This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/477c86-c7d6-4e37-bff6-a0072bac9f48/1/cms1Dp9PElni-cYJsi5l-9GGIGs.mft File: cms1Dp9PElni-cYJsi5l-9GGIGs.mft (raw, json) Hash identifier: a6RicOnWST+rApayaxc4z342G8fAs86u2PCOKBopYcQ= Subject key identifier: F5:A4:7D:6B:45:8B:2C:EF:35:6C:CA:3E:F3:23:E0:FD:8B:60:36:9E Authority key identifier: 72:6B:35:0E:9F:4F:12:59:E2:F9:C6:09:B2:2E:65:FB:D1:86:20:6B Certificate issuer: /CN=726b350e9f4f1259e2f9c609b22e65fbd186206b Certificate serial: 019AF3895419D8F0A672E723F044F1C9BE99 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cms1Dp9PElni-cYJsi5l-9GGIGs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/477c86-c7d6-4e37-bff6-a0072bac9f48/1/cms1Dp9PElni-cYJsi5l-9GGIGs.mft Manifest number: 0A5B Signing time: Sat 06 Dec 2025 12:00:54 +0000 Manifest this update: Sat 06 Dec 2025 12:00:54 +0000 Manifest next update: Sun 07 Dec 2025 12:00:54 +0000 Files and hashes: 1: CgBNGq2vvpW1xEBq_J8TTjYOWu0.roa (hash: CfZUCA05oFbMMXS/ui8XIHr2JUyCob7FGarrcgeEvE0=) 2: _DE8jBpnVZ36FaQjKKqWbHiWbvo.roa (hash: nj3mkL3pbPWWGWLOVhi9o9i9dXTzVhaJgzjUgFTiKuo=) 3: cms1Dp9PElni-cYJsi5l-9GGIGs.crl (hash: dwJJ9n19RljCjh6LEpMHXr0GwJgCafdkjpPGcl3WiwA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/477c86-c7d6-4e37-bff6-a0072bac9f48/1/cms1Dp9PElni-cYJsi5l-9GGIGs.crl rsync://rpki.ripe.net/repository/DEFAULT/2a/477c86-c7d6-4e37-bff6-a0072bac9f48/1/cms1Dp9PElni-cYJsi5l-9GGIGs.mft rsync://rpki.ripe.net/repository/DEFAULT/cms1Dp9PElni-cYJsi5l-9GGIGs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 12:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:89:54:19:d8:f0:a6:72:e7:23:f0:44:f1:c9:be:99 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=726b350e9f4f1259e2f9c609b22e65fbd186206b Validity Not Before: Dec 6 12:00:54 2025 GMT Not After : Dec 7 12:00:54 2025 GMT Subject: CN=f5a47d6b458b2cef356cca3ef323e0fd8b60369e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:f8:14:75:91:be:06:29:16:c7:e6:b5:b4:32: e4:88:dd:1f:36:d1:7c:0c:23:0b:47:db:0b:e5:c3: 92:67:28:f1:65:91:14:32:90:89:c3:48:ad:79:70: 6d:64:46:4b:8a:4b:02:c3:02:3a:98:b9:34:a9:f8: bb:c5:c6:66:04:e9:ba:a2:92:5b:60:b0:16:9b:c7: ec:a7:e0:b6:95:07:e2:92:13:49:e8:03:a6:b5:c8: ad:5b:bc:72:0a:f8:fe:c7:92:7a:5e:1d:4b:da:cf: 52:60:c9:50:8e:04:90:79:7a:10:80:a1:49:20:42: e4:cc:b5:2d:e2:be:3a:be:80:1a:2c:32:68:63:6f: 5f:f5:25:8b:9a:6a:57:31:d2:e1:85:86:d3:e3:0b: 7c:55:77:bf:a1:95:45:6a:2c:57:74:14:58:11:7d: fb:80:17:a4:f0:90:96:7e:a5:ca:19:75:7d:f7:09: aa:9a:77:bc:58:d0:5d:ee:8d:ed:2d:ac:bb:62:2c: f3:7a:5d:6f:c3:7c:f3:40:bc:7e:d1:aa:78:73:da: 27:0f:c0:b1:b8:14:53:18:67:5d:e8:04:93:44:68: 3f:48:31:c0:2a:87:95:1f:b7:85:67:07:0d:64:e6: e0:d0:a1:ec:90:16:ca:48:6a:32:97:58:f3:cd:8d: 72:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:A4:7D:6B:45:8B:2C:EF:35:6C:CA:3E:F3:23:E0:FD:8B:60:36:9E X509v3 Authority Key Identifier: keyid:72:6B:35:0E:9F:4F:12:59:E2:F9:C6:09:B2:2E:65:FB:D1:86:20:6B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cms1Dp9PElni-cYJsi5l-9GGIGs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/477c86-c7d6-4e37-bff6-a0072bac9f48/1/cms1Dp9PElni-cYJsi5l-9GGIGs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/477c86-c7d6-4e37-bff6-a0072bac9f48/1/cms1Dp9PElni-cYJsi5l-9GGIGs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 88:bf:7b:10:84:fe:e2:3d:b1:80:f4:99:dd:1c:c8:07:88:59: 7b:8d:25:de:d6:47:92:5a:04:bd:f1:3b:1d:a0:d7:f7:35:60: 07:de:54:bb:7e:10:d0:52:c6:68:94:aa:90:20:56:10:3b:82: 3a:1d:82:86:6d:18:a6:33:da:b4:40:8e:63:a8:da:51:8e:b1: 5e:97:eb:74:86:e8:ca:d0:2c:69:1e:7c:85:55:47:16:7f:4d: f6:1e:66:e2:ed:c4:e5:8c:b1:13:f9:0d:a6:55:6b:94:e9:09: cd:30:89:0e:e2:3d:79:3d:d7:71:0b:16:71:d6:4b:8a:a9:63: 7c:5a:7f:b6:82:54:31:39:2e:e7:48:be:60:4f:4e:7a:e3:33: f0:20:70:d9:36:74:a4:00:ba:da:b8:ec:4b:0a:c7:de:3c:e4: 45:b8:74:a8:c5:98:0a:8b:ed:29:bb:6f:5b:54:41:df:65:64: 00:21:12:9c:f1:23:c9:39:3c:ab:25:d3:17:5c:d1:df:24:57: 78:76:ed:40:f2:89:68:e4:b5:e5:9a:89:ae:ae:b7:6e:ac:2a: 58:43:d4:cb:a8:fc:6d:a5:ce:17:b4:09:28:0a:8c:0f:07:f2: 2f:49:c8:3f:fa:53:05:92:eb:d8:67:83:45:24:69:9d:36:df: 1d:a1:15:02 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrziVQZ2PCmcucj8ETxyb6ZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcyNmIzNTBlOWY0ZjEyNTllMmY5YzYwOWIyMmU2NWZiZDE4 NjIwNmIwHhcNMjUxMjA2MTIwMDU0WhcNMjUxMjA3MTIwMDU0WjAzMTEwLwYDVQQD EyhmNWE0N2Q2YjQ1OGIyY2VmMzU2Y2NhM2VmMzIzZTBmZDhiNjAzNjllMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwvgUdZG+BikWx+a1tDLkiN0fNtF8 DCMLR9sL5cOSZyjxZZEUMpCJw0iteXBtZEZLiksCwwI6mLk0qfi7xcZmBOm6opJb YLAWm8fsp+C2lQfikhNJ6AOmtcitW7xyCvj+x5J6Xh1L2s9SYMlQjgSQeXoQgKFJ IELkzLUt4r46voAaLDJoY29f9SWLmmpXMdLhhYbT4wt8VXe/oZVFaixXdBRYEX37 gBek8JCWfqXKGXV99wmqmne8WNBd7o3tLay7Yizzel1vw3zzQLx+0ap4c9onD8Cx uBRTGGdd6ASTRGg/SDHAKoeVH7eFZwcNZObg0KHskBbKSGoyl1jzzY1ynQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPWkfWtFiyzvNWzKPvMj4P2LYDaeMB8GA1UdIwQY MBaAFHJrNQ6fTxJZ4vnGCbIuZfvRhiBrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY21zMURwOVBFbG5pLWNZSnNpNWwtOUdHSUdzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYS80NzdjODYtYzdkNi00ZTM3LWJmZjYt YTAwNzJiYWM5ZjQ4LzEvY21zMURwOVBFbG5pLWNZSnNpNWwtOUdHSUdzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYS80NzdjODYtYzdkNi00ZTM3LWJmZjYtYTAwNzJiYWM5ZjQ4 LzEvY21zMURwOVBFbG5pLWNZSnNpNWwtOUdHSUdzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiL97EIT+ 4j2xgPSZ3RzIB4hZe40l3tZHkloEvfE7HaDX9zVgB95Uu34Q0FLGaJSqkCBWEDuC Oh2Chm0YpjPatECOY6jaUY6xXpfrdIboytAsaR58hVVHFn9N9h5m4u3E5YyxE/kN plVrlOkJzTCJDuI9eT3XcQsWcdZLiqljfFp/toJUMTku50i+YE9OeuMz8CBw2TZ0 pAC62rjsSwrH3jzkRbh0qMWYCovtKbtvW1RB32VkACESnPEjyTk8qyXTF1zR3yRX eHbtQPKJaOS15ZqJrq63bqwqWEPUy6j8baXOF7QJKAqMDwfyL0nIP/pTBZLr2GeD RSRpnTbfHaEVAg== -----END CERTIFICATE-----Generated at Sat Dec 6 17:53:54 2025 by rpki-client