This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/d0abd0-b114-4e3a-ae59-e21763c672fa/1/cGdFrZI1PaioDLLg0inWjC71PbI.mft File: cGdFrZI1PaioDLLg0inWjC71PbI.mft (raw, json) Hash identifier: AynupofdnFRH8G/dbr3U0+M1qwR1wRwQneX/wOtbPYw= Subject key identifier: 22:E2:F9:9E:9C:26:39:F0:30:E3:FA:1A:A5:73:E2:1D:D7:D6:B5:7E Authority key identifier: 70:67:45:AD:92:35:3D:A8:A8:0C:B2:E0:D2:29:D6:8C:2E:F5:3D:B2 Certificate issuer: /CN=706745ad92353da8a80cb2e0d229d68c2ef53db2 Certificate serial: 019B397CE09CD5CD3D8998436B0BEE3BC170 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cGdFrZI1PaioDLLg0inWjC71PbI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/d0abd0-b114-4e3a-ae59-e21763c672fa/1/cGdFrZI1PaioDLLg0inWjC71PbI.mft Manifest number: 01DC Signing time: Sat 20 Dec 2025 02:00:43 +0000 Manifest this update: Sat 20 Dec 2025 02:00:43 +0000 Manifest next update: Sun 21 Dec 2025 02:00:43 +0000 Files and hashes: 1: aaJ1jaTLTGfM4VDt5VNpK1tiufg.roa (hash: ardpktxFjeQvHK2MqhTKB5ZUCsB5pD/8L8tzcZpPhHI=) 2: cGdFrZI1PaioDLLg0inWjC71PbI.crl (hash: 7sq4dCwPTbyva744ZEKaFVSVCMR1HQyttMEmytBgAu0=) 3: ghNDZNJhpYP_Htc1Wek-L5R4BeI.roa (hash: R8J6wlPRCV7dUDvscKB1CZV2169wkfxGRLHSAdA+H2w=) 4: l3EQEBZnleFof5yb88UhTSSdRTM.roa (hash: UQRjHQuRnFXbfdwyx6MJct5Sj+7na+HTqU/QptK8INI=) 5: yP2PwxyE3TQPg2qxWYhpMqN9JU0.roa (hash: YcmMq4Dbq1MbTv0BNqcdqm0wVRn+J3BQcq+ugockK/8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/d0abd0-b114-4e3a-ae59-e21763c672fa/1/cGdFrZI1PaioDLLg0inWjC71PbI.crl rsync://rpki.ripe.net/repository/DEFAULT/d8/d0abd0-b114-4e3a-ae59-e21763c672fa/1/cGdFrZI1PaioDLLg0inWjC71PbI.mft rsync://rpki.ripe.net/repository/DEFAULT/cGdFrZI1PaioDLLg0inWjC71PbI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:39:7c:e0:9c:d5:cd:3d:89:98:43:6b:0b:ee:3b:c1:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=706745ad92353da8a80cb2e0d229d68c2ef53db2 Validity Not Before: Dec 20 02:00:43 2025 GMT Not After : Dec 21 02:00:43 2025 GMT Subject: CN=22e2f99e9c2639f030e3fa1aa573e21dd7d6b57e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:1e:96:26:a7:9a:73:eb:27:34:c2:8f:40:15: 64:94:44:50:b4:fb:72:b6:54:c4:6d:bc:8b:a8:43: 82:6f:c5:5a:7f:15:e5:bd:42:9a:2c:cf:67:ac:27: 9a:ec:97:be:82:af:3b:bd:51:d8:5a:c7:8c:b4:fa: 7b:c2:46:80:6e:2b:ec:76:82:fa:f0:11:f5:9c:ef: 3f:51:cb:4c:76:b5:03:d6:e0:2d:c4:05:21:10:42: 47:17:6e:dc:8f:5e:55:a3:d4:13:3c:4e:ba:d7:84: 19:5c:3f:4a:18:35:b4:75:1d:e5:9f:e3:01:9f:2a: c6:01:00:69:f4:2f:59:2d:e1:2f:f7:4f:b1:c4:62: 76:39:7b:70:da:c5:e7:b9:14:be:9a:8f:e1:24:2a: 7d:e0:b0:00:de:65:55:4d:56:9e:98:f6:bd:ae:4c: 9d:48:a0:10:f8:f5:22:dc:e4:1f:3b:80:cd:12:df: ae:5f:39:08:2f:ca:ab:d4:7e:15:23:c0:f3:17:3a: a1:42:ff:21:00:3b:6e:dd:80:fc:7f:16:85:67:dd: 18:c8:78:de:10:98:74:d4:ed:f9:e3:0c:cd:81:42: a4:64:a9:b1:f7:ce:ca:b0:7e:b5:e4:56:2b:3b:0d: 8b:e7:45:88:02:36:e6:98:f6:ca:66:9b:de:87:39: b3:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:E2:F9:9E:9C:26:39:F0:30:E3:FA:1A:A5:73:E2:1D:D7:D6:B5:7E X509v3 Authority Key Identifier: keyid:70:67:45:AD:92:35:3D:A8:A8:0C:B2:E0:D2:29:D6:8C:2E:F5:3D:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cGdFrZI1PaioDLLg0inWjC71PbI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/d0abd0-b114-4e3a-ae59-e21763c672fa/1/cGdFrZI1PaioDLLg0inWjC71PbI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/d0abd0-b114-4e3a-ae59-e21763c672fa/1/cGdFrZI1PaioDLLg0inWjC71PbI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ac:76:10:a0:61:84:ad:2c:01:e0:14:9d:9a:0b:51:74:64:8d: c6:c5:24:af:97:8f:87:bc:80:de:11:ce:04:15:d8:29:b1:55: 9e:92:c1:99:8b:bb:76:80:27:fd:12:91:3b:aa:6d:05:40:38: 31:93:ca:dd:e6:78:23:24:73:44:b5:64:ca:be:10:26:a0:2b: 75:85:eb:55:87:d7:f2:06:01:fb:29:ae:1e:85:81:25:06:72: c5:49:68:02:43:99:9c:f1:7a:a7:54:6a:0f:a8:b1:af:c0:9a: cb:7d:f9:0f:3b:95:f8:ff:5a:ab:7c:7b:a7:26:08:8c:8a:66: 5b:6d:82:b5:54:95:0a:0e:ff:82:44:29:6a:90:f4:0b:ad:26: 13:25:f1:d1:2d:f8:96:d4:34:51:bd:68:ad:b4:03:c6:0f:83: e0:c1:60:a6:72:be:dc:f6:4a:e2:5f:69:66:92:de:d1:f8:59: 3d:aa:b8:2c:16:55:f4:9c:3d:96:9f:39:b8:74:02:f3:b5:30: c3:1f:79:74:35:4a:9c:1c:85:b7:4e:e2:6b:21:86:78:4a:40: f6:95:76:7c:e6:fa:f7:24:3a:e1:b8:62:20:35:24:aa:ec:b5: b3:a9:65:a7:df:60:b9:fa:b9:e1:12:7c:ef:c0:46:f4:50:9d: a5:e6:ae:85 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs5fOCc1c09iZhDawvuO8FwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcwNjc0NWFkOTIzNTNkYThhODBjYjJlMGQyMjlkNjhjMmVm NTNkYjIwHhcNMjUxMjIwMDIwMDQzWhcNMjUxMjIxMDIwMDQzWjAzMTEwLwYDVQQD EygyMmUyZjk5ZTljMjYzOWYwMzBlM2ZhMWFhNTczZTIxZGQ3ZDZiNTdlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2R6WJqeac+snNMKPQBVklERQtPty tlTEbbyLqEOCb8VafxXlvUKaLM9nrCea7Je+gq87vVHYWseMtPp7wkaAbivsdoL6 8BH1nO8/UctMdrUD1uAtxAUhEEJHF27cj15Vo9QTPE6614QZXD9KGDW0dR3ln+MB nyrGAQBp9C9ZLeEv90+xxGJ2OXtw2sXnuRS+mo/hJCp94LAA3mVVTVaemPa9rkyd SKAQ+PUi3OQfO4DNEt+uXzkIL8qr1H4VI8DzFzqhQv8hADtu3YD8fxaFZ90YyHje EJh01O354wzNgUKkZKmx987KsH615FYrOw2L50WIAjbmmPbKZpvehzmzbQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCLi+Z6cJjnwMOP6GqVz4h3X1rV+MB8GA1UdIwQY MBaAFHBnRa2SNT2oqAyy4NIp1owu9T2yMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY0dkRnJaSTFQYWlvRExMZzBpbldqQzcxUGJJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOC9kMGFiZDAtYjExNC00ZTNhLWFlNTkt ZTIxNzYzYzY3MmZhLzEvY0dkRnJaSTFQYWlvRExMZzBpbldqQzcxUGJJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kOC9kMGFiZDAtYjExNC00ZTNhLWFlNTktZTIxNzYzYzY3MmZh LzEvY0dkRnJaSTFQYWlvRExMZzBpbldqQzcxUGJJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArHYQoGGE rSwB4BSdmgtRdGSNxsUkr5ePh7yA3hHOBBXYKbFVnpLBmYu7doAn/RKRO6ptBUA4 MZPK3eZ4IyRzRLVkyr4QJqArdYXrVYfX8gYB+ymuHoWBJQZyxUloAkOZnPF6p1Rq D6ixr8Cay335DzuV+P9aq3x7pyYIjIpmW22CtVSVCg7/gkQpapD0C60mEyXx0S34 ltQ0Ub1orbQDxg+D4MFgpnK+3PZK4l9pZpLe0fhZPaq4LBZV9Jw9lp85uHQC87Uw wx95dDVKnByFt07iayGGeEpA9pV2fOb69yQ64bhiIDUkquy1s6llp99gufq54RJ8 78BG9FCdpeauhQ== -----END CERTIFICATE-----Generated at Sat Dec 20 06:35:12 2025 by rpki-client