This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/963170-58be-46bb-a5de-777373e6055e/1/cJSkJVlekjxLU7nAAKqPGa2SPyA.mft File: cJSkJVlekjxLU7nAAKqPGa2SPyA.mft (raw, json) Hash identifier: wveZllpVXgrClO9V2eDOSVnzoyYBCuRyRZgjP97iL14= Subject key identifier: 1E:09:7C:1B:B4:6C:83:F2:A3:BB:CB:30:4D:6E:4B:2E:6A:9A:91:CB Authority key identifier: 70:94:A4:25:59:5E:92:3C:4B:53:B9:C0:00:AA:8F:19:AD:92:3F:20 Certificate issuer: /CN=7094a425595e923c4b53b9c000aa8f19ad923f20 Certificate serial: 019B3EDAF32EC3C19C0B87C238B7834F3D39 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cJSkJVlekjxLU7nAAKqPGa2SPyA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/963170-58be-46bb-a5de-777373e6055e/1/cJSkJVlekjxLU7nAAKqPGa2SPyA.mft Manifest number: 13A1 Signing time: Sun 21 Dec 2025 03:01:35 +0000 Manifest this update: Sun 21 Dec 2025 03:01:35 +0000 Manifest next update: Mon 22 Dec 2025 03:01:35 +0000 Files and hashes: 1: 1-YTs4r6zU-8mdejFRdCllU9534c.roa (hash: 1PeguZ92yFC8iaBTSsGvqpeeYV8duXPcAw7VUiDhRiw=) 2: 5z-bgDH8lytiLnfe9VpEMYme7ek.roa (hash: q3gRkg1Wu1TjQxIsHIpzRCg8G07UfeVe/I9XDxRqtvo=) 3: GgOjLst_2cOjWFXXQ04HdoXttH4.roa (hash: z2Rfj6acoKtcXjm6dwLXQBUNElg6LrojkoNiCuSKCms=) 4: cJSkJVlekjxLU7nAAKqPGa2SPyA.crl (hash: Do5CImleyIGQzvqxpLbcvBxY3M4ZW+uA5WPB57NEJMw=) 5: gp9nHU_cukvMULZAvDnIuT6ptiM.roa (hash: 7wIfWYcUlSAbfRukKEeXPASEhd8fL4WRrL0l2D1YuTg=) 6: hKdzSlgkizVpoLvfGaH8kRoUyB4.roa (hash: eKmXOdDdv5KCQd+EWAKp0FLk1/DsxSq3Ym4RiAI0fek=) 7: rSaIHtGhDT0jOkbwk5w9J-_5svc.roa (hash: DVoLZl1ZXv/1pFpFxvGq3uqDR2CUE2IcgixTkQGHWKU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/963170-58be-46bb-a5de-777373e6055e/1/cJSkJVlekjxLU7nAAKqPGa2SPyA.crl rsync://rpki.ripe.net/repository/DEFAULT/2a/963170-58be-46bb-a5de-777373e6055e/1/cJSkJVlekjxLU7nAAKqPGa2SPyA.mft rsync://rpki.ripe.net/repository/DEFAULT/cJSkJVlekjxLU7nAAKqPGa2SPyA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 03:01:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3e:da:f3:2e:c3:c1:9c:0b:87:c2:38:b7:83:4f:3d:39 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7094a425595e923c4b53b9c000aa8f19ad923f20 Validity Not Before: Dec 21 03:01:35 2025 GMT Not After : Dec 22 03:01:35 2025 GMT Subject: CN=1e097c1bb46c83f2a3bbcb304d6e4b2e6a9a91cb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:8a:38:14:25:bc:99:8b:f5:26:ec:b8:e2:b6: 73:2b:c6:78:2a:77:df:a2:b6:77:71:3f:b4:84:8f: 08:c9:df:57:bb:8f:3e:3c:58:db:af:a7:52:f7:e9: 56:64:e1:1c:87:75:21:51:b4:5a:48:ac:f4:b1:6d: 26:25:16:5f:90:a0:ae:22:9d:7b:e7:c6:d5:2f:8a: 19:d1:39:a7:f3:3d:d4:21:53:f6:13:24:32:89:63: 15:f0:69:a1:81:bd:20:8f:f6:f2:f2:55:db:46:d9: 6d:9f:8a:44:ed:31:e0:07:c1:46:7b:7c:0e:8b:10: e9:3b:f1:c8:e7:fa:2e:1f:80:f3:09:20:5a:77:45: e7:63:b2:a2:32:7e:5d:b3:38:1e:00:33:99:97:ed: 6a:04:c8:cd:e2:37:17:a0:b5:de:52:c1:aa:68:80: cf:a8:a5:0c:03:81:3d:f4:64:c7:66:32:5d:1e:7f: 4d:5c:6e:e5:63:dd:72:ef:69:52:36:77:b5:3b:72: ed:af:85:e6:26:06:f7:c9:00:51:cb:a6:19:88:52: 92:86:74:db:a8:aa:98:94:f3:28:41:23:7f:72:c8: 6d:e9:83:95:96:b3:af:ca:ac:65:3f:9c:f2:4e:3f: 8e:4c:7b:45:82:4a:ec:34:e2:ed:0d:44:c3:c1:1f: bb:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:09:7C:1B:B4:6C:83:F2:A3:BB:CB:30:4D:6E:4B:2E:6A:9A:91:CB X509v3 Authority Key Identifier: keyid:70:94:A4:25:59:5E:92:3C:4B:53:B9:C0:00:AA:8F:19:AD:92:3F:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cJSkJVlekjxLU7nAAKqPGa2SPyA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/963170-58be-46bb-a5de-777373e6055e/1/cJSkJVlekjxLU7nAAKqPGa2SPyA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/963170-58be-46bb-a5de-777373e6055e/1/cJSkJVlekjxLU7nAAKqPGa2SPyA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 19:7a:8c:64:23:ba:49:22:15:61:fd:2c:ae:3f:c6:28:b6:bd: be:d9:d1:eb:2e:f6:a7:e8:36:94:73:9d:f1:d8:77:d4:bb:f4: e1:f2:6d:a3:7e:20:43:7f:14:c2:92:69:7e:2b:f7:bb:3b:6c: ae:46:d3:f5:a1:e9:e0:21:88:54:99:36:3c:d0:7f:20:4e:69: 6b:2d:f9:be:6b:37:b3:00:24:09:f6:6d:13:aa:86:a4:d6:ad: 36:ee:52:3b:07:e9:82:66:a3:1a:7e:5d:3b:0f:ba:54:70:42: c6:ae:2f:75:df:74:c1:ca:1b:fa:cb:ee:8a:b7:38:60:64:3f: d8:87:d2:48:3a:68:ff:31:4b:f3:1e:bd:3b:5c:b3:8c:0e:69: 65:ff:81:a5:8e:bf:fc:06:ed:92:89:12:5a:b7:d9:05:32:7c: 86:66:56:55:d6:8b:e2:a2:72:a7:61:e4:7f:45:40:6d:2e:e8: 9d:46:c1:a6:e6:4d:a7:a9:99:3f:55:5c:a3:a7:05:3c:85:e1: 0c:d9:81:22:8d:bc:0e:6e:7e:26:fe:8c:dd:e1:ca:0a:a1:09: b3:1b:72:90:07:63:4c:be:c2:49:8e:fe:00:55:9e:01:c3:7e: c1:db:58:db:cb:a3:9d:5b:40:48:3f:2c:bf:af:28:15:c9:ba: d5:c6:55:f7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs+2vMuw8GcC4fCOLeDTz05MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcwOTRhNDI1NTk1ZTkyM2M0YjUzYjljMDAwYWE4ZjE5YWQ5 MjNmMjAwHhcNMjUxMjIxMDMwMTM1WhcNMjUxMjIyMDMwMTM1WjAzMTEwLwYDVQQD EygxZTA5N2MxYmI0NmM4M2YyYTNiYmNiMzA0ZDZlNGIyZTZhOWE5MWNiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1oo4FCW8mYv1Juy44rZzK8Z4Knff orZ3cT+0hI8Iyd9Xu48+PFjbr6dS9+lWZOEch3UhUbRaSKz0sW0mJRZfkKCuIp17 58bVL4oZ0Tmn8z3UIVP2EyQyiWMV8Gmhgb0gj/by8lXbRtltn4pE7THgB8FGe3wO ixDpO/HI5/ouH4DzCSBad0XnY7KiMn5dszgeADOZl+1qBMjN4jcXoLXeUsGqaIDP qKUMA4E99GTHZjJdHn9NXG7lY91y72lSNne1O3Ltr4XmJgb3yQBRy6YZiFKShnTb qKqYlPMoQSN/csht6YOVlrOvyqxlP5zyTj+OTHtFgkrsNOLtDUTDwR+7NwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFB4JfBu0bIPyo7vLME1uSy5qmpHLMB8GA1UdIwQY MBaAFHCUpCVZXpI8S1O5wACqjxmtkj8gMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY0pTa0pWbGVranhMVTduQUFLcVBHYTJTUHlBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYS85NjMxNzAtNThiZS00NmJiLWE1ZGUt Nzc3MzczZTYwNTVlLzEvY0pTa0pWbGVranhMVTduQUFLcVBHYTJTUHlBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYS85NjMxNzAtNThiZS00NmJiLWE1ZGUtNzc3MzczZTYwNTVl LzEvY0pTa0pWbGVranhMVTduQUFLcVBHYTJTUHlBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGXqMZCO6 SSIVYf0srj/GKLa9vtnR6y72p+g2lHOd8dh31Lv04fJto34gQ38UwpJpfiv3uzts rkbT9aHp4CGIVJk2PNB/IE5pay35vms3swAkCfZtE6qGpNatNu5SOwfpgmajGn5d Ow+6VHBCxq4vdd90wcob+svuirc4YGQ/2IfSSDpo/zFL8x69O1yzjA5pZf+BpY6/ /AbtkokSWrfZBTJ8hmZWVdaL4qJyp2Hkf0VAbS7onUbBpuZNp6mZP1Vco6cFPIXh DNmBIo28Dm5+Jv6M3eHKCqEJsxtykAdjTL7CSY7+AFWeAcN+wdtY28ujnVtASD8s v68oFcm61cZV9w== -----END CERTIFICATE-----Generated at Sun Dec 21 12:16:24 2025 by rpki-client