This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/e32293-673b-4fce-91cf-202d2453945c/1/cLpEaydfH7B3gkLA1jNipZqs81M.mft File: cLpEaydfH7B3gkLA1jNipZqs81M.mft (raw, json) Hash identifier: a6bfBl2UON4JNbd4BaUKwyA+hLTKCMKN24jKOgU5bRQ= Subject key identifier: 83:F7:4A:B2:9A:D1:EB:92:09:EC:C3:97:B9:F3:40:86:D1:B7:DC:9A Authority key identifier: 70:BA:44:6B:27:5F:1F:B0:77:82:42:C0:D6:33:62:A5:9A:AC:F3:53 Certificate issuer: /CN=70ba446b275f1fb0778242c0d63362a59aacf353 Certificate serial: 019B5A5228983C8E40812FA9C36635E25070 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cLpEaydfH7B3gkLA1jNipZqs81M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/e32293-673b-4fce-91cf-202d2453945c/1/cLpEaydfH7B3gkLA1jNipZqs81M.mft Manifest number: 21 Signing time: Fri 26 Dec 2025 11:01:32 +0000 Manifest this update: Fri 26 Dec 2025 11:01:32 +0000 Manifest next update: Sat 27 Dec 2025 11:01:32 +0000 Files and hashes: 1: LgALOI5_I6jb53Ow_J_nnO3aXdQ.asa (hash: eU6LOPHHMrKuq0WuI7L7NZjJ1j5BudGRJxH8SR2SSVs=) 2: cLpEaydfH7B3gkLA1jNipZqs81M.crl (hash: IEXQEDU/8+pmrde6OJyqo+CIaCF/c06krzkM6ZOuF4g=) 3: fWsQfXTwChCVdlDOlOXfesWeWqM.roa (hash: c4AxEEQ54tqjlHruGrVXcwWSaIZbRWz+mayrtEvyH2g=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/e32293-673b-4fce-91cf-202d2453945c/1/cLpEaydfH7B3gkLA1jNipZqs81M.crl rsync://rpki.ripe.net/repository/DEFAULT/dd/e32293-673b-4fce-91cf-202d2453945c/1/cLpEaydfH7B3gkLA1jNipZqs81M.mft rsync://rpki.ripe.net/repository/DEFAULT/cLpEaydfH7B3gkLA1jNipZqs81M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5a:52:28:98:3c:8e:40:81:2f:a9:c3:66:35:e2:50:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=70ba446b275f1fb0778242c0d63362a59aacf353 Validity Not Before: Dec 26 11:01:32 2025 GMT Not After : Dec 27 11:01:32 2025 GMT Subject: CN=83f74ab29ad1eb9209ecc397b9f34086d1b7dc9a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:78:11:a8:e4:67:6a:8d:b2:15:08:7f:01:fd: 85:7a:3f:5b:3e:66:17:d9:b3:62:aa:02:83:ec:20: 69:cd:cc:3b:70:b2:cb:3b:de:83:03:5b:45:46:a3: 71:30:ec:99:62:41:87:b7:df:f5:a2:ce:c4:36:64: 38:cc:ef:9e:1c:b0:31:ea:b2:ae:cb:49:06:2d:0f: 0f:b3:cc:29:00:0d:4d:7e:cc:81:eb:c2:c3:56:37: a2:f2:28:7f:dc:f3:3f:ac:01:9a:81:81:dc:8b:57: 7a:0c:96:bf:b7:cc:b4:aa:c8:7d:8b:a3:c1:20:ed: 3c:36:f1:a5:03:df:63:de:ed:7a:7f:94:27:6f:9e: 57:13:35:95:be:02:a9:c6:29:cf:ba:89:4e:da:21: ac:66:d4:a1:06:90:bb:a6:17:12:60:f0:39:61:8c: 1d:4c:5b:2b:be:a9:c5:65:89:8d:c5:fb:26:50:19: 10:e9:d0:82:bb:66:1b:08:bb:76:bb:89:26:de:e0: 47:fa:90:e8:1d:36:88:c1:22:1f:36:09:dc:e2:25: 72:c2:1d:9c:37:39:a9:18:31:19:1e:8f:75:e1:49: 82:13:f6:a7:1f:fc:5c:c5:b9:dd:de:66:34:9d:ad: bc:d2:f7:24:86:03:c6:53:29:d3:12:8e:fb:cf:e8: 87:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:F7:4A:B2:9A:D1:EB:92:09:EC:C3:97:B9:F3:40:86:D1:B7:DC:9A X509v3 Authority Key Identifier: keyid:70:BA:44:6B:27:5F:1F:B0:77:82:42:C0:D6:33:62:A5:9A:AC:F3:53 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cLpEaydfH7B3gkLA1jNipZqs81M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/e32293-673b-4fce-91cf-202d2453945c/1/cLpEaydfH7B3gkLA1jNipZqs81M.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/e32293-673b-4fce-91cf-202d2453945c/1/cLpEaydfH7B3gkLA1jNipZqs81M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 54:ff:1b:c6:db:24:de:60:70:47:7c:77:e5:08:c8:27:25:bc: 60:d7:22:c9:0f:fa:73:91:1b:ee:18:5d:12:e3:66:57:fe:1c: 7e:e1:3a:a4:fb:41:17:43:fb:79:60:7b:ea:70:dc:c8:ce:88: 3d:53:7f:62:63:fe:c3:b3:c6:cf:fa:16:af:97:ed:59:99:0b: 54:f2:50:89:0d:06:56:1e:de:a5:ac:ea:ad:1b:0a:fb:bd:3c: bd:6b:dd:c3:bb:b2:db:c6:fa:8a:8c:07:b6:5a:64:98:c4:0b: e3:1e:3f:16:70:91:d7:e5:bc:59:c4:0f:a7:89:5c:d1:bc:8a: f0:70:34:ad:7e:2c:06:b0:65:0c:72:94:11:70:9d:11:4c:e7: 97:49:19:da:72:ab:05:1c:ee:c8:44:44:cc:58:10:50:07:d1: 09:98:63:6e:4b:ef:84:ce:e3:af:8a:0a:3d:b1:ca:e6:51:0f: fc:5b:12:27:18:26:73:08:dc:66:fa:f6:33:3d:e3:39:59:33: 1d:9b:35:ef:14:ac:38:78:66:3d:89:cf:92:15:d8:86:58:75: bf:a2:01:91:da:e0:b6:b3:ea:d3:ea:30:f0:44:c3:91:e7:cd: 72:c5:55:2a:d8:f5:4d:58:e2:a1:7f:99:f4:40:53:0f:c2:78: d0:bd:7a:11 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtaUiiYPI5AgS+pw2Y14lBwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcwYmE0NDZiMjc1ZjFmYjA3NzgyNDJjMGQ2MzM2MmE1OWFh Y2YzNTMwHhcNMjUxMjI2MTEwMTMyWhcNMjUxMjI3MTEwMTMyWjAzMTEwLwYDVQQD Eyg4M2Y3NGFiMjlhZDFlYjkyMDllY2MzOTdiOWYzNDA4NmQxYjdkYzlhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnXgRqORnao2yFQh/Af2Fej9bPmYX 2bNiqgKD7CBpzcw7cLLLO96DA1tFRqNxMOyZYkGHt9/1os7ENmQ4zO+eHLAx6rKu y0kGLQ8Ps8wpAA1NfsyB68LDVjei8ih/3PM/rAGagYHci1d6DJa/t8y0qsh9i6PB IO08NvGlA99j3u16f5Qnb55XEzWVvgKpxinPuolO2iGsZtShBpC7phcSYPA5YYwd TFsrvqnFZYmNxfsmUBkQ6dCCu2YbCLt2u4km3uBH+pDoHTaIwSIfNgnc4iVywh2c NzmpGDEZHo914UmCE/anH/xcxbnd3mY0na280vckhgPGUynTEo77z+iH5QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIP3SrKa0euSCezDl7nzQIbRt9yaMB8GA1UdIwQY MBaAFHC6RGsnXx+wd4JCwNYzYqWarPNTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY0xwRWF5ZGZIN0IzZ2tMQTFqTmlwWnFzODFNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZC9lMzIyOTMtNjczYi00ZmNlLTkxY2Yt MjAyZDI0NTM5NDVjLzEvY0xwRWF5ZGZIN0IzZ2tMQTFqTmlwWnFzODFNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZC9lMzIyOTMtNjczYi00ZmNlLTkxY2YtMjAyZDI0NTM5NDVj LzEvY0xwRWF5ZGZIN0IzZ2tMQTFqTmlwWnFzODFNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVP8bxtsk 3mBwR3x35QjIJyW8YNciyQ/6c5Eb7hhdEuNmV/4cfuE6pPtBF0P7eWB76nDcyM6I PVN/YmP+w7PGz/oWr5ftWZkLVPJQiQ0GVh7epazqrRsK+708vWvdw7uy28b6iowH tlpkmMQL4x4/FnCR1+W8WcQPp4lc0byK8HA0rX4sBrBlDHKUEXCdEUznl0kZ2nKr BRzuyEREzFgQUAfRCZhjbkvvhM7jr4oKPbHK5lEP/FsSJxgmcwjcZvr2Mz3jOVkz HZs17xSsOHhmPYnPkhXYhlh1v6IBkdrgtrPq0+ow8ETDkefNcsVVKtj1TVjioX+Z 9EBTD8J40L16EQ== -----END CERTIFICATE-----Generated at Fri Dec 26 15:43:38 2025 by rpki-client