This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/ca17f7-c593-474d-8cf0-538b47709956/1/cHjnVjWgncwD9iWoC_pVKyLjZiw.mft File: cHjnVjWgncwD9iWoC_pVKyLjZiw.mft (raw, json) Hash identifier: aFiZb9ZnJhrGRCYco1Q0gO8qUUFXhdNzSSMwwkaMOrc= Subject key identifier: 18:70:8A:AA:E8:8B:25:4B:C9:43:5C:A9:0D:6E:53:65:17:52:D9:6D Authority key identifier: 70:78:E7:56:35:A0:9D:CC:03:F6:25:A8:0B:FA:55:2B:22:E3:66:2C Certificate issuer: /CN=7078e75635a09dcc03f625a80bfa552b22e3662c Certificate serial: 019B476FD5272FC08A1541508BBF52631479 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cHjnVjWgncwD9iWoC_pVKyLjZiw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/ca17f7-c593-474d-8cf0-538b47709956/1/cHjnVjWgncwD9iWoC_pVKyLjZiw.mft Manifest number: 0BCC Signing time: Mon 22 Dec 2025 19:01:09 +0000 Manifest this update: Mon 22 Dec 2025 19:01:09 +0000 Manifest next update: Tue 23 Dec 2025 19:01:09 +0000 Files and hashes: 1: cHjnVjWgncwD9iWoC_pVKyLjZiw.crl (hash: BtxP7wHVZJdhSR8Cf6+CscSCuoAxSVC2bNIrI1sP93w=) 2: iTTW-6mQkAe_ptbEUsV9bdJZhbM.roa (hash: IaZjtmRfbfeEiXlxoZz2N565FeKeU2Yttq1mO64u+IM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/ca17f7-c593-474d-8cf0-538b47709956/1/cHjnVjWgncwD9iWoC_pVKyLjZiw.crl rsync://rpki.ripe.net/repository/DEFAULT/f2/ca17f7-c593-474d-8cf0-538b47709956/1/cHjnVjWgncwD9iWoC_pVKyLjZiw.mft rsync://rpki.ripe.net/repository/DEFAULT/cHjnVjWgncwD9iWoC_pVKyLjZiw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 15:30:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:47:6f:d5:27:2f:c0:8a:15:41:50:8b:bf:52:63:14:79 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7078e75635a09dcc03f625a80bfa552b22e3662c Validity Not Before: Dec 22 19:01:09 2025 GMT Not After : Dec 23 19:01:09 2025 GMT Subject: CN=18708aaae88b254bc9435ca90d6e53651752d96d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:a9:64:0b:f1:9a:53:cf:71:62:af:a3:d4:da: 18:2d:ae:60:a3:2b:b4:90:57:6b:cd:a5:28:42:53: 42:fe:6e:ee:db:0b:02:f7:82:a9:63:3f:3b:a3:58: e8:ce:39:50:38:32:3f:0c:67:cd:c7:2c:7e:99:dc: 77:ff:49:3f:a3:99:66:c9:c7:73:55:00:3c:e0:e1: db:11:d7:2e:8f:35:63:2d:5e:59:0a:e6:a9:a7:9d: 58:47:58:dd:33:7c:a5:27:a4:41:df:a3:52:91:71: dd:83:75:7e:4b:27:2b:e8:a7:a9:16:05:b6:a2:97: b9:27:de:80:40:5b:62:25:03:cd:2a:66:89:c0:bc: 15:3a:97:f6:be:64:d0:3a:76:9a:dc:b7:c8:41:32: b2:ec:36:0d:f3:fb:dc:e2:76:5b:47:20:65:52:cb: 49:26:01:0b:12:f9:4b:6a:a4:de:3c:fc:61:c5:34: 2c:64:86:ca:bd:2b:70:68:b5:d4:d3:ad:4f:c4:7d: 8b:e3:f3:6d:c1:07:a4:5d:0f:a3:d4:d4:fa:35:4b: e3:16:9b:8e:cb:84:aa:d3:d4:da:39:f7:37:5e:a6: 97:c6:91:fa:c6:fb:2e:6c:be:89:5b:75:c0:4a:d5: 8c:ae:51:38:25:2e:fb:d4:c4:13:a1:c8:10:88:d7: ab:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:70:8A:AA:E8:8B:25:4B:C9:43:5C:A9:0D:6E:53:65:17:52:D9:6D X509v3 Authority Key Identifier: keyid:70:78:E7:56:35:A0:9D:CC:03:F6:25:A8:0B:FA:55:2B:22:E3:66:2C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cHjnVjWgncwD9iWoC_pVKyLjZiw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/ca17f7-c593-474d-8cf0-538b47709956/1/cHjnVjWgncwD9iWoC_pVKyLjZiw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/ca17f7-c593-474d-8cf0-538b47709956/1/cHjnVjWgncwD9iWoC_pVKyLjZiw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6e:fb:ca:3b:21:01:cb:8d:dc:0f:d4:b1:39:4f:cf:e1:72:7e: a2:49:af:4b:91:39:de:e2:59:f5:74:23:29:d0:e7:83:b3:c0: 17:13:64:43:34:4e:a5:90:f6:a1:77:0b:e2:7a:08:bc:38:5e: 81:78:dc:26:df:2a:94:4c:16:fa:da:47:55:58:65:9c:e7:99: 1d:8a:4c:d8:1c:39:46:a1:8f:78:5d:47:42:45:bc:fb:f2:61: c4:13:9d:fb:53:1e:e9:f8:22:7d:eb:8d:21:06:c5:9c:e7:da: 27:76:65:d4:91:8c:85:b9:dc:a5:29:b9:f6:8c:bc:44:ba:4d: 96:eb:23:62:98:6b:3e:d8:b2:84:00:e7:41:a2:d2:a7:62:e3: 11:92:65:db:15:b4:0c:bc:de:02:80:f5:b1:73:db:82:90:09: 58:12:2f:b9:6c:45:16:02:fc:de:d2:fe:99:9e:01:a3:3b:91: 72:99:ed:50:0a:7a:57:2b:5c:60:99:5a:4f:d3:a6:47:19:13: 50:3f:a5:31:c8:cb:6a:23:1c:29:c9:60:20:f3:05:76:ab:91: e9:7e:cb:85:25:55:f9:d4:58:21:61:7f:2e:bc:33:19:97:5a: 2f:8c:30:ef:4d:b6:68:71:84:1f:1a:e1:a1:7b:f4:d0:6d:ff: 80:37:a2:aa -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtHb9UnL8CKFUFQi79SYxR5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcwNzhlNzU2MzVhMDlkY2MwM2Y2MjVhODBiZmE1NTJiMjJl MzY2MmMwHhcNMjUxMjIyMTkwMTA5WhcNMjUxMjIzMTkwMTA5WjAzMTEwLwYDVQQD EygxODcwOGFhYWU4OGIyNTRiYzk0MzVjYTkwZDZlNTM2NTE3NTJkOTZkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs6lkC/GaU89xYq+j1NoYLa5goyu0 kFdrzaUoQlNC/m7u2wsC94KpYz87o1jozjlQODI/DGfNxyx+mdx3/0k/o5lmycdz VQA84OHbEdcujzVjLV5ZCuapp51YR1jdM3ylJ6RB36NSkXHdg3V+Sycr6KepFgW2 ope5J96AQFtiJQPNKmaJwLwVOpf2vmTQOnaa3LfIQTKy7DYN8/vc4nZbRyBlUstJ JgELEvlLaqTePPxhxTQsZIbKvStwaLXU061PxH2L4/NtwQekXQ+j1NT6NUvjFpuO y4Sq09TaOfc3XqaXxpH6xvsubL6JW3XAStWMrlE4JS771MQTocgQiNerLwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBhwiqroiyVLyUNcqQ1uU2UXUtltMB8GA1UdIwQY MBaAFHB451Y1oJ3MA/YlqAv6VSsi42YsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY0hqblZqV2duY3dEOWlXb0NfcFZLeUxqWml3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMi9jYTE3ZjctYzU5My00NzRkLThjZjAt NTM4YjQ3NzA5OTU2LzEvY0hqblZqV2duY3dEOWlXb0NfcFZLeUxqWml3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMi9jYTE3ZjctYzU5My00NzRkLThjZjAtNTM4YjQ3NzA5OTU2 LzEvY0hqblZqV2duY3dEOWlXb0NfcFZLeUxqWml3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbvvKOyEB y43cD9SxOU/P4XJ+okmvS5E53uJZ9XQjKdDng7PAFxNkQzROpZD2oXcL4noIvDhe gXjcJt8qlEwW+tpHVVhlnOeZHYpM2Bw5RqGPeF1HQkW8+/JhxBOd+1Me6fgifeuN IQbFnOfaJ3Zl1JGMhbncpSm59oy8RLpNlusjYphrPtiyhADnQaLSp2LjEZJl2xW0 DLzeAoD1sXPbgpAJWBIvuWxFFgL83tL+mZ4BozuRcpntUAp6VytcYJlaT9OmRxkT UD+lMcjLaiMcKclgIPMFdquR6X7LhSVV+dRYIWF/LrwzGZdaL4ww7022aHGEHxrh oXv00G3/gDeiqg== -----END CERTIFICATE-----Generated at Mon Dec 22 22:49:48 2025 by rpki-client