This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/ac9481-6fca-4240-9ed1-c277d3716bd9/1/cGdfald5fFypbD-0XlMb0yeDAWw.mft File: cGdfald5fFypbD-0XlMb0yeDAWw.mft (raw, json) Hash identifier: XT7RNjYLCVlE3RsMvBhyqiZx1U+DbQp0R8OCy9Iipyc= Subject key identifier: 1C:44:0D:16:1F:49:2C:B1:07:0B:52:08:8A:62:33:B7:ED:9D:41:EA Authority key identifier: 70:67:5F:6A:57:79:7C:5C:A9:6C:3F:B4:5E:53:1B:D3:27:83:01:6C Certificate issuer: /CN=70675f6a57797c5ca96c3fb45e531bd32783016c Certificate serial: 019B40FFDE882E490468FBBF13772546C145 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cGdfald5fFypbD-0XlMb0yeDAWw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/ac9481-6fca-4240-9ed1-c277d3716bd9/1/cGdfald5fFypbD-0XlMb0yeDAWw.mft Manifest number: 178D Signing time: Sun 21 Dec 2025 13:01:08 +0000 Manifest this update: Sun 21 Dec 2025 13:01:08 +0000 Manifest next update: Mon 22 Dec 2025 13:01:08 +0000 Files and hashes: 1: OlU6obIQjael3LSg0ssh_4uTiio.roa (hash: PEk/sjzeYnoi97rfsFTmYB012K4urx+cqdtXV/YTu3g=) 2: cGdfald5fFypbD-0XlMb0yeDAWw.crl (hash: Bwnk/G2nFIYjU5n0GZWDEWcYhMImXs62SjVMmmZn2WE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/ac9481-6fca-4240-9ed1-c277d3716bd9/1/cGdfald5fFypbD-0XlMb0yeDAWw.crl rsync://rpki.ripe.net/repository/DEFAULT/44/ac9481-6fca-4240-9ed1-c277d3716bd9/1/cGdfald5fFypbD-0XlMb0yeDAWw.mft rsync://rpki.ripe.net/repository/DEFAULT/cGdfald5fFypbD-0XlMb0yeDAWw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 13:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:40:ff:de:88:2e:49:04:68:fb:bf:13:77:25:46:c1:45 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=70675f6a57797c5ca96c3fb45e531bd32783016c Validity Not Before: Dec 21 13:01:08 2025 GMT Not After : Dec 22 13:01:08 2025 GMT Subject: CN=1c440d161f492cb1070b52088a6233b7ed9d41ea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:e3:98:c6:0a:09:cd:e5:cd:6e:e3:ec:8f:e9: 07:d7:d6:c7:99:78:de:35:e2:23:49:b5:6a:6d:4a: e5:9c:a3:dc:ca:e3:45:d2:f2:48:de:63:f2:fc:0a: 74:cd:57:06:d5:96:9e:4e:1d:76:31:f6:32:77:e8: ef:b4:a2:a9:e9:a6:c1:54:18:cb:4e:dc:5b:5d:22: 70:6f:12:f2:57:be:8e:8e:3c:31:09:1f:e6:9d:a3: 7f:eb:12:91:ef:f8:22:cd:a6:94:ea:1c:d4:ee:82: ce:29:27:6d:f9:5c:9d:17:a3:59:38:40:5d:37:a4: 73:56:a1:c4:ec:ff:ef:5c:a2:55:9b:da:f0:c6:fa: 49:33:bd:e2:f1:5e:49:5b:fa:4b:51:6f:40:57:7f: 34:d0:51:85:89:10:48:48:2b:38:ed:dc:98:0d:fa: 6e:7f:8e:fe:36:d4:27:28:61:68:27:92:a0:a4:6d: 91:02:43:5f:0c:4c:ce:ef:4e:cc:76:d1:74:b7:d4: 5f:b1:40:03:b4:c1:be:1c:24:c6:fa:1f:da:d2:61: ec:b4:dc:06:00:73:a4:b9:c3:8e:59:e6:c2:5d:d6: a9:fd:70:ab:6d:13:e0:a4:f4:e5:20:6b:7c:99:0e: 19:1e:49:a4:3a:88:1e:b8:63:1a:3e:e1:5e:c1:a3: 9e:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:44:0D:16:1F:49:2C:B1:07:0B:52:08:8A:62:33:B7:ED:9D:41:EA X509v3 Authority Key Identifier: keyid:70:67:5F:6A:57:79:7C:5C:A9:6C:3F:B4:5E:53:1B:D3:27:83:01:6C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cGdfald5fFypbD-0XlMb0yeDAWw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/ac9481-6fca-4240-9ed1-c277d3716bd9/1/cGdfald5fFypbD-0XlMb0yeDAWw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/44/ac9481-6fca-4240-9ed1-c277d3716bd9/1/cGdfald5fFypbD-0XlMb0yeDAWw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c7:ca:d0:cc:72:4d:cb:f8:6b:9a:6a:18:a5:16:1b:48:a8:2c: 26:ec:94:fe:1c:46:26:31:a7:b3:fa:08:96:e9:b1:40:17:2d: a0:b1:53:73:67:5f:d2:0f:d1:e9:2c:50:b0:a5:80:b1:20:db: b2:2b:c6:04:73:b2:dd:06:a2:e9:12:c3:75:f8:84:d2:67:21: 73:76:19:35:bb:02:c5:a7:aa:12:54:ed:e1:52:37:b2:48:db: 98:b7:10:95:35:4e:88:02:b9:76:e2:ef:45:95:d0:3c:db:2b: b3:26:f6:de:24:c3:65:53:89:41:d5:3a:87:89:f0:09:b5:4b: 3e:87:86:f6:19:f5:11:cc:aa:e1:3f:34:54:76:be:7b:9c:af: da:8f:be:30:03:2d:fd:10:43:0a:4a:47:5f:d9:b1:1e:79:a7: 2a:f2:ce:49:5f:62:30:70:d6:6c:d5:aa:57:6e:4b:98:b5:84: 50:b5:9a:2c:4e:86:31:48:e3:ef:78:54:1e:a7:92:fd:e2:84: 67:f3:60:22:d8:a3:b7:3b:b0:99:c5:69:c2:e3:d5:d2:8f:53: ae:34:c4:51:13:e4:52:39:20:96:0e:9e:21:8e:c4:a4:4f:92: db:37:07:ea:10:d3:bb:7e:10:d7:37:e9:c8:b2:47:d2:f5:84: 01:57:bd:00 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtA/96ILkkEaPu/E3clRsFFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcwNjc1ZjZhNTc3OTdjNWNhOTZjM2ZiNDVlNTMxYmQzMjc4 MzAxNmMwHhcNMjUxMjIxMTMwMTA4WhcNMjUxMjIyMTMwMTA4WjAzMTEwLwYDVQQD EygxYzQ0MGQxNjFmNDkyY2IxMDcwYjUyMDg4YTYyMzNiN2VkOWQ0MWVhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnuOYxgoJzeXNbuPsj+kH19bHmXje NeIjSbVqbUrlnKPcyuNF0vJI3mPy/Ap0zVcG1ZaeTh12MfYyd+jvtKKp6abBVBjL TtxbXSJwbxLyV76OjjwxCR/mnaN/6xKR7/gizaaU6hzU7oLOKSdt+VydF6NZOEBd N6RzVqHE7P/vXKJVm9rwxvpJM73i8V5JW/pLUW9AV3800FGFiRBISCs47dyYDfpu f47+NtQnKGFoJ5KgpG2RAkNfDEzO707MdtF0t9RfsUADtMG+HCTG+h/a0mHstNwG AHOkucOOWebCXdap/XCrbRPgpPTlIGt8mQ4ZHkmkOogeuGMaPuFewaOeZwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBxEDRYfSSyxBwtSCIpiM7ftnUHqMB8GA1UdIwQY MBaAFHBnX2pXeXxcqWw/tF5TG9MngwFsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY0dkZmFsZDVmRnlwYkQtMFhsTWIweWVEQVd3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NC9hYzk0ODEtNmZjYS00MjQwLTllZDEt YzI3N2QzNzE2YmQ5LzEvY0dkZmFsZDVmRnlwYkQtMFhsTWIweWVEQVd3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80NC9hYzk0ODEtNmZjYS00MjQwLTllZDEtYzI3N2QzNzE2YmQ5 LzEvY0dkZmFsZDVmRnlwYkQtMFhsTWIweWVEQVd3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAx8rQzHJN y/hrmmoYpRYbSKgsJuyU/hxGJjGns/oIlumxQBctoLFTc2df0g/R6SxQsKWAsSDb sivGBHOy3Qai6RLDdfiE0mchc3YZNbsCxaeqElTt4VI3skjbmLcQlTVOiAK5duLv RZXQPNsrsyb23iTDZVOJQdU6h4nwCbVLPoeG9hn1Ecyq4T80VHa+e5yv2o++MAMt /RBDCkpHX9mxHnmnKvLOSV9iMHDWbNWqV25LmLWEULWaLE6GMUjj73hUHqeS/eKE Z/NgItijtzuwmcVpwuPV0o9TrjTEURPkUjkglg6eIY7EpE+S2zcH6hDTu34Q1zfp yLJH0vWEAVe9AA== -----END CERTIFICATE-----Generated at Sun Dec 21 17:27:01 2025 by rpki-client