This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/23dc61-7e9d-40b3-91b6-46bd7d794fb6/1/cLGQ1viaQ0zOXLjA1LOKFmne-1k.mft File: cLGQ1viaQ0zOXLjA1LOKFmne-1k.mft (raw, json) Hash identifier: N2WHAJw1l4X47y2EDrR+KrOFFjmJuULYAokiqivx++M= Subject key identifier: 56:56:D0:2A:47:E9:F8:DE:A1:E1:F1:3F:5B:50:EE:B9:DA:9D:9D:7B Authority key identifier: 70:B1:90:D6:F8:9A:43:4C:CE:5C:B8:C0:D4:B3:8A:16:69:DE:FB:59 Certificate issuer: /CN=70b190d6f89a434cce5cb8c0d4b38a1669defb59 Certificate serial: 019B3C7F9BCDE272BE2BF6BAF99122A0326C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cLGQ1viaQ0zOXLjA1LOKFmne-1k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/23dc61-7e9d-40b3-91b6-46bd7d794fb6/1/cLGQ1viaQ0zOXLjA1LOKFmne-1k.mft Manifest number: 13D1 Signing time: Sat 20 Dec 2025 16:02:34 +0000 Manifest this update: Sat 20 Dec 2025 16:02:34 +0000 Manifest next update: Sun 21 Dec 2025 16:02:34 +0000 Files and hashes: 1: Pmv8pM8XqssRTrBIwYfMIrBu2co.roa (hash: v4JQsWfqUQF/aizb6/kkH5lzSW7tzkWIy4FJVzppxAI=) 2: RQjHthweEF9-820WAQ_PQzmnlEM.roa (hash: nBMPnR4O6VvmGYLIOUpQxt7mk0o9gXGO9uw/qf7b94A=) 3: Wwvcf_CdHRy8gkrOQZUQURuseiI.roa (hash: xkPyebxyoo94+1+QeBv80ewSsDDTwjJTGd/zo7NXJ5g=) 4: cLGQ1viaQ0zOXLjA1LOKFmne-1k.crl (hash: XMpMTuU1rzQ5gk0tl8wykN0qPQDLLHc10Dhg4XTlRtQ=) 5: lVsIvIm2siK76Iwlc1JEpwaFSPI.roa (hash: TUnieu9UOgS3hw0oaMGHMZ2FiYRQqrhlAMNc6BYERoE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/23dc61-7e9d-40b3-91b6-46bd7d794fb6/1/cLGQ1viaQ0zOXLjA1LOKFmne-1k.crl rsync://rpki.ripe.net/repository/DEFAULT/0d/23dc61-7e9d-40b3-91b6-46bd7d794fb6/1/cLGQ1viaQ0zOXLjA1LOKFmne-1k.mft rsync://rpki.ripe.net/repository/DEFAULT/cLGQ1viaQ0zOXLjA1LOKFmne-1k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:7f:9b:cd:e2:72:be:2b:f6:ba:f9:91:22:a0:32:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=70b190d6f89a434cce5cb8c0d4b38a1669defb59 Validity Not Before: Dec 20 16:02:34 2025 GMT Not After : Dec 21 16:02:34 2025 GMT Subject: CN=5656d02a47e9f8dea1e1f13f5b50eeb9da9d9d7b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:96:5b:8c:fd:30:bb:87:53:60:d4:57:69:e3: ba:c0:eb:ed:9c:d0:4a:ae:af:1d:76:d6:9b:3d:3d: 0d:da:d5:ec:b1:1e:a2:1b:7c:7b:f2:8a:6a:20:2b: 43:30:67:ab:52:1f:6a:88:0f:63:0f:d8:b5:d2:43: 73:80:2f:a4:f1:36:be:e4:58:0f:af:01:8d:a0:a3: 30:13:32:eb:93:be:4c:60:37:46:0b:0a:ab:4c:e5: cb:bd:0d:65:ae:8d:ee:cd:51:cd:8a:7f:6a:86:ce: b1:33:4f:f4:82:c1:72:16:8c:ca:09:49:b4:20:e2: bc:af:d5:ba:1c:e8:58:29:f5:f6:cb:b6:37:a2:59: bc:bd:8c:ea:a6:e4:2d:0a:0b:1f:37:f5:0e:d9:06: 84:dc:dc:e6:92:01:13:9b:db:56:5a:53:5b:0c:ec: f0:74:6b:71:2c:57:4d:3e:d3:4d:48:8a:63:75:86: c9:44:07:ba:19:fb:23:a1:7d:11:d2:b3:38:a6:2c: 1b:10:5a:30:cf:9e:78:05:67:39:1b:e2:81:bd:f9: d5:e5:17:0e:19:27:bf:02:c4:9b:b3:36:bd:d0:60: 3b:0e:b1:fb:f8:c7:fd:6a:1e:61:c8:bf:23:d9:be: 25:b5:6d:c8:76:1b:59:fb:92:6f:2f:f2:22:1b:37: 3a:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:56:D0:2A:47:E9:F8:DE:A1:E1:F1:3F:5B:50:EE:B9:DA:9D:9D:7B X509v3 Authority Key Identifier: keyid:70:B1:90:D6:F8:9A:43:4C:CE:5C:B8:C0:D4:B3:8A:16:69:DE:FB:59 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cLGQ1viaQ0zOXLjA1LOKFmne-1k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/23dc61-7e9d-40b3-91b6-46bd7d794fb6/1/cLGQ1viaQ0zOXLjA1LOKFmne-1k.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/23dc61-7e9d-40b3-91b6-46bd7d794fb6/1/cLGQ1viaQ0zOXLjA1LOKFmne-1k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8f:68:26:52:26:b4:bb:20:ee:e3:a7:47:ce:10:e4:31:08:c5: 40:b2:e9:03:30:1a:ac:a1:3a:df:d8:7e:6c:63:07:ec:e0:86: fa:56:75:49:5e:2a:14:fb:3a:d6:db:65:71:5e:f3:96:09:64: 28:b9:7d:b0:75:9f:3a:ef:dc:f4:1b:a8:ac:ea:19:09:c0:a2: 90:78:55:1d:ec:fd:d0:c2:5c:a9:67:d9:ed:0d:d2:b7:94:19: 91:79:c4:d1:5f:a3:97:c0:e0:35:66:23:0d:3c:8a:79:d9:0d: 97:9f:48:f4:b0:a5:ca:6f:c0:84:04:81:96:fd:d8:3d:92:82: 36:00:60:e7:56:bd:05:0e:9b:24:71:e4:ad:a1:d4:3c:ab:a6: c3:2f:78:ab:21:cf:ca:1b:7e:b5:8b:fb:05:b0:44:d6:c7:89: a3:76:72:b6:7e:33:aa:c0:cb:e3:03:88:83:e7:8e:bc:71:e4: 25:9c:bf:7c:75:0a:5e:06:97:d4:91:92:b5:45:ee:a0:a7:9d: a6:11:23:83:34:08:0d:cf:52:aa:e2:35:9e:b5:0d:fd:84:02: 24:fe:dc:18:43:dc:27:03:d5:5a:b3:6b:5d:71:b9:b3:84:2e: 95:a1:12:55:83:00:e3:14:9d:ec:52:c6:f5:bf:c9:2c:fd:42: c4:32:74:6d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs8f5vN4nK+K/a6+ZEioDJsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcwYjE5MGQ2Zjg5YTQzNGNjZTVjYjhjMGQ0YjM4YTE2Njlk ZWZiNTkwHhcNMjUxMjIwMTYwMjM0WhcNMjUxMjIxMTYwMjM0WjAzMTEwLwYDVQQD Eyg1NjU2ZDAyYTQ3ZTlmOGRlYTFlMWYxM2Y1YjUwZWViOWRhOWQ5ZDdiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4JZbjP0wu4dTYNRXaeO6wOvtnNBK rq8ddtabPT0N2tXssR6iG3x78opqICtDMGerUh9qiA9jD9i10kNzgC+k8Ta+5FgP rwGNoKMwEzLrk75MYDdGCwqrTOXLvQ1lro3uzVHNin9qhs6xM0/0gsFyFozKCUm0 IOK8r9W6HOhYKfX2y7Y3olm8vYzqpuQtCgsfN/UO2QaE3NzmkgETm9tWWlNbDOzw dGtxLFdNPtNNSIpjdYbJRAe6GfsjoX0R0rM4piwbEFowz554BWc5G+KBvfnV5RcO GSe/AsSbsza90GA7DrH7+Mf9ah5hyL8j2b4ltW3IdhtZ+5JvL/IiGzc6iQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFZW0CpH6fjeoeHxP1tQ7rnanZ17MB8GA1UdIwQY MBaAFHCxkNb4mkNMzly4wNSzihZp3vtZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY0xHUTF2aWFRMHpPWExqQTFMT0tGbW5lLTFrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZC8yM2RjNjEtN2U5ZC00MGIzLTkxYjYt NDZiZDdkNzk0ZmI2LzEvY0xHUTF2aWFRMHpPWExqQTFMT0tGbW5lLTFrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZC8yM2RjNjEtN2U5ZC00MGIzLTkxYjYtNDZiZDdkNzk0ZmI2 LzEvY0xHUTF2aWFRMHpPWExqQTFMT0tGbW5lLTFrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAj2gmUia0 uyDu46dHzhDkMQjFQLLpAzAarKE639h+bGMH7OCG+lZ1SV4qFPs61ttlcV7zlglk KLl9sHWfOu/c9BuorOoZCcCikHhVHez90MJcqWfZ7Q3St5QZkXnE0V+jl8DgNWYj DTyKedkNl59I9LClym/AhASBlv3YPZKCNgBg51a9BQ6bJHHkraHUPKumwy94qyHP yht+tYv7BbBE1seJo3Zytn4zqsDL4wOIg+eOvHHkJZy/fHUKXgaX1JGStUXuoKed phEjgzQIDc9SquI1nrUN/YQCJP7cGEPcJwPVWrNrXXG5s4QulaESVYMA4xSd7FLG 9b/JLP1CxDJ0bQ== -----END CERTIFICATE-----Generated at Sat Dec 20 22:35:18 2025 by rpki-client