This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/014f47-628b-4fb8-b344-a409e22a243e/1/cKdpKcviHO3ZTAErpYuwtvEpci4.mft File: cKdpKcviHO3ZTAErpYuwtvEpci4.mft (raw, json) Hash identifier: CGCZ2PiO4ztiUh25yaMHR7D0ogtspHBuAAGDBhdhtl0= Subject key identifier: 5E:8F:75:70:91:3F:3E:BD:98:33:DA:5D:32:6C:D4:B5:AB:94:9C:80 Authority key identifier: 70:A7:69:29:CB:E2:1C:ED:D9:4C:01:2B:A5:8B:B0:B6:F1:29:72:2E Certificate issuer: /CN=70a76929cbe21cedd94c012ba58bb0b6f129722e Certificate serial: 019B33B21B3528D1406DA27C051E1D768CCB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cKdpKcviHO3ZTAErpYuwtvEpci4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/014f47-628b-4fb8-b344-a409e22a243e/1/cKdpKcviHO3ZTAErpYuwtvEpci4.mft Manifest number: 1782 Signing time: Thu 18 Dec 2025 23:01:08 +0000 Manifest this update: Thu 18 Dec 2025 23:01:08 +0000 Manifest next update: Fri 19 Dec 2025 23:01:08 +0000 Files and hashes: 1: cKdpKcviHO3ZTAErpYuwtvEpci4.crl (hash: xaDD0IHc46E6w9lmAtwfeKZMqPk8+lniaQrQmw/yaK8=) 2: inuScwE1S9lEULUDFOPt0YYBMRU.roa (hash: hvD+jjYBAY5jZaJA8u8QgEl8M7kubkCEj9ntL0iNAX4=) 3: jP0oG4-lTwdPgvwQsai3xzsKBUA.roa (hash: cwxrU32A7FjEaD6Xb0+naWkVMI0iVDnV1C3ohgsG2Sc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/014f47-628b-4fb8-b344-a409e22a243e/1/cKdpKcviHO3ZTAErpYuwtvEpci4.crl rsync://rpki.ripe.net/repository/DEFAULT/c0/014f47-628b-4fb8-b344-a409e22a243e/1/cKdpKcviHO3ZTAErpYuwtvEpci4.mft rsync://rpki.ripe.net/repository/DEFAULT/cKdpKcviHO3ZTAErpYuwtvEpci4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:33:b2:1b:35:28:d1:40:6d:a2:7c:05:1e:1d:76:8c:cb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=70a76929cbe21cedd94c012ba58bb0b6f129722e Validity Not Before: Dec 18 23:01:08 2025 GMT Not After : Dec 19 23:01:08 2025 GMT Subject: CN=5e8f7570913f3ebd9833da5d326cd4b5ab949c80 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:cb:48:76:96:91:8a:00:c8:48:4f:29:7c:15: 42:3b:cf:9e:ab:e5:b1:43:0d:3d:22:0f:8f:86:7c: 8f:a3:9c:55:f1:cf:c3:ee:19:25:a6:ea:2e:dd:61: 1a:48:12:b9:0d:e2:4e:05:21:36:45:ed:47:74:bb: 56:99:5b:a0:e1:e6:54:09:4d:a6:cf:91:83:8f:b8: a1:7a:3f:d1:d4:69:e8:6c:73:ac:29:53:bd:2a:a6: 93:a4:aa:fe:ea:7e:e9:e6:a3:2d:b4:1f:df:d6:ad: fa:1f:fa:38:54:4f:09:6e:80:5b:67:56:94:ad:76: 6e:9f:94:ef:f7:f4:62:a3:63:29:58:34:fb:1c:6b: 0d:f2:fb:e1:53:e5:57:4d:f2:f3:33:2f:6a:98:4d: dd:9a:07:3f:f9:bb:44:82:31:e4:86:2a:86:d7:c5: d1:48:0d:e4:e7:40:b1:ee:ad:1f:01:32:b8:43:1c: d4:69:d2:47:ac:8f:59:3e:03:ab:9b:18:b4:67:81: 99:fb:de:68:2d:b8:cc:b1:1f:e8:6f:b5:11:39:25: ed:5b:cc:0b:25:f0:34:ac:46:2f:2d:25:c3:a7:f3: c1:eb:d1:ea:12:94:8a:9d:d9:3e:94:ff:ab:ed:3e: ec:e9:af:25:cc:9f:5a:85:2f:d3:c9:c7:2d:a6:b5: 47:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:8F:75:70:91:3F:3E:BD:98:33:DA:5D:32:6C:D4:B5:AB:94:9C:80 X509v3 Authority Key Identifier: keyid:70:A7:69:29:CB:E2:1C:ED:D9:4C:01:2B:A5:8B:B0:B6:F1:29:72:2E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cKdpKcviHO3ZTAErpYuwtvEpci4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/014f47-628b-4fb8-b344-a409e22a243e/1/cKdpKcviHO3ZTAErpYuwtvEpci4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/014f47-628b-4fb8-b344-a409e22a243e/1/cKdpKcviHO3ZTAErpYuwtvEpci4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 99:d0:28:4a:72:03:57:c3:75:4c:bd:31:e0:aa:d2:fa:c6:a6: b4:b4:02:de:43:08:61:21:4e:1c:15:10:c0:a0:65:ca:b0:52: d7:31:fa:b5:13:93:5e:f3:c6:10:04:90:38:75:bf:f4:fd:81: 0f:a7:c6:7a:d3:72:6b:a0:e3:5c:96:8c:44:8b:70:de:42:02: e2:8c:24:91:b5:46:22:f5:a9:44:09:01:5f:d5:b9:03:54:1c: f4:af:a5:f6:38:b2:07:87:56:42:5b:28:42:95:d9:a4:d5:f1: 6c:aa:48:38:53:d9:d7:fb:38:63:59:a1:a8:d7:cf:12:28:d3: 96:24:9d:14:10:0f:8c:fe:60:a6:3f:93:93:4c:5a:0f:c7:5b: f2:7f:13:c1:b6:e6:b3:a1:aa:ea:7c:e7:57:d2:d6:a3:92:74: 5e:0a:19:1f:e5:2d:c5:c0:e8:02:56:18:2a:96:15:c8:53:4f: fd:93:fe:9d:aa:e4:7b:9c:55:14:1e:ea:74:12:50:b3:e6:4b: d0:74:dd:8e:d1:fd:91:6e:fe:89:10:90:61:b1:c0:c0:c7:21: ee:b9:17:ba:da:46:4a:21:34:f5:be:b8:1c:88:1c:87:83:ac: 28:fb:94:e2:cf:72:a9:9c:d4:a1:ac:02:da:3f:f7:ae:82:e4: 70:b0:57:ca -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZszshs1KNFAbaJ8BR4ddozLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcwYTc2OTI5Y2JlMjFjZWRkOTRjMDEyYmE1OGJiMGI2ZjEy OTcyMmUwHhcNMjUxMjE4MjMwMTA4WhcNMjUxMjE5MjMwMTA4WjAzMTEwLwYDVQQD Eyg1ZThmNzU3MDkxM2YzZWJkOTgzM2RhNWQzMjZjZDRiNWFiOTQ5YzgwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApstIdpaRigDISE8pfBVCO8+eq+Wx Qw09Ig+PhnyPo5xV8c/D7hklpuou3WEaSBK5DeJOBSE2Re1HdLtWmVug4eZUCU2m z5GDj7ihej/R1GnobHOsKVO9KqaTpKr+6n7p5qMttB/f1q36H/o4VE8JboBbZ1aU rXZun5Tv9/Rio2MpWDT7HGsN8vvhU+VXTfLzMy9qmE3dmgc/+btEgjHkhiqG18XR SA3k50Cx7q0fATK4QxzUadJHrI9ZPgOrmxi0Z4GZ+95oLbjMsR/ob7UROSXtW8wL JfA0rEYvLSXDp/PB69HqEpSKndk+lP+r7T7s6a8lzJ9ahS/TycctprVHKQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFF6PdXCRPz69mDPaXTJs1LWrlJyAMB8GA1UdIwQY MBaAFHCnaSnL4hzt2UwBK6WLsLbxKXIuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY0tkcEtjdmlITzNaVEFFcnBZdXd0dkVwY2k0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC8wMTRmNDctNjI4Yi00ZmI4LWIzNDQt YTQwOWUyMmEyNDNlLzEvY0tkcEtjdmlITzNaVEFFcnBZdXd0dkVwY2k0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMC8wMTRmNDctNjI4Yi00ZmI4LWIzNDQtYTQwOWUyMmEyNDNl LzEvY0tkcEtjdmlITzNaVEFFcnBZdXd0dkVwY2k0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmdAoSnID V8N1TL0x4KrS+samtLQC3kMIYSFOHBUQwKBlyrBS1zH6tROTXvPGEASQOHW/9P2B D6fGetNya6DjXJaMRItw3kIC4owkkbVGIvWpRAkBX9W5A1Qc9K+l9jiyB4dWQlso QpXZpNXxbKpIOFPZ1/s4Y1mhqNfPEijTliSdFBAPjP5gpj+Tk0xaD8db8n8Twbbm s6Gq6nznV9LWo5J0XgoZH+UtxcDoAlYYKpYVyFNP/ZP+narke5xVFB7qdBJQs+ZL 0HTdjtH9kW7+iRCQYbHAwMch7rkXutpGSiE09b64HIgch4OsKPuU4s9yqZzUoawC 2j/3roLkcLBXyg== -----END CERTIFICATE-----Generated at Fri Dec 19 08:21:27 2025 by rpki-client