This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/cab149-d567-48fc-ac9b-20b024c6fc2f/1/cTm2kHj5bKuvcYo5u1hniurBzMI.mft File: cTm2kHj5bKuvcYo5u1hniurBzMI.mft (raw, json) Hash identifier: 2uBnYVcfdHdlugdMcuGiEDwsZgvTAWrXkHUMCTDHLas= Subject key identifier: C2:D9:99:D3:AE:ED:EC:6C:58:80:3C:35:F6:13:6C:FC:BE:FF:CA:96 Authority key identifier: 71:39:B6:90:78:F9:6C:AB:AF:71:8A:39:BB:58:67:8A:EA:C1:CC:C2 Certificate issuer: /CN=7139b69078f96cabaf718a39bb58678aeac1ccc2 Certificate serial: 019B3D59A23AC5F3AAB7C0B4C259D465CF5F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cTm2kHj5bKuvcYo5u1hniurBzMI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/cab149-d567-48fc-ac9b-20b024c6fc2f/1/cTm2kHj5bKuvcYo5u1hniurBzMI.mft Manifest number: 1183 Signing time: Sat 20 Dec 2025 20:00:42 +0000 Manifest this update: Sat 20 Dec 2025 20:00:42 +0000 Manifest next update: Sun 21 Dec 2025 20:00:42 +0000 Files and hashes: 1: PYsPgn9EIHR5AYha-d_1rxDJZs0.roa (hash: QRdgsHwd+qGrv8yp41/SIFOyI0EFbmqDBRqqwNJuLIY=) 2: cTm2kHj5bKuvcYo5u1hniurBzMI.crl (hash: AVtzxE33MPdMMNBtnKYQjhTmDQemdijEByqeAOgVHhY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/cab149-d567-48fc-ac9b-20b024c6fc2f/1/cTm2kHj5bKuvcYo5u1hniurBzMI.crl rsync://rpki.ripe.net/repository/DEFAULT/ed/cab149-d567-48fc-ac9b-20b024c6fc2f/1/cTm2kHj5bKuvcYo5u1hniurBzMI.mft rsync://rpki.ripe.net/repository/DEFAULT/cTm2kHj5bKuvcYo5u1hniurBzMI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:59:a2:3a:c5:f3:aa:b7:c0:b4:c2:59:d4:65:cf:5f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7139b69078f96cabaf718a39bb58678aeac1ccc2 Validity Not Before: Dec 20 20:00:42 2025 GMT Not After : Dec 21 20:00:42 2025 GMT Subject: CN=c2d999d3aeedec6c58803c35f6136cfcbeffca96 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:31:6d:92:37:ee:98:8f:10:49:78:83:df:54: 38:e4:21:f1:ff:4a:85:b6:41:84:32:87:f3:e2:95: c6:ed:49:87:cd:66:72:fc:7d:43:46:2b:6f:45:99: ef:62:6a:6b:a7:89:ba:fd:10:44:b9:c1:8b:76:f3: 45:ed:b8:4e:81:9d:8a:c2:5f:3a:b6:f4:14:73:cf: 80:85:e7:42:00:75:7f:1b:72:09:0d:46:2a:f5:df: 28:90:7a:25:b0:9f:89:97:f6:60:6b:10:bd:a3:8d: 37:38:02:49:84:42:7c:62:3c:56:f6:26:98:81:8f: 34:0e:ed:cf:02:2e:8a:42:21:e0:e0:69:5f:fe:eb: 6f:93:fe:bb:d7:48:74:8b:a9:2f:21:85:11:35:c2: 72:07:67:3a:82:8b:8e:d0:9b:9f:37:fd:e8:10:60: 6f:e3:24:f9:ef:93:f6:6f:9c:a2:2c:c8:1e:a7:72: 5a:8a:77:de:88:7e:fb:bb:8b:e7:23:11:5d:21:4a: 6c:c9:de:3c:cf:b6:7f:f5:ba:cd:f4:ea:ce:60:cb: a2:b1:3e:19:fa:8c:db:0b:48:61:d8:2c:da:ad:10: 8e:d7:93:20:ff:de:ba:14:f7:99:db:68:e8:e9:ec: fb:b4:23:de:5b:c9:d8:3d:7a:f6:33:42:f4:8e:da: 2a:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:D9:99:D3:AE:ED:EC:6C:58:80:3C:35:F6:13:6C:FC:BE:FF:CA:96 X509v3 Authority Key Identifier: keyid:71:39:B6:90:78:F9:6C:AB:AF:71:8A:39:BB:58:67:8A:EA:C1:CC:C2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cTm2kHj5bKuvcYo5u1hniurBzMI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/cab149-d567-48fc-ac9b-20b024c6fc2f/1/cTm2kHj5bKuvcYo5u1hniurBzMI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/cab149-d567-48fc-ac9b-20b024c6fc2f/1/cTm2kHj5bKuvcYo5u1hniurBzMI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a1:2b:a2:0d:e6:e8:52:f8:96:7f:29:54:45:d3:9c:ab:83:b9: b2:5c:92:c1:da:b6:a9:4a:ae:1f:9d:7a:a6:8c:f7:11:c6:3f: d3:47:d9:d2:a5:bc:5a:7c:81:ab:0a:a5:0a:5f:6d:38:c8:0c: ae:c6:90:41:d0:d0:8b:03:26:7f:da:f4:2c:22:da:ca:c3:5f: c3:11:76:c2:9b:21:ce:3b:5f:73:61:aa:b7:77:b5:32:11:8c: 21:93:a2:ec:cf:d6:a3:3f:b7:5b:20:0a:36:9e:c3:2e:12:a5: 48:ea:d8:2a:88:76:d0:27:7e:3e:7a:13:aa:30:71:1c:d3:f2: b0:66:c0:97:3e:ae:ea:cd:7c:96:75:d2:9c:7f:fd:7e:24:a7: 5a:51:69:4e:cf:c1:bb:6f:96:40:0c:a2:df:f9:1b:76:67:eb: 92:46:bf:ca:41:0e:f5:e4:bc:c8:8a:96:43:40:f8:67:30:bc: 73:3a:54:1d:cb:1f:98:b2:b9:c7:a5:7d:3f:9b:e9:9e:e9:7e: bb:1c:61:39:ff:97:3e:d1:90:7f:4b:7c:c8:c5:f8:a0:83:24: 28:35:f3:ed:c2:76:20:52:bf:70:08:c8:eb:a8:c2:6a:49:57: 32:80:e5:47:8a:d4:db:84:20:de:22:e5:5f:3d:29:72:53:17: ca:20:4e:b5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9WaI6xfOqt8C0wlnUZc9fMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcxMzliNjkwNzhmOTZjYWJhZjcxOGEzOWJiNTg2NzhhZWFj MWNjYzIwHhcNMjUxMjIwMjAwMDQyWhcNMjUxMjIxMjAwMDQyWjAzMTEwLwYDVQQD EyhjMmQ5OTlkM2FlZWRlYzZjNTg4MDNjMzVmNjEzNmNmY2JlZmZjYTk2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyjFtkjfumI8QSXiD31Q45CHx/0qF tkGEMofz4pXG7UmHzWZy/H1DRitvRZnvYmprp4m6/RBEucGLdvNF7bhOgZ2Kwl86 tvQUc8+AhedCAHV/G3IJDUYq9d8okHolsJ+Jl/ZgaxC9o403OAJJhEJ8YjxW9iaY gY80Du3PAi6KQiHg4Glf/utvk/6710h0i6kvIYURNcJyB2c6gouO0JufN/3oEGBv 4yT575P2b5yiLMgep3JainfeiH77u4vnIxFdIUpsyd48z7Z/9brN9OrOYMuisT4Z +ozbC0hh2CzarRCO15Mg/966FPeZ22jo6ez7tCPeW8nYPXr2M0L0jtoq8wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMLZmdOu7exsWIA8NfYTbPy+/8qWMB8GA1UdIwQY MBaAFHE5tpB4+Wyrr3GKObtYZ4rqwczCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY1RtMmtIajViS3V2Y1lvNXUxaG5pdXJCek1JLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZC9jYWIxNDktZDU2Ny00OGZjLWFjOWIt MjBiMDI0YzZmYzJmLzEvY1RtMmtIajViS3V2Y1lvNXUxaG5pdXJCek1JLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZC9jYWIxNDktZDU2Ny00OGZjLWFjOWItMjBiMDI0YzZmYzJm LzEvY1RtMmtIajViS3V2Y1lvNXUxaG5pdXJCek1JLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoSuiDebo UviWfylURdOcq4O5slySwdq2qUquH516poz3EcY/00fZ0qW8WnyBqwqlCl9tOMgM rsaQQdDQiwMmf9r0LCLaysNfwxF2wpshzjtfc2Gqt3e1MhGMIZOi7M/Woz+3WyAK Np7DLhKlSOrYKoh20Cd+PnoTqjBxHNPysGbAlz6u6s18lnXSnH/9fiSnWlFpTs/B u2+WQAyi3/kbdmfrkka/ykEO9eS8yIqWQ0D4ZzC8czpUHcsfmLK5x6V9P5vpnul+ uxxhOf+XPtGQf0t8yMX4oIMkKDXz7cJ2IFK/cAjI66jCaklXMoDlR4rU24Qg3iLl Xz0pclMXyiBOtQ== -----END CERTIFICATE-----Generated at Sat Dec 20 21:29:06 2025 by rpki-client