This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/c78348-ac2e-44e4-8467-2bdd20b4823b/1/cNE-Khag7mY0IHqI_wqsTqvGaTw.mft File: cNE-Khag7mY0IHqI_wqsTqvGaTw.mft (raw, json) Hash identifier: FePWOQuAZcu5Kt0YZ0dH1mPEm3tTtZUnnQ2JLe5pH8A= Subject key identifier: 12:A3:41:16:D6:0A:64:B7:F6:EC:F3:41:64:09:AD:3E:BE:19:B4:94 Authority key identifier: 70:D1:3E:2A:16:A0:EE:66:34:20:7A:88:FF:0A:AC:4E:AB:C6:69:3C Certificate issuer: /CN=70d13e2a16a0ee6634207a88ff0aac4eabc6693c Certificate serial: 019B4D0404AF30010085B7C0894A0C26BF26 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cNE-Khag7mY0IHqI_wqsTqvGaTw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/c78348-ac2e-44e4-8467-2bdd20b4823b/1/cNE-Khag7mY0IHqI_wqsTqvGaTw.mft Manifest number: 1794 Signing time: Tue 23 Dec 2025 21:01:07 +0000 Manifest this update: Tue 23 Dec 2025 21:01:07 +0000 Manifest next update: Wed 24 Dec 2025 21:01:07 +0000 Files and hashes: 1: Wk-27-wm2MeWL1AcRJVfERPG3M4.roa (hash: /2ZrWGFGh9bM8J1i4JDEX8CG9Dlb6SOL52JzWa/nfw0=) 2: cNE-Khag7mY0IHqI_wqsTqvGaTw.crl (hash: 1JJb+ogLPhiD3qjY6gz/P1xAk9ANGmzKmbjpTIhK/a0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/c78348-ac2e-44e4-8467-2bdd20b4823b/1/cNE-Khag7mY0IHqI_wqsTqvGaTw.crl rsync://rpki.ripe.net/repository/DEFAULT/47/c78348-ac2e-44e4-8467-2bdd20b4823b/1/cNE-Khag7mY0IHqI_wqsTqvGaTw.mft rsync://rpki.ripe.net/repository/DEFAULT/cNE-Khag7mY0IHqI_wqsTqvGaTw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 24 Dec 2025 15:46:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4d:04:04:af:30:01:00:85:b7:c0:89:4a:0c:26:bf:26 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=70d13e2a16a0ee6634207a88ff0aac4eabc6693c Validity Not Before: Dec 23 21:01:07 2025 GMT Not After : Dec 24 21:01:07 2025 GMT Subject: CN=12a34116d60a64b7f6ecf3416409ad3ebe19b494 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:0f:91:c9:1c:65:64:8e:a8:39:b2:11:1e:63: 42:cf:3f:89:c0:a2:1e:ff:75:7e:35:ea:d0:16:0b: b0:40:22:34:51:bc:80:b1:1f:4c:71:41:98:9c:a6: 44:a6:82:60:1e:79:b5:a2:36:39:85:38:fd:e6:e5: 4d:28:bb:9c:6f:6c:77:df:7a:cd:e7:d2:57:5c:8d: 2c:59:93:94:99:ea:d3:21:39:f3:95:4e:9b:25:08: e1:53:ff:4b:5d:2c:61:3e:1c:bb:87:a7:79:39:f4: 4e:61:13:f6:61:19:40:2f:8d:8f:3a:05:52:02:45: 42:2e:c8:5e:f5:72:90:d5:36:00:85:16:ba:d4:56: 9f:53:30:e9:fb:62:58:52:53:e2:ce:09:a8:8b:e5: 66:09:a8:7a:8d:af:43:97:46:7f:67:e0:73:e2:4a: 7f:a1:07:d0:59:fd:87:7b:c7:dc:92:1a:56:aa:b3: 23:ec:01:b3:ed:41:cb:ac:bf:25:bd:02:d4:48:bd: 39:98:a0:57:e9:50:c1:f6:58:26:2e:91:9e:a2:68: b4:36:9a:74:3b:4c:5f:e0:74:96:0e:1b:8d:f1:fb: fd:c2:dd:38:f4:23:11:f1:b8:45:4e:6b:7e:ae:e5: e5:80:c4:bf:fa:a3:5e:48:76:84:12:95:ab:4b:87: 8b:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:A3:41:16:D6:0A:64:B7:F6:EC:F3:41:64:09:AD:3E:BE:19:B4:94 X509v3 Authority Key Identifier: keyid:70:D1:3E:2A:16:A0:EE:66:34:20:7A:88:FF:0A:AC:4E:AB:C6:69:3C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cNE-Khag7mY0IHqI_wqsTqvGaTw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/c78348-ac2e-44e4-8467-2bdd20b4823b/1/cNE-Khag7mY0IHqI_wqsTqvGaTw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/47/c78348-ac2e-44e4-8467-2bdd20b4823b/1/cNE-Khag7mY0IHqI_wqsTqvGaTw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 10:59:69:1c:e3:0b:b5:aa:71:4f:6f:60:22:90:60:d6:89:bd: aa:e1:f7:37:60:19:30:23:19:54:dd:fb:77:5e:5d:7f:fb:8b: 39:b1:4f:b4:8b:61:76:4a:ba:0d:53:64:1c:21:4e:48:08:bf: f5:47:46:49:4e:63:5e:21:ae:96:b4:d2:50:08:40:fb:5d:1b: 76:a9:c4:a9:e8:eb:1a:a8:97:92:aa:b7:19:9b:78:69:98:a9: fc:9a:05:e8:58:eb:1d:ef:88:71:94:e2:b7:f1:45:f4:24:1b: 4b:32:f9:03:7e:ae:50:dc:6d:77:4a:10:23:b0:dd:61:7a:b8: cf:73:0e:4f:ab:98:ea:5b:0c:07:d6:98:44:64:4a:85:31:ea: d6:12:8f:5d:23:ca:be:36:f0:88:cd:3a:3e:9d:24:a5:94:6d: 2d:15:41:d5:36:01:74:4f:b6:9f:3f:a3:29:30:68:44:1f:74: 51:fc:3e:d9:c6:15:a3:94:c5:4f:42:00:5a:b0:3d:e4:e3:a1: 0f:94:67:02:ea:ec:ab:61:35:36:c1:e5:44:29:4f:3b:64:93: 88:fa:83:4f:56:6b:88:11:2f:9a:ca:a5:60:e8:3d:ec:42:c3: 2b:78:63:1a:bb:38:05:91:90:4d:39:3e:b1:1f:c0:a7:48:77: d1:bd:6a:6e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtNBASvMAEAhbfAiUoMJr8mMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcwZDEzZTJhMTZhMGVlNjYzNDIwN2E4OGZmMGFhYzRlYWJj NjY5M2MwHhcNMjUxMjIzMjEwMTA3WhcNMjUxMjI0MjEwMTA3WjAzMTEwLwYDVQQD EygxMmEzNDExNmQ2MGE2NGI3ZjZlY2YzNDE2NDA5YWQzZWJlMTliNDk0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArw+RyRxlZI6oObIRHmNCzz+JwKIe /3V+NerQFguwQCI0UbyAsR9McUGYnKZEpoJgHnm1ojY5hTj95uVNKLucb2x333rN 59JXXI0sWZOUmerTITnzlU6bJQjhU/9LXSxhPhy7h6d5OfROYRP2YRlAL42POgVS AkVCLshe9XKQ1TYAhRa61FafUzDp+2JYUlPizgmoi+VmCah6ja9Dl0Z/Z+Bz4kp/ oQfQWf2He8fckhpWqrMj7AGz7UHLrL8lvQLUSL05mKBX6VDB9lgmLpGeomi0Npp0 O0xf4HSWDhuN8fv9wt049CMR8bhFTmt+ruXlgMS/+qNeSHaEEpWrS4eLcQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBKjQRbWCmS39uzzQWQJrT6+GbSUMB8GA1UdIwQY MBaAFHDRPioWoO5mNCB6iP8KrE6rxmk8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY05FLUtoYWc3bVkwSUhxSV93cXNUcXZHYVR3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ny9jNzgzNDgtYWMyZS00NGU0LTg0Njct MmJkZDIwYjQ4MjNiLzEvY05FLUtoYWc3bVkwSUhxSV93cXNUcXZHYVR3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Ny9jNzgzNDgtYWMyZS00NGU0LTg0NjctMmJkZDIwYjQ4MjNi LzEvY05FLUtoYWc3bVkwSUhxSV93cXNUcXZHYVR3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEFlpHOML tapxT29gIpBg1om9quH3N2AZMCMZVN37d15df/uLObFPtIthdkq6DVNkHCFOSAi/ 9UdGSU5jXiGulrTSUAhA+10bdqnEqejrGqiXkqq3GZt4aZip/JoF6FjrHe+IcZTi t/FF9CQbSzL5A36uUNxtd0oQI7DdYXq4z3MOT6uY6lsMB9aYRGRKhTHq1hKPXSPK vjbwiM06Pp0kpZRtLRVB1TYBdE+2nz+jKTBoRB90Ufw+2cYVo5TFT0IAWrA95OOh D5RnAursq2E1NsHlRClPO2STiPqDT1ZriBEvmsqlYOg97ELDK3hjGrs4BZGQTTk+ sR/Ap0h30b1qbg== -----END CERTIFICATE-----Generated at Tue Dec 23 22:39:42 2025 by rpki-client