This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/4bebe7-3f8e-4949-8980-9f6fa0e1a5a5/1/cJ626qpJ3WtIPgSxQ05NrHntnTE.mft File: cJ626qpJ3WtIPgSxQ05NrHntnTE.mft (raw, json) Hash identifier: GTxp9u91iVs9c8E2Bx2aKP41Jv0xkWI112FxY0kn2Nw= Subject key identifier: F4:ED:34:F3:B4:2D:E0:12:AB:92:44:DC:0D:5E:B3:E0:F5:1B:9A:70 Authority key identifier: 70:9E:B6:EA:AA:49:DD:6B:48:3E:04:B1:43:4E:4D:AC:79:ED:9D:31 Certificate issuer: /CN=709eb6eaaa49dd6b483e04b1434e4dac79ed9d31 Certificate serial: 019B5C3FD29BD9CCA89A7C63FB0F4A723ED6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cJ626qpJ3WtIPgSxQ05NrHntnTE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/4bebe7-3f8e-4949-8980-9f6fa0e1a5a5/1/cJ626qpJ3WtIPgSxQ05NrHntnTE.mft Manifest number: 131F Signing time: Fri 26 Dec 2025 20:00:44 +0000 Manifest this update: Fri 26 Dec 2025 20:00:44 +0000 Manifest next update: Sat 27 Dec 2025 20:00:44 +0000 Files and hashes: 1: cJ626qpJ3WtIPgSxQ05NrHntnTE.crl (hash: dIp2RJb31+CX+Z+7ancd+YLYNh0KCleXcojvzqR802w=) 2: pszj2ow_8e4yhWJ4p_2OlR6lAZA.roa (hash: Bkleu+zwlUm+Ij3pdF+L2pghaKZyEcPMCuJgamcNwU0=) 3: x05s8cxNFz3Ea01ENwVR0hPrDdY.roa (hash: 7Z21y2oOiXJmBN38XDJhWItGwbzVeLKb+Gde/eJFRgQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/4bebe7-3f8e-4949-8980-9f6fa0e1a5a5/1/cJ626qpJ3WtIPgSxQ05NrHntnTE.crl rsync://rpki.ripe.net/repository/DEFAULT/9c/4bebe7-3f8e-4949-8980-9f6fa0e1a5a5/1/cJ626qpJ3WtIPgSxQ05NrHntnTE.mft rsync://rpki.ripe.net/repository/DEFAULT/cJ626qpJ3WtIPgSxQ05NrHntnTE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 15:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5c:3f:d2:9b:d9:cc:a8:9a:7c:63:fb:0f:4a:72:3e:d6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=709eb6eaaa49dd6b483e04b1434e4dac79ed9d31 Validity Not Before: Dec 26 20:00:44 2025 GMT Not After : Dec 27 20:00:44 2025 GMT Subject: CN=f4ed34f3b42de012ab9244dc0d5eb3e0f51b9a70 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:a0:ef:19:dc:cb:1a:c8:94:2f:00:7c:f4:80: 5a:3e:fe:96:8f:64:8e:21:4c:0d:1f:57:fc:b3:f5: fc:ac:1e:4f:b4:f5:93:38:d8:a6:56:bc:4c:d8:2b: 38:e5:b2:ca:2e:a8:99:63:cd:90:95:70:1f:51:44: 61:a5:3b:69:6c:8b:1e:a5:c4:de:4f:fa:4f:79:b8: 45:32:75:38:bd:2f:dc:cd:b7:cb:59:26:52:4f:f4: 6a:03:d8:7f:19:99:ac:1b:6b:da:51:5d:06:51:14: 5e:8a:e7:dc:39:af:9f:c9:61:ec:1e:3b:19:5b:f5: c5:af:9f:a2:c4:5b:2b:48:b7:3d:9f:81:aa:3f:c7: 7c:08:d1:1b:d5:49:97:89:f1:ab:b8:7a:b2:ac:8a: cd:37:f0:21:f2:65:2f:4b:24:f8:a9:cc:7c:64:0e: 47:15:37:e3:1d:76:35:85:6e:1a:b6:e5:a8:d0:5d: 28:11:02:c3:0b:23:ff:21:97:e2:c1:f0:b4:93:5a: 8c:cd:bd:40:29:81:dd:84:fb:21:ae:5b:e0:af:d4: de:ad:43:7a:4f:e2:74:be:ae:5a:0d:15:26:59:6d: d4:bf:59:87:40:2c:e4:bc:cf:f6:e9:d6:b4:1d:b3: 1a:33:b8:96:ce:b1:d5:38:ff:71:97:cf:e9:42:10: a7:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:ED:34:F3:B4:2D:E0:12:AB:92:44:DC:0D:5E:B3:E0:F5:1B:9A:70 X509v3 Authority Key Identifier: keyid:70:9E:B6:EA:AA:49:DD:6B:48:3E:04:B1:43:4E:4D:AC:79:ED:9D:31 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cJ626qpJ3WtIPgSxQ05NrHntnTE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/4bebe7-3f8e-4949-8980-9f6fa0e1a5a5/1/cJ626qpJ3WtIPgSxQ05NrHntnTE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/4bebe7-3f8e-4949-8980-9f6fa0e1a5a5/1/cJ626qpJ3WtIPgSxQ05NrHntnTE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8b:e7:a4:4e:50:2e:62:0e:27:57:52:c2:ee:70:70:a4:00:5a: c0:52:bd:4d:68:62:e9:da:96:a7:5e:16:6d:08:38:c4:92:3c: 3c:32:c8:9d:b8:82:b2:fc:de:f0:df:92:18:09:79:72:ee:43: 46:60:3c:4a:1d:21:df:c0:1a:eb:21:8a:6b:22:c1:c0:0b:4c: 13:21:dc:d6:b4:44:3e:66:0b:b1:12:40:d5:43:b6:f1:c1:4d: 0f:2a:c2:6d:d4:04:da:2e:d1:0e:5d:dd:4a:5f:1d:07:d5:09: b1:cb:ca:0c:a9:6c:68:2b:7f:bd:ac:17:8b:e6:a6:52:9b:2e: 9a:3f:4e:79:64:4f:3a:50:af:91:78:f1:48:a6:d8:0c:60:04: df:55:1a:e3:8d:85:93:d1:d0:44:30:c3:f4:41:3f:1a:a5:06: 39:45:f4:21:aa:af:7c:af:d2:c5:a4:77:42:0f:02:10:2c:99: f6:12:0d:38:99:8d:a7:7a:16:a7:f6:b9:15:e0:a3:27:b3:1d: 27:81:e1:46:d8:1e:a4:14:50:92:2f:86:9c:85:0c:2b:70:66: 63:68:33:58:76:da:6b:d2:e0:a8:80:0a:51:b0:6b:67:ab:08: 46:a0:76:8f:55:0c:69:4c:3d:b3:8f:72:57:ae:70:36:8e:21: 79:07:ee:4e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtcP9Kb2cyomnxj+w9Kcj7WMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcwOWViNmVhYWE0OWRkNmI0ODNlMDRiMTQzNGU0ZGFjNzll ZDlkMzEwHhcNMjUxMjI2MjAwMDQ0WhcNMjUxMjI3MjAwMDQ0WjAzMTEwLwYDVQQD EyhmNGVkMzRmM2I0MmRlMDEyYWI5MjQ0ZGMwZDVlYjNlMGY1MWI5YTcwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj6DvGdzLGsiULwB89IBaPv6Wj2SO IUwNH1f8s/X8rB5PtPWTONimVrxM2Cs45bLKLqiZY82QlXAfUURhpTtpbIsepcTe T/pPebhFMnU4vS/czbfLWSZST/RqA9h/GZmsG2vaUV0GURReiufcOa+fyWHsHjsZ W/XFr5+ixFsrSLc9n4GqP8d8CNEb1UmXifGruHqyrIrNN/Ah8mUvSyT4qcx8ZA5H FTfjHXY1hW4atuWo0F0oEQLDCyP/IZfiwfC0k1qMzb1AKYHdhPshrlvgr9TerUN6 T+J0vq5aDRUmWW3Uv1mHQCzkvM/26da0HbMaM7iWzrHVOP9xl8/pQhCnOwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPTtNPO0LeASq5JE3A1es+D1G5pwMB8GA1UdIwQY MBaAFHCetuqqSd1rSD4EsUNOTax57Z0xMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY0o2MjZxcEozV3RJUGdTeFEwNU5ySG50blRFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yy80YmViZTctM2Y4ZS00OTQ5LTg5ODAt OWY2ZmEwZTFhNWE1LzEvY0o2MjZxcEozV3RJUGdTeFEwNU5ySG50blRFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Yy80YmViZTctM2Y4ZS00OTQ5LTg5ODAtOWY2ZmEwZTFhNWE1 LzEvY0o2MjZxcEozV3RJUGdTeFEwNU5ySG50blRFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAi+ekTlAu Yg4nV1LC7nBwpABawFK9TWhi6dqWp14WbQg4xJI8PDLInbiCsvze8N+SGAl5cu5D RmA8Sh0h38Aa6yGKayLBwAtMEyHc1rREPmYLsRJA1UO28cFNDyrCbdQE2i7RDl3d Sl8dB9UJscvKDKlsaCt/vawXi+amUpsumj9OeWRPOlCvkXjxSKbYDGAE31Ua442F k9HQRDDD9EE/GqUGOUX0IaqvfK/SxaR3Qg8CECyZ9hINOJmNp3oWp/a5FeCjJ7Md J4HhRtgepBRQki+GnIUMK3BmY2gzWHbaa9LgqIAKUbBrZ6sIRqB2j1UMaUw9s49y V65wNo4heQfuTg== -----END CERTIFICATE-----Generated at Fri Dec 26 22:45:41 2025 by rpki-client