This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/b1083d-c078-415e-8d9d-576337e50dc4/1/cPTWBuHReQgGOXe2mHdoLtfi0e8.mft File: cPTWBuHReQgGOXe2mHdoLtfi0e8.mft (raw, json) Hash identifier: 8hMB8GPbWvO04qQoNsaM7XnOiekSWcxLUp94SFoCHmk= Subject key identifier: 30:FC:B0:50:52:72:19:62:25:F2:0C:7C:10:A4:20:91:6B:7B:2C:C1 Authority key identifier: 70:F4:D6:06:E1:D1:79:08:06:39:77:B6:98:77:68:2E:D7:E2:D1:EF Certificate issuer: /CN=70f4d606e1d17908063977b69877682ed7e2d1ef Certificate serial: 019B2250ADC58C590CE44D658543709D847C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cPTWBuHReQgGOXe2mHdoLtfi0e8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/b1083d-c078-415e-8d9d-576337e50dc4/1/cPTWBuHReQgGOXe2mHdoLtfi0e8.mft Manifest number: 0473 Signing time: Mon 15 Dec 2025 14:01:11 +0000 Manifest this update: Mon 15 Dec 2025 14:01:11 +0000 Manifest next update: Tue 16 Dec 2025 14:01:11 +0000 Files and hashes: 1: Ou9DEYWo3su4Hpz7mWRAUY0_xHI.roa (hash: 8FTp4AmQ8yrNnOSj2Y/1nrH6lz6jMuxxvh24QGuNmXY=) 2: cPTWBuHReQgGOXe2mHdoLtfi0e8.crl (hash: 8Wok2UP9y0voLLoil+ckB80ni+khxi3wYInS4KkifdI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/b1083d-c078-415e-8d9d-576337e50dc4/1/cPTWBuHReQgGOXe2mHdoLtfi0e8.crl rsync://rpki.ripe.net/repository/DEFAULT/c8/b1083d-c078-415e-8d9d-576337e50dc4/1/cPTWBuHReQgGOXe2mHdoLtfi0e8.mft rsync://rpki.ripe.net/repository/DEFAULT/cPTWBuHReQgGOXe2mHdoLtfi0e8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 14:01:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:22:50:ad:c5:8c:59:0c:e4:4d:65:85:43:70:9d:84:7c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=70f4d606e1d17908063977b69877682ed7e2d1ef Validity Not Before: Dec 15 14:01:11 2025 GMT Not After : Dec 16 14:01:11 2025 GMT Subject: CN=30fcb0505272196225f20c7c10a420916b7b2cc1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:19:7c:8d:20:a3:71:21:40:bc:22:30:24:b2: 25:cc:d4:1e:b8:17:ca:0e:78:f5:0f:e3:de:e2:80: 72:db:b5:0d:18:9b:21:67:15:8e:36:ec:b1:05:36: 79:c7:2f:07:6a:55:0c:07:55:73:66:aa:5b:42:ae: 5f:e5:08:49:7c:e1:a5:d4:8b:59:c0:9f:86:77:5f: c9:69:9c:a9:19:7b:ea:ce:fd:e1:08:5e:be:5d:63: d8:c2:dd:d5:3c:c8:d7:37:6b:a5:4f:4e:34:63:9b: b0:3f:ad:93:fa:66:a0:35:83:be:6a:4b:dd:92:b9: ec:5e:ab:a1:99:97:6f:98:b7:bb:d3:18:ff:c9:1b: e2:06:fc:2e:86:30:87:ba:e0:03:a1:2e:3b:72:e8: 2b:85:c8:16:cf:7f:25:9d:be:4d:ec:a2:b5:d8:bf: 7c:f6:d1:82:59:73:83:bf:15:da:9d:bf:d8:ca:6e: e1:d3:c6:29:5a:f5:2c:20:51:e4:f5:b9:53:64:8a: d3:c6:48:22:b2:20:42:cd:46:1e:3c:50:e5:d3:2b: 6f:28:b8:c6:66:c2:51:0b:12:96:d1:bb:37:54:8f: fd:bd:0d:e5:f7:c3:48:80:f2:e9:78:8d:c1:34:00: ba:12:a1:8f:29:8e:8c:a0:73:d9:42:0e:49:9c:80: 8c:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:FC:B0:50:52:72:19:62:25:F2:0C:7C:10:A4:20:91:6B:7B:2C:C1 X509v3 Authority Key Identifier: keyid:70:F4:D6:06:E1:D1:79:08:06:39:77:B6:98:77:68:2E:D7:E2:D1:EF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cPTWBuHReQgGOXe2mHdoLtfi0e8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/b1083d-c078-415e-8d9d-576337e50dc4/1/cPTWBuHReQgGOXe2mHdoLtfi0e8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/b1083d-c078-415e-8d9d-576337e50dc4/1/cPTWBuHReQgGOXe2mHdoLtfi0e8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c0:7a:69:59:23:82:5f:63:36:77:c1:7a:45:0c:9f:60:fb:b4: 63:2e:86:47:e2:80:50:4e:e6:04:8a:da:01:52:a4:b3:e6:3c: 20:d1:40:0c:b4:b4:bc:8b:15:cf:5d:d2:c4:10:92:66:fa:71: 51:5f:7e:35:e1:a6:1e:e4:3f:63:cf:bb:07:a0:3d:22:c2:f6: bb:46:7f:7b:2f:c5:64:2c:f7:ca:59:f8:75:a4:9e:94:fc:f2: 3f:e0:ea:c0:24:8a:ab:94:36:a5:59:d1:c7:2d:ab:8e:ac:06: 9c:80:a8:50:54:52:f5:b3:3e:2a:bc:74:c7:ff:6c:fe:5e:7d: 7c:51:7a:f7:fd:10:04:08:15:d1:83:6c:05:3e:1b:42:13:13: b5:3c:4c:ef:f2:df:5e:37:48:17:8d:28:93:8a:39:0c:1a:0f: 52:d9:2d:33:a7:d2:0c:14:b8:fe:b2:7b:5b:9d:e2:5b:9e:66: 2d:b8:9b:85:f5:be:81:cf:5c:61:ca:c5:96:c3:8e:a5:a7:3f: a8:f6:39:ce:b2:aa:49:d2:7b:da:82:38:60:9a:42:3a:0f:41: fd:70:1a:0f:ba:83:5b:38:0c:51:d5:a7:f8:0f:b4:f4:72:93: d8:d7:88:a1:e9:a4:cb:5f:20:65:3c:b5:ec:14:d9:45:f4:16: 62:a8:e5:20 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsiUK3FjFkM5E1lhUNwnYR8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcwZjRkNjA2ZTFkMTc5MDgwNjM5NzdiNjk4Nzc2ODJlZDdl MmQxZWYwHhcNMjUxMjE1MTQwMTExWhcNMjUxMjE2MTQwMTExWjAzMTEwLwYDVQQD EygzMGZjYjA1MDUyNzIxOTYyMjVmMjBjN2MxMGE0MjA5MTZiN2IyY2MxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArRl8jSCjcSFAvCIwJLIlzNQeuBfK Dnj1D+Pe4oBy27UNGJshZxWONuyxBTZ5xy8HalUMB1VzZqpbQq5f5QhJfOGl1ItZ wJ+Gd1/JaZypGXvqzv3hCF6+XWPYwt3VPMjXN2ulT040Y5uwP62T+magNYO+akvd krnsXquhmZdvmLe70xj/yRviBvwuhjCHuuADoS47cugrhcgWz38lnb5N7KK12L98 9tGCWXODvxXanb/Yym7h08YpWvUsIFHk9blTZIrTxkgisiBCzUYePFDl0ytvKLjG ZsJRCxKW0bs3VI/9vQ3l98NIgPLpeI3BNAC6EqGPKY6MoHPZQg5JnICMYQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDD8sFBSchliJfIMfBCkIJFreyzBMB8GA1UdIwQY MBaAFHD01gbh0XkIBjl3tph3aC7X4tHvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY1BUV0J1SFJlUWdHT1hlMm1IZG9MdGZpMGU4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9iMTA4M2QtYzA3OC00MTVlLThkOWQt NTc2MzM3ZTUwZGM0LzEvY1BUV0J1SFJlUWdHT1hlMm1IZG9MdGZpMGU4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOC9iMTA4M2QtYzA3OC00MTVlLThkOWQtNTc2MzM3ZTUwZGM0 LzEvY1BUV0J1SFJlUWdHT1hlMm1IZG9MdGZpMGU4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAwHppWSOC X2M2d8F6RQyfYPu0Yy6GR+KAUE7mBIraAVKks+Y8INFADLS0vIsVz13SxBCSZvpx UV9+NeGmHuQ/Y8+7B6A9IsL2u0Z/ey/FZCz3yln4daSelPzyP+DqwCSKq5Q2pVnR xy2rjqwGnICoUFRS9bM+Krx0x/9s/l59fFF69/0QBAgV0YNsBT4bQhMTtTxM7/Lf XjdIF40ok4o5DBoPUtktM6fSDBS4/rJ7W53iW55mLbibhfW+gc9cYcrFlsOOpac/ qPY5zrKqSdJ72oI4YJpCOg9B/XAaD7qDWzgMUdWn+A+09HKT2NeIoemky18gZTy1 7BTZRfQWYqjlIA== -----END CERTIFICATE-----Generated at Mon Dec 15 16:54:58 2025 by rpki-client