This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/1cb9fc-6b33-42d5-9423-79ecd8a9b6d6/1/cTXjiUY0SCsIMXd1x5ZX6bgxLU0.mft File: cTXjiUY0SCsIMXd1x5ZX6bgxLU0.mft (raw, json) Hash identifier: gPBylhQcHzhh/PpTR0dUPI+r1vXn8WiEjMqWPvVUGLU= Subject key identifier: 5D:3E:79:B0:4F:4D:E3:2A:4B:FA:06:A7:14:77:B3:27:08:B2:7B:CD Authority key identifier: 71:35:E3:89:46:34:48:2B:08:31:77:75:C7:96:57:E9:B8:31:2D:4D Certificate issuer: /CN=7135e3894634482b08317775c79657e9b8312d4d Certificate serial: 019B3DFE70C365F226520E21BCC17AE24117 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cTXjiUY0SCsIMXd1x5ZX6bgxLU0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/1cb9fc-6b33-42d5-9423-79ecd8a9b6d6/1/cTXjiUY0SCsIMXd1x5ZX6bgxLU0.mft Manifest number: 11BF Signing time: Sat 20 Dec 2025 23:00:43 +0000 Manifest this update: Sat 20 Dec 2025 23:00:43 +0000 Manifest next update: Sun 21 Dec 2025 23:00:43 +0000 Files and hashes: 1: 3vMVhDVuSakGpKEegLzmX9CZn_0.roa (hash: 0WA7LBg+VlA+MYR6g5nbmdux2cCvdzgMgFAqrxmL/5k=) 2: cTXjiUY0SCsIMXd1x5ZX6bgxLU0.crl (hash: N2pswKg7bobtwWYyUTlswXPxoMZmc7R+lrYApg0HJCE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/1cb9fc-6b33-42d5-9423-79ecd8a9b6d6/1/cTXjiUY0SCsIMXd1x5ZX6bgxLU0.crl rsync://rpki.ripe.net/repository/DEFAULT/62/1cb9fc-6b33-42d5-9423-79ecd8a9b6d6/1/cTXjiUY0SCsIMXd1x5ZX6bgxLU0.mft rsync://rpki.ripe.net/repository/DEFAULT/cTXjiUY0SCsIMXd1x5ZX6bgxLU0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 19:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:fe:70:c3:65:f2:26:52:0e:21:bc:c1:7a:e2:41:17 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7135e3894634482b08317775c79657e9b8312d4d Validity Not Before: Dec 20 23:00:43 2025 GMT Not After : Dec 21 23:00:43 2025 GMT Subject: CN=5d3e79b04f4de32a4bfa06a71477b32708b27bcd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:60:b6:be:92:64:70:f5:e6:cc:b1:4c:a6:f2: 2f:b6:ab:5a:95:ed:35:11:d9:9f:4a:d9:93:91:92: e1:1a:78:83:cb:37:eb:25:b9:f3:dc:60:3a:24:cb: 2b:57:d2:91:91:2d:cf:76:c4:4d:db:f7:c3:20:1e: e6:f9:6b:2d:7b:09:ad:96:93:a7:c3:21:4c:47:91: 78:88:a3:93:65:8c:7d:91:16:68:70:db:e8:c4:bb: 59:e6:b4:f0:e7:99:01:b9:69:92:d0:42:79:e7:fe: 8c:0c:b2:40:65:b7:14:01:a1:92:f4:01:67:44:5a: bd:b1:e6:11:e3:ac:8d:04:d5:8e:30:dc:52:d7:a9: 67:62:5d:de:a2:c3:49:31:17:41:bb:29:eb:82:7c: 87:de:61:1e:3e:63:94:01:36:04:dc:bb:13:29:ba: ef:c4:e2:5a:a0:da:71:25:bd:ec:fc:b0:ce:a8:d7: 1c:74:7b:93:f4:70:e3:5c:78:cb:3b:35:12:bb:fd: 9d:0a:a3:55:b9:5d:b5:cc:ad:a3:0c:71:10:e1:f1: db:48:0a:19:81:cf:fe:a5:e4:f3:90:aa:99:04:5b: 8f:fc:c1:3c:2b:6d:cb:1f:48:3e:59:fa:f1:10:89: 60:e0:fc:91:88:78:19:4c:db:63:fe:52:36:e0:0e: a1:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:3E:79:B0:4F:4D:E3:2A:4B:FA:06:A7:14:77:B3:27:08:B2:7B:CD X509v3 Authority Key Identifier: keyid:71:35:E3:89:46:34:48:2B:08:31:77:75:C7:96:57:E9:B8:31:2D:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cTXjiUY0SCsIMXd1x5ZX6bgxLU0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/1cb9fc-6b33-42d5-9423-79ecd8a9b6d6/1/cTXjiUY0SCsIMXd1x5ZX6bgxLU0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/62/1cb9fc-6b33-42d5-9423-79ecd8a9b6d6/1/cTXjiUY0SCsIMXd1x5ZX6bgxLU0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 47:bd:31:6e:71:e1:f6:34:ce:1b:69:c3:5a:2e:01:c7:c4:55: 29:61:38:bc:37:93:27:6c:f0:d8:41:38:b0:06:70:e0:d0:3a: 64:2c:d7:e4:cc:bc:0b:38:30:e5:40:4d:05:cf:26:82:1e:4b: 7e:06:2f:1b:be:34:14:81:de:b1:68:78:b3:d2:23:5c:7e:ee: d3:fb:6c:af:a1:8e:ad:13:b2:36:13:50:89:6b:a3:d1:35:e6: f0:e6:fa:ec:60:02:86:2b:a0:fc:5c:69:2f:5f:89:29:14:ec: a1:41:17:f7:69:b2:13:31:99:af:fc:f9:02:c5:f0:47:ab:d5: d9:c2:aa:9c:e4:a6:d1:b8:f3:de:76:a1:48:6c:75:e8:7f:9f: cf:29:65:d9:75:f3:15:cf:a3:59:4a:2f:52:e1:3e:58:dc:73: d8:7c:0a:51:ee:08:86:f6:9d:38:00:57:01:b0:33:ed:a2:ec: df:8c:3a:ae:f1:d4:2b:bd:f6:3a:a2:a2:7a:fb:d3:ba:75:6b: f1:1e:5e:3f:75:03:ca:dd:4b:66:9c:ab:57:4b:32:e8:ea:02: e8:50:3d:57:29:a5:3d:3d:5b:68:9b:a4:4d:ca:5d:55:1b:4c: 68:dc:ba:fb:0b:8b:c6:2b:b0:db:65:99:ac:ee:76:7a:ff:c8: 11:aa:58:fd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9/nDDZfImUg4hvMF64kEXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcxMzVlMzg5NDYzNDQ4MmIwODMxNzc3NWM3OTY1N2U5Yjgz MTJkNGQwHhcNMjUxMjIwMjMwMDQzWhcNMjUxMjIxMjMwMDQzWjAzMTEwLwYDVQQD Eyg1ZDNlNzliMDRmNGRlMzJhNGJmYTA2YTcxNDc3YjMyNzA4YjI3YmNkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5WC2vpJkcPXmzLFMpvIvtqtale01 EdmfStmTkZLhGniDyzfrJbnz3GA6JMsrV9KRkS3PdsRN2/fDIB7m+WstewmtlpOn wyFMR5F4iKOTZYx9kRZocNvoxLtZ5rTw55kBuWmS0EJ55/6MDLJAZbcUAaGS9AFn RFq9seYR46yNBNWOMNxS16lnYl3eosNJMRdBuynrgnyH3mEePmOUATYE3LsTKbrv xOJaoNpxJb3s/LDOqNccdHuT9HDjXHjLOzUSu/2dCqNVuV21zK2jDHEQ4fHbSAoZ gc/+peTzkKqZBFuP/ME8K23LH0g+WfrxEIlg4PyRiHgZTNtj/lI24A6hMQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFF0+ebBPTeMqS/oGpxR3sycIsnvNMB8GA1UdIwQY MBaAFHE144lGNEgrCDF3dceWV+m4MS1NMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY1RYamlVWTBTQ3NJTVhkMXg1Wlg2Ymd4TFUwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Mi8xY2I5ZmMtNmIzMy00MmQ1LTk0MjMt NzllY2Q4YTliNmQ2LzEvY1RYamlVWTBTQ3NJTVhkMXg1Wlg2Ymd4TFUwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Mi8xY2I5ZmMtNmIzMy00MmQ1LTk0MjMtNzllY2Q4YTliNmQ2 LzEvY1RYamlVWTBTQ3NJTVhkMXg1Wlg2Ymd4TFUwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAR70xbnHh 9jTOG2nDWi4Bx8RVKWE4vDeTJ2zw2EE4sAZw4NA6ZCzX5My8Czgw5UBNBc8mgh5L fgYvG740FIHesWh4s9IjXH7u0/tsr6GOrROyNhNQiWuj0TXm8Ob67GAChiug/Fxp L1+JKRTsoUEX92myEzGZr/z5AsXwR6vV2cKqnOSm0bjz3nahSGx16H+fzyll2XXz Fc+jWUovUuE+WNxz2HwKUe4IhvadOABXAbAz7aLs34w6rvHUK732OqKievvTunVr 8R5eP3UDyt1LZpyrV0sy6OoC6FA9VymlPT1baJukTcpdVRtMaNy6+wuLxiuw22WZ rO52ev/IEapY/Q== -----END CERTIFICATE-----Generated at Sun Dec 21 03:51:17 2025 by rpki-client