This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/7766bb-bb48-49be-b21f-0a35b7ed63c7/1/cPK0H9NmFINeM_wIgdskY4s6eHs.mft File: cPK0H9NmFINeM_wIgdskY4s6eHs.mft (raw, json) Hash identifier: Xoa8RDljzy3hbKu5IGmLNu7ilEuws5pdIsr9wzVIAmM= Subject key identifier: 59:B5:B0:03:2A:27:7F:D9:E8:0B:05:B8:81:0A:BF:D7:59:33:7E:AF Authority key identifier: 70:F2:B4:1F:D3:66:14:83:5E:33:FC:08:81:DB:24:63:8B:3A:78:7B Certificate issuer: /CN=70f2b41fd36614835e33fc0881db24638b3a787b Certificate serial: 019AF27656A1CFB442D3CEC86F6622A06502 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cPK0H9NmFINeM_wIgdskY4s6eHs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/7766bb-bb48-49be-b21f-0a35b7ed63c7/1/cPK0H9NmFINeM_wIgdskY4s6eHs.mft Manifest number: 1451 Signing time: Sat 06 Dec 2025 07:00:32 +0000 Manifest this update: Sat 06 Dec 2025 07:00:32 +0000 Manifest next update: Sun 07 Dec 2025 07:00:32 +0000 Files and hashes: 1: cPK0H9NmFINeM_wIgdskY4s6eHs.crl (hash: KDYHtUu8dqS/f8kynkqSN0JAEC0CQWqSKu9yHIg4+CE=) 2: iViHONOdVrtJaKvFtb1zW5ZiFfE.roa (hash: y//sfFe0FaBOPBIT3c460VOfTsEZyJ671nHpKb/hUio=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/7766bb-bb48-49be-b21f-0a35b7ed63c7/1/cPK0H9NmFINeM_wIgdskY4s6eHs.crl rsync://rpki.ripe.net/repository/DEFAULT/1b/7766bb-bb48-49be-b21f-0a35b7ed63c7/1/cPK0H9NmFINeM_wIgdskY4s6eHs.mft rsync://rpki.ripe.net/repository/DEFAULT/cPK0H9NmFINeM_wIgdskY4s6eHs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 07:00:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:76:56:a1:cf:b4:42:d3:ce:c8:6f:66:22:a0:65:02 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=70f2b41fd36614835e33fc0881db24638b3a787b Validity Not Before: Dec 6 07:00:32 2025 GMT Not After : Dec 7 07:00:32 2025 GMT Subject: CN=59b5b0032a277fd9e80b05b8810abfd759337eaf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:7d:87:43:1a:ff:5a:02:79:a6:2c:88:f9:c2: 84:a4:48:18:64:ec:43:47:88:5c:96:e6:9a:7a:dd: 28:f2:b6:e3:94:7b:9d:e5:54:6f:bc:a5:35:3c:aa: a6:3d:c8:25:2d:98:7a:6e:b8:d2:11:ba:e4:2e:14: c0:37:ee:be:d5:a8:26:01:b6:0c:9f:9a:ba:ed:83: 74:5b:2c:d7:a6:24:40:89:90:2f:ae:41:f9:54:8b: 43:67:42:9b:75:74:ec:7a:11:56:99:17:bc:a9:8f: 6d:2c:50:53:64:0f:56:ef:c8:28:75:3f:da:13:93: b4:18:ae:5f:9e:c6:13:30:f0:ef:1a:b9:79:9c:3d: f1:28:73:90:58:b4:7d:11:6e:32:81:41:d1:a8:54: 2f:b4:04:c5:8a:3b:94:c9:fd:e9:ae:01:a5:dc:98: 33:c7:57:fd:a9:b6:af:2c:ac:85:d2:77:9e:ac:07: 6c:57:81:9e:4f:71:05:d1:eb:33:1b:f5:f1:45:77: 55:71:07:06:30:06:ea:2a:52:2d:49:13:cc:36:82: c3:f7:0e:01:42:1d:24:29:ce:59:9c:af:12:30:1f: f9:57:c8:64:b4:2c:78:c8:83:c8:d3:9a:8e:35:cb: 71:25:da:74:fd:a7:a7:c3:9a:03:f2:ee:f7:bd:16: 8c:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:B5:B0:03:2A:27:7F:D9:E8:0B:05:B8:81:0A:BF:D7:59:33:7E:AF X509v3 Authority Key Identifier: keyid:70:F2:B4:1F:D3:66:14:83:5E:33:FC:08:81:DB:24:63:8B:3A:78:7B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cPK0H9NmFINeM_wIgdskY4s6eHs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/7766bb-bb48-49be-b21f-0a35b7ed63c7/1/cPK0H9NmFINeM_wIgdskY4s6eHs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/7766bb-bb48-49be-b21f-0a35b7ed63c7/1/cPK0H9NmFINeM_wIgdskY4s6eHs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 09:e9:ff:c7:a8:e9:97:30:e1:d1:db:1e:7c:16:3f:60:e9:b0: fd:31:15:45:e4:27:ab:78:22:50:fa:30:5d:b2:8c:11:4b:34: 97:6f:dd:98:23:8a:36:aa:38:3f:1d:03:97:83:47:8e:ff:b6: f6:4f:81:76:40:34:08:a2:75:7a:ed:23:cf:55:b7:34:bb:9d: 57:ce:dd:85:8a:9b:58:fe:c7:68:71:27:3d:52:ba:71:99:aa: 7c:4a:c8:b6:c2:6f:c5:81:4a:6b:72:df:10:1f:e2:0d:0e:89: a3:4b:87:f6:c8:8b:3c:cf:1a:23:07:e2:bc:b2:ff:cd:25:14: 7e:98:93:31:03:21:8f:3a:57:ec:ab:40:d9:8f:a3:c6:9c:48: 64:5e:df:6b:e1:6f:fe:6b:bc:d8:f3:27:0b:a4:9f:e0:3d:4c: 7e:06:a5:04:0e:e2:7e:ca:0c:85:8f:92:19:d6:b8:86:98:b6: 65:a7:32:18:2a:74:7f:4c:b8:0b:52:ca:e1:80:cc:a6:ae:e6: b8:13:44:84:1d:bb:72:87:bf:d6:87:02:0f:e3:51:3c:84:34: a7:73:96:41:a2:56:e3:8c:72:cd:a7:af:33:f0:40:1e:5d:e2: 78:c0:9c:9f:82:53:fd:86:56:09:3e:01:a2:6b:53:6a:e0:74: a5:81:8a:25 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrydlahz7RC087Ib2YioGUCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcwZjJiNDFmZDM2NjE0ODM1ZTMzZmMwODgxZGIyNDYzOGIz YTc4N2IwHhcNMjUxMjA2MDcwMDMyWhcNMjUxMjA3MDcwMDMyWjAzMTEwLwYDVQQD Eyg1OWI1YjAwMzJhMjc3ZmQ5ZTgwYjA1Yjg4MTBhYmZkNzU5MzM3ZWFmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA532HQxr/WgJ5piyI+cKEpEgYZOxD R4hcluaaet0o8rbjlHud5VRvvKU1PKqmPcglLZh6brjSEbrkLhTAN+6+1agmAbYM n5q67YN0WyzXpiRAiZAvrkH5VItDZ0KbdXTsehFWmRe8qY9tLFBTZA9W78godT/a E5O0GK5fnsYTMPDvGrl5nD3xKHOQWLR9EW4ygUHRqFQvtATFijuUyf3prgGl3Jgz x1f9qbavLKyF0neerAdsV4GeT3EF0eszG/XxRXdVcQcGMAbqKlItSRPMNoLD9w4B Qh0kKc5ZnK8SMB/5V8hktCx4yIPI05qONctxJdp0/aenw5oD8u73vRaMRQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFm1sAMqJ3/Z6AsFuIEKv9dZM36vMB8GA1UdIwQY MBaAFHDytB/TZhSDXjP8CIHbJGOLOnh7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY1BLMEg5Tm1GSU5lTV93SWdkc2tZNHM2ZUhzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYi83NzY2YmItYmI0OC00OWJlLWIyMWYt MGEzNWI3ZWQ2M2M3LzEvY1BLMEg5Tm1GSU5lTV93SWdkc2tZNHM2ZUhzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYi83NzY2YmItYmI0OC00OWJlLWIyMWYtMGEzNWI3ZWQ2M2M3 LzEvY1BLMEg5Tm1GSU5lTV93SWdkc2tZNHM2ZUhzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACen/x6jp lzDh0dsefBY/YOmw/TEVReQnq3giUPowXbKMEUs0l2/dmCOKNqo4Px0Dl4NHjv+2 9k+BdkA0CKJ1eu0jz1W3NLudV87dhYqbWP7HaHEnPVK6cZmqfErItsJvxYFKa3Lf EB/iDQ6Jo0uH9siLPM8aIwfivLL/zSUUfpiTMQMhjzpX7KtA2Y+jxpxIZF7fa+Fv /mu82PMnC6Sf4D1MfgalBA7ifsoMhY+SGda4hpi2ZacyGCp0f0y4C1LK4YDMpq7m uBNEhB27coe/1ocCD+NRPIQ0p3OWQaJW44xyzaevM/BAHl3ieMCcn4JT/YZWCT4B omtTauB0pYGKJQ== -----END CERTIFICATE-----Generated at Sat Dec 6 15:57:33 2025 by rpki-client