This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/cae652-a218-42f6-97af-794b28eb16c5/1/cTm8XO866t8yYT99lZ7I5Ap0KRg.mft File: cTm8XO866t8yYT99lZ7I5Ap0KRg.mft (raw, json) Hash identifier: 39IO7o2MVcy6sqJvP/itMRKUyZ5n0+snFkBMVWDjZTo= Subject key identifier: 4C:EC:62:66:83:CE:BC:F6:1F:2D:C1:18:8B:8C:E4:99:1E:9E:63:F9 Authority key identifier: 71:39:BC:5C:EF:3A:EA:DF:32:61:3F:7D:95:9E:C8:E4:0A:74:29:18 Certificate issuer: /CN=7139bc5cef3aeadf32613f7d959ec8e40a742918 Certificate serial: 019B559A03E2FB7BA5BB8F67478047C0B81B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cTm8XO866t8yYT99lZ7I5Ap0KRg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/cae652-a218-42f6-97af-794b28eb16c5/1/cTm8XO866t8yYT99lZ7I5Ap0KRg.mft Manifest number: 0DFC Signing time: Thu 25 Dec 2025 13:01:55 +0000 Manifest this update: Thu 25 Dec 2025 13:01:55 +0000 Manifest next update: Fri 26 Dec 2025 13:01:55 +0000 Files and hashes: 1: 1bCVWoklxu9pgUWQ1mLHB-EXkFA.roa (hash: D3wGeYBSZH8FYHWMq5xGTReS6aaUmIPr/PoC2v0b+3Q=) 2: cTm8XO866t8yYT99lZ7I5Ap0KRg.crl (hash: 2iHm4ZdSVWZ6F5+mjVGFvHKfDRwVBAa4P4c74OtRuJs=) 3: vpqI0SPiMCscv2APIfDksYTh41I.roa (hash: hkscOp/XUtYy+TgoXBDOQozFrFzTsJ23rQpXU2E0uBw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/cae652-a218-42f6-97af-794b28eb16c5/1/cTm8XO866t8yYT99lZ7I5Ap0KRg.crl rsync://rpki.ripe.net/repository/DEFAULT/4d/cae652-a218-42f6-97af-794b28eb16c5/1/cTm8XO866t8yYT99lZ7I5Ap0KRg.mft rsync://rpki.ripe.net/repository/DEFAULT/cTm8XO866t8yYT99lZ7I5Ap0KRg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 26 Dec 2025 10:17:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:55:9a:03:e2:fb:7b:a5:bb:8f:67:47:80:47:c0:b8:1b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7139bc5cef3aeadf32613f7d959ec8e40a742918 Validity Not Before: Dec 25 13:01:55 2025 GMT Not After : Dec 26 13:01:55 2025 GMT Subject: CN=4cec626683cebcf61f2dc1188b8ce4991e9e63f9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:94:82:6a:c9:61:23:fe:d5:5b:eb:4d:89:a0: 0d:0d:6e:50:6f:d8:c5:61:43:6c:85:84:d2:c7:93: 19:5b:11:8e:fd:d8:93:60:d4:2f:29:93:36:3d:9e: c8:78:2b:52:52:f1:a6:7b:85:6f:d3:b8:d7:c2:ee: d2:c4:79:e9:c5:1e:ee:03:b3:b4:0a:38:7f:0e:ff: d6:3a:9f:36:7b:eb:35:47:44:f4:57:87:e9:67:05: a6:6d:00:f6:5e:f3:27:a1:83:37:69:1b:3f:62:20: de:0b:fa:15:01:f4:1a:8e:54:52:fc:6c:74:9f:63: fb:1e:f8:0d:69:47:3d:b4:32:29:05:d1:2a:51:15: c9:f5:ff:22:b8:5f:30:4c:b1:83:31:74:03:dd:75: 80:e6:5e:ec:32:97:23:06:b6:7c:af:33:b1:29:97: 59:0f:b7:67:0f:16:87:4a:d8:b3:40:15:77:1a:f6: 3e:f3:a8:13:df:08:bd:26:f7:be:0b:6b:d6:63:61: 93:ae:eb:47:e8:0e:17:78:96:5c:02:5b:21:00:a4: f3:5f:e2:0a:91:e9:5e:e3:0f:b6:86:55:5c:54:4b: 2e:9f:d5:ab:00:d3:ed:1a:23:8b:de:ee:da:53:37: 55:30:09:f1:5f:80:af:6a:70:6b:db:27:7c:f9:8e: 6a:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:EC:62:66:83:CE:BC:F6:1F:2D:C1:18:8B:8C:E4:99:1E:9E:63:F9 X509v3 Authority Key Identifier: keyid:71:39:BC:5C:EF:3A:EA:DF:32:61:3F:7D:95:9E:C8:E4:0A:74:29:18 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cTm8XO866t8yYT99lZ7I5Ap0KRg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/cae652-a218-42f6-97af-794b28eb16c5/1/cTm8XO866t8yYT99lZ7I5Ap0KRg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/cae652-a218-42f6-97af-794b28eb16c5/1/cTm8XO866t8yYT99lZ7I5Ap0KRg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 58:22:35:55:40:91:49:8c:88:22:91:3b:64:48:62:17:a6:4e: 03:e5:03:84:04:42:58:80:a8:07:5f:1a:5b:da:e2:d8:9c:8d: 7d:da:69:3e:27:4f:44:25:54:12:aa:dc:82:8c:f0:f8:14:88: 3b:71:05:d2:95:c3:e9:03:06:5c:31:53:98:ea:9b:2b:c1:29: 4c:ea:99:3d:61:dd:a0:64:27:52:45:52:7d:0d:d3:72:b3:ae: 6f:d9:84:9e:7b:71:67:5c:e1:3a:cf:f8:d3:65:1c:00:95:bd: 6e:10:0e:6e:9a:f7:c8:67:7d:b8:f5:f7:e6:10:ac:40:74:2a: 63:cf:db:bb:09:a6:aa:7d:a3:16:b9:7b:b8:26:cd:0b:e5:90: 39:c1:36:35:71:88:59:e3:dd:e5:9b:f5:da:58:01:73:81:f3: 8f:ef:30:ab:39:d5:46:ac:21:8d:f5:53:9a:ef:25:a7:a2:10: 0d:b4:5f:99:12:82:af:5f:09:ef:b0:1f:78:66:b8:5b:da:89: 67:5f:4f:e2:ac:7e:1b:69:08:de:d3:c9:27:bf:8e:7c:02:bd: 6c:78:7a:a0:1b:77:89:48:02:ad:64:f5:d7:40:04:96:ca:ee: 97:e0:8a:57:27:26:39:ef:5f:d2:53:ba:c1:1f:58:46:8a:a7: 55:63:af:56 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtVmgPi+3ulu49nR4BHwLgbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcxMzliYzVjZWYzYWVhZGYzMjYxM2Y3ZDk1OWVjOGU0MGE3 NDI5MTgwHhcNMjUxMjI1MTMwMTU1WhcNMjUxMjI2MTMwMTU1WjAzMTEwLwYDVQQD Eyg0Y2VjNjI2NjgzY2ViY2Y2MWYyZGMxMTg4YjhjZTQ5OTFlOWU2M2Y5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArZSCaslhI/7VW+tNiaANDW5Qb9jF YUNshYTSx5MZWxGO/diTYNQvKZM2PZ7IeCtSUvGme4Vv07jXwu7SxHnpxR7uA7O0 Cjh/Dv/WOp82e+s1R0T0V4fpZwWmbQD2XvMnoYM3aRs/YiDeC/oVAfQajlRS/Gx0 n2P7HvgNaUc9tDIpBdEqURXJ9f8iuF8wTLGDMXQD3XWA5l7sMpcjBrZ8rzOxKZdZ D7dnDxaHStizQBV3GvY+86gT3wi9Jve+C2vWY2GTrutH6A4XeJZcAlshAKTzX+IK kele4w+2hlVcVEsun9WrANPtGiOL3u7aUzdVMAnxX4CvanBr2yd8+Y5qvwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEzsYmaDzrz2Hy3BGIuM5JkenmP5MB8GA1UdIwQY MBaAFHE5vFzvOurfMmE/fZWeyOQKdCkYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY1RtOFhPODY2dDh5WVQ5OWxaN0k1QXAwS1JnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZC9jYWU2NTItYTIxOC00MmY2LTk3YWYt Nzk0YjI4ZWIxNmM1LzEvY1RtOFhPODY2dDh5WVQ5OWxaN0k1QXAwS1JnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80ZC9jYWU2NTItYTIxOC00MmY2LTk3YWYtNzk0YjI4ZWIxNmM1 LzEvY1RtOFhPODY2dDh5WVQ5OWxaN0k1QXAwS1JnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWCI1VUCR SYyIIpE7ZEhiF6ZOA+UDhARCWICoB18aW9ri2JyNfdppPidPRCVUEqrcgozw+BSI O3EF0pXD6QMGXDFTmOqbK8EpTOqZPWHdoGQnUkVSfQ3TcrOub9mEnntxZ1zhOs/4 02UcAJW9bhAObpr3yGd9uPX35hCsQHQqY8/buwmmqn2jFrl7uCbNC+WQOcE2NXGI WePd5Zv12lgBc4Hzj+8wqznVRqwhjfVTmu8lp6IQDbRfmRKCr18J77AfeGa4W9qJ Z19P4qx+G2kI3tPJJ7+OfAK9bHh6oBt3iUgCrWT110AElsrul+CKVycmOe9f0lO6 wR9YRoqnVWOvVg== -----END CERTIFICATE-----Generated at Thu Dec 25 17:10:32 2025 by rpki-client