This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/6ce0c0-937c-4a43-9e84-18e5c537d51d/1/cN5wfWwBAGsqymh-qrKctHNrdmg.mft File: cN5wfWwBAGsqymh-qrKctHNrdmg.mft (raw, json) Hash identifier: zWbXmHZZqf45X/8o4k/XfUDFQQlY1WxGpakUkjb+6Sg= Subject key identifier: FF:B0:90:9F:B7:5A:76:D7:6C:FD:93:6B:E0:A3:B9:C0:D6:05:E9:C0 Authority key identifier: 70:DE:70:7D:6C:01:00:6B:2A:CA:68:7E:AA:B2:9C:B4:73:6B:76:68 Certificate issuer: /CN=70de707d6c01006b2aca687eaab29cb4736b7668 Certificate serial: 019B59AD20C845B6F2296227BEC1090ABEB3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cN5wfWwBAGsqymh-qrKctHNrdmg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/6ce0c0-937c-4a43-9e84-18e5c537d51d/1/cN5wfWwBAGsqymh-qrKctHNrdmg.mft Manifest number: 1798 Signing time: Fri 26 Dec 2025 08:01:16 +0000 Manifest this update: Fri 26 Dec 2025 08:01:16 +0000 Manifest next update: Sat 27 Dec 2025 08:01:16 +0000 Files and hashes: 1: Jo8Y435n3Pd_3zXxNtedYgjItDk.roa (hash: s59FKEp30KDhXVkiZy91uysMmddt+n0/jacR5LsK5DU=) 2: cN5wfWwBAGsqymh-qrKctHNrdmg.crl (hash: gOQgT12txCzuXSn82Y63rYMPsMt9lepRFFHFG7T2l6Q=) 3: fvocZOR5mjQw63-hlnTV0AYJ-n0.roa (hash: EDtt1bNtketuScVPOmt7fRRKZDdXsTL+CjwO3mYdaKU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/6ce0c0-937c-4a43-9e84-18e5c537d51d/1/cN5wfWwBAGsqymh-qrKctHNrdmg.crl rsync://rpki.ripe.net/repository/DEFAULT/93/6ce0c0-937c-4a43-9e84-18e5c537d51d/1/cN5wfWwBAGsqymh-qrKctHNrdmg.mft rsync://rpki.ripe.net/repository/DEFAULT/cN5wfWwBAGsqymh-qrKctHNrdmg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:ad:20:c8:45:b6:f2:29:62:27:be:c1:09:0a:be:b3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=70de707d6c01006b2aca687eaab29cb4736b7668 Validity Not Before: Dec 26 08:01:16 2025 GMT Not After : Dec 27 08:01:16 2025 GMT Subject: CN=ffb0909fb75a76d76cfd936be0a3b9c0d605e9c0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f6:cb:4d:7a:9b:a4:64:93:13:38:40:7b:75:03: 3b:95:e9:57:07:a5:e2:8f:58:b2:20:f9:66:eb:00: 6b:35:f8:9a:19:ed:78:6f:a3:59:3b:24:6b:db:35: ff:fa:39:6c:9c:ba:7e:2b:40:d4:e1:4c:cf:69:8d: 95:4e:ad:25:91:89:22:16:eb:a9:08:4b:21:d2:01: 4f:d0:4f:0d:a3:55:78:2e:da:0a:10:16:70:c3:e7: 3b:a2:9f:80:af:c6:ae:c0:5b:5c:66:02:be:66:f3: cc:27:df:de:81:55:34:33:63:29:23:6d:09:b6:19: de:88:da:ba:0f:c0:ce:87:c9:f2:ba:89:51:c3:69: b0:1f:a0:59:4f:8e:d7:12:18:2e:75:5f:58:ee:d8: 37:e9:16:2f:27:b0:8b:d3:a5:8c:3b:8f:67:df:31: d5:02:63:9a:bb:01:f1:64:2f:6a:d1:c5:2c:b1:23: e6:d8:83:8d:e6:4e:36:55:44:4a:52:55:d3:03:a9: 48:86:8c:9e:c3:f0:94:0a:e3:62:da:1a:e5:07:2f: 4a:af:68:c4:c1:3c:e1:7e:0e:3f:26:64:67:76:83: 23:f8:7a:38:20:b6:b7:51:f7:cb:e6:a8:4f:4c:2a: 42:44:4f:a8:ec:f0:7b:3a:38:e5:c0:bf:67:71:69: 64:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:B0:90:9F:B7:5A:76:D7:6C:FD:93:6B:E0:A3:B9:C0:D6:05:E9:C0 X509v3 Authority Key Identifier: keyid:70:DE:70:7D:6C:01:00:6B:2A:CA:68:7E:AA:B2:9C:B4:73:6B:76:68 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cN5wfWwBAGsqymh-qrKctHNrdmg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/6ce0c0-937c-4a43-9e84-18e5c537d51d/1/cN5wfWwBAGsqymh-qrKctHNrdmg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/93/6ce0c0-937c-4a43-9e84-18e5c537d51d/1/cN5wfWwBAGsqymh-qrKctHNrdmg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 46:8d:dc:e7:4f:40:80:90:34:a8:fc:9d:d4:07:3c:6b:8f:0f: 3a:95:c9:4a:52:16:aa:44:94:91:0c:90:be:f7:e9:b3:3a:a2: 28:de:b2:2a:83:c5:e3:4a:74:4f:76:3e:bb:57:99:9c:a2:ab: c7:fa:92:0f:93:3a:2c:1b:c3:4b:c5:27:ff:ff:88:9c:f0:4c: fd:8d:8e:db:35:2d:40:d8:52:78:a3:61:ae:4f:e1:61:49:b8: f3:30:77:6b:5a:c6:27:59:aa:87:5e:c5:3f:dd:6b:e6:4c:6e: 76:d5:42:00:ff:2d:ec:98:c6:c2:9d:77:07:28:46:9e:0c:6a: 30:54:53:16:d4:10:87:af:02:ea:02:82:d9:f9:f7:18:e7:a8: 1f:a6:35:d2:70:33:fa:03:09:70:61:56:d0:d2:7e:2c:61:c5: e3:7b:f1:fd:f3:b0:95:a4:54:70:0b:91:d8:79:4b:4a:ed:ac: 8c:55:b9:d0:3f:0a:8e:9a:da:4f:c4:26:cf:51:04:5c:fe:c0: aa:d1:a8:23:24:50:b5:08:e3:eb:fd:74:cc:3e:ae:a0:0f:d7: 51:f4:4b:c8:ba:c2:e1:92:1a:d4:f6:c6:1d:72:9a:38:20:8e: 36:8c:22:84:67:47:48:38:e6:dd:5b:c0:01:26:1a:eb:b8:e0: b7:35:c7:49 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtZrSDIRbbyKWInvsEJCr6zMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcwZGU3MDdkNmMwMTAwNmIyYWNhNjg3ZWFhYjI5Y2I0NzM2 Yjc2NjgwHhcNMjUxMjI2MDgwMTE2WhcNMjUxMjI3MDgwMTE2WjAzMTEwLwYDVQQD EyhmZmIwOTA5ZmI3NWE3NmQ3NmNmZDkzNmJlMGEzYjljMGQ2MDVlOWMwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9stNepukZJMTOEB7dQM7lelXB6Xi j1iyIPlm6wBrNfiaGe14b6NZOyRr2zX/+jlsnLp+K0DU4UzPaY2VTq0lkYkiFuup CEsh0gFP0E8No1V4LtoKEBZww+c7op+Ar8auwFtcZgK+ZvPMJ9/egVU0M2MpI20J thneiNq6D8DOh8nyuolRw2mwH6BZT47XEhgudV9Y7tg36RYvJ7CL06WMO49n3zHV AmOauwHxZC9q0cUssSPm2ION5k42VURKUlXTA6lIhoyew/CUCuNi2hrlBy9Kr2jE wTzhfg4/JmRndoMj+Ho4ILa3UffL5qhPTCpCRE+o7PB7OjjlwL9ncWlkJQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFP+wkJ+3WnbXbP2Ta+CjucDWBenAMB8GA1UdIwQY MBaAFHDecH1sAQBrKspofqqynLRza3ZoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY041d2ZXd0JBR3NxeW1oLXFyS2N0SE5yZG1nLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85My82Y2UwYzAtOTM3Yy00YTQzLTllODQt MThlNWM1MzdkNTFkLzEvY041d2ZXd0JBR3NxeW1oLXFyS2N0SE5yZG1nLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85My82Y2UwYzAtOTM3Yy00YTQzLTllODQtMThlNWM1MzdkNTFk LzEvY041d2ZXd0JBR3NxeW1oLXFyS2N0SE5yZG1nLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARo3c509A gJA0qPyd1Ac8a48POpXJSlIWqkSUkQyQvvfpszqiKN6yKoPF40p0T3Y+u1eZnKKr x/qSD5M6LBvDS8Un//+InPBM/Y2O2zUtQNhSeKNhrk/hYUm48zB3a1rGJ1mqh17F P91r5kxudtVCAP8t7JjGwp13ByhGngxqMFRTFtQQh68C6gKC2fn3GOeoH6Y10nAz +gMJcGFW0NJ+LGHF43vx/fOwlaRUcAuR2HlLSu2sjFW50D8KjpraT8Qmz1EEXP7A qtGoIyRQtQjj6/10zD6uoA/XUfRLyLrC4ZIa1PbGHXKaOCCONowihGdHSDjm3VvA ASYa67jgtzXHSQ== -----END CERTIFICATE-----Generated at Fri Dec 26 14:17:20 2025 by rpki-client