This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/b1083d-c078-415e-8d9d-576337e50dc4/1/cPTWBuHReQgGOXe2mHdoLtfi0e8.mft File: cPTWBuHReQgGOXe2mHdoLtfi0e8.mft (raw, json) Hash identifier: Laudwka05nGXmzb2OJxUD6CM/5z5firi6rBd8X1MKU0= Subject key identifier: A5:AA:25:15:1A:58:55:B4:A1:62:58:85:C7:7F:CB:84:A0:0B:D0:B7 Authority key identifier: 70:F4:D6:06:E1:D1:79:08:06:39:77:B6:98:77:68:2E:D7:E2:D1:EF Certificate issuer: /CN=70f4d606e1d17908063977b69877682ed7e2d1ef Certificate serial: 019B3D59D3413E160B629DFC66140B25D0B5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cPTWBuHReQgGOXe2mHdoLtfi0e8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/b1083d-c078-415e-8d9d-576337e50dc4/1/cPTWBuHReQgGOXe2mHdoLtfi0e8.mft Manifest number: 0481 Signing time: Sat 20 Dec 2025 20:00:55 +0000 Manifest this update: Sat 20 Dec 2025 20:00:55 +0000 Manifest next update: Sun 21 Dec 2025 20:00:55 +0000 Files and hashes: 1: Ou9DEYWo3su4Hpz7mWRAUY0_xHI.roa (hash: 8FTp4AmQ8yrNnOSj2Y/1nrH6lz6jMuxxvh24QGuNmXY=) 2: cPTWBuHReQgGOXe2mHdoLtfi0e8.crl (hash: m4esPo8DhDrOcbeH9Kviav1KIjk2HD1BotVak5W3XJs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/b1083d-c078-415e-8d9d-576337e50dc4/1/cPTWBuHReQgGOXe2mHdoLtfi0e8.crl rsync://rpki.ripe.net/repository/DEFAULT/c8/b1083d-c078-415e-8d9d-576337e50dc4/1/cPTWBuHReQgGOXe2mHdoLtfi0e8.mft rsync://rpki.ripe.net/repository/DEFAULT/cPTWBuHReQgGOXe2mHdoLtfi0e8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 19:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:59:d3:41:3e:16:0b:62:9d:fc:66:14:0b:25:d0:b5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=70f4d606e1d17908063977b69877682ed7e2d1ef Validity Not Before: Dec 20 20:00:55 2025 GMT Not After : Dec 21 20:00:55 2025 GMT Subject: CN=a5aa25151a5855b4a1625885c77fcb84a00bd0b7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:1e:d5:10:79:3f:3c:4d:82:73:a2:0c:b6:f3: 7c:26:e4:1b:31:6a:35:96:82:25:45:04:1c:6f:2e: 9b:88:d3:b9:bc:2b:65:34:77:d1:09:6d:42:93:16: ac:52:a8:fe:14:89:d0:c4:c9:18:3a:f6:21:50:27: 41:f7:e4:65:58:da:73:d0:54:ac:fd:af:35:69:74: 17:15:03:5e:90:85:ac:a7:a5:56:8d:f6:79:3a:6a: 34:b8:d6:4b:db:c9:e3:8b:e7:c8:51:0a:0f:03:25: 14:46:6c:d2:f2:64:37:13:95:85:15:31:dc:7e:10: 2e:93:be:0e:0d:48:bb:8d:5e:8e:c1:da:f3:43:8e: f6:04:ed:bc:ab:99:0d:3d:c5:e3:7f:43:f4:ce:02: 06:09:e2:d5:44:0f:e4:85:2c:3f:91:6d:43:b7:7f: 4f:15:da:87:41:0f:24:cd:bf:a4:8a:62:3b:0f:9c: e1:e9:06:e4:c3:4e:ac:07:75:d8:f5:48:7a:f2:51: 41:b7:2d:5d:f4:47:6d:ce:f0:d9:50:cc:56:e3:62: 0d:2b:3a:3a:e9:ff:25:bd:90:e7:be:6d:d4:21:e2: 32:b0:64:d1:5d:1b:65:1c:e1:52:bf:10:3b:1c:36: bb:25:6c:48:27:52:0f:f3:ef:d6:30:26:e5:58:75: 67:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:AA:25:15:1A:58:55:B4:A1:62:58:85:C7:7F:CB:84:A0:0B:D0:B7 X509v3 Authority Key Identifier: keyid:70:F4:D6:06:E1:D1:79:08:06:39:77:B6:98:77:68:2E:D7:E2:D1:EF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cPTWBuHReQgGOXe2mHdoLtfi0e8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/b1083d-c078-415e-8d9d-576337e50dc4/1/cPTWBuHReQgGOXe2mHdoLtfi0e8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/b1083d-c078-415e-8d9d-576337e50dc4/1/cPTWBuHReQgGOXe2mHdoLtfi0e8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8f:a9:71:b8:ce:6d:83:f2:58:dd:b8:65:a2:4f:0e:9c:2e:bf: ec:ef:34:65:20:54:2f:28:91:60:ea:06:7a:b3:39:7c:13:a3: 77:50:8d:33:75:5d:8a:d3:af:e3:18:db:20:c7:83:a5:15:fe: a0:8a:5c:75:24:33:ff:ee:c9:7b:f7:38:83:de:52:1c:b0:39: f4:a2:c0:ca:3a:b2:6b:9d:d1:f5:5a:f8:1f:0f:ea:f7:21:eb: a6:f1:09:c8:43:7e:da:75:52:a4:06:c7:2c:90:9b:9e:b9:31: 13:2d:6b:66:f8:53:77:e2:e5:04:44:90:c8:88:be:2e:9e:9f: 9f:64:4b:3f:d5:51:ce:6c:b9:c0:25:45:8a:19:fa:ba:b6:26: 98:2e:33:f6:99:b3:21:23:8c:e6:d9:fe:07:5f:24:e3:28:42: 3c:a6:84:db:46:d4:65:3b:79:b6:36:9e:33:d0:3e:df:06:bd: db:56:07:2c:81:08:0e:d0:ab:a1:8e:5b:db:37:e3:40:d0:c9: ce:55:84:d8:e8:ae:ea:0d:06:44:f2:68:68:07:e8:6b:10:b5: 56:f0:db:62:a2:73:38:3d:d1:ef:c9:24:9e:a9:9e:f5:18:d2: 3b:4c:3d:32:5b:ee:38:7f:55:3f:50:cc:48:6a:f1:cc:b8:b4: 05:b0:c9:0b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9WdNBPhYLYp38ZhQLJdC1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcwZjRkNjA2ZTFkMTc5MDgwNjM5NzdiNjk4Nzc2ODJlZDdl MmQxZWYwHhcNMjUxMjIwMjAwMDU1WhcNMjUxMjIxMjAwMDU1WjAzMTEwLwYDVQQD EyhhNWFhMjUxNTFhNTg1NWI0YTE2MjU4ODVjNzdmY2I4NGEwMGJkMGI3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvh7VEHk/PE2Cc6IMtvN8JuQbMWo1 loIlRQQcby6biNO5vCtlNHfRCW1CkxasUqj+FInQxMkYOvYhUCdB9+RlWNpz0FSs /a81aXQXFQNekIWsp6VWjfZ5Omo0uNZL28nji+fIUQoPAyUURmzS8mQ3E5WFFTHc fhAuk74ODUi7jV6OwdrzQ472BO28q5kNPcXjf0P0zgIGCeLVRA/khSw/kW1Dt39P FdqHQQ8kzb+kimI7D5zh6Qbkw06sB3XY9Uh68lFBty1d9EdtzvDZUMxW42INKzo6 6f8lvZDnvm3UIeIysGTRXRtlHOFSvxA7HDa7JWxIJ1IP8+/WMCblWHVnJQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKWqJRUaWFW0oWJYhcd/y4SgC9C3MB8GA1UdIwQY MBaAFHD01gbh0XkIBjl3tph3aC7X4tHvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY1BUV0J1SFJlUWdHT1hlMm1IZG9MdGZpMGU4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9iMTA4M2QtYzA3OC00MTVlLThkOWQt NTc2MzM3ZTUwZGM0LzEvY1BUV0J1SFJlUWdHT1hlMm1IZG9MdGZpMGU4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOC9iMTA4M2QtYzA3OC00MTVlLThkOWQtNTc2MzM3ZTUwZGM0 LzEvY1BUV0J1SFJlUWdHT1hlMm1IZG9MdGZpMGU4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAj6lxuM5t g/JY3bhlok8OnC6/7O80ZSBULyiRYOoGerM5fBOjd1CNM3VditOv4xjbIMeDpRX+ oIpcdSQz/+7Je/c4g95SHLA59KLAyjqya53R9Vr4Hw/q9yHrpvEJyEN+2nVSpAbH LJCbnrkxEy1rZvhTd+LlBESQyIi+Lp6fn2RLP9VRzmy5wCVFihn6urYmmC4z9pmz ISOM5tn+B18k4yhCPKaE20bUZTt5tjaeM9A+3wa921YHLIEIDtCroY5b2zfjQNDJ zlWE2Oiu6g0GRPJoaAfoaxC1VvDbYqJzOD3R78kknqme9RjSO0w9MlvuOH9VP1DM SGrxzLi0BbDJCw== -----END CERTIFICATE-----Generated at Sun Dec 21 04:23:15 2025 by rpki-client