This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/f649e5-a7cb-4218-93e0-43e31800df0c/1/cKC1rKcx6nHybWPSPCLBI7K7Eg8.mft File: cKC1rKcx6nHybWPSPCLBI7K7Eg8.mft (raw, json) Hash identifier: syR4atUs/mV0v/+q+m4fW/YRiKS3tJPSCdgOcjizTWY= Subject key identifier: BD:1B:DB:C7:ED:54:42:CF:A7:13:53:47:1B:E8:D4:7A:F3:45:2C:18 Authority key identifier: 70:A0:B5:AC:A7:31:EA:71:F2:6D:63:D2:3C:22:C1:23:B2:BB:12:0F Certificate issuer: /CN=70a0b5aca731ea71f26d63d23c22c123b2bb120f Certificate serial: 019B45B830E2259590208DFAFB2933CDCD6F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cKC1rKcx6nHybWPSPCLBI7K7Eg8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/f649e5-a7cb-4218-93e0-43e31800df0c/1/cKC1rKcx6nHybWPSPCLBI7K7Eg8.mft Manifest number: 0AC5 Signing time: Mon 22 Dec 2025 11:00:57 +0000 Manifest this update: Mon 22 Dec 2025 11:00:57 +0000 Manifest next update: Tue 23 Dec 2025 11:00:57 +0000 Files and hashes: 1: 5K2zlrIHADlFytOUhc54zx-uCAw.roa (hash: VJ3nEApsPTUcM1XeIb75bGQ+CbjZ/H8pdnWKdP3UYOg=) 2: cKC1rKcx6nHybWPSPCLBI7K7Eg8.crl (hash: qk/tjxOP0Fm80hJu34kiZH0sOaSGMGYhpUU5KOCJDMg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/f649e5-a7cb-4218-93e0-43e31800df0c/1/cKC1rKcx6nHybWPSPCLBI7K7Eg8.crl rsync://rpki.ripe.net/repository/DEFAULT/18/f649e5-a7cb-4218-93e0-43e31800df0c/1/cKC1rKcx6nHybWPSPCLBI7K7Eg8.mft rsync://rpki.ripe.net/repository/DEFAULT/cKC1rKcx6nHybWPSPCLBI7K7Eg8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 10:00:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:45:b8:30:e2:25:95:90:20:8d:fa:fb:29:33:cd:cd:6f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=70a0b5aca731ea71f26d63d23c22c123b2bb120f Validity Not Before: Dec 22 11:00:57 2025 GMT Not After : Dec 23 11:00:57 2025 GMT Subject: CN=bd1bdbc7ed5442cfa71353471be8d47af3452c18 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:24:32:39:89:34:9a:05:a6:29:47:a6:53:d9: 99:8a:c7:41:b0:d0:61:e4:60:19:0b:96:78:5f:5e: a6:ba:76:22:79:1a:30:ec:b3:2f:71:0c:51:30:54: 57:08:08:48:5d:c9:36:82:b2:55:2b:da:7a:db:17: ce:f2:81:6e:7c:34:74:4c:67:f7:c5:9b:e1:c4:b5: 2a:56:38:3d:18:68:e9:de:39:0e:7f:73:1a:82:94: 55:59:74:03:af:95:42:3e:15:ce:84:92:df:b6:09: bf:0a:28:a5:a0:fb:91:23:b7:90:aa:75:d8:82:70: 11:4c:29:e7:9e:5f:1b:26:4c:df:47:2a:ee:c7:d7: 76:88:e6:be:a3:03:04:6b:a0:80:94:19:03:6b:a7: 92:12:91:78:90:21:c2:a3:f3:aa:d7:19:7c:16:29: 7e:d9:3d:b8:14:e5:31:e1:2a:13:27:a9:f0:39:75: a3:c0:e8:ee:6b:f6:bb:06:77:f6:26:19:2a:92:1d: 79:99:cc:64:c0:8b:c9:3c:83:b7:2c:bc:11:f9:c3: 45:89:18:01:ee:29:ea:3c:08:6c:73:1a:6c:0b:af: c2:ce:07:64:75:b7:14:36:fb:e3:12:aa:3c:41:a6: 6c:a5:0c:58:14:e6:c6:d8:4e:c0:fe:56:83:39:65: 72:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:1B:DB:C7:ED:54:42:CF:A7:13:53:47:1B:E8:D4:7A:F3:45:2C:18 X509v3 Authority Key Identifier: keyid:70:A0:B5:AC:A7:31:EA:71:F2:6D:63:D2:3C:22:C1:23:B2:BB:12:0F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cKC1rKcx6nHybWPSPCLBI7K7Eg8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/f649e5-a7cb-4218-93e0-43e31800df0c/1/cKC1rKcx6nHybWPSPCLBI7K7Eg8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/18/f649e5-a7cb-4218-93e0-43e31800df0c/1/cKC1rKcx6nHybWPSPCLBI7K7Eg8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b7:70:b8:3d:74:8d:20:8d:c4:f6:58:2d:b4:fb:4d:ed:f2:6f: b5:cd:72:97:8b:0c:97:2d:fe:70:94:34:c9:75:f7:e8:e1:f2: b3:72:d6:42:38:a4:77:bb:b9:2b:68:9a:a2:70:88:3b:0a:81: 6f:35:50:89:dc:1d:f9:77:2c:31:d8:55:8f:35:62:a6:eb:27: ce:3d:88:db:cd:87:57:18:89:e5:5b:6e:a8:ce:36:af:41:0d: c3:96:87:8b:bc:e2:7b:3a:a2:77:c3:6b:8f:af:0b:d5:97:a0: 44:ef:6d:38:a0:cf:cf:f0:14:9f:53:c1:4e:45:2c:a2:6d:6f: 2c:a5:f9:80:ce:a1:e1:3c:86:01:88:14:c6:f2:79:18:0b:46: 25:81:48:2b:a9:f8:02:b4:11:ca:6a:76:f6:47:77:d1:45:15: 3d:bd:8e:92:69:c4:a5:46:b1:61:c6:21:98:89:e5:a0:b5:d4: 94:90:e5:12:12:02:50:ca:9b:fa:4c:b2:29:cd:a8:6c:49:1f: a4:e4:25:88:50:d3:3f:7e:c3:86:ea:60:3e:0f:d2:07:49:2f: ae:da:5b:40:10:e4:f2:65:00:29:8b:27:6a:a9:de:ff:69:c4: 8d:db:2f:b9:c7:43:c7:64:44:90:7c:05:e5:73:38:af:a3:e5: 78:c5:9f:4e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtFuDDiJZWQII36+ykzzc1vMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcwYTBiNWFjYTczMWVhNzFmMjZkNjNkMjNjMjJjMTIzYjJi YjEyMGYwHhcNMjUxMjIyMTEwMDU3WhcNMjUxMjIzMTEwMDU3WjAzMTEwLwYDVQQD EyhiZDFiZGJjN2VkNTQ0MmNmYTcxMzUzNDcxYmU4ZDQ3YWYzNDUyYzE4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7CQyOYk0mgWmKUemU9mZisdBsNBh 5GAZC5Z4X16munYieRow7LMvcQxRMFRXCAhIXck2grJVK9p62xfO8oFufDR0TGf3 xZvhxLUqVjg9GGjp3jkOf3MagpRVWXQDr5VCPhXOhJLftgm/CiiloPuRI7eQqnXY gnARTCnnnl8bJkzfRyrux9d2iOa+owMEa6CAlBkDa6eSEpF4kCHCo/Oq1xl8Fil+ 2T24FOUx4SoTJ6nwOXWjwOjua/a7Bnf2Jhkqkh15mcxkwIvJPIO3LLwR+cNFiRgB 7inqPAhscxpsC6/CzgdkdbcUNvvjEqo8QaZspQxYFObG2E7A/laDOWVyfwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFL0b28ftVELPpxNTRxvo1HrzRSwYMB8GA1UdIwQY MBaAFHCgtaynMepx8m1j0jwiwSOyuxIPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY0tDMXJLY3g2bkh5YldQU1BDTEJJN0s3RWc4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOC9mNjQ5ZTUtYTdjYi00MjE4LTkzZTAt NDNlMzE4MDBkZjBjLzEvY0tDMXJLY3g2bkh5YldQU1BDTEJJN0s3RWc4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xOC9mNjQ5ZTUtYTdjYi00MjE4LTkzZTAtNDNlMzE4MDBkZjBj LzEvY0tDMXJLY3g2bkh5YldQU1BDTEJJN0s3RWc4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAt3C4PXSN II3E9lgttPtN7fJvtc1yl4sMly3+cJQ0yXX36OHys3LWQjikd7u5K2iaonCIOwqB bzVQidwd+XcsMdhVjzVipusnzj2I282HVxiJ5VtuqM42r0ENw5aHi7ziezqid8Nr j68L1ZegRO9tOKDPz/AUn1PBTkUsom1vLKX5gM6h4TyGAYgUxvJ5GAtGJYFIK6n4 ArQRymp29kd30UUVPb2OkmnEpUaxYcYhmInloLXUlJDlEhICUMqb+kyyKc2obEkf pOQliFDTP37DhupgPg/SB0kvrtpbQBDk8mUAKYsnaqne/2nEjdsvucdDx2REkHwF 5XM4r6PleMWfTg== -----END CERTIFICATE-----Generated at Mon Dec 22 16:01:31 2025 by rpki-client