc:5c:ed:6e:a5:4f:2c:3d:a5:ea:e1:81: 86:da:22:f9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtGym6qJPXNzBMGM6RAuYFyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcxNjAxYzBiOGIxM2NjMTIxMDE3ZjZkMjUxMTdhYzFmZDA2 NjQzNDQwHhcNMjUxMjIyMTYwMDMwWhcNMjUxMjIzMTYwMDMwWjAzMTEwLwYDVQQD Eyg0NmIwMmY5ODIyYzNmMzJiN2Q0ZGJlODJjYTAwNWNmMzNhZWM2ZGZkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwlk0jgHNIqrigOoWyw8/e1GfzKGr GqpO/P3Glr1F2VCk1zJWGhJEqka7iv/nGa0ELs6pCU4ID9zNCXFqD7qoLFu2q5g0 BKZzC5Baz/fZM4KAECziunbnVJ97u0B683LV5Ip+WYEAurEJ8N+tya0nC6GWdpe1 bo6XFX9KSudvJF9xGDubINiQ1S/bMmKFhjEAw+RO5zerXkbUX+dAYoi6e28ABpuX JKEOHKwTxbsrEHlGOT0tojGkzO4zOsqMHAUoq7PUgfUF13XiwjLLIsRp+j6VrxSU IzUGnJ5y6RA1m5NVj4uwml4nu3RGALiduLGFx8ug7tTl9p4CopONKaX0hQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEawL5giw/MrfU2+gsoAXPM67G39MB8GA1UdIwQY MBaAFHFgHAuLE8wSEBf20lEXrB/QZkNEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY1dBY0M0c1R6QklRRl9iU1VSZXNIOUJtUTBRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZC9kNWE0OWEtNGYxYS00OTYxLTljMWYt NzZiMDMyNWMzYjA3LzEvY1dBY0M0c1R6QklRRl9iU1VSZXNIOUJtUTBRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83ZC9kNWE0OWEtNGYxYS00OTYxLTljMWYtNzZiMDMyNWMzYjA3 LzEvY1dBY0M0c1R6QklRRl9iU1VSZXNIOUJtUTBRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA5dxghBrI J0tRdzSjgltCWf6PBdeQVbTyU9RwkZZFlJQL29j8mhoJYRVsTR67tOxI+EdBB51N yENe0yThRkZdaQUoQp34tECp/yrjZI/kJK0oSE1F0nGZbX1Or1y3NXXfl2hlVT+5 XyagNSzS01SWGoLqD88obv4NoVKN3X0RIYsWS7ZGxWNXiVUrKaQD7dZNbnIoYLGF 7XU0zDnXvzCFpuYYVPD6Z/hWaXnR+gJNeHgzOTaOFjleVbTpTSMoILhiogQ6iyxk 4QO+ub7ztz6MYYvUKWbIYzXW1MTSbUApanDTXyZhEUVA9dkRY4t6fFwo3FztbqVP LD2l6uGBhtoi+Q== -----END CERTIFICATE-----Generated at Tue Dec 23 01:58:22 2025 by rpki-client