This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/956db9-c8f7-4b9f-a56e-bc6db7248add/1/cPmxat8v0xmIhZkitEV0gd1-70A.mft File: cPmxat8v0xmIhZkitEV0gd1-70A.mft (raw, json) Hash identifier: 7Jp0pCkl9DUMAKj1uP6h2dvuv95GTXfZ48gnb1W8TSc= Subject key identifier: 99:5C:F8:90:FE:FC:64:92:DC:E4:CC:5A:4F:FA:2D:32:85:4D:70:1C Authority key identifier: 70:F9:B1:6A:DF:2F:D3:19:88:85:99:22:B4:45:74:81:DD:7E:EF:40 Certificate issuer: /CN=70f9b16adf2fd31988859922b4457481dd7eef40 Certificate serial: 019B281BCFAB3490FC2415BA5EBDD98B7208 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cPmxat8v0xmIhZkitEV0gd1-70A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/956db9-c8f7-4b9f-a56e-bc6db7248add/1/cPmxat8v0xmIhZkitEV0gd1-70A.mft Manifest number: 1524 Signing time: Tue 16 Dec 2025 17:01:09 +0000 Manifest this update: Tue 16 Dec 2025 17:01:09 +0000 Manifest next update: Wed 17 Dec 2025 17:01:09 +0000 Files and hashes: 1: 5WpWrypca4XGx0ISHtuZYRT_cno.roa (hash: R8ZoU8UZw1Z3gy7t3IJTFumdlDzgJjWSubPKAJkbvV0=) 2: 5hhLPsRpw9KA7o9wasEihzJSXoA.roa (hash: rLTFQz+FRyLZFkOs44WSv8ULNMp8Sfi16jOBN6XhYiE=) 3: 8-icgNG9YFfARW17qjTdCn9yD80.roa (hash: vebs5VRK2d7EVc4VYZnrKXN0FKJQS1X4sYhCt1gzy4o=) 4: EmX6XyNl91Tm8cirnJelJMWv5jw.roa (hash: ecaOyMml05HDIHHtJ4OiOiljQ7sD0n4R4TT3SS/C9pQ=) 5: JOBERo-vgg6dldBoWViTCfV7X-A.roa (hash: ce+d5taUPY+G9x5sjcA70ndAe38v7dhbZx0JrAG/CD4=) 6: PV2mCkS-UgVkDARZVBwroYA25_s.roa (hash: IURPukZTcQABJnfofXQZ8uQ6EdE7QIiPt7LuWjaU7ck=) 7: T1V76bxlhezLMl4Tzlvgqgk0pcg.roa (hash: Hk9kWyBSS3VZQ3ORtc2F2qsaXDclUxsqlus/HDJzLds=) 8: TGAbtOOQvJAO29jntkyfdiXsA34.roa (hash: Qa/Pmj8niQ7pWqzQURSMGZYQ5K31JvVZc6izGiwMvgM=) 9: Z5phhVwVfpK6dkc5C1-vYmhcYUU.roa (hash: iIyIPk2NBxkdVR06TYJeH+vh01QOalQb+F2tpumtM+w=) 10: cF-NETmL2tObtWSmyBQoXJnoEx8.roa (hash: A/p/4RndIub/XOYrnQVBToTK2tsLnhe4q2Yyjp+gHrA=) 11: cPmxat8v0xmIhZkitEV0gd1-70A.crl (hash: ygSzAloCFkXboWhRDb7YVXgoMQfA0bvOKHBM69yrvNQ=) 12: ezMLdhISIqr2PAqGoulAf-qQ6FY.roa (hash: MoVmtNQ9G0A/NJidABkGuBmF42AfIIukbBtAhp8lY68=) 13: fC3AtSHj4uWnRNCJOJWyffnxb_c.roa (hash: k4yZxxd7Kbg9gUH1VtnIM62vxLC45Jz4VtvfU0eH3rQ=) 14: irItIVR6u-ZjJg2ky_t330Puetw.roa (hash: jdzhDlqJouvAYoBby6ytKGVftFOiZZckZb8p5RQravo=) 15: mA4IEAHXR0LDJS0AO7AgvdyymfA.roa (hash: B62czMPy2pKQJ5FL2R2C5ZUZdywtpL+Cj+O5hZ16Rv4=) 16: qQMnV_AHkaoypfzXBStNqOIC8i4.roa (hash: 8/gHPP6AgbL3NuW+OG2JLB+jSLFsV5WrdZq7Of0LMpg=) 17: t-GC4kGf7lvSnOYAiTpgmlkKEL4.roa (hash: 9rNbslHDQxGg0Ew50MQa2Fk3HC4+vs4VNNeusuZLYr8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/956db9-c8f7-4b9f-a56e-bc6db7248add/1/cPmxat8v0xmIhZkitEV0gd1-70A.crl rsync://rpki.ripe.net/repository/DEFAULT/5f/956db9-c8f7-4b9f-a56e-bc6db7248add/1/cPmxat8v0xmIhZkitEV0gd1-70A.mft rsync://rpki.ripe.net/repository/DEFAULT/cPmxat8v0xmIhZkitEV0gd1-70A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 14:45:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:28:1b:cf:ab:34:90:fc:24:15:ba:5e:bd:d9:8b:72:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=70f9b16adf2fd31988859922b4457481dd7eef40 Validity Not Before: Dec 16 17:01:09 2025 GMT Not After : Dec 17 17:01:09 2025 GMT Subject: CN=995cf890fefc6492dce4cc5a4ffa2d32854d701c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:d8:84:28:fb:d7:ac:cc:00:1f:48:82:99:5d: 9f:63:5a:66:e1:5e:12:83:e5:7d:61:e4:e8:91:d9: a4:14:91:2c:fb:31:f0:9c:6b:7f:55:18:c0:1a:ba: ef:a5:97:59:90:1d:1d:60:d8:4c:ec:e9:10:10:1a: c5:6e:0a:bd:fd:c5:f0:a4:73:3a:fd:16:6f:dc:a7: ca:98:50:b2:55:90:4a:78:00:5d:30:a5:9f:ab:8e: 24:e5:46:c8:db:f7:8a:67:d4:57:9d:9f:f8:50:5f: 0c:55:52:fa:fd:55:e5:6d:4a:4c:25:f3:26:2e:72: 17:b8:c3:79:8c:71:1d:3d:7b:14:b1:5e:ba:4c:14: 29:75:36:8a:17:c4:29:b7:c2:30:0c:4d:93:65:f7: ca:9f:d7:8f:6a:b7:e3:d5:7a:25:f6:7d:d8:0c:82: b7:bf:a6:fe:77:2c:65:81:25:23:05:72:c5:ae:db: 8f:e7:49:25:33:f6:79:7d:b0:a8:17:4e:f1:1f:61: 8e:c0:ce:33:aa:c8:e2:7a:0f:b1:9a:bb:2d:fa:47: de:f9:e2:d1:7a:a7:68:86:04:74:40:16:5a:5c:e9: b3:a6:72:bb:42:1d:db:53:8e:6e:43:e8:66:91:9d: 5c:be:c3:62:65:10:2a:9f:84:a9:cd:bf:64:fe:4f: a7:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:5C:F8:90:FE:FC:64:92:DC:E4:CC:5A:4F:FA:2D:32:85:4D:70:1C X509v3 Authority Key Identifier: keyid:70:F9:B1:6A:DF:2F:D3:19:88:85:99:22:B4:45:74:81:DD:7E:EF:40 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cPmxat8v0xmIhZkitEV0gd1-70A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/956db9-c8f7-4b9f-a56e-bc6db7248add/1/cPmxat8v0xmIhZkitEV0gd1-70A.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/956db9-c8f7-4b9f-a56e-bc6db7248add/1/cPmxat8v0xmIhZkitEV0gd1-70A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b9:9b:02:1c:56:fb:c8:77:b2:30:ee:85:f5:db:5e:58:2d:62: ec:ca:21:88:e5:d0:bc:6a:ef:b2:bb:70:41:c4:17:b8:3d:96: 00:19:26:59:05:78:02:1d:81:52:f2:4e:21:56:1c:8d:c2:83: 30:14:ea:eb:68:08:01:2e:c3:9d:ca:42:b6:64:11:0d:33:01: e6:73:0c:92:22:3c:6c:17:fa:94:01:0b:39:a3:e9:dc:94:50: 42:ca:b3:85:31:fd:02:46:cc:0a:a8:78:c1:e4:9d:c7:37:fe: 0e:cc:1c:da:2c:11:6d:b5:d3:53:bb:d4:27:27:78:60:ba:2e: 10:6a:99:d9:55:cb:d1:45:0b:14:23:be:4c:57:ab:fa:91:49: 4f:b2:1f:5f:45:e8:af:44:34:f7:79:8b:16:11:0f:d1:3e:52: c9:3f:a9:8d:7e:0c:fb:c4:36:ae:71:a4:ad:02:cf:9e:1a:ef: 6f:a4:98:e7:e2:2e:d4:9d:90:1a:67:15:02:8a:bd:be:83:14: 4b:3f:51:89:af:b1:c3:da:f3:d4:3c:af:58:d3:54:dc:1b:f2: c0:ad:f7:74:0d:36:a6:80:ef:6c:28:f3:3f:11:4b:c3:d9:37: 7d:06:a3:53:4e:ec:60:e0:ba:9b:1e:a9:8f:1a:94:b0:7f:3b: 54:c2:dd:ed -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsoG8+rNJD8JBW6Xr3Zi3IIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcwZjliMTZhZGYyZmQzMTk4ODg1OTkyMmI0NDU3NDgxZGQ3 ZWVmNDAwHhcNMjUxMjE2MTcwMTA5WhcNMjUxMjE3MTcwMTA5WjAzMTEwLwYDVQQD Eyg5OTVjZjg5MGZlZmM2NDkyZGNlNGNjNWE0ZmZhMmQzMjg1NGQ3MDFjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1tiEKPvXrMwAH0iCmV2fY1pm4V4S g+V9YeTokdmkFJEs+zHwnGt/VRjAGrrvpZdZkB0dYNhM7OkQEBrFbgq9/cXwpHM6 /RZv3KfKmFCyVZBKeABdMKWfq44k5UbI2/eKZ9RXnZ/4UF8MVVL6/VXlbUpMJfMm LnIXuMN5jHEdPXsUsV66TBQpdTaKF8Qpt8IwDE2TZffKn9eParfj1Xol9n3YDIK3 v6b+dyxlgSUjBXLFrtuP50klM/Z5fbCoF07xH2GOwM4zqsjieg+xmrst+kfe+eLR eqdohgR0QBZaXOmzpnK7Qh3bU45uQ+hmkZ1cvsNiZRAqn4Spzb9k/k+nlQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJlc+JD+/GSS3OTMWk/6LTKFTXAcMB8GA1UdIwQY MBaAFHD5sWrfL9MZiIWZIrRFdIHdfu9AMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY1BteGF0OHYweG1JaFpraXRFVjBnZDEtNzBBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi85NTZkYjktYzhmNy00YjlmLWE1NmUt YmM2ZGI3MjQ4YWRkLzEvY1BteGF0OHYweG1JaFpraXRFVjBnZDEtNzBBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Zi85NTZkYjktYzhmNy00YjlmLWE1NmUtYmM2ZGI3MjQ4YWRk LzEvY1BteGF0OHYweG1JaFpraXRFVjBnZDEtNzBBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAuZsCHFb7 yHeyMO6F9dteWC1i7MohiOXQvGrvsrtwQcQXuD2WABkmWQV4Ah2BUvJOIVYcjcKD MBTq62gIAS7DncpCtmQRDTMB5nMMkiI8bBf6lAELOaPp3JRQQsqzhTH9AkbMCqh4 weSdxzf+Dswc2iwRbbXTU7vUJyd4YLouEGqZ2VXL0UULFCO+TFer+pFJT7IfX0Xo r0Q093mLFhEP0T5SyT+pjX4M+8Q2rnGkrQLPnhrvb6SY5+Iu1J2QGmcVAoq9voMU Sz9Ria+xw9rz1DyvWNNU3BvywK33dA02poDvbCjzPxFLw9k3fQajU07sYOC6mx6p jxqUsH87VMLd7Q== -----END CERTIFICATE-----Generated at Tue Dec 16 22:35:58 2025 by rpki-client