This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/e2e119-fd78-4b1a-b16a-987da4392056/1/cS-cs8KYsVC-t5CAN290verEOKw.mft File: cS-cs8KYsVC-t5CAN290verEOKw.mft (raw, json) Hash identifier: e7BUTKBwwW+teX5dHSUE1XbNXGjafrpJI/cG2gioT6c= Subject key identifier: D4:B4:D4:78:55:5A:C8:70:A2:D3:27:A8:F7:A2:E9:FD:53:3B:F8:0A Authority key identifier: 71:2F:9C:B3:C2:98:B1:50:BE:B7:90:80:37:6F:74:BD:EA:C4:38:AC Certificate issuer: /CN=712f9cb3c298b150beb79080376f74bdeac438ac Certificate serial: 019B3CB4FA2407B33DA7B3740839B4E40E3D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cS-cs8KYsVC-t5CAN290verEOKw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/e2e119-fd78-4b1a-b16a-987da4392056/1/cS-cs8KYsVC-t5CAN290verEOKw.mft Manifest number: 178E Signing time: Sat 20 Dec 2025 17:00:52 +0000 Manifest this update: Sat 20 Dec 2025 17:00:52 +0000 Manifest next update: Sun 21 Dec 2025 17:00:52 +0000 Files and hashes: 1: a8fiimQdU18P-F2tOQH9sjS2Djw.asa (hash: SNczP7mStVed+rVQzNAM+CHW/D0tMUWtQ+EIBgCl2dM=) 2: cFDNySQq-BoAAus-f6QDofmomPs.asa (hash: bmD9h4TJUpSAXYuI/gTQnCZ438ljBruFVbyjbe3Styo=) 3: cS-cs8KYsVC-t5CAN290verEOKw.crl (hash: bzBsGGyfVT/xzHoPxVbHvyPzFiGg5XlEGhXoO1Rpz9Y=) 4: fXIhT7Ydqm5HytjfeB-NmrbrFRI.roa (hash: EsiKR1dMs1SsEJue6V9U6b9V/XFN9Zx4S62/KpEzEqg=) 5: kzy2fS8wPguMf8v9iXU1Xd6RCJE.roa (hash: T6hfblwKGrCK3Ap3pOGRw0serguSainDEw/sPRZW+uI=) 6: mprfUYWLFFvcoporgivp8S18oz0.roa (hash: uZGl5TRJLtjM+YCzDi4j+2EG/6oM3QIc/9AdR4GUda8=) 7: nqfgPZyBGUMJjXZ82ONF8M_wX2o.roa (hash: cAq2+4Plhv+25M/XxaCNm4UA7TT+v8QHyzJDH25TDn4=) 8: zShwLkkDPGWGSwVW1WaNYQqy4QY.roa (hash: cc7GaLAsHY9PJBKnUzOfoPoWS1viq2gLzvzxAmdtn+k=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/e2e119-fd78-4b1a-b16a-987da4392056/1/cS-cs8KYsVC-t5CAN290verEOKw.crl rsync://rpki.ripe.net/repository/DEFAULT/d9/e2e119-fd78-4b1a-b16a-987da4392056/1/cS-cs8KYsVC-t5CAN290verEOKw.mft rsync://rpki.ripe.net/repository/DEFAULT/cS-cs8KYsVC-t5CAN290verEOKw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 17:00:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:b4:fa:24:07:b3:3d:a7:b3:74:08:39:b4:e4:0e:3d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=712f9cb3c298b150beb79080376f74bdeac438ac Validity Not Before: Dec 20 17:00:52 2025 GMT Not After : Dec 21 17:00:52 2025 GMT Subject: CN=d4b4d478555ac870a2d327a8f7a2e9fd533bf80a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:f3:6b:52:6b:5d:bd:6b:cb:e2:8a:d2:0b:10: bf:59:26:61:3e:3e:40:a4:ae:3f:ee:05:ef:54:98: 18:0b:fd:74:fc:c5:80:ba:14:d6:54:8c:cf:fe:55: 60:2c:1b:9d:16:d5:9a:e6:96:a2:72:ce:4b:81:ac: c8:d8:7d:4c:c5:e8:f9:28:ea:b9:9a:36:18:12:99: 0b:7a:6a:83:2b:c6:19:1f:78:4d:0d:5a:63:17:62: da:4f:25:a3:5a:29:19:8c:bf:f7:32:c8:73:03:a4: c3:88:16:ae:11:cd:19:e1:60:65:fc:c7:43:28:e5: 4d:30:4a:80:96:73:92:5a:97:91:0c:9f:65:b6:30: 12:a9:53:31:a3:45:03:fa:73:65:03:99:7e:7f:82: 49:27:37:ba:02:18:78:c8:a3:0f:7b:53:9c:33:f5: 92:6d:0d:74:a3:40:38:eb:7f:3d:97:77:6b:26:e2: 60:96:ab:bf:e2:07:ae:6f:dc:21:56:ab:a4:52:f8: cf:4c:81:47:c0:7b:de:22:9c:ab:6e:a6:e1:8a:f5: 3e:c9:8b:24:3d:77:01:c0:ca:ff:bc:c3:fa:df:b6: b5:9a:31:c0:6f:64:df:3a:be:92:48:22:20:2c:d7: 49:a0:46:8a:cd:b5:72:68:e7:25:2f:ea:6f:49:e9: c0:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:B4:D4:78:55:5A:C8:70:A2:D3:27:A8:F7:A2:E9:FD:53:3B:F8:0A X509v3 Authority Key Identifier: keyid:71:2F:9C:B3:C2:98:B1:50:BE:B7:90:80:37:6F:74:BD:EA:C4:38:AC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cS-cs8KYsVC-t5CAN290verEOKw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/e2e119-fd78-4b1a-b16a-987da4392056/1/cS-cs8KYsVC-t5CAN290verEOKw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/e2e119-fd78-4b1a-b16a-987da4392056/1/cS-cs8KYsVC-t5CAN290verEOKw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 30:b1:4e:42:7d:ae:99:ca:74:59:c9:f9:10:2f:4b:ba:e9:b6: ba:40:eb:08:77:3c:fe:80:4a:d9:d8:4d:73:c0:9b:d5:38:fc: 12:f9:12:32:0f:0a:99:b1:f0:4b:d9:cb:07:8f:c6:16:10:65: d1:ae:11:cb:4f:9f:88:ef:61:7c:5d:af:c9:89:cb:2f:12:60: 2d:39:3b:8a:8c:8d:d0:ba:2b:16:29:27:2c:d3:e6:e9:50:dd: 7d:9e:d8:5b:da:36:b4:b1:54:50:c4:e0:bd:c6:36:fa:28:5b: 14:df:68:02:82:34:4b:09:79:48:fb:0b:6f:9f:da:5a:43:72: f6:00:96:6d:65:b6:5f:32:4d:02:38:3d:3d:db:c9:d3:c3:c7: 68:b3:65:3e:7f:a9:9d:26:42:aa:48:38:41:38:48:55:e9:8b: 34:1d:31:f4:13:8e:a6:f6:4a:a5:d4:45:6c:bf:ee:b5:ca:95: 85:f2:36:e5:c1:b9:7a:2e:1a:61:4b:53:c6:9b:94:fe:e6:ef: 38:f4:8b:3b:14:41:5c:77:70:43:05:b7:e9:ae:95:89:e9:46: d3:aa:93:c7:33:b0:56:75:83:7c:33:cf:07:e4:21:7f:a7:c3: f0:f4:f0:19:13:c7:22:1b:e6:5c:a2:f5:11:b0:73:92:e1:a7: b7:dd:6d:08 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs8tPokB7M9p7N0CDm05A49MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcxMmY5Y2IzYzI5OGIxNTBiZWI3OTA4MDM3NmY3NGJkZWFj NDM4YWMwHhcNMjUxMjIwMTcwMDUyWhcNMjUxMjIxMTcwMDUyWjAzMTEwLwYDVQQD EyhkNGI0ZDQ3ODU1NWFjODcwYTJkMzI3YThmN2EyZTlmZDUzM2JmODBhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzfNrUmtdvWvL4orSCxC/WSZhPj5A pK4/7gXvVJgYC/10/MWAuhTWVIzP/lVgLBudFtWa5paics5LgazI2H1Mxej5KOq5 mjYYEpkLemqDK8YZH3hNDVpjF2LaTyWjWikZjL/3MshzA6TDiBauEc0Z4WBl/MdD KOVNMEqAlnOSWpeRDJ9ltjASqVMxo0UD+nNlA5l+f4JJJze6Ahh4yKMPe1OcM/WS bQ10o0A46389l3drJuJglqu/4geub9whVqukUvjPTIFHwHveIpyrbqbhivU+yYsk PXcBwMr/vMP637a1mjHAb2TfOr6SSCIgLNdJoEaKzbVyaOclL+pvSenACQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNS01HhVWshwotMnqPei6f1TO/gKMB8GA1UdIwQY MBaAFHEvnLPCmLFQvreQgDdvdL3qxDisMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY1MtY3M4S1lzVkMtdDVDQU4yOTB2ZXJFT0t3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS9lMmUxMTktZmQ3OC00YjFhLWIxNmEt OTg3ZGE0MzkyMDU2LzEvY1MtY3M4S1lzVkMtdDVDQU4yOTB2ZXJFT0t3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kOS9lMmUxMTktZmQ3OC00YjFhLWIxNmEtOTg3ZGE0MzkyMDU2 LzEvY1MtY3M4S1lzVkMtdDVDQU4yOTB2ZXJFT0t3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMLFOQn2u mcp0Wcn5EC9Luum2ukDrCHc8/oBK2dhNc8Cb1Tj8EvkSMg8KmbHwS9nLB4/GFhBl 0a4Ry0+fiO9hfF2vyYnLLxJgLTk7ioyN0LorFiknLNPm6VDdfZ7YW9o2tLFUUMTg vcY2+ihbFN9oAoI0Swl5SPsLb5/aWkNy9gCWbWW2XzJNAjg9PdvJ08PHaLNlPn+p nSZCqkg4QThIVemLNB0x9BOOpvZKpdRFbL/utcqVhfI25cG5ei4aYUtTxpuU/ubv OPSLOxRBXHdwQwW36a6VielG06qTxzOwVnWDfDPPB+Qhf6fD8PTwGRPHIhvmXKL1 EbBzkuGnt91tCA== -----END CERTIFICATE-----Generated at Sun Dec 21 02:02:28 2025 by rpki-client