This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/ad0116-7558-4656-9fb3-5199a711684d/1/cGmgJahPQu8-8LYFLeP9ZejAhpI.mft File: cGmgJahPQu8-8LYFLeP9ZejAhpI.mft (raw, json) Hash identifier: jg/PSg7oTJft+SrPRGbvQ1jV+fzdWYFgzhxUB936OqI= Subject key identifier: C1:F7:09:8B:A6:41:5F:95:89:D5:FF:E1:C6:D6:AE:A0:93:D4:9B:81 Authority key identifier: 70:69:A0:25:A8:4F:42:EF:3E:F0:B6:05:2D:E3:FD:65:E8:C0:86:92 Certificate issuer: /CN=7069a025a84f42ef3ef0b6052de3fd65e8c08692 Certificate serial: 019B7146CE480A320376F6E4744AF6A80340 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cGmgJahPQu8-8LYFLeP9ZejAhpI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/ad0116-7558-4656-9fb3-5199a711684d/1/cGmgJahPQu8-8LYFLeP9ZejAhpI.mft Manifest number: 0FCC Signing time: Tue 30 Dec 2025 22:00:24 +0000 Manifest this update: Tue 30 Dec 2025 22:00:24 +0000 Manifest next update: Wed 31 Dec 2025 22:00:24 +0000 Files and hashes: 1: WLQJ8zcZCMsER4r6hGR6_boxEBI.roa (hash: 8yJ5VPtEriA2v8Qxk3Uyit7MsAAT1OiV71AZSGLF2yM=) 2: cGmgJahPQu8-8LYFLeP9ZejAhpI.crl (hash: pnADtQDKu1pR2srJb9PpZnFflS0iT6LAqFRMKNAo3og=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/ad0116-7558-4656-9fb3-5199a711684d/1/cGmgJahPQu8-8LYFLeP9ZejAhpI.crl rsync://rpki.ripe.net/repository/DEFAULT/be/ad0116-7558-4656-9fb3-5199a711684d/1/cGmgJahPQu8-8LYFLeP9ZejAhpI.mft rsync://rpki.ripe.net/repository/DEFAULT/cGmgJahPQu8-8LYFLeP9ZejAhpI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 31 Dec 2025 22:00:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:71:46:ce:48:0a:32:03:76:f6:e4:74:4a:f6:a8:03:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7069a025a84f42ef3ef0b6052de3fd65e8c08692 Validity Not Before: Dec 30 22:00:24 2025 GMT Not After : Dec 31 22:00:24 2025 GMT Subject: CN=c1f7098ba6415f9589d5ffe1c6d6aea093d49b81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:a5:07:2e:2d:f9:d3:1b:85:0f:1d:ce:40:8c: 87:71:94:fd:f1:b9:bb:78:3f:0c:e5:65:a9:78:08: e6:ca:f1:6d:5b:91:64:3a:f8:26:2e:3b:4c:75:17: 7b:86:7b:90:4e:08:b3:0e:b2:ca:0b:7a:70:03:6f: 4a:13:29:50:2c:83:c1:87:4a:c7:56:77:9a:4e:10: 40:3d:4b:ab:a1:d8:40:fb:94:6e:37:96:f6:2d:ab: a8:ab:eb:51:29:fd:b6:6d:33:80:f3:c1:65:af:54: c1:eb:04:c3:01:75:18:5c:72:44:e5:59:12:f3:a7: 7a:2b:56:3e:13:8e:ee:27:21:6a:27:23:50:be:50: 1b:86:fd:5a:84:82:45:3e:27:cc:d9:8d:bf:e0:81: 77:75:d7:92:ee:ce:d6:e5:db:10:15:29:62:c2:f2: 08:e1:0a:cd:ad:0e:9e:d0:7c:8f:ee:86:69:62:37: 7f:b9:69:44:8f:a4:df:2d:20:42:7c:12:db:5f:f3: 64:a6:44:24:43:e2:2c:d0:14:41:13:f3:b3:1c:19: e5:b0:a7:cc:9d:95:ce:ec:1f:67:a7:e4:b4:9c:b0: c8:a8:79:25:4f:51:4d:6f:b0:f4:b7:8d:6e:16:66: b9:47:30:d8:47:9d:04:b5:d3:e9:ed:cd:39:4a:7d: 49:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:F7:09:8B:A6:41:5F:95:89:D5:FF:E1:C6:D6:AE:A0:93:D4:9B:81 X509v3 Authority Key Identifier: keyid:70:69:A0:25:A8:4F:42:EF:3E:F0:B6:05:2D:E3:FD:65:E8:C0:86:92 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cGmgJahPQu8-8LYFLeP9ZejAhpI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/ad0116-7558-4656-9fb3-5199a711684d/1/cGmgJahPQu8-8LYFLeP9ZejAhpI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/be/ad0116-7558-4656-9fb3-5199a711684d/1/cGmgJahPQu8-8LYFLeP9ZejAhpI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4a:5a:a1:da:d1:59:24:2e:64:32:da:69:35:7f:b5:76:2a:5f: 24:23:4c:57:a6:59:78:68:be:78:33:bb:7c:06:7d:18:6c:ce: 9d:70:fc:5d:1e:bd:4c:97:b2:08:78:8b:9f:cd:c9:37:92:dc: b3:44:74:a4:6c:95:49:1d:80:ca:37:99:44:49:98:87:60:20: 4c:46:d0:09:78:73:ef:5a:66:ca:ca:5e:67:44:d8:7a:88:f0: 6d:75:ae:a1:c3:b8:56:43:a0:cf:35:0a:76:64:05:67:37:cc: 09:fb:d6:87:20:ca:c0:77:05:a2:d4:36:21:01:05:dd:02:3b: 69:bc:71:bf:e9:22:58:18:d3:d9:fa:9a:4a:19:f1:58:29:1c: 11:31:1a:15:0e:a9:5f:c9:e9:ce:05:2f:99:94:c0:30:f0:7f: d2:45:16:d2:44:d9:cd:f8:2e:05:87:36:e5:0b:e5:df:1a:64: f0:5c:35:78:d3:9a:26:83:ff:e5:03:b4:84:74:8f:79:13:8e: 64:44:8a:bb:c5:0f:34:5b:1b:43:57:d3:60:7f:08:4c:84:2a: 98:32:61:8b:a4:9d:83:a1:16:d6:0d:2f:57:75:d6:af:ca:b7: 70:60:f9:b8:5a:f4:e3:21:f5:39:3f:25:04:cc:78:be:1f:64: 77:b6:09:ce -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtxRs5ICjIDdvbkdEr2qANAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcwNjlhMDI1YTg0ZjQyZWYzZWYwYjYwNTJkZTNmZDY1ZThj MDg2OTIwHhcNMjUxMjMwMjIwMDI0WhcNMjUxMjMxMjIwMDI0WjAzMTEwLwYDVQQD EyhjMWY3MDk4YmE2NDE1Zjk1ODlkNWZmZTFjNmQ2YWVhMDkzZDQ5YjgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuaUHLi350xuFDx3OQIyHcZT98bm7 eD8M5WWpeAjmyvFtW5FkOvgmLjtMdRd7hnuQTgizDrLKC3pwA29KEylQLIPBh0rH VneaThBAPUurodhA+5RuN5b2Lauoq+tRKf22bTOA88Flr1TB6wTDAXUYXHJE5VkS 86d6K1Y+E47uJyFqJyNQvlAbhv1ahIJFPifM2Y2/4IF3ddeS7s7W5dsQFSliwvII 4QrNrQ6e0HyP7oZpYjd/uWlEj6TfLSBCfBLbX/NkpkQkQ+Is0BRBE/OzHBnlsKfM nZXO7B9np+S0nLDIqHklT1FNb7D0t41uFma5RzDYR50EtdPp7c05Sn1JrwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMH3CYumQV+VidX/4cbWrqCT1JuBMB8GA1UdIwQY MBaAFHBpoCWoT0LvPvC2BS3j/WXowIaSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY0dtZ0phaFBRdTgtOExZRkxlUDlaZWpBaHBJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZS9hZDAxMTYtNzU1OC00NjU2LTlmYjMt NTE5OWE3MTE2ODRkLzEvY0dtZ0phaFBRdTgtOExZRkxlUDlaZWpBaHBJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZS9hZDAxMTYtNzU1OC00NjU2LTlmYjMtNTE5OWE3MTE2ODRk LzEvY0dtZ0phaFBRdTgtOExZRkxlUDlaZWpBaHBJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASlqh2tFZ JC5kMtppNX+1dipfJCNMV6ZZeGi+eDO7fAZ9GGzOnXD8XR69TJeyCHiLn83JN5Lc s0R0pGyVSR2AyjeZREmYh2AgTEbQCXhz71pmyspeZ0TYeojwbXWuocO4VkOgzzUK dmQFZzfMCfvWhyDKwHcFotQ2IQEF3QI7abxxv+kiWBjT2fqaShnxWCkcETEaFQ6p X8npzgUvmZTAMPB/0kUW0kTZzfguBYc25Qvl3xpk8Fw1eNOaJoP/5QO0hHSPeROO ZESKu8UPNFsbQ1fTYH8ITIQqmDJhi6Sdg6EW1g0vV3XWr8q3cGD5uFr04yH1OT8l BMx4vh9kd7YJzg== -----END CERTIFICATE-----Generated at Wed Dec 31 01:59:12 2025 by rpki-client