This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/df7944-2589-47cb-ab56-5358401fb796/1/cL9VMELxpDgn3ANFALvRBopyl8o.mft File: cL9VMELxpDgn3ANFALvRBopyl8o.mft (raw, json) Hash identifier: pTppAMwf39crPmVz+wZPQFKsnaVlwz73IWsCDXuf59w= Subject key identifier: 5D:44:5D:48:BA:21:09:E2:82:D7:DF:CA:6E:DD:04:DB:40:2F:5E:58 Authority key identifier: 70:BF:55:30:42:F1:A4:38:27:DC:03:45:00:BB:D1:06:8A:72:97:CA Certificate issuer: /CN=70bf553042f1a43827dc034500bbd1068a7297ca Certificate serial: 019B36EA1F6B53B735C044AA13524AF14CD4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cL9VMELxpDgn3ANFALvRBopyl8o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/df7944-2589-47cb-ab56-5358401fb796/1/cL9VMELxpDgn3ANFALvRBopyl8o.mft Manifest number: 0ECD Signing time: Fri 19 Dec 2025 14:01:11 +0000 Manifest this update: Fri 19 Dec 2025 14:01:11 +0000 Manifest next update: Sat 20 Dec 2025 14:01:11 +0000 Files and hashes: 1: HUbkLtP-uwBAqaBQMhiCQa9v6TU.roa (hash: 3c9QMN5Lp2jJwJ34jy6AEZD7aoQeLurWKfcN2Uqhz/w=) 2: cL9VMELxpDgn3ANFALvRBopyl8o.crl (hash: odtjEkbyU+PA0dNwgAPSPzSn+mlx6Kxv6dzx+m4Kozc=) 3: ecFUW2z0XsJzdPaPmfmi1NbravY.roa (hash: B/1KiGYT9I28lQbSFekF4v776yFSZOm/z2BZeazx7uo=) 4: pqlbIbNJ9fb6HI0B5-w4UgSYcbY.roa (hash: mcYLCtbaBwaS/xS6dmXpUntAVPZrHZ1andB/RjcjVcA=) 5: tY7BHUvnSszc7zTuhTRehaET6sI.roa (hash: KeG1ndmoCZ2IjHvkM2LPj9WePrlmC0S+eFWuoo10hmc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/df7944-2589-47cb-ab56-5358401fb796/1/cL9VMELxpDgn3ANFALvRBopyl8o.crl rsync://rpki.ripe.net/repository/DEFAULT/11/df7944-2589-47cb-ab56-5358401fb796/1/cL9VMELxpDgn3ANFALvRBopyl8o.mft rsync://rpki.ripe.net/repository/DEFAULT/cL9VMELxpDgn3ANFALvRBopyl8o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 14:01:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:36:ea:1f:6b:53:b7:35:c0:44:aa:13:52:4a:f1:4c:d4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=70bf553042f1a43827dc034500bbd1068a7297ca Validity Not Before: Dec 19 14:01:11 2025 GMT Not After : Dec 20 14:01:11 2025 GMT Subject: CN=5d445d48ba2109e282d7dfca6edd04db402f5e58 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:1f:4b:80:61:e6:c8:32:47:81:2e:04:e2:12: af:d9:a8:ad:5d:fa:68:9e:b9:e7:17:5e:4e:b4:b1: e5:35:b9:e2:70:f2:c2:82:51:03:00:05:93:28:af: fa:61:ef:af:3b:d4:76:67:47:8b:c6:90:f6:0a:75: 21:8d:46:f1:86:af:25:90:29:49:50:d3:75:40:4f: 40:b1:28:f3:d1:75:43:0a:db:be:32:11:ae:b7:60: c3:00:e6:a9:a0:3d:33:80:b2:1c:ff:49:b2:cf:61: 39:2a:23:2d:e8:4d:60:b4:b5:df:eb:bf:aa:57:96: 9c:85:ea:39:8d:a2:60:bf:65:36:29:86:1c:07:bc: 55:be:47:3b:00:4e:04:dd:41:f8:d9:d9:96:46:33: be:2e:95:6e:cb:47:9b:9c:b5:67:f1:a9:cd:55:ab: c1:9f:5f:78:18:41:80:93:6c:04:b7:87:f8:27:f7: df:c9:4b:54:68:78:a6:ca:2f:87:c2:48:e0:e5:6b: b5:aa:18:57:ff:eb:a0:f8:4f:0e:22:57:49:f9:25: ae:bb:6e:a0:aa:b0:e7:6c:ef:74:27:81:a4:1d:ec: da:73:03:ea:be:53:e6:f3:76:6b:90:f3:dc:e4:76: d8:60:ca:2b:fc:3c:37:3f:c6:ba:5f:6b:e5:84:be: c1:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:44:5D:48:BA:21:09:E2:82:D7:DF:CA:6E:DD:04:DB:40:2F:5E:58 X509v3 Authority Key Identifier: keyid:70:BF:55:30:42:F1:A4:38:27:DC:03:45:00:BB:D1:06:8A:72:97:CA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cL9VMELxpDgn3ANFALvRBopyl8o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/df7944-2589-47cb-ab56-5358401fb796/1/cL9VMELxpDgn3ANFALvRBopyl8o.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/11/df7944-2589-47cb-ab56-5358401fb796/1/cL9VMELxpDgn3ANFALvRBopyl8o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9f:6b:5c:e2:df:66:91:d1:1b:be:1e:15:79:14:99:84:bc:7b: 64:7b:31:6f:f0:b5:ec:07:65:82:41:bf:d3:82:ab:1f:5f:c2: ff:8c:56:82:4f:5e:0e:91:3c:a7:af:98:42:7f:04:02:49:7b: cb:fd:77:8b:35:df:88:6c:c4:0c:be:09:36:d9:4c:8f:1b:c3: 80:54:97:82:8a:ba:bc:d1:10:e7:17:71:99:3c:8b:b8:6a:21: c5:5c:80:f5:98:8c:dc:48:3c:4c:92:3d:07:68:d0:83:40:fe: 30:4e:0a:63:9c:3d:41:43:80:46:b5:fe:42:58:c3:06:c5:58: 55:ba:4f:b5:c3:1c:eb:5c:84:34:67:1e:1d:0a:e6:0b:5d:7f: 3e:a5:65:2e:5f:8c:e2:81:6a:f7:e7:83:85:d4:83:26:a5:4d: 4d:e1:c2:e7:cb:92:95:da:2d:16:83:6d:1c:dd:8d:0c:fd:ee: 72:36:9b:c8:91:c8:7a:23:53:9d:72:b4:fc:1d:41:6b:16:0f: 89:88:87:bb:2d:bb:4f:4e:aa:a5:c9:ef:f0:6c:4b:84:ce:44: 53:e0:08:12:ba:67:a5:81:1f:b9:ef:db:59:5a:08:06:2f:6b: a0:30:ca:c1:58:6c:f1:46:60:87:65:38:8f:b3:37:87:57:c4: 59:23:3b:40 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs26h9rU7c1wESqE1JK8UzUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcwYmY1NTMwNDJmMWE0MzgyN2RjMDM0NTAwYmJkMTA2OGE3 Mjk3Y2EwHhcNMjUxMjE5MTQwMTExWhcNMjUxMjIwMTQwMTExWjAzMTEwLwYDVQQD Eyg1ZDQ0NWQ0OGJhMjEwOWUyODJkN2RmY2E2ZWRkMDRkYjQwMmY1ZTU4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyB9LgGHmyDJHgS4E4hKv2aitXfpo nrnnF15OtLHlNbnicPLCglEDAAWTKK/6Ye+vO9R2Z0eLxpD2CnUhjUbxhq8lkClJ UNN1QE9AsSjz0XVDCtu+MhGut2DDAOapoD0zgLIc/0myz2E5KiMt6E1gtLXf67+q V5acheo5jaJgv2U2KYYcB7xVvkc7AE4E3UH42dmWRjO+LpVuy0ebnLVn8anNVavB n194GEGAk2wEt4f4J/ffyUtUaHimyi+Hwkjg5Wu1qhhX/+ug+E8OIldJ+SWuu26g qrDnbO90J4GkHezacwPqvlPm83ZrkPPc5HbYYMor/Dw3P8a6X2vlhL7BQwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFF1EXUi6IQnigtffym7dBNtAL15YMB8GA1UdIwQY MBaAFHC/VTBC8aQ4J9wDRQC70QaKcpfKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY0w5Vk1FTHhwRGduM0FORkFMdlJCb3B5bDhvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMS9kZjc5NDQtMjU4OS00N2NiLWFiNTYt NTM1ODQwMWZiNzk2LzEvY0w5Vk1FTHhwRGduM0FORkFMdlJCb3B5bDhvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMS9kZjc5NDQtMjU4OS00N2NiLWFiNTYtNTM1ODQwMWZiNzk2 LzEvY0w5Vk1FTHhwRGduM0FORkFMdlJCb3B5bDhvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAn2tc4t9m kdEbvh4VeRSZhLx7ZHsxb/C17AdlgkG/04KrH1/C/4xWgk9eDpE8p6+YQn8EAkl7 y/13izXfiGzEDL4JNtlMjxvDgFSXgoq6vNEQ5xdxmTyLuGohxVyA9ZiM3Eg8TJI9 B2jQg0D+ME4KY5w9QUOARrX+QljDBsVYVbpPtcMc61yENGceHQrmC11/PqVlLl+M 4oFq9+eDhdSDJqVNTeHC58uSldotFoNtHN2NDP3ucjabyJHIeiNTnXK0/B1BaxYP iYiHuy27T06qpcnv8GxLhM5EU+AIErpnpYEfue/bWVoIBi9roDDKwVhs8UZgh2U4 j7M3h1fEWSM7QA== -----END CERTIFICATE-----Generated at Fri Dec 19 23:57:19 2025 by rpki-client