This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/b9a1a0-6ada-4dde-965b-46ff7ce2c140/1/cHdwf2aXiCaodeuNLrMzvthWlmc.mft File: cHdwf2aXiCaodeuNLrMzvthWlmc.mft (raw, json) Hash identifier: ECp9XBQoX4SusfhM80S+kOV/1xM2tSRgi2+PqynUifQ= Subject key identifier: 6E:85:BC:5A:B9:4D:E1:41:5F:82:59:F5:CF:3E:F5:68:92:8B:83:94 Authority key identifier: 70:77:70:7F:66:97:88:26:A8:75:EB:8D:2E:B3:33:BE:D8:56:96:67 Certificate issuer: /CN=7077707f66978826a875eb8d2eb333bed8569667 Certificate serial: 019B4438E9959C24D3C81BF1557F734FAE79 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cHdwf2aXiCaodeuNLrMzvthWlmc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/b9a1a0-6ada-4dde-965b-46ff7ce2c140/1/cHdwf2aXiCaodeuNLrMzvthWlmc.mft Manifest number: 0972 Signing time: Mon 22 Dec 2025 04:02:19 +0000 Manifest this update: Mon 22 Dec 2025 04:02:19 +0000 Manifest next update: Tue 23 Dec 2025 04:02:19 +0000 Files and hashes: 1: ZBqGiL5Lwt5_4rzPo7SO0cTda9c.roa (hash: KELG75sz8Tw2WawKyeiPVA4v+ezxNcK7f4e9XzFuUUw=) 2: cHdwf2aXiCaodeuNLrMzvthWlmc.crl (hash: pno7qTO0rEtrodgo4Xk7u35GY6zwFIzVJNg8UcoE8L4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/b9a1a0-6ada-4dde-965b-46ff7ce2c140/1/cHdwf2aXiCaodeuNLrMzvthWlmc.crl rsync://rpki.ripe.net/repository/DEFAULT/eb/b9a1a0-6ada-4dde-965b-46ff7ce2c140/1/cHdwf2aXiCaodeuNLrMzvthWlmc.mft rsync://rpki.ripe.net/repository/DEFAULT/cHdwf2aXiCaodeuNLrMzvthWlmc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 04:02:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:44:38:e9:95:9c:24:d3:c8:1b:f1:55:7f:73:4f:ae:79 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7077707f66978826a875eb8d2eb333bed8569667 Validity Not Before: Dec 22 04:02:19 2025 GMT Not After : Dec 23 04:02:19 2025 GMT Subject: CN=6e85bc5ab94de1415f8259f5cf3ef568928b8394 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:38:6b:16:bc:9a:3b:7f:15:65:d9:73:6c:8a: cb:01:82:62:47:a9:32:40:8d:ad:bd:30:d7:3c:a3: 42:4f:4c:60:a8:d7:10:d6:0b:c7:f1:93:94:2f:ed: 28:92:8e:8c:fb:d4:56:68:1e:06:7e:8f:0c:28:88: 9d:d2:48:f0:7a:ff:07:47:8c:83:b9:88:c2:b0:4f: a1:45:dc:8f:2f:4f:a5:e8:33:7e:0c:d9:69:86:46: 9d:13:ee:c8:ff:3a:1b:d6:99:28:5a:c6:87:39:ce: 46:f0:49:50:7c:b0:38:a2:6b:eb:39:02:26:52:74: c5:2d:09:35:54:ed:40:ff:a3:0e:31:d7:42:da:66: 3c:a1:d9:c9:32:6f:ea:e6:4f:6a:dc:5d:51:34:3a: 5d:b0:8e:2a:8d:62:e2:de:fe:8b:14:0c:d0:34:bf: 66:e5:7d:29:c6:52:42:f0:4a:12:c3:d9:34:0f:3c: 71:ce:4b:e0:95:23:cc:08:26:ed:85:82:56:fe:39: 94:11:40:c7:91:12:08:3c:73:7c:af:cd:e1:f8:f2: 04:f2:4c:47:d1:bb:4d:d6:8e:66:1c:ca:df:c4:69: 0a:c7:83:90:98:15:8b:45:ef:42:ff:4e:c1:01:50: bc:ca:af:77:0d:14:3b:8f:e4:db:07:91:0c:3b:81: fb:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:85:BC:5A:B9:4D:E1:41:5F:82:59:F5:CF:3E:F5:68:92:8B:83:94 X509v3 Authority Key Identifier: keyid:70:77:70:7F:66:97:88:26:A8:75:EB:8D:2E:B3:33:BE:D8:56:96:67 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cHdwf2aXiCaodeuNLrMzvthWlmc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/b9a1a0-6ada-4dde-965b-46ff7ce2c140/1/cHdwf2aXiCaodeuNLrMzvthWlmc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/b9a1a0-6ada-4dde-965b-46ff7ce2c140/1/cHdwf2aXiCaodeuNLrMzvthWlmc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5b:d6:22:a6:b8:40:44:af:50:d8:b8:f1:f4:b4:1e:fd:0a:53: 5a:44:eb:3e:8f:11:bf:2a:77:52:87:79:8a:46:47:32:02:e5: 99:d6:b6:3e:d9:d4:02:7d:68:d1:71:65:9a:1d:f9:aa:ad:3f: f8:4b:fa:87:d7:3c:96:20:3d:bd:ad:00:b6:02:04:92:ba:71: 1b:48:d9:b9:17:dc:96:ae:fb:92:01:2f:7f:2c:b3:df:ea:9c: 97:ac:ef:bb:4c:d5:27:85:21:9e:78:0d:d4:20:33:a4:b1:46: 2f:77:5a:7b:ec:9e:70:4f:1c:e7:f8:f2:40:14:01:c7:56:c2: 18:07:86:86:98:1e:4b:52:27:a2:2d:d4:a2:93:4e:63:9d:b5: 51:23:9f:dc:7c:7b:9c:44:be:60:f1:77:dc:0a:6c:f4:1c:ac: 6f:24:a2:18:74:99:69:b2:3b:63:ae:14:8a:92:92:2e:19:24: 4b:1f:13:46:a7:41:ac:0e:1c:eb:5d:94:7e:e7:6d:68:e0:69: 2b:6c:5a:d5:db:1c:bd:1e:aa:bc:8a:c6:a8:d2:35:c6:8c:69: 5d:02:e2:91:e2:24:b1:47:38:6d:62:93:eb:6c:c8:9f:fa:1e: fa:8c:93:21:56:d1:ff:2c:fc:31:fb:df:62:f1:27:95:67:2a: be:1c:c7:72 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtEOOmVnCTTyBvxVX9zT655MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcwNzc3MDdmNjY5Nzg4MjZhODc1ZWI4ZDJlYjMzM2JlZDg1 Njk2NjcwHhcNMjUxMjIyMDQwMjE5WhcNMjUxMjIzMDQwMjE5WjAzMTEwLwYDVQQD Eyg2ZTg1YmM1YWI5NGRlMTQxNWY4MjU5ZjVjZjNlZjU2ODkyOGI4Mzk0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5DhrFryaO38VZdlzbIrLAYJiR6ky QI2tvTDXPKNCT0xgqNcQ1gvH8ZOUL+0oko6M+9RWaB4Gfo8MKIid0kjwev8HR4yD uYjCsE+hRdyPL0+l6DN+DNlphkadE+7I/zob1pkoWsaHOc5G8ElQfLA4omvrOQIm UnTFLQk1VO1A/6MOMddC2mY8odnJMm/q5k9q3F1RNDpdsI4qjWLi3v6LFAzQNL9m 5X0pxlJC8EoSw9k0DzxxzkvglSPMCCbthYJW/jmUEUDHkRIIPHN8r83h+PIE8kxH 0btN1o5mHMrfxGkKx4OQmBWLRe9C/07BAVC8yq93DRQ7j+TbB5EMO4H7hQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFG6FvFq5TeFBX4JZ9c8+9WiSi4OUMB8GA1UdIwQY MBaAFHB3cH9ml4gmqHXrjS6zM77YVpZnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY0hkd2YyYVhpQ2FvZGV1TkxyTXp2dGhXbG1jLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi9iOWExYTAtNmFkYS00ZGRlLTk2NWIt NDZmZjdjZTJjMTQwLzEvY0hkd2YyYVhpQ2FvZGV1TkxyTXp2dGhXbG1jLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYi9iOWExYTAtNmFkYS00ZGRlLTk2NWItNDZmZjdjZTJjMTQw LzEvY0hkd2YyYVhpQ2FvZGV1TkxyTXp2dGhXbG1jLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAW9YiprhA RK9Q2Ljx9LQe/QpTWkTrPo8Rvyp3Uod5ikZHMgLlmda2PtnUAn1o0XFlmh35qq0/ +Ev6h9c8liA9va0AtgIEkrpxG0jZuRfclq77kgEvfyyz3+qcl6zvu0zVJ4UhnngN 1CAzpLFGL3dae+yecE8c5/jyQBQBx1bCGAeGhpgeS1Inoi3UopNOY521USOf3Hx7 nES+YPF33Aps9BysbySiGHSZabI7Y64UipKSLhkkSx8TRqdBrA4c612UfudtaOBp K2xa1dscvR6qvIrGqNI1xoxpXQLikeIksUc4bWKT62zIn/oe+oyTIVbR/yz8Mfvf YvEnlWcqvhzHcg== -----END CERTIFICATE-----Generated at Mon Dec 22 11:28:16 2025 by rpki-client