This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/c59484-b07a-4ca1-abcd-a83845caac21/1/cd9sdT6ghb7zcrOSYw90uldpbuU.mft File: cd9sdT6ghb7zcrOSYw90uldpbuU.mft (raw, json) Hash identifier: njed3CQOfydo6Wiz3HVaiWB+opSSeBVVC0I8PWr/C2w= Subject key identifier: 7D:0F:E3:C9:DB:8B:57:E3:9C:CE:8E:02:8D:8F:7F:92:2D:A5:1C:25 Authority key identifier: 71:DF:6C:75:3E:A0:85:BE:F3:72:B3:92:63:0F:74:BA:57:69:6E:E5 Certificate issuer: /CN=71df6c753ea085bef372b392630f74ba57696ee5 Certificate serial: 019B405AD3CF98BAACE285C730743DCF549A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cd9sdT6ghb7zcrOSYw90uldpbuU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/c59484-b07a-4ca1-abcd-a83845caac21/1/cd9sdT6ghb7zcrOSYw90uldpbuU.mft Manifest number: 149B Signing time: Sun 21 Dec 2025 10:00:52 +0000 Manifest this update: Sun 21 Dec 2025 10:00:52 +0000 Manifest next update: Mon 22 Dec 2025 10:00:52 +0000 Files and hashes: 1: 26OroNSilLDsLnRmS90OawnRg8M.roa (hash: 2vZiL1ss373Q0TX+B8Q8SMDZKCr1m9fpyjjeqgVg0rI=) 2: cd9sdT6ghb7zcrOSYw90uldpbuU.crl (hash: lXNC+6B7NV4w0kmnJdjalf/EzoGrRwaoTC1qXMSk91o=) 3: yFq0JfOaNjdhRiNZMahKgBz5pBs.roa (hash: HLvs21UJM8ndMu/vC6YjvpshtGffGUPV1RHDv0ERCAc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/c59484-b07a-4ca1-abcd-a83845caac21/1/cd9sdT6ghb7zcrOSYw90uldpbuU.crl rsync://rpki.ripe.net/repository/DEFAULT/33/c59484-b07a-4ca1-abcd-a83845caac21/1/cd9sdT6ghb7zcrOSYw90uldpbuU.mft rsync://rpki.ripe.net/repository/DEFAULT/cd9sdT6ghb7zcrOSYw90uldpbuU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 10:00:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:40:5a:d3:cf:98:ba:ac:e2:85:c7:30:74:3d:cf:54:9a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=71df6c753ea085bef372b392630f74ba57696ee5 Validity Not Before: Dec 21 10:00:52 2025 GMT Not After : Dec 22 10:00:52 2025 GMT Subject: CN=7d0fe3c9db8b57e39cce8e028d8f7f922da51c25 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:08:fb:34:84:b5:54:a2:32:f4:15:88:81:e4: 85:c3:16:ed:80:e9:20:eb:a9:56:51:fc:d0:14:6a: 66:a6:88:f1:88:6c:76:60:06:32:bd:75:8a:67:e3: 67:87:51:70:0e:8f:fe:b6:9c:3b:27:d6:b6:4b:10: b9:87:45:f5:45:6b:47:ff:16:30:6b:c5:08:8c:52: 16:4b:1e:32:a0:23:35:56:f2:13:b0:b2:8a:6e:2e: 8c:0f:03:52:93:85:01:36:a6:d2:f3:63:77:dc:5d: 30:ca:b5:bb:a3:98:6d:cb:2c:ac:f1:70:ef:ab:c3: 1f:77:58:1f:15:79:f4:72:95:54:69:81:36:58:25: 17:99:66:5a:42:94:ea:83:f0:e6:7e:72:33:b4:4f: 47:82:8e:21:91:c1:69:fd:33:fe:9e:ba:4a:c3:21: a2:f8:42:20:c5:8a:1e:56:8c:e5:cc:ab:6e:fd:1e: f1:eb:35:c8:46:2c:2e:76:34:c4:15:b0:8f:6d:9e: 44:4c:3d:d2:59:ee:93:39:e2:15:24:f3:21:75:a9: 14:99:7a:fb:80:d4:0a:cf:76:54:73:34:0a:dd:62: fe:a2:b5:54:3d:9e:1f:80:a6:22:c3:6e:cb:c1:4c: 52:f8:dd:5f:73:6f:ed:a7:75:25:75:54:df:55:c1: e1:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:0F:E3:C9:DB:8B:57:E3:9C:CE:8E:02:8D:8F:7F:92:2D:A5:1C:25 X509v3 Authority Key Identifier: keyid:71:DF:6C:75:3E:A0:85:BE:F3:72:B3:92:63:0F:74:BA:57:69:6E:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd9sdT6ghb7zcrOSYw90uldpbuU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/c59484-b07a-4ca1-abcd-a83845caac21/1/cd9sdT6ghb7zcrOSYw90uldpbuU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/33/c59484-b07a-4ca1-abcd-a83845caac21/1/cd9sdT6ghb7zcrOSYw90uldpbuU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 10:bf:9e:bc:fd:60:05:1c:79:15:2a:ff:bc:7d:3b:6a:3d:4a: 78:ce:48:ea:5f:89:ed:4a:e1:48:aa:e9:a7:50:13:94:a2:df: b0:15:a0:14:62:b2:31:ff:9b:51:2f:79:cd:34:18:8f:b2:2c: a1:0a:4c:9e:89:28:a1:85:a0:f6:96:61:e1:26:a6:87:b7:88: 4b:65:c5:4e:0e:d9:8f:88:62:20:55:14:10:4b:44:e6:ad:63: 83:65:9d:1c:33:09:92:21:89:a7:d7:5d:6d:9e:8f:d4:50:38: 34:81:96:3e:86:97:1d:33:99:55:b0:28:af:d9:c8:84:c7:a9: d1:6f:a2:06:52:b2:d2:1b:6e:96:36:1a:1d:7c:b6:da:f1:d2: 1b:da:6a:c5:fe:0f:9f:58:cf:ba:d4:6d:10:a3:64:f0:3e:13: a3:97:fd:f7:ea:ee:56:8b:19:13:32:70:ab:ad:51:89:b6:fe: 0d:4b:fe:3a:ae:f2:d3:06:6e:10:fc:f5:8c:f4:20:a8:7e:71: 59:d0:0f:37:b8:4b:0c:54:61:2f:5e:31:50:4b:4b:b9:fb:2d: f7:ed:20:d9:08:fe:ac:e3:3d:d9:f5:02:0b:9d:1c:85:94:90: 3a:47:9d:da:79:fa:51:24:72:5b:28:bf:05:b4:87:8c:ed:a0: 73:2d:a6:36 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtAWtPPmLqs4oXHMHQ9z1SaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcxZGY2Yzc1M2VhMDg1YmVmMzcyYjM5MjYzMGY3NGJhNTc2 OTZlZTUwHhcNMjUxMjIxMTAwMDUyWhcNMjUxMjIyMTAwMDUyWjAzMTEwLwYDVQQD Eyg3ZDBmZTNjOWRiOGI1N2UzOWNjZThlMDI4ZDhmN2Y5MjJkYTUxYzI1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwgj7NIS1VKIy9BWIgeSFwxbtgOkg 66lWUfzQFGpmpojxiGx2YAYyvXWKZ+Nnh1FwDo/+tpw7J9a2SxC5h0X1RWtH/xYw a8UIjFIWSx4yoCM1VvITsLKKbi6MDwNSk4UBNqbS82N33F0wyrW7o5htyyys8XDv q8Mfd1gfFXn0cpVUaYE2WCUXmWZaQpTqg/DmfnIztE9Hgo4hkcFp/TP+nrpKwyGi +EIgxYoeVozlzKtu/R7x6zXIRiwudjTEFbCPbZ5ETD3SWe6TOeIVJPMhdakUmXr7 gNQKz3ZUczQK3WL+orVUPZ4fgKYiw27LwUxS+N1fc2/tp3UldVTfVcHh+QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFH0P48nbi1fjnM6OAo2Pf5ItpRwlMB8GA1UdIwQY MBaAFHHfbHU+oIW+83KzkmMPdLpXaW7lMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY2Q5c2RUNmdoYjd6Y3JPU1l3OTB1bGRwYnVVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMy9jNTk0ODQtYjA3YS00Y2ExLWFiY2Qt YTgzODQ1Y2FhYzIxLzEvY2Q5c2RUNmdoYjd6Y3JPU1l3OTB1bGRwYnVVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMy9jNTk0ODQtYjA3YS00Y2ExLWFiY2QtYTgzODQ1Y2FhYzIx LzEvY2Q5c2RUNmdoYjd6Y3JPU1l3OTB1bGRwYnVVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEL+evP1g BRx5FSr/vH07aj1KeM5I6l+J7UrhSKrpp1ATlKLfsBWgFGKyMf+bUS95zTQYj7Is oQpMnokooYWg9pZh4Samh7eIS2XFTg7Zj4hiIFUUEEtE5q1jg2WdHDMJkiGJp9dd bZ6P1FA4NIGWPoaXHTOZVbAor9nIhMep0W+iBlKy0htuljYaHXy22vHSG9pqxf4P n1jPutRtEKNk8D4To5f99+ruVosZEzJwq61Ribb+DUv+Oq7y0wZuEPz1jPQgqH5x WdAPN7hLDFRhL14xUEtLufst9+0g2Qj+rOM92fUCC50chZSQOked2nn6USRyWyi/ BbSHjO2gcy2mNg== -----END CERTIFICATE-----Generated at Sun Dec 21 19:14:19 2025 by rpki-client