This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/d56c11-25e1-49c8-8863-7f37b778c011/1/cJgLYODTDkmN4bqmRaG-V6lSBJ0.mft File: cJgLYODTDkmN4bqmRaG-V6lSBJ0.mft (raw, json) Hash identifier: XLJN3bxM59xubGUuWJ5oXyStF3OixCCEi4TDLPmGMBM= Subject key identifier: CE:41:55:41:7E:E2:72:56:A2:8D:1D:C5:F2:89:24:18:04:EE:E4:51 Authority key identifier: 70:98:0B:60:E0:D3:0E:49:8D:E1:BA:A6:45:A1:BE:57:A9:52:04:9D Certificate issuer: /CN=70980b60e0d30e498de1baa645a1be57a952049d Certificate serial: 019B3C7E2E47A19973A19A0D7A85C56A986A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cJgLYODTDkmN4bqmRaG-V6lSBJ0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/d56c11-25e1-49c8-8863-7f37b778c011/1/cJgLYODTDkmN4bqmRaG-V6lSBJ0.mft Manifest number: 0ACB Signing time: Sat 20 Dec 2025 16:01:00 +0000 Manifest this update: Sat 20 Dec 2025 16:01:00 +0000 Manifest next update: Sun 21 Dec 2025 16:01:00 +0000 Files and hashes: 1: NOXjVjJhFkrwhntmdhaI015mrJA.roa (hash: 0zhl6bNJIqtyw3r+CngdcF4zpHGL2Q4MHDezzg25GbA=) 2: T3NYMawRHngwhI3EFd9dMZQSV1E.roa (hash: f99KOEwXdj6H3ZJRNRBeTA3dMK19zszZZ6xzWHN3tPk=) 3: cJgLYODTDkmN4bqmRaG-V6lSBJ0.crl (hash: k/2aZpBpSlm2XIEF4CzKgVrrajBa57DFtTRzlwc4V2s=) 4: o1Invfm5a-IuNysIWHt4ChcWwgI.roa (hash: gMX4tPW+RL6Xt4ksxgpRLp72pxNXeej67eQtVQ5iB/g=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/d56c11-25e1-49c8-8863-7f37b778c011/1/cJgLYODTDkmN4bqmRaG-V6lSBJ0.crl rsync://rpki.ripe.net/repository/DEFAULT/b4/d56c11-25e1-49c8-8863-7f37b778c011/1/cJgLYODTDkmN4bqmRaG-V6lSBJ0.mft rsync://rpki.ripe.net/repository/DEFAULT/cJgLYODTDkmN4bqmRaG-V6lSBJ0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:7e:2e:47:a1:99:73:a1:9a:0d:7a:85:c5:6a:98:6a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=70980b60e0d30e498de1baa645a1be57a952049d Validity Not Before: Dec 20 16:01:00 2025 GMT Not After : Dec 21 16:01:00 2025 GMT Subject: CN=ce4155417ee27256a28d1dc5f289241804eee451 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:fb:ac:2d:3b:1b:44:6d:b4:54:d0:d8:29:32: ab:8d:b6:be:4b:f1:08:29:c9:ef:b7:ab:66:9f:39: 6f:2d:fb:5a:fe:75:5f:f8:3f:24:64:78:dc:0f:9a: 42:c8:ee:59:52:12:7a:7e:88:fa:e1:8a:dd:99:07: 19:c8:99:94:c8:99:89:64:4d:9a:ab:dc:53:18:e4: 88:07:77:5d:9e:76:22:25:a0:1b:0c:33:5c:48:9a: 72:13:08:ef:d9:88:d5:f8:a0:9d:e1:1c:ae:b0:6f: 20:49:2f:ae:38:72:46:1a:db:3d:29:a7:b0:2f:d2: ca:b1:22:3e:3c:43:ce:59:05:08:9d:70:ab:1e:27: 9a:11:9b:76:f8:9e:b7:98:ca:4f:29:7c:5f:b3:1b: 54:c8:19:6d:d8:82:a4:d0:bb:eb:8e:46:d6:56:c2: ea:b3:2e:1e:3d:5d:dd:08:d3:5b:b7:e9:97:f6:e0: f3:2e:49:9f:e0:89:c0:1f:b4:2d:9e:21:6e:da:3a: 63:8b:40:f3:e4:02:3b:c0:ba:ef:54:3e:64:cf:4c: 79:d5:2e:92:29:2e:e7:a5:6e:d8:1e:8b:91:da:65: 3b:96:21:ce:16:04:d2:3e:05:60:37:7a:c2:55:fb: bd:df:7c:1e:bb:a0:b2:5f:6f:7c:4b:0a:a4:1c:0e: 26:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:41:55:41:7E:E2:72:56:A2:8D:1D:C5:F2:89:24:18:04:EE:E4:51 X509v3 Authority Key Identifier: keyid:70:98:0B:60:E0:D3:0E:49:8D:E1:BA:A6:45:A1:BE:57:A9:52:04:9D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cJgLYODTDkmN4bqmRaG-V6lSBJ0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/d56c11-25e1-49c8-8863-7f37b778c011/1/cJgLYODTDkmN4bqmRaG-V6lSBJ0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/d56c11-25e1-49c8-8863-7f37b778c011/1/cJgLYODTDkmN4bqmRaG-V6lSBJ0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 31:57:2c:b7:2a:24:7c:21:7e:76:3f:1f:e9:1a:9d:54:fd:f3: 4e:51:f7:60:42:97:55:14:15:d0:5f:25:cb:87:da:be:85:a1: 23:53:84:d3:60:53:47:3b:fa:72:5e:41:dc:d1:fc:40:ee:30: a4:4a:05:f0:9f:8b:20:80:19:dd:77:f1:34:54:18:79:73:f5: 2a:6c:9e:70:d8:d0:fb:cb:8f:31:90:0c:40:4f:2a:ff:47:54: 78:d9:cc:19:a9:0b:44:45:3f:36:bf:09:e4:cb:d0:bf:7b:a2: 3c:a0:6b:02:fe:db:a0:1f:77:03:27:2e:70:e1:ef:f3:1a:31: 01:f4:9e:93:98:e7:42:69:aa:94:13:d1:a3:24:6e:98:d2:ca: 2d:44:ff:14:86:0a:36:4c:00:8e:a3:07:15:ea:56:98:88:45: 3b:8f:22:22:c9:c8:87:32:36:be:d9:d0:c7:34:c8:71:12:ae: 04:6a:65:76:4d:5f:07:8e:af:56:81:8b:4d:ff:5a:51:46:51: 45:34:97:12:fe:e4:c4:dd:eb:bd:ec:88:5e:23:df:14:66:e1: 5a:d6:8c:b8:57:3a:84:a5:d6:06:6c:8c:f8:48:83:db:9e:31: 25:72:bc:39:4a:12:b9:58:3a:d4:07:3d:28:62:0c:ad:ff:c7: 5e:7b:6b:e2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs8fi5HoZlzoZoNeoXFaphqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcwOTgwYjYwZTBkMzBlNDk4ZGUxYmFhNjQ1YTFiZTU3YTk1 MjA0OWQwHhcNMjUxMjIwMTYwMTAwWhcNMjUxMjIxMTYwMTAwWjAzMTEwLwYDVQQD EyhjZTQxNTU0MTdlZTI3MjU2YTI4ZDFkYzVmMjg5MjQxODA0ZWVlNDUxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzPusLTsbRG20VNDYKTKrjba+S/EI Kcnvt6tmnzlvLfta/nVf+D8kZHjcD5pCyO5ZUhJ6foj64YrdmQcZyJmUyJmJZE2a q9xTGOSIB3ddnnYiJaAbDDNcSJpyEwjv2YjV+KCd4RyusG8gSS+uOHJGGts9Kaew L9LKsSI+PEPOWQUInXCrHieaEZt2+J63mMpPKXxfsxtUyBlt2IKk0LvrjkbWVsLq sy4ePV3dCNNbt+mX9uDzLkmf4InAH7QtniFu2jpji0Dz5AI7wLrvVD5kz0x51S6S KS7npW7YHouR2mU7liHOFgTSPgVgN3rCVfu933weu6CyX298SwqkHA4m4QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFM5BVUF+4nJWoo0dxfKJJBgE7uRRMB8GA1UdIwQY MBaAFHCYC2Dg0w5JjeG6pkWhvlepUgSdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY0pnTFlPRFREa21ONGJxbVJhRy1WNmxTQkowLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNC9kNTZjMTEtMjVlMS00OWM4LTg4NjMt N2YzN2I3NzhjMDExLzEvY0pnTFlPRFREa21ONGJxbVJhRy1WNmxTQkowLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNC9kNTZjMTEtMjVlMS00OWM4LTg4NjMtN2YzN2I3NzhjMDEx LzEvY0pnTFlPRFREa21ONGJxbVJhRy1WNmxTQkowLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMVcstyok fCF+dj8f6RqdVP3zTlH3YEKXVRQV0F8ly4favoWhI1OE02BTRzv6cl5B3NH8QO4w pEoF8J+LIIAZ3XfxNFQYeXP1KmyecNjQ+8uPMZAMQE8q/0dUeNnMGakLREU/Nr8J 5MvQv3uiPKBrAv7boB93AycucOHv8xoxAfSek5jnQmmqlBPRoyRumNLKLUT/FIYK NkwAjqMHFepWmIhFO48iIsnIhzI2vtnQxzTIcRKuBGpldk1fB46vVoGLTf9aUUZR RTSXEv7kxN3rveyIXiPfFGbhWtaMuFc6hKXWBmyM+EiD254xJXK8OUoSuVg61Ac9 KGIMrf/HXntr4g== -----END CERTIFICATE-----Generated at Sun Dec 21 00:56:52 2025 by rpki-client