This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/3298e3-9a50-4cfb-84e6-d137ade166d1/1/cG1kE0-qdGKTwDhO2sA3GVDzsiQ.mft File: cG1kE0-qdGKTwDhO2sA3GVDzsiQ.mft (raw, json) Hash identifier: suBDdIa5WLWdTPQXgPAYkvZc8TwgT57++wkiCL0i6AI= Subject key identifier: C7:76:CE:8A:EC:00:D6:5C:6D:1E:33:FA:4C:6B:F9:81:52:E5:AF:6E Authority key identifier: 70:6D:64:13:4F:AA:74:62:93:C0:38:4E:DA:C0:37:19:50:F3:B2:24 Certificate issuer: /CN=706d64134faa746293c0384edac0371950f3b224 Certificate serial: 019AF19B2515C11C34FBA493C34D9004087D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cG1kE0-qdGKTwDhO2sA3GVDzsiQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/3298e3-9a50-4cfb-84e6-d137ade166d1/1/cG1kE0-qdGKTwDhO2sA3GVDzsiQ.mft Manifest number: 1762 Signing time: Sat 06 Dec 2025 03:01:07 +0000 Manifest this update: Sat 06 Dec 2025 03:01:07 +0000 Manifest next update: Sun 07 Dec 2025 03:01:07 +0000 Files and hashes: 1: BGPtN6UeNB6gxVs3merGZGk1kns.roa (hash: hrSuHlNxsE/yi+6e5xU/QtKRxyKAm/eD9FqzGlKPQGg=) 2: K97zp34OToUCQrbZPgRq8uelj_I.roa (hash: fJ0zhSoG7arl9EOrthec9ouC+q/z09fZHsqxXKN/jaE=) 3: UPgAt10tmqeiB0ExLwRVr2_cA2k.roa (hash: PAF5GVkw69ZCI0wlFe0kfCLPkukOPDOR6TAG9hbIZ1k=) 4: cG1kE0-qdGKTwDhO2sA3GVDzsiQ.crl (hash: zIMzDXcz1IBW9/FHbZPB2crrgJsVlsCKUe7ZjW3dVXs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/3298e3-9a50-4cfb-84e6-d137ade166d1/1/cG1kE0-qdGKTwDhO2sA3GVDzsiQ.crl rsync://rpki.ripe.net/repository/DEFAULT/0d/3298e3-9a50-4cfb-84e6-d137ade166d1/1/cG1kE0-qdGKTwDhO2sA3GVDzsiQ.mft rsync://rpki.ripe.net/repository/DEFAULT/cG1kE0-qdGKTwDhO2sA3GVDzsiQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9b:25:15:c1:1c:34:fb:a4:93:c3:4d:90:04:08:7d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=706d64134faa746293c0384edac0371950f3b224 Validity Not Before: Dec 6 03:01:07 2025 GMT Not After : Dec 7 03:01:07 2025 GMT Subject: CN=c776ce8aec00d65c6d1e33fa4c6bf98152e5af6e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:cc:11:cb:6a:02:47:d3:1e:de:4b:dc:3b:94: af:7e:8a:2c:bb:7a:15:1d:14:0f:b8:f3:ea:10:70: 4a:ef:49:9a:dc:31:71:20:ac:f6:7b:f6:09:e1:09: df:6e:22:9f:7a:68:1a:84:dd:ed:09:ef:15:d1:df: f0:55:f2:4e:d6:cd:9b:a6:a0:42:ea:28:0d:0d:89: e2:61:e1:15:83:96:8d:ec:d6:d3:14:9a:53:40:93: 5f:77:82:45:4c:6a:29:0f:8f:82:4f:f0:ea:e5:a4: 82:d4:d2:e2:9c:ed:2d:b1:8a:38:79:f4:1a:1a:f3: 48:c5:41:6a:cb:cd:8e:be:f8:88:3e:f6:9b:6b:da: b7:e6:53:6c:7a:83:12:15:5e:ee:f0:ec:ff:0b:aa: a5:e6:a8:f7:6f:d1:91:1b:80:d1:bd:38:e7:14:41: 2b:08:5d:71:0c:6d:87:52:aa:ca:62:4f:93:90:59: 98:8c:f3:0d:f6:ed:bf:fe:8a:81:0d:9d:86:9c:4e: 81:b2:6d:e8:bf:49:56:66:a4:53:95:5e:63:cb:21: c0:21:0b:0c:3f:0b:c9:36:e7:c3:6f:13:38:f9:79: 73:d3:ce:7e:43:ec:f0:86:eb:76:92:d1:55:3f:4b: 3c:69:57:67:40:73:41:a3:38:9a:96:43:c7:bc:c5: 79:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:76:CE:8A:EC:00:D6:5C:6D:1E:33:FA:4C:6B:F9:81:52:E5:AF:6E X509v3 Authority Key Identifier: keyid:70:6D:64:13:4F:AA:74:62:93:C0:38:4E:DA:C0:37:19:50:F3:B2:24 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cG1kE0-qdGKTwDhO2sA3GVDzsiQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/3298e3-9a50-4cfb-84e6-d137ade166d1/1/cG1kE0-qdGKTwDhO2sA3GVDzsiQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/3298e3-9a50-4cfb-84e6-d137ade166d1/1/cG1kE0-qdGKTwDhO2sA3GVDzsiQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5b:ef:2b:57:54:bb:b0:9d:db:95:44:9d:51:a0:9c:9e:21:de: 85:e6:f4:d5:4f:c6:da:42:b1:d1:2d:25:19:e6:3b:3d:fc:b0: 3c:17:81:88:88:30:f0:4f:22:5a:d3:88:e3:13:6c:75:07:67: 5a:82:ad:ce:34:6c:d6:e1:b6:4b:ba:97:4c:ed:0f:5e:f1:68: 5c:83:a3:50:91:06:51:85:a9:b4:0c:8f:9e:25:f1:b8:0c:36: 68:51:44:37:5b:bb:45:cc:33:5a:28:b6:c1:1b:7d:59:c3:21: cf:05:ec:5d:d7:56:7b:b8:f6:19:70:2d:a5:92:45:21:47:fa: df:4e:a6:c3:c8:68:7e:a5:47:c5:26:3c:2d:b2:99:5d:ea:75: 8f:54:46:4d:49:ba:87:9c:af:b0:5d:fe:42:ee:c3:2b:a8:d0: e9:2b:9b:63:2c:0a:29:6b:6f:76:a2:d7:78:9d:87:32:d7:11: f8:0c:76:5e:a2:40:6e:1a:6b:27:bd:ef:f1:b2:4c:94:44:3c: c4:24:3d:26:bf:48:e6:cb:2f:0a:54:50:24:8b:d8:fa:f6:5f: 5d:44:15:3b:3e:64:70:1c:26:82:b2:0a:b8:a6:9c:46:83:cb: 56:95:7d:31:b5:a9:15:d3:b9:cc:4f:75:52:61:69:b0:bd:c8: 71:87:80:dc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxmyUVwRw0+6STw02QBAh9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcwNmQ2NDEzNGZhYTc0NjI5M2MwMzg0ZWRhYzAzNzE5NTBm M2IyMjQwHhcNMjUxMjA2MDMwMTA3WhcNMjUxMjA3MDMwMTA3WjAzMTEwLwYDVQQD EyhjNzc2Y2U4YWVjMDBkNjVjNmQxZTMzZmE0YzZiZjk4MTUyZTVhZjZlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArswRy2oCR9Me3kvcO5Svfoosu3oV HRQPuPPqEHBK70ma3DFxIKz2e/YJ4QnfbiKfemgahN3tCe8V0d/wVfJO1s2bpqBC 6igNDYniYeEVg5aN7NbTFJpTQJNfd4JFTGopD4+CT/Dq5aSC1NLinO0tsYo4efQa GvNIxUFqy82OvviIPvaba9q35lNseoMSFV7u8Oz/C6ql5qj3b9GRG4DRvTjnFEEr CF1xDG2HUqrKYk+TkFmYjPMN9u2//oqBDZ2GnE6Bsm3ov0lWZqRTlV5jyyHAIQsM PwvJNufDbxM4+Xlz085+Q+zwhut2ktFVP0s8aVdnQHNBozialkPHvMV5XwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMd2zorsANZcbR4z+kxr+YFS5a9uMB8GA1UdIwQY MBaAFHBtZBNPqnRik8A4TtrANxlQ87IkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY0cxa0UwLXFkR0tUd0RoTzJzQTNHVkR6c2lRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZC8zMjk4ZTMtOWE1MC00Y2ZiLTg0ZTYt ZDEzN2FkZTE2NmQxLzEvY0cxa0UwLXFkR0tUd0RoTzJzQTNHVkR6c2lRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZC8zMjk4ZTMtOWE1MC00Y2ZiLTg0ZTYtZDEzN2FkZTE2NmQx LzEvY0cxa0UwLXFkR0tUd0RoTzJzQTNHVkR6c2lRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAW+8rV1S7 sJ3blUSdUaCcniHeheb01U/G2kKx0S0lGeY7PfywPBeBiIgw8E8iWtOI4xNsdQdn WoKtzjRs1uG2S7qXTO0PXvFoXIOjUJEGUYWptAyPniXxuAw2aFFEN1u7RcwzWii2 wRt9WcMhzwXsXddWe7j2GXAtpZJFIUf6306mw8hofqVHxSY8LbKZXep1j1RGTUm6 h5yvsF3+Qu7DK6jQ6SubYywKKWtvdqLXeJ2HMtcR+Ax2XqJAbhprJ73v8bJMlEQ8 xCQ9Jr9I5ssvClRQJIvY+vZfXUQVOz5kcBwmgrIKuKacRoPLVpV9MbWpFdO5zE91 UmFpsL3IcYeA3A== -----END CERTIFICATE-----Generated at Sat Dec 6 09:30:27 2025 by rpki-client