This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/27c4c1-1577-4ee1-aa24-ade2babcb8d0/1/10mM0yfqM7_4Yp1_Sda-Otxf8yw.mft File: 10mM0yfqM7_4Yp1_Sda-Otxf8yw.mft (raw, json) Hash identifier: 3mOH+gzgmrLD9wtJ73TBBUnHDKUWRb57NKWg6r0Qs7I= Subject key identifier: CB:1A:E7:5B:B3:65:70:41:7A:CA:68:1B:03:9C:27:BE:56:98:1E:4F Authority key identifier: D7:49:8C:D3:27:EA:33:BF:F8:62:9D:7F:49:D6:BE:3A:DC:5F:F3:2C Certificate issuer: /CN=d7498cd327ea33bff8629d7f49d6be3adc5ff32c Certificate serial: 019B3AFE35EAD4AFAD5F0FAF060C2CC62B05 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/10mM0yfqM7_4Yp1_Sda-Otxf8yw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/27c4c1-1577-4ee1-aa24-ade2babcb8d0/1/10mM0yfqM7_4Yp1_Sda-Otxf8yw.mft Manifest number: 1788 Signing time: Sat 20 Dec 2025 09:01:36 +0000 Manifest this update: Sat 20 Dec 2025 09:01:36 +0000 Manifest next update: Sun 21 Dec 2025 09:01:36 +0000 Files and hashes: 1: 10mM0yfqM7_4Yp1_Sda-Otxf8yw.crl (hash: 6MKUtMSdxfU7v03EQAetKUgDogdkp42snw8SQFmGmZI=) 2: sndMGN9hrwytu8M86g8e17_E-wk.roa (hash: 5lmWBoAQNAypsv2KN0NMYJT+hXVE7BGT1N8Z8n2QPIo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/27c4c1-1577-4ee1-aa24-ade2babcb8d0/1/10mM0yfqM7_4Yp1_Sda-Otxf8yw.crl rsync://rpki.ripe.net/repository/DEFAULT/19/27c4c1-1577-4ee1-aa24-ade2babcb8d0/1/10mM0yfqM7_4Yp1_Sda-Otxf8yw.mft rsync://rpki.ripe.net/repository/DEFAULT/10mM0yfqM7_4Yp1_Sda-Otxf8yw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 09:01:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3a:fe:35:ea:d4:af:ad:5f:0f:af:06:0c:2c:c6:2b:05 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d7498cd327ea33bff8629d7f49d6be3adc5ff32c Validity Not Before: Dec 20 09:01:36 2025 GMT Not After : Dec 21 09:01:36 2025 GMT Subject: CN=cb1ae75bb36570417aca681b039c27be56981e4f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:4c:74:a5:2e:01:de:8a:9b:dd:b1:c3:bb:45: 83:54:cb:32:a6:35:b5:e1:d4:f0:c2:ea:fe:14:b5: 9f:09:64:b9:3a:02:09:70:ad:d2:0d:65:a1:19:7e: e5:da:9a:4a:d2:e3:ae:63:e0:fe:26:31:9d:72:86: e5:49:83:76:7c:90:b6:f5:ef:ba:5a:25:c5:6d:4a: c7:db:a8:1b:37:5d:62:9d:25:54:8f:b5:a9:65:f9: 92:8d:a6:f7:52:e9:c4:a7:6e:1b:5f:20:a5:64:7f: 4b:8a:0c:c5:38:37:ec:2e:46:fe:a2:f3:71:06:02: f2:04:3c:51:c8:db:c4:47:68:df:5c:47:d0:09:65: a6:8c:9e:e3:4f:b3:46:a3:11:af:0b:49:84:05:9c: 7e:91:c9:e6:a1:5d:89:b4:9a:84:8f:36:52:89:f8: ef:90:0b:cc:ca:44:c2:10:9b:84:2f:b5:4d:b6:61: 2d:70:28:aa:82:67:4a:89:ff:b8:3e:58:6a:02:0a: e3:21:fc:f5:70:76:9d:bd:27:ef:ab:17:79:b4:06: dd:13:94:d2:7d:0b:8c:66:56:34:17:02:ac:f9:22: dd:e4:da:08:92:76:5b:6f:a6:61:6d:67:9c:32:00: 9a:82:80:19:8c:98:b5:f3:db:12:3c:26:fd:2f:a0: 31:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:1A:E7:5B:B3:65:70:41:7A:CA:68:1B:03:9C:27:BE:56:98:1E:4F X509v3 Authority Key Identifier: keyid:D7:49:8C:D3:27:EA:33:BF:F8:62:9D:7F:49:D6:BE:3A:DC:5F:F3:2C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/10mM0yfqM7_4Yp1_Sda-Otxf8yw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/27c4c1-1577-4ee1-aa24-ade2babcb8d0/1/10mM0yfqM7_4Yp1_Sda-Otxf8yw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/19/27c4c1-1577-4ee1-aa24-ade2babcb8d0/1/10mM0yfqM7_4Yp1_Sda-Otxf8yw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption aa:81:43:99:3d:bd:73:50:9b:f2:f7:62:48:83:57:79:75:66: 7b:fa:85:f5:1c:e2:0f:17:54:87:51:19:3c:91:05:6a:0c:c4: d7:c4:1a:fb:90:f5:ee:e7:78:92:60:38:ab:74:67:fc:4f:79: 82:e9:29:70:4f:87:ab:98:a3:5a:29:90:5e:ce:85:14:a1:a6: 30:42:f2:e1:a4:ac:6b:31:42:56:e5:b8:35:ff:f4:c4:a2:16: 5c:d7:34:68:e3:28:0d:f5:ab:5d:7e:7f:c5:e0:e7:da:24:40: 13:56:4a:7d:dd:22:d9:12:30:6c:7b:d8:c8:84:8f:1b:68:54: c2:81:0e:6c:b3:31:59:e8:24:82:46:f0:5b:c9:32:01:b9:70: 4c:2c:2f:9f:6a:25:40:19:3a:04:5f:2a:13:77:88:af:c0:d7: ab:0a:3f:0d:73:8b:60:b7:4c:0c:51:1d:7a:03:95:50:43:cc: 6c:4f:cc:e3:e3:f5:07:8e:4c:11:2a:a3:65:55:ed:b1:52:ff: b2:77:67:dc:cd:81:4a:fd:95:7f:3e:fc:95:59:80:b7:ab:a7: 9c:f5:c3:9e:8d:ff:47:21:46:5f:81:d9:58:b1:7f:1a:73:e5: cb:c0:18:f0:79:a5:01:96:67:e6:b9:17:b7:37:bc:b7:aa:dc: d0:d9:a3:de -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs6/jXq1K+tXw+vBgwsxisFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ3NDk4Y2QzMjdlYTMzYmZmODYyOWQ3ZjQ5ZDZiZTNhZGM1 ZmYzMmMwHhcNMjUxMjIwMDkwMTM2WhcNMjUxMjIxMDkwMTM2WjAzMTEwLwYDVQQD EyhjYjFhZTc1YmIzNjU3MDQxN2FjYTY4MWIwMzljMjdiZTU2OTgxZTRmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4Ex0pS4B3oqb3bHDu0WDVMsypjW1 4dTwwur+FLWfCWS5OgIJcK3SDWWhGX7l2ppK0uOuY+D+JjGdcoblSYN2fJC29e+6 WiXFbUrH26gbN11inSVUj7WpZfmSjab3UunEp24bXyClZH9LigzFODfsLkb+ovNx BgLyBDxRyNvER2jfXEfQCWWmjJ7jT7NGoxGvC0mEBZx+kcnmoV2JtJqEjzZSifjv kAvMykTCEJuEL7VNtmEtcCiqgmdKif+4PlhqAgrjIfz1cHadvSfvqxd5tAbdE5TS fQuMZlY0FwKs+SLd5NoIknZbb6ZhbWecMgCagoAZjJi189sSPCb9L6AxYQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMsa51uzZXBBespoGwOcJ75WmB5PMB8GA1UdIwQY MBaAFNdJjNMn6jO/+GKdf0nWvjrcX/MsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMTBtTTB5ZnFNN180WXAxX1NkYS1PdHhmOHl3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS8yN2M0YzEtMTU3Ny00ZWUxLWFhMjQt YWRlMmJhYmNiOGQwLzEvMTBtTTB5ZnFNN180WXAxX1NkYS1PdHhmOHl3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xOS8yN2M0YzEtMTU3Ny00ZWUxLWFhMjQtYWRlMmJhYmNiOGQw LzEvMTBtTTB5ZnFNN180WXAxX1NkYS1PdHhmOHl3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqoFDmT29 c1Cb8vdiSINXeXVme/qF9RziDxdUh1EZPJEFagzE18Qa+5D17ud4kmA4q3Rn/E95 gukpcE+Hq5ijWimQXs6FFKGmMELy4aSsazFCVuW4Nf/0xKIWXNc0aOMoDfWrXX5/ xeDn2iRAE1ZKfd0i2RIwbHvYyISPG2hUwoEObLMxWegkgkbwW8kyAblwTCwvn2ol QBk6BF8qE3eIr8DXqwo/DXOLYLdMDFEdegOVUEPMbE/M4+P1B45MESqjZVXtsVL/ sndn3M2BSv2Vfz78lVmAt6unnPXDno3/RyFGX4HZWLF/GnPly8AY8HmlAZZn5rkX tze8t6rc0Nmj3g== -----END CERTIFICATE-----Generated at Sat Dec 20 16:18:57 2025 by rpki-client