This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/28dd30-ec08-4dc8-a1d1-5d3a86494775/1/cMnQbFGt1oKQY_G2exddDAAB5zY.mft File: cMnQbFGt1oKQY_G2exddDAAB5zY.mft (raw, json) Hash identifier: 6XKYERr6qKHvZRnEWbbir8d3vk39Q1vIAgzsEqi0Dq4= Subject key identifier: 08:F1:14:63:67:B0:0D:28:00:8C:02:1D:C9:A5:66:6D:5D:61:2D:38 Authority key identifier: 70:C9:D0:6C:51:AD:D6:82:90:63:F1:B6:7B:17:5D:0C:00:01:E7:36 Certificate issuer: /CN=70c9d06c51add6829063f1b67b175d0c0001e736 Certificate serial: 019B5976AF7ACE9144F7F4F4A8D2796A95DE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cMnQbFGt1oKQY_G2exddDAAB5zY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/28dd30-ec08-4dc8-a1d1-5d3a86494775/1/cMnQbFGt1oKQY_G2exddDAAB5zY.mft Manifest number: 1798 Signing time: Fri 26 Dec 2025 07:01:48 +0000 Manifest this update: Fri 26 Dec 2025 07:01:48 +0000 Manifest next update: Sat 27 Dec 2025 07:01:48 +0000 Files and hashes: 1: 5giw-glAqkb4ga3tho0-9kOiFpQ.roa (hash: wPSRGEewfNLQ9tlgNj7BpPtVBQPthONm5g14lvlKftQ=) 2: cMnQbFGt1oKQY_G2exddDAAB5zY.crl (hash: z3OQHSDXlQVudEibyKVmX4orZL8wMk2TPlU21nEuSRk=) 3: lO9ygzFEh6vlzFwa5Ivf2tcAutc.roa (hash: 0P+81vJocBAhACHTKyLTeE5L1N5kiVqd+TGA07c8eWU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/28dd30-ec08-4dc8-a1d1-5d3a86494775/1/cMnQbFGt1oKQY_G2exddDAAB5zY.crl rsync://rpki.ripe.net/repository/DEFAULT/e6/28dd30-ec08-4dc8-a1d1-5d3a86494775/1/cMnQbFGt1oKQY_G2exddDAAB5zY.mft rsync://rpki.ripe.net/repository/DEFAULT/cMnQbFGt1oKQY_G2exddDAAB5zY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:76:af:7a:ce:91:44:f7:f4:f4:a8:d2:79:6a:95:de Signature Algorithm: sha256WithRSAEncryption Issuer: CN=70c9d06c51add6829063f1b67b175d0c0001e736 Validity Not Before: Dec 26 07:01:48 2025 GMT Not After : Dec 27 07:01:48 2025 GMT Subject: CN=08f1146367b00d28008c021dc9a5666d5d612d38 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:0a:00:8a:89:c3:f5:df:32:ab:81:2e:70:05: de:50:94:2c:7d:ec:c9:8f:db:44:c6:26:96:b4:13: e3:bb:45:21:32:6e:ac:ec:1e:1d:3e:d8:7d:84:f1: 63:78:67:34:0c:c9:1d:a7:21:83:a8:d4:7a:5d:0d: 24:e0:1f:0e:58:a2:c5:52:c1:8d:2c:0a:03:05:43: 4c:52:88:fa:95:ac:77:05:88:fa:68:e4:e5:bc:60: 17:4f:66:d0:71:17:71:84:4f:db:8f:9c:54:d1:a6: 44:8e:9c:07:ea:c5:4a:85:42:b3:d2:fb:e3:b4:ee: 1e:92:f9:e1:6c:1b:1a:77:b6:2e:bf:68:51:42:5a: 1c:b8:e5:9e:c4:dd:00:38:89:10:91:9f:09:52:15: 45:e2:65:66:7b:df:db:95:ee:15:a2:36:2a:58:73: 8f:80:d2:9c:1d:f3:84:69:59:7d:cd:f6:7e:5c:bc: 5c:05:ec:20:a0:ad:98:eb:37:44:1c:45:ae:b7:0a: 2e:fe:ad:db:02:e2:ae:d8:93:b3:44:9e:65:24:2e: 67:97:5a:5f:08:a1:94:49:46:9f:14:43:80:9e:2e: c9:93:d6:30:ef:b5:a7:a4:dd:67:8c:86:0f:b0:e4: 7c:88:39:7e:a7:43:96:40:35:84:1f:f8:6c:b2:f5: c7:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:F1:14:63:67:B0:0D:28:00:8C:02:1D:C9:A5:66:6D:5D:61:2D:38 X509v3 Authority Key Identifier: keyid:70:C9:D0:6C:51:AD:D6:82:90:63:F1:B6:7B:17:5D:0C:00:01:E7:36 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cMnQbFGt1oKQY_G2exddDAAB5zY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/28dd30-ec08-4dc8-a1d1-5d3a86494775/1/cMnQbFGt1oKQY_G2exddDAAB5zY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/28dd30-ec08-4dc8-a1d1-5d3a86494775/1/cMnQbFGt1oKQY_G2exddDAAB5zY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 32:76:75:54:24:a0:28:c6:40:95:52:1d:85:6e:40:e7:0c:db: 33:d9:d2:5b:e5:e9:e1:e6:85:1b:79:48:59:53:73:ae:11:12: 85:a6:c6:48:4e:cd:94:da:3d:7b:cf:fd:cc:f3:b1:b1:eb:10: 8f:3e:29:87:d8:80:2e:5d:cd:5f:71:0c:cf:0f:6c:1d:0a:9b: 2d:f1:0f:d8:61:7f:47:c1:98:23:20:ce:24:79:f0:55:a8:14: b4:dc:73:a2:8f:dc:68:b8:9f:4d:13:55:02:92:76:e3:32:8d: c4:25:0c:a0:f8:ac:ca:08:72:34:0b:c7:58:e4:8b:b4:5c:c9: 17:4d:31:47:ba:8c:8e:81:d7:20:e2:34:f0:5b:99:2a:f0:4e: 78:04:2e:54:52:57:ec:86:9b:bc:98:02:fc:c9:00:d2:61:04: 1a:38:f4:c3:2d:56:26:f7:43:32:d2:c9:4d:6c:2f:c9:78:8e: 10:f2:0d:f6:4e:43:05:86:30:78:46:25:a1:74:01:97:be:9b: db:5a:96:fa:63:d1:41:d1:88:ec:0a:65:df:af:5c:ee:9b:b3: d8:94:f0:47:d5:ab:78:b7:40:c5:b5:4a:9d:8d:0c:84:ee:a2: 86:ae:17:5f:36:0b:3b:40:d1:8c:e0:be:bf:3b:87:85:0c:6c: ee:c2:aa:b2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtZdq96zpFE9/T0qNJ5apXeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcwYzlkMDZjNTFhZGQ2ODI5MDYzZjFiNjdiMTc1ZDBjMDAw MWU3MzYwHhcNMjUxMjI2MDcwMTQ4WhcNMjUxMjI3MDcwMTQ4WjAzMTEwLwYDVQQD EygwOGYxMTQ2MzY3YjAwZDI4MDA4YzAyMWRjOWE1NjY2ZDVkNjEyZDM4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArwoAionD9d8yq4EucAXeUJQsfezJ j9tExiaWtBPju0UhMm6s7B4dPth9hPFjeGc0DMkdpyGDqNR6XQ0k4B8OWKLFUsGN LAoDBUNMUoj6lax3BYj6aOTlvGAXT2bQcRdxhE/bj5xU0aZEjpwH6sVKhUKz0vvj tO4ekvnhbBsad7Yuv2hRQlocuOWexN0AOIkQkZ8JUhVF4mVme9/ble4VojYqWHOP gNKcHfOEaVl9zfZ+XLxcBewgoK2Y6zdEHEWutwou/q3bAuKu2JOzRJ5lJC5nl1pf CKGUSUafFEOAni7Jk9Yw77WnpN1njIYPsOR8iDl+p0OWQDWEH/hssvXHKwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAjxFGNnsA0oAIwCHcmlZm1dYS04MB8GA1UdIwQY MBaAFHDJ0GxRrdaCkGPxtnsXXQwAAec2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY01uUWJGR3Qxb0tRWV9HMmV4ZGREQUFCNXpZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNi8yOGRkMzAtZWMwOC00ZGM4LWExZDEt NWQzYTg2NDk0Nzc1LzEvY01uUWJGR3Qxb0tRWV9HMmV4ZGREQUFCNXpZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNi8yOGRkMzAtZWMwOC00ZGM4LWExZDEtNWQzYTg2NDk0Nzc1 LzEvY01uUWJGR3Qxb0tRWV9HMmV4ZGREQUFCNXpZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMnZ1VCSg KMZAlVIdhW5A5wzbM9nSW+Xp4eaFG3lIWVNzrhEShabGSE7NlNo9e8/9zPOxsesQ jz4ph9iALl3NX3EMzw9sHQqbLfEP2GF/R8GYIyDOJHnwVagUtNxzoo/caLifTRNV ApJ24zKNxCUMoPisyghyNAvHWOSLtFzJF00xR7qMjoHXIOI08FuZKvBOeAQuVFJX 7IabvJgC/MkA0mEEGjj0wy1WJvdDMtLJTWwvyXiOEPIN9k5DBYYweEYloXQBl76b 21qW+mPRQdGI7Apl369c7puz2JTwR9WreLdAxbVKnY0MhO6ihq4XXzYLO0DRjOC+ vzuHhQxs7sKqsg== -----END CERTIFICATE-----Generated at Fri Dec 26 16:02:02 2025 by rpki-client