This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/992d03-883b-404d-887e-f2435d5cf37b/1/cAHkIiJ_pEzFy5XSqdzOD6W4nAc.mft File: cAHkIiJ_pEzFy5XSqdzOD6W4nAc.mft (raw, json) Hash identifier: BiyAVH64/YRSsU+3sJxOZY2/v4qvqKF8Qo21p0P5QPY= Subject key identifier: 9A:C7:24:F0:1B:11:E8:F0:D1:2D:6D:56:50:0F:3B:A0:99:3D:01:2E Authority key identifier: 70:01:E4:22:22:7F:A4:4C:C5:CB:95:D2:A9:DC:CE:0F:A5:B8:9C:07 Certificate issuer: /CN=7001e422227fa44cc5cb95d2a9dcce0fa5b89c07 Certificate serial: 019B3D231F46F9D73CAFBFA73EE01B308ED1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cAHkIiJ_pEzFy5XSqdzOD6W4nAc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/992d03-883b-404d-887e-f2435d5cf37b/1/cAHkIiJ_pEzFy5XSqdzOD6W4nAc.mft Manifest number: 179B Signing time: Sat 20 Dec 2025 19:01:10 +0000 Manifest this update: Sat 20 Dec 2025 19:01:10 +0000 Manifest next update: Sun 21 Dec 2025 19:01:10 +0000 Files and hashes: 1: 39yOXWjYZyS68AzfLeyRW_eBtf4.roa (hash: Mz12/qdbJKM8FU8F8+Lk+lMxeg4aXuhF1UCiM+rDIsI=) 2: 6l5M-x5AVCV2PGZr6_l_DZJOTeg.roa (hash: 0TyUlVfVnh7he1NVofYJh+27mbZ/WYA8ViwMyPgm6t8=) 3: PvXxIOTmhlDT8Zjl8pOjVtbUjqs.roa (hash: cEmlEEf5hdAMQxuyDOcKJwVECyiRzY+P8vKK1P563lo=) 4: cAHkIiJ_pEzFy5XSqdzOD6W4nAc.crl (hash: 6fWZqDvlL4uvU48zsqWFJS75a14gGWyni7K4omiKG4w=) 5: fUQV7hcWr8wDftL_A0d4dRPlV5Y.roa (hash: W1gOWwQgZ2lfD/yK9uLmMV4EF6iXlGj32IeijexRu80=) 6: iRLaERPVRzV8PJ2a_5pZoHTAhfc.roa (hash: MJRfnp4Z+bQNLko611lWRkdCj1xLm4ibkbl4u7vmmHY=) 7: s6g2qeenxmDkGrPs5BM25xHO8xU.roa (hash: BC1HJ2/1smBeQKjZhdC/Dii9NT9VDbWsnbk1hLUwmhI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/992d03-883b-404d-887e-f2435d5cf37b/1/cAHkIiJ_pEzFy5XSqdzOD6W4nAc.crl rsync://rpki.ripe.net/repository/DEFAULT/63/992d03-883b-404d-887e-f2435d5cf37b/1/cAHkIiJ_pEzFy5XSqdzOD6W4nAc.mft rsync://rpki.ripe.net/repository/DEFAULT/cAHkIiJ_pEzFy5XSqdzOD6W4nAc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 19:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:23:1f:46:f9:d7:3c:af:bf:a7:3e:e0:1b:30:8e:d1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7001e422227fa44cc5cb95d2a9dcce0fa5b89c07 Validity Not Before: Dec 20 19:01:10 2025 GMT Not After : Dec 21 19:01:10 2025 GMT Subject: CN=9ac724f01b11e8f0d12d6d56500f3ba0993d012e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:f4:d1:4e:94:31:c9:c7:43:af:f5:ca:61:66: 94:09:6c:73:d6:69:54:0a:33:aa:17:01:6d:c2:73: 0a:6d:bf:4c:44:e2:98:99:b5:2d:4d:37:73:3e:69: 83:d6:5b:73:3d:ec:cd:3d:51:ef:17:3c:14:9c:28: 47:e7:38:18:cf:4c:15:37:d2:25:00:2d:0f:b3:f4: 69:1f:5b:ff:9d:a0:a0:56:7f:fc:a2:f9:26:cf:f5: 2f:fa:1f:5d:25:59:39:6a:63:4a:8a:bc:85:11:86: 0d:c0:e8:fd:e7:d0:61:ff:3a:da:0c:41:24:54:43: 4e:93:e5:90:70:46:8c:17:1d:73:51:43:91:f6:02: e2:08:14:20:99:76:f3:ed:e9:84:2f:b9:88:11:f9: c3:82:cf:2a:a3:5a:da:08:37:7d:bc:16:b1:98:46: 6c:4c:4a:66:3c:ce:1a:8a:61:4b:d7:ed:77:e2:80: 62:da:36:27:08:c2:62:d1:d3:1c:be:10:56:7a:74: 6d:71:ea:0e:8b:5b:c5:4f:ce:2e:cf:90:d3:d4:90: af:08:27:7a:88:38:04:5c:f1:43:1c:cc:09:c3:6e: 68:70:81:14:90:39:e5:b8:8b:2c:d1:1d:28:f3:50: 49:a8:b3:72:3b:97:af:f8:17:50:10:b5:9f:1a:24: 17:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:C7:24:F0:1B:11:E8:F0:D1:2D:6D:56:50:0F:3B:A0:99:3D:01:2E X509v3 Authority Key Identifier: keyid:70:01:E4:22:22:7F:A4:4C:C5:CB:95:D2:A9:DC:CE:0F:A5:B8:9C:07 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cAHkIiJ_pEzFy5XSqdzOD6W4nAc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/992d03-883b-404d-887e-f2435d5cf37b/1/cAHkIiJ_pEzFy5XSqdzOD6W4nAc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/63/992d03-883b-404d-887e-f2435d5cf37b/1/cAHkIiJ_pEzFy5XSqdzOD6W4nAc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 02:8a:d2:1d:48:27:34:eb:12:86:ed:13:a5:a7:9e:33:c8:ae: 55:c2:56:36:f4:a0:44:d1:a7:82:41:f1:95:e4:31:b3:30:ba: a5:48:bb:85:55:20:ad:71:25:96:1e:14:4e:53:8b:f5:1a:64: c7:1d:f4:db:7c:6f:64:c9:d7:80:6e:a4:f0:1e:e8:3c:2a:86: 5c:b8:fb:81:ca:07:17:6e:c1:d1:b0:8f:1c:28:3d:f3:b5:df: 9f:89:81:50:8a:e9:9f:bf:af:75:60:44:8d:c3:ac:50:82:fd: b4:d6:a7:c6:08:50:f7:85:87:bd:49:8b:4f:b8:10:c4:cb:83: 28:c3:8d:8b:70:f3:b9:ce:7e:4c:41:b0:67:59:67:f4:54:1a: cc:67:b2:72:57:1a:05:4b:06:e2:d1:b9:83:e9:dc:33:9f:d0: 89:78:ee:0b:b7:fe:37:13:09:03:54:22:06:64:06:e2:17:5f: d6:93:48:4a:1f:3c:f6:18:fb:ea:bd:0c:a6:a1:ad:3b:c2:53: 94:0a:54:26:b4:ce:fe:c8:18:82:0c:32:c1:e4:b9:cb:04:d2: 03:ec:11:e6:18:90:79:65:e7:39:0e:14:04:e7:3a:c9:8c:db: 8e:0a:4e:6d:7a:2b:30:ee:71:38:0f:29:5f:f7:c2:f5:9c:67: d3:a6:f8:61 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9Ix9G+dc8r7+nPuAbMI7RMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcwMDFlNDIyMjI3ZmE0NGNjNWNiOTVkMmE5ZGNjZTBmYTVi ODljMDcwHhcNMjUxMjIwMTkwMTEwWhcNMjUxMjIxMTkwMTEwWjAzMTEwLwYDVQQD Eyg5YWM3MjRmMDFiMTFlOGYwZDEyZDZkNTY1MDBmM2JhMDk5M2QwMTJlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs/TRTpQxycdDr/XKYWaUCWxz1mlU CjOqFwFtwnMKbb9MROKYmbUtTTdzPmmD1ltzPezNPVHvFzwUnChH5zgYz0wVN9Il AC0Ps/RpH1v/naCgVn/8ovkmz/Uv+h9dJVk5amNKiryFEYYNwOj959Bh/zraDEEk VENOk+WQcEaMFx1zUUOR9gLiCBQgmXbz7emEL7mIEfnDgs8qo1raCDd9vBaxmEZs TEpmPM4aimFL1+134oBi2jYnCMJi0dMcvhBWenRtceoOi1vFT84uz5DT1JCvCCd6 iDgEXPFDHMwJw25ocIEUkDnluIss0R0o81BJqLNyO5ev+BdQELWfGiQXMQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJrHJPAbEejw0S1tVlAPO6CZPQEuMB8GA1UdIwQY MBaAFHAB5CIif6RMxcuV0qnczg+luJwHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY0FIa0lpSl9wRXpGeTVYU3Fkek9ENlc0bkFjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82My85OTJkMDMtODgzYi00MDRkLTg4N2Ut ZjI0MzVkNWNmMzdiLzEvY0FIa0lpSl9wRXpGeTVYU3Fkek9ENlc0bkFjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82My85OTJkMDMtODgzYi00MDRkLTg4N2UtZjI0MzVkNWNmMzdi LzEvY0FIa0lpSl9wRXpGeTVYU3Fkek9ENlc0bkFjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAorSHUgn NOsShu0TpaeeM8iuVcJWNvSgRNGngkHxleQxszC6pUi7hVUgrXEllh4UTlOL9Rpk xx3023xvZMnXgG6k8B7oPCqGXLj7gcoHF27B0bCPHCg987Xfn4mBUIrpn7+vdWBE jcOsUIL9tNanxghQ94WHvUmLT7gQxMuDKMONi3Dzuc5+TEGwZ1ln9FQazGeyclca BUsG4tG5g+ncM5/QiXjuC7f+NxMJA1QiBmQG4hdf1pNISh889hj76r0MpqGtO8JT lApUJrTO/sgYggwyweS5ywTSA+wR5hiQeWXnOQ4UBOc6yYzbjgpObXorMO5xOA8p X/fC9Zxn06b4YQ== -----END CERTIFICATE-----Generated at Sun Dec 21 02:36:44 2025 by rpki-client