This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/992d03-883b-404d-887e-f2435d5cf37b/1/cAHkIiJ_pEzFy5XSqdzOD6W4nAc.mft File: cAHkIiJ_pEzFy5XSqdzOD6W4nAc.mft (raw, json) Hash identifier: +YWidynKoN++A3OqcrkDUPwcwkaFIPBmTyh9vSctKOU= Subject key identifier: AB:CA:F4:0C:95:15:1C:8C:77:5D:A0:2A:83:4D:EC:03:93:71:A7:FC Authority key identifier: 70:01:E4:22:22:7F:A4:4C:C5:CB:95:D2:A9:DC:CE:0F:A5:B8:9C:07 Certificate issuer: /CN=7001e422227fa44cc5cb95d2a9dcce0fa5b89c07 Certificate serial: 019B5DF7E4AE1BA03161D7C6FBF9A7E382CC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cAHkIiJ_pEzFy5XSqdzOD6W4nAc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/992d03-883b-404d-887e-f2435d5cf37b/1/cAHkIiJ_pEzFy5XSqdzOD6W4nAc.mft Manifest number: 17AC Signing time: Sat 27 Dec 2025 04:01:25 +0000 Manifest this update: Sat 27 Dec 2025 04:01:25 +0000 Manifest next update: Sun 28 Dec 2025 04:01:25 +0000 Files and hashes: 1: 39yOXWjYZyS68AzfLeyRW_eBtf4.roa (hash: Mz12/qdbJKM8FU8F8+Lk+lMxeg4aXuhF1UCiM+rDIsI=) 2: 6l5M-x5AVCV2PGZr6_l_DZJOTeg.roa (hash: 0TyUlVfVnh7he1NVofYJh+27mbZ/WYA8ViwMyPgm6t8=) 3: PvXxIOTmhlDT8Zjl8pOjVtbUjqs.roa (hash: cEmlEEf5hdAMQxuyDOcKJwVECyiRzY+P8vKK1P563lo=) 4: cAHkIiJ_pEzFy5XSqdzOD6W4nAc.crl (hash: oMiawvzGbGxvKzfRdx8Xuxpn7sKw3QktP/gVT9cLtWI=) 5: fUQV7hcWr8wDftL_A0d4dRPlV5Y.roa (hash: W1gOWwQgZ2lfD/yK9uLmMV4EF6iXlGj32IeijexRu80=) 6: iRLaERPVRzV8PJ2a_5pZoHTAhfc.roa (hash: MJRfnp4Z+bQNLko611lWRkdCj1xLm4ibkbl4u7vmmHY=) 7: s6g2qeenxmDkGrPs5BM25xHO8xU.roa (hash: BC1HJ2/1smBeQKjZhdC/Dii9NT9VDbWsnbk1hLUwmhI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/992d03-883b-404d-887e-f2435d5cf37b/1/cAHkIiJ_pEzFy5XSqdzOD6W4nAc.crl rsync://rpki.ripe.net/repository/DEFAULT/63/992d03-883b-404d-887e-f2435d5cf37b/1/cAHkIiJ_pEzFy5XSqdzOD6W4nAc.mft rsync://rpki.ripe.net/repository/DEFAULT/cAHkIiJ_pEzFy5XSqdzOD6W4nAc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 28 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5d:f7:e4:ae:1b:a0:31:61:d7:c6:fb:f9:a7:e3:82:cc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7001e422227fa44cc5cb95d2a9dcce0fa5b89c07 Validity Not Before: Dec 27 04:01:25 2025 GMT Not After : Dec 28 04:01:25 2025 GMT Subject: CN=abcaf40c95151c8c775da02a834dec039371a7fc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:ff:90:cf:c6:6d:2b:0f:d1:74:f1:21:35:6b: 6e:15:ca:a7:c9:06:26:90:e4:6e:c6:ef:06:87:4e: 23:90:9f:84:41:d0:ef:15:5a:0a:02:00:02:37:f3: 2f:74:0a:55:d7:c8:ce:1a:34:d0:8c:99:a0:df:98: 28:83:82:10:60:d3:85:a4:74:08:7e:8c:f7:5f:48: 96:4c:31:bb:b1:65:6d:90:a1:1b:b6:ee:c5:7c:04: a9:fe:0d:f0:96:ac:88:ee:ce:88:6f:55:dd:55:6b: 7f:14:37:dd:df:73:3f:79:74:9b:50:71:b5:5a:a7: bc:21:43:f2:a1:bd:f9:55:f0:c3:95:b8:8b:54:bf: cb:fd:49:b4:a2:35:71:ad:bf:57:bb:55:29:3d:12: 93:65:99:c5:0d:6f:47:ca:ac:14:ff:ba:e5:1c:51: 13:ff:39:6b:fa:32:97:16:ec:d2:43:6c:8e:e6:b0: 14:ac:be:f9:82:13:2e:d0:34:ae:3c:71:0c:fd:9b: 4f:2a:f6:17:2e:c5:0a:9a:4d:e3:72:a2:bc:2e:55: 8d:39:96:a0:9a:f8:bf:bd:ee:da:7b:e7:d1:8e:69: f5:a4:d5:0e:3c:f0:c2:e8:68:0a:52:5c:fa:18:f4: 9b:7f:ba:c1:a0:31:0e:40:aa:8d:df:f1:a9:fd:c8: 9b:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:CA:F4:0C:95:15:1C:8C:77:5D:A0:2A:83:4D:EC:03:93:71:A7:FC X509v3 Authority Key Identifier: keyid:70:01:E4:22:22:7F:A4:4C:C5:CB:95:D2:A9:DC:CE:0F:A5:B8:9C:07 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cAHkIiJ_pEzFy5XSqdzOD6W4nAc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/992d03-883b-404d-887e-f2435d5cf37b/1/cAHkIiJ_pEzFy5XSqdzOD6W4nAc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/63/992d03-883b-404d-887e-f2435d5cf37b/1/cAHkIiJ_pEzFy5XSqdzOD6W4nAc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 27:ee:f1:f1:02:87:c4:93:eb:f4:54:56:75:c1:bd:97:14:13: 3b:e3:2a:b7:35:eb:bd:94:a3:0e:c9:73:85:ab:b6:2f:16:e6: 4f:17:40:42:a5:eb:6f:57:3d:68:ed:dc:e5:4e:6d:0d:03:6d: 41:ce:90:6a:b4:4c:82:e6:d7:67:3b:b1:76:4a:ca:3f:c5:9a: a4:76:bc:12:f2:c6:87:b8:57:53:04:88:05:94:07:b5:ce:60: 32:77:76:f7:d2:5e:43:80:45:74:dc:48:8d:df:d0:81:53:ad: 72:43:2f:73:cf:c7:af:6e:e9:3c:79:ab:cf:e7:6b:ac:9f:d8: 90:d1:f2:b8:db:fc:c0:b3:8c:b8:ac:52:5d:b4:08:1b:9b:d2: b0:aa:61:1f:db:54:63:37:64:5b:33:12:be:8d:9a:50:b7:84: f5:d1:08:19:96:2c:1d:3b:9b:61:f9:89:52:83:73:7b:90:88: d1:79:74:20:93:4e:69:5b:91:a0:7b:69:ba:b8:37:c5:06:de: db:60:5e:cd:6c:e0:5c:18:0a:d6:93:5c:64:da:aa:27:8e:db: 32:8e:8c:54:2b:b9:4c:0c:25:2f:aa:ff:aa:a9:73:67:aa:c0: e9:8f:3e:26:7d:25:ac:4a:fa:79:30:9a:b6:50:0c:68:25:39: 2e:bf:e1:6f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtd9+SuG6AxYdfG+/mn44LMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcwMDFlNDIyMjI3ZmE0NGNjNWNiOTVkMmE5ZGNjZTBmYTVi ODljMDcwHhcNMjUxMjI3MDQwMTI1WhcNMjUxMjI4MDQwMTI1WjAzMTEwLwYDVQQD EyhhYmNhZjQwYzk1MTUxYzhjNzc1ZGEwMmE4MzRkZWMwMzkzNzFhN2ZjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnf+Qz8ZtKw/RdPEhNWtuFcqnyQYm kORuxu8Gh04jkJ+EQdDvFVoKAgACN/MvdApV18jOGjTQjJmg35gog4IQYNOFpHQI foz3X0iWTDG7sWVtkKEbtu7FfASp/g3wlqyI7s6Ib1XdVWt/FDfd33M/eXSbUHG1 Wqe8IUPyob35VfDDlbiLVL/L/Um0ojVxrb9Xu1UpPRKTZZnFDW9HyqwU/7rlHFET /zlr+jKXFuzSQ2yO5rAUrL75ghMu0DSuPHEM/ZtPKvYXLsUKmk3jcqK8LlWNOZag mvi/ve7ae+fRjmn1pNUOPPDC6GgKUlz6GPSbf7rBoDEOQKqN3/Gp/cibDQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKvK9AyVFRyMd12gKoNN7AOTcaf8MB8GA1UdIwQY MBaAFHAB5CIif6RMxcuV0qnczg+luJwHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY0FIa0lpSl9wRXpGeTVYU3Fkek9ENlc0bkFjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82My85OTJkMDMtODgzYi00MDRkLTg4N2Ut ZjI0MzVkNWNmMzdiLzEvY0FIa0lpSl9wRXpGeTVYU3Fkek9ENlc0bkFjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82My85OTJkMDMtODgzYi00MDRkLTg4N2UtZjI0MzVkNWNmMzdi LzEvY0FIa0lpSl9wRXpGeTVYU3Fkek9ENlc0bkFjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJ+7x8QKH xJPr9FRWdcG9lxQTO+MqtzXrvZSjDslzhau2LxbmTxdAQqXrb1c9aO3c5U5tDQNt Qc6QarRMgubXZzuxdkrKP8WapHa8EvLGh7hXUwSIBZQHtc5gMnd299JeQ4BFdNxI jd/QgVOtckMvc8/Hr27pPHmrz+drrJ/YkNHyuNv8wLOMuKxSXbQIG5vSsKphH9tU YzdkWzMSvo2aULeE9dEIGZYsHTubYfmJUoNze5CI0Xl0IJNOaVuRoHtpurg3xQbe 22BezWzgXBgK1pNcZNqqJ47bMo6MVCu5TAwlL6r/qqlzZ6rA6Y8+Jn0lrEr6eTCa tlAMaCU5Lr/hbw== -----END CERTIFICATE-----Generated at Sat Dec 27 06:19:26 2025 by rpki-client