This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/ba81b6-1282-455f-8c59-d0e24f017088/1/cM7mK3lHLcrlHq1NjqBpI4cPUZc.mft File: cM7mK3lHLcrlHq1NjqBpI4cPUZc.mft (raw, json) Hash identifier: 2psu5agxSZ6HzWG3ZASOYNeRs7qokcHGiftr5m7ibW0= Subject key identifier: 23:0D:D8:CB:20:5F:00:DE:EC:68:19:63:F1:1D:64:91:BA:23:F4:83 Authority key identifier: 70:CE:E6:2B:79:47:2D:CA:E5:1E:AD:4D:8E:A0:69:23:87:0F:51:97 Certificate issuer: /CN=70cee62b79472dcae51ead4d8ea06923870f5197 Certificate serial: 019B4C5ED26C1BEAFD92E96F8E3FC5574BE8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cM7mK3lHLcrlHq1NjqBpI4cPUZc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/ba81b6-1282-455f-8c59-d0e24f017088/1/cM7mK3lHLcrlHq1NjqBpI4cPUZc.mft Manifest number: 178C Signing time: Tue 23 Dec 2025 18:00:41 +0000 Manifest this update: Tue 23 Dec 2025 18:00:41 +0000 Manifest next update: Wed 24 Dec 2025 18:00:41 +0000 Files and hashes: 1: cM7mK3lHLcrlHq1NjqBpI4cPUZc.crl (hash: lxNbCq8PZODxIhzvJxAnZJRurfLgLAnScP9vs83+OXM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/ba81b6-1282-455f-8c59-d0e24f017088/1/cM7mK3lHLcrlHq1NjqBpI4cPUZc.crl rsync://rpki.ripe.net/repository/DEFAULT/da/ba81b6-1282-455f-8c59-d0e24f017088/1/cM7mK3lHLcrlHq1NjqBpI4cPUZc.mft rsync://rpki.ripe.net/repository/DEFAULT/cM7mK3lHLcrlHq1NjqBpI4cPUZc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 24 Dec 2025 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4c:5e:d2:6c:1b:ea:fd:92:e9:6f:8e:3f:c5:57:4b:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=70cee62b79472dcae51ead4d8ea06923870f5197 Validity Not Before: Dec 23 18:00:41 2025 GMT Not After : Dec 24 18:00:41 2025 GMT Subject: CN=230dd8cb205f00deec681963f11d6491ba23f483 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:da:53:51:f6:8e:16:c3:41:0a:ff:46:73:41: 47:a5:cc:bc:20:0e:19:33:d3:32:d9:c3:09:32:7f: f4:e3:bb:28:89:99:d9:ce:ce:1b:99:fc:73:7b:28: 4f:c0:81:a8:e0:b2:39:aa:d2:58:67:c9:67:3b:b1: cb:e9:ba:ea:7e:d4:8a:27:4b:a6:f5:9e:0e:39:9f: 1a:a7:bf:ce:e7:a8:b1:d8:ce:b6:ec:93:e8:83:23: 57:07:61:ef:88:0e:36:ca:8e:c4:ac:9a:4f:37:48: 8e:7c:14:d8:b8:4f:58:f8:b3:8c:26:e0:cf:e1:d0: ea:49:23:13:c2:eb:4d:73:be:80:22:70:13:57:7d: ef:41:03:38:68:f6:c0:48:8e:3a:62:fc:dd:00:1f: 87:08:4b:f9:e5:b6:31:68:ef:0e:2c:14:7b:9c:e9: 29:dc:c1:b6:d3:b5:23:e7:31:3f:98:0a:81:a6:d1: 26:c5:33:ae:b8:83:f7:f3:4e:4e:aa:21:fb:1e:63: e4:52:1d:c9:62:e1:84:e1:af:6e:69:3b:26:86:29: 56:e2:59:5b:12:dc:fc:23:2e:52:4c:e2:5a:62:09: 72:56:eb:64:a6:ea:d2:9d:de:4b:db:6b:8b:24:52: 26:22:e5:c0:62:5e:c4:33:7d:1e:70:29:df:ee:ee: fc:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:0D:D8:CB:20:5F:00:DE:EC:68:19:63:F1:1D:64:91:BA:23:F4:83 X509v3 Authority Key Identifier: keyid:70:CE:E6:2B:79:47:2D:CA:E5:1E:AD:4D:8E:A0:69:23:87:0F:51:97 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cM7mK3lHLcrlHq1NjqBpI4cPUZc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/ba81b6-1282-455f-8c59-d0e24f017088/1/cM7mK3lHLcrlHq1NjqBpI4cPUZc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/da/ba81b6-1282-455f-8c59-d0e24f017088/1/cM7mK3lHLcrlHq1NjqBpI4cPUZc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1d:51:ad:bb:8d:bc:e6:a7:4d:02:09:95:66:2d:39:fc:5e:51: 97:e4:d9:5d:e8:66:96:42:f6:14:a8:96:e2:63:94:e8:3c:c4: ae:8f:17:86:23:24:21:fe:d0:58:75:2f:96:bf:f2:3d:0f:cd: b9:10:d7:2a:1f:cd:62:71:1a:bc:f6:8d:5b:4b:31:18:29:e3: c2:3e:5a:be:0e:e5:61:52:53:1b:fd:cc:ec:44:71:a3:7b:ee: 7a:de:b8:53:71:a5:94:f5:82:cf:ea:18:4f:ce:af:c5:97:b7: 64:15:c7:3d:2a:1a:dd:ba:66:6f:c8:f9:c5:fc:cc:3d:8c:4e: c3:1d:6b:1f:b3:06:fc:72:3c:f9:47:77:33:23:e0:1f:8d:34: 3f:5e:e6:c2:ce:b4:ac:aa:66:46:1b:4c:9f:21:2a:e4:e8:3d: f5:2b:39:97:55:eb:41:6c:ae:59:68:92:36:37:91:be:36:1b: 58:ce:1e:19:59:a7:ff:a7:db:22:15:ac:ad:0f:29:25:a7:31: 37:fc:10:21:ab:77:f2:9b:b0:e6:0b:fe:7b:e7:26:c2:ab:e6: 3d:ea:db:0b:3d:9c:9c:af:71:5f:be:17:55:1d:f3:dd:67:19: 7f:8b:d0:37:52:10:51:ae:b9:de:98:74:b5:d8:f5:37:84:15: b8:a3:79:8a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtMXtJsG+r9kulvjj/FV0voMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcwY2VlNjJiNzk0NzJkY2FlNTFlYWQ0ZDhlYTA2OTIzODcw ZjUxOTcwHhcNMjUxMjIzMTgwMDQxWhcNMjUxMjI0MTgwMDQxWjAzMTEwLwYDVQQD EygyMzBkZDhjYjIwNWYwMGRlZWM2ODE5NjNmMTFkNjQ5MWJhMjNmNDgzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz9pTUfaOFsNBCv9Gc0FHpcy8IA4Z M9My2cMJMn/047soiZnZzs4bmfxzeyhPwIGo4LI5qtJYZ8lnO7HL6brqftSKJ0um 9Z4OOZ8ap7/O56ix2M627JPogyNXB2HviA42yo7ErJpPN0iOfBTYuE9Y+LOMJuDP 4dDqSSMTwutNc76AInATV33vQQM4aPbASI46YvzdAB+HCEv55bYxaO8OLBR7nOkp 3MG207Uj5zE/mAqBptEmxTOuuIP3805OqiH7HmPkUh3JYuGE4a9uaTsmhilW4llb Etz8Iy5STOJaYglyVutkpurSnd5L22uLJFImIuXAYl7EM30ecCnf7u78CwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCMN2MsgXwDe7GgZY/EdZJG6I/SDMB8GA1UdIwQY MBaAFHDO5it5Ry3K5R6tTY6gaSOHD1GXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY003bUszbEhMY3JsSHExTmpxQnBJNGNQVVpjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYS9iYTgxYjYtMTI4Mi00NTVmLThjNTkt ZDBlMjRmMDE3MDg4LzEvY003bUszbEhMY3JsSHExTmpxQnBJNGNQVVpjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYS9iYTgxYjYtMTI4Mi00NTVmLThjNTktZDBlMjRmMDE3MDg4 LzEvY003bUszbEhMY3JsSHExTmpxQnBJNGNQVVpjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHVGtu428 5qdNAgmVZi05/F5Rl+TZXehmlkL2FKiW4mOU6DzEro8XhiMkIf7QWHUvlr/yPQ/N uRDXKh/NYnEavPaNW0sxGCnjwj5avg7lYVJTG/3M7ERxo3vuet64U3GllPWCz+oY T86vxZe3ZBXHPSoa3bpmb8j5xfzMPYxOwx1rH7MG/HI8+Ud3MyPgH400P17mws60 rKpmRhtMnyEq5Og99Ss5l1XrQWyuWWiSNjeRvjYbWM4eGVmn/6fbIhWsrQ8pJacx N/wQIat38puw5gv+e+cmwqvmPerbCz2cnK9xX74XVR3z3WcZf4vQN1IQUa653ph0 tdj1N4QVuKN5ig== -----END CERTIFICATE-----Generated at Wed Dec 24 03:32:19 2025 by rpki-client