This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/140105-e462-48d2-a58f-a57035792e57/1/cPXZ7u-jBa7K7jHm_LTiIyGygEo.mft File: cPXZ7u-jBa7K7jHm_LTiIyGygEo.mft (raw, json) Hash identifier: Gc5axKRA3mAkexvoihm4uF7AeI7jy/ZMELkxW5jyAug= Subject key identifier: 62:22:A0:9B:1C:63:25:79:47:CB:CD:07:05:DE:D5:BD:CB:92:D0:37 Authority key identifier: 70:F5:D9:EE:EF:A3:05:AE:CA:EE:31:E6:FC:B4:E2:23:21:B2:80:4A Certificate issuer: /CN=70f5d9eeefa305aecaee31e6fcb4e22321b2804a Certificate serial: 019B2EFAAF3C155646233335E7F26D6DB217 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cPXZ7u-jBa7K7jHm_LTiIyGygEo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/140105-e462-48d2-a58f-a57035792e57/1/cPXZ7u-jBa7K7jHm_LTiIyGygEo.mft Manifest number: 1781 Signing time: Thu 18 Dec 2025 01:02:19 +0000 Manifest this update: Thu 18 Dec 2025 01:02:19 +0000 Manifest next update: Fri 19 Dec 2025 01:02:19 +0000 Files and hashes: 1: 16PMvyBjwLMgKpIOkxrHYliD-08.roa (hash: Y3LQq9IlsGjKrSV01GWpHO25wmy0HId5ENMWGwyBnEU=) 2: cPXZ7u-jBa7K7jHm_LTiIyGygEo.crl (hash: e4MHPAHxEIXCu8mMOKtElzqpCxJy0hZFQW+sYStfBlY=) 3: jgcslWHmygjkRIS6MtfzGhZ40MU.roa (hash: sDmrr8zpKt5WpBGAECM7NZQll745IxQeWlqllvJtGkM=) 4: nikcVRLPEkpjmj22Ziw5gbk7U3I.roa (hash: MneHYx5l45SiPBky73Uw5AM8Oy5u1LgkSXDWT7ZAv/c=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/140105-e462-48d2-a58f-a57035792e57/1/cPXZ7u-jBa7K7jHm_LTiIyGygEo.crl rsync://rpki.ripe.net/repository/DEFAULT/10/140105-e462-48d2-a58f-a57035792e57/1/cPXZ7u-jBa7K7jHm_LTiIyGygEo.mft rsync://rpki.ripe.net/repository/DEFAULT/cPXZ7u-jBa7K7jHm_LTiIyGygEo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 01:02:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2e:fa:af:3c:15:56:46:23:33:35:e7:f2:6d:6d:b2:17 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=70f5d9eeefa305aecaee31e6fcb4e22321b2804a Validity Not Before: Dec 18 01:02:19 2025 GMT Not After : Dec 19 01:02:19 2025 GMT Subject: CN=6222a09b1c63257947cbcd0705ded5bdcb92d037 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:80:8e:69:0f:d6:b3:50:b6:e7:30:97:3e:fc: 7a:a4:c6:9b:d2:a5:65:86:fd:fd:1a:8e:f1:39:9a: 1c:75:0a:70:29:fd:42:8d:09:00:98:20:df:fb:46: da:a4:33:fc:69:22:25:d8:4b:ec:e7:95:0f:f5:89: 8a:d9:b6:e2:a5:30:68:27:e5:0d:75:16:69:69:ed: 78:f6:8a:c1:90:ef:c1:e7:c8:f7:88:c7:4c:16:00: c5:8c:91:b5:b5:ab:a1:4a:0f:6a:ab:bc:9b:39:89: b5:e8:41:c3:62:e6:69:66:2c:4c:86:e0:6e:fd:e0: a5:f4:6d:01:39:30:65:1c:de:87:da:82:62:01:84: 1b:33:b4:28:f1:22:78:db:42:9b:bd:f7:39:d1:02: 5a:8b:1e:02:61:25:fd:47:57:af:4c:5b:92:20:17: 36:00:af:09:9b:66:16:49:8a:be:d9:9a:a7:ed:89: 70:bf:ac:d7:39:58:0e:76:af:27:29:a2:e0:0c:6d: 5f:db:63:aa:df:4d:bc:9f:31:6b:fe:42:96:36:68: bc:2e:bd:09:7e:4c:52:45:ea:79:bb:2f:7a:6e:bb: ad:9f:a1:d1:63:13:c0:b8:e2:87:d3:c0:f4:c6:2d: 4c:4a:9e:31:7f:23:85:02:14:2b:04:c1:6b:5b:a9: ef:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:22:A0:9B:1C:63:25:79:47:CB:CD:07:05:DE:D5:BD:CB:92:D0:37 X509v3 Authority Key Identifier: keyid:70:F5:D9:EE:EF:A3:05:AE:CA:EE:31:E6:FC:B4:E2:23:21:B2:80:4A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cPXZ7u-jBa7K7jHm_LTiIyGygEo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/140105-e462-48d2-a58f-a57035792e57/1/cPXZ7u-jBa7K7jHm_LTiIyGygEo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/10/140105-e462-48d2-a58f-a57035792e57/1/cPXZ7u-jBa7K7jHm_LTiIyGygEo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 43:b8:02:8b:c3:c4:51:cf:2f:2b:09:63:65:75:49:a5:7e:c0: af:ba:e4:c9:90:81:94:a7:2f:39:6c:2a:d0:1f:1c:a9:8b:18: 55:40:66:e4:19:e4:4d:4d:b5:a9:d7:40:14:f4:06:a5:a4:09: da:e2:f5:1f:65:53:bd:1e:d9:97:18:e7:09:e2:22:c2:35:6b: 02:8f:b9:01:6c:eb:af:a2:36:e7:5e:cb:b1:2e:73:87:8a:fb: 2e:ae:15:6b:82:89:ca:02:6d:ec:3a:39:ef:51:79:db:ef:61: 84:ce:01:a1:27:8d:5b:84:a4:6e:94:ee:76:7f:1b:e0:7a:d6: e7:da:ed:bc:a2:38:5e:c4:75:dc:7c:98:13:97:48:a6:52:13: 36:17:b1:ba:5c:6f:50:40:9f:48:27:45:e2:75:78:0f:6f:aa: 3a:aa:07:87:09:7d:e6:99:71:2b:0f:18:95:4b:d8:98:e7:0e: e6:1a:a6:67:1e:02:b1:a4:0a:26:fc:83:c8:87:b7:b2:bb:39: d7:0d:d2:24:e8:b2:4b:8c:90:db:e8:b3:47:01:5f:4e:fb:55: 7e:4e:6b:3b:5a:d3:67:f0:aa:5b:2f:bb:07:14:fa:02:93:52: 01:c3:a6:6e:7f:03:8b:d9:55:76:ed:ee:f3:b8:79:3d:6b:57: 74:83:5b:96 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsu+q88FVZGIzM15/JtbbIXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcwZjVkOWVlZWZhMzA1YWVjYWVlMzFlNmZjYjRlMjIzMjFi MjgwNGEwHhcNMjUxMjE4MDEwMjE5WhcNMjUxMjE5MDEwMjE5WjAzMTEwLwYDVQQD Eyg2MjIyYTA5YjFjNjMyNTc5NDdjYmNkMDcwNWRlZDViZGNiOTJkMDM3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy4COaQ/Ws1C25zCXPvx6pMab0qVl hv39Go7xOZocdQpwKf1CjQkAmCDf+0bapDP8aSIl2Evs55UP9YmK2bbipTBoJ+UN dRZpae149orBkO/B58j3iMdMFgDFjJG1tauhSg9qq7ybOYm16EHDYuZpZixMhuBu /eCl9G0BOTBlHN6H2oJiAYQbM7Qo8SJ420Kbvfc50QJaix4CYSX9R1evTFuSIBc2 AK8Jm2YWSYq+2Zqn7Ylwv6zXOVgOdq8nKaLgDG1f22Oq3028nzFr/kKWNmi8Lr0J fkxSRep5uy96brutn6HRYxPAuOKH08D0xi1MSp4xfyOFAhQrBMFrW6nvvwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGIioJscYyV5R8vNBwXe1b3LktA3MB8GA1UdIwQY MBaAFHD12e7vowWuyu4x5vy04iMhsoBKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY1BYWjd1LWpCYTdLN2pIbV9MVGlJeUd5Z0VvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC8xNDAxMDUtZTQ2Mi00OGQyLWE1OGYt YTU3MDM1NzkyZTU3LzEvY1BYWjd1LWpCYTdLN2pIbV9MVGlJeUd5Z0VvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMC8xNDAxMDUtZTQ2Mi00OGQyLWE1OGYtYTU3MDM1NzkyZTU3 LzEvY1BYWjd1LWpCYTdLN2pIbV9MVGlJeUd5Z0VvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQ7gCi8PE Uc8vKwljZXVJpX7Ar7rkyZCBlKcvOWwq0B8cqYsYVUBm5BnkTU21qddAFPQGpaQJ 2uL1H2VTvR7ZlxjnCeIiwjVrAo+5AWzrr6I2517LsS5zh4r7Lq4Va4KJygJt7Do5 71F52+9hhM4BoSeNW4SkbpTudn8b4HrW59rtvKI4XsR13HyYE5dIplITNhexulxv UECfSCdF4nV4D2+qOqoHhwl95plxKw8YlUvYmOcO5hqmZx4CsaQKJvyDyIe3srs5 1w3SJOiyS4yQ2+izRwFfTvtVfk5rO1rTZ/CqWy+7BxT6ApNSAcOmbn8Di9lVdu3u 87h5PWtXdINblg== -----END CERTIFICATE-----Generated at Thu Dec 18 07:56:54 2025 by rpki-client