This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/e2e119-fd78-4b1a-b16a-987da4392056/1/cS-cs8KYsVC-t5CAN290verEOKw.mft File: cS-cs8KYsVC-t5CAN290verEOKw.mft (raw, json) Hash identifier: Le+0Thz55Eu+AjdCenmrnKatMulHQVURb06dA2GvT0c= Subject key identifier: D8:0B:4A:21:4F:93:25:BC:F3:82:92:CA:07:5D:84:09:DA:FE:85:11 Authority key identifier: 71:2F:9C:B3:C2:98:B1:50:BE:B7:90:80:37:6F:74:BD:EA:C4:38:AC Certificate issuer: /CN=712f9cb3c298b150beb79080376f74bdeac438ac Certificate serial: 019B19F20A398D2CB30967600672F596C381 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cS-cs8KYsVC-t5CAN290verEOKw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/e2e119-fd78-4b1a-b16a-987da4392056/1/cS-cs8KYsVC-t5CAN290verEOKw.mft Manifest number: 177C Signing time: Sat 13 Dec 2025 23:00:51 +0000 Manifest this update: Sat 13 Dec 2025 23:00:51 +0000 Manifest next update: Sun 14 Dec 2025 23:00:51 +0000 Files and hashes: 1: a8fiimQdU18P-F2tOQH9sjS2Djw.asa (hash: SNczP7mStVed+rVQzNAM+CHW/D0tMUWtQ+EIBgCl2dM=) 2: cFDNySQq-BoAAus-f6QDofmomPs.asa (hash: bmD9h4TJUpSAXYuI/gTQnCZ438ljBruFVbyjbe3Styo=) 3: cS-cs8KYsVC-t5CAN290verEOKw.crl (hash: 06QnXHOFW4JKwVh1bmlxgleyLtQlpUb55ZbuDKdSKGc=) 4: fXIhT7Ydqm5HytjfeB-NmrbrFRI.roa (hash: EsiKR1dMs1SsEJue6V9U6b9V/XFN9Zx4S62/KpEzEqg=) 5: kzy2fS8wPguMf8v9iXU1Xd6RCJE.roa (hash: T6hfblwKGrCK3Ap3pOGRw0serguSainDEw/sPRZW+uI=) 6: mprfUYWLFFvcoporgivp8S18oz0.roa (hash: uZGl5TRJLtjM+YCzDi4j+2EG/6oM3QIc/9AdR4GUda8=) 7: nqfgPZyBGUMJjXZ82ONF8M_wX2o.roa (hash: cAq2+4Plhv+25M/XxaCNm4UA7TT+v8QHyzJDH25TDn4=) 8: zShwLkkDPGWGSwVW1WaNYQqy4QY.roa (hash: cc7GaLAsHY9PJBKnUzOfoPoWS1viq2gLzvzxAmdtn+k=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/e2e119-fd78-4b1a-b16a-987da4392056/1/cS-cs8KYsVC-t5CAN290verEOKw.crl rsync://rpki.ripe.net/repository/DEFAULT/d9/e2e119-fd78-4b1a-b16a-987da4392056/1/cS-cs8KYsVC-t5CAN290verEOKw.mft rsync://rpki.ripe.net/repository/DEFAULT/cS-cs8KYsVC-t5CAN290verEOKw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Dec 2025 17:47:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:19:f2:0a:39:8d:2c:b3:09:67:60:06:72:f5:96:c3:81 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=712f9cb3c298b150beb79080376f74bdeac438ac Validity Not Before: Dec 13 23:00:51 2025 GMT Not After : Dec 14 23:00:51 2025 GMT Subject: CN=d80b4a214f9325bcf38292ca075d8409dafe8511 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:d1:56:83:03:b2:4b:e4:22:7a:54:d3:e0:20: 6c:07:68:18:56:9d:3c:6a:10:0b:f7:c7:00:34:d7: e0:b4:21:49:19:55:77:d4:31:9e:55:73:b2:26:cf: bf:36:80:52:ca:03:f8:d9:39:70:cd:91:25:11:4c: 71:24:a8:e9:5a:61:46:83:e3:26:aa:12:92:60:74: 07:7d:2d:60:d1:26:cf:bf:7f:29:8b:ef:7a:7f:1f: 06:1a:c4:21:1b:e3:9c:0f:b7:a8:6c:3b:9e:7f:06: a7:ee:55:45:5a:3f:22:e2:7d:03:59:18:16:69:a7: 19:dc:00:b2:6d:c0:f8:24:19:92:b3:0d:63:18:62: 0a:81:74:1c:f5:ba:fe:8b:65:13:97:20:41:d2:fb: 8d:53:54:65:fb:71:e7:be:66:55:56:a7:c9:b6:ee: 2a:24:bd:6d:ef:ad:7c:56:19:ed:e9:42:e7:16:66: 78:b2:bf:64:9c:26:9c:f2:85:5e:e0:d0:3e:c4:bd: 8d:95:15:be:85:5c:b7:c4:a3:86:96:92:01:b7:74: 35:12:27:71:6f:77:e2:47:32:e4:be:ae:f4:d8:01: c3:ba:17:c2:a5:a6:54:f5:9d:a7:d5:35:c6:75:64: 84:73:d0:b5:73:0f:db:48:d4:26:30:0d:a2:5c:0d: 3b:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:0B:4A:21:4F:93:25:BC:F3:82:92:CA:07:5D:84:09:DA:FE:85:11 X509v3 Authority Key Identifier: keyid:71:2F:9C:B3:C2:98:B1:50:BE:B7:90:80:37:6F:74:BD:EA:C4:38:AC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cS-cs8KYsVC-t5CAN290verEOKw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/e2e119-fd78-4b1a-b16a-987da4392056/1/cS-cs8KYsVC-t5CAN290verEOKw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/e2e119-fd78-4b1a-b16a-987da4392056/1/cS-cs8KYsVC-t5CAN290verEOKw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 04:fd:22:44:bd:c0:fb:3c:52:05:53:16:99:21:dc:38:b9:6a: a8:ba:25:1c:cb:f5:9e:75:13:42:61:2d:01:fe:12:0f:aa:2f: fe:57:5c:dc:56:8d:cd:5f:c1:1f:d7:65:30:fb:17:99:a6:7c: 73:00:d4:7d:b0:dc:eb:11:57:7d:83:ad:99:4c:72:a5:20:36: 52:30:f2:45:1c:8c:a3:83:b0:d5:e1:f8:09:b9:c1:d4:60:85: a0:0c:33:d3:f9:6f:ea:db:c4:ba:4b:b6:01:7b:b9:2a:58:61: 87:22:cb:5f:34:b4:94:3b:8e:55:7f:a7:6b:cf:8d:b9:46:fa: c3:d7:3c:a7:18:3d:61:38:a0:69:2e:34:7b:b9:41:ff:8d:49: 02:37:1a:f2:19:e2:9b:ca:d8:92:f8:40:23:81:5a:86:44:fb: fb:d3:b5:2e:92:15:4f:3b:a9:3f:e3:9a:d8:1c:35:2a:90:4f: f8:49:e1:94:96:92:c4:50:8c:be:48:69:3c:ba:5a:d6:60:34: 11:17:63:a1:f4:d2:67:3e:a4:2f:23:36:ad:d4:e9:de:ee:1e: 5d:cf:58:a5:e9:72:9f:70:bc:51:f2:e0:9a:8a:8e:55:f2:4c: f7:1a:89:2f:a6:8c:c2:6d:7a:a4:70:6a:18:04:f6:7f:b0:af: aa:db:c6:09 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsZ8go5jSyzCWdgBnL1lsOBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcxMmY5Y2IzYzI5OGIxNTBiZWI3OTA4MDM3NmY3NGJkZWFj NDM4YWMwHhcNMjUxMjEzMjMwMDUxWhcNMjUxMjE0MjMwMDUxWjAzMTEwLwYDVQQD EyhkODBiNGEyMTRmOTMyNWJjZjM4MjkyY2EwNzVkODQwOWRhZmU4NTExMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwNFWgwOyS+QielTT4CBsB2gYVp08 ahAL98cANNfgtCFJGVV31DGeVXOyJs+/NoBSygP42TlwzZElEUxxJKjpWmFGg+Mm qhKSYHQHfS1g0SbPv38pi+96fx8GGsQhG+OcD7eobDuefwan7lVFWj8i4n0DWRgW aacZ3ACybcD4JBmSsw1jGGIKgXQc9br+i2UTlyBB0vuNU1Rl+3HnvmZVVqfJtu4q JL1t7618Vhnt6ULnFmZ4sr9knCac8oVe4NA+xL2NlRW+hVy3xKOGlpIBt3Q1Eidx b3fiRzLkvq702AHDuhfCpaZU9Z2n1TXGdWSEc9C1cw/bSNQmMA2iXA07OwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNgLSiFPkyW884KSygddhAna/oURMB8GA1UdIwQY MBaAFHEvnLPCmLFQvreQgDdvdL3qxDisMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY1MtY3M4S1lzVkMtdDVDQU4yOTB2ZXJFT0t3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS9lMmUxMTktZmQ3OC00YjFhLWIxNmEt OTg3ZGE0MzkyMDU2LzEvY1MtY3M4S1lzVkMtdDVDQU4yOTB2ZXJFT0t3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kOS9lMmUxMTktZmQ3OC00YjFhLWIxNmEtOTg3ZGE0MzkyMDU2 LzEvY1MtY3M4S1lzVkMtdDVDQU4yOTB2ZXJFT0t3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABP0iRL3A +zxSBVMWmSHcOLlqqLolHMv1nnUTQmEtAf4SD6ov/ldc3FaNzV/BH9dlMPsXmaZ8 cwDUfbDc6xFXfYOtmUxypSA2UjDyRRyMo4Ow1eH4CbnB1GCFoAwz0/lv6tvEuku2 AXu5KlhhhyLLXzS0lDuOVX+na8+NuUb6w9c8pxg9YTigaS40e7lB/41JAjca8hni m8rYkvhAI4FahkT7+9O1LpIVTzupP+Oa2Bw1KpBP+EnhlJaSxFCMvkhpPLpa1mA0 ERdjofTSZz6kLyM2rdTp3u4eXc9Ypelyn3C8UfLgmoqOVfJM9xqJL6aMwm16pHBq GAT2f7CvqtvGCQ== -----END CERTIFICATE-----Generated at Sun Dec 14 01:54:28 2025 by rpki-client