This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/dc3246-c85a-46df-8c30-48cee26c55bb/1/cLteVPJ0jstdhpjTeTOcwV8yuJM.mft File: cLteVPJ0jstdhpjTeTOcwV8yuJM.mft (raw, json) Hash identifier: Kh051+oKVRwK8NgwWyByRrpH0uf+ezua1ZAkXnkdTsw= Subject key identifier: 04:F8:1C:38:B9:FD:3E:AB:B7:3A:BF:C1:7D:7C:43:98:44:F7:52:BC Authority key identifier: 70:BB:5E:54:F2:74:8E:CB:5D:86:98:D3:79:33:9C:C1:5F:32:B8:93 Certificate issuer: /CN=70bb5e54f2748ecb5d8698d379339cc15f32b893 Certificate serial: 019B3833639AF16F485BC3F79C404FE62E33 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cLteVPJ0jstdhpjTeTOcwV8yuJM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/dc3246-c85a-46df-8c30-48cee26c55bb/1/cLteVPJ0jstdhpjTeTOcwV8yuJM.mft Manifest number: 1389 Signing time: Fri 19 Dec 2025 20:00:50 +0000 Manifest this update: Fri 19 Dec 2025 20:00:50 +0000 Manifest next update: Sat 20 Dec 2025 20:00:50 +0000 Files and hashes: 1: VABLE3iBHalb6Jl_c3u-oyHeiS8.roa (hash: s1CBILyJSh7gNgL+QAYvHKZM5KaEqmZAwVEcKOw0A0E=) 2: cLteVPJ0jstdhpjTeTOcwV8yuJM.crl (hash: w+ikdsLHX5Sl5Z2As9hqKU3Sj8lwjGQGT+Hc7uF/dyg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/dc3246-c85a-46df-8c30-48cee26c55bb/1/cLteVPJ0jstdhpjTeTOcwV8yuJM.crl rsync://rpki.ripe.net/repository/DEFAULT/5f/dc3246-c85a-46df-8c30-48cee26c55bb/1/cLteVPJ0jstdhpjTeTOcwV8yuJM.mft rsync://rpki.ripe.net/repository/DEFAULT/cLteVPJ0jstdhpjTeTOcwV8yuJM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 16:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:38:33:63:9a:f1:6f:48:5b:c3:f7:9c:40:4f:e6:2e:33 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=70bb5e54f2748ecb5d8698d379339cc15f32b893 Validity Not Before: Dec 19 20:00:50 2025 GMT Not After : Dec 20 20:00:50 2025 GMT Subject: CN=04f81c38b9fd3eabb73abfc17d7c439844f752bc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:8a:f5:6d:3e:76:44:6d:ac:d4:3d:c0:4a:8d: 66:cb:9b:fe:8b:56:a6:0c:e3:38:a8:8a:d0:39:e8: c6:57:93:01:bd:62:f7:69:64:2d:f3:ac:81:b4:31: 40:c6:af:b1:3e:37:4e:e2:b1:eb:58:7e:c1:ca:26: 70:2a:2c:27:dc:d4:17:82:f8:cb:47:9f:37:cf:e0: cf:35:b8:d1:1e:e3:db:b2:00:59:0b:d7:1a:3e:f1: de:c4:03:5f:9d:75:6d:56:8d:55:59:3e:d5:4d:87: 76:a7:8e:cf:13:fc:95:89:86:e9:84:7f:63:24:36: 47:98:5e:e2:4a:cd:85:39:87:6f:df:84:12:41:0b: 91:49:f3:ed:3f:a5:9c:7c:12:c2:83:97:8b:0d:0d: fa:07:d3:a2:c0:74:bc:ae:b7:e0:69:3f:f6:d5:b9: e3:9c:77:59:70:9c:2c:79:6f:92:f9:18:c7:09:70: d4:36:a5:d3:03:0d:1e:2c:3f:da:c1:5e:e3:5a:57: 86:29:6a:ea:b1:2d:37:33:a6:ef:77:2b:29:5c:b1: df:f6:ff:58:0e:74:e9:09:77:95:d5:ac:44:2c:3c: fa:42:8a:9a:35:a8:a7:f4:d9:8a:8c:1a:4a:46:6f: 45:d0:72:3b:fb:c2:f6:d8:05:97:d3:36:bf:9e:89: 98:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:F8:1C:38:B9:FD:3E:AB:B7:3A:BF:C1:7D:7C:43:98:44:F7:52:BC X509v3 Authority Key Identifier: keyid:70:BB:5E:54:F2:74:8E:CB:5D:86:98:D3:79:33:9C:C1:5F:32:B8:93 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cLteVPJ0jstdhpjTeTOcwV8yuJM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/dc3246-c85a-46df-8c30-48cee26c55bb/1/cLteVPJ0jstdhpjTeTOcwV8yuJM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/dc3246-c85a-46df-8c30-48cee26c55bb/1/cLteVPJ0jstdhpjTeTOcwV8yuJM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0e:fd:98:d2:5c:4c:b1:28:7f:23:b0:37:e0:85:a5:51:08:b2: 84:24:5f:fe:e1:85:ed:5e:39:4c:ef:f7:59:a1:e2:aa:5b:8c: c5:2f:f0:44:ea:6a:9e:82:05:15:0f:2b:d0:51:bc:f4:92:6c: 74:4f:c9:d3:be:6d:9d:de:9d:ed:eb:71:07:91:0d:ab:fa:6c: 2a:e4:77:ae:2b:f2:bf:32:00:2c:2d:96:e8:d7:05:3c:ef:f6: bc:c0:e7:97:61:16:2f:f1:b6:9f:64:0d:c6:27:03:12:d7:ec: 6a:29:d2:78:bf:ad:fc:f1:1c:07:cf:da:58:3f:e3:de:cb:b3: 55:79:8a:dc:41:58:37:e9:f8:9a:0c:5b:45:2c:9f:ef:b1:7b: 5c:42:bb:4e:31:99:3f:22:57:4e:a1:36:ac:38:3b:d1:d7:8a: 08:08:90:ea:d1:b7:40:da:02:fe:e4:7c:fb:d9:44:8e:07:05: d4:e2:f3:82:10:a8:64:62:89:a6:ca:25:5e:4d:3a:7e:3a:77: 77:00:5c:24:59:0b:cb:b7:33:00:c4:b4:e1:a0:b8:d5:3c:0b: b1:96:0c:95:57:2e:f7:9f:f8:d8:79:01:26:da:74:79:22:4e: 32:34:ab:63:07:f9:8a:a4:b3:b8:4e:e7:e7:0d:44:74:aa:4b: 53:86:ef:be -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs4M2Oa8W9IW8P3nEBP5i4zMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcwYmI1ZTU0ZjI3NDhlY2I1ZDg2OThkMzc5MzM5Y2MxNWYz MmI4OTMwHhcNMjUxMjE5MjAwMDUwWhcNMjUxMjIwMjAwMDUwWjAzMTEwLwYDVQQD EygwNGY4MWMzOGI5ZmQzZWFiYjczYWJmYzE3ZDdjNDM5ODQ0Zjc1MmJjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtYr1bT52RG2s1D3ASo1my5v+i1am DOM4qIrQOejGV5MBvWL3aWQt86yBtDFAxq+xPjdO4rHrWH7ByiZwKiwn3NQXgvjL R583z+DPNbjRHuPbsgBZC9caPvHexANfnXVtVo1VWT7VTYd2p47PE/yViYbphH9j JDZHmF7iSs2FOYdv34QSQQuRSfPtP6WcfBLCg5eLDQ36B9OiwHS8rrfgaT/21bnj nHdZcJwseW+S+RjHCXDUNqXTAw0eLD/awV7jWleGKWrqsS03M6bvdyspXLHf9v9Y DnTpCXeV1axELDz6QoqaNain9NmKjBpKRm9F0HI7+8L22AWX0za/nomYQQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAT4HDi5/T6rtzq/wX18Q5hE91K8MB8GA1UdIwQY MBaAFHC7XlTydI7LXYaY03kznMFfMriTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY0x0ZVZQSjBqc3RkaHBqVGVUT2N3Vjh5dUpNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi9kYzMyNDYtYzg1YS00NmRmLThjMzAt NDhjZWUyNmM1NWJiLzEvY0x0ZVZQSjBqc3RkaHBqVGVUT2N3Vjh5dUpNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Zi9kYzMyNDYtYzg1YS00NmRmLThjMzAtNDhjZWUyNmM1NWJi LzEvY0x0ZVZQSjBqc3RkaHBqVGVUT2N3Vjh5dUpNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADv2Y0lxM sSh/I7A34IWlUQiyhCRf/uGF7V45TO/3WaHiqluMxS/wROpqnoIFFQ8r0FG89JJs dE/J075tnd6d7etxB5ENq/psKuR3rivyvzIALC2W6NcFPO/2vMDnl2EWL/G2n2QN xicDEtfsainSeL+t/PEcB8/aWD/j3suzVXmK3EFYN+n4mgxbRSyf77F7XEK7TjGZ PyJXTqE2rDg70deKCAiQ6tG3QNoC/uR8+9lEjgcF1OLzghCoZGKJpsolXk06fjp3 dwBcJFkLy7czAMS04aC41TwLsZYMlVcu95/42HkBJtp0eSJOMjSrYwf5iqSzuE7n 5w1EdKpLU4bvvg== -----END CERTIFICATE-----Generated at Fri Dec 19 21:48:39 2025 by rpki-client