This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/e6373c-53cd-4fd5-a435-d18bab9515bf/1/cS8iadFWM728cdjNP0WMvQP-Ax8.mft File: cS8iadFWM728cdjNP0WMvQP-Ax8.mft (raw, json) Hash identifier: ipqXovtLgW21psD9M+Z1u5jUf2n94Yth0VzSAFuzjWw= Subject key identifier: 5B:A6:EC:99:6C:C4:F7:90:36:2E:E7:40:8F:EB:61:82:AC:91:52:09 Authority key identifier: 71:2F:22:69:D1:56:33:BD:BC:71:D8:CD:3F:45:8C:BD:03:FE:03:1F Certificate issuer: /CN=712f2269d15633bdbc71d8cd3f458cbd03fe031f Certificate serial: 019B45EEBD13C89C63A9EFCFFB69F5E2E279 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cS8iadFWM728cdjNP0WMvQP-Ax8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/e6373c-53cd-4fd5-a435-d18bab9515bf/1/cS8iadFWM728cdjNP0WMvQP-Ax8.mft Manifest number: 0B39 Signing time: Mon 22 Dec 2025 12:00:32 +0000 Manifest this update: Mon 22 Dec 2025 12:00:32 +0000 Manifest next update: Tue 23 Dec 2025 12:00:32 +0000 Files and hashes: 1: 9BckWYd3Zpv7VuHw83B3GgbSq2c.roa (hash: 1ciDlQb2CZ1qp4TAdUK8jkR1eFPaY1eqjyHYTIjMv0Y=) 2: H1EL1U-GIPFFr0f1Q-aFy7Wb8e4.roa (hash: iqzV8mEdZbkZ5VJezg/UaqQeyUszupnBM56S/6XnGcM=) 3: J8a8mMzsBimsq6oHwHx5bIHWD4Y.roa (hash: 1VJlid4hfVo+Bv+c5fIKw8LhPKdHBzjl0S3JZl+3O5c=) 4: ZgwCc5_6MulL4iL_zC1XUNHyAbI.roa (hash: /jcVyr8eQJZjytkrqctvHq37ILkIvanUDZTLnrClopA=) 5: cS8iadFWM728cdjNP0WMvQP-Ax8.crl (hash: 5kkWfsODaMAr8Sb0GpfsjeUANsTL7wI5oE+hi9Qqhi4=) 6: m5c36cD4HEnvnKSFkdVs5FAdwfY.roa (hash: zDDIqdWDgnB3uWdjXBi6MQIDiaHOTeoGWkwt3yBBNJ4=) 7: u95K4fV2qtYCciDZ9UwzIFzAw5A.roa (hash: ayZrkho31pPxiVCGyzfE95bEFSC8qkDwrF+lSVt63SM=) 8: xpgO3ZCBY-qjN8oFsOWEPvUCvtE.roa (hash: +qRt4PQpWMMvJjygxcf9dSJhb+lYPMjbz4U/lEmLHfc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/e6373c-53cd-4fd5-a435-d18bab9515bf/1/cS8iadFWM728cdjNP0WMvQP-Ax8.crl rsync://rpki.ripe.net/repository/DEFAULT/c4/e6373c-53cd-4fd5-a435-d18bab9515bf/1/cS8iadFWM728cdjNP0WMvQP-Ax8.mft rsync://rpki.ripe.net/repository/DEFAULT/cS8iadFWM728cdjNP0WMvQP-Ax8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 10:00:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:45:ee:bd:13:c8:9c:63:a9:ef:cf:fb:69:f5:e2:e2:79 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=712f2269d15633bdbc71d8cd3f458cbd03fe031f Validity Not Before: Dec 22 12:00:32 2025 GMT Not After : Dec 23 12:00:32 2025 GMT Subject: CN=5ba6ec996cc4f790362ee7408feb6182ac915209 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:75:17:79:50:c5:7a:9f:6a:3d:8d:03:e7:40: a8:a4:04:5a:c5:6e:17:5d:f1:fd:56:cc:25:a0:aa: 65:65:d5:1a:3a:21:49:88:35:98:a0:27:55:89:0e: f7:74:cf:02:96:fc:71:ae:07:05:5a:27:e9:32:81: b3:4f:b5:dd:78:c0:eb:3c:45:40:c8:ff:5a:20:b7: dc:9f:cd:21:9a:23:4c:3d:4e:7c:81:c1:99:84:9f: ab:24:bc:ce:68:30:34:df:2f:e2:0f:58:fe:dd:4f: c2:19:0e:c7:d1:58:ad:fa:dc:cd:0c:c5:bc:bd:ec: 27:ff:5d:24:19:5a:6a:80:40:52:f7:ea:72:cb:2f: 97:ba:a7:0d:70:c7:d4:46:4e:e2:90:cb:7e:54:6c: d5:a1:45:85:99:33:ba:10:b7:4e:76:76:54:c3:64: ec:89:74:9c:79:73:75:a7:83:35:64:06:6f:bf:8e: fe:75:5c:97:fa:97:55:a4:86:03:fe:70:f2:be:1d: ab:a0:f9:cc:13:e4:be:f5:b4:55:89:41:d3:fa:5e: 30:34:9e:53:1f:82:36:ff:ad:66:f1:f1:0e:21:19: e9:65:f6:c5:0a:86:0e:04:3d:3e:c4:23:11:7d:e3: 2d:2a:b1:7c:a0:9f:a5:b7:de:dd:9b:53:b3:b3:41: 2e:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:A6:EC:99:6C:C4:F7:90:36:2E:E7:40:8F:EB:61:82:AC:91:52:09 X509v3 Authority Key Identifier: keyid:71:2F:22:69:D1:56:33:BD:BC:71:D8:CD:3F:45:8C:BD:03:FE:03:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cS8iadFWM728cdjNP0WMvQP-Ax8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/e6373c-53cd-4fd5-a435-d18bab9515bf/1/cS8iadFWM728cdjNP0WMvQP-Ax8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/e6373c-53cd-4fd5-a435-d18bab9515bf/1/cS8iadFWM728cdjNP0WMvQP-Ax8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 15:19:1d:23:04:16:df:1f:b7:e8:10:3a:af:5c:f1:f4:b0:e0: f5:97:dd:9f:d7:be:53:45:d1:e3:cb:40:f7:9f:e9:63:fb:f5: 82:31:c7:83:1e:d9:68:17:09:11:9a:9d:e6:46:7c:43:d1:55: f3:82:e8:74:28:64:e9:56:23:5e:bc:78:fa:44:0d:ad:d8:7b: af:2a:e2:2f:9e:f2:ec:47:d1:30:09:d0:14:22:c0:73:58:fb: 63:c3:a5:ac:b2:16:8f:33:b0:6d:2e:20:ea:1d:a8:87:a6:46: 3b:d0:af:36:a5:56:24:12:84:85:35:93:72:3c:c9:d5:c5:38: 71:53:c5:6d:5a:ca:ef:a6:14:8c:68:b6:df:df:3d:1a:61:8c: e6:5c:83:e9:b9:48:e6:11:00:c8:b3:71:32:9c:87:11:1b:4d: a9:e2:43:f7:d9:02:a8:bf:86:ec:cd:a2:cc:10:62:54:a2:78: e0:9d:39:17:32:15:2c:a0:67:13:0e:2c:8b:f2:8e:48:b0:c9: 87:e3:4e:54:a6:de:b4:02:15:17:fe:1d:7e:da:07:54:53:6f: 12:6f:1a:f5:01:e3:51:a7:5c:c7:d9:73:3c:ec:53:e1:5d:a0: 34:87:86:85:a8:58:4a:d8:53:d5:ee:5f:bc:f1:db:d9:9d:3e: 81:d3:3d:44 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtF7r0TyJxjqe/P+2n14uJ5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcxMmYyMjY5ZDE1NjMzYmRiYzcxZDhjZDNmNDU4Y2JkMDNm ZTAzMWYwHhcNMjUxMjIyMTIwMDMyWhcNMjUxMjIzMTIwMDMyWjAzMTEwLwYDVQQD Eyg1YmE2ZWM5OTZjYzRmNzkwMzYyZWU3NDA4ZmViNjE4MmFjOTE1MjA5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn3UXeVDFep9qPY0D50CopARaxW4X XfH9VswloKplZdUaOiFJiDWYoCdViQ73dM8ClvxxrgcFWifpMoGzT7XdeMDrPEVA yP9aILfcn80hmiNMPU58gcGZhJ+rJLzOaDA03y/iD1j+3U/CGQ7H0Vit+tzNDMW8 vewn/10kGVpqgEBS9+pyyy+XuqcNcMfURk7ikMt+VGzVoUWFmTO6ELdOdnZUw2Ts iXSceXN1p4M1ZAZvv47+dVyX+pdVpIYD/nDyvh2roPnME+S+9bRViUHT+l4wNJ5T H4I2/61m8fEOIRnpZfbFCoYOBD0+xCMRfeMtKrF8oJ+lt97dm1Ozs0Eu1wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFum7JlsxPeQNi7nQI/rYYKskVIJMB8GA1UdIwQY MBaAFHEvImnRVjO9vHHYzT9FjL0D/gMfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY1M4aWFkRldNNzI4Y2RqTlAwV012UVAtQXg4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNC9lNjM3M2MtNTNjZC00ZmQ1LWE0MzUt ZDE4YmFiOTUxNWJmLzEvY1M4aWFkRldNNzI4Y2RqTlAwV012UVAtQXg4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNC9lNjM3M2MtNTNjZC00ZmQ1LWE0MzUtZDE4YmFiOTUxNWJm LzEvY1M4aWFkRldNNzI4Y2RqTlAwV012UVAtQXg4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFRkdIwQW 3x+36BA6r1zx9LDg9Zfdn9e+U0XR48tA95/pY/v1gjHHgx7ZaBcJEZqd5kZ8Q9FV 84LodChk6VYjXrx4+kQNrdh7ryriL57y7EfRMAnQFCLAc1j7Y8OlrLIWjzOwbS4g 6h2oh6ZGO9CvNqVWJBKEhTWTcjzJ1cU4cVPFbVrK76YUjGi23989GmGM5lyD6blI 5hEAyLNxMpyHERtNqeJD99kCqL+G7M2izBBiVKJ44J05FzIVLKBnEw4si/KOSLDJ h+NOVKbetAIVF/4dftoHVFNvEm8a9QHjUadcx9lzPOxT4V2gNIeGhahYSthT1e5f vPHb2Z0+gdM9RA== -----END CERTIFICATE-----Generated at Mon Dec 22 13:32:38 2025 by rpki-client