This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/014f47-628b-4fb8-b344-a409e22a243e/1/cKdpKcviHO3ZTAErpYuwtvEpci4.mft File: cKdpKcviHO3ZTAErpYuwtvEpci4.mft (raw, json) Hash identifier: O6BhwbKBM0Hvmrx3B9+FHv35AIqefLXJMKAU6pQr+W8= Subject key identifier: 97:27:47:FA:CB:D1:85:6A:34:6B:03:C6:0C:5F:B2:0B:5A:B9:4A:B2 Authority key identifier: 70:A7:69:29:CB:E2:1C:ED:D9:4C:01:2B:A5:8B:B0:B6:F1:29:72:2E Certificate issuer: /CN=70a76929cbe21cedd94c012ba58bb0b6f129722e Certificate serial: 019B1C85E290817D10A742D9293B6E4B4A55 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cKdpKcviHO3ZTAErpYuwtvEpci4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/014f47-628b-4fb8-b344-a409e22a243e/1/cKdpKcviHO3ZTAErpYuwtvEpci4.mft Manifest number: 1776 Signing time: Sun 14 Dec 2025 11:01:34 +0000 Manifest this update: Sun 14 Dec 2025 11:01:34 +0000 Manifest next update: Mon 15 Dec 2025 11:01:34 +0000 Files and hashes: 1: cKdpKcviHO3ZTAErpYuwtvEpci4.crl (hash: S6x/WMoOYgIllW9IQznoFH6gDVzlfvJ6oHkm4VzPL4c=) 2: inuScwE1S9lEULUDFOPt0YYBMRU.roa (hash: hvD+jjYBAY5jZaJA8u8QgEl8M7kubkCEj9ntL0iNAX4=) 3: jP0oG4-lTwdPgvwQsai3xzsKBUA.roa (hash: cwxrU32A7FjEaD6Xb0+naWkVMI0iVDnV1C3ohgsG2Sc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/014f47-628b-4fb8-b344-a409e22a243e/1/cKdpKcviHO3ZTAErpYuwtvEpci4.crl rsync://rpki.ripe.net/repository/DEFAULT/c0/014f47-628b-4fb8-b344-a409e22a243e/1/cKdpKcviHO3ZTAErpYuwtvEpci4.mft rsync://rpki.ripe.net/repository/DEFAULT/cKdpKcviHO3ZTAErpYuwtvEpci4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 15 Dec 2025 11:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:1c:85:e2:90:81:7d:10:a7:42:d9:29:3b:6e:4b:4a:55 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=70a76929cbe21cedd94c012ba58bb0b6f129722e Validity Not Before: Dec 14 11:01:34 2025 GMT Not After : Dec 15 11:01:34 2025 GMT Subject: CN=972747facbd1856a346b03c60c5fb20b5ab94ab2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:ff:d0:f1:15:e7:03:c4:a9:0c:3d:d2:5d:15: b7:96:c7:31:de:8b:67:f8:90:47:d9:33:b0:c0:d6: 22:61:8c:61:f7:7f:0e:6d:57:a6:9f:70:02:b8:70: 5a:dc:d9:ba:21:53:40:cb:32:d5:3d:34:ab:e3:6f: bb:ca:7e:c4:9b:8f:be:41:81:fb:f6:49:7c:3f:fa: 23:eb:80:e8:3a:32:8b:3f:b6:1e:99:4f:04:c5:5d: 33:93:9f:7b:c1:01:f5:f0:21:80:67:5a:2f:a6:eb: 13:41:b4:91:c3:e3:38:c0:c0:6a:ea:ab:1d:ce:b0: 7a:30:d8:b0:d1:9c:89:2e:e0:3c:f1:94:88:c2:4c: 6e:ca:aa:0a:db:1c:cc:c1:a7:73:47:85:9a:a5:3f: ec:22:6c:25:28:a4:ab:bb:4c:9a:33:7a:86:e5:60: 72:4e:ea:52:41:bf:0b:27:ec:37:86:1b:d2:db:40: 6d:9c:0d:b3:c3:66:3c:8f:22:da:c9:48:b3:28:71: 6f:36:9a:6c:2e:7b:56:34:4d:fc:ab:ee:a0:7d:6e: dd:87:f6:2e:60:85:66:4c:24:f5:e3:2e:fc:c8:9f: cb:98:9f:74:09:43:e9:d0:17:05:ae:b7:40:d8:1e: 9a:c4:f5:77:c3:30:73:96:ba:33:fb:54:47:97:c5: 9a:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:27:47:FA:CB:D1:85:6A:34:6B:03:C6:0C:5F:B2:0B:5A:B9:4A:B2 X509v3 Authority Key Identifier: keyid:70:A7:69:29:CB:E2:1C:ED:D9:4C:01:2B:A5:8B:B0:B6:F1:29:72:2E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cKdpKcviHO3ZTAErpYuwtvEpci4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/014f47-628b-4fb8-b344-a409e22a243e/1/cKdpKcviHO3ZTAErpYuwtvEpci4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/014f47-628b-4fb8-b344-a409e22a243e/1/cKdpKcviHO3ZTAErpYuwtvEpci4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a9:1e:c3:5b:9f:92:3f:49:30:3d:80:07:de:f2:f8:3c:ae:bf: aa:7f:fe:22:20:e6:7c:ed:67:21:1d:0a:49:55:cb:29:ca:02: 0b:14:f5:90:be:d6:7b:61:45:c2:b1:d2:23:1b:1b:24:d2:9b: c8:b4:90:2d:e9:37:39:ab:14:60:ae:d8:cb:9c:65:3a:cc:86: 48:f1:75:03:e6:27:49:d9:72:5f:d9:34:6f:3c:9f:d9:f9:af: a9:e0:30:df:f5:94:c3:7c:8a:af:ed:05:94:3d:3c:d0:26:7e: db:3f:e9:a3:fe:c5:e3:5d:bf:63:4d:4e:f9:36:57:fe:bc:6d: ef:cc:ac:0e:a7:84:07:56:1f:6d:f1:f6:6b:5a:77:9b:85:a6: c2:4b:42:12:44:a1:17:f5:2f:eb:b5:99:85:33:4a:a8:bc:1c: 07:11:db:57:44:7a:04:62:83:29:8e:bb:04:10:78:92:78:61: b8:f2:d2:e6:54:3f:3a:d4:98:a3:86:3f:38:ba:3c:d8:34:b4: 06:57:02:29:a6:93:e8:41:44:f8:18:54:8c:65:43:0b:ac:ca: f2:ab:6a:1b:84:2f:51:97:cf:e6:03:b2:db:0f:45:00:f6:b8: c8:78:ad:48:a9:8a:ef:bd:94:05:74:96:8e:9e:3e:f0:65:cb: 76:f9:cc:ac -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZscheKQgX0Qp0LZKTtuS0pVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcwYTc2OTI5Y2JlMjFjZWRkOTRjMDEyYmE1OGJiMGI2ZjEy OTcyMmUwHhcNMjUxMjE0MTEwMTM0WhcNMjUxMjE1MTEwMTM0WjAzMTEwLwYDVQQD Eyg5NzI3NDdmYWNiZDE4NTZhMzQ2YjAzYzYwYzVmYjIwYjVhYjk0YWIyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv//Q8RXnA8SpDD3SXRW3lscx3otn +JBH2TOwwNYiYYxh938ObVemn3ACuHBa3Nm6IVNAyzLVPTSr42+7yn7Em4++QYH7 9kl8P/oj64DoOjKLP7YemU8ExV0zk597wQH18CGAZ1ovpusTQbSRw+M4wMBq6qsd zrB6MNiw0ZyJLuA88ZSIwkxuyqoK2xzMwadzR4WapT/sImwlKKSru0yaM3qG5WBy TupSQb8LJ+w3hhvS20BtnA2zw2Y8jyLayUizKHFvNppsLntWNE38q+6gfW7dh/Yu YIVmTCT14y78yJ/LmJ90CUPp0BcFrrdA2B6axPV3wzBzlroz+1RHl8Wa2QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJcnR/rL0YVqNGsDxgxfsgtauUqyMB8GA1UdIwQY MBaAFHCnaSnL4hzt2UwBK6WLsLbxKXIuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY0tkcEtjdmlITzNaVEFFcnBZdXd0dkVwY2k0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC8wMTRmNDctNjI4Yi00ZmI4LWIzNDQt YTQwOWUyMmEyNDNlLzEvY0tkcEtjdmlITzNaVEFFcnBZdXd0dkVwY2k0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMC8wMTRmNDctNjI4Yi00ZmI4LWIzNDQtYTQwOWUyMmEyNDNl LzEvY0tkcEtjdmlITzNaVEFFcnBZdXd0dkVwY2k0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqR7DW5+S P0kwPYAH3vL4PK6/qn/+IiDmfO1nIR0KSVXLKcoCCxT1kL7We2FFwrHSIxsbJNKb yLSQLek3OasUYK7Yy5xlOsyGSPF1A+YnSdlyX9k0bzyf2fmvqeAw3/WUw3yKr+0F lD080CZ+2z/po/7F412/Y01O+TZX/rxt78ysDqeEB1YfbfH2a1p3m4WmwktCEkSh F/Uv67WZhTNKqLwcBxHbV0R6BGKDKY67BBB4knhhuPLS5lQ/OtSYo4Y/OLo82DS0 BlcCKaaT6EFE+BhUjGVDC6zK8qtqG4QvUZfP5gOy2w9FAPa4yHitSKmK772UBXSW jp4+8GXLdvnMrA== -----END CERTIFICATE-----Generated at Sun Dec 14 19:33:07 2025 by rpki-client