This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/7766bb-bb48-49be-b21f-0a35b7ed63c7/1/cPK0H9NmFINeM_wIgdskY4s6eHs.mft File: cPK0H9NmFINeM_wIgdskY4s6eHs.mft (raw, json) Hash identifier: VlflkWcnfDvGbk6Or6LLW6yTIsXT7Ie0YyAWJqerKyc= Subject key identifier: 9F:9C:F1:5F:C5:70:54:18:89:76:DB:44:A0:4E:46:DB:45:AF:65:25 Authority key identifier: 70:F2:B4:1F:D3:66:14:83:5E:33:FC:08:81:DB:24:63:8B:3A:78:7B Certificate issuer: /CN=70f2b41fd36614835e33fc0881db24638b3a787b Certificate serial: 019B3DC81EC7AB30E41E28C657C0093BF426 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cPK0H9NmFINeM_wIgdskY4s6eHs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/7766bb-bb48-49be-b21f-0a35b7ed63c7/1/cPK0H9NmFINeM_wIgdskY4s6eHs.mft Manifest number: 1478 Signing time: Sat 20 Dec 2025 22:01:23 +0000 Manifest this update: Sat 20 Dec 2025 22:01:23 +0000 Manifest next update: Sun 21 Dec 2025 22:01:23 +0000 Files and hashes: 1: cPK0H9NmFINeM_wIgdskY4s6eHs.crl (hash: xIKRsftoM1uHEV1LqoxohDcPmgMpU8LKdlyKSqLjXb4=) 2: iViHONOdVrtJaKvFtb1zW5ZiFfE.roa (hash: y//sfFe0FaBOPBIT3c460VOfTsEZyJ671nHpKb/hUio=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/7766bb-bb48-49be-b21f-0a35b7ed63c7/1/cPK0H9NmFINeM_wIgdskY4s6eHs.crl rsync://rpki.ripe.net/repository/DEFAULT/1b/7766bb-bb48-49be-b21f-0a35b7ed63c7/1/cPK0H9NmFINeM_wIgdskY4s6eHs.mft rsync://rpki.ripe.net/repository/DEFAULT/cPK0H9NmFINeM_wIgdskY4s6eHs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 22:01:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:c8:1e:c7:ab:30:e4:1e:28:c6:57:c0:09:3b:f4:26 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=70f2b41fd36614835e33fc0881db24638b3a787b Validity Not Before: Dec 20 22:01:23 2025 GMT Not After : Dec 21 22:01:23 2025 GMT Subject: CN=9f9cf15fc57054188976db44a04e46db45af6525 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:55:4d:b9:3a:2b:b9:58:da:d4:ae:15:a8:73: 18:17:de:98:02:e2:09:f2:9b:cd:db:93:7e:3a:c9: c4:b4:e0:ec:6e:e1:c7:39:44:26:0a:25:ed:c7:4d: b3:73:48:05:bf:67:cc:2c:fc:bc:cc:28:fc:8d:b6: 0a:1c:93:d5:b7:ca:18:54:aa:f1:37:08:db:c4:a0: 30:00:a8:20:d0:42:69:e0:3a:63:3b:af:b2:54:27: da:bd:7b:a7:87:26:ec:71:2a:f4:c5:af:a8:af:a8: 13:43:a4:48:89:1e:d7:6c:c3:b4:2e:4d:b3:24:3c: 87:9a:36:c1:59:86:ca:9b:bb:f6:8b:18:35:f6:8e: 26:06:d5:4e:49:c2:18:40:7d:04:21:c4:c6:85:c6: 9a:2e:44:18:5b:f5:1b:7f:21:0a:c1:5c:24:e0:ee: 3b:a0:92:46:06:1c:5b:82:16:24:42:4f:c1:13:7b: 3a:24:6f:b9:25:b5:a9:5e:ee:c3:e6:c6:2a:d2:7c: fb:2a:71:5d:47:18:e8:d0:7a:69:13:02:e7:25:bc: 3c:3d:4b:35:f0:ab:a8:dc:4d:c2:45:88:07:39:c5: 10:dc:32:17:06:01:3e:6f:31:4b:b0:24:08:d2:a7: 68:90:a1:72:dc:cf:7f:43:1e:b8:f8:eb:78:11:d4: 42:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:9C:F1:5F:C5:70:54:18:89:76:DB:44:A0:4E:46:DB:45:AF:65:25 X509v3 Authority Key Identifier: keyid:70:F2:B4:1F:D3:66:14:83:5E:33:FC:08:81:DB:24:63:8B:3A:78:7B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cPK0H9NmFINeM_wIgdskY4s6eHs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/7766bb-bb48-49be-b21f-0a35b7ed63c7/1/cPK0H9NmFINeM_wIgdskY4s6eHs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/7766bb-bb48-49be-b21f-0a35b7ed63c7/1/cPK0H9NmFINeM_wIgdskY4s6eHs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 73:9e:a9:d8:93:cc:59:67:09:81:20:1b:bb:71:43:6d:57:65: e3:4f:8d:44:d9:71:15:76:36:b9:7c:c4:da:c6:14:56:ab:c1: 78:d3:0e:4f:29:b0:dc:e7:69:a1:69:23:8f:dc:e1:dd:d1:4e: 12:0e:6c:4a:7e:7d:24:bb:1f:42:64:b8:9f:7a:5e:33:4f:9f: 06:9a:af:62:65:f4:54:2d:7d:d1:94:15:18:39:26:35:87:d2: fb:1b:15:11:af:bc:c8:a8:d1:43:83:b8:82:bf:57:42:f9:11: 5a:ce:d1:ba:55:d0:18:6a:9a:12:b7:25:0b:b2:f9:29:09:b4: b1:c3:7d:7e:6e:92:4d:24:d3:e0:ae:50:1a:c0:b3:ed:4b:62: 5e:aa:27:47:48:33:61:bb:48:bb:d6:77:46:c9:f9:a4:9d:e2: bd:58:c3:e2:18:51:58:8c:79:38:01:48:f3:a9:f0:32:1c:31: 33:fd:42:80:f3:83:42:89:9a:78:ea:5c:76:83:f4:7f:12:48: 53:e7:19:15:d9:a6:34:be:df:31:ee:85:dd:20:d7:16:07:ba: c1:03:0a:11:9e:3f:ec:c3:d3:2b:44:f9:d0:f9:d2:a6:27:e5: d3:31:c7:a5:10:99:8d:2b:1f:86:98:d3:70:fe:32:db:c0:3f: dc:a7:0a:cb -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9yB7HqzDkHijGV8AJO/QmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcwZjJiNDFmZDM2NjE0ODM1ZTMzZmMwODgxZGIyNDYzOGIz YTc4N2IwHhcNMjUxMjIwMjIwMTIzWhcNMjUxMjIxMjIwMTIzWjAzMTEwLwYDVQQD Eyg5ZjljZjE1ZmM1NzA1NDE4ODk3NmRiNDRhMDRlNDZkYjQ1YWY2NTI1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7VVNuToruVja1K4VqHMYF96YAuIJ 8pvN25N+OsnEtODsbuHHOUQmCiXtx02zc0gFv2fMLPy8zCj8jbYKHJPVt8oYVKrx NwjbxKAwAKgg0EJp4DpjO6+yVCfavXunhybscSr0xa+or6gTQ6RIiR7XbMO0Lk2z JDyHmjbBWYbKm7v2ixg19o4mBtVOScIYQH0EIcTGhcaaLkQYW/UbfyEKwVwk4O47 oJJGBhxbghYkQk/BE3s6JG+5JbWpXu7D5sYq0nz7KnFdRxjo0HppEwLnJbw8PUs1 8Kuo3E3CRYgHOcUQ3DIXBgE+bzFLsCQI0qdokKFy3M9/Qx64+Ot4EdRCzQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJ+c8V/FcFQYiXbbRKBORttFr2UlMB8GA1UdIwQY MBaAFHDytB/TZhSDXjP8CIHbJGOLOnh7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY1BLMEg5Tm1GSU5lTV93SWdkc2tZNHM2ZUhzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYi83NzY2YmItYmI0OC00OWJlLWIyMWYt MGEzNWI3ZWQ2M2M3LzEvY1BLMEg5Tm1GSU5lTV93SWdkc2tZNHM2ZUhzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYi83NzY2YmItYmI0OC00OWJlLWIyMWYtMGEzNWI3ZWQ2M2M3 LzEvY1BLMEg5Tm1GSU5lTV93SWdkc2tZNHM2ZUhzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAc56p2JPM WWcJgSAbu3FDbVdl40+NRNlxFXY2uXzE2sYUVqvBeNMOTymw3OdpoWkjj9zh3dFO Eg5sSn59JLsfQmS4n3peM0+fBpqvYmX0VC190ZQVGDkmNYfS+xsVEa+8yKjRQ4O4 gr9XQvkRWs7RulXQGGqaErclC7L5KQm0scN9fm6STSTT4K5QGsCz7UtiXqonR0gz YbtIu9Z3Rsn5pJ3ivVjD4hhRWIx5OAFI86nwMhwxM/1CgPODQomaeOpcdoP0fxJI U+cZFdmmNL7fMe6F3SDXFge6wQMKEZ4/7MPTK0T50PnSpifl0zHHpRCZjSsfhpjT cP4y28A/3KcKyw== -----END CERTIFICATE-----Generated at Sun Dec 21 06:46:05 2025 by rpki-client