This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/b1083d-c078-415e-8d9d-576337e50dc4/1/cPTWBuHReQgGOXe2mHdoLtfi0e8.mft File: cPTWBuHReQgGOXe2mHdoLtfi0e8.mft (raw, json) Hash identifier: e9i6kvjB/RbfUChp7pxYbDXudyA21JTOhuBTej6jdCM= Subject key identifier: B2:36:AA:ED:5E:A8:61:5F:C5:FF:8C:F5:E1:B5:3A:24:8C:68:93:C1 Authority key identifier: 70:F4:D6:06:E1:D1:79:08:06:39:77:B6:98:77:68:2E:D7:E2:D1:EF Certificate issuer: /CN=70f4d606e1d17908063977b69877682ed7e2d1ef Certificate serial: 019B4136A6CC28869CC864ECD25D9D0070E9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cPTWBuHReQgGOXe2mHdoLtfi0e8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/b1083d-c078-415e-8d9d-576337e50dc4/1/cPTWBuHReQgGOXe2mHdoLtfi0e8.mft Manifest number: 0483 Signing time: Sun 21 Dec 2025 14:00:59 +0000 Manifest this update: Sun 21 Dec 2025 14:00:59 +0000 Manifest next update: Mon 22 Dec 2025 14:00:59 +0000 Files and hashes: 1: Ou9DEYWo3su4Hpz7mWRAUY0_xHI.roa (hash: 8FTp4AmQ8yrNnOSj2Y/1nrH6lz6jMuxxvh24QGuNmXY=) 2: cPTWBuHReQgGOXe2mHdoLtfi0e8.crl (hash: G4Kvcf3tO9ONZO0AaBKHw3rJUq+EtbZmpptWSd+xixQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/b1083d-c078-415e-8d9d-576337e50dc4/1/cPTWBuHReQgGOXe2mHdoLtfi0e8.crl rsync://rpki.ripe.net/repository/DEFAULT/c8/b1083d-c078-415e-8d9d-576337e50dc4/1/cPTWBuHReQgGOXe2mHdoLtfi0e8.mft rsync://rpki.ripe.net/repository/DEFAULT/cPTWBuHReQgGOXe2mHdoLtfi0e8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 13:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:41:36:a6:cc:28:86:9c:c8:64:ec:d2:5d:9d:00:70:e9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=70f4d606e1d17908063977b69877682ed7e2d1ef Validity Not Before: Dec 21 14:00:59 2025 GMT Not After : Dec 22 14:00:59 2025 GMT Subject: CN=b236aaed5ea8615fc5ff8cf5e1b53a248c6893c1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:76:94:f0:3d:fb:ad:fd:86:53:da:09:7a:1d: cc:f2:0d:78:e1:6e:fb:2a:43:69:2b:60:e1:22:c6: 6f:62:56:a8:c9:17:e7:d2:fe:0a:d7:e1:f0:55:ef: 90:37:f2:89:96:11:a9:67:09:53:ad:1a:59:b8:7c: 51:35:ba:9e:d9:98:b9:07:2f:a3:8a:58:71:9b:43: d0:c0:ff:e0:1e:08:ce:c1:29:13:23:f2:91:74:46: 71:b4:0e:98:ae:10:6d:56:9a:b6:15:df:d0:6e:1d: be:6f:c2:e6:6f:8d:4e:78:8f:2b:1e:e6:86:94:ad: 98:2f:e4:2c:d9:5b:50:9a:f4:61:8b:8c:2f:53:6b: 2c:20:eb:35:4c:9d:83:b1:08:30:ff:ed:aa:68:8e: 7d:b4:6e:28:9a:95:fb:76:29:00:2c:5d:09:20:b5: b7:7b:b3:8a:34:c0:49:15:96:49:ef:33:5d:3c:2f: e5:32:fb:de:33:eb:37:a9:c8:ed:5e:de:03:40:2d: e7:b9:43:d8:f4:a6:9e:02:ee:95:58:da:6f:8c:ce: c4:af:d8:e2:82:30:9c:74:db:a2:31:c2:14:c6:d4: af:51:b6:15:08:2a:ac:12:61:4b:53:1e:0c:28:06: 8d:8c:51:be:c5:f2:ec:a8:38:52:44:04:9f:6c:48: af:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:36:AA:ED:5E:A8:61:5F:C5:FF:8C:F5:E1:B5:3A:24:8C:68:93:C1 X509v3 Authority Key Identifier: keyid:70:F4:D6:06:E1:D1:79:08:06:39:77:B6:98:77:68:2E:D7:E2:D1:EF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cPTWBuHReQgGOXe2mHdoLtfi0e8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/b1083d-c078-415e-8d9d-576337e50dc4/1/cPTWBuHReQgGOXe2mHdoLtfi0e8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/b1083d-c078-415e-8d9d-576337e50dc4/1/cPTWBuHReQgGOXe2mHdoLtfi0e8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 18:94:0e:86:77:d0:bc:04:fd:2c:b6:3b:e6:23:f8:cd:d0:9c: 38:ca:94:db:18:60:06:be:53:63:2d:da:63:28:70:1b:25:b9: 71:41:45:53:78:6a:a8:48:0b:ee:c5:df:d0:13:cb:0c:d7:cf: 64:5f:69:4a:3b:e2:4b:50:0b:81:8d:e1:ad:32:17:3b:a9:3d: 74:6e:0d:4a:f9:3d:7f:a2:9d:d3:d3:40:48:b2:0a:92:8b:c5: 4a:7d:ea:63:0a:40:a3:58:a0:57:ea:bd:95:34:10:ce:97:6d: 29:7c:df:d0:c7:40:a7:c6:9c:af:10:24:4c:91:ab:fa:e3:d0: 9d:cb:fb:29:6b:97:a2:4d:43:2e:f1:f4:b9:a1:1c:95:83:02: 03:e5:5f:6b:52:77:10:60:09:a4:c3:bf:ed:eb:76:85:95:b7: ad:4d:35:52:8f:8d:b1:d0:a4:8f:f1:01:01:a9:b4:dc:91:45: 00:95:6d:63:46:e2:af:6a:07:65:1e:eb:61:73:99:7f:e7:4b: 1c:7e:e8:be:1b:c1:63:0a:58:5d:a8:f7:09:05:33:90:bc:52: 6b:73:d5:2f:37:ae:f0:fc:13:77:3e:38:bc:96:91:fa:fb:f0: cf:ad:17:57:0f:cd:2f:e6:4e:72:5b:71:a9:6a:f6:38:3a:80: eb:88:bf:67 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtBNqbMKIacyGTs0l2dAHDpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcwZjRkNjA2ZTFkMTc5MDgwNjM5NzdiNjk4Nzc2ODJlZDdl MmQxZWYwHhcNMjUxMjIxMTQwMDU5WhcNMjUxMjIyMTQwMDU5WjAzMTEwLwYDVQQD EyhiMjM2YWFlZDVlYTg2MTVmYzVmZjhjZjVlMWI1M2EyNDhjNjg5M2MxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvHaU8D37rf2GU9oJeh3M8g144W77 KkNpK2DhIsZvYlaoyRfn0v4K1+HwVe+QN/KJlhGpZwlTrRpZuHxRNbqe2Zi5By+j ilhxm0PQwP/gHgjOwSkTI/KRdEZxtA6YrhBtVpq2Fd/Qbh2+b8Lmb41OeI8rHuaG lK2YL+Qs2VtQmvRhi4wvU2ssIOs1TJ2DsQgw/+2qaI59tG4ompX7dikALF0JILW3 e7OKNMBJFZZJ7zNdPC/lMvveM+s3qcjtXt4DQC3nuUPY9KaeAu6VWNpvjM7Er9ji gjCcdNuiMcIUxtSvUbYVCCqsEmFLUx4MKAaNjFG+xfLsqDhSRASfbEiv+QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLI2qu1eqGFfxf+M9eG1OiSMaJPBMB8GA1UdIwQY MBaAFHD01gbh0XkIBjl3tph3aC7X4tHvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY1BUV0J1SFJlUWdHT1hlMm1IZG9MdGZpMGU4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9iMTA4M2QtYzA3OC00MTVlLThkOWQt NTc2MzM3ZTUwZGM0LzEvY1BUV0J1SFJlUWdHT1hlMm1IZG9MdGZpMGU4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOC9iMTA4M2QtYzA3OC00MTVlLThkOWQtNTc2MzM3ZTUwZGM0 LzEvY1BUV0J1SFJlUWdHT1hlMm1IZG9MdGZpMGU4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGJQOhnfQ vAT9LLY75iP4zdCcOMqU2xhgBr5TYy3aYyhwGyW5cUFFU3hqqEgL7sXf0BPLDNfP ZF9pSjviS1ALgY3hrTIXO6k9dG4NSvk9f6Kd09NASLIKkovFSn3qYwpAo1igV+q9 lTQQzpdtKXzf0MdAp8acrxAkTJGr+uPQncv7KWuXok1DLvH0uaEclYMCA+Vfa1J3 EGAJpMO/7et2hZW3rU01Uo+NsdCkj/EBAam03JFFAJVtY0bir2oHZR7rYXOZf+dL HH7ovhvBYwpYXaj3CQUzkLxSa3PVLzeu8PwTdz44vJaR+vvwz60XVw/NL+ZOcltx qWr2ODqA64i/Zw== -----END CERTIFICATE-----Generated at Sun Dec 21 17:11:55 2025 by rpki-client