This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/140105-e462-48d2-a58f-a57035792e57/1/cPXZ7u-jBa7K7jHm_LTiIyGygEo.mft File: cPXZ7u-jBa7K7jHm_LTiIyGygEo.mft (raw, json) Hash identifier: MlIc4kLlv2CgDD3EJndNG2xbQMtzQahoc6yHILRGguI= Subject key identifier: 0B:14:B8:56:47:F0:B0:EA:6C:9B:49:8E:F5:6A:90:8C:8C:96:D0:30 Authority key identifier: 70:F5:D9:EE:EF:A3:05:AE:CA:EE:31:E6:FC:B4:E2:23:21:B2:80:4A Certificate issuer: /CN=70f5d9eeefa305aecaee31e6fcb4e22321b2804a Certificate serial: 019B424975471FBF5CD92545677742AEFBA7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cPXZ7u-jBa7K7jHm_LTiIyGygEo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/140105-e462-48d2-a58f-a57035792e57/1/cPXZ7u-jBa7K7jHm_LTiIyGygEo.mft Manifest number: 178B Signing time: Sun 21 Dec 2025 19:01:08 +0000 Manifest this update: Sun 21 Dec 2025 19:01:08 +0000 Manifest next update: Mon 22 Dec 2025 19:01:08 +0000 Files and hashes: 1: 16PMvyBjwLMgKpIOkxrHYliD-08.roa (hash: Y3LQq9IlsGjKrSV01GWpHO25wmy0HId5ENMWGwyBnEU=) 2: cPXZ7u-jBa7K7jHm_LTiIyGygEo.crl (hash: tP14GrV6p91V8m8cxchaFmQtNeAvxqpRAsUwmDHxcyE=) 3: jgcslWHmygjkRIS6MtfzGhZ40MU.roa (hash: sDmrr8zpKt5WpBGAECM7NZQll745IxQeWlqllvJtGkM=) 4: nikcVRLPEkpjmj22Ziw5gbk7U3I.roa (hash: MneHYx5l45SiPBky73Uw5AM8Oy5u1LgkSXDWT7ZAv/c=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/140105-e462-48d2-a58f-a57035792e57/1/cPXZ7u-jBa7K7jHm_LTiIyGygEo.crl rsync://rpki.ripe.net/repository/DEFAULT/10/140105-e462-48d2-a58f-a57035792e57/1/cPXZ7u-jBa7K7jHm_LTiIyGygEo.mft rsync://rpki.ripe.net/repository/DEFAULT/cPXZ7u-jBa7K7jHm_LTiIyGygEo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 19:01:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:42:49:75:47:1f:bf:5c:d9:25:45:67:77:42:ae:fb:a7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=70f5d9eeefa305aecaee31e6fcb4e22321b2804a Validity Not Before: Dec 21 19:01:08 2025 GMT Not After : Dec 22 19:01:08 2025 GMT Subject: CN=0b14b85647f0b0ea6c9b498ef56a908c8c96d030 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:41:1a:d6:dd:c5:86:22:84:df:01:13:f8:4d: 66:ce:4c:ef:7e:f5:55:c8:c8:fa:29:35:a1:7c:87: 3e:a5:44:9b:bb:66:6f:ae:3b:62:81:2a:1a:37:35: 72:4f:a4:44:d1:a5:3f:51:26:8e:ad:77:43:ca:ed: a1:b8:b0:e6:4f:2e:89:b4:1c:3d:e3:af:eb:eb:7b: b8:f1:49:66:16:f8:56:df:51:92:f5:aa:6c:c0:10: fa:08:b1:fc:aa:f6:15:d6:87:72:35:97:20:c7:b6: 7a:0b:88:d2:6f:8c:3a:63:ea:b6:83:43:7b:a8:af: 08:11:51:21:75:be:83:b6:89:1c:90:c7:ab:a6:f9: ce:d7:98:4a:6f:0d:c2:a4:f9:5a:08:5a:5f:0e:3d: 51:f7:ed:0e:12:3f:f4:d0:ff:70:4d:a2:96:16:91: a7:4f:d1:85:71:5d:fb:2e:6e:05:1b:d1:1c:c8:08: 36:ba:43:50:1c:37:bb:69:5a:f8:67:2c:ca:7d:dd: 32:6f:a1:49:f2:2f:d5:d8:af:eb:37:bf:22:fa:7d: 98:d2:df:2a:a5:0b:5d:dd:7f:b1:04:ac:26:bc:58: 70:9c:34:e1:ef:6d:2f:26:ac:93:06:4c:3a:7e:d7: f4:cc:93:e4:0c:e6:b1:4f:45:b8:25:1a:7d:d9:89: 74:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:14:B8:56:47:F0:B0:EA:6C:9B:49:8E:F5:6A:90:8C:8C:96:D0:30 X509v3 Authority Key Identifier: keyid:70:F5:D9:EE:EF:A3:05:AE:CA:EE:31:E6:FC:B4:E2:23:21:B2:80:4A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cPXZ7u-jBa7K7jHm_LTiIyGygEo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/140105-e462-48d2-a58f-a57035792e57/1/cPXZ7u-jBa7K7jHm_LTiIyGygEo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/10/140105-e462-48d2-a58f-a57035792e57/1/cPXZ7u-jBa7K7jHm_LTiIyGygEo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bc:31:8e:6d:56:81:ee:f8:d0:e1:2b:88:5b:40:5e:9d:e6:32: b7:66:b7:36:dc:6e:88:c5:97:fa:f4:95:25:4a:36:b7:a2:b3: 06:48:e6:0c:02:17:89:35:6f:45:22:4d:bd:96:a8:b5:73:eb: ec:d6:e9:f5:45:e0:54:de:e8:46:dd:41:96:6f:22:f3:eb:9a: e2:90:b0:82:ca:a2:f2:40:83:a2:64:73:3f:39:ab:b1:17:54: a5:ae:8e:e3:41:26:44:2e:7b:0b:71:ef:d4:87:fe:2a:8f:5b: 16:57:13:88:d4:c8:d6:fe:99:12:f9:17:0e:21:7c:4b:2a:89: c2:1d:e8:62:cb:8a:e2:1b:d2:9c:a0:02:09:9a:15:b6:3a:57: d7:dd:71:05:0b:91:8f:c8:79:8e:c6:07:99:c1:03:8e:d4:70: 55:a2:4d:0c:f9:a4:98:f0:ed:99:33:7f:4d:e6:d5:63:27:30: 56:1f:73:38:a9:03:b4:63:ab:c8:10:b9:14:0f:a1:6a:35:70: 1b:b2:eb:9b:0f:bb:33:f5:a1:aa:70:f1:6b:30:c3:8d:21:af: 1f:44:54:27:95:3b:c9:66:84:3f:6c:d7:05:b9:32:f4:de:18: 33:09:d2:3a:5b:23:5d:5b:02:84:86:2d:0a:f1:e7:07:df:b5: c1:1a:88:68 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtCSXVHH79c2SVFZ3dCrvunMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcwZjVkOWVlZWZhMzA1YWVjYWVlMzFlNmZjYjRlMjIzMjFi MjgwNGEwHhcNMjUxMjIxMTkwMTA4WhcNMjUxMjIyMTkwMTA4WjAzMTEwLwYDVQQD EygwYjE0Yjg1NjQ3ZjBiMGVhNmM5YjQ5OGVmNTZhOTA4YzhjOTZkMDMwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtUEa1t3FhiKE3wET+E1mzkzvfvVV yMj6KTWhfIc+pUSbu2ZvrjtigSoaNzVyT6RE0aU/USaOrXdDyu2huLDmTy6JtBw9 46/r63u48UlmFvhW31GS9apswBD6CLH8qvYV1odyNZcgx7Z6C4jSb4w6Y+q2g0N7 qK8IEVEhdb6DtokckMerpvnO15hKbw3CpPlaCFpfDj1R9+0OEj/00P9wTaKWFpGn T9GFcV37Lm4FG9EcyAg2ukNQHDe7aVr4ZyzKfd0yb6FJ8i/V2K/rN78i+n2Y0t8q pQtd3X+xBKwmvFhwnDTh720vJqyTBkw6ftf0zJPkDOaxT0W4JRp92Yl0YwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAsUuFZH8LDqbJtJjvVqkIyMltAwMB8GA1UdIwQY MBaAFHD12e7vowWuyu4x5vy04iMhsoBKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY1BYWjd1LWpCYTdLN2pIbV9MVGlJeUd5Z0VvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC8xNDAxMDUtZTQ2Mi00OGQyLWE1OGYt YTU3MDM1NzkyZTU3LzEvY1BYWjd1LWpCYTdLN2pIbV9MVGlJeUd5Z0VvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMC8xNDAxMDUtZTQ2Mi00OGQyLWE1OGYtYTU3MDM1NzkyZTU3 LzEvY1BYWjd1LWpCYTdLN2pIbV9MVGlJeUd5Z0VvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvDGObVaB 7vjQ4SuIW0BeneYyt2a3NtxuiMWX+vSVJUo2t6KzBkjmDAIXiTVvRSJNvZaotXPr 7Nbp9UXgVN7oRt1Blm8i8+ua4pCwgsqi8kCDomRzPzmrsRdUpa6O40EmRC57C3Hv 1If+Ko9bFlcTiNTI1v6ZEvkXDiF8SyqJwh3oYsuK4hvSnKACCZoVtjpX191xBQuR j8h5jsYHmcEDjtRwVaJNDPmkmPDtmTN/TebVYycwVh9zOKkDtGOryBC5FA+hajVw G7Lrmw+7M/WhqnDxazDDjSGvH0RUJ5U7yWaEP2zXBbky9N4YMwnSOlsjXVsChIYt CvHnB9+1wRqIaA== -----END CERTIFICATE-----Generated at Mon Dec 22 01:05:59 2025 by rpki-client