This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/df7944-2589-47cb-ab56-5358401fb796/1/cL9VMELxpDgn3ANFALvRBopyl8o.mft File: cL9VMELxpDgn3ANFALvRBopyl8o.mft (raw, json) Hash identifier: 6ZAj+V/V3sqFY2NnM6WFnoZgb21QmkbYZUxzNMZfieI= Subject key identifier: 91:80:F5:26:5D:91:29:21:B4:0B:9E:15:5C:AA:E7:DC:E6:B2:9A:78 Authority key identifier: 70:BF:55:30:42:F1:A4:38:27:DC:03:45:00:BB:D1:06:8A:72:97:CA Certificate issuer: /CN=70bf553042f1a43827dc034500bbd1068a7297ca Certificate serial: 019AF540BDC803B546A314AF7204EFD7B1A7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cL9VMELxpDgn3ANFALvRBopyl8o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/df7944-2589-47cb-ab56-5358401fb796/1/cL9VMELxpDgn3ANFALvRBopyl8o.mft Manifest number: 0EAB Signing time: Sat 06 Dec 2025 20:00:51 +0000 Manifest this update: Sat 06 Dec 2025 20:00:51 +0000 Manifest next update: Sun 07 Dec 2025 20:00:51 +0000 Files and hashes: 1: HUbkLtP-uwBAqaBQMhiCQa9v6TU.roa (hash: 3c9QMN5Lp2jJwJ34jy6AEZD7aoQeLurWKfcN2Uqhz/w=) 2: cL9VMELxpDgn3ANFALvRBopyl8o.crl (hash: 9MIiLWJIsjRhKvcWYOH3m2GGmzH3OnsdMdvmXZA5kWQ=) 3: ecFUW2z0XsJzdPaPmfmi1NbravY.roa (hash: B/1KiGYT9I28lQbSFekF4v776yFSZOm/z2BZeazx7uo=) 4: pqlbIbNJ9fb6HI0B5-w4UgSYcbY.roa (hash: mcYLCtbaBwaS/xS6dmXpUntAVPZrHZ1andB/RjcjVcA=) 5: tY7BHUvnSszc7zTuhTRehaET6sI.roa (hash: KeG1ndmoCZ2IjHvkM2LPj9WePrlmC0S+eFWuoo10hmc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/df7944-2589-47cb-ab56-5358401fb796/1/cL9VMELxpDgn3ANFALvRBopyl8o.crl rsync://rpki.ripe.net/repository/DEFAULT/11/df7944-2589-47cb-ab56-5358401fb796/1/cL9VMELxpDgn3ANFALvRBopyl8o.mft rsync://rpki.ripe.net/repository/DEFAULT/cL9VMELxpDgn3ANFALvRBopyl8o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:40:bd:c8:03:b5:46:a3:14:af:72:04:ef:d7:b1:a7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=70bf553042f1a43827dc034500bbd1068a7297ca Validity Not Before: Dec 6 20:00:51 2025 GMT Not After : Dec 7 20:00:51 2025 GMT Subject: CN=9180f5265d912921b40b9e155caae7dce6b29a78 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:07:fb:65:0c:f6:69:09:52:cf:03:8d:db:86: d5:a7:da:ca:5d:04:01:4c:48:c9:84:5e:3f:f7:c1: 2c:0d:20:3a:e1:9c:4c:e7:90:13:14:3a:9f:bd:9a: dc:1e:e6:90:4c:b9:a8:0f:7f:13:99:17:80:80:4d: 0e:2b:8b:d7:3b:77:78:76:26:11:d4:84:a6:a7:52: 9e:cb:de:08:80:e2:37:b1:63:52:6f:fa:34:d6:1b: b1:7b:94:ba:70:af:0d:1e:bd:f6:33:5f:ec:ab:e3: 74:f5:fc:7c:ca:c9:69:3a:aa:73:0a:39:54:02:56: af:0f:64:c1:31:f7:d6:e9:96:57:97:f7:0b:c3:68: 4d:ed:72:56:9a:f6:3a:6e:ba:7d:9d:fe:66:d6:b7: dd:14:a5:0b:c0:2c:2f:b7:eb:35:f9:a3:5c:f3:35: 5b:49:26:3b:8b:5b:60:c5:31:b7:fd:04:ae:3a:92: 32:7b:c8:62:29:f6:69:23:49:25:e4:7f:2b:e2:76: c8:d8:8d:8f:d8:55:81:4b:24:d7:e4:6a:17:cc:1f: 38:f5:99:e4:a8:df:e2:cc:69:94:32:3b:ba:6d:ac: 10:1d:8e:f1:4b:2b:91:0e:73:46:93:22:0b:b6:68: 85:42:1e:af:04:2d:e1:6e:31:85:90:07:58:72:89: 19:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:80:F5:26:5D:91:29:21:B4:0B:9E:15:5C:AA:E7:DC:E6:B2:9A:78 X509v3 Authority Key Identifier: keyid:70:BF:55:30:42:F1:A4:38:27:DC:03:45:00:BB:D1:06:8A:72:97:CA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cL9VMELxpDgn3ANFALvRBopyl8o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/df7944-2589-47cb-ab56-5358401fb796/1/cL9VMELxpDgn3ANFALvRBopyl8o.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/11/df7944-2589-47cb-ab56-5358401fb796/1/cL9VMELxpDgn3ANFALvRBopyl8o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9f:74:bd:13:da:ea:28:b7:1a:ba:c9:0b:03:9d:b8:58:70:cd: b5:7e:ef:84:2b:7c:d8:2d:8d:a5:29:26:64:9e:7d:83:d1:4d: 60:3a:56:a4:5f:1a:f4:a9:52:b6:05:63:62:07:d1:df:e8:73: 09:3f:7c:bb:aa:93:a0:1f:83:25:2f:39:68:c4:2f:a7:05:c0: 48:d6:7c:f6:29:71:29:60:a3:be:39:46:56:db:0e:0a:c0:8b: ea:09:1c:e8:e8:b1:db:1a:89:24:f7:b6:f8:83:16:fe:5e:0f: 6f:50:2a:c0:51:98:ff:f9:2c:e1:a2:86:f9:99:c9:b9:5a:5a: 67:71:24:71:f7:9f:ae:5d:ab:ba:c8:17:e2:60:14:48:ac:ad: 26:07:5a:8f:c0:f1:06:c8:14:c1:20:5d:67:81:49:9c:a7:d3: 38:e3:ab:ab:1f:57:50:09:3f:92:29:08:1d:93:7a:f6:84:54: ab:d6:d0:a7:b9:cf:13:de:8f:e4:99:bc:c6:6f:74:bc:d5:d4: eb:98:1a:cd:1a:9c:d7:5f:84:0a:bb:91:4a:c2:70:33:7f:a5: 4d:dd:38:07:46:8b:8a:21:45:f5:ce:e7:fc:9d:01:6f:df:e8: 99:f6:80:e0:fc:f3:22:df:a7:4e:e6:4e:b0:70:2e:37:87:24: 94:31:d0:bb -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1QL3IA7VGoxSvcgTv17GnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcwYmY1NTMwNDJmMWE0MzgyN2RjMDM0NTAwYmJkMTA2OGE3 Mjk3Y2EwHhcNMjUxMjA2MjAwMDUxWhcNMjUxMjA3MjAwMDUxWjAzMTEwLwYDVQQD Eyg5MTgwZjUyNjVkOTEyOTIxYjQwYjllMTU1Y2FhZTdkY2U2YjI5YTc4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4gf7ZQz2aQlSzwON24bVp9rKXQQB TEjJhF4/98EsDSA64ZxM55ATFDqfvZrcHuaQTLmoD38TmReAgE0OK4vXO3d4diYR 1ISmp1Key94IgOI3sWNSb/o01huxe5S6cK8NHr32M1/sq+N09fx8yslpOqpzCjlU AlavD2TBMffW6ZZXl/cLw2hN7XJWmvY6brp9nf5m1rfdFKULwCwvt+s1+aNc8zVb SSY7i1tgxTG3/QSuOpIye8hiKfZpI0kl5H8r4nbI2I2P2FWBSyTX5GoXzB849Znk qN/izGmUMju6bawQHY7xSyuRDnNGkyILtmiFQh6vBC3hbjGFkAdYcokZxwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJGA9SZdkSkhtAueFVyq59zmspp4MB8GA1UdIwQY MBaAFHC/VTBC8aQ4J9wDRQC70QaKcpfKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY0w5Vk1FTHhwRGduM0FORkFMdlJCb3B5bDhvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMS9kZjc5NDQtMjU4OS00N2NiLWFiNTYt NTM1ODQwMWZiNzk2LzEvY0w5Vk1FTHhwRGduM0FORkFMdlJCb3B5bDhvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMS9kZjc5NDQtMjU4OS00N2NiLWFiNTYtNTM1ODQwMWZiNzk2 LzEvY0w5Vk1FTHhwRGduM0FORkFMdlJCb3B5bDhvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAn3S9E9rq KLcauskLA524WHDNtX7vhCt82C2NpSkmZJ59g9FNYDpWpF8a9KlStgVjYgfR3+hz CT98u6qToB+DJS85aMQvpwXASNZ89ilxKWCjvjlGVtsOCsCL6gkc6Oix2xqJJPe2 +IMW/l4Pb1AqwFGY//ks4aKG+ZnJuVpaZ3Ekcfefrl2rusgX4mAUSKytJgdaj8Dx BsgUwSBdZ4FJnKfTOOOrqx9XUAk/kikIHZN69oRUq9bQp7nPE96P5Jm8xm90vNXU 65gazRqc11+ECruRSsJwM3+lTd04B0aLiiFF9c7n/J0Bb9/omfaA4PzzIt+nTuZO sHAuN4cklDHQuw== -----END CERTIFICATE-----Generated at Sat Dec 6 22:59:23 2025 by rpki-client