This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/ca17f7-c593-474d-8cf0-538b47709956/1/cHjnVjWgncwD9iWoC_pVKyLjZiw.mft File: cHjnVjWgncwD9iWoC_pVKyLjZiw.mft (raw, json) Hash identifier: MNIeUsfQ7pC1jKxNceCWUX46fN+9+LCouI94rcV7aiU= Subject key identifier: 1B:8E:4F:79:B8:37:25:8A:F1:E1:61:75:27:41:B2:F9:10:BA:6F:B4 Authority key identifier: 70:78:E7:56:35:A0:9D:CC:03:F6:25:A8:0B:FA:55:2B:22:E3:66:2C Certificate issuer: /CN=7078e75635a09dcc03f625a80bfa552b22e3662c Certificate serial: 019B3DC7EB792C46DB113BCF78D2CDF2271D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cHjnVjWgncwD9iWoC_pVKyLjZiw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/ca17f7-c593-474d-8cf0-538b47709956/1/cHjnVjWgncwD9iWoC_pVKyLjZiw.mft Manifest number: 0BC7 Signing time: Sat 20 Dec 2025 22:01:10 +0000 Manifest this update: Sat 20 Dec 2025 22:01:10 +0000 Manifest next update: Sun 21 Dec 2025 22:01:10 +0000 Files and hashes: 1: cHjnVjWgncwD9iWoC_pVKyLjZiw.crl (hash: +DMo9z49PIKaq/2gAqQBCM4Loc0lfOmniAI3VKcfqSw=) 2: iTTW-6mQkAe_ptbEUsV9bdJZhbM.roa (hash: IaZjtmRfbfeEiXlxoZz2N565FeKeU2Yttq1mO64u+IM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/ca17f7-c593-474d-8cf0-538b47709956/1/cHjnVjWgncwD9iWoC_pVKyLjZiw.crl rsync://rpki.ripe.net/repository/DEFAULT/f2/ca17f7-c593-474d-8cf0-538b47709956/1/cHjnVjWgncwD9iWoC_pVKyLjZiw.mft rsync://rpki.ripe.net/repository/DEFAULT/cHjnVjWgncwD9iWoC_pVKyLjZiw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:c7:eb:79:2c:46:db:11:3b:cf:78:d2:cd:f2:27:1d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7078e75635a09dcc03f625a80bfa552b22e3662c Validity Not Before: Dec 20 22:01:10 2025 GMT Not After : Dec 21 22:01:10 2025 GMT Subject: CN=1b8e4f79b837258af1e161752741b2f910ba6fb4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:fd:26:07:13:c3:cb:43:6e:55:7a:97:12:43: ae:61:0a:e0:d7:c5:26:a0:e6:43:f9:4d:ed:7f:c7: 33:a4:03:24:b4:14:23:07:2a:9b:8e:0c:2f:b8:39: 31:a5:f2:de:9d:85:46:18:14:57:1f:c6:d3:ff:8b: fa:5f:56:ae:2f:ca:d7:56:e5:a9:68:36:13:e8:30: 9d:31:bf:88:15:4f:37:e1:2e:7b:f8:16:bc:a5:dd: 8e:db:ad:6f:2c:8b:2f:2a:a4:94:e7:c9:04:6a:86: 61:6c:8e:7f:e2:89:19:24:e7:bc:2f:b1:0f:f9:ef: 32:20:2b:0f:fa:24:36:41:15:d9:dc:a1:a7:0a:bd: c3:5c:af:d1:70:5c:91:b1:f8:6b:47:fd:30:17:e0: 0a:03:54:16:a0:90:19:dd:ef:f0:59:a9:8e:29:53: b9:19:a5:c1:21:5e:a1:62:1b:ed:de:61:17:2f:77: 14:95:ca:f3:2a:46:d4:cd:db:91:b0:52:7b:7f:2c: de:e5:14:ff:f9:fa:4e:0f:b9:e3:f8:01:29:bf:e7: a1:15:4a:2d:8a:f6:fc:70:70:e3:6c:d8:c5:b6:56: 5a:f8:98:47:ac:8a:59:a1:66:5e:8d:c7:fe:f9:da: 25:89:2d:56:3a:ae:b8:03:0f:10:c3:05:9a:11:30: 96:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:8E:4F:79:B8:37:25:8A:F1:E1:61:75:27:41:B2:F9:10:BA:6F:B4 X509v3 Authority Key Identifier: keyid:70:78:E7:56:35:A0:9D:CC:03:F6:25:A8:0B:FA:55:2B:22:E3:66:2C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cHjnVjWgncwD9iWoC_pVKyLjZiw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/ca17f7-c593-474d-8cf0-538b47709956/1/cHjnVjWgncwD9iWoC_pVKyLjZiw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/ca17f7-c593-474d-8cf0-538b47709956/1/cHjnVjWgncwD9iWoC_pVKyLjZiw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 49:9e:a8:1a:a7:62:24:cc:2a:97:8f:45:f3:22:ed:6c:38:71: 72:3e:cd:a8:cf:e9:7c:32:df:a1:50:6b:b3:8f:00:01:f6:e0: 87:33:0f:23:21:7c:4f:0e:0c:9c:19:2a:8b:7d:d6:23:28:0c: eb:e8:7d:d6:bd:ec:c4:dd:22:7f:18:59:48:62:cb:95:17:34: e9:3d:23:34:9c:97:a1:55:45:62:e7:74:b6:93:19:2c:12:2c: 4e:af:1f:ed:be:0f:5c:65:4e:82:a4:b2:fd:5c:f8:48:3c:df: 72:3c:d9:9e:14:3f:26:78:e4:4c:0a:15:4f:7f:24:f2:13:32: a5:41:48:b8:e7:73:99:af:60:12:3e:43:d7:a9:12:df:90:36: c0:bb:30:f0:aa:71:6b:67:d3:c4:bc:e8:5b:49:7c:fc:32:9d: 9d:3e:5a:56:94:40:69:5b:04:4e:e8:b6:05:5a:2e:4f:31:a3: c8:b5:c8:65:38:26:06:df:63:30:ae:1e:b0:9f:8b:46:1a:44: 5f:a2:db:27:25:96:22:55:b5:8e:74:4c:b0:62:5c:2d:72:05: fa:0f:e3:26:08:17:8d:61:2d:72:00:1d:0d:3d:61:0d:8d:1b: 54:1f:5c:c9:ad:c9:7a:6b:4e:b8:30:25:36:e8:b7:34:7e:63: a1:9a:21:a9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9x+t5LEbbETvPeNLN8icdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcwNzhlNzU2MzVhMDlkY2MwM2Y2MjVhODBiZmE1NTJiMjJl MzY2MmMwHhcNMjUxMjIwMjIwMTEwWhcNMjUxMjIxMjIwMTEwWjAzMTEwLwYDVQQD EygxYjhlNGY3OWI4MzcyNThhZjFlMTYxNzUyNzQxYjJmOTEwYmE2ZmI0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyv0mBxPDy0NuVXqXEkOuYQrg18Um oOZD+U3tf8czpAMktBQjByqbjgwvuDkxpfLenYVGGBRXH8bT/4v6X1auL8rXVuWp aDYT6DCdMb+IFU834S57+Ba8pd2O261vLIsvKqSU58kEaoZhbI5/4okZJOe8L7EP +e8yICsP+iQ2QRXZ3KGnCr3DXK/RcFyRsfhrR/0wF+AKA1QWoJAZ3e/wWamOKVO5 GaXBIV6hYhvt3mEXL3cUlcrzKkbUzduRsFJ7fyze5RT/+fpOD7nj+AEpv+ehFUot ivb8cHDjbNjFtlZa+JhHrIpZoWZejcf++doliS1WOq64Aw8QwwWaETCWFwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBuOT3m4NyWK8eFhdSdBsvkQum+0MB8GA1UdIwQY MBaAFHB451Y1oJ3MA/YlqAv6VSsi42YsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY0hqblZqV2duY3dEOWlXb0NfcFZLeUxqWml3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMi9jYTE3ZjctYzU5My00NzRkLThjZjAt NTM4YjQ3NzA5OTU2LzEvY0hqblZqV2duY3dEOWlXb0NfcFZLeUxqWml3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMi9jYTE3ZjctYzU5My00NzRkLThjZjAtNTM4YjQ3NzA5OTU2 LzEvY0hqblZqV2duY3dEOWlXb0NfcFZLeUxqWml3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASZ6oGqdi JMwql49F8yLtbDhxcj7NqM/pfDLfoVBrs48AAfbghzMPIyF8Tw4MnBkqi33WIygM 6+h91r3sxN0ifxhZSGLLlRc06T0jNJyXoVVFYud0tpMZLBIsTq8f7b4PXGVOgqSy /Vz4SDzfcjzZnhQ/JnjkTAoVT38k8hMypUFIuOdzma9gEj5D16kS35A2wLsw8Kpx a2fTxLzoW0l8/DKdnT5aVpRAaVsETui2BVouTzGjyLXIZTgmBt9jMK4esJ+LRhpE X6LbJyWWIlW1jnRMsGJcLXIF+g/jJggXjWEtcgAdDT1hDY0bVB9cya3JemtOuDAl Nui3NH5joZohqQ== -----END CERTIFICATE-----Generated at Sat Dec 20 23:56:30 2025 by rpki-client