This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/56ae15-1ca5-4d69-9a3a-837b10c2c636/1/cPeLaBtmF_7XDOhn-5qMbyXP2lU.mft File: cPeLaBtmF_7XDOhn-5qMbyXP2lU.mft (raw, json) Hash identifier: 7l/aV3QIZ9StzKSVbPxP+S1rgS2pWlu+vvkyFRPEW+w= Subject key identifier: 3C:35:F5:CC:B9:FE:0C:76:78:4E:D4:FF:05:41:D7:3C:B8:43:0D:10 Authority key identifier: 70:F7:8B:68:1B:66:17:FE:D7:0C:E8:67:FB:9A:8C:6F:25:CF:DA:55 Certificate issuer: /CN=70f78b681b6617fed70ce867fb9a8c6f25cfda55 Certificate serial: 019B53AA6C72D867EB4C9B530CFBCBCADDD9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cPeLaBtmF_7XDOhn-5qMbyXP2lU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/56ae15-1ca5-4d69-9a3a-837b10c2c636/1/cPeLaBtmF_7XDOhn-5qMbyXP2lU.mft Manifest number: 0877 Signing time: Thu 25 Dec 2025 04:00:36 +0000 Manifest this update: Thu 25 Dec 2025 04:00:36 +0000 Manifest next update: Fri 26 Dec 2025 04:00:36 +0000 Files and hashes: 1: 7vwEs2K4HN_LwUWqzjIICNGiknc.roa (hash: wTMMtevJNZjpsr8DvgOjhFZoAuNt0W+HiAbIshmL9sQ=) 2: cPeLaBtmF_7XDOhn-5qMbyXP2lU.crl (hash: 2NVXRi0A13/TbEjZwcJU7nWmCUD+Q4D7wb/mACc+N4g=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/56ae15-1ca5-4d69-9a3a-837b10c2c636/1/cPeLaBtmF_7XDOhn-5qMbyXP2lU.crl rsync://rpki.ripe.net/repository/DEFAULT/37/56ae15-1ca5-4d69-9a3a-837b10c2c636/1/cPeLaBtmF_7XDOhn-5qMbyXP2lU.mft rsync://rpki.ripe.net/repository/DEFAULT/cPeLaBtmF_7XDOhn-5qMbyXP2lU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 26 Dec 2025 03:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:53:aa:6c:72:d8:67:eb:4c:9b:53:0c:fb:cb:ca:dd:d9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=70f78b681b6617fed70ce867fb9a8c6f25cfda55 Validity Not Before: Dec 25 04:00:36 2025 GMT Not After : Dec 26 04:00:36 2025 GMT Subject: CN=3c35f5ccb9fe0c76784ed4ff0541d73cb8430d10 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:87:fd:f4:a2:90:6b:bf:b5:d7:7d:8b:b5:54: c9:a1:19:59:46:b8:09:45:27:30:04:68:1f:eb:62: d0:80:0a:59:63:47:46:da:98:0c:7a:ae:f4:a3:0e: c8:64:61:1e:17:f5:92:9d:16:27:45:b2:e9:1b:f4: a3:d2:7c:90:97:31:25:24:39:b9:9f:80:af:ca:d5: b9:55:0e:14:7a:7c:af:c8:f6:dd:07:43:12:a0:1d: ea:97:3e:0b:7c:d2:f1:8c:48:9c:27:58:1e:a8:dc: a3:92:8a:b5:ba:c7:3a:bb:97:7b:2b:96:f6:17:a7: a5:ed:80:ed:dd:ce:46:24:1a:2e:04:98:fc:85:9e: c6:bc:1e:db:d1:94:6a:3f:01:7b:45:d5:4b:0e:71: da:0a:a2:cb:2c:9c:54:9c:0c:71:72:17:c2:18:d2: c1:93:50:95:39:9c:50:12:9f:4f:15:66:0e:7f:76: 25:c2:00:e5:fd:9a:0d:c6:2a:43:5e:86:ab:eb:c8: 1a:c6:53:d4:5a:f5:31:44:a1:b1:67:b7:b3:17:93: f9:88:02:f0:93:73:c9:6d:da:54:ed:5d:ed:35:6e: 86:a4:b8:98:d2:64:ac:1a:33:7a:43:5a:be:0c:f2: eb:91:fb:a6:9a:ae:b9:f1:c9:af:55:07:ec:d2:b6: 5c:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:35:F5:CC:B9:FE:0C:76:78:4E:D4:FF:05:41:D7:3C:B8:43:0D:10 X509v3 Authority Key Identifier: keyid:70:F7:8B:68:1B:66:17:FE:D7:0C:E8:67:FB:9A:8C:6F:25:CF:DA:55 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cPeLaBtmF_7XDOhn-5qMbyXP2lU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/56ae15-1ca5-4d69-9a3a-837b10c2c636/1/cPeLaBtmF_7XDOhn-5qMbyXP2lU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/37/56ae15-1ca5-4d69-9a3a-837b10c2c636/1/cPeLaBtmF_7XDOhn-5qMbyXP2lU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 65:d7:a7:42:e6:47:1e:56:d7:24:f6:c3:0e:ee:28:af:a3:42: 47:61:4c:96:4f:fe:68:b9:cb:43:c0:d8:a7:3e:83:fd:e4:b8: 9f:ad:84:33:03:ac:6f:b3:7b:82:da:2e:bf:2b:ea:d5:6f:07: 17:29:c8:fe:7f:31:d5:1d:f7:83:5c:63:d4:34:e8:8e:80:08: fa:4a:f2:6b:07:21:44:c6:ac:3b:c0:11:2d:8a:cd:ae:56:ba: 5c:4a:09:6f:be:f4:69:d3:ea:9e:0c:4e:44:c9:ff:20:89:46: 9a:8c:a8:e4:83:26:23:91:11:b6:84:8c:a3:6a:c7:55:ce:4d: 71:c4:c7:d9:d5:0c:ca:66:a2:7a:77:fc:6c:4c:d2:0f:09:6a: 8a:3e:3c:42:49:0a:f5:54:0b:92:a0:17:e4:36:5e:27:47:00: 49:34:fb:50:28:76:00:34:b5:bb:c5:b2:56:b4:76:36:50:34: ef:b7:2f:b9:ac:91:ae:4a:88:8d:df:35:05:fe:1e:b9:76:08: 05:96:f1:d9:bd:06:58:10:2e:8a:18:8c:aa:10:5f:b9:58:5e: 2d:17:8d:44:0a:73:6a:62:2a:6b:6c:7a:55:20:5c:08:dd:90: e3:c1:bf:34:a3:d9:16:60:e5:79:15:ae:c0:c5:c5:ab:49:52: 47:24:5e:8b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtTqmxy2GfrTJtTDPvLyt3ZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcwZjc4YjY4MWI2NjE3ZmVkNzBjZTg2N2ZiOWE4YzZmMjVj ZmRhNTUwHhcNMjUxMjI1MDQwMDM2WhcNMjUxMjI2MDQwMDM2WjAzMTEwLwYDVQQD EygzYzM1ZjVjY2I5ZmUwYzc2Nzg0ZWQ0ZmYwNTQxZDczY2I4NDMwZDEwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4If99KKQa7+1132LtVTJoRlZRrgJ RScwBGgf62LQgApZY0dG2pgMeq70ow7IZGEeF/WSnRYnRbLpG/Sj0nyQlzElJDm5 n4CvytW5VQ4UenyvyPbdB0MSoB3qlz4LfNLxjEicJ1geqNyjkoq1usc6u5d7K5b2 F6el7YDt3c5GJBouBJj8hZ7GvB7b0ZRqPwF7RdVLDnHaCqLLLJxUnAxxchfCGNLB k1CVOZxQEp9PFWYOf3YlwgDl/ZoNxipDXoar68gaxlPUWvUxRKGxZ7ezF5P5iALw k3PJbdpU7V3tNW6GpLiY0mSsGjN6Q1q+DPLrkfummq658cmvVQfs0rZc5QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDw19cy5/gx2eE7U/wVB1zy4Qw0QMB8GA1UdIwQY MBaAFHD3i2gbZhf+1wzoZ/uajG8lz9pVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY1BlTGFCdG1GXzdYRE9obi01cU1ieVhQMmxVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNy81NmFlMTUtMWNhNS00ZDY5LTlhM2Et ODM3YjEwYzJjNjM2LzEvY1BlTGFCdG1GXzdYRE9obi01cU1ieVhQMmxVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNy81NmFlMTUtMWNhNS00ZDY5LTlhM2EtODM3YjEwYzJjNjM2 LzEvY1BlTGFCdG1GXzdYRE9obi01cU1ieVhQMmxVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZdenQuZH HlbXJPbDDu4or6NCR2FMlk/+aLnLQ8DYpz6D/eS4n62EMwOsb7N7gtouvyvq1W8H FynI/n8x1R33g1xj1DTojoAI+kryawchRMasO8ARLYrNrla6XEoJb770adPqngxO RMn/IIlGmoyo5IMmI5ERtoSMo2rHVc5NccTH2dUMymaienf8bEzSDwlqij48QkkK 9VQLkqAX5DZeJ0cASTT7UCh2ADS1u8WyVrR2NlA077cvuayRrkqIjd81Bf4euXYI BZbx2b0GWBAuihiMqhBfuVheLReNRApzamIqa2x6VSBcCN2Q48G/NKPZFmDleRWu wMXFq0lSRyReiw== -----END CERTIFICATE-----Generated at Thu Dec 25 12:48:23 2025 by rpki-client