This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/d2974f-7efa-4611-8827-260c377a314a/1/cGt_6orTURHKaHqc0ApJ-aTwRZs.mft File: cGt_6orTURHKaHqc0ApJ-aTwRZs.mft (raw, json) Hash identifier: 4aOwj80aoUxRECpu1Evsa4qQoddepmhjB/wm3H9NupE= Subject key identifier: FA:9B:D6:9F:B6:80:20:75:F6:77:19:29:BB:28:4A:40:6B:73:8C:FB Authority key identifier: 70:6B:7F:EA:8A:D3:51:11:CA:68:7A:9C:D0:0A:49:F9:A4:F0:45:9B Certificate issuer: /CN=706b7fea8ad35111ca687a9cd00a49f9a4f0459b Certificate serial: 019B3BA23F6E1A1E4C109886F031E26665BC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cGt_6orTURHKaHqc0ApJ-aTwRZs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/d2974f-7efa-4611-8827-260c377a314a/1/cGt_6orTURHKaHqc0ApJ-aTwRZs.mft Manifest number: 1780 Signing time: Sat 20 Dec 2025 12:00:47 +0000 Manifest this update: Sat 20 Dec 2025 12:00:47 +0000 Manifest next update: Sun 21 Dec 2025 12:00:47 +0000 Files and hashes: 1: 1-i7nGTwXEwybr4Pzt1yuXERVK6c.roa (hash: 6WebZuQEVFb53qv4JdObZh7gRJmnrMnS1KiKHpMOHA8=) 2: F98rZRsLL_WSYn3n29uuLg-FPR0.roa (hash: 73uq7x903k93laF4iGlteDX6rFg0Y3etQUcDdi1l7lg=) 3: R66tp2YspSa0WKGVVBRpgjOOMSc.roa (hash: vAJd7pQTatYNcNboScZHezKRexmDJyWedTR7sHg29G0=) 4: VPHhytFNuubbFjm4tYvAl8Nd2ZE.roa (hash: 6/FzWhj3KyFvDY5lx/pXSGk3g0b0b2s63jOD/2yTOio=) 5: cGt_6orTURHKaHqc0ApJ-aTwRZs.crl (hash: qIGQUr+BkstA6jJ1p/P/foyUqXklTnp/PGHOmE74HNk=) 6: zMZkIjmJ2QpgvnpDUAinKvhQb1o.roa (hash: Y7E9I/njb2IhcUidLKH3fAcdQ31FJYDtFn4eagm4C1Q=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/d2974f-7efa-4611-8827-260c377a314a/1/cGt_6orTURHKaHqc0ApJ-aTwRZs.crl rsync://rpki.ripe.net/repository/DEFAULT/37/d2974f-7efa-4611-8827-260c377a314a/1/cGt_6orTURHKaHqc0ApJ-aTwRZs.mft rsync://rpki.ripe.net/repository/DEFAULT/cGt_6orTURHKaHqc0ApJ-aTwRZs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 12:00:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3b:a2:3f:6e:1a:1e:4c:10:98:86:f0:31:e2:66:65:bc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=706b7fea8ad35111ca687a9cd00a49f9a4f0459b Validity Not Before: Dec 20 12:00:47 2025 GMT Not After : Dec 21 12:00:47 2025 GMT Subject: CN=fa9bd69fb6802075f6771929bb284a406b738cfb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:64:60:d9:1d:5e:9d:c9:a1:bd:5a:46:65:21: 7d:20:67:9a:87:f1:4e:ef:68:da:c8:a7:dd:d1:df: 78:bc:e4:af:0d:d8:e7:0e:bd:14:1c:b9:c3:40:f3: d3:4b:53:2b:da:b6:7b:a3:39:70:55:f3:98:f8:ad: d4:9e:36:c2:66:18:1f:07:8c:47:0f:c1:f9:6a:9a: 58:45:3a:f8:2c:9e:15:fc:2c:6b:63:d1:42:55:ce: 22:97:a9:93:00:b0:13:ee:51:16:3d:c2:62:30:b2: ec:0b:d8:f6:47:a4:c4:b5:b0:cf:a4:46:94:72:25: 57:99:1a:33:d3:e4:a2:97:25:21:70:6c:7e:7b:8e: 2b:31:e1:32:ef:db:aa:c5:f7:18:af:eb:d2:18:4a: 57:61:76:00:05:f9:73:11:e4:ec:08:8d:f3:1c:73: 18:e1:33:49:4a:51:21:1f:e5:99:93:7f:de:ab:58: 15:66:72:fe:8b:a7:18:00:7a:92:8e:00:66:18:a8: 63:02:d9:93:82:08:4d:f8:6a:37:e6:9c:8e:e3:03: ab:87:28:29:80:7c:f3:11:7a:25:6a:8c:69:71:ff: 9d:0f:b1:5c:26:f7:bc:c7:d1:41:10:ad:b4:c6:c2: 39:40:97:98:44:c0:69:a7:0a:a4:94:92:7b:42:3f: e7:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:9B:D6:9F:B6:80:20:75:F6:77:19:29:BB:28:4A:40:6B:73:8C:FB X509v3 Authority Key Identifier: keyid:70:6B:7F:EA:8A:D3:51:11:CA:68:7A:9C:D0:0A:49:F9:A4:F0:45:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cGt_6orTURHKaHqc0ApJ-aTwRZs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/d2974f-7efa-4611-8827-260c377a314a/1/cGt_6orTURHKaHqc0ApJ-aTwRZs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/37/d2974f-7efa-4611-8827-260c377a314a/1/cGt_6orTURHKaHqc0ApJ-aTwRZs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 98:99:f2:12:fc:a5:8e:de:0f:ce:5e:3f:f6:02:39:ff:70:83: 37:f5:f5:8e:10:c5:e6:eb:f6:69:0b:e7:c0:55:70:bd:34:5d: 90:39:49:23:46:32:0e:21:54:c9:60:6c:8f:c8:17:88:03:8e: 51:72:13:3c:68:d7:a0:41:66:bc:b1:5f:96:32:69:d6:66:a6: 7e:49:37:51:90:b9:01:d5:1b:93:7d:80:83:79:95:d8:ae:5f: d6:87:bd:fa:22:d9:9d:ef:3a:e6:78:97:83:9e:c1:5b:c9:13: 91:10:aa:40:87:2b:e7:c9:29:8c:80:df:6e:24:d0:81:ee:1a: 3f:5d:55:73:aa:1d:1e:f0:77:7a:4e:0a:aa:c1:45:9f:3a:f6: b2:cc:24:e0:25:86:1f:5a:d1:b1:cd:8b:98:7f:15:64:4c:cb: 2b:fe:2e:86:51:db:a6:f0:f1:fa:5c:55:e1:18:31:91:2c:69: 6d:7e:eb:22:3a:e3:3f:67:ea:0d:6d:89:2a:1a:87:8f:97:b4: 30:23:b5:4a:91:22:1f:ae:62:25:17:6e:18:3d:11:63:1b:42: 2b:70:e3:ad:5a:45:d2:75:6a:8e:c5:19:d8:2d:a6:05:70:6e: ec:52:72:72:39:f7:83:63:9f:47:3e:8f:dc:37:67:cc:f8:5a: 31:0c:73:a0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs7oj9uGh5MEJiG8DHiZmW8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcwNmI3ZmVhOGFkMzUxMTFjYTY4N2E5Y2QwMGE0OWY5YTRm MDQ1OWIwHhcNMjUxMjIwMTIwMDQ3WhcNMjUxMjIxMTIwMDQ3WjAzMTEwLwYDVQQD EyhmYTliZDY5ZmI2ODAyMDc1ZjY3NzE5MjliYjI4NGE0MDZiNzM4Y2ZiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5mRg2R1encmhvVpGZSF9IGeah/FO 72jayKfd0d94vOSvDdjnDr0UHLnDQPPTS1Mr2rZ7ozlwVfOY+K3UnjbCZhgfB4xH D8H5appYRTr4LJ4V/CxrY9FCVc4il6mTALAT7lEWPcJiMLLsC9j2R6TEtbDPpEaU ciVXmRoz0+SilyUhcGx+e44rMeEy79uqxfcYr+vSGEpXYXYABflzEeTsCI3zHHMY 4TNJSlEhH+WZk3/eq1gVZnL+i6cYAHqSjgBmGKhjAtmTgghN+Go35pyO4wOrhygp gHzzEXolaoxpcf+dD7FcJve8x9FBEK20xsI5QJeYRMBppwqklJJ7Qj/nvQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPqb1p+2gCB19ncZKbsoSkBrc4z7MB8GA1UdIwQY MBaAFHBrf+qK01ERymh6nNAKSfmk8EWbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY0d0XzZvclRVUkhLYUhxYzBBcEotYVR3UlpzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNy9kMjk3NGYtN2VmYS00NjExLTg4Mjct MjYwYzM3N2EzMTRhLzEvY0d0XzZvclRVUkhLYUhxYzBBcEotYVR3UlpzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNy9kMjk3NGYtN2VmYS00NjExLTg4MjctMjYwYzM3N2EzMTRh LzEvY0d0XzZvclRVUkhLYUhxYzBBcEotYVR3UlpzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmJnyEvyl jt4Pzl4/9gI5/3CDN/X1jhDF5uv2aQvnwFVwvTRdkDlJI0YyDiFUyWBsj8gXiAOO UXITPGjXoEFmvLFfljJp1mamfkk3UZC5AdUbk32Ag3mV2K5f1oe9+iLZne865niX g57BW8kTkRCqQIcr58kpjIDfbiTQge4aP11Vc6odHvB3ek4KqsFFnzr2sswk4CWG H1rRsc2LmH8VZEzLK/4uhlHbpvDx+lxV4RgxkSxpbX7rIjrjP2fqDW2JKhqHj5e0 MCO1SpEiH65iJRduGD0RYxtCK3DjrVpF0nVqjsUZ2C2mBXBu7FJycjn3g2OfRz6P 3DdnzPhaMQxzoA== -----END CERTIFICATE-----Generated at Sat Dec 20 20:52:52 2025 by rpki-client