This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/a600f5-9428-485c-b42e-64de34f1f464/1/ctG1y2-wQjmGhx7wHmY_Nlzg2JU.mft File: ctG1y2-wQjmGhx7wHmY_Nlzg2JU.mft (raw, json) Hash identifier: yBV7+pb6s+ZorGrujhfg1FokxBJY9vWzE8KastCTtc4= Subject key identifier: 94:A5:E9:24:01:11:5D:68:B9:B6:DD:04:A6:8C:8F:6D:27:C5:C0:B5 Authority key identifier: 72:D1:B5:CB:6F:B0:42:39:86:87:1E:F0:1E:66:3F:36:5C:E0:D8:95 Certificate issuer: /CN=72d1b5cb6fb0423986871ef01e663f365ce0d895 Certificate serial: 019B191696F1C85CEA7065218352A33DA506 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ctG1y2-wQjmGhx7wHmY_Nlzg2JU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/a600f5-9428-485c-b42e-64de34f1f464/1/ctG1y2-wQjmGhx7wHmY_Nlzg2JU.mft Manifest number: 1776 Signing time: Sat 13 Dec 2025 19:01:09 +0000 Manifest this update: Sat 13 Dec 2025 19:01:09 +0000 Manifest next update: Sun 14 Dec 2025 19:01:09 +0000 Files and hashes: 1: HdvygVOruYbTXwlr1NLClydlYqo.roa (hash: sMi8mYGDSncYX0REgUe1LpnyiMZD3xdRzWB6T1gaSas=) 2: ctG1y2-wQjmGhx7wHmY_Nlzg2JU.crl (hash: /m6o9MrNYadbn1Y1ThrMntrIKbws2gq9fPojy+1Xpn8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/a600f5-9428-485c-b42e-64de34f1f464/1/ctG1y2-wQjmGhx7wHmY_Nlzg2JU.crl rsync://rpki.ripe.net/repository/DEFAULT/fa/a600f5-9428-485c-b42e-64de34f1f464/1/ctG1y2-wQjmGhx7wHmY_Nlzg2JU.mft rsync://rpki.ripe.net/repository/DEFAULT/ctG1y2-wQjmGhx7wHmY_Nlzg2JU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Dec 2025 17:47:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:19:16:96:f1:c8:5c:ea:70:65:21:83:52:a3:3d:a5:06 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=72d1b5cb6fb0423986871ef01e663f365ce0d895 Validity Not Before: Dec 13 19:01:09 2025 GMT Not After : Dec 14 19:01:09 2025 GMT Subject: CN=94a5e92401115d68b9b6dd04a68c8f6d27c5c0b5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:04:2f:39:fc:f7:2e:47:29:cb:50:70:d1:63: 2c:20:2b:ba:91:a1:b7:18:fe:07:f7:15:81:0d:d2: 06:3d:c4:67:79:81:2d:6f:85:82:90:a6:e1:d3:41: 2f:32:28:ee:76:9e:57:bd:d1:dd:97:29:4b:95:ee: d6:84:1f:3f:f3:1a:f1:dd:8e:85:61:1d:ed:b2:a8: 64:14:8c:ef:7a:d7:79:c1:79:32:16:73:64:f6:39: ce:9f:10:7d:34:3b:0b:8b:38:85:10:7e:78:13:0f: 85:2b:b7:66:83:0b:28:10:79:20:f8:50:02:fc:61: 0a:c9:5d:14:bd:1c:8d:63:24:6d:40:ac:2e:1a:00: 07:dc:11:28:0c:3a:7a:4f:4d:0b:d7:1e:86:9a:03: 36:88:fa:c8:db:70:91:1b:4d:cd:1c:15:ef:f6:84: 3d:64:a4:3b:ae:71:d6:9f:2d:49:40:e0:3a:4b:b3: 01:37:6e:7d:4c:e2:f4:c2:ba:d2:8e:85:2e:5c:2f: 9a:fb:b1:be:de:e2:f2:bd:ab:40:07:d1:58:ec:6f: 02:7a:25:d9:14:6e:c8:38:d7:76:19:45:83:97:38: 1c:4c:61:b4:9c:f8:69:c3:35:7e:0c:b6:93:ba:c8: 79:07:fa:91:b5:4c:f9:7b:ab:23:01:f1:6a:7a:73: eb:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:A5:E9:24:01:11:5D:68:B9:B6:DD:04:A6:8C:8F:6D:27:C5:C0:B5 X509v3 Authority Key Identifier: keyid:72:D1:B5:CB:6F:B0:42:39:86:87:1E:F0:1E:66:3F:36:5C:E0:D8:95 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ctG1y2-wQjmGhx7wHmY_Nlzg2JU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/a600f5-9428-485c-b42e-64de34f1f464/1/ctG1y2-wQjmGhx7wHmY_Nlzg2JU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/a600f5-9428-485c-b42e-64de34f1f464/1/ctG1y2-wQjmGhx7wHmY_Nlzg2JU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 49:f0:d3:24:63:19:54:a4:c2:47:b5:25:4e:d5:14:b4:c2:c3: 78:55:22:7a:93:89:06:b7:2e:1e:f6:18:db:4c:b3:aa:85:f9: 55:e3:88:d6:2d:0b:e5:ca:13:7e:b7:3b:00:56:f9:01:ce:43: a2:c5:9d:a2:37:7a:b6:2b:78:bd:8b:d8:13:53:0a:a6:d8:7b: 0c:2b:a9:38:9c:ee:9a:37:61:55:86:bb:42:92:bd:b9:0c:8f: 96:02:55:69:6c:6f:23:4e:74:a1:a4:dc:14:ca:17:89:87:81: cc:50:56:a4:aa:c6:80:e7:92:b5:46:f0:f4:5a:34:dd:a8:04: 6e:4f:26:a8:d1:ec:9d:c1:ad:a9:c6:1c:eb:55:24:b8:a7:0b: ab:17:0d:d9:21:69:00:a2:f1:4c:04:c1:e6:81:67:f6:b1:61: e6:a0:c5:55:88:e0:dc:39:86:13:c6:67:b1:5b:39:87:5a:99: 6e:ff:3d:d6:ae:33:6e:bf:7c:9f:7b:44:ba:5e:3b:0d:e1:ce: 49:11:96:e7:3c:d5:17:21:e1:44:a9:13:2c:ae:d1:89:ca:eb: 65:27:56:fa:f2:cd:e4:f8:2e:c3:02:77:22:c8:0f:6e:91:42: 10:95:c7:71:d9:b8:90:c6:7e:bc:28:fc:04:ee:e1:5c:47:fb: d3:ce:71:16 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsZFpbxyFzqcGUhg1KjPaUGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcyZDFiNWNiNmZiMDQyMzk4Njg3MWVmMDFlNjYzZjM2NWNl MGQ4OTUwHhcNMjUxMjEzMTkwMTA5WhcNMjUxMjE0MTkwMTA5WjAzMTEwLwYDVQQD Eyg5NGE1ZTkyNDAxMTE1ZDY4YjliNmRkMDRhNjhjOGY2ZDI3YzVjMGI1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwwQvOfz3Lkcpy1Bw0WMsICu6kaG3 GP4H9xWBDdIGPcRneYEtb4WCkKbh00EvMijudp5XvdHdlylLle7WhB8/8xrx3Y6F YR3tsqhkFIzvetd5wXkyFnNk9jnOnxB9NDsLiziFEH54Ew+FK7dmgwsoEHkg+FAC /GEKyV0UvRyNYyRtQKwuGgAH3BEoDDp6T00L1x6GmgM2iPrI23CRG03NHBXv9oQ9 ZKQ7rnHWny1JQOA6S7MBN259TOL0wrrSjoUuXC+a+7G+3uLyvatAB9FY7G8CeiXZ FG7IONd2GUWDlzgcTGG0nPhpwzV+DLaTush5B/qRtUz5e6sjAfFqenPr3wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJSl6SQBEV1oubbdBKaMj20nxcC1MB8GA1UdIwQY MBaAFHLRtctvsEI5hoce8B5mPzZc4NiVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY3RHMXkyLXdRam1HaHg3d0htWV9ObHpnMkpVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS9hNjAwZjUtOTQyOC00ODVjLWI0MmUt NjRkZTM0ZjFmNDY0LzEvY3RHMXkyLXdRam1HaHg3d0htWV9ObHpnMkpVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYS9hNjAwZjUtOTQyOC00ODVjLWI0MmUtNjRkZTM0ZjFmNDY0 LzEvY3RHMXkyLXdRam1HaHg3d0htWV9ObHpnMkpVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASfDTJGMZ VKTCR7UlTtUUtMLDeFUiepOJBrcuHvYY20yzqoX5VeOI1i0L5coTfrc7AFb5Ac5D osWdojd6tit4vYvYE1MKpth7DCupOJzumjdhVYa7QpK9uQyPlgJVaWxvI050oaTc FMoXiYeBzFBWpKrGgOeStUbw9Fo03agEbk8mqNHsncGtqcYc61UkuKcLqxcN2SFp AKLxTATB5oFn9rFh5qDFVYjg3DmGE8ZnsVs5h1qZbv891q4zbr98n3tEul47DeHO SRGW5zzVFyHhRKkTLK7RicrrZSdW+vLN5PguwwJ3IsgPbpFCEJXHcdm4kMZ+vCj8 BO7hXEf7085xFg== -----END CERTIFICATE-----Generated at Sun Dec 14 01:05:52 2025 by rpki-client