This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/5893f7-b4f1-4961-9426-fd73b80833b7/1/rCGhE9G6AdEH_feRMIwKUfPQbdo.mft File: rCGhE9G6AdEH_feRMIwKUfPQbdo.mft (raw, json) Hash identifier: FdtgBJcG1wNH1zox8sMt0YGVNiJNQiUUkbWauVu29LQ= Subject key identifier: C4:A2:0D:61:0B:59:86:86:AC:68:DD:2B:FC:15:0F:42:A3:47:79:83 Authority key identifier: AC:21:A1:13:D1:BA:01:D1:07:FD:F7:91:30:8C:0A:51:F3:D0:6D:DA Certificate issuer: /CN=ac21a113d1ba01d107fdf791308c0a51f3d06dda Certificate serial: 019B3D232D94BD5F79EB535E64CC9B129C5B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rCGhE9G6AdEH_feRMIwKUfPQbdo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/5893f7-b4f1-4961-9426-fd73b80833b7/1/rCGhE9G6AdEH_feRMIwKUfPQbdo.mft Manifest number: 0671 Signing time: Sat 20 Dec 2025 19:01:14 +0000 Manifest this update: Sat 20 Dec 2025 19:01:14 +0000 Manifest next update: Sun 21 Dec 2025 19:01:14 +0000 Files and hashes: 1: 0Yi_JnLw94TXhrC5nYi7nz8aE9Q.roa (hash: PcfAm6zv9EFMWgISV3l4XmKFXD7W1Vvh/DKcICx2Ck4=) 2: rCGhE9G6AdEH_feRMIwKUfPQbdo.crl (hash: TRDdZQFN8O7G7FLp45sTkOVL1/G0sEs+JmsDvUQ3gG4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/5893f7-b4f1-4961-9426-fd73b80833b7/1/rCGhE9G6AdEH_feRMIwKUfPQbdo.crl rsync://rpki.ripe.net/repository/DEFAULT/43/5893f7-b4f1-4961-9426-fd73b80833b7/1/rCGhE9G6AdEH_feRMIwKUfPQbdo.mft rsync://rpki.ripe.net/repository/DEFAULT/rCGhE9G6AdEH_feRMIwKUfPQbdo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:23:2d:94:bd:5f:79:eb:53:5e:64:cc:9b:12:9c:5b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ac21a113d1ba01d107fdf791308c0a51f3d06dda Validity Not Before: Dec 20 19:01:14 2025 GMT Not After : Dec 21 19:01:14 2025 GMT Subject: CN=c4a20d610b598686ac68dd2bfc150f42a3477983 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:38:8e:80:8c:14:00:a4:61:73:31:4c:69:10: 06:69:93:a4:db:d8:20:9a:44:c6:d3:1f:d1:01:c7: 6f:9b:1d:a2:2c:84:0b:85:3e:dc:55:7f:05:10:a7: 7f:af:b4:b3:e1:3d:8d:c2:3a:cc:1b:e5:cd:9e:fa: 64:9b:e9:1c:2f:16:67:c8:a9:70:fe:81:99:47:bb: b6:c8:5e:31:a8:bb:95:fe:ef:67:59:70:96:9b:86: 2b:87:87:ca:83:0a:eb:d6:20:23:64:6b:6d:2d:d4: 40:9f:97:c4:18:76:7a:55:bc:47:a8:c9:77:64:89: 4c:1c:f4:6d:f8:16:0f:20:0b:df:2b:35:a2:7a:26: 65:db:62:fa:6a:ec:e0:94:7a:e6:b3:58:43:e6:01: f1:f6:66:74:cc:f8:59:bb:df:4d:e3:18:1e:46:25: 06:d1:06:f7:dc:3a:dd:9d:77:42:d7:36:37:28:18: 46:d7:fb:4f:e7:5c:1a:f1:a6:85:ca:ef:84:96:92: ec:e5:47:63:8e:2d:2a:db:3d:8a:c5:28:5b:83:e2: e5:e3:3c:e1:e6:ca:ff:35:46:32:3f:8a:31:26:78: 4e:e2:4f:3b:58:20:04:ab:d6:24:7b:bd:3a:eb:32: fe:59:c3:b7:ab:39:43:2b:ed:c7:78:e0:e4:aa:f7: 09:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:A2:0D:61:0B:59:86:86:AC:68:DD:2B:FC:15:0F:42:A3:47:79:83 X509v3 Authority Key Identifier: keyid:AC:21:A1:13:D1:BA:01:D1:07:FD:F7:91:30:8C:0A:51:F3:D0:6D:DA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rCGhE9G6AdEH_feRMIwKUfPQbdo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/5893f7-b4f1-4961-9426-fd73b80833b7/1/rCGhE9G6AdEH_feRMIwKUfPQbdo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/43/5893f7-b4f1-4961-9426-fd73b80833b7/1/rCGhE9G6AdEH_feRMIwKUfPQbdo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a0:d5:28:f5:97:ba:d7:30:c3:55:e8:a5:94:34:b3:24:b5:c4: dd:29:27:06:5e:0b:8c:c8:46:90:10:0b:41:3f:f9:dd:49:c4: 28:1d:a9:b3:67:51:aa:06:01:d5:9c:54:fa:6b:21:c5:e1:0e: fd:84:79:39:75:ce:6b:75:4d:26:10:5a:c4:5f:e0:98:0a:a1: 59:d1:2d:75:c5:4c:49:6a:cf:e4:5c:46:90:41:e6:26:e2:4a: ed:e7:92:b0:28:b0:4f:62:b3:82:64:a7:d3:b9:d5:40:d3:04: e0:f2:70:d9:ab:65:2c:06:8f:8d:c2:e4:b0:12:d6:eb:83:ac: 4d:48:fb:3c:78:89:69:00:64:d5:27:2c:05:14:f7:80:9c:c9: 03:d1:6c:77:90:81:e4:3f:d7:b4:64:8a:95:af:4c:07:a6:a2: af:10:c6:a1:ad:c8:15:e7:02:a0:62:37:c6:42:84:6a:04:b2: 59:3d:d7:50:05:c0:01:b5:ba:49:c3:5a:ba:37:54:b1:a5:39: 3b:10:3d:1b:34:fa:c7:91:90:3f:c2:0d:29:22:d9:6e:96:b3: bb:02:e9:d6:98:65:a3:3a:3b:b3:2c:0d:eb:92:d7:98:36:9f: a5:40:20:69:97:39:cf:6b:39:ae:ea:ba:49:4f:fa:82:8b:70: 0c:7b:be:c8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9Iy2UvV9561NeZMybEpxbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFjMjFhMTEzZDFiYTAxZDEwN2ZkZjc5MTMwOGMwYTUxZjNk MDZkZGEwHhcNMjUxMjIwMTkwMTE0WhcNMjUxMjIxMTkwMTE0WjAzMTEwLwYDVQQD EyhjNGEyMGQ2MTBiNTk4Njg2YWM2OGRkMmJmYzE1MGY0MmEzNDc3OTgzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvjiOgIwUAKRhczFMaRAGaZOk29gg mkTG0x/RAcdvmx2iLIQLhT7cVX8FEKd/r7Sz4T2NwjrMG+XNnvpkm+kcLxZnyKlw /oGZR7u2yF4xqLuV/u9nWXCWm4Yrh4fKgwrr1iAjZGttLdRAn5fEGHZ6VbxHqMl3 ZIlMHPRt+BYPIAvfKzWieiZl22L6auzglHrms1hD5gHx9mZ0zPhZu99N4xgeRiUG 0Qb33DrdnXdC1zY3KBhG1/tP51wa8aaFyu+ElpLs5Udjji0q2z2KxShbg+Ll4zzh 5sr/NUYyP4oxJnhO4k87WCAEq9Yke7066zL+WcO3qzlDK+3HeODkqvcJKwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMSiDWELWYaGrGjdK/wVD0KjR3mDMB8GA1UdIwQY MBaAFKwhoRPRugHRB/33kTCMClHz0G3aMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvckNHaEU5RzZBZEVIX2ZlUk1Jd0tVZlBRYmRvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80My81ODkzZjctYjRmMS00OTYxLTk0MjYt ZmQ3M2I4MDgzM2I3LzEvckNHaEU5RzZBZEVIX2ZlUk1Jd0tVZlBRYmRvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80My81ODkzZjctYjRmMS00OTYxLTk0MjYtZmQ3M2I4MDgzM2I3 LzEvckNHaEU5RzZBZEVIX2ZlUk1Jd0tVZlBRYmRvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoNUo9Ze6 1zDDVeillDSzJLXE3SknBl4LjMhGkBALQT/53UnEKB2ps2dRqgYB1ZxU+mshxeEO /YR5OXXOa3VNJhBaxF/gmAqhWdEtdcVMSWrP5FxGkEHmJuJK7eeSsCiwT2KzgmSn 07nVQNME4PJw2atlLAaPjcLksBLW64OsTUj7PHiJaQBk1ScsBRT3gJzJA9Fsd5CB 5D/XtGSKla9MB6airxDGoa3IFecCoGI3xkKEagSyWT3XUAXAAbW6ScNaujdUsaU5 OxA9GzT6x5GQP8INKSLZbpazuwLp1phlozo7sywN65LXmDafpUAgaZc5z2s5ruq6 SU/6gotwDHu+yA== -----END CERTIFICATE-----Generated at Sat Dec 20 21:05:50 2025 by rpki-client