This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/8c3fb8-40df-4d5d-9363-504727a50b8e/1/cdm6oCIZQu3-SzqaVwgpXARBboA.mft File: cdm6oCIZQu3-SzqaVwgpXARBboA.mft (raw, json) Hash identifier: EOThhTXR55YOd5CISEI41l1PyaO2OKl57Oz+HpQjhR4= Subject key identifier: 3D:BE:2F:98:21:DB:92:3B:6E:62:B2:57:1B:62:E9:4C:EF:97:9E:F7 Authority key identifier: 71:D9:BA:A0:22:19:42:ED:FE:4B:3A:9A:57:08:29:5C:04:41:6E:80 Certificate issuer: /CN=71d9baa0221942edfe4b3a9a5708295c04416e80 Certificate serial: 019B66FB25FB270AA2ABBEDC2EFEEDF6E60F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cdm6oCIZQu3-SzqaVwgpXARBboA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/8c3fb8-40df-4d5d-9363-504727a50b8e/1/cdm6oCIZQu3-SzqaVwgpXARBboA.mft Manifest number: 179E Signing time: Sun 28 Dec 2025 22:01:33 +0000 Manifest this update: Sun 28 Dec 2025 22:01:33 +0000 Manifest next update: Mon 29 Dec 2025 22:01:33 +0000 Files and hashes: 1: Uqk6ZpOTGE36LT5fcwe3jUUK8bs.roa (hash: 3ocr9qZ6ri2OW2BEWPNTcZs9jR00BhDPO+YzVSk3MLY=) 2: cdm6oCIZQu3-SzqaVwgpXARBboA.crl (hash: g7+Ymqv6BE1K9IY05hBDCcmrqgcX5KUSE4o3mPwAocQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/8c3fb8-40df-4d5d-9363-504727a50b8e/1/cdm6oCIZQu3-SzqaVwgpXARBboA.crl rsync://rpki.ripe.net/repository/DEFAULT/d1/8c3fb8-40df-4d5d-9363-504727a50b8e/1/cdm6oCIZQu3-SzqaVwgpXARBboA.mft rsync://rpki.ripe.net/repository/DEFAULT/cdm6oCIZQu3-SzqaVwgpXARBboA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 29 Dec 2025 20:59:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:66:fb:25:fb:27:0a:a2:ab:be:dc:2e:fe:ed:f6:e6:0f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=71d9baa0221942edfe4b3a9a5708295c04416e80 Validity Not Before: Dec 28 22:01:33 2025 GMT Not After : Dec 29 22:01:33 2025 GMT Subject: CN=3dbe2f9821db923b6e62b2571b62e94cef979ef7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:c0:93:02:ef:b3:82:06:aa:76:06:65:be:95: a2:76:db:1a:bf:eb:66:1f:b1:64:f3:ad:ab:27:57: 14:fe:52:d5:a0:72:47:f9:75:16:72:2d:c4:4a:a0: 12:04:7d:38:d2:2f:17:7c:93:05:fa:61:a2:c7:91: 15:b6:6d:5a:ac:23:56:21:46:e2:db:f1:be:e0:0c: 0d:52:a4:74:c0:69:6e:bd:01:c2:eb:14:9d:f2:85: 7e:89:c0:f2:04:5f:e4:83:31:cf:c1:30:bc:b4:2e: c4:48:06:33:b1:29:38:1d:4a:ed:7f:f3:56:5f:7a: ba:a9:0d:0d:17:6c:e2:4a:d1:79:5f:67:aa:4a:9d: 36:e4:21:af:82:a4:98:95:04:44:b3:70:b7:c6:9a: aa:71:b6:25:ae:f3:6f:c7:1e:70:65:b7:b3:a1:cd: ff:a1:c8:65:27:43:f5:57:97:f4:ad:c1:e2:45:aa: 20:2a:b0:2d:59:c3:ec:4d:e6:05:18:cf:d0:59:38: 74:f0:d3:67:8c:a5:0f:25:9d:6d:7c:ab:a3:9d:00: bf:aa:90:10:e5:58:a0:41:ab:14:82:28:d2:38:36: df:9b:ac:95:62:78:d0:a5:46:27:a6:6a:0c:9d:08: 18:11:e7:84:8d:35:33:d3:8b:03:b1:56:36:00:26: 8e:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:BE:2F:98:21:DB:92:3B:6E:62:B2:57:1B:62:E9:4C:EF:97:9E:F7 X509v3 Authority Key Identifier: keyid:71:D9:BA:A0:22:19:42:ED:FE:4B:3A:9A:57:08:29:5C:04:41:6E:80 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cdm6oCIZQu3-SzqaVwgpXARBboA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/8c3fb8-40df-4d5d-9363-504727a50b8e/1/cdm6oCIZQu3-SzqaVwgpXARBboA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/8c3fb8-40df-4d5d-9363-504727a50b8e/1/cdm6oCIZQu3-SzqaVwgpXARBboA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5b:91:3e:23:6f:3e:33:7c:7d:ca:d1:c7:ab:c2:7f:fc:2a:24: 32:20:b8:d0:35:62:7b:e7:52:14:fe:48:c0:4d:95:7a:02:a8: 06:62:db:77:74:ef:a9:1d:f9:aa:d2:47:34:00:78:88:9f:9d: 6f:a5:a3:75:3c:b7:85:ab:a5:94:51:9b:0e:d6:6a:dd:c1:63: 95:3b:3e:4f:55:2d:33:5a:d5:2b:84:af:23:f9:b6:ae:de:1a: e2:9f:0f:79:59:50:a3:0c:bf:da:54:96:09:0b:0d:89:fa:08: d2:30:fd:9a:77:1b:72:99:60:ed:98:6f:71:0a:b8:bc:96:ad: 1e:94:b6:50:39:e6:05:26:13:17:6d:8f:54:d6:79:31:6d:0d: 0d:9a:df:66:29:32:8b:ea:d8:e2:76:d5:e6:3e:90:c1:1b:08: d9:56:5f:ad:3b:4b:d6:a6:1a:8d:39:ac:7a:d7:14:f6:e4:38: 0e:6a:11:44:20:e0:c8:7d:80:fb:f1:86:e8:a3:9d:83:80:d1: 8c:59:0a:65:1a:ef:72:22:62:87:64:38:bc:94:bb:a3:9b:fe: db:92:53:6e:77:d9:5c:15:86:c3:50:0b:06:fb:af:e3:87:46: 4b:7b:f6:3d:24:2b:d5:eb:b3:4e:5b:2a:01:64:7d:fb:3d:fc: 2e:3f:28:9e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtm+yX7Jwqiq77cLv7t9uYPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcxZDliYWEwMjIxOTQyZWRmZTRiM2E5YTU3MDgyOTVjMDQ0 MTZlODAwHhcNMjUxMjI4MjIwMTMzWhcNMjUxMjI5MjIwMTMzWjAzMTEwLwYDVQQD EygzZGJlMmY5ODIxZGI5MjNiNmU2MmIyNTcxYjYyZTk0Y2VmOTc5ZWY3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqsCTAu+zggaqdgZlvpWidtsav+tm H7Fk862rJ1cU/lLVoHJH+XUWci3ESqASBH040i8XfJMF+mGix5EVtm1arCNWIUbi 2/G+4AwNUqR0wGluvQHC6xSd8oV+icDyBF/kgzHPwTC8tC7ESAYzsSk4HUrtf/NW X3q6qQ0NF2ziStF5X2eqSp025CGvgqSYlQREs3C3xpqqcbYlrvNvxx5wZbezoc3/ ochlJ0P1V5f0rcHiRaogKrAtWcPsTeYFGM/QWTh08NNnjKUPJZ1tfKujnQC/qpAQ 5VigQasUgijSODbfm6yVYnjQpUYnpmoMnQgYEeeEjTUz04sDsVY2ACaOoQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFD2+L5gh25I7bmKyVxti6Uzvl573MB8GA1UdIwQY MBaAFHHZuqAiGULt/ks6mlcIKVwEQW6AMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY2RtNm9DSVpRdTMtU3pxYVZ3Z3BYQVJCYm9BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMS84YzNmYjgtNDBkZi00ZDVkLTkzNjMt NTA0NzI3YTUwYjhlLzEvY2RtNm9DSVpRdTMtU3pxYVZ3Z3BYQVJCYm9BLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMS84YzNmYjgtNDBkZi00ZDVkLTkzNjMtNTA0NzI3YTUwYjhl LzEvY2RtNm9DSVpRdTMtU3pxYVZ3Z3BYQVJCYm9BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAW5E+I28+ M3x9ytHHq8J//CokMiC40DVie+dSFP5IwE2VegKoBmLbd3TvqR35qtJHNAB4iJ+d b6WjdTy3haullFGbDtZq3cFjlTs+T1UtM1rVK4SvI/m2rt4a4p8PeVlQowy/2lSW CQsNifoI0jD9mncbcplg7ZhvcQq4vJatHpS2UDnmBSYTF22PVNZ5MW0NDZrfZiky i+rY4nbV5j6QwRsI2VZfrTtL1qYajTmsetcU9uQ4DmoRRCDgyH2A+/GG6KOdg4DR jFkKZRrvciJih2Q4vJS7o5v+25JTbnfZXBWGw1ALBvuv44dGS3v2PSQr1euzTlsq AWR9+z38Lj8ong== -----END CERTIFICATE-----Generated at Mon Dec 29 02:24:33 2025 by rpki-client