This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/70d450-80e4-44f9-99f3-21bc63f165f8/1/cWdSuRdHlX3M_w5x2mdPMp2DLeM.mft File: cWdSuRdHlX3M_w5x2mdPMp2DLeM.mft (raw, json) Hash identifier: Sr3yLlYIylfJsUtzOHXhsu40Y5cx9lIyXYkzE95PKME= Subject key identifier: 24:A9:70:ED:CF:5F:1A:A2:5B:3D:DA:A6:A3:71:40:C6:02:55:A7:FC Authority key identifier: 71:67:52:B9:17:47:95:7D:CC:FF:0E:71:DA:67:4F:32:9D:83:2D:E3 Certificate issuer: /CN=716752b91747957dccff0e71da674f329d832de3 Certificate serial: 019B2D0C93E60F703A8708C6C64B26EC58EF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cWdSuRdHlX3M_w5x2mdPMp2DLeM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/70d450-80e4-44f9-99f3-21bc63f165f8/1/cWdSuRdHlX3M_w5x2mdPMp2DLeM.mft Manifest number: 1387 Signing time: Wed 17 Dec 2025 16:02:37 +0000 Manifest this update: Wed 17 Dec 2025 16:02:37 +0000 Manifest next update: Thu 18 Dec 2025 16:02:37 +0000 Files and hashes: 1: PNXE3f7nm-ojlPdvV_1yYpzHd1o.roa (hash: TFO2XkeOQG2ZuVhhUVPTDBMBQ7rIutsnw7Dyad/B8zE=) 2: cWdSuRdHlX3M_w5x2mdPMp2DLeM.crl (hash: cRWB1mPPVR2B4KgVvJlLg7ZjtMJlntnUgig5mKD61p8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/70d450-80e4-44f9-99f3-21bc63f165f8/1/cWdSuRdHlX3M_w5x2mdPMp2DLeM.crl rsync://rpki.ripe.net/repository/DEFAULT/1f/70d450-80e4-44f9-99f3-21bc63f165f8/1/cWdSuRdHlX3M_w5x2mdPMp2DLeM.mft rsync://rpki.ripe.net/repository/DEFAULT/cWdSuRdHlX3M_w5x2mdPMp2DLeM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 10:00:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2d:0c:93:e6:0f:70:3a:87:08:c6:c6:4b:26:ec:58:ef Signature Algorithm: sha256WithRSAEncryption Issuer: CN=716752b91747957dccff0e71da674f329d832de3 Validity Not Before: Dec 17 16:02:37 2025 GMT Not After : Dec 18 16:02:37 2025 GMT Subject: CN=24a970edcf5f1aa25b3ddaa6a37140c60255a7fc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:14:d6:68:c1:15:d5:5a:69:03:c2:c7:eb:64: 86:55:ce:ec:f2:4d:f2:a7:c6:75:6c:76:ba:5e:e5: 02:b6:6d:0b:b8:17:1c:7a:2b:bc:9e:54:bb:05:b0: 82:26:65:22:60:80:61:cb:39:ec:bd:ed:6a:0a:d3: 60:70:c5:f8:17:e0:53:01:94:a9:80:2f:03:65:b0: c8:34:61:6b:70:82:54:76:77:23:6b:e3:52:d8:2a: 78:2b:fe:a7:ea:d3:c9:4d:9e:93:88:f2:c0:c9:7e: b7:4d:87:d5:aa:ed:c3:c8:68:91:2d:3a:14:bb:eb: 1c:9d:cc:42:9a:46:24:36:f5:21:ab:29:86:c6:33: 63:fe:fc:99:fe:7d:81:f7:17:c9:9b:6c:86:07:ca: ee:7f:be:d1:d5:9c:11:5d:75:fa:51:20:c2:02:b0: e3:4e:eb:4b:b6:c3:99:98:b3:bb:3c:59:73:87:e1: c2:dd:75:16:58:98:33:54:01:07:a7:f5:0b:43:d9: b7:2d:bf:6d:25:b9:67:ce:d5:fe:18:85:0f:67:83: eb:2b:56:de:4f:4c:96:78:04:ee:b4:9c:cb:1d:a8: e1:86:34:dd:a5:0f:b7:1e:2a:2b:90:91:fb:ce:90: 5b:c7:21:4a:67:ec:c4:a1:7e:d5:10:4f:73:0e:4d: 20:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:A9:70:ED:CF:5F:1A:A2:5B:3D:DA:A6:A3:71:40:C6:02:55:A7:FC X509v3 Authority Key Identifier: keyid:71:67:52:B9:17:47:95:7D:CC:FF:0E:71:DA:67:4F:32:9D:83:2D:E3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cWdSuRdHlX3M_w5x2mdPMp2DLeM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/70d450-80e4-44f9-99f3-21bc63f165f8/1/cWdSuRdHlX3M_w5x2mdPMp2DLeM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/70d450-80e4-44f9-99f3-21bc63f165f8/1/cWdSuRdHlX3M_w5x2mdPMp2DLeM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b8:34:27:f7:8a:ce:fe:80:5d:dc:5a:d0:66:fe:9a:be:61:9d: c3:f5:24:7a:85:cf:40:0d:75:c1:df:b0:6a:5b:11:f7:1b:5d: 07:dc:91:ce:6c:e2:2d:86:f1:6c:b9:e6:b6:f7:da:c0:31:6d: 98:32:45:64:4f:a6:60:95:a7:00:af:60:99:45:4d:6c:58:a5: 70:12:ca:2f:f3:15:71:10:69:71:a8:23:57:36:6f:b9:54:ce: 3f:42:af:b5:ac:1a:0b:f8:17:20:69:93:b3:20:03:c8:dc:2c: 4a:ef:e3:e1:5e:7b:5f:07:6c:7f:7a:7b:1c:e5:ba:18:a7:db: 6e:00:51:89:59:68:29:c7:2b:6a:d7:59:5f:ff:82:50:b4:0c: bb:b3:ee:e3:88:75:f5:20:bb:05:26:a6:16:70:33:ba:5b:90: 5a:40:e6:9b:a6:b5:e1:c2:86:3e:81:33:38:48:07:e2:89:5b: e8:f5:c9:1a:89:7b:c6:6e:91:0e:4b:ef:72:f3:57:a1:43:e0: 11:48:93:5c:1e:9d:22:0c:a5:6d:94:52:07:92:35:ec:9d:1d: f1:ba:b2:02:50:36:2f:e8:44:b4:51:51:e5:0e:20:ed:9f:68: b5:a1:4b:2f:fc:f8:2a:7f:91:c3:2f:d6:eb:7e:a5:0d:ff:d5: fc:4a:11:e0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZstDJPmD3A6hwjGxksm7FjvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcxNjc1MmI5MTc0Nzk1N2RjY2ZmMGU3MWRhNjc0ZjMyOWQ4 MzJkZTMwHhcNMjUxMjE3MTYwMjM3WhcNMjUxMjE4MTYwMjM3WjAzMTEwLwYDVQQD EygyNGE5NzBlZGNmNWYxYWEyNWIzZGRhYTZhMzcxNDBjNjAyNTVhN2ZjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqBTWaMEV1VppA8LH62SGVc7s8k3y p8Z1bHa6XuUCtm0LuBcceiu8nlS7BbCCJmUiYIBhyznsve1qCtNgcMX4F+BTAZSp gC8DZbDINGFrcIJUdncja+NS2Cp4K/6n6tPJTZ6TiPLAyX63TYfVqu3DyGiRLToU u+scncxCmkYkNvUhqymGxjNj/vyZ/n2B9xfJm2yGB8ruf77R1ZwRXXX6USDCArDj TutLtsOZmLO7PFlzh+HC3XUWWJgzVAEHp/ULQ9m3Lb9tJblnztX+GIUPZ4PrK1be T0yWeATutJzLHajhhjTdpQ+3HiorkJH7zpBbxyFKZ+zEoX7VEE9zDk0gswIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCSpcO3PXxqiWz3apqNxQMYCVaf8MB8GA1UdIwQY MBaAFHFnUrkXR5V9zP8OcdpnTzKdgy3jMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY1dkU3VSZEhsWDNNX3c1eDJtZFBNcDJETGVNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZi83MGQ0NTAtODBlNC00NGY5LTk5ZjMt MjFiYzYzZjE2NWY4LzEvY1dkU3VSZEhsWDNNX3c1eDJtZFBNcDJETGVNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xZi83MGQ0NTAtODBlNC00NGY5LTk5ZjMtMjFiYzYzZjE2NWY4 LzEvY1dkU3VSZEhsWDNNX3c1eDJtZFBNcDJETGVNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAuDQn94rO /oBd3FrQZv6avmGdw/UkeoXPQA11wd+walsR9xtdB9yRzmziLYbxbLnmtvfawDFt mDJFZE+mYJWnAK9gmUVNbFilcBLKL/MVcRBpcagjVzZvuVTOP0KvtawaC/gXIGmT syADyNwsSu/j4V57Xwdsf3p7HOW6GKfbbgBRiVloKccratdZX/+CULQMu7Pu44h1 9SC7BSamFnAzuluQWkDmm6a14cKGPoEzOEgH4olb6PXJGol7xm6RDkvvcvNXoUPg EUiTXB6dIgylbZRSB5I17J0d8bqyAlA2L+hEtFFR5Q4g7Z9otaFLL/z4Kn+Rwy/W 636lDf/V/EoR4A== -----END CERTIFICATE-----Generated at Wed Dec 17 19:21:38 2025 by rpki-client