This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/88cc50-2273-45ff-adb5-eccd665f1f03/1/cH89q67iT8Q7hlqvo_PJwvNkv8k.mft File: cH89q67iT8Q7hlqvo_PJwvNkv8k.mft (raw, json) Hash identifier: g5NKaDTy5P7VyUX2wLjx6Pk4Xfyuxk/wMRYA5AoDl3o= Subject key identifier: A0:B0:D4:CC:97:C0:F1:4F:F6:39:4D:FE:EF:2F:50:21:C9:92:1B:E6 Authority key identifier: 70:7F:3D:AB:AE:E2:4F:C4:3B:86:5A:AF:A3:F3:C9:C2:F3:64:BF:C9 Certificate issuer: /CN=707f3dabaee24fc43b865aafa3f3c9c2f364bfc9 Certificate serial: 019B6CC61FE0112643C5689F1912A4A03656 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cH89q67iT8Q7hlqvo_PJwvNkv8k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/88cc50-2273-45ff-adb5-eccd665f1f03/1/cH89q67iT8Q7hlqvo_PJwvNkv8k.mft Manifest number: 1734 Signing time: Tue 30 Dec 2025 01:01:22 +0000 Manifest this update: Tue 30 Dec 2025 01:01:22 +0000 Manifest next update: Wed 31 Dec 2025 01:01:22 +0000 Files and hashes: 1: MmMjPcmgSnmpat_UrnnkwrG8N3M.roa (hash: P+6oU+/zVxV3KfOFEMlrjbqkg2yguA/0UthTHnReUm8=) 2: cH89q67iT8Q7hlqvo_PJwvNkv8k.crl (hash: SDChOSGaxsag5vRM8viImYxgfOX9NW6YOMGkOelQ9gE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/88cc50-2273-45ff-adb5-eccd665f1f03/1/cH89q67iT8Q7hlqvo_PJwvNkv8k.crl rsync://rpki.ripe.net/repository/DEFAULT/eb/88cc50-2273-45ff-adb5-eccd665f1f03/1/cH89q67iT8Q7hlqvo_PJwvNkv8k.mft rsync://rpki.ripe.net/repository/DEFAULT/cH89q67iT8Q7hlqvo_PJwvNkv8k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 31 Dec 2025 00:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:6c:c6:1f:e0:11:26:43:c5:68:9f:19:12:a4:a0:36:56 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=707f3dabaee24fc43b865aafa3f3c9c2f364bfc9 Validity Not Before: Dec 30 01:01:22 2025 GMT Not After : Dec 31 01:01:22 2025 GMT Subject: CN=a0b0d4cc97c0f14ff6394dfeef2f5021c9921be6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:68:86:b2:cf:da:28:51:e9:b6:54:b3:3c:37: a3:8a:61:43:c5:54:6c:bf:50:db:79:f4:9e:4d:01: c7:77:1b:aa:68:90:57:6a:86:41:c8:af:67:ff:1e: 16:c2:e7:79:ac:a2:83:39:7a:3c:44:83:11:1a:fa: a8:a7:a3:4f:0d:55:41:b7:33:4d:cc:ca:2f:07:7f: c2:ea:85:77:b3:13:37:fb:bc:17:44:44:b7:7d:d9: d3:30:5e:0f:5a:57:ba:b0:1f:70:78:09:d5:40:95: df:a2:96:6f:91:f8:bd:22:83:a1:f0:cd:43:36:a7: 2d:18:10:c7:c1:04:70:3a:13:de:d5:13:f6:32:b7: 86:99:62:e8:d4:46:7d:4c:01:e4:73:2b:af:f6:dd: 35:ae:25:c1:30:18:21:65:bb:e3:cf:72:f8:69:48: f1:02:0f:21:de:c7:d0:5a:7f:16:be:d0:cb:64:8f: 2d:e9:bb:80:bd:3d:55:76:d5:32:3e:60:90:7a:9d: 78:32:75:bc:38:75:36:0a:9e:bb:c6:c1:60:cb:89: ca:a6:0b:b8:f0:81:c1:54:7a:84:34:6c:cf:2d:8a: 8d:b1:0f:30:52:39:79:52:f6:48:e4:77:fa:9d:28: 42:53:3b:bb:0f:60:92:fa:3d:d8:57:b7:88:02:d5: e9:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:B0:D4:CC:97:C0:F1:4F:F6:39:4D:FE:EF:2F:50:21:C9:92:1B:E6 X509v3 Authority Key Identifier: keyid:70:7F:3D:AB:AE:E2:4F:C4:3B:86:5A:AF:A3:F3:C9:C2:F3:64:BF:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cH89q67iT8Q7hlqvo_PJwvNkv8k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/88cc50-2273-45ff-adb5-eccd665f1f03/1/cH89q67iT8Q7hlqvo_PJwvNkv8k.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/88cc50-2273-45ff-adb5-eccd665f1f03/1/cH89q67iT8Q7hlqvo_PJwvNkv8k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 44:5e:5a:93:96:d5:8f:99:8f:38:e7:8f:14:12:cc:2b:77:b2: 54:f9:4f:6a:e5:18:0f:7d:34:5f:bc:98:73:d3:2c:8a:27:be: 28:90:72:4a:d0:37:f9:e5:db:f8:97:60:27:81:bf:7e:52:35: 60:fb:d9:5c:2a:19:08:ed:8d:43:cb:ef:0d:87:ff:df:96:18: db:bb:d1:3b:fc:ba:51:fb:ef:ef:fc:5b:bb:0e:46:41:bf:f1: 6f:65:94:5d:01:04:23:aa:e1:42:b8:84:c8:98:0a:5c:9e:86: 69:ae:ed:f5:7c:6b:1f:8e:16:7d:60:ce:8f:b3:cb:6b:1a:97: 4e:51:c4:4f:76:40:fd:d6:5f:47:27:25:58:85:12:86:20:b1: ec:82:84:71:ba:94:2a:dd:c5:59:fe:9c:3b:46:06:97:9f:0f: cc:dc:8c:c8:ff:cb:ba:68:88:1c:95:90:92:c1:84:88:a3:9c: 43:99:32:97:8f:74:8b:02:e8:28:ec:c8:a5:e0:24:38:17:34: 2a:e1:2f:b8:32:ed:28:ba:25:dd:04:3a:f5:d7:fe:81:31:e0: 5c:f4:e0:10:55:12:18:41:bb:e3:09:41:e9:c1:54:e3:60:56: 4e:46:9a:e3:d7:71:bb:5a:16:34:da:cc:ba:c6:8c:4d:da:64: 12:80:e1:0b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtsxh/gESZDxWifGRKkoDZWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcwN2YzZGFiYWVlMjRmYzQzYjg2NWFhZmEzZjNjOWMyZjM2 NGJmYzkwHhcNMjUxMjMwMDEwMTIyWhcNMjUxMjMxMDEwMTIyWjAzMTEwLwYDVQQD EyhhMGIwZDRjYzk3YzBmMTRmZjYzOTRkZmVlZjJmNTAyMWM5OTIxYmU2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyGiGss/aKFHptlSzPDejimFDxVRs v1DbefSeTQHHdxuqaJBXaoZByK9n/x4Wwud5rKKDOXo8RIMRGvqop6NPDVVBtzNN zMovB3/C6oV3sxM3+7wXRES3fdnTMF4PWle6sB9weAnVQJXfopZvkfi9IoOh8M1D NqctGBDHwQRwOhPe1RP2MreGmWLo1EZ9TAHkcyuv9t01riXBMBghZbvjz3L4aUjx Ag8h3sfQWn8WvtDLZI8t6buAvT1VdtUyPmCQep14MnW8OHU2Cp67xsFgy4nKpgu4 8IHBVHqENGzPLYqNsQ8wUjl5UvZI5Hf6nShCUzu7D2CS+j3YV7eIAtXpLwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKCw1MyXwPFP9jlN/u8vUCHJkhvmMB8GA1UdIwQY MBaAFHB/Pauu4k/EO4Zar6PzycLzZL/JMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY0g4OXE2N2lUOFE3aGxxdm9fUEp3dk5rdjhrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi84OGNjNTAtMjI3My00NWZmLWFkYjUt ZWNjZDY2NWYxZjAzLzEvY0g4OXE2N2lUOFE3aGxxdm9fUEp3dk5rdjhrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYi84OGNjNTAtMjI3My00NWZmLWFkYjUtZWNjZDY2NWYxZjAz LzEvY0g4OXE2N2lUOFE3aGxxdm9fUEp3dk5rdjhrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARF5ak5bV j5mPOOePFBLMK3eyVPlPauUYD300X7yYc9Msiie+KJByStA3+eXb+JdgJ4G/flI1 YPvZXCoZCO2NQ8vvDYf/35YY27vRO/y6Ufvv7/xbuw5GQb/xb2WUXQEEI6rhQriE yJgKXJ6Gaa7t9XxrH44WfWDOj7PLaxqXTlHET3ZA/dZfRyclWIUShiCx7IKEcbqU Kt3FWf6cO0YGl58PzNyMyP/LumiIHJWQksGEiKOcQ5kyl490iwLoKOzIpeAkOBc0 KuEvuDLtKLol3QQ69df+gTHgXPTgEFUSGEG74wlB6cFU42BWTkaa49dxu1oWNNrM usaMTdpkEoDhCw== -----END CERTIFICATE-----Generated at Tue Dec 30 08:51:57 2025 by rpki-client