This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/d5a49a-4f1a-4961-9c1f-76b0325c3b07/1/cWAcC4sTzBIQF_bSUResH9BmQ0Q.mft File: cWAcC4sTzBIQF_bSUResH9BmQ0Q.mft (raw, json) Hash identifier: x9E7SoS3dxoX5MpDlECdu8gCitYbxhwxVEfd8/4fsBk= Subject key identifier: 15:EA:94:D7:1F:CE:B7:CF:71:5E:A7:3B:71:3F:EA:5C:96:FD:1A:B2 Authority key identifier: 71:60:1C:0B:8B:13:CC:12:10:17:F6:D2:51:17:AC:1F:D0:66:43:44 Certificate issuer: /CN=71601c0b8b13cc121017f6d25117ac1fd0664344 Certificate serial: 019B4AA81C40F9A9EE395CF1C419C286B760 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cWAcC4sTzBIQF_bSUResH9BmQ0Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/d5a49a-4f1a-4961-9c1f-76b0325c3b07/1/cWAcC4sTzBIQF_bSUResH9BmQ0Q.mft Manifest number: 1795 Signing time: Tue 23 Dec 2025 10:01:29 +0000 Manifest this update: Tue 23 Dec 2025 10:01:29 +0000 Manifest next update: Wed 24 Dec 2025 10:01:29 +0000 Files and hashes: 1: 8Tphwf2TdCn6_ko-jZ8YIaCMG4Y.roa (hash: EBGUP9Onjc28Spxu+Bc1P0vLX2s/3Esh3HDfGA5b/yg=) 2: TegEFm13uYuDaVYWPUq_NWyfFhw.roa (hash: Z0NpRN8gnuSXynuy4afFeS+fqs/16nspEy2hNFbDueU=) 3: cWAcC4sTzBIQF_bSUResH9BmQ0Q.crl (hash: pF7QxjuqOhSebAHICNTdXtG/6gm1kfXl3nOTOvbkWi0=) 4: fNW98zG8YgdTIxQopzVptDv3vEA.roa (hash: oH5A9HkaHxcIBBsSALBiEtsRJXsDnYZkpZH6oV0XeF4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/d5a49a-4f1a-4961-9c1f-76b0325c3b07/1/cWAcC4sTzBIQF_bSUResH9BmQ0Q.crl rsync://rpki.ripe.net/repository/DEFAULT/7d/d5a49a-4f1a-4961-9c1f-76b0325c3b07/1/cWAcC4sTzBIQF_bSUResH9BmQ0Q.mft rsync://rpki.ripe.net/repository/DEFAULT/cWAcC4sTzBIQF_bSUResH9BmQ0Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 24 Dec 2025 10:01:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4a:a8:1c:40:f9:a9:ee:39:5c:f1:c4:19:c2:86:b7:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=71601c0b8b13cc121017f6d25117ac1fd0664344 Validity Not Before: Dec 23 10:01:29 2025 GMT Not After : Dec 24 10:01:29 2025 GMT Subject: CN=15ea94d71fceb7cf715ea73b713fea5c96fd1ab2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:70:a9:3c:64:20:21:c9:bf:f5:21:fc:74:78: d6:f6:8c:3d:fe:9e:d4:2f:40:6d:f5:5b:70:de:2c: 9d:ba:25:58:0a:30:e7:32:df:1a:d2:a4:e6:e3:53: 03:84:07:5a:d9:35:b3:8a:0a:96:a9:ca:74:16:cf: af:53:97:5b:b6:9b:10:88:81:4a:55:ff:6f:05:99: 67:14:ca:78:3b:81:d0:16:f3:65:3c:59:1a:ce:ca: 1b:8a:1c:88:07:26:3b:c0:74:b8:6c:8d:c3:8a:40: cf:c5:c7:67:42:2b:c5:de:54:56:85:c2:21:bc:5a: 51:96:4b:7f:5c:75:7a:54:2a:ef:56:4a:9e:d8:c6: 0f:cb:65:ae:04:c7:6a:14:96:8d:1b:a5:ec:c7:aa: ef:c2:ed:52:2c:d3:77:b9:f2:12:dc:1d:a5:79:98: 17:46:44:66:92:5a:a3:14:9c:e2:fb:77:87:41:30: df:17:bc:1e:61:15:05:f2:04:aa:bd:34:4f:91:9a: b6:33:c3:ff:3d:2e:9c:47:6c:c3:4f:a3:0c:da:49: 4d:05:f8:5e:4a:fb:47:23:31:59:4d:ff:eb:94:42: 3e:35:67:f1:d2:69:c6:57:60:e0:29:cf:1a:19:ae: 32:5f:d9:62:d7:c8:22:bc:75:2f:30:4b:ab:30:80: 62:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:EA:94:D7:1F:CE:B7:CF:71:5E:A7:3B:71:3F:EA:5C:96:FD:1A:B2 X509v3 Authority Key Identifier: keyid:71:60:1C:0B:8B:13:CC:12:10:17:F6:D2:51:17:AC:1F:D0:66:43:44 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cWAcC4sTzBIQF_bSUResH9BmQ0Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/d5a49a-4f1a-4961-9c1f-76b0325c3b07/1/cWAcC4sTzBIQF_bSUResH9BmQ0Q.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/d5a49a-4f1a-4961-9c1f-76b0325c3b07/1/cWAcC4sTzBIQF_bSUResH9BmQ0Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4e:8d:83:31:1b:63:3d:6e:27:a9:e2:9a:38:01:a4:e9:a8:ce: b8:04:de:f1:44:e8:76:bc:24:cb:95:86:7d:54:4e:83:a3:ed: bb:39:69:be:ba:90:e2:89:85:b7:4d:88:13:1c:32:f9:71:bb: 30:2f:da:21:7a:fd:82:60:27:12:99:04:59:39:06:75:9c:93: 9c:4d:f5:93:89:24:c9:cc:65:6d:3c:29:19:e2:de:09:b5:7b: 00:2b:93:59:9e:d4:62:e9:00:30:9d:47:88:93:ae:95:ab:86: 45:67:3e:04:e4:1c:56:e2:8f:8f:c5:4b:24:73:6a:44:8f:ba: 72:0a:ca:41:c1:a0:3d:01:ee:ca:07:1e:12:4c:7b:70:cb:d9: 6f:90:d3:ac:ae:a4:bb:bc:8d:c8:e6:1a:4a:f4:34:9a:8d:4d: 96:d5:9a:23:d6:78:31:db:d2:bb:88:39:7d:a8:95:c6:40:e3: 2f:54:a1:b4:dd:f5:9a:10:c1:75:22:f5:b1:fb:21:ff:d5:6e: 67:0f:e5:ee:0f:d7:a7:9c:35:5e:6e:25:d8:e3:27:78:4a:03: ad:ae:56:0b:32:44:03:2a:52:f4:41:61:a3:0b:ea:2c:cd:fb: d4:84:e6:8d:e2:42:3a:69:c3:59:df:66:7c:cb:f1:e0:ee:94: c1:59:8d:7d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtKqBxA+anuOVzxxBnChrdgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcxNjAxYzBiOGIxM2NjMTIxMDE3ZjZkMjUxMTdhYzFmZDA2 NjQzNDQwHhcNMjUxMjIzMTAwMTI5WhcNMjUxMjI0MTAwMTI5WjAzMTEwLwYDVQQD EygxNWVhOTRkNzFmY2ViN2NmNzE1ZWE3M2I3MTNmZWE1Yzk2ZmQxYWIyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuHCpPGQgIcm/9SH8dHjW9ow9/p7U L0Bt9Vtw3iyduiVYCjDnMt8a0qTm41MDhAda2TWzigqWqcp0Fs+vU5dbtpsQiIFK Vf9vBZlnFMp4O4HQFvNlPFkazsobihyIByY7wHS4bI3DikDPxcdnQivF3lRWhcIh vFpRlkt/XHV6VCrvVkqe2MYPy2WuBMdqFJaNG6Xsx6rvwu1SLNN3ufIS3B2leZgX RkRmklqjFJzi+3eHQTDfF7weYRUF8gSqvTRPkZq2M8P/PS6cR2zDT6MM2klNBfhe SvtHIzFZTf/rlEI+NWfx0mnGV2DgKc8aGa4yX9li18givHUvMEurMIBiIQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBXqlNcfzrfPcV6nO3E/6lyW/RqyMB8GA1UdIwQY MBaAFHFgHAuLE8wSEBf20lEXrB/QZkNEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY1dBY0M0c1R6QklRRl9iU1VSZXNIOUJtUTBRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZC9kNWE0OWEtNGYxYS00OTYxLTljMWYt NzZiMDMyNWMzYjA3LzEvY1dBY0M0c1R6QklRRl9iU1VSZXNIOUJtUTBRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83ZC9kNWE0OWEtNGYxYS00OTYxLTljMWYtNzZiMDMyNWMzYjA3 LzEvY1dBY0M0c1R6QklRRl9iU1VSZXNIOUJtUTBRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATo2DMRtj PW4nqeKaOAGk6ajOuATe8UTodrwky5WGfVROg6PtuzlpvrqQ4omFt02IExwy+XG7 MC/aIXr9gmAnEpkEWTkGdZyTnE31k4kkycxlbTwpGeLeCbV7ACuTWZ7UYukAMJ1H iJOulauGRWc+BOQcVuKPj8VLJHNqRI+6cgrKQcGgPQHuygceEkx7cMvZb5DTrK6k u7yNyOYaSvQ0mo1NltWaI9Z4MdvSu4g5faiVxkDjL1ShtN31mhDBdSL1sfsh/9Vu Zw/l7g/Xp5w1Xm4l2OMneEoDra5WCzJEAypS9EFhowvqLM371ITmjeJCOmnDWd9m fMvx4O6UwVmNfQ== -----END CERTIFICATE-----Generated at Tue Dec 23 18:56:30 2025 by rpki-client