This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/e32293-673b-4fce-91cf-202d2453945c/1/cLpEaydfH7B3gkLA1jNipZqs81M.mft File: cLpEaydfH7B3gkLA1jNipZqs81M.mft (raw, json) Hash identifier: 9J1G4WVEPHa/TWP2zhW6Mb5sk1SbWsPUnLSvPtb7K1Q= Subject key identifier: 7E:CE:11:26:B8:9C:61:D3:06:CD:A5:9A:10:FD:D7:03:6B:D0:67:D4 Authority key identifier: 70:BA:44:6B:27:5F:1F:B0:77:82:42:C0:D6:33:62:A5:9A:AC:F3:53 Certificate issuer: /CN=70ba446b275f1fb0778242c0d63362a59aacf353 Certificate serial: 019B3D5A377A8CD84E959A53F9EF724E9253 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cLpEaydfH7B3gkLA1jNipZqs81M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/e32293-673b-4fce-91cf-202d2453945c/1/cLpEaydfH7B3gkLA1jNipZqs81M.mft Manifest number: 12 Signing time: Sat 20 Dec 2025 20:01:21 +0000 Manifest this update: Sat 20 Dec 2025 20:01:21 +0000 Manifest next update: Sun 21 Dec 2025 20:01:21 +0000 Files and hashes: 1: LgALOI5_I6jb53Ow_J_nnO3aXdQ.asa (hash: eU6LOPHHMrKuq0WuI7L7NZjJ1j5BudGRJxH8SR2SSVs=) 2: cLpEaydfH7B3gkLA1jNipZqs81M.crl (hash: irr7yAS1ssenN0cno38qnqEqOGL9CUbkdiZlQmPjY4E=) 3: fWsQfXTwChCVdlDOlOXfesWeWqM.roa (hash: c4AxEEQ54tqjlHruGrVXcwWSaIZbRWz+mayrtEvyH2g=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/e32293-673b-4fce-91cf-202d2453945c/1/cLpEaydfH7B3gkLA1jNipZqs81M.crl rsync://rpki.ripe.net/repository/DEFAULT/dd/e32293-673b-4fce-91cf-202d2453945c/1/cLpEaydfH7B3gkLA1jNipZqs81M.mft rsync://rpki.ripe.net/repository/DEFAULT/cLpEaydfH7B3gkLA1jNipZqs81M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 19:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:5a:37:7a:8c:d8:4e:95:9a:53:f9:ef:72:4e:92:53 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=70ba446b275f1fb0778242c0d63362a59aacf353 Validity Not Before: Dec 20 20:01:21 2025 GMT Not After : Dec 21 20:01:21 2025 GMT Subject: CN=7ece1126b89c61d306cda59a10fdd7036bd067d4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:3b:c1:cf:1c:4b:c8:e7:99:b9:da:68:25:51: f7:38:5c:bc:ea:98:71:70:a7:ca:c2:89:d3:4a:f5: 53:5c:f1:34:5d:7c:51:b8:7a:e1:35:79:01:8c:84: 92:9a:f3:95:ac:cc:e0:bc:d3:ad:a5:bb:69:5c:7c: fd:1e:a6:7b:74:be:4e:67:4a:37:dd:57:87:db:e4: ce:59:32:c0:4b:28:3f:a6:c8:f4:ee:bb:3f:35:e4: 79:07:fa:36:57:42:44:6e:9a:cb:16:82:44:d5:6a: 69:71:05:a0:8a:8b:41:01:4b:29:65:ff:82:06:7d: 6a:5f:96:22:83:48:16:48:de:50:37:8c:fc:d2:30: cd:0d:4e:f0:b1:a8:a1:d1:f1:c2:cd:19:f2:88:8b: 64:68:2f:4e:8d:87:a4:c5:47:d4:1c:47:1c:4b:43: d9:c6:70:7b:89:23:ab:d2:24:54:fa:07:a4:0f:60: 76:f6:59:a3:9c:7a:82:4f:38:00:58:8a:3d:ff:d6: 93:92:2e:cd:6a:c7:3b:ff:70:88:e2:89:39:40:fe: 7b:c0:46:4a:7b:4b:f2:74:3b:92:06:38:32:78:2d: 78:76:db:b5:ae:d2:04:32:d9:2e:77:c0:77:dd:1d: b0:b5:50:08:33:79:7c:4b:bf:97:ec:fd:a2:a6:38: aa:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:CE:11:26:B8:9C:61:D3:06:CD:A5:9A:10:FD:D7:03:6B:D0:67:D4 X509v3 Authority Key Identifier: keyid:70:BA:44:6B:27:5F:1F:B0:77:82:42:C0:D6:33:62:A5:9A:AC:F3:53 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cLpEaydfH7B3gkLA1jNipZqs81M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/e32293-673b-4fce-91cf-202d2453945c/1/cLpEaydfH7B3gkLA1jNipZqs81M.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/e32293-673b-4fce-91cf-202d2453945c/1/cLpEaydfH7B3gkLA1jNipZqs81M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ba:3f:db:dd:7b:dc:41:67:f3:b0:93:43:42:5f:8d:fe:d6:e8: ed:00:f3:65:3a:01:6f:8e:59:f6:66:59:c4:d1:e6:9b:1f:71: df:a7:39:dc:fc:c6:03:0f:c2:9f:fb:d1:69:a8:f0:4c:79:ff: 2b:17:2d:4e:80:2b:c5:91:60:06:57:c7:b1:4a:e6:4f:d7:09: 66:e6:a1:b7:31:d7:61:c9:72:ac:89:d0:2b:7e:fc:50:97:4e: 49:00:cd:9d:c0:d2:24:06:7e:90:1d:fd:57:8d:30:f7:06:77: f1:01:fa:5d:d2:ff:a7:01:9b:e2:d0:7a:39:df:23:b1:c6:b0: 19:07:bf:b6:0b:ad:8a:9f:83:c3:c3:1f:1c:55:59:9f:3c:88: fd:b0:2c:8a:8c:b0:75:5b:10:2e:91:0c:a0:b1:6a:dc:23:50: 96:ca:e2:02:8f:2f:07:c1:b5:1b:81:6b:f6:ba:3d:f7:95:f3: 67:12:4c:a4:6d:ba:62:50:de:cd:77:63:e3:94:f8:bf:48:7a: 4c:41:8b:a3:c9:d5:2f:8f:04:51:d4:b8:a4:e5:35:5a:df:c5: b3:b7:1c:f6:29:41:c8:47:fc:ff:a6:83:53:2a:ca:11:21:33: 1f:a7:90:19:23:2b:45:c8:94:d8:7f:a4:44:c1:1e:90:90:77: 9f:0f:90:ab -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9Wjd6jNhOlZpT+e9yTpJTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcwYmE0NDZiMjc1ZjFmYjA3NzgyNDJjMGQ2MzM2MmE1OWFh Y2YzNTMwHhcNMjUxMjIwMjAwMTIxWhcNMjUxMjIxMjAwMTIxWjAzMTEwLwYDVQQD Eyg3ZWNlMTEyNmI4OWM2MWQzMDZjZGE1OWExMGZkZDcwMzZiZDA2N2Q0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwzvBzxxLyOeZudpoJVH3OFy86phx cKfKwonTSvVTXPE0XXxRuHrhNXkBjISSmvOVrMzgvNOtpbtpXHz9HqZ7dL5OZ0o3 3VeH2+TOWTLASyg/psj07rs/NeR5B/o2V0JEbprLFoJE1WppcQWgiotBAUspZf+C Bn1qX5Yig0gWSN5QN4z80jDNDU7wsaih0fHCzRnyiItkaC9OjYekxUfUHEccS0PZ xnB7iSOr0iRU+gekD2B29lmjnHqCTzgAWIo9/9aTki7Nasc7/3CI4ok5QP57wEZK e0vydDuSBjgyeC14dtu1rtIEMtkud8B33R2wtVAIM3l8S7+X7P2ipjiqoQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFH7OESa4nGHTBs2lmhD91wNr0GfUMB8GA1UdIwQY MBaAFHC6RGsnXx+wd4JCwNYzYqWarPNTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY0xwRWF5ZGZIN0IzZ2tMQTFqTmlwWnFzODFNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZC9lMzIyOTMtNjczYi00ZmNlLTkxY2Yt MjAyZDI0NTM5NDVjLzEvY0xwRWF5ZGZIN0IzZ2tMQTFqTmlwWnFzODFNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZC9lMzIyOTMtNjczYi00ZmNlLTkxY2YtMjAyZDI0NTM5NDVj LzEvY0xwRWF5ZGZIN0IzZ2tMQTFqTmlwWnFzODFNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAuj/b3Xvc QWfzsJNDQl+N/tbo7QDzZToBb45Z9mZZxNHmmx9x36c53PzGAw/Cn/vRaajwTHn/ KxctToArxZFgBlfHsUrmT9cJZuahtzHXYclyrInQK378UJdOSQDNncDSJAZ+kB39 V40w9wZ38QH6XdL/pwGb4tB6Od8jscawGQe/tgutip+Dw8MfHFVZnzyI/bAsioyw dVsQLpEMoLFq3CNQlsriAo8vB8G1G4Fr9ro995XzZxJMpG26YlDezXdj45T4v0h6 TEGLo8nVL48EUdS4pOU1Wt/Fs7cc9ilByEf8/6aDUyrKESEzH6eQGSMrRciU2H+k RMEekJB3nw+Qqw== -----END CERTIFICATE-----Generated at Sun Dec 21 04:18:39 2025 by rpki-client