This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/d56c11-25e1-49c8-8863-7f37b778c011/1/cJgLYODTDkmN4bqmRaG-V6lSBJ0.mft File: cJgLYODTDkmN4bqmRaG-V6lSBJ0.mft (raw, json) Hash identifier: E7dwGc0kZU0lEZo+aYTATo1ya271vsY5xOQzKsrxQCs= Subject key identifier: 14:48:18:60:6C:ED:A5:C8:AA:4E:96:F4:10:B7:BE:28:C7:2A:EB:1A Authority key identifier: 70:98:0B:60:E0:D3:0E:49:8D:E1:BA:A6:45:A1:BE:57:A9:52:04:9D Certificate issuer: /CN=70980b60e0d30e498de1baa645a1be57a952049d Certificate serial: 019B3A90D1CD429BEF91DA174BF00343E794 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cJgLYODTDkmN4bqmRaG-V6lSBJ0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/d56c11-25e1-49c8-8863-7f37b778c011/1/cJgLYODTDkmN4bqmRaG-V6lSBJ0.mft Manifest number: 0ACA Signing time: Sat 20 Dec 2025 07:02:07 +0000 Manifest this update: Sat 20 Dec 2025 07:02:07 +0000 Manifest next update: Sun 21 Dec 2025 07:02:07 +0000 Files and hashes: 1: NOXjVjJhFkrwhntmdhaI015mrJA.roa (hash: 0zhl6bNJIqtyw3r+CngdcF4zpHGL2Q4MHDezzg25GbA=) 2: T3NYMawRHngwhI3EFd9dMZQSV1E.roa (hash: f99KOEwXdj6H3ZJRNRBeTA3dMK19zszZZ6xzWHN3tPk=) 3: cJgLYODTDkmN4bqmRaG-V6lSBJ0.crl (hash: Nc6o/jxevBCSejRoV8yBq8ugPjB2ObSG6fDJa6DDrcU=) 4: o1Invfm5a-IuNysIWHt4ChcWwgI.roa (hash: gMX4tPW+RL6Xt4ksxgpRLp72pxNXeej67eQtVQ5iB/g=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/d56c11-25e1-49c8-8863-7f37b778c011/1/cJgLYODTDkmN4bqmRaG-V6lSBJ0.crl rsync://rpki.ripe.net/repository/DEFAULT/b4/d56c11-25e1-49c8-8863-7f37b778c011/1/cJgLYODTDkmN4bqmRaG-V6lSBJ0.mft rsync://rpki.ripe.net/repository/DEFAULT/cJgLYODTDkmN4bqmRaG-V6lSBJ0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3a:90:d1:cd:42:9b:ef:91:da:17:4b:f0:03:43:e7:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=70980b60e0d30e498de1baa645a1be57a952049d Validity Not Before: Dec 20 07:02:07 2025 GMT Not After : Dec 21 07:02:07 2025 GMT Subject: CN=144818606ceda5c8aa4e96f410b7be28c72aeb1a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:c5:48:de:6e:31:1c:bb:4d:1d:83:ed:4f:62: f0:dc:b7:1c:c9:7a:d9:0c:fc:49:77:82:0b:09:e0: e1:9f:9a:d6:0b:4f:1d:59:7a:96:24:ae:ec:08:66: 0c:51:ec:6d:1b:dd:84:70:ee:f6:4a:03:9c:2a:36: fe:06:6e:6e:70:90:85:2a:6f:11:90:05:17:88:4d: 51:16:78:53:8d:38:a8:e3:36:99:fd:fc:88:09:93: e6:4a:45:db:13:70:cc:8e:89:8e:21:d0:41:5d:e6: a0:04:3a:0d:65:8a:0d:94:11:65:7b:6a:fd:49:1d: c6:8d:86:ac:c3:ae:0a:26:99:d1:8c:47:04:b6:97: 0a:29:15:77:4d:a9:6f:d2:e4:8f:74:79:0c:52:4e: d1:65:3a:f4:31:8e:d1:eb:3c:e2:1b:aa:a3:13:d4: 01:9e:52:db:24:41:b5:f0:c8:6c:c6:59:00:6d:c3: 4f:e0:56:0a:2c:4a:e9:dc:80:cc:58:70:5e:17:34: 9c:19:b6:80:9d:6f:84:34:65:40:13:b0:6f:63:35: 84:47:a4:d4:4c:cb:2b:27:6a:5c:3c:76:92:2a:c1: 84:f0:32:87:f1:08:aa:96:62:35:77:74:f6:a5:61: 4f:c2:41:31:97:48:f2:b6:4f:4e:19:39:f0:10:71: 12:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:48:18:60:6C:ED:A5:C8:AA:4E:96:F4:10:B7:BE:28:C7:2A:EB:1A X509v3 Authority Key Identifier: keyid:70:98:0B:60:E0:D3:0E:49:8D:E1:BA:A6:45:A1:BE:57:A9:52:04:9D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cJgLYODTDkmN4bqmRaG-V6lSBJ0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/d56c11-25e1-49c8-8863-7f37b778c011/1/cJgLYODTDkmN4bqmRaG-V6lSBJ0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/d56c11-25e1-49c8-8863-7f37b778c011/1/cJgLYODTDkmN4bqmRaG-V6lSBJ0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a2:93:09:a7:31:ed:d2:f7:4a:a3:f4:df:f8:fd:3e:1f:4b:56: dc:45:a9:e2:39:b4:1a:a6:79:78:44:b0:07:b6:72:a6:f7:27: 6d:c9:d8:32:1f:e0:d8:c1:d8:c1:92:3f:ba:35:80:65:ac:31: bb:df:29:97:c9:2a:ea:12:59:7c:2a:d8:32:cb:c6:7a:cf:6a: b6:33:0e:de:2a:d8:55:cc:cf:f1:b3:0f:9b:9a:41:71:3e:31: b1:c4:c7:46:90:e1:c6:49:1a:56:9c:2d:34:bf:d5:ab:06:99: f7:1e:94:7a:8c:83:d7:a0:0b:f6:ff:ba:ab:30:a0:2e:78:8c: b3:3e:62:6f:60:cf:2f:0c:41:fb:ef:c8:be:2d:bc:f3:c8:09: 39:02:72:75:a3:9c:83:47:5d:fa:03:94:27:06:ff:90:cb:d5: ff:f9:b9:8d:71:d2:33:9e:ac:6d:e6:40:cf:8a:ee:c3:cc:28: 27:c1:b1:9c:f2:01:b4:4a:72:73:ed:75:ee:61:a2:8a:78:ff: 9f:e8:fa:50:64:f4:b3:db:68:1d:99:7f:6a:a0:3c:9c:1c:d2: c7:f5:1c:81:ed:c0:4e:7c:6e:0e:9e:72:27:cf:10:fd:5e:c2: 73:25:1d:da:ef:e0:58:59:d1:f8:9a:f4:6c:6b:4a:bf:2b:8b: e6:b5:5b:dc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs6kNHNQpvvkdoXS/ADQ+eUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcwOTgwYjYwZTBkMzBlNDk4ZGUxYmFhNjQ1YTFiZTU3YTk1 MjA0OWQwHhcNMjUxMjIwMDcwMjA3WhcNMjUxMjIxMDcwMjA3WjAzMTEwLwYDVQQD EygxNDQ4MTg2MDZjZWRhNWM4YWE0ZTk2ZjQxMGI3YmUyOGM3MmFlYjFhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmcVI3m4xHLtNHYPtT2Lw3LccyXrZ DPxJd4ILCeDhn5rWC08dWXqWJK7sCGYMUextG92EcO72SgOcKjb+Bm5ucJCFKm8R kAUXiE1RFnhTjTio4zaZ/fyICZPmSkXbE3DMjomOIdBBXeagBDoNZYoNlBFle2r9 SR3GjYasw64KJpnRjEcEtpcKKRV3Talv0uSPdHkMUk7RZTr0MY7R6zziG6qjE9QB nlLbJEG18MhsxlkAbcNP4FYKLErp3IDMWHBeFzScGbaAnW+ENGVAE7BvYzWER6TU TMsrJ2pcPHaSKsGE8DKH8QiqlmI1d3T2pWFPwkExl0jytk9OGTnwEHES0wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBRIGGBs7aXIqk6W9BC3vijHKusaMB8GA1UdIwQY MBaAFHCYC2Dg0w5JjeG6pkWhvlepUgSdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY0pnTFlPRFREa21ONGJxbVJhRy1WNmxTQkowLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNC9kNTZjMTEtMjVlMS00OWM4LTg4NjMt N2YzN2I3NzhjMDExLzEvY0pnTFlPRFREa21ONGJxbVJhRy1WNmxTQkowLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNC9kNTZjMTEtMjVlMS00OWM4LTg4NjMtN2YzN2I3NzhjMDEx LzEvY0pnTFlPRFREa21ONGJxbVJhRy1WNmxTQkowLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAopMJpzHt 0vdKo/Tf+P0+H0tW3EWp4jm0GqZ5eESwB7ZypvcnbcnYMh/g2MHYwZI/ujWAZawx u98pl8kq6hJZfCrYMsvGes9qtjMO3irYVczP8bMPm5pBcT4xscTHRpDhxkkaVpwt NL/VqwaZ9x6UeoyD16AL9v+6qzCgLniMsz5ib2DPLwxB++/Ivi2888gJOQJydaOc g0dd+gOUJwb/kMvV//m5jXHSM56sbeZAz4ruw8woJ8GxnPIBtEpyc+117mGiinj/ n+j6UGT0s9toHZl/aqA8nBzSx/Ucge3ATnxuDp5yJ88Q/V7CcyUd2u/gWFnR+Jr0 bGtKvyuL5rVb3A== -----END CERTIFICATE-----Generated at Sat Dec 20 08:54:58 2025 by rpki-client