This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/0c6f47-4713-4471-b08f-a4213c93f1f7/1/cG06u7R4t07yre-bt8QzbjQRHVE.mft File: cG06u7R4t07yre-bt8QzbjQRHVE.mft (raw, json) Hash identifier: 7q+UnT2itk0VxtnGRfCVcb63Ps72oRjT1rppuCSi8v8= Subject key identifier: BE:14:CA:14:E4:37:9C:1C:7D:5F:02:81:2F:B4:27:4D:1F:CF:CE:F7 Authority key identifier: 70:6D:3A:BB:B4:78:B7:4E:F2:AD:EF:9B:B7:C4:33:6E:34:11:1D:51 Certificate issuer: /CN=706d3abbb478b74ef2adef9bb7c4336e34111d51 Certificate serial: 019B3A5867A70D0CDB813B230390CEC850E5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cG06u7R4t07yre-bt8QzbjQRHVE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/0c6f47-4713-4471-b08f-a4213c93f1f7/1/cG06u7R4t07yre-bt8QzbjQRHVE.mft Manifest number: 116E Signing time: Sat 20 Dec 2025 06:00:30 +0000 Manifest this update: Sat 20 Dec 2025 06:00:30 +0000 Manifest next update: Sun 21 Dec 2025 06:00:30 +0000 Files and hashes: 1: 1-DdA-do2aUnfFDViNUxhUDqFzbE.roa (hash: BKYK/ZWsPHxxlNPF0PEHOjs0OjsXKAGuBICEBJN+sBU=) 2: PquNLopkqyd1FPkE6lVSuFZAhHk.roa (hash: cueg/ECXevtubCCHF8NReS6so4hgNR13sPfAmLWyFN8=) 3: SKahOuz63VxzF7gsfLLtP4-dwsQ.roa (hash: tgpfEWxbjIJhXJgvlYzjtjMs+efIHb2DWjDR4Pl22YM=) 4: Y87LNPXwYxzM1KbDSMEARR-tLxU.roa (hash: Hc9P0WIM13wsCCDXXb34wAtaFccE9wg34ig8vLvBeGY=) 5: cG06u7R4t07yre-bt8QzbjQRHVE.crl (hash: X113Eb4jUhcyh6kpIalaXlS5i5TlOHTGXJc0kl06k8E=) 6: dj7XdZh5KETFPQnDms3UxXnRXC4.roa (hash: EpSZ3YEAtJm35+lis2XvA9ik+aj1Kz53yBaF/oXDmdQ=) 7: nq4bzy4h6lHvAq7WfQfvLT3Lcxs.roa (hash: AUW0hCwolQea98JTwSo4ol+MpnG7tQ7XKxKB7k262zg=) 8: pnzGJ4U9axy4lLwZnaehAwpRVaQ.roa (hash: rLQUf7uZTpB79YDcuBoB9yRmzU3aEUgIa9XP7frMy3M=) 9: rIEcC1yrrtWRE_-aC4aiNaHlF0w.roa (hash: RIIBfBGrMJNxseu/gjjvLy+xu6nPcaesVv59+v9lv30=) 10: wF16Isbo0PTlUouJULLf9fQs6Jw.roa (hash: ujnMHiwDZPQLz7IHlGLCJr2Hydzywx1acJmP/oG/nU8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/0c6f47-4713-4471-b08f-a4213c93f1f7/1/cG06u7R4t07yre-bt8QzbjQRHVE.crl rsync://rpki.ripe.net/repository/DEFAULT/07/0c6f47-4713-4471-b08f-a4213c93f1f7/1/cG06u7R4t07yre-bt8QzbjQRHVE.mft rsync://rpki.ripe.net/repository/DEFAULT/cG06u7R4t07yre-bt8QzbjQRHVE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 06:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3a:58:67:a7:0d:0c:db:81:3b:23:03:90:ce:c8:50:e5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=706d3abbb478b74ef2adef9bb7c4336e34111d51 Validity Not Before: Dec 20 06:00:30 2025 GMT Not After : Dec 21 06:00:30 2025 GMT Subject: CN=be14ca14e4379c1c7d5f02812fb4274d1fcfcef7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:ef:a3:be:3b:fa:65:e7:99:e5:c0:cf:ca:29: 34:a8:63:2d:c4:dc:57:96:ec:1a:12:15:49:72:c4: 24:68:42:08:2f:ec:48:9c:17:8d:32:67:be:bf:6f: ca:00:31:2d:b3:2d:31:d1:2e:39:2d:6b:81:df:5f: a0:e3:11:dc:1f:2a:10:3e:06:49:ac:00:4c:8e:ce: 1d:76:48:b5:7f:00:fb:99:0c:e9:7f:8e:18:3c:73: ed:77:92:17:6b:b6:9f:82:60:19:05:88:39:ef:74: 16:32:a3:34:b6:a2:72:1a:d2:7f:bd:3c:fb:c6:e4: 4f:8c:35:44:98:f4:e8:d9:36:2a:31:ce:7b:e2:55: 71:86:85:f6:ba:a5:44:ad:e7:24:e6:73:c8:e6:b6: a5:a7:5c:c2:d3:d1:8d:0b:5a:8f:8a:e0:81:7f:76: 29:fd:cf:1b:b7:46:a6:c3:c8:a2:20:0a:f2:de:ee: c8:2e:21:14:56:b5:99:62:be:36:35:06:96:c7:ce: 9e:f8:e7:69:57:e8:ed:a9:c1:c8:4b:72:07:59:f1: 17:11:9e:64:87:02:a0:c2:24:5c:ed:63:05:e4:0d: c1:86:ec:a1:dc:7a:aa:07:9e:f6:9a:93:4b:ae:09: 75:49:f3:98:fe:71:5a:de:03:c0:94:26:d1:cb:0b: a9:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:14:CA:14:E4:37:9C:1C:7D:5F:02:81:2F:B4:27:4D:1F:CF:CE:F7 X509v3 Authority Key Identifier: keyid:70:6D:3A:BB:B4:78:B7:4E:F2:AD:EF:9B:B7:C4:33:6E:34:11:1D:51 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cG06u7R4t07yre-bt8QzbjQRHVE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/0c6f47-4713-4471-b08f-a4213c93f1f7/1/cG06u7R4t07yre-bt8QzbjQRHVE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/07/0c6f47-4713-4471-b08f-a4213c93f1f7/1/cG06u7R4t07yre-bt8QzbjQRHVE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 40:c5:f0:10:13:e2:26:ff:37:14:8b:14:6a:1a:f9:39:76:59: 6c:2f:e1:aa:3f:c8:e0:97:78:78:78:f8:fd:72:ff:46:2c:d5: 02:a8:08:91:88:60:4e:11:22:5d:b1:7a:b3:49:10:e0:dd:c4: e2:2b:65:82:64:c2:f8:ab:21:f3:22:37:c3:09:d2:30:85:d2: 9a:66:57:2d:ea:31:fe:c0:a6:86:26:c5:60:9b:29:2e:76:1d: 73:d5:83:89:73:98:c6:43:63:1b:96:d6:d1:a9:1e:b4:96:12: 86:e8:4a:b8:43:6b:8d:a6:49:64:f7:9e:c2:ae:1f:08:37:07: d7:ed:be:f9:92:e8:ad:c4:4b:6d:48:aa:63:ea:66:6a:16:bc: 03:50:33:d9:d7:35:61:f3:a4:de:ae:eb:e0:51:82:9e:4f:75: 67:ad:1b:e3:4f:5b:01:e3:71:3e:fd:5f:32:33:4a:f7:80:f1: ae:9d:d1:7d:d5:62:fc:c6:99:f5:81:cf:f4:ed:6c:f6:29:02: 06:3b:a6:d3:3b:ea:dc:10:3a:6e:60:fc:1f:78:b4:c7:a3:ec: 1e:c7:62:1d:49:99:b7:ae:d7:68:ae:08:51:48:aa:1d:fd:2d: 3c:ba:13:36:96:c6:fe:6e:7b:53:ac:82:4f:7e:de:d7:37:f6: bf:fa:3e:f1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs6WGenDQzbgTsjA5DOyFDlMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcwNmQzYWJiYjQ3OGI3NGVmMmFkZWY5YmI3YzQzMzZlMzQx MTFkNTEwHhcNMjUxMjIwMDYwMDMwWhcNMjUxMjIxMDYwMDMwWjAzMTEwLwYDVQQD EyhiZTE0Y2ExNGU0Mzc5YzFjN2Q1ZjAyODEyZmI0Mjc0ZDFmY2ZjZWY3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv++jvjv6ZeeZ5cDPyik0qGMtxNxX luwaEhVJcsQkaEIIL+xInBeNMme+v2/KADEtsy0x0S45LWuB31+g4xHcHyoQPgZJ rABMjs4ddki1fwD7mQzpf44YPHPtd5IXa7afgmAZBYg573QWMqM0tqJyGtJ/vTz7 xuRPjDVEmPTo2TYqMc574lVxhoX2uqVEreck5nPI5ralp1zC09GNC1qPiuCBf3Yp /c8bt0amw8iiIAry3u7ILiEUVrWZYr42NQaWx86e+OdpV+jtqcHIS3IHWfEXEZ5k hwKgwiRc7WMF5A3Bhuyh3HqqB572mpNLrgl1SfOY/nFa3gPAlCbRywupzwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFL4UyhTkN5wcfV8CgS+0J00fz873MB8GA1UdIwQY MBaAFHBtOru0eLdO8q3vm7fEM240ER1RMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY0cwNnU3UjR0MDd5cmUtYnQ4UXpialFSSFZFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNy8wYzZmNDctNDcxMy00NDcxLWIwOGYt YTQyMTNjOTNmMWY3LzEvY0cwNnU3UjR0MDd5cmUtYnQ4UXpialFSSFZFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNy8wYzZmNDctNDcxMy00NDcxLWIwOGYtYTQyMTNjOTNmMWY3 LzEvY0cwNnU3UjR0MDd5cmUtYnQ4UXpialFSSFZFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQMXwEBPi Jv83FIsUahr5OXZZbC/hqj/I4Jd4eHj4/XL/RizVAqgIkYhgThEiXbF6s0kQ4N3E 4itlgmTC+Ksh8yI3wwnSMIXSmmZXLeox/sCmhibFYJspLnYdc9WDiXOYxkNjG5bW 0aketJYShuhKuENrjaZJZPeewq4fCDcH1+2++ZLorcRLbUiqY+pmaha8A1Az2dc1 YfOk3q7r4FGCnk91Z60b409bAeNxPv1fMjNK94Dxrp3RfdVi/MaZ9YHP9O1s9ikC Bjum0zvq3BA6bmD8H3i0x6PsHsdiHUmZt67XaK4IUUiqHf0tPLoTNpbG/m57U6yC T37e1zf2v/o+8Q== -----END CERTIFICATE-----Generated at Sat Dec 20 12:56:13 2025 by rpki-client