This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/dcc2b4-9ded-4678-8398-ab79a3789f8f/1/cAoSMdHCenVORu8Q6SpzCuFdD1U.mft File: cAoSMdHCenVORu8Q6SpzCuFdD1U.mft (raw, json) Hash identifier: cPtMG8us9NBkplYKQOFK+4bMnUpM60n0/GqiLRVN+hc= Subject key identifier: E8:86:BE:96:24:44:C0:D8:04:44:F4:94:C6:84:CC:F8:62:99:80:2E Authority key identifier: 70:0A:12:31:D1:C2:7A:75:4E:46:EF:10:E9:2A:73:0A:E1:5D:0F:55 Certificate issuer: /CN=700a1231d1c27a754e46ef10e92a730ae15d0f55 Certificate serial: 019B35D73309F672B1DB4C56D119384D75ED Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cAoSMdHCenVORu8Q6SpzCuFdD1U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/dcc2b4-9ded-4678-8398-ab79a3789f8f/1/cAoSMdHCenVORu8Q6SpzCuFdD1U.mft Manifest number: 148B Signing time: Fri 19 Dec 2025 09:00:54 +0000 Manifest this update: Fri 19 Dec 2025 09:00:54 +0000 Manifest next update: Sat 20 Dec 2025 09:00:54 +0000 Files and hashes: 1: 9NhpD2GhK7nhCkw4Ln2hgR-a9FI.roa (hash: +fqLpWLcEuKJBmzQK+NoGzgKFUXuG2sR0jOCjmaF7ws=) 2: CsTskpGu2067EbH05wfUIZUPjxk.roa (hash: CGKvFO8hPB5WwPOizq8WbZfwBPb68T3rzaJWX9q+khg=) 3: NMtf5g2h09CpLbmo1MKTK6aenWk.roa (hash: tfFi0QE+bzYcqYuU5pyH35ZlykRfgC3AccLaeKevVfo=) 4: Ui7tOCQMpzQZKjrz8TKsRSE40Q4.roa (hash: DHT0OqKz8zWpIsPzI8wSWAnHvpUIUXG4m7B7nool0IE=) 5: YcOS2Wm4uyMkkPXlfvg_yl6nKYE.roa (hash: khcCUHFHG89+gqzsvASfhdPwL9xGw6oHEE1dsfVjZXE=) 6: cAoSMdHCenVORu8Q6SpzCuFdD1U.crl (hash: GyhcyemeDel+OrHPH8Zut+eJU+Xn0vVRnX18ySO2hiM=) 7: dH9xmN_c-ogf3lMo2xsIcwvlDWE.roa (hash: SFJ3H40oDJz+xjK+HZI55sajPf6JpJrE0sfXbpnpYH0=) 8: mmEVKc1EFKuheB4FKizBXFspVtg.roa (hash: /mO5uMHmI8PnkMInS/fvq5meo8U4FCe78Pgb4cEwmJA=) 9: qoKING8LOUliqm_EPi7hMcuvFCE.roa (hash: 2DIbzoBlPqvX6X6H+KZMj8Ugg/FShiQHvw+LRdtArgY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/dcc2b4-9ded-4678-8398-ab79a3789f8f/1/cAoSMdHCenVORu8Q6SpzCuFdD1U.crl rsync://rpki.ripe.net/repository/DEFAULT/a1/dcc2b4-9ded-4678-8398-ab79a3789f8f/1/cAoSMdHCenVORu8Q6SpzCuFdD1U.mft rsync://rpki.ripe.net/repository/DEFAULT/cAoSMdHCenVORu8Q6SpzCuFdD1U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 09:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:35:d7:33:09:f6:72:b1:db:4c:56:d1:19:38:4d:75:ed Signature Algorithm: sha256WithRSAEncryption Issuer: CN=700a1231d1c27a754e46ef10e92a730ae15d0f55 Validity Not Before: Dec 19 09:00:54 2025 GMT Not After : Dec 20 09:00:54 2025 GMT Subject: CN=e886be962444c0d80444f494c684ccf86299802e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:34:67:b4:37:10:87:86:6c:e8:2c:32:01:fd: 48:a6:bf:eb:a6:80:3a:8b:aa:55:23:42:36:0f:72: b7:a0:a8:44:2f:7b:ba:67:b4:ec:b5:a7:3f:2b:dc: 46:87:f4:03:e1:ea:85:3d:16:3c:5a:3e:74:57:64: 13:4d:cf:a6:e1:a0:70:0d:2c:0c:1f:39:3d:f1:a8: a3:b8:12:02:08:96:fb:0b:ea:19:95:ce:d0:9f:29: 6b:25:6a:40:2c:44:d6:6b:f0:57:08:9b:70:9b:e8: 33:1a:b7:36:fa:4a:bb:01:9b:a9:4d:58:bc:f0:bf: 57:52:c7:8b:49:85:90:c1:02:68:50:13:a2:46:11: de:3f:f1:ca:6e:4d:7c:b4:12:4c:21:4f:a1:bd:00: a5:1a:ed:3a:90:22:63:a1:17:23:c6:f9:ac:6e:bc: ae:aa:60:c3:9e:2e:55:3d:d2:61:1c:b1:d7:06:48: ce:43:ce:1f:93:28:fe:84:c0:8d:00:45:c5:98:49: 16:3e:5e:43:87:c1:55:97:ad:20:ad:96:2e:75:1a: 91:4a:ae:b5:39:ea:e2:dd:1b:dc:5f:73:c8:f5:6b: 59:8f:d8:b5:dc:68:ec:51:ce:f6:c2:04:cc:8a:40: 70:57:91:5b:9e:c3:a4:57:54:d3:c1:50:83:f7:ea: 70:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:86:BE:96:24:44:C0:D8:04:44:F4:94:C6:84:CC:F8:62:99:80:2E X509v3 Authority Key Identifier: keyid:70:0A:12:31:D1:C2:7A:75:4E:46:EF:10:E9:2A:73:0A:E1:5D:0F:55 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cAoSMdHCenVORu8Q6SpzCuFdD1U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/dcc2b4-9ded-4678-8398-ab79a3789f8f/1/cAoSMdHCenVORu8Q6SpzCuFdD1U.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/dcc2b4-9ded-4678-8398-ab79a3789f8f/1/cAoSMdHCenVORu8Q6SpzCuFdD1U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0e:fe:84:5a:a9:f7:ba:38:52:7e:ab:49:af:40:4e:d6:26:01: 5e:25:e5:57:fc:2d:45:b1:8e:81:2d:09:11:c6:b4:0e:df:b4: 15:5c:53:3e:a8:fa:da:4c:74:a4:95:e7:56:17:c3:0f:1e:ab: a6:58:e7:b3:18:16:d7:d2:44:3d:59:7d:fc:98:be:9f:fd:fa: 26:99:c0:46:4b:cf:7f:c6:af:fb:28:fc:6e:aa:f0:9c:b3:6b: 64:2b:f4:7c:d1:c0:f8:88:c8:21:07:f5:a6:a9:0d:5f:1f:15: d3:cc:db:3d:c6:a6:d1:c8:b2:b6:85:7a:0d:d3:a3:e5:40:01: bc:be:ce:d8:71:b0:3f:65:cb:a3:03:8a:87:e7:ab:49:21:9e: 55:5a:b4:60:7c:40:68:c6:b9:a3:5a:58:21:06:8c:60:7e:3e: 7f:8a:c4:2b:34:b7:f4:d1:13:5c:86:0d:f8:4b:36:7f:40:f0: 40:f9:9c:5a:08:e4:38:ac:1f:24:71:84:7c:a7:5e:fd:26:b2: 31:12:21:0c:fa:27:e0:44:c4:90:c3:a1:5b:c7:2a:60:a0:96: e4:24:36:a1:77:12:dd:27:d4:d3:0d:29:9f:79:fb:6b:de:a9: be:6a:cc:66:d7:ac:48:96:2e:8d:66:44:60:4e:8a:f2:94:33: a0:e5:3d:db -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs11zMJ9nKx20xW0Rk4TXXtMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcwMGExMjMxZDFjMjdhNzU0ZTQ2ZWYxMGU5MmE3MzBhZTE1 ZDBmNTUwHhcNMjUxMjE5MDkwMDU0WhcNMjUxMjIwMDkwMDU0WjAzMTEwLwYDVQQD EyhlODg2YmU5NjI0NDRjMGQ4MDQ0NGY0OTRjNjg0Y2NmODYyOTk4MDJlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwDRntDcQh4Zs6CwyAf1Ipr/rpoA6 i6pVI0I2D3K3oKhEL3u6Z7Tstac/K9xGh/QD4eqFPRY8Wj50V2QTTc+m4aBwDSwM Hzk98aijuBICCJb7C+oZlc7QnylrJWpALETWa/BXCJtwm+gzGrc2+kq7AZupTVi8 8L9XUseLSYWQwQJoUBOiRhHeP/HKbk18tBJMIU+hvQClGu06kCJjoRcjxvmsbryu qmDDni5VPdJhHLHXBkjOQ84fkyj+hMCNAEXFmEkWPl5Dh8FVl60grZYudRqRSq61 Oeri3RvcX3PI9WtZj9i13GjsUc72wgTMikBwV5FbnsOkV1TTwVCD9+pw3QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOiGvpYkRMDYBET0lMaEzPhimYAuMB8GA1UdIwQY MBaAFHAKEjHRwnp1TkbvEOkqcwrhXQ9VMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY0FvU01kSENlblZPUnU4UTZTcHpDdUZkRDFVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMS9kY2MyYjQtOWRlZC00Njc4LTgzOTgt YWI3OWEzNzg5ZjhmLzEvY0FvU01kSENlblZPUnU4UTZTcHpDdUZkRDFVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMS9kY2MyYjQtOWRlZC00Njc4LTgzOTgtYWI3OWEzNzg5Zjhm LzEvY0FvU01kSENlblZPUnU4UTZTcHpDdUZkRDFVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADv6EWqn3 ujhSfqtJr0BO1iYBXiXlV/wtRbGOgS0JEca0Dt+0FVxTPqj62kx0pJXnVhfDDx6r pljnsxgW19JEPVl9/Ji+n/36JpnARkvPf8av+yj8bqrwnLNrZCv0fNHA+IjIIQf1 pqkNXx8V08zbPcam0ciytoV6DdOj5UABvL7O2HGwP2XLowOKh+erSSGeVVq0YHxA aMa5o1pYIQaMYH4+f4rEKzS39NETXIYN+Es2f0DwQPmcWgjkOKwfJHGEfKde/Say MRIhDPon4ETEkMOhW8cqYKCW5CQ2oXcS3SfU0w0pn3n7a96pvmrMZtesSJYujWZE YE6K8pQzoOU92w== -----END CERTIFICATE-----Generated at Fri Dec 19 18:50:51 2025 by rpki-client