This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/2bbd21-d147-4c78-8d2e-a209b90f27d9/1/ctdCYWpoBB9_D80HkvOOQQOnncI.mft File: ctdCYWpoBB9_D80HkvOOQQOnncI.mft (raw, json) Hash identifier: GQMY210XtGxI1hGj5fIzlCYg9AdyNv12Ca2ld9m1R5Y= Subject key identifier: FF:9E:7B:F6:87:30:51:44:DA:8B:63:95:5E:B6:49:DB:9E:73:06:17 Authority key identifier: 72:D7:42:61:6A:68:04:1F:7F:0F:CD:07:92:F3:8E:41:03:A7:9D:C2 Certificate issuer: /CN=72d742616a68041f7f0fcd0792f38e4103a79dc2 Certificate serial: 019B59E435B8F411CD03E03270412EC1E1B0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ctdCYWpoBB9_D80HkvOOQQOnncI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/2bbd21-d147-4c78-8d2e-a209b90f27d9/1/ctdCYWpoBB9_D80HkvOOQQOnncI.mft Manifest number: 046A Signing time: Fri 26 Dec 2025 09:01:26 +0000 Manifest this update: Fri 26 Dec 2025 09:01:26 +0000 Manifest next update: Sat 27 Dec 2025 09:01:26 +0000 Files and hashes: 1: ctdCYWpoBB9_D80HkvOOQQOnncI.crl (hash: +hcJ043zmrk2bLvgjOLGQwMnG4c1Q9gVPRmMcXBNwZo=) 2: zto4NeQB1_I3QORAJXQ-oNO5db0.roa (hash: 4X/MAtxcgqfp8hiwe6Iai+qfAWiiXuU0LC7+GPHFtZ0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/2bbd21-d147-4c78-8d2e-a209b90f27d9/1/ctdCYWpoBB9_D80HkvOOQQOnncI.crl rsync://rpki.ripe.net/repository/DEFAULT/a8/2bbd21-d147-4c78-8d2e-a209b90f27d9/1/ctdCYWpoBB9_D80HkvOOQQOnncI.mft rsync://rpki.ripe.net/repository/DEFAULT/ctdCYWpoBB9_D80HkvOOQQOnncI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:e4:35:b8:f4:11:cd:03:e0:32:70:41:2e:c1:e1:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=72d742616a68041f7f0fcd0792f38e4103a79dc2 Validity Not Before: Dec 26 09:01:26 2025 GMT Not After : Dec 27 09:01:26 2025 GMT Subject: CN=ff9e7bf687305144da8b63955eb649db9e730617 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:a7:54:2c:a7:57:cb:0f:5b:19:eb:4c:1b:2b: 55:21:26:17:92:64:e4:77:6f:01:c5:26:4c:12:69: 49:e9:bd:3b:a1:75:6c:f2:00:5a:e9:2a:51:0e:3b: 9e:49:bb:7d:d9:d2:ca:53:6d:82:35:3f:9f:ac:9d: 18:2e:76:fe:fa:8f:8e:e8:6f:76:40:37:e8:80:86: 8e:46:b3:4e:f5:0f:48:12:fa:81:24:2b:32:06:dd: 61:f2:52:cc:f5:e9:e1:7f:34:29:85:e0:fe:09:00: 50:9d:d9:1e:d2:21:63:5e:cd:d1:fc:29:96:b0:9f: 74:74:3a:0d:e8:ad:4b:24:fd:36:90:4a:a9:65:5c: 29:5d:7c:b1:35:1a:29:08:18:0b:d1:98:ee:2d:fb: 65:56:f7:d1:7e:db:ef:2a:26:2c:4d:be:fb:a7:3f: 9d:b4:10:b4:f3:ce:bc:f0:ca:3e:61:12:be:1a:9d: a8:ea:5b:8d:b2:58:36:b0:ac:e9:2b:5a:f2:e1:41: 60:ba:78:e0:51:97:73:f1:a2:b1:a3:b8:4a:06:4a: 81:3c:af:66:01:88:90:cc:b5:84:50:a1:da:12:1d: f0:e2:19:b7:4b:f3:4c:e4:4c:06:1d:ae:cf:14:dc: fe:09:6c:bb:e5:84:3e:9c:43:64:1a:7b:e1:80:c4: 2b:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:9E:7B:F6:87:30:51:44:DA:8B:63:95:5E:B6:49:DB:9E:73:06:17 X509v3 Authority Key Identifier: keyid:72:D7:42:61:6A:68:04:1F:7F:0F:CD:07:92:F3:8E:41:03:A7:9D:C2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ctdCYWpoBB9_D80HkvOOQQOnncI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/2bbd21-d147-4c78-8d2e-a209b90f27d9/1/ctdCYWpoBB9_D80HkvOOQQOnncI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/2bbd21-d147-4c78-8d2e-a209b90f27d9/1/ctdCYWpoBB9_D80HkvOOQQOnncI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2f:90:9d:69:67:db:20:10:3b:a3:0a:ee:3f:52:20:1f:96:fb: 31:cf:06:fc:39:47:12:f2:30:94:bd:c7:e4:4e:5c:b4:81:35: c3:b0:b5:56:8a:70:ca:33:6d:e7:65:46:da:68:e7:9c:ee:4e: f8:e2:6d:52:74:9a:70:5e:1a:33:fb:07:ba:1f:b0:94:c1:33: 6a:2a:f0:88:50:ac:f7:8d:e6:06:5e:dd:c3:2a:51:cf:67:56: 3e:c1:00:45:41:d0:3c:fb:38:99:2a:a4:d8:db:d1:a6:97:7f: 53:3e:a8:b7:30:53:07:09:a5:c8:de:7c:a1:0a:f6:c2:15:04: f2:d0:65:69:5d:9e:07:f4:8c:19:1a:0e:72:97:a1:c7:c3:e3: 70:ee:a3:8b:63:24:1e:71:a0:6d:2a:67:b8:3d:bb:59:9f:1c: 72:c0:1b:d8:3c:ed:18:26:b8:9c:5d:54:9d:07:d6:38:62:7b: 48:86:95:96:cf:f7:9f:2f:a0:0c:3f:18:0a:85:6f:07:5f:03: cb:c8:2f:dd:3c:9a:3e:c3:bc:5c:26:fc:22:f5:31:59:d4:aa: f6:a5:49:08:40:3c:5e:b3:57:ae:59:99:f6:44:2c:ac:c7:ac: f6:c8:1f:58:54:87:a6:96:aa:e4:d5:e8:30:6b:34:b7:b1:d3: b7:43:a8:e4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtZ5DW49BHNA+AycEEuweGwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcyZDc0MjYxNmE2ODA0MWY3ZjBmY2QwNzkyZjM4ZTQxMDNh NzlkYzIwHhcNMjUxMjI2MDkwMTI2WhcNMjUxMjI3MDkwMTI2WjAzMTEwLwYDVQQD EyhmZjllN2JmNjg3MzA1MTQ0ZGE4YjYzOTU1ZWI2NDlkYjllNzMwNjE3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqqdULKdXyw9bGetMGytVISYXkmTk d28BxSZMEmlJ6b07oXVs8gBa6SpRDjueSbt92dLKU22CNT+frJ0YLnb++o+O6G92 QDfogIaORrNO9Q9IEvqBJCsyBt1h8lLM9enhfzQpheD+CQBQndke0iFjXs3R/CmW sJ90dDoN6K1LJP02kEqpZVwpXXyxNRopCBgL0ZjuLftlVvfRftvvKiYsTb77pz+d tBC088688Mo+YRK+Gp2o6luNslg2sKzpK1ry4UFgunjgUZdz8aKxo7hKBkqBPK9m AYiQzLWEUKHaEh3w4hm3S/NM5EwGHa7PFNz+CWy75YQ+nENkGnvhgMQrcwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFP+ee/aHMFFE2otjlV62SduecwYXMB8GA1UdIwQY MBaAFHLXQmFqaAQffw/NB5LzjkEDp53CMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY3RkQ1lXcG9CQjlfRDgwSGt2T09RUU9ubmNJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOC8yYmJkMjEtZDE0Ny00Yzc4LThkMmUt YTIwOWI5MGYyN2Q5LzEvY3RkQ1lXcG9CQjlfRDgwSGt2T09RUU9ubmNJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hOC8yYmJkMjEtZDE0Ny00Yzc4LThkMmUtYTIwOWI5MGYyN2Q5 LzEvY3RkQ1lXcG9CQjlfRDgwSGt2T09RUU9ubmNJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAL5CdaWfb IBA7owruP1IgH5b7Mc8G/DlHEvIwlL3H5E5ctIE1w7C1VopwyjNt52VG2mjnnO5O +OJtUnSacF4aM/sHuh+wlMEzairwiFCs943mBl7dwypRz2dWPsEARUHQPPs4mSqk 2NvRppd/Uz6otzBTBwmlyN58oQr2whUE8tBlaV2eB/SMGRoOcpehx8PjcO6ji2Mk HnGgbSpnuD27WZ8ccsAb2DztGCa4nF1UnQfWOGJ7SIaVls/3ny+gDD8YCoVvB18D y8gv3TyaPsO8XCb8IvUxWdSq9qVJCEA8XrNXrlmZ9kQsrMes9sgfWFSHppaq5NXo MGs0t7HTt0Oo5A== -----END CERTIFICATE-----Generated at Fri Dec 26 14:17:00 2025 by rpki-client