This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/7766bb-bb48-49be-b21f-0a35b7ed63c7/1/cPK0H9NmFINeM_wIgdskY4s6eHs.mft File: cPK0H9NmFINeM_wIgdskY4s6eHs.mft (raw, json) Hash identifier: SUCnuufMGg4zga5YuwH+BzjN+Q9AWWY8szeHrG1ntpE= Subject key identifier: AF:31:70:A2:B2:21:C2:C3:E7:05:C1:BD:08:B7:18:46:39:D8:85:DF Authority key identifier: 70:F2:B4:1F:D3:66:14:83:5E:33:FC:08:81:DB:24:63:8B:3A:78:7B Certificate issuer: /CN=70f2b41fd36614835e33fc0881db24638b3a787b Certificate serial: 019B6843CE909DEAC1CB5652643EDCB2F827 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cPK0H9NmFINeM_wIgdskY4s6eHs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/7766bb-bb48-49be-b21f-0a35b7ed63c7/1/cPK0H9NmFINeM_wIgdskY4s6eHs.mft Manifest number: 148E Signing time: Mon 29 Dec 2025 04:00:32 +0000 Manifest this update: Mon 29 Dec 2025 04:00:32 +0000 Manifest next update: Tue 30 Dec 2025 04:00:32 +0000 Files and hashes: 1: cPK0H9NmFINeM_wIgdskY4s6eHs.crl (hash: wf0AOXxKCfKjMD0pQCMpcomAZUtaSe5BMarELzgUcT4=) 2: iViHONOdVrtJaKvFtb1zW5ZiFfE.roa (hash: y//sfFe0FaBOPBIT3c460VOfTsEZyJ671nHpKb/hUio=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/7766bb-bb48-49be-b21f-0a35b7ed63c7/1/cPK0H9NmFINeM_wIgdskY4s6eHs.crl rsync://rpki.ripe.net/repository/DEFAULT/1b/7766bb-bb48-49be-b21f-0a35b7ed63c7/1/cPK0H9NmFINeM_wIgdskY4s6eHs.mft rsync://rpki.ripe.net/repository/DEFAULT/cPK0H9NmFINeM_wIgdskY4s6eHs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 29 Dec 2025 21:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:68:43:ce:90:9d:ea:c1:cb:56:52:64:3e:dc:b2:f8:27 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=70f2b41fd36614835e33fc0881db24638b3a787b Validity Not Before: Dec 29 04:00:32 2025 GMT Not After : Dec 30 04:00:32 2025 GMT Subject: CN=af3170a2b221c2c3e705c1bd08b7184639d885df Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:b0:36:c9:29:b4:c8:98:30:eb:2b:53:40:b8: 11:92:4c:83:42:8d:f2:78:60:cb:03:05:8a:a7:9c: 42:ef:2b:dd:4d:b9:d2:de:ae:39:e9:5d:96:f9:25: cd:46:40:3c:f6:54:f3:6b:d0:ad:d1:3a:96:0e:96: 63:5c:5b:71:44:e3:7f:ed:4c:cd:4d:a3:2e:6f:b7: 0c:2e:f2:e0:cc:28:2c:dc:87:c4:c0:2d:dd:bc:f5: f0:f0:ab:b4:43:39:c6:1f:1e:84:68:b0:02:93:4e: 6f:01:23:48:3a:2a:40:98:08:68:a6:b0:14:02:1b: 92:ab:28:0a:25:da:b1:5f:0b:09:7d:de:8e:d9:11: 23:6b:20:4c:d2:6f:f6:e8:63:5c:2c:6a:44:c9:d1: ba:60:4b:89:d2:31:98:bb:b4:65:b5:5c:12:55:bf: 72:fd:15:35:20:b7:d4:e4:31:13:b7:6d:9a:b1:0f: 35:67:1e:28:00:15:1e:dc:3f:ec:f0:1e:0c:af:9e: 1d:fb:a5:ff:35:e1:cd:71:da:b6:67:1e:c6:f2:a8: fa:ec:96:21:c2:21:70:e7:d8:6e:9a:ed:c0:99:8e: 0b:03:95:ad:03:77:06:42:23:00:63:29:25:c0:ce: 3a:21:69:6a:34:a4:83:f6:22:57:22:8b:df:10:7e: dd:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:31:70:A2:B2:21:C2:C3:E7:05:C1:BD:08:B7:18:46:39:D8:85:DF X509v3 Authority Key Identifier: keyid:70:F2:B4:1F:D3:66:14:83:5E:33:FC:08:81:DB:24:63:8B:3A:78:7B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cPK0H9NmFINeM_wIgdskY4s6eHs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/7766bb-bb48-49be-b21f-0a35b7ed63c7/1/cPK0H9NmFINeM_wIgdskY4s6eHs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/7766bb-bb48-49be-b21f-0a35b7ed63c7/1/cPK0H9NmFINeM_wIgdskY4s6eHs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 77:5c:23:3d:74:3c:1c:e0:33:5c:1a:29:58:b3:45:cf:9a:79: 79:75:33:b4:13:55:cb:a4:f9:68:16:10:f4:77:15:a4:64:0a: 95:f5:80:ac:0c:aa:1c:48:dd:32:68:76:84:64:82:e6:78:c3: 13:9c:14:15:56:79:cc:10:33:9b:ad:7e:38:f1:97:5f:13:4a: f0:db:7d:cb:47:33:df:e9:c4:8d:36:c6:22:f4:cb:67:60:63: a5:fb:b8:5e:da:5e:8b:14:07:e5:05:bf:56:bf:3b:e6:ec:1b: 5b:dd:1f:7d:a7:bf:97:51:f2:3a:a3:ff:3a:ac:99:7d:88:69: 38:29:db:a0:8b:ec:53:94:f1:8d:95:d4:c4:28:ba:97:fe:d3: ca:63:14:90:18:7e:ae:6e:a8:cf:85:2c:1d:b9:7f:a2:8d:6f: 78:e2:46:f7:04:3d:00:03:16:b5:3b:61:e1:ca:0b:00:25:99: 1d:09:8b:e3:10:fc:94:b6:78:c1:e1:2c:7a:a4:c3:40:51:d5: 3d:16:66:83:8d:87:b2:02:40:63:c8:2c:ee:e4:79:8d:8b:90: c4:16:4b:97:2d:b9:44:10:cc:53:0b:87:1b:14:c2:2c:de:99: 40:ad:6b:dd:94:ff:07:7d:fa:6f:9a:38:bb:b1:2b:e3:55:af: 1b:bf:ed:a2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtoQ86QnerBy1ZSZD7csvgnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcwZjJiNDFmZDM2NjE0ODM1ZTMzZmMwODgxZGIyNDYzOGIz YTc4N2IwHhcNMjUxMjI5MDQwMDMyWhcNMjUxMjMwMDQwMDMyWjAzMTEwLwYDVQQD EyhhZjMxNzBhMmIyMjFjMmMzZTcwNWMxYmQwOGI3MTg0NjM5ZDg4NWRmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx7A2ySm0yJgw6ytTQLgRkkyDQo3y eGDLAwWKp5xC7yvdTbnS3q456V2W+SXNRkA89lTza9Ct0TqWDpZjXFtxRON/7UzN TaMub7cMLvLgzCgs3IfEwC3dvPXw8Ku0QznGHx6EaLACk05vASNIOipAmAhoprAU AhuSqygKJdqxXwsJfd6O2REjayBM0m/26GNcLGpEydG6YEuJ0jGYu7RltVwSVb9y /RU1ILfU5DETt22asQ81Zx4oABUe3D/s8B4Mr54d+6X/NeHNcdq2Zx7G8qj67JYh wiFw59humu3AmY4LA5WtA3cGQiMAYyklwM46IWlqNKSD9iJXIovfEH7dEwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFK8xcKKyIcLD5wXBvQi3GEY52IXfMB8GA1UdIwQY MBaAFHDytB/TZhSDXjP8CIHbJGOLOnh7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY1BLMEg5Tm1GSU5lTV93SWdkc2tZNHM2ZUhzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYi83NzY2YmItYmI0OC00OWJlLWIyMWYt MGEzNWI3ZWQ2M2M3LzEvY1BLMEg5Tm1GSU5lTV93SWdkc2tZNHM2ZUhzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYi83NzY2YmItYmI0OC00OWJlLWIyMWYtMGEzNWI3ZWQ2M2M3 LzEvY1BLMEg5Tm1GSU5lTV93SWdkc2tZNHM2ZUhzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAd1wjPXQ8 HOAzXBopWLNFz5p5eXUztBNVy6T5aBYQ9HcVpGQKlfWArAyqHEjdMmh2hGSC5njD E5wUFVZ5zBAzm61+OPGXXxNK8Nt9y0cz3+nEjTbGIvTLZ2Bjpfu4XtpeixQH5QW/ Vr875uwbW90ffae/l1HyOqP/OqyZfYhpOCnboIvsU5TxjZXUxCi6l/7TymMUkBh+ rm6oz4UsHbl/oo1veOJG9wQ9AAMWtTth4coLACWZHQmL4xD8lLZ4weEseqTDQFHV PRZmg42HsgJAY8gs7uR5jYuQxBZLly25RBDMUwuHGxTCLN6ZQK1r3ZT/B336b5o4 u7Er41WvG7/tog== -----END CERTIFICATE-----Generated at Mon Dec 29 06:49:19 2025 by rpki-client