This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/d0abd0-b114-4e3a-ae59-e21763c672fa/1/cGdFrZI1PaioDLLg0inWjC71PbI.mft File: cGdFrZI1PaioDLLg0inWjC71PbI.mft (raw, json) Hash identifier: Htax7aHRevMzUamrhQElJsDWrT2TlISfv2fPg478RVA= Subject key identifier: 97:73:0E:A9:14:FF:C9:DF:84:FA:7D:B6:39:5B:88:9B:38:8D:21:B5 Authority key identifier: 70:67:45:AD:92:35:3D:A8:A8:0C:B2:E0:D2:29:D6:8C:2E:F5:3D:B2 Certificate issuer: /CN=706745ad92353da8a80cb2e0d229d68c2ef53db2 Certificate serial: 019B736C7DD87BC0DCE12E49C250BC030F22 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cGdFrZI1PaioDLLg0inWjC71PbI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/d0abd0-b114-4e3a-ae59-e21763c672fa/1/cGdFrZI1PaioDLLg0inWjC71PbI.mft Manifest number: 01FA Signing time: Wed 31 Dec 2025 08:00:48 +0000 Manifest this update: Wed 31 Dec 2025 08:00:48 +0000 Manifest next update: Thu 01 Jan 2026 08:00:48 +0000 Files and hashes: 1: aaJ1jaTLTGfM4VDt5VNpK1tiufg.roa (hash: ardpktxFjeQvHK2MqhTKB5ZUCsB5pD/8L8tzcZpPhHI=) 2: cGdFrZI1PaioDLLg0inWjC71PbI.crl (hash: CxbiAXAfD8NsvbYg709myEMpapS6vAlK9iJe0gPXyNM=) 3: ghNDZNJhpYP_Htc1Wek-L5R4BeI.roa (hash: R8J6wlPRCV7dUDvscKB1CZV2169wkfxGRLHSAdA+H2w=) 4: l3EQEBZnleFof5yb88UhTSSdRTM.roa (hash: UQRjHQuRnFXbfdwyx6MJct5Sj+7na+HTqU/QptK8INI=) 5: yP2PwxyE3TQPg2qxWYhpMqN9JU0.roa (hash: YcmMq4Dbq1MbTv0BNqcdqm0wVRn+J3BQcq+ugockK/8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/d0abd0-b114-4e3a-ae59-e21763c672fa/1/cGdFrZI1PaioDLLg0inWjC71PbI.crl rsync://rpki.ripe.net/repository/DEFAULT/d8/d0abd0-b114-4e3a-ae59-e21763c672fa/1/cGdFrZI1PaioDLLg0inWjC71PbI.mft rsync://rpki.ripe.net/repository/DEFAULT/cGdFrZI1PaioDLLg0inWjC71PbI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 01 Jan 2026 00:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:73:6c:7d:d8:7b:c0:dc:e1:2e:49:c2:50:bc:03:0f:22 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=706745ad92353da8a80cb2e0d229d68c2ef53db2 Validity Not Before: Dec 31 08:00:48 2025 GMT Not After : Jan 1 08:00:48 2026 GMT Subject: CN=97730ea914ffc9df84fa7db6395b889b388d21b5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:35:d5:15:d7:56:7c:05:78:fb:57:ba:9c:57: 42:ca:43:f5:2f:5d:73:0e:fb:89:ee:e0:58:76:76: ae:a3:f8:ca:36:c0:22:3d:87:22:86:14:a1:40:86: ca:9b:c5:e2:ab:c1:cf:4f:5d:fd:89:51:bc:e3:09: 84:69:5a:cd:c2:10:df:de:38:03:e5:82:ff:aa:b1: b5:05:7f:93:05:f8:e1:88:89:0b:e5:f0:49:e1:26: 52:90:73:b3:39:08:f3:42:65:4e:54:fa:6f:7e:68: a6:07:78:07:a3:1e:08:24:38:ec:56:21:97:21:a6: e8:6d:64:c0:ab:5e:a4:8a:80:f5:e5:61:9c:72:a9: f9:18:f7:72:1d:ce:58:9d:9e:15:df:de:94:ce:55: c2:83:85:f4:15:d6:c7:1c:e7:63:05:fa:cc:2d:aa: f0:d7:b3:51:e8:d9:16:af:cb:d2:a4:fb:5b:7a:78: 56:97:86:61:d7:a9:50:b1:55:9f:67:71:4b:22:90: fa:b9:f4:5d:b9:f3:27:3f:95:cc:a9:c7:05:dc:6a: ea:3f:df:05:cf:0d:53:f3:2e:35:3b:d7:3d:6c:25: ed:8f:c5:8d:20:aa:b1:15:7d:d9:a9:7e:1a:7f:79: 31:e0:00:73:84:fa:e3:02:e6:66:f3:a5:d5:1d:ec: ec:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:73:0E:A9:14:FF:C9:DF:84:FA:7D:B6:39:5B:88:9B:38:8D:21:B5 X509v3 Authority Key Identifier: keyid:70:67:45:AD:92:35:3D:A8:A8:0C:B2:E0:D2:29:D6:8C:2E:F5:3D:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cGdFrZI1PaioDLLg0inWjC71PbI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/d0abd0-b114-4e3a-ae59-e21763c672fa/1/cGdFrZI1PaioDLLg0inWjC71PbI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/d0abd0-b114-4e3a-ae59-e21763c672fa/1/cGdFrZI1PaioDLLg0inWjC71PbI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 95:d9:8b:ce:34:d3:0d:f1:7a:77:57:f7:21:f6:fd:bd:9e:72: 67:da:e6:2d:4e:dd:7a:c8:98:25:a1:da:ec:5d:a5:ea:76:c3: b0:d6:d8:38:9a:a9:f0:1c:de:7d:07:4f:e2:79:f0:86:66:31: d3:6a:e0:24:ec:39:aa:be:16:bd:89:09:64:2a:22:e4:06:fb: 31:eb:02:db:59:01:7c:06:f4:fe:83:1f:8f:3a:01:7b:11:df: a1:e8:dd:cd:3b:95:5e:23:69:bb:7a:2d:1d:de:7e:07:1f:30: 18:b4:ac:03:3d:35:49:d6:75:63:48:bd:e3:22:92:d9:aa:88: 28:57:62:4e:34:c6:ea:5f:cd:48:b6:3b:59:e1:b9:2f:32:01: 43:b6:39:ae:16:c6:08:a4:c5:35:ac:b7:e6:08:d9:d3:71:11: c9:d0:58:9f:91:41:5a:7b:b3:86:a1:4e:cb:de:de:24:45:4d: 80:24:b4:3b:3a:52:71:e9:de:4a:d9:89:6d:98:e4:71:ec:14: 36:fe:55:7a:bf:ca:ba:8b:e1:94:e4:02:80:c0:14:92:55:4b: b6:24:64:36:6f:00:d8:76:8a:b4:9b:ae:f8:f6:38:f2:a4:c9: 08:c1:64:65:68:3e:b2:4b:cc:ee:53:4a:57:22:91:4b:0b:1c: 32:c1:bb:cc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtzbH3Ye8Dc4S5JwlC8Aw8iMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcwNjc0NWFkOTIzNTNkYThhODBjYjJlMGQyMjlkNjhjMmVm NTNkYjIwHhcNMjUxMjMxMDgwMDQ4WhcNMjYwMTAxMDgwMDQ4WjAzMTEwLwYDVQQD Eyg5NzczMGVhOTE0ZmZjOWRmODRmYTdkYjYzOTViODg5YjM4OGQyMWI1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAozXVFddWfAV4+1e6nFdCykP1L11z DvuJ7uBYdnauo/jKNsAiPYcihhShQIbKm8Xiq8HPT139iVG84wmEaVrNwhDf3jgD 5YL/qrG1BX+TBfjhiIkL5fBJ4SZSkHOzOQjzQmVOVPpvfmimB3gHox4IJDjsViGX IabobWTAq16kioD15WGccqn5GPdyHc5YnZ4V396UzlXCg4X0FdbHHOdjBfrMLarw 17NR6NkWr8vSpPtbenhWl4Zh16lQsVWfZ3FLIpD6ufRdufMnP5XMqccF3GrqP98F zw1T8y41O9c9bCXtj8WNIKqxFX3ZqX4af3kx4ABzhPrjAuZm86XVHezsPwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJdzDqkU/8nfhPp9tjlbiJs4jSG1MB8GA1UdIwQY MBaAFHBnRa2SNT2oqAyy4NIp1owu9T2yMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY0dkRnJaSTFQYWlvRExMZzBpbldqQzcxUGJJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOC9kMGFiZDAtYjExNC00ZTNhLWFlNTkt ZTIxNzYzYzY3MmZhLzEvY0dkRnJaSTFQYWlvRExMZzBpbldqQzcxUGJJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kOC9kMGFiZDAtYjExNC00ZTNhLWFlNTktZTIxNzYzYzY3MmZh LzEvY0dkRnJaSTFQYWlvRExMZzBpbldqQzcxUGJJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAldmLzjTT DfF6d1f3Ifb9vZ5yZ9rmLU7desiYJaHa7F2l6nbDsNbYOJqp8BzefQdP4nnwhmYx 02rgJOw5qr4WvYkJZCoi5Ab7MesC21kBfAb0/oMfjzoBexHfoejdzTuVXiNpu3ot Hd5+Bx8wGLSsAz01SdZ1Y0i94yKS2aqIKFdiTjTG6l/NSLY7WeG5LzIBQ7Y5rhbG CKTFNay35gjZ03ERydBYn5FBWnuzhqFOy97eJEVNgCS0OzpSceneStmJbZjkcewU Nv5Ver/KuovhlOQCgMAUklVLtiRkNm8A2HaKtJuu+PY48qTJCMFkZWg+skvM7lNK VyKRSwscMsG7zA== -----END CERTIFICATE-----Generated at Wed Dec 31 09:49:36 2025 by rpki-client