This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/477c86-c7d6-4e37-bff6-a0072bac9f48/1/cms1Dp9PElni-cYJsi5l-9GGIGs.mft File: cms1Dp9PElni-cYJsi5l-9GGIGs.mft (raw, json) Hash identifier: MwWaYILaRNyYIELg7c0StyvGDjuDtSpw4A0iYd37c6Y= Subject key identifier: C4:D8:03:EA:F0:D6:CB:09:C2:89:9D:AC:DA:13:0B:43:D5:57:9D:36 Authority key identifier: 72:6B:35:0E:9F:4F:12:59:E2:F9:C6:09:B2:2E:65:FB:D1:86:20:6B Certificate issuer: /CN=726b350e9f4f1259e2f9c609b22e65fbd186206b Certificate serial: 019B3CEC8B831017E860F20C5DEE1F2405EF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cms1Dp9PElni-cYJsi5l-9GGIGs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/477c86-c7d6-4e37-bff6-a0072bac9f48/1/cms1Dp9PElni-cYJsi5l-9GGIGs.mft Manifest number: 0A81 Signing time: Sat 20 Dec 2025 18:01:33 +0000 Manifest this update: Sat 20 Dec 2025 18:01:33 +0000 Manifest next update: Sun 21 Dec 2025 18:01:33 +0000 Files and hashes: 1: CgBNGq2vvpW1xEBq_J8TTjYOWu0.roa (hash: CfZUCA05oFbMMXS/ui8XIHr2JUyCob7FGarrcgeEvE0=) 2: _DE8jBpnVZ36FaQjKKqWbHiWbvo.roa (hash: nj3mkL3pbPWWGWLOVhi9o9i9dXTzVhaJgzjUgFTiKuo=) 3: cms1Dp9PElni-cYJsi5l-9GGIGs.crl (hash: Gzujlc2eiBHCMKblAOw8+TLZXv2moVMw8Iy/Vrv5av4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/477c86-c7d6-4e37-bff6-a0072bac9f48/1/cms1Dp9PElni-cYJsi5l-9GGIGs.crl rsync://rpki.ripe.net/repository/DEFAULT/2a/477c86-c7d6-4e37-bff6-a0072bac9f48/1/cms1Dp9PElni-cYJsi5l-9GGIGs.mft rsync://rpki.ripe.net/repository/DEFAULT/cms1Dp9PElni-cYJsi5l-9GGIGs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 10:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:ec:8b:83:10:17:e8:60:f2:0c:5d:ee:1f:24:05:ef Signature Algorithm: sha256WithRSAEncryption Issuer: CN=726b350e9f4f1259e2f9c609b22e65fbd186206b Validity Not Before: Dec 20 18:01:33 2025 GMT Not After : Dec 21 18:01:33 2025 GMT Subject: CN=c4d803eaf0d6cb09c2899dacda130b43d5579d36 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:9c:d9:68:dc:21:e7:b7:22:fb:d3:0c:11:84: b6:d0:c4:68:1b:99:dc:8e:56:08:7d:15:9f:31:0d: 3a:6d:1b:f6:ac:69:a8:04:d6:bd:eb:a3:e6:ac:95: 3c:7c:dd:eb:48:1c:f6:b2:18:fb:cd:91:2e:b3:ab: 98:da:1c:ae:d9:12:c5:78:5e:a9:cf:db:71:4d:ef: f9:cb:25:18:3e:fe:af:75:66:91:91:35:4e:a1:cf: a9:ea:0a:e7:08:78:7f:9b:fb:25:19:a6:e2:e4:15: 07:f3:da:5b:11:1b:9d:0a:fb:48:4a:f4:05:c4:1c: a1:b6:a4:9a:cc:8f:9f:47:c8:9a:8d:d9:b9:74:f8: b9:e3:1e:5a:bf:4d:b9:45:a4:03:91:d6:8f:56:0a: da:97:10:de:e6:e6:2d:37:2c:5b:5d:69:c6:5f:22: 1c:cb:65:eb:06:24:0f:b0:3a:61:a1:52:bc:27:82: 2e:f9:9f:ca:8c:db:7d:87:e9:c8:46:f6:91:e4:4d: e9:e3:e3:f9:39:75:ad:02:35:ef:40:2c:29:52:eb: 1b:c6:1e:36:1f:fd:1f:f1:5b:d4:2e:82:87:ee:63: 11:9e:c0:2b:7b:8f:5d:15:5f:e3:c4:f4:25:9d:88: 57:94:fe:da:96:51:68:05:38:a4:02:95:ad:8f:82: b8:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:D8:03:EA:F0:D6:CB:09:C2:89:9D:AC:DA:13:0B:43:D5:57:9D:36 X509v3 Authority Key Identifier: keyid:72:6B:35:0E:9F:4F:12:59:E2:F9:C6:09:B2:2E:65:FB:D1:86:20:6B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cms1Dp9PElni-cYJsi5l-9GGIGs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/477c86-c7d6-4e37-bff6-a0072bac9f48/1/cms1Dp9PElni-cYJsi5l-9GGIGs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/477c86-c7d6-4e37-bff6-a0072bac9f48/1/cms1Dp9PElni-cYJsi5l-9GGIGs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 74:7f:a2:ca:c4:01:e4:fd:73:57:39:ea:88:78:4a:57:f3:1d: ff:3d:67:30:a9:a3:9e:ef:d7:b9:0e:91:de:19:f7:77:6d:45: 9b:c1:ac:e7:91:e5:4f:7d:40:06:5e:1d:9a:2d:0a:a7:bf:8e: c5:fb:a9:a8:35:fe:97:d4:8a:a1:3a:2a:ef:4c:0b:d1:01:81: 0f:24:ad:0d:db:bc:de:53:0a:e9:c5:85:f0:68:4f:33:bc:cf: c5:c7:d8:cd:a7:ae:6a:d7:bf:7b:4d:2f:36:f1:28:69:c9:2e: 66:78:a2:2c:37:a5:13:e9:d8:40:27:3b:22:20:07:a2:bf:c1: 18:13:4c:15:58:69:03:28:01:b1:96:19:50:5f:25:d2:9c:44: 0f:54:be:ff:92:ea:96:14:f9:04:c0:c5:5a:bc:b5:bf:a2:33: 15:f8:5a:da:f8:cd:d8:b0:63:cf:bd:7e:cd:94:d2:cc:1b:c3: be:a0:ee:9a:1f:fb:09:da:00:65:8a:7b:b4:e8:80:4f:0b:5a: 49:fb:c3:e3:42:b0:b1:6c:fb:8d:59:65:8b:d3:12:13:f0:db: 90:2e:14:ca:8e:f9:f5:24:72:a5:c2:bc:91:6d:dd:71:55:79: fd:92:1a:89:67:26:ee:4a:82:2a:7f:bb:7b:b6:1f:6f:23:19: 5b:b3:2c:8b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs87IuDEBfoYPIMXe4fJAXvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcyNmIzNTBlOWY0ZjEyNTllMmY5YzYwOWIyMmU2NWZiZDE4 NjIwNmIwHhcNMjUxMjIwMTgwMTMzWhcNMjUxMjIxMTgwMTMzWjAzMTEwLwYDVQQD EyhjNGQ4MDNlYWYwZDZjYjA5YzI4OTlkYWNkYTEzMGI0M2Q1NTc5ZDM2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvJzZaNwh57ci+9MMEYS20MRoG5nc jlYIfRWfMQ06bRv2rGmoBNa966PmrJU8fN3rSBz2shj7zZEus6uY2hyu2RLFeF6p z9txTe/5yyUYPv6vdWaRkTVOoc+p6grnCHh/m/slGabi5BUH89pbERudCvtISvQF xByhtqSazI+fR8iajdm5dPi54x5av025RaQDkdaPVgralxDe5uYtNyxbXWnGXyIc y2XrBiQPsDphoVK8J4Iu+Z/KjNt9h+nIRvaR5E3p4+P5OXWtAjXvQCwpUusbxh42 H/0f8VvULoKH7mMRnsAre49dFV/jxPQlnYhXlP7allFoBTikApWtj4K4YwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMTYA+rw1ssJwomdrNoTC0PVV502MB8GA1UdIwQY MBaAFHJrNQ6fTxJZ4vnGCbIuZfvRhiBrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY21zMURwOVBFbG5pLWNZSnNpNWwtOUdHSUdzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYS80NzdjODYtYzdkNi00ZTM3LWJmZjYt YTAwNzJiYWM5ZjQ4LzEvY21zMURwOVBFbG5pLWNZSnNpNWwtOUdHSUdzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYS80NzdjODYtYzdkNi00ZTM3LWJmZjYtYTAwNzJiYWM5ZjQ4 LzEvY21zMURwOVBFbG5pLWNZSnNpNWwtOUdHSUdzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdH+iysQB 5P1zVznqiHhKV/Md/z1nMKmjnu/XuQ6R3hn3d21Fm8Gs55HlT31ABl4dmi0Kp7+O xfupqDX+l9SKoToq70wL0QGBDyStDdu83lMK6cWF8GhPM7zPxcfYzaeuate/e00v NvEoackuZniiLDelE+nYQCc7IiAHor/BGBNMFVhpAygBsZYZUF8l0pxED1S+/5Lq lhT5BMDFWry1v6IzFfha2vjN2LBjz71+zZTSzBvDvqDumh/7CdoAZYp7tOiATwta SfvD40KwsWz7jVlli9MSE/DbkC4Uyo759SRypcK8kW3dcVV5/ZIaiWcm7kqCKn+7 e7YfbyMZW7Msiw== -----END CERTIFICATE-----Generated at Sat Dec 20 19:32:58 2025 by rpki-client