This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/140105-e462-48d2-a58f-a57035792e57/1/cPXZ7u-jBa7K7jHm_LTiIyGygEo.mft File: cPXZ7u-jBa7K7jHm_LTiIyGygEo.mft (raw, json) Hash identifier: HwDWFZRYukw8Lm0y7uzE1LEROLT555Ikh9f8oQanbnk= Subject key identifier: 2E:F4:7E:4F:9F:88:7F:B9:68:BC:F6:55:A9:CB:45:3C:7E:25:86:29 Authority key identifier: 70:F5:D9:EE:EF:A3:05:AE:CA:EE:31:E6:FC:B4:E2:23:21:B2:80:4A Certificate issuer: /CN=70f5d9eeefa305aecaee31e6fcb4e22321b2804a Certificate serial: 019AF12D788EB0B5F6D290CB6F3E0AE633DE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cPXZ7u-jBa7K7jHm_LTiIyGygEo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/140105-e462-48d2-a58f-a57035792e57/1/cPXZ7u-jBa7K7jHm_LTiIyGygEo.mft Manifest number: 1761 Signing time: Sat 06 Dec 2025 01:01:20 +0000 Manifest this update: Sat 06 Dec 2025 01:01:20 +0000 Manifest next update: Sun 07 Dec 2025 01:01:20 +0000 Files and hashes: 1: 16PMvyBjwLMgKpIOkxrHYliD-08.roa (hash: Y3LQq9IlsGjKrSV01GWpHO25wmy0HId5ENMWGwyBnEU=) 2: cPXZ7u-jBa7K7jHm_LTiIyGygEo.crl (hash: k0ECh0wPETrU3+I2Mh9KyfanRJEReXzBiTvXmaCh+RQ=) 3: jgcslWHmygjkRIS6MtfzGhZ40MU.roa (hash: sDmrr8zpKt5WpBGAECM7NZQll745IxQeWlqllvJtGkM=) 4: nikcVRLPEkpjmj22Ziw5gbk7U3I.roa (hash: MneHYx5l45SiPBky73Uw5AM8Oy5u1LgkSXDWT7ZAv/c=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/140105-e462-48d2-a58f-a57035792e57/1/cPXZ7u-jBa7K7jHm_LTiIyGygEo.crl rsync://rpki.ripe.net/repository/DEFAULT/10/140105-e462-48d2-a58f-a57035792e57/1/cPXZ7u-jBa7K7jHm_LTiIyGygEo.mft rsync://rpki.ripe.net/repository/DEFAULT/cPXZ7u-jBa7K7jHm_LTiIyGygEo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:01:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2d:78:8e:b0:b5:f6:d2:90:cb:6f:3e:0a:e6:33:de Signature Algorithm: sha256WithRSAEncryption Issuer: CN=70f5d9eeefa305aecaee31e6fcb4e22321b2804a Validity Not Before: Dec 6 01:01:20 2025 GMT Not After : Dec 7 01:01:20 2025 GMT Subject: CN=2ef47e4f9f887fb968bcf655a9cb453c7e258629 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:07:b9:67:3c:86:ff:29:35:7c:c9:ef:e7:ac: e1:06:89:a6:ab:7c:e8:4e:d6:f6:3e:de:fe:55:0f: 8f:41:7d:02:7b:11:07:e5:3f:c2:f6:f1:c5:2c:21: 51:b2:7e:c5:bb:de:c1:88:37:bc:2b:45:17:df:17: be:41:37:32:6b:a4:c9:51:1e:2e:83:0d:00:da:37: 84:9b:dc:49:9a:59:5f:e9:7a:7f:95:71:c3:bd:b7: 28:c5:50:89:ab:6a:3f:ef:81:b5:81:ee:43:23:4f: 96:91:8e:06:dd:6a:bb:a5:f5:20:07:7c:fb:b0:e7: 8e:18:a9:5e:05:c3:58:c3:51:68:de:cc:0a:a8:4a: 11:57:74:06:54:84:cf:50:ac:ef:e9:2a:ad:fe:c3: 1a:3e:99:20:35:92:b6:ad:c1:b0:60:5f:70:22:4e: 70:87:a7:59:55:f9:14:e5:83:22:3e:87:cb:4a:f0: 8f:17:3e:c7:79:d1:dc:7a:66:e8:34:1e:5b:80:d1: a6:5a:9d:c3:06:a0:5b:34:67:96:03:5d:a3:49:81: fc:03:32:5f:b9:b4:d1:b7:b0:61:fc:51:2a:7e:fb: 2d:7f:cc:d2:13:87:64:c4:c8:1b:81:5b:02:14:70: f2:bb:b0:e2:4a:11:bd:71:b4:96:10:3f:ce:2e:e3: 48:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:F4:7E:4F:9F:88:7F:B9:68:BC:F6:55:A9:CB:45:3C:7E:25:86:29 X509v3 Authority Key Identifier: keyid:70:F5:D9:EE:EF:A3:05:AE:CA:EE:31:E6:FC:B4:E2:23:21:B2:80:4A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cPXZ7u-jBa7K7jHm_LTiIyGygEo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/140105-e462-48d2-a58f-a57035792e57/1/cPXZ7u-jBa7K7jHm_LTiIyGygEo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/10/140105-e462-48d2-a58f-a57035792e57/1/cPXZ7u-jBa7K7jHm_LTiIyGygEo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 74:c0:52:94:e8:81:4c:27:a5:42:98:ce:85:0d:a6:a7:5c:ea: 78:75:e9:40:06:4c:92:23:ff:44:47:e5:f5:3a:f4:1a:29:12: 44:02:5c:4c:1f:54:e8:59:fb:e0:0f:d5:7f:49:8a:54:ab:c4: fe:e8:e7:f4:d1:0f:8f:ef:11:18:9b:fb:6c:c9:24:24:85:5f: e7:b5:29:9f:e2:af:0f:1e:ed:0c:87:61:16:2b:4c:bd:9f:c6: eb:05:42:23:f2:4a:66:6b:71:98:2b:45:1d:d7:72:fa:90:fa: 17:cf:cc:73:0d:65:f7:fa:2f:af:73:cf:27:54:91:b4:33:78: 2c:e0:75:86:19:c7:6e:d0:ca:90:ad:14:29:76:09:ca:e7:86: a0:3f:20:83:36:59:64:e2:26:ca:ad:4f:c3:bc:c6:9f:f7:f6: e0:b6:a0:97:2e:db:c4:6d:48:9a:2e:4b:ae:06:f5:b7:04:4c: 47:16:c2:15:d0:0e:ee:19:46:44:bd:4c:18:00:c1:31:41:93: 7a:8f:6a:68:5e:d3:7f:c5:70:c2:74:76:58:50:e1:89:e7:f8: b8:15:4e:f0:32:d6:50:0f:cc:e3:bc:2d:00:c4:3b:8b:b9:09: 74:29:45:bd:0e:19:ee:bc:c4:3b:57:4a:f8:89:57:82:01:38: 31:76:68:73 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLXiOsLX20pDLbz4K5jPeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcwZjVkOWVlZWZhMzA1YWVjYWVlMzFlNmZjYjRlMjIzMjFi MjgwNGEwHhcNMjUxMjA2MDEwMTIwWhcNMjUxMjA3MDEwMTIwWjAzMTEwLwYDVQQD EygyZWY0N2U0ZjlmODg3ZmI5NjhiY2Y2NTVhOWNiNDUzYzdlMjU4NjI5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkwe5ZzyG/yk1fMnv56zhBommq3zo Ttb2Pt7+VQ+PQX0CexEH5T/C9vHFLCFRsn7Fu97BiDe8K0UX3xe+QTcya6TJUR4u gw0A2jeEm9xJmllf6Xp/lXHDvbcoxVCJq2o/74G1ge5DI0+WkY4G3Wq7pfUgB3z7 sOeOGKleBcNYw1Fo3swKqEoRV3QGVITPUKzv6Sqt/sMaPpkgNZK2rcGwYF9wIk5w h6dZVfkU5YMiPofLSvCPFz7HedHcemboNB5bgNGmWp3DBqBbNGeWA12jSYH8AzJf ubTRt7Bh/FEqfvstf8zSE4dkxMgbgVsCFHDyu7DiShG9cbSWED/OLuNIpQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFC70fk+fiH+5aLz2VanLRTx+JYYpMB8GA1UdIwQY MBaAFHD12e7vowWuyu4x5vy04iMhsoBKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY1BYWjd1LWpCYTdLN2pIbV9MVGlJeUd5Z0VvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC8xNDAxMDUtZTQ2Mi00OGQyLWE1OGYt YTU3MDM1NzkyZTU3LzEvY1BYWjd1LWpCYTdLN2pIbV9MVGlJeUd5Z0VvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMC8xNDAxMDUtZTQ2Mi00OGQyLWE1OGYtYTU3MDM1NzkyZTU3 LzEvY1BYWjd1LWpCYTdLN2pIbV9MVGlJeUd5Z0VvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdMBSlOiB TCelQpjOhQ2mp1zqeHXpQAZMkiP/REfl9Tr0GikSRAJcTB9U6Fn74A/Vf0mKVKvE /ujn9NEPj+8RGJv7bMkkJIVf57Upn+KvDx7tDIdhFitMvZ/G6wVCI/JKZmtxmCtF Hddy+pD6F8/Mcw1l9/ovr3PPJ1SRtDN4LOB1hhnHbtDKkK0UKXYJyueGoD8ggzZZ ZOImyq1Pw7zGn/f24Lagly7bxG1Imi5Lrgb1twRMRxbCFdAO7hlGRL1MGADBMUGT eo9qaF7Tf8VwwnR2WFDhief4uBVO8DLWUA/M47wtAMQ7i7kJdClFvQ4Z7rzEO1dK +IlXggE4MXZocw== -----END CERTIFICATE-----Generated at Sat Dec 6 09:04:30 2025 by rpki-client