This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/dcc2b4-9ded-4678-8398-ab79a3789f8f/1/cAoSMdHCenVORu8Q6SpzCuFdD1U.mft File: cAoSMdHCenVORu8Q6SpzCuFdD1U.mft (raw, json) Hash identifier: WASdAhyjp/GrclUK8UtJmFgncV46BRTnV2I1iz9KXao= Subject key identifier: 35:9F:CA:48:A0:DB:29:2C:55:5E:F1:82:8B:D9:85:C5:88:1B:50:1B Authority key identifier: 70:0A:12:31:D1:C2:7A:75:4E:46:EF:10:E9:2A:73:0A:E1:5D:0F:55 Certificate issuer: /CN=700a1231d1c27a754e46ef10e92a730ae15d0f55 Certificate serial: 019B3D90C5F4125FB4AA68BF61CBF564894A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cAoSMdHCenVORu8Q6SpzCuFdD1U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/dcc2b4-9ded-4678-8398-ab79a3789f8f/1/cAoSMdHCenVORu8Q6SpzCuFdD1U.mft Manifest number: 148F Signing time: Sat 20 Dec 2025 21:00:56 +0000 Manifest this update: Sat 20 Dec 2025 21:00:56 +0000 Manifest next update: Sun 21 Dec 2025 21:00:56 +0000 Files and hashes: 1: 9NhpD2GhK7nhCkw4Ln2hgR-a9FI.roa (hash: +fqLpWLcEuKJBmzQK+NoGzgKFUXuG2sR0jOCjmaF7ws=) 2: CsTskpGu2067EbH05wfUIZUPjxk.roa (hash: CGKvFO8hPB5WwPOizq8WbZfwBPb68T3rzaJWX9q+khg=) 3: NMtf5g2h09CpLbmo1MKTK6aenWk.roa (hash: tfFi0QE+bzYcqYuU5pyH35ZlykRfgC3AccLaeKevVfo=) 4: Ui7tOCQMpzQZKjrz8TKsRSE40Q4.roa (hash: DHT0OqKz8zWpIsPzI8wSWAnHvpUIUXG4m7B7nool0IE=) 5: YcOS2Wm4uyMkkPXlfvg_yl6nKYE.roa (hash: khcCUHFHG89+gqzsvASfhdPwL9xGw6oHEE1dsfVjZXE=) 6: cAoSMdHCenVORu8Q6SpzCuFdD1U.crl (hash: CHL2t1RZBk+exf+eignLZcR0Dks3uJx0IVcbqzc5t7M=) 7: dH9xmN_c-ogf3lMo2xsIcwvlDWE.roa (hash: SFJ3H40oDJz+xjK+HZI55sajPf6JpJrE0sfXbpnpYH0=) 8: mmEVKc1EFKuheB4FKizBXFspVtg.roa (hash: /mO5uMHmI8PnkMInS/fvq5meo8U4FCe78Pgb4cEwmJA=) 9: qoKING8LOUliqm_EPi7hMcuvFCE.roa (hash: 2DIbzoBlPqvX6X6H+KZMj8Ugg/FShiQHvw+LRdtArgY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/dcc2b4-9ded-4678-8398-ab79a3789f8f/1/cAoSMdHCenVORu8Q6SpzCuFdD1U.crl rsync://rpki.ripe.net/repository/DEFAULT/a1/dcc2b4-9ded-4678-8398-ab79a3789f8f/1/cAoSMdHCenVORu8Q6SpzCuFdD1U.mft rsync://rpki.ripe.net/repository/DEFAULT/cAoSMdHCenVORu8Q6SpzCuFdD1U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 21:00:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:90:c5:f4:12:5f:b4:aa:68:bf:61:cb:f5:64:89:4a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=700a1231d1c27a754e46ef10e92a730ae15d0f55 Validity Not Before: Dec 20 21:00:56 2025 GMT Not After : Dec 21 21:00:56 2025 GMT Subject: CN=359fca48a0db292c555ef1828bd985c5881b501b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:03:70:b5:91:6a:85:14:d9:cc:8f:8d:ec:d0: b6:30:a3:01:31:28:69:70:c1:f9:50:19:64:da:fa: 0c:b4:6c:f1:0a:b0:bc:bb:c6:6d:fd:1e:b6:04:32: 0a:82:cb:fa:9c:c9:2f:9b:21:93:94:63:a3:75:28: 30:2a:a8:5b:80:50:45:37:e0:d0:45:3a:5a:26:b6: 21:2c:be:c2:50:9a:ff:62:69:3c:4f:7f:22:8d:ec: 76:f0:fd:58:00:f2:9e:1c:70:5d:3b:70:e8:41:fe: c4:c0:2a:f6:92:28:dc:10:7b:4c:a7:d5:c6:2b:fa: 0c:44:ef:e7:46:89:71:0c:13:25:35:b9:23:45:78: 6a:f7:4d:fc:c5:01:d7:25:23:9b:e8:c3:15:e5:52: f2:0c:86:31:9b:43:ec:f5:ec:bc:c7:a7:f1:b4:23: 84:8a:9f:11:1c:8e:a4:7e:61:33:a9:98:57:13:3c: b0:cd:01:ec:e3:05:85:3c:1c:ea:cf:37:a3:e3:17: 94:ba:8e:d1:62:2a:e2:7c:26:df:06:c4:9d:8d:e4: 31:74:05:03:d1:97:70:93:c8:68:6e:58:04:43:aa: 47:86:16:61:b8:67:f9:3d:19:8c:80:0e:08:97:38: 95:bd:9c:c0:6d:01:2f:0f:0f:03:e9:d0:66:94:03: 9d:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:9F:CA:48:A0:DB:29:2C:55:5E:F1:82:8B:D9:85:C5:88:1B:50:1B X509v3 Authority Key Identifier: keyid:70:0A:12:31:D1:C2:7A:75:4E:46:EF:10:E9:2A:73:0A:E1:5D:0F:55 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cAoSMdHCenVORu8Q6SpzCuFdD1U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/dcc2b4-9ded-4678-8398-ab79a3789f8f/1/cAoSMdHCenVORu8Q6SpzCuFdD1U.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/dcc2b4-9ded-4678-8398-ab79a3789f8f/1/cAoSMdHCenVORu8Q6SpzCuFdD1U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 44:63:12:55:8c:06:44:55:16:3c:41:7d:a8:3d:28:d6:c7:b6: 66:e2:35:83:57:1f:a3:cf:7d:c9:80:76:15:fb:f9:e1:76:ab: 0e:be:9b:44:bd:7e:8f:56:44:9e:ea:c8:9b:50:41:1d:28:09: d3:a4:c6:16:ce:26:61:bb:5a:15:53:48:13:b5:34:3a:2c:55: ae:40:eb:50:12:5a:e1:66:d5:47:9c:68:ab:c5:a0:df:76:56: 30:9e:79:08:d3:0a:d9:06:2e:d4:56:a3:e6:93:01:29:00:39: 56:ef:62:08:2d:12:17:ee:a9:83:eb:c6:cc:bd:cd:2c:5e:62: 3e:31:2c:79:59:0b:24:9d:f8:5d:ab:49:e2:48:66:b2:68:05: 3a:33:55:98:96:bd:28:93:dc:41:da:b5:38:17:48:b5:ab:47: 8f:66:7f:b8:e5:a8:e6:bf:cc:21:2b:fb:ef:51:d3:22:11:cc: 3b:cf:87:19:f1:d0:1f:e8:4e:2d:eb:55:5b:bd:82:13:0f:69: ac:89:28:0d:ad:00:c4:c5:10:c3:aa:eb:0f:d7:76:fa:9f:00: 84:32:8e:af:8a:2f:43:a5:ea:f3:7c:97:93:ea:62:24:94:84: 0b:82:98:ac:d1:f3:28:8a:92:9e:a4:f4:41:90:a2:ec:c4:31: 74:93:f9:18 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9kMX0El+0qmi/Ycv1ZIlKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcwMGExMjMxZDFjMjdhNzU0ZTQ2ZWYxMGU5MmE3MzBhZTE1 ZDBmNTUwHhcNMjUxMjIwMjEwMDU2WhcNMjUxMjIxMjEwMDU2WjAzMTEwLwYDVQQD EygzNTlmY2E0OGEwZGIyOTJjNTU1ZWYxODI4YmQ5ODVjNTg4MWI1MDFiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqANwtZFqhRTZzI+N7NC2MKMBMShp cMH5UBlk2voMtGzxCrC8u8Zt/R62BDIKgsv6nMkvmyGTlGOjdSgwKqhbgFBFN+DQ RTpaJrYhLL7CUJr/Ymk8T38ijex28P1YAPKeHHBdO3DoQf7EwCr2kijcEHtMp9XG K/oMRO/nRolxDBMlNbkjRXhq9038xQHXJSOb6MMV5VLyDIYxm0Ps9ey8x6fxtCOE ip8RHI6kfmEzqZhXEzywzQHs4wWFPBzqzzej4xeUuo7RYirifCbfBsSdjeQxdAUD 0Zdwk8hoblgEQ6pHhhZhuGf5PRmMgA4IlziVvZzAbQEvDw8D6dBmlAOdPQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDWfykig2yksVV7xgovZhcWIG1AbMB8GA1UdIwQY MBaAFHAKEjHRwnp1TkbvEOkqcwrhXQ9VMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY0FvU01kSENlblZPUnU4UTZTcHpDdUZkRDFVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMS9kY2MyYjQtOWRlZC00Njc4LTgzOTgt YWI3OWEzNzg5ZjhmLzEvY0FvU01kSENlblZPUnU4UTZTcHpDdUZkRDFVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMS9kY2MyYjQtOWRlZC00Njc4LTgzOTgtYWI3OWEzNzg5Zjhm LzEvY0FvU01kSENlblZPUnU4UTZTcHpDdUZkRDFVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARGMSVYwG RFUWPEF9qD0o1se2ZuI1g1cfo899yYB2Ffv54XarDr6bRL1+j1ZEnurIm1BBHSgJ 06TGFs4mYbtaFVNIE7U0OixVrkDrUBJa4WbVR5xoq8Wg33ZWMJ55CNMK2QYu1Faj 5pMBKQA5Vu9iCC0SF+6pg+vGzL3NLF5iPjEseVkLJJ34XatJ4khmsmgFOjNVmJa9 KJPcQdq1OBdItatHj2Z/uOWo5r/MISv771HTIhHMO8+HGfHQH+hOLetVW72CEw9p rIkoDa0AxMUQw6rrD9d2+p8AhDKOr4ovQ6Xq83yXk+piJJSEC4KYrNHzKIqSnqT0 QZCi7MQxdJP5GA== -----END CERTIFICATE-----Generated at Sun Dec 21 05:52:42 2025 by rpki-client