This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/df7944-2589-47cb-ab56-5358401fb796/1/cL9VMELxpDgn3ANFALvRBopyl8o.mft File: cL9VMELxpDgn3ANFALvRBopyl8o.mft (raw, json) Hash identifier: Li3Sjq0wx+SZhvLdhuvAcDNj/0gAl3ADX9mvoiuHnUc= Subject key identifier: E3:D0:27:0E:D6:F9:0F:EC:73:0A:D7:DE:18:F6:88:C6:2C:11:A7:E2 Authority key identifier: 70:BF:55:30:42:F1:A4:38:27:DC:03:45:00:BB:D1:06:8A:72:97:CA Certificate issuer: /CN=70bf553042f1a43827dc034500bbd1068a7297ca Certificate serial: 019B38D82C3E1194819AB8B1D28A4069743A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cL9VMELxpDgn3ANFALvRBopyl8o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/df7944-2589-47cb-ab56-5358401fb796/1/cL9VMELxpDgn3ANFALvRBopyl8o.mft Manifest number: 0ECE Signing time: Fri 19 Dec 2025 23:00:49 +0000 Manifest this update: Fri 19 Dec 2025 23:00:49 +0000 Manifest next update: Sat 20 Dec 2025 23:00:49 +0000 Files and hashes: 1: HUbkLtP-uwBAqaBQMhiCQa9v6TU.roa (hash: 3c9QMN5Lp2jJwJ34jy6AEZD7aoQeLurWKfcN2Uqhz/w=) 2: cL9VMELxpDgn3ANFALvRBopyl8o.crl (hash: 0BJ9v3HS8ga1JQoMB2AoX8aoIcBKd/yQmEfIso5pXTE=) 3: ecFUW2z0XsJzdPaPmfmi1NbravY.roa (hash: B/1KiGYT9I28lQbSFekF4v776yFSZOm/z2BZeazx7uo=) 4: pqlbIbNJ9fb6HI0B5-w4UgSYcbY.roa (hash: mcYLCtbaBwaS/xS6dmXpUntAVPZrHZ1andB/RjcjVcA=) 5: tY7BHUvnSszc7zTuhTRehaET6sI.roa (hash: KeG1ndmoCZ2IjHvkM2LPj9WePrlmC0S+eFWuoo10hmc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/df7944-2589-47cb-ab56-5358401fb796/1/cL9VMELxpDgn3ANFALvRBopyl8o.crl rsync://rpki.ripe.net/repository/DEFAULT/11/df7944-2589-47cb-ab56-5358401fb796/1/cL9VMELxpDgn3ANFALvRBopyl8o.mft rsync://rpki.ripe.net/repository/DEFAULT/cL9VMELxpDgn3ANFALvRBopyl8o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 23:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:38:d8:2c:3e:11:94:81:9a:b8:b1:d2:8a:40:69:74:3a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=70bf553042f1a43827dc034500bbd1068a7297ca Validity Not Before: Dec 19 23:00:49 2025 GMT Not After : Dec 20 23:00:49 2025 GMT Subject: CN=e3d0270ed6f90fec730ad7de18f688c62c11a7e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:55:ed:86:f3:44:6b:e7:53:9a:4c:86:50:d6: 30:16:da:c5:12:0c:55:1d:ad:d4:f6:72:d3:d2:3b: 5d:67:71:7a:45:33:a4:df:81:be:2b:bb:c6:d7:37: 81:33:cf:2c:e1:77:51:19:f4:cc:11:49:67:e4:50: 6e:84:43:4a:de:25:30:65:8f:36:2b:f9:10:ac:bb: 04:6d:3d:d7:22:2b:95:17:db:d3:8d:72:05:1c:f3: 1b:48:b8:df:cd:4b:05:3d:64:cb:0b:0f:e0:a5:7e: dd:19:37:f5:fc:9c:4b:4b:13:c3:a9:b7:6a:83:d8: 22:82:f6:f2:f2:50:15:f6:ef:90:fc:b3:e0:23:23: 8e:db:0c:1f:70:0e:fa:14:6c:d7:73:1b:38:a3:5b: 1c:87:5a:e6:a5:2e:20:46:a5:05:bd:7f:11:31:9f: 15:01:be:55:1f:0f:18:dc:75:77:fd:0f:8d:0f:77: 3c:07:d5:82:6b:39:7a:e1:ae:c5:5a:41:62:dd:be: 2a:d4:d7:e5:00:a0:fd:e2:58:a9:8e:09:f3:d0:83: 23:51:e1:a3:49:4b:1c:e1:46:d7:ea:12:be:78:c7: 4b:e9:a1:9e:c7:52:44:d9:43:9d:4c:c9:9a:7c:ea: 1d:84:fb:2c:3f:eb:5d:e8:d3:a3:de:ad:2e:33:14: 43:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:D0:27:0E:D6:F9:0F:EC:73:0A:D7:DE:18:F6:88:C6:2C:11:A7:E2 X509v3 Authority Key Identifier: keyid:70:BF:55:30:42:F1:A4:38:27:DC:03:45:00:BB:D1:06:8A:72:97:CA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cL9VMELxpDgn3ANFALvRBopyl8o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/df7944-2589-47cb-ab56-5358401fb796/1/cL9VMELxpDgn3ANFALvRBopyl8o.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/11/df7944-2589-47cb-ab56-5358401fb796/1/cL9VMELxpDgn3ANFALvRBopyl8o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4c:cc:a0:b0:af:11:dd:c2:d4:3e:64:27:d1:2b:86:2b:75:b1: 0e:e1:4a:bf:2b:67:f3:b9:9b:16:47:81:c8:42:7b:87:e3:81: b0:44:ed:a0:d6:03:07:d4:a1:0e:90:35:29:b2:1b:a5:34:8c: 81:cd:eb:61:06:e9:4b:f5:c9:ea:b3:11:35:c2:83:20:48:61: 7f:2e:9e:99:68:58:a9:a0:6c:20:07:8a:f8:f5:1c:89:c0:e7: 21:de:21:c8:f8:25:8b:46:62:bc:c3:99:89:3c:a5:0e:02:ee: 6c:e4:71:13:a4:48:e9:12:2e:b5:8e:55:2d:a3:a9:c2:2f:3b: ab:e0:58:b5:14:ae:ce:dc:db:93:cf:57:3b:f9:0f:a0:ee:47: c5:51:66:b6:9d:0b:7b:fb:83:ac:fd:bc:17:98:ad:65:31:26: c7:f6:7c:de:e8:34:cf:04:8f:3d:ac:b3:0d:20:b1:31:e7:02: fa:58:53:85:ca:da:7d:c2:b6:66:6a:5d:0f:a1:66:8d:2a:e6: fd:dd:cd:70:6a:3d:76:09:d3:dc:1c:26:c2:0b:3d:5f:44:2a: f1:96:a5:d6:49:47:43:9f:2b:8e:ea:69:d9:21:fc:7b:76:65: 0b:a8:46:df:be:b8:5d:66:b4:7e:8c:ea:42:31:69:8d:dc:b8: b7:04:92:ba -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs42Cw+EZSBmrix0opAaXQ6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcwYmY1NTMwNDJmMWE0MzgyN2RjMDM0NTAwYmJkMTA2OGE3 Mjk3Y2EwHhcNMjUxMjE5MjMwMDQ5WhcNMjUxMjIwMjMwMDQ5WjAzMTEwLwYDVQQD EyhlM2QwMjcwZWQ2ZjkwZmVjNzMwYWQ3ZGUxOGY2ODhjNjJjMTFhN2UyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmlXthvNEa+dTmkyGUNYwFtrFEgxV Ha3U9nLT0jtdZ3F6RTOk34G+K7vG1zeBM88s4XdRGfTMEUln5FBuhENK3iUwZY82 K/kQrLsEbT3XIiuVF9vTjXIFHPMbSLjfzUsFPWTLCw/gpX7dGTf1/JxLSxPDqbdq g9gigvby8lAV9u+Q/LPgIyOO2wwfcA76FGzXcxs4o1sch1rmpS4gRqUFvX8RMZ8V Ab5VHw8Y3HV3/Q+ND3c8B9WCazl64a7FWkFi3b4q1NflAKD94lipjgnz0IMjUeGj SUsc4UbX6hK+eMdL6aGex1JE2UOdTMmafOodhPssP+td6NOj3q0uMxRDzwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOPQJw7W+Q/scwrX3hj2iMYsEafiMB8GA1UdIwQY MBaAFHC/VTBC8aQ4J9wDRQC70QaKcpfKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY0w5Vk1FTHhwRGduM0FORkFMdlJCb3B5bDhvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMS9kZjc5NDQtMjU4OS00N2NiLWFiNTYt NTM1ODQwMWZiNzk2LzEvY0w5Vk1FTHhwRGduM0FORkFMdlJCb3B5bDhvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMS9kZjc5NDQtMjU4OS00N2NiLWFiNTYtNTM1ODQwMWZiNzk2 LzEvY0w5Vk1FTHhwRGduM0FORkFMdlJCb3B5bDhvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATMygsK8R 3cLUPmQn0SuGK3WxDuFKvytn87mbFkeByEJ7h+OBsETtoNYDB9ShDpA1KbIbpTSM gc3rYQbpS/XJ6rMRNcKDIEhhfy6emWhYqaBsIAeK+PUcicDnId4hyPgli0ZivMOZ iTylDgLubORxE6RI6RIutY5VLaOpwi87q+BYtRSuztzbk89XO/kPoO5HxVFmtp0L e/uDrP28F5itZTEmx/Z83ug0zwSPPayzDSCxMecC+lhThcrafcK2ZmpdD6FmjSrm /d3NcGo9dgnT3Bwmwgs9X0Qq8Zal1klHQ58rjupp2SH8e3ZlC6hG3764XWa0fozq QjFpjdy4twSSug== -----END CERTIFICATE-----Generated at Sat Dec 20 06:38:44 2025 by rpki-client