This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/dcc2b4-9ded-4678-8398-ab79a3789f8f/1/cAoSMdHCenVORu8Q6SpzCuFdD1U.mft File: cAoSMdHCenVORu8Q6SpzCuFdD1U.mft (raw, json) Hash identifier: QE1DQg+i/Ai+IcqW1LEAnaakqIb5ZL1ZBIL/z2l/deY= Subject key identifier: 26:79:91:A4:51:37:BC:A7:30:1C:43:31:42:84:49:37:51:9A:99:A9 Authority key identifier: 70:0A:12:31:D1:C2:7A:75:4E:46:EF:10:E9:2A:73:0A:E1:5D:0F:55 Certificate issuer: /CN=700a1231d1c27a754e46ef10e92a730ae15d0f55 Certificate serial: 019B33E876466649675466661536408319D0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cAoSMdHCenVORu8Q6SpzCuFdD1U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/dcc2b4-9ded-4678-8398-ab79a3789f8f/1/cAoSMdHCenVORu8Q6SpzCuFdD1U.mft Manifest number: 148A Signing time: Fri 19 Dec 2025 00:00:31 +0000 Manifest this update: Fri 19 Dec 2025 00:00:31 +0000 Manifest next update: Sat 20 Dec 2025 00:00:31 +0000 Files and hashes: 1: 9NhpD2GhK7nhCkw4Ln2hgR-a9FI.roa (hash: +fqLpWLcEuKJBmzQK+NoGzgKFUXuG2sR0jOCjmaF7ws=) 2: CsTskpGu2067EbH05wfUIZUPjxk.roa (hash: CGKvFO8hPB5WwPOizq8WbZfwBPb68T3rzaJWX9q+khg=) 3: NMtf5g2h09CpLbmo1MKTK6aenWk.roa (hash: tfFi0QE+bzYcqYuU5pyH35ZlykRfgC3AccLaeKevVfo=) 4: Ui7tOCQMpzQZKjrz8TKsRSE40Q4.roa (hash: DHT0OqKz8zWpIsPzI8wSWAnHvpUIUXG4m7B7nool0IE=) 5: YcOS2Wm4uyMkkPXlfvg_yl6nKYE.roa (hash: khcCUHFHG89+gqzsvASfhdPwL9xGw6oHEE1dsfVjZXE=) 6: cAoSMdHCenVORu8Q6SpzCuFdD1U.crl (hash: aHMnj5g2lc12ccGTkMfKv9b2hAxXGQbjOoAeREaKpB4=) 7: dH9xmN_c-ogf3lMo2xsIcwvlDWE.roa (hash: SFJ3H40oDJz+xjK+HZI55sajPf6JpJrE0sfXbpnpYH0=) 8: mmEVKc1EFKuheB4FKizBXFspVtg.roa (hash: /mO5uMHmI8PnkMInS/fvq5meo8U4FCe78Pgb4cEwmJA=) 9: qoKING8LOUliqm_EPi7hMcuvFCE.roa (hash: 2DIbzoBlPqvX6X6H+KZMj8Ugg/FShiQHvw+LRdtArgY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/dcc2b4-9ded-4678-8398-ab79a3789f8f/1/cAoSMdHCenVORu8Q6SpzCuFdD1U.crl rsync://rpki.ripe.net/repository/DEFAULT/a1/dcc2b4-9ded-4678-8398-ab79a3789f8f/1/cAoSMdHCenVORu8Q6SpzCuFdD1U.mft rsync://rpki.ripe.net/repository/DEFAULT/cAoSMdHCenVORu8Q6SpzCuFdD1U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:33:e8:76:46:66:49:67:54:66:66:15:36:40:83:19:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=700a1231d1c27a754e46ef10e92a730ae15d0f55 Validity Not Before: Dec 19 00:00:31 2025 GMT Not After : Dec 20 00:00:31 2025 GMT Subject: CN=267991a45137bca7301c433142844937519a99a9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:c8:23:db:c7:1d:5d:a7:d8:40:e4:68:a7:80: 31:30:0a:af:93:62:52:38:36:a0:2f:23:bc:4b:dc: c8:c2:8a:c6:af:73:f6:cd:63:05:b8:4d:2a:67:a1: c8:a5:18:bd:fb:05:6d:40:a3:83:76:f2:7a:26:33: 26:2f:e1:11:1b:8f:31:5b:7c:a4:43:1a:79:9a:e0: ed:9b:62:36:5f:3d:c8:02:31:2b:4f:91:dd:d9:5d: df:06:d1:ca:59:b9:81:49:90:5d:2d:19:51:46:35: c6:36:1e:f4:8a:f5:01:f4:88:2e:7f:e1:96:0e:61: b1:a4:44:45:ae:12:93:da:1d:b4:f9:44:b0:1b:58: fe:87:12:e3:b0:7c:72:8d:7c:70:db:18:9f:31:ca: 04:3e:e0:93:90:b3:99:b5:b1:29:72:76:d4:bc:1b: ce:9a:40:40:f6:fe:ca:76:08:64:3f:31:a1:41:69: 69:c6:0c:d6:fc:55:48:c7:6c:7f:37:3a:fd:ca:76: f3:74:03:20:8b:0c:84:1a:ec:f7:96:1e:79:dc:87: cd:e1:46:dd:b9:da:f6:69:7a:93:b7:d6:df:44:9d: c5:e0:0b:07:3c:e6:83:74:ca:0e:f4:85:4b:5b:86: db:97:65:0b:71:29:e5:87:6b:a5:eb:bb:30:ea:76: a4:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:79:91:A4:51:37:BC:A7:30:1C:43:31:42:84:49:37:51:9A:99:A9 X509v3 Authority Key Identifier: keyid:70:0A:12:31:D1:C2:7A:75:4E:46:EF:10:E9:2A:73:0A:E1:5D:0F:55 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cAoSMdHCenVORu8Q6SpzCuFdD1U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/dcc2b4-9ded-4678-8398-ab79a3789f8f/1/cAoSMdHCenVORu8Q6SpzCuFdD1U.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/dcc2b4-9ded-4678-8398-ab79a3789f8f/1/cAoSMdHCenVORu8Q6SpzCuFdD1U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 28:76:b3:57:2b:cd:3a:a7:5c:05:68:d0:0d:3e:e3:d9:4d:65: 3d:69:01:af:af:ad:9d:76:0a:4f:88:83:c9:d6:33:f1:b3:8a: 3b:c1:6a:14:45:17:b3:ff:ed:ed:da:16:00:38:3d:3d:ea:36: c9:40:7e:00:71:9f:59:13:c2:58:41:02:a8:54:e0:c5:02:c7: e5:52:32:af:65:18:d4:c2:b5:66:d5:d6:c5:88:bf:16:e0:65: 1f:81:19:ab:c0:24:6c:3a:0e:0a:99:ad:3b:b7:95:4f:29:75: 0c:0b:ea:5b:e4:10:ac:56:c7:d9:5a:3f:51:38:03:a5:cc:1b: 70:97:0a:02:33:cb:57:5f:93:8a:1c:bb:04:b0:4e:a1:52:92: 4b:e9:98:8b:35:c3:4d:48:1e:9f:ef:03:77:cd:d6:84:6f:8b: 41:d8:1c:11:82:d0:52:ba:d7:34:ab:8b:88:7b:76:f3:6e:52: f2:d0:dc:3a:91:24:ae:8e:ea:09:a2:96:69:be:a8:8d:f1:32: 09:b1:ce:0b:76:68:2e:42:a5:e4:9a:52:3b:43:ec:9c:1a:0e: 6d:af:73:c6:6b:48:a0:ad:b3:c2:da:94:5a:fc:e6:38:92:a3: e9:94:bb:57:b0:bd:61:21:f1:90:47:11:5f:66:43:5e:45:54: 3d:e7:cb:d6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsz6HZGZklnVGZmFTZAgxnQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcwMGExMjMxZDFjMjdhNzU0ZTQ2ZWYxMGU5MmE3MzBhZTE1 ZDBmNTUwHhcNMjUxMjE5MDAwMDMxWhcNMjUxMjIwMDAwMDMxWjAzMTEwLwYDVQQD EygyNjc5OTFhNDUxMzdiY2E3MzAxYzQzMzE0Mjg0NDkzNzUxOWE5OWE5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwcgj28cdXafYQORop4AxMAqvk2JS ODagLyO8S9zIworGr3P2zWMFuE0qZ6HIpRi9+wVtQKODdvJ6JjMmL+ERG48xW3yk Qxp5muDtm2I2Xz3IAjErT5Hd2V3fBtHKWbmBSZBdLRlRRjXGNh70ivUB9Iguf+GW DmGxpERFrhKT2h20+USwG1j+hxLjsHxyjXxw2xifMcoEPuCTkLOZtbEpcnbUvBvO mkBA9v7KdghkPzGhQWlpxgzW/FVIx2x/Nzr9ynbzdAMgiwyEGuz3lh553IfN4Ubd udr2aXqTt9bfRJ3F4AsHPOaDdMoO9IVLW4bbl2ULcSnlh2ul67sw6nakUwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCZ5kaRRN7ynMBxDMUKESTdRmpmpMB8GA1UdIwQY MBaAFHAKEjHRwnp1TkbvEOkqcwrhXQ9VMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY0FvU01kSENlblZPUnU4UTZTcHpDdUZkRDFVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMS9kY2MyYjQtOWRlZC00Njc4LTgzOTgt YWI3OWEzNzg5ZjhmLzEvY0FvU01kSENlblZPUnU4UTZTcHpDdUZkRDFVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMS9kY2MyYjQtOWRlZC00Njc4LTgzOTgtYWI3OWEzNzg5Zjhm LzEvY0FvU01kSENlblZPUnU4UTZTcHpDdUZkRDFVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKHazVyvN OqdcBWjQDT7j2U1lPWkBr6+tnXYKT4iDydYz8bOKO8FqFEUXs//t7doWADg9Peo2 yUB+AHGfWRPCWEECqFTgxQLH5VIyr2UY1MK1ZtXWxYi/FuBlH4EZq8AkbDoOCpmt O7eVTyl1DAvqW+QQrFbH2Vo/UTgDpcwbcJcKAjPLV1+Tihy7BLBOoVKSS+mYizXD TUgen+8Dd83WhG+LQdgcEYLQUrrXNKuLiHt2825S8tDcOpEkro7qCaKWab6ojfEy CbHOC3ZoLkKl5JpSO0PsnBoOba9zxmtIoK2zwtqUWvzmOJKj6ZS7V7C9YSHxkEcR X2ZDXkVUPefL1g== -----END CERTIFICATE-----Generated at Fri Dec 19 03:48:43 2025 by rpki-client