This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/ca17f7-c593-474d-8cf0-538b47709956/1/cHjnVjWgncwD9iWoC_pVKyLjZiw.mft File: cHjnVjWgncwD9iWoC_pVKyLjZiw.mft (raw, json) Hash identifier: RqtRAEMmp4WeRsYYk4YNkUNxdL1CIb0TNGhYR3IP4kI= Subject key identifier: 45:35:7E:E2:70:90:7B:5C:89:20:1A:5B:6F:36:D5:61:CE:A9:83:39 Authority key identifier: 70:78:E7:56:35:A0:9D:CC:03:F6:25:A8:0B:FA:55:2B:22:E3:66:2C Certificate issuer: /CN=7078e75635a09dcc03f625a80bfa552b22e3662c Certificate serial: 019B0F6EA87D4FBB3A745698A97F34535485 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cHjnVjWgncwD9iWoC_pVKyLjZiw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/ca17f7-c593-474d-8cf0-538b47709956/1/cHjnVjWgncwD9iWoC_pVKyLjZiw.mft Manifest number: 0BAF Signing time: Thu 11 Dec 2025 22:01:08 +0000 Manifest this update: Thu 11 Dec 2025 22:01:08 +0000 Manifest next update: Fri 12 Dec 2025 22:01:08 +0000 Files and hashes: 1: cHjnVjWgncwD9iWoC_pVKyLjZiw.crl (hash: qRI4xlYJQKHmOOvgb8M+rXm0nSDoh1WgTEs/aF6slYo=) 2: iTTW-6mQkAe_ptbEUsV9bdJZhbM.roa (hash: IaZjtmRfbfeEiXlxoZz2N565FeKeU2Yttq1mO64u+IM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/ca17f7-c593-474d-8cf0-538b47709956/1/cHjnVjWgncwD9iWoC_pVKyLjZiw.crl rsync://rpki.ripe.net/repository/DEFAULT/f2/ca17f7-c593-474d-8cf0-538b47709956/1/cHjnVjWgncwD9iWoC_pVKyLjZiw.mft rsync://rpki.ripe.net/repository/DEFAULT/cHjnVjWgncwD9iWoC_pVKyLjZiw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 14:45:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0f:6e:a8:7d:4f:bb:3a:74:56:98:a9:7f:34:53:54:85 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7078e75635a09dcc03f625a80bfa552b22e3662c Validity Not Before: Dec 11 22:01:08 2025 GMT Not After : Dec 12 22:01:08 2025 GMT Subject: CN=45357ee270907b5c89201a5b6f36d561cea98339 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:28:b6:76:85:58:fc:2f:43:99:48:79:9a:be: d7:dd:8d:ed:55:e4:35:24:5a:af:9b:30:bf:c7:e0: 5b:6c:4c:5b:42:32:c6:06:24:37:73:25:dd:81:eb: 9d:91:86:7e:5d:7d:e4:90:cd:a0:80:dd:14:9b:a3: db:c5:de:64:d7:da:68:5c:6c:43:47:8c:9b:1d:09: a5:57:98:fb:d1:8a:e1:c4:90:b4:9e:77:0a:2a:dd: 87:60:46:d4:45:52:e4:a4:9f:45:fc:31:6a:1c:a1: 19:95:65:1e:7b:87:d1:02:76:dc:79:dd:cf:88:96: 5c:09:6a:4c:4b:9b:a3:4e:a5:4f:c5:1a:a3:d9:ec: f8:29:03:c7:9e:6f:62:80:22:1a:00:1b:c4:09:69: 4f:df:df:a1:ae:18:e0:c1:2a:36:4d:6c:b1:7b:aa: 8b:47:6e:77:b6:7e:a9:a8:02:e0:ba:09:16:d9:9a: c4:af:23:c7:8c:08:78:4f:8c:c8:b6:30:81:6f:97: 3c:86:9e:14:8f:dc:be:1e:e5:90:95:18:64:b6:3a: 96:e0:77:c8:5c:a5:5f:c0:c9:92:75:a8:d4:60:1e: be:e5:fe:05:49:b0:24:fa:10:c2:b5:2e:ef:fc:c4: d5:7c:bc:6d:1a:cd:4e:0a:45:4a:1f:c5:d4:5d:02: 8b:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:35:7E:E2:70:90:7B:5C:89:20:1A:5B:6F:36:D5:61:CE:A9:83:39 X509v3 Authority Key Identifier: keyid:70:78:E7:56:35:A0:9D:CC:03:F6:25:A8:0B:FA:55:2B:22:E3:66:2C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cHjnVjWgncwD9iWoC_pVKyLjZiw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/ca17f7-c593-474d-8cf0-538b47709956/1/cHjnVjWgncwD9iWoC_pVKyLjZiw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/ca17f7-c593-474d-8cf0-538b47709956/1/cHjnVjWgncwD9iWoC_pVKyLjZiw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a8:e0:1e:58:bd:43:50:73:71:49:03:6c:a4:8f:2b:d8:89:cc: 84:6d:ab:21:1e:b5:2d:15:77:0a:f5:97:18:a2:70:1b:84:0a: 58:7f:9e:5a:f7:84:9d:ae:be:94:ea:cc:d4:8a:1e:6f:16:d4: ce:b7:29:64:bc:cb:77:0f:b5:e0:5e:6c:6c:39:27:2f:a6:e9: 2f:03:2f:f3:90:f5:52:cd:38:5e:7e:cf:4b:e2:13:71:f0:c9: c6:48:ed:ae:f2:b1:6c:29:fe:ba:bc:01:f5:97:54:7c:e6:92: a7:35:82:79:c1:fc:83:9d:d8:90:0b:3e:33:32:c0:c3:02:e0: 36:95:06:c3:d3:a3:d4:ed:3f:c0:f6:92:33:62:28:44:1c:85: 54:c7:c1:36:4a:4e:67:be:3e:09:12:65:5c:c7:20:cb:66:c1: e7:4d:99:f3:4a:87:4d:03:d9:00:ef:b8:86:90:f5:7d:2d:4b: 94:0b:85:e5:d1:e1:2c:60:a5:9e:78:d9:a9:f2:01:8c:ff:68: fd:5a:83:19:f6:68:29:55:46:36:cb:7a:01:8c:07:63:d5:5d: 6b:66:9f:bf:73:53:7c:a5:08:f5:4a:b3:3b:51:02:85:b8:1a: fd:21:05:b2:34:f3:ab:02:c7:ef:58:b9:77:3d:2c:17:c2:15: 6d:e1:70:13 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsPbqh9T7s6dFaYqX80U1SFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcwNzhlNzU2MzVhMDlkY2MwM2Y2MjVhODBiZmE1NTJiMjJl MzY2MmMwHhcNMjUxMjExMjIwMTA4WhcNMjUxMjEyMjIwMTA4WjAzMTEwLwYDVQQD Eyg0NTM1N2VlMjcwOTA3YjVjODkyMDFhNWI2ZjM2ZDU2MWNlYTk4MzM5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyii2doVY/C9DmUh5mr7X3Y3tVeQ1 JFqvmzC/x+BbbExbQjLGBiQ3cyXdgeudkYZ+XX3kkM2ggN0Um6Pbxd5k19poXGxD R4ybHQmlV5j70YrhxJC0nncKKt2HYEbURVLkpJ9F/DFqHKEZlWUee4fRAnbced3P iJZcCWpMS5ujTqVPxRqj2ez4KQPHnm9igCIaABvECWlP39+hrhjgwSo2TWyxe6qL R253tn6pqALgugkW2ZrEryPHjAh4T4zItjCBb5c8hp4Uj9y+HuWQlRhktjqW4HfI XKVfwMmSdajUYB6+5f4FSbAk+hDCtS7v/MTVfLxtGs1OCkVKH8XUXQKLNQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEU1fuJwkHtciSAaW2821WHOqYM5MB8GA1UdIwQY MBaAFHB451Y1oJ3MA/YlqAv6VSsi42YsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY0hqblZqV2duY3dEOWlXb0NfcFZLeUxqWml3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMi9jYTE3ZjctYzU5My00NzRkLThjZjAt NTM4YjQ3NzA5OTU2LzEvY0hqblZqV2duY3dEOWlXb0NfcFZLeUxqWml3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMi9jYTE3ZjctYzU5My00NzRkLThjZjAtNTM4YjQ3NzA5OTU2 LzEvY0hqblZqV2duY3dEOWlXb0NfcFZLeUxqWml3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqOAeWL1D UHNxSQNspI8r2InMhG2rIR61LRV3CvWXGKJwG4QKWH+eWveEna6+lOrM1IoebxbU zrcpZLzLdw+14F5sbDknL6bpLwMv85D1Us04Xn7PS+ITcfDJxkjtrvKxbCn+urwB 9ZdUfOaSpzWCecH8g53YkAs+MzLAwwLgNpUGw9Oj1O0/wPaSM2IoRByFVMfBNkpO Z74+CRJlXMcgy2bB502Z80qHTQPZAO+4hpD1fS1LlAuF5dHhLGClnnjZqfIBjP9o /VqDGfZoKVVGNst6AYwHY9Vda2afv3NTfKUI9UqzO1EChbga/SEFsjTzqwLH71i5 dz0sF8IVbeFwEw== -----END CERTIFICATE-----Generated at Fri Dec 12 00:23:27 2025 by rpki-client