This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/da1c43-1916-46ae-8491-35883af9a323/1/cDxI7UbLeUkOFmLbAcMdAtAu_-I.mft File: cDxI7UbLeUkOFmLbAcMdAtAu_-I.mft (raw, json) Hash identifier: BA2MBU0A6z/vmQSzKPhNp0K+jDjfYd5HaPEspPjehck= Subject key identifier: AA:51:36:45:F4:D8:8B:C0:12:B3:2B:CC:33:AC:60:5E:86:D8:22:8F Authority key identifier: 70:3C:48:ED:46:CB:79:49:0E:16:62:DB:01:C3:1D:02:D0:2E:FF:E2 Certificate issuer: /CN=703c48ed46cb79490e1662db01c31d02d02effe2 Certificate serial: 019B48156437428721F626BAF59B74493A85 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cDxI7UbLeUkOFmLbAcMdAtAu_-I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/da1c43-1916-46ae-8491-35883af9a323/1/cDxI7UbLeUkOFmLbAcMdAtAu_-I.mft Manifest number: 12D2 Signing time: Mon 22 Dec 2025 22:01:59 +0000 Manifest this update: Mon 22 Dec 2025 22:01:59 +0000 Manifest next update: Tue 23 Dec 2025 22:01:59 +0000 Files and hashes: 1: PpEWGz-OwlSLlk0QHrICVTcwUWc.roa (hash: WptBbhD5BCS6QBVvLotY3hLMhEGQcn9whh44ucm6M50=) 2: cDxI7UbLeUkOFmLbAcMdAtAu_-I.crl (hash: X2bdMPiRc1L+f+l/9T2zv2n+ybPfAnSejBog2RmzRL4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/da1c43-1916-46ae-8491-35883af9a323/1/cDxI7UbLeUkOFmLbAcMdAtAu_-I.crl rsync://rpki.ripe.net/repository/DEFAULT/0d/da1c43-1916-46ae-8491-35883af9a323/1/cDxI7UbLeUkOFmLbAcMdAtAu_-I.mft rsync://rpki.ripe.net/repository/DEFAULT/cDxI7UbLeUkOFmLbAcMdAtAu_-I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 22:01:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:48:15:64:37:42:87:21:f6:26:ba:f5:9b:74:49:3a:85 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=703c48ed46cb79490e1662db01c31d02d02effe2 Validity Not Before: Dec 22 22:01:59 2025 GMT Not After : Dec 23 22:01:59 2025 GMT Subject: CN=aa513645f4d88bc012b32bcc33ac605e86d8228f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:82:04:df:ab:1c:5e:64:d5:f5:df:85:de:ea: 7b:29:f5:f0:df:a4:3c:81:b5:13:e9:31:bd:c1:f9: 5a:0c:10:cf:0a:67:a5:ad:fe:95:6c:22:23:8d:5f: c2:cf:73:7a:57:f1:0c:f1:ae:cb:ae:9c:dc:10:c0: 2e:f4:65:31:82:e1:00:1b:bc:48:bd:f9:7e:5a:0c: 2f:7f:59:36:60:ae:80:5f:af:32:84:87:e7:0c:12: 08:7c:d9:81:0b:5a:a6:f3:95:1e:e1:ca:35:7a:f3: 20:be:80:3a:fe:e2:65:cf:fa:f3:55:7b:9d:96:b9: 15:aa:63:13:93:e8:a8:35:28:41:2a:df:62:89:c4: 76:6c:d0:17:06:94:33:9c:ae:fc:7d:eb:3c:e2:a4: c2:73:36:3a:f9:1a:9f:f7:1e:de:ce:e6:4e:aa:b2: 36:03:9a:9d:84:ee:85:92:c1:6c:cc:f0:b1:86:2a: 87:4e:78:9d:37:e3:ad:aa:91:ec:9f:f2:99:87:0b: 25:55:34:40:e5:e7:5a:86:94:7b:06:95:a8:d7:13: 18:b3:9c:14:01:ac:86:3d:a8:39:a6:d5:bb:79:cd: 4e:b9:18:15:70:d3:7a:8a:4a:df:8a:dd:87:ff:66: 6f:2e:26:96:52:be:4d:7f:bc:95:32:03:71:20:14: 74:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:51:36:45:F4:D8:8B:C0:12:B3:2B:CC:33:AC:60:5E:86:D8:22:8F X509v3 Authority Key Identifier: keyid:70:3C:48:ED:46:CB:79:49:0E:16:62:DB:01:C3:1D:02:D0:2E:FF:E2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cDxI7UbLeUkOFmLbAcMdAtAu_-I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/da1c43-1916-46ae-8491-35883af9a323/1/cDxI7UbLeUkOFmLbAcMdAtAu_-I.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/da1c43-1916-46ae-8491-35883af9a323/1/cDxI7UbLeUkOFmLbAcMdAtAu_-I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6d:04:f1:4b:23:7f:54:ba:a3:fe:db:07:06:c9:45:7d:90:71: 49:7c:76:d0:5a:50:52:77:29:d8:cd:17:64:8e:82:24:7a:fb: 92:9d:8e:49:b5:52:2f:64:ee:79:73:d8:d1:d9:ec:28:c3:54: 6c:6a:f7:24:1e:97:1d:09:a5:49:10:9b:0a:e3:aa:25:6a:eb: ce:5f:27:76:5c:ee:bf:9e:31:02:60:5d:5f:56:72:13:08:86: 13:94:5e:26:08:7d:a6:ff:dc:a3:de:17:b4:2d:78:1d:5d:35: f1:3a:01:ca:e8:a9:f5:79:c9:60:c2:47:1f:3e:f3:f7:0a:29: 83:03:8a:96:d5:7a:bc:14:10:51:d2:c5:46:be:f9:08:1c:9e: 9e:ba:8e:fa:02:57:d3:9a:64:5d:1b:49:6d:67:04:4b:6d:98: 26:88:14:e4:ca:70:4c:f1:80:84:08:fe:95:8a:3b:48:d5:9c: d9:be:a9:da:aa:02:22:52:a0:52:9f:d8:db:e8:90:b8:bc:54: af:8c:6d:f1:b8:b4:e1:56:99:bd:c6:d4:1b:bb:81:f1:7d:15: 0e:9f:e0:53:0c:56:ca:2d:8d:da:9d:c9:e4:09:b3:08:8a:ff: 6a:53:2f:45:a2:04:fa:ce:4a:ff:fb:7e:b7:1f:73:da:68:fd: 65:f5:64:54 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtIFWQ3Qoch9ia69Zt0STqFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcwM2M0OGVkNDZjYjc5NDkwZTE2NjJkYjAxYzMxZDAyZDAy ZWZmZTIwHhcNMjUxMjIyMjIwMTU5WhcNMjUxMjIzMjIwMTU5WjAzMTEwLwYDVQQD EyhhYTUxMzY0NWY0ZDg4YmMwMTJiMzJiY2MzM2FjNjA1ZTg2ZDgyMjhmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkYIE36scXmTV9d+F3up7KfXw36Q8 gbUT6TG9wflaDBDPCmelrf6VbCIjjV/Cz3N6V/EM8a7LrpzcEMAu9GUxguEAG7xI vfl+Wgwvf1k2YK6AX68yhIfnDBIIfNmBC1qm85Ue4co1evMgvoA6/uJlz/rzVXud lrkVqmMTk+ioNShBKt9iicR2bNAXBpQznK78fes84qTCczY6+Rqf9x7ezuZOqrI2 A5qdhO6FksFszPCxhiqHTnidN+OtqpHsn/KZhwslVTRA5edahpR7BpWo1xMYs5wU AayGPag5ptW7ec1OuRgVcNN6ikrfit2H/2ZvLiaWUr5Nf7yVMgNxIBR0swIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKpRNkX02IvAErMrzDOsYF6G2CKPMB8GA1UdIwQY MBaAFHA8SO1Gy3lJDhZi2wHDHQLQLv/iMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY0R4STdVYkxlVWtPRm1MYkFjTWRBdEF1Xy1JLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZC9kYTFjNDMtMTkxNi00NmFlLTg0OTEt MzU4ODNhZjlhMzIzLzEvY0R4STdVYkxlVWtPRm1MYkFjTWRBdEF1Xy1JLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZC9kYTFjNDMtMTkxNi00NmFlLTg0OTEtMzU4ODNhZjlhMzIz LzEvY0R4STdVYkxlVWtPRm1MYkFjTWRBdEF1Xy1JLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbQTxSyN/ VLqj/tsHBslFfZBxSXx20FpQUncp2M0XZI6CJHr7kp2OSbVSL2TueXPY0dnsKMNU bGr3JB6XHQmlSRCbCuOqJWrrzl8ndlzuv54xAmBdX1ZyEwiGE5ReJgh9pv/co94X tC14HV018ToByuip9XnJYMJHHz7z9wopgwOKltV6vBQQUdLFRr75CByenrqO+gJX 05pkXRtJbWcES22YJogU5MpwTPGAhAj+lYo7SNWc2b6p2qoCIlKgUp/Y2+iQuLxU r4xt8bi04VaZvcbUG7uB8X0VDp/gUwxWyi2N2p3J5AmzCIr/alMvRaIE+s5K//t+ tx9z2mj9ZfVkVA== -----END CERTIFICATE-----Generated at Tue Dec 23 04:31:28 2025 by rpki-client