This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/3298e3-9a50-4cfb-84e6-d137ade166d1/1/cG1kE0-qdGKTwDhO2sA3GVDzsiQ.mft File: cG1kE0-qdGKTwDhO2sA3GVDzsiQ.mft (raw, json) Hash identifier: OaK24Scnv4PVXvTg/G8u5Cb6Er3WEkX6ht7orpoCdl8= Subject key identifier: BB:5A:4A:11:9E:14:BD:6A:33:FA:3C:9F:70:4A:AE:FB:85:E1:46:57 Authority key identifier: 70:6D:64:13:4F:AA:74:62:93:C0:38:4E:DA:C0:37:19:50:F3:B2:24 Certificate issuer: /CN=706d64134faa746293c0384edac0371950f3b224 Certificate serial: 019B3CEC4F113806425EFD158EC37FD93C52 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cG1kE0-qdGKTwDhO2sA3GVDzsiQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/3298e3-9a50-4cfb-84e6-d137ade166d1/1/cG1kE0-qdGKTwDhO2sA3GVDzsiQ.mft Manifest number: 1789 Signing time: Sat 20 Dec 2025 18:01:18 +0000 Manifest this update: Sat 20 Dec 2025 18:01:18 +0000 Manifest next update: Sun 21 Dec 2025 18:01:18 +0000 Files and hashes: 1: BGPtN6UeNB6gxVs3merGZGk1kns.roa (hash: hrSuHlNxsE/yi+6e5xU/QtKRxyKAm/eD9FqzGlKPQGg=) 2: K97zp34OToUCQrbZPgRq8uelj_I.roa (hash: fJ0zhSoG7arl9EOrthec9ouC+q/z09fZHsqxXKN/jaE=) 3: UPgAt10tmqeiB0ExLwRVr2_cA2k.roa (hash: PAF5GVkw69ZCI0wlFe0kfCLPkukOPDOR6TAG9hbIZ1k=) 4: cG1kE0-qdGKTwDhO2sA3GVDzsiQ.crl (hash: FHnrFkaeDk2E7Y2k8Cb5yNe+jItWnkqcTD8iM8rlMgg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/3298e3-9a50-4cfb-84e6-d137ade166d1/1/cG1kE0-qdGKTwDhO2sA3GVDzsiQ.crl rsync://rpki.ripe.net/repository/DEFAULT/0d/3298e3-9a50-4cfb-84e6-d137ade166d1/1/cG1kE0-qdGKTwDhO2sA3GVDzsiQ.mft rsync://rpki.ripe.net/repository/DEFAULT/cG1kE0-qdGKTwDhO2sA3GVDzsiQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 18:01:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:ec:4f:11:38:06:42:5e:fd:15:8e:c3:7f:d9:3c:52 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=706d64134faa746293c0384edac0371950f3b224 Validity Not Before: Dec 20 18:01:18 2025 GMT Not After : Dec 21 18:01:18 2025 GMT Subject: CN=bb5a4a119e14bd6a33fa3c9f704aaefb85e14657 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:6e:65:c9:87:8e:aa:0c:9b:8f:58:01:11:a5: 9b:5d:75:81:08:52:70:ed:b4:dc:ae:f8:5e:af:ff: 5e:cc:02:1b:f8:bf:95:62:31:bd:68:45:02:46:70: bf:d2:13:c2:9d:32:2d:1b:46:52:ee:06:9b:96:4f: 3a:da:58:a8:26:9b:93:96:18:e3:7e:45:f8:da:a1: 2c:0e:d3:23:88:d9:9c:36:49:fc:27:3a:42:d1:d9: 35:14:7e:0a:3c:57:d6:f3:de:1c:6b:a3:53:29:89: c8:5d:9b:fc:9e:6a:65:db:04:4a:46:77:3c:54:ca: f2:97:96:5b:28:4b:39:33:1c:8e:c4:f0:34:3b:59: 12:f2:97:aa:a4:fd:24:f6:0f:3d:e4:4e:ed:8a:6d: 8f:99:b1:82:d2:53:d2:4f:cf:fb:53:c2:c6:d2:c2: f8:c6:23:77:31:16:21:ba:95:0c:2d:d2:ef:33:b4: 86:ef:a6:26:4d:bd:9e:e3:ae:00:e1:ff:81:45:ee: b7:44:78:46:c6:7a:f1:04:56:ef:44:54:9c:6a:3e: 58:f0:6b:ec:96:4f:d5:b2:6f:99:38:db:91:63:3f: 14:87:31:73:3a:37:94:3b:e2:11:3f:e8:1f:4d:35: 75:0d:9c:ec:e2:09:6f:ac:d8:db:0e:7f:cb:56:04: 88:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:5A:4A:11:9E:14:BD:6A:33:FA:3C:9F:70:4A:AE:FB:85:E1:46:57 X509v3 Authority Key Identifier: keyid:70:6D:64:13:4F:AA:74:62:93:C0:38:4E:DA:C0:37:19:50:F3:B2:24 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cG1kE0-qdGKTwDhO2sA3GVDzsiQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/3298e3-9a50-4cfb-84e6-d137ade166d1/1/cG1kE0-qdGKTwDhO2sA3GVDzsiQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/3298e3-9a50-4cfb-84e6-d137ade166d1/1/cG1kE0-qdGKTwDhO2sA3GVDzsiQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 07:90:a8:65:d8:c4:6d:18:6d:8b:c0:4c:96:44:1a:ea:26:fd: 45:28:e0:8b:a5:70:30:fc:c0:6e:0b:ff:f0:0c:97:6d:51:46: 6b:5f:c4:5d:a3:a6:ad:1b:8d:15:cc:34:a1:57:54:a6:91:2e: b4:4f:94:df:1f:c2:13:d4:0b:ab:e0:46:a3:d1:9d:d4:16:e2: 53:85:11:9d:c3:24:a1:c0:d4:20:55:ea:d6:2c:c5:0c:11:f8: 21:1c:c6:ca:15:fd:ea:4a:71:bd:2a:4e:41:ef:4b:46:45:24: 88:7d:cb:48:0a:cd:e3:50:33:6e:48:9b:d2:d2:10:9e:6b:7e: 6b:a2:82:06:73:86:8b:cb:c6:b0:4d:9c:97:71:3b:5a:79:2a: 57:81:56:4e:bb:a1:36:35:92:3e:f2:8c:18:32:91:79:c3:b3: c7:7a:c6:b7:39:81:84:3e:e2:78:16:64:76:46:7a:ef:73:6b: 23:d1:f0:2d:b6:7e:ab:08:96:ce:19:53:d2:f9:f4:a3:15:a6: 90:1b:d9:48:87:94:71:7e:dc:3e:f3:0b:f6:f1:75:2e:86:6f: c3:e2:32:6b:a7:62:cc:2e:d7:55:c5:3b:31:2d:a0:a2:24:13: 72:78:8d:5d:e0:19:c6:c5:ee:cc:08:e3:6e:0f:6c:ec:86:54: 71:24:9d:a1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs87E8ROAZCXv0VjsN/2TxSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcwNmQ2NDEzNGZhYTc0NjI5M2MwMzg0ZWRhYzAzNzE5NTBm M2IyMjQwHhcNMjUxMjIwMTgwMTE4WhcNMjUxMjIxMTgwMTE4WjAzMTEwLwYDVQQD EyhiYjVhNGExMTllMTRiZDZhMzNmYTNjOWY3MDRhYWVmYjg1ZTE0NjU3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzm5lyYeOqgybj1gBEaWbXXWBCFJw 7bTcrvher/9ezAIb+L+VYjG9aEUCRnC/0hPCnTItG0ZS7gablk862lioJpuTlhjj fkX42qEsDtMjiNmcNkn8JzpC0dk1FH4KPFfW894ca6NTKYnIXZv8nmpl2wRKRnc8 VMryl5ZbKEs5MxyOxPA0O1kS8peqpP0k9g895E7tim2PmbGC0lPST8/7U8LG0sL4 xiN3MRYhupUMLdLvM7SG76YmTb2e464A4f+BRe63RHhGxnrxBFbvRFScaj5Y8Gvs lk/Vsm+ZONuRYz8UhzFzOjeUO+IRP+gfTTV1DZzs4glvrNjbDn/LVgSI+wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLtaShGeFL1qM/o8n3BKrvuF4UZXMB8GA1UdIwQY MBaAFHBtZBNPqnRik8A4TtrANxlQ87IkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY0cxa0UwLXFkR0tUd0RoTzJzQTNHVkR6c2lRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZC8zMjk4ZTMtOWE1MC00Y2ZiLTg0ZTYt ZDEzN2FkZTE2NmQxLzEvY0cxa0UwLXFkR0tUd0RoTzJzQTNHVkR6c2lRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZC8zMjk4ZTMtOWE1MC00Y2ZiLTg0ZTYtZDEzN2FkZTE2NmQx LzEvY0cxa0UwLXFkR0tUd0RoTzJzQTNHVkR6c2lRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAB5CoZdjE bRhti8BMlkQa6ib9RSjgi6VwMPzAbgv/8AyXbVFGa1/EXaOmrRuNFcw0oVdUppEu tE+U3x/CE9QLq+BGo9Gd1BbiU4URncMkocDUIFXq1izFDBH4IRzGyhX96kpxvSpO Qe9LRkUkiH3LSArN41Azbkib0tIQnmt+a6KCBnOGi8vGsE2cl3E7WnkqV4FWTruh NjWSPvKMGDKRecOzx3rGtzmBhD7ieBZkdkZ673NrI9HwLbZ+qwiWzhlT0vn0oxWm kBvZSIeUcX7cPvML9vF1LoZvw+Iya6dizC7XVcU7MS2goiQTcniNXeAZxsXuzAjj bg9s7IZUcSSdoQ== -----END CERTIFICATE-----Generated at Sun Dec 21 03:33:22 2025 by rpki-client