This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/a600f5-9428-485c-b42e-64de34f1f464/1/ctG1y2-wQjmGhx7wHmY_Nlzg2JU.mft File: ctG1y2-wQjmGhx7wHmY_Nlzg2JU.mft (raw, json) Hash identifier: aLiB8HzR/lPJJ1RrMi7qCiLEPaiKhoz8xaKLa1WF+Qc= Subject key identifier: 7C:E6:8C:DF:91:4C:01:FA:2E:3E:34:84:A6:BF:46:F1:CC:CC:82:10 Authority key identifier: 72:D1:B5:CB:6F:B0:42:39:86:87:1E:F0:1E:66:3F:36:5C:E0:D8:95 Certificate issuer: /CN=72d1b5cb6fb0423986871ef01e663f365ce0d895 Certificate serial: 019B5E9C74F19B2AFC16136F173F8A62C988 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ctG1y2-wQjmGhx7wHmY_Nlzg2JU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/a600f5-9428-485c-b42e-64de34f1f464/1/ctG1y2-wQjmGhx7wHmY_Nlzg2JU.mft Manifest number: 179A Signing time: Sat 27 Dec 2025 07:01:10 +0000 Manifest this update: Sat 27 Dec 2025 07:01:10 +0000 Manifest next update: Sun 28 Dec 2025 07:01:10 +0000 Files and hashes: 1: HdvygVOruYbTXwlr1NLClydlYqo.roa (hash: sMi8mYGDSncYX0REgUe1LpnyiMZD3xdRzWB6T1gaSas=) 2: ctG1y2-wQjmGhx7wHmY_Nlzg2JU.crl (hash: DOtCt7clBnQ0rRhg6mTl6fMpRsUNpOo5ZquaQP8Ykh4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/a600f5-9428-485c-b42e-64de34f1f464/1/ctG1y2-wQjmGhx7wHmY_Nlzg2JU.crl rsync://rpki.ripe.net/repository/DEFAULT/fa/a600f5-9428-485c-b42e-64de34f1f464/1/ctG1y2-wQjmGhx7wHmY_Nlzg2JU.mft rsync://rpki.ripe.net/repository/DEFAULT/ctG1y2-wQjmGhx7wHmY_Nlzg2JU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 28 Dec 2025 07:01:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5e:9c:74:f1:9b:2a:fc:16:13:6f:17:3f:8a:62:c9:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=72d1b5cb6fb0423986871ef01e663f365ce0d895 Validity Not Before: Dec 27 07:01:10 2025 GMT Not After : Dec 28 07:01:10 2025 GMT Subject: CN=7ce68cdf914c01fa2e3e3484a6bf46f1cccc8210 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:1a:2a:62:af:be:02:37:ad:c9:4d:7f:5f:7f: 90:32:a6:3b:10:25:da:6d:3f:bd:9c:4c:bd:28:fc: 14:4a:54:41:37:81:35:1d:ac:09:77:40:29:03:41: 36:81:ed:45:87:01:55:86:b1:f7:01:c5:e8:52:d3: a8:b5:e7:1f:be:17:4e:f5:3f:1a:d3:04:22:13:e7: 4a:d1:25:00:49:42:9f:61:f9:40:7c:e3:5c:e3:31: 9c:a8:a1:92:75:56:3c:b4:98:43:4d:e5:2d:c7:85: 57:88:cc:80:2d:c6:14:da:cc:f6:46:af:a4:a5:11: 62:94:ae:2b:ab:71:02:a8:7b:1e:f9:c3:f8:08:b5: fb:b1:47:6d:6f:2a:d6:b9:55:89:ec:c4:fc:19:09: f3:2b:7a:9b:5b:37:47:9e:17:ce:21:48:a3:c6:03: fd:57:51:a6:f2:e3:94:5d:0e:6b:b9:dc:f8:ee:6c: 2e:49:0d:e9:e1:13:ed:5c:e1:c0:e8:51:1d:85:31: 6a:e2:9f:1f:95:67:3d:a2:a3:c0:23:ea:f0:0e:31: 09:3d:3f:38:5d:e0:09:16:ba:f6:f9:ec:22:3f:36: c1:92:32:fc:bb:77:f6:8a:e5:b6:7c:47:fd:64:a9: c7:66:ea:10:94:cd:4a:2e:3c:a8:8e:64:a4:ef:57: f8:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:E6:8C:DF:91:4C:01:FA:2E:3E:34:84:A6:BF:46:F1:CC:CC:82:10 X509v3 Authority Key Identifier: keyid:72:D1:B5:CB:6F:B0:42:39:86:87:1E:F0:1E:66:3F:36:5C:E0:D8:95 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ctG1y2-wQjmGhx7wHmY_Nlzg2JU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/a600f5-9428-485c-b42e-64de34f1f464/1/ctG1y2-wQjmGhx7wHmY_Nlzg2JU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/a600f5-9428-485c-b42e-64de34f1f464/1/ctG1y2-wQjmGhx7wHmY_Nlzg2JU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 32:b7:4e:84:a0:a7:9f:62:34:51:2a:a0:aa:55:70:f2:b5:2d: 9a:87:19:f6:b8:c4:13:5e:1f:e7:77:03:63:65:b5:93:e0:9d: 56:c9:64:45:d4:b1:5d:c9:f1:35:58:cc:bb:83:0e:c0:b9:8c: 10:f4:d8:8d:6e:bc:b5:67:b9:06:8c:9e:9a:d9:b8:02:51:81: ab:d4:2d:7d:22:16:33:ae:a8:64:61:97:56:fa:9f:50:75:2f: ec:fd:22:39:73:c9:6b:c8:82:12:52:33:4a:6e:58:63:29:b6: ab:2c:a8:33:eb:8a:3d:81:13:55:5a:98:dc:a1:f2:37:20:82: 3f:fb:86:2f:45:dd:1f:66:0e:5b:8a:52:c9:39:b3:6d:35:2a: 87:9c:78:c1:5a:4f:6b:9d:3c:91:05:27:af:7c:dc:14:c7:ab: a5:30:2f:dd:97:66:eb:39:f8:77:2f:84:2b:90:81:8b:92:16: 6e:a8:b5:b3:28:20:6f:35:04:05:91:f0:f2:f6:a3:d6:92:a6: b5:bc:7b:c7:11:f8:52:c3:22:6b:45:14:f7:6e:7b:1e:32:57: 4a:ec:6d:50:60:dd:58:0a:62:94:eb:b3:8a:6f:bf:64:f0:8b: 4b:81:c5:9f:21:c8:d3:15:e2:43:8d:4f:9c:18:04:63:dc:3a: 82:19:db:88 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtenHTxmyr8FhNvFz+KYsmIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcyZDFiNWNiNmZiMDQyMzk4Njg3MWVmMDFlNjYzZjM2NWNl MGQ4OTUwHhcNMjUxMjI3MDcwMTEwWhcNMjUxMjI4MDcwMTEwWjAzMTEwLwYDVQQD Eyg3Y2U2OGNkZjkxNGMwMWZhMmUzZTM0ODRhNmJmNDZmMWNjY2M4MjEwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5hoqYq++AjetyU1/X3+QMqY7ECXa bT+9nEy9KPwUSlRBN4E1HawJd0ApA0E2ge1FhwFVhrH3AcXoUtOotecfvhdO9T8a 0wQiE+dK0SUASUKfYflAfONc4zGcqKGSdVY8tJhDTeUtx4VXiMyALcYU2sz2Rq+k pRFilK4rq3ECqHse+cP4CLX7sUdtbyrWuVWJ7MT8GQnzK3qbWzdHnhfOIUijxgP9 V1Gm8uOUXQ5rudz47mwuSQ3p4RPtXOHA6FEdhTFq4p8flWc9oqPAI+rwDjEJPT84 XeAJFrr2+ewiPzbBkjL8u3f2iuW2fEf9ZKnHZuoQlM1KLjyojmSk71f43QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHzmjN+RTAH6Lj40hKa/RvHMzIIQMB8GA1UdIwQY MBaAFHLRtctvsEI5hoce8B5mPzZc4NiVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY3RHMXkyLXdRam1HaHg3d0htWV9ObHpnMkpVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS9hNjAwZjUtOTQyOC00ODVjLWI0MmUt NjRkZTM0ZjFmNDY0LzEvY3RHMXkyLXdRam1HaHg3d0htWV9ObHpnMkpVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYS9hNjAwZjUtOTQyOC00ODVjLWI0MmUtNjRkZTM0ZjFmNDY0 LzEvY3RHMXkyLXdRam1HaHg3d0htWV9ObHpnMkpVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMrdOhKCn n2I0USqgqlVw8rUtmocZ9rjEE14f53cDY2W1k+CdVslkRdSxXcnxNVjMu4MOwLmM EPTYjW68tWe5Boyemtm4AlGBq9QtfSIWM66oZGGXVvqfUHUv7P0iOXPJa8iCElIz Sm5YYym2qyyoM+uKPYETVVqY3KHyNyCCP/uGL0XdH2YOW4pSyTmzbTUqh5x4wVpP a508kQUnr3zcFMerpTAv3Zdm6zn4dy+EK5CBi5IWbqi1syggbzUEBZHw8vaj1pKm tbx7xxH4UsMia0UU9257HjJXSuxtUGDdWApilOuzim+/ZPCLS4HFnyHI0xXiQ41P nBgEY9w6ghnbiA== -----END CERTIFICATE-----Generated at Sat Dec 27 15:41:24 2025 by rpki-client