This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/963170-58be-46bb-a5de-777373e6055e/1/cJSkJVlekjxLU7nAAKqPGa2SPyA.mft File: cJSkJVlekjxLU7nAAKqPGa2SPyA.mft (raw, json) Hash identifier: RagDY8TTjG+CgHyojrsY9NHqwZbniGxaCwShQAmS860= Subject key identifier: 09:F4:AF:0C:0A:5F:62:3D:70:C4:6B:90:D4:39:80:3C:2D:55:C2:01 Authority key identifier: 70:94:A4:25:59:5E:92:3C:4B:53:B9:C0:00:AA:8F:19:AD:92:3F:20 Certificate issuer: /CN=7094a425595e923c4b53b9c000aa8f19ad923f20 Certificate serial: 019AF577E85FDC0FE035226EAA50AB155DF6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cJSkJVlekjxLU7nAAKqPGa2SPyA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/963170-58be-46bb-a5de-777373e6055e/1/cJSkJVlekjxLU7nAAKqPGa2SPyA.mft Manifest number: 137B Signing time: Sat 06 Dec 2025 21:01:07 +0000 Manifest this update: Sat 06 Dec 2025 21:01:07 +0000 Manifest next update: Sun 07 Dec 2025 21:01:07 +0000 Files and hashes: 1: 1-YTs4r6zU-8mdejFRdCllU9534c.roa (hash: 1PeguZ92yFC8iaBTSsGvqpeeYV8duXPcAw7VUiDhRiw=) 2: 5z-bgDH8lytiLnfe9VpEMYme7ek.roa (hash: q3gRkg1Wu1TjQxIsHIpzRCg8G07UfeVe/I9XDxRqtvo=) 3: GgOjLst_2cOjWFXXQ04HdoXttH4.roa (hash: z2Rfj6acoKtcXjm6dwLXQBUNElg6LrojkoNiCuSKCms=) 4: cJSkJVlekjxLU7nAAKqPGa2SPyA.crl (hash: vCge6vcbc6SVx4LQkCUf+Zqf3Z3f95cqPM3e9Zx/CtY=) 5: gp9nHU_cukvMULZAvDnIuT6ptiM.roa (hash: 7wIfWYcUlSAbfRukKEeXPASEhd8fL4WRrL0l2D1YuTg=) 6: hKdzSlgkizVpoLvfGaH8kRoUyB4.roa (hash: eKmXOdDdv5KCQd+EWAKp0FLk1/DsxSq3Ym4RiAI0fek=) 7: rSaIHtGhDT0jOkbwk5w9J-_5svc.roa (hash: DVoLZl1ZXv/1pFpFxvGq3uqDR2CUE2IcgixTkQGHWKU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/963170-58be-46bb-a5de-777373e6055e/1/cJSkJVlekjxLU7nAAKqPGa2SPyA.crl rsync://rpki.ripe.net/repository/DEFAULT/2a/963170-58be-46bb-a5de-777373e6055e/1/cJSkJVlekjxLU7nAAKqPGa2SPyA.mft rsync://rpki.ripe.net/repository/DEFAULT/cJSkJVlekjxLU7nAAKqPGa2SPyA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 21:01:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:77:e8:5f:dc:0f:e0:35:22:6e:aa:50:ab:15:5d:f6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7094a425595e923c4b53b9c000aa8f19ad923f20 Validity Not Before: Dec 6 21:01:07 2025 GMT Not After : Dec 7 21:01:07 2025 GMT Subject: CN=09f4af0c0a5f623d70c46b90d439803c2d55c201 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:6e:6e:86:19:b6:34:e4:4f:57:43:74:9b:dc: 4a:85:2f:a0:52:ae:32:ca:95:c8:4e:fa:45:89:9c: 5d:99:57:48:56:24:8a:b5:10:93:b1:1b:08:eb:ca: 6f:f4:6e:e3:6f:28:a4:44:92:a5:d3:69:09:26:3a: 41:ee:90:9b:6e:2b:8d:b5:a5:42:a1:a3:d1:5f:7d: 71:ff:a2:5b:34:77:56:2a:c1:a8:15:4e:bd:14:bd: cd:62:c8:36:c0:1e:c9:53:a0:9c:83:cd:d6:72:42: 9f:43:8e:e7:46:1a:48:9c:3d:f0:eb:f8:91:5b:41: 7f:e2:f6:a9:09:3c:36:49:6f:44:83:e3:23:7d:b1: bc:d3:27:36:0f:40:0e:79:3a:bc:25:9f:95:22:61: 09:3e:7f:2f:6e:09:d0:1b:28:1c:12:f9:2f:ad:6e: 74:2b:46:0d:a3:ae:02:a6:29:38:c7:df:a4:36:86: 71:2a:6e:18:d7:d6:cc:e2:4a:cc:24:9b:85:10:d7: 5a:c5:a7:d8:01:1d:8b:42:8f:95:6c:ed:c1:78:d4: 3f:8e:c7:79:ff:d5:42:e8:6f:47:0c:9f:4d:17:73: ac:3f:dd:f2:a7:a4:02:9e:3d:a3:8c:9e:5a:b7:5d: bc:e6:c2:a6:c7:75:9c:87:45:2b:57:0a:82:a8:ca: 6a:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:F4:AF:0C:0A:5F:62:3D:70:C4:6B:90:D4:39:80:3C:2D:55:C2:01 X509v3 Authority Key Identifier: keyid:70:94:A4:25:59:5E:92:3C:4B:53:B9:C0:00:AA:8F:19:AD:92:3F:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cJSkJVlekjxLU7nAAKqPGa2SPyA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/963170-58be-46bb-a5de-777373e6055e/1/cJSkJVlekjxLU7nAAKqPGa2SPyA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/963170-58be-46bb-a5de-777373e6055e/1/cJSkJVlekjxLU7nAAKqPGa2SPyA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 24:13:7c:1f:62:50:fc:f5:86:05:3f:6b:2c:b8:b2:e8:30:8f: 20:38:bb:92:ef:e7:57:f5:a0:ac:58:1f:9d:b1:9a:f6:1b:ca: d0:bc:e6:6f:01:94:a6:cf:ad:9d:35:e9:6d:b3:ef:08:c8:22: a6:e7:1c:99:96:fb:70:bb:b8:7f:1c:0b:93:bd:e6:52:e6:7c: 8f:51:4c:e3:a9:0a:72:b7:ff:56:49:7d:70:9b:48:e5:2f:de: 7a:43:81:db:1d:9e:95:6b:df:63:66:d0:17:02:c8:19:34:a5: 0d:99:a0:d4:67:0a:86:11:d7:fa:5f:10:07:9e:d8:06:4a:8a: 9d:82:57:83:1f:2b:d6:ec:51:fd:d8:0d:f6:58:07:92:36:63: b7:24:e2:14:fb:6c:9c:81:2c:0a:9d:1e:bd:ab:94:88:8e:5c: 64:9a:e6:ae:70:49:ad:49:6b:c2:a4:d8:44:93:73:75:bd:65: 64:62:a2:4c:6c:ea:f5:c3:81:ab:17:88:ff:e8:c8:cf:a2:63: 26:86:ff:65:33:d9:77:9c:9e:20:c1:3e:ea:39:fb:be:a9:7f: 37:cd:16:07:2f:b1:18:d8:6b:0a:ba:5d:92:d8:fe:a0:7c:2b: ba:87:72:15:f3:6f:9e:10:84:0d:37:f7:f0:3c:9c:05:00:6e: 70:71:96:c6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1d+hf3A/gNSJuqlCrFV32MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcwOTRhNDI1NTk1ZTkyM2M0YjUzYjljMDAwYWE4ZjE5YWQ5 MjNmMjAwHhcNMjUxMjA2MjEwMTA3WhcNMjUxMjA3MjEwMTA3WjAzMTEwLwYDVQQD EygwOWY0YWYwYzBhNWY2MjNkNzBjNDZiOTBkNDM5ODAzYzJkNTVjMjAxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsW5uhhm2NORPV0N0m9xKhS+gUq4y ypXITvpFiZxdmVdIViSKtRCTsRsI68pv9G7jbyikRJKl02kJJjpB7pCbbiuNtaVC oaPRX31x/6JbNHdWKsGoFU69FL3NYsg2wB7JU6Ccg83WckKfQ47nRhpInD3w6/iR W0F/4vapCTw2SW9Eg+MjfbG80yc2D0AOeTq8JZ+VImEJPn8vbgnQGygcEvkvrW50 K0YNo64Cpik4x9+kNoZxKm4Y19bM4krMJJuFENdaxafYAR2LQo+VbO3BeNQ/jsd5 /9VC6G9HDJ9NF3OsP93yp6QCnj2jjJ5at1285sKmx3Wch0UrVwqCqMpqtwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAn0rwwKX2I9cMRrkNQ5gDwtVcIBMB8GA1UdIwQY MBaAFHCUpCVZXpI8S1O5wACqjxmtkj8gMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY0pTa0pWbGVranhMVTduQUFLcVBHYTJTUHlBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYS85NjMxNzAtNThiZS00NmJiLWE1ZGUt Nzc3MzczZTYwNTVlLzEvY0pTa0pWbGVranhMVTduQUFLcVBHYTJTUHlBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYS85NjMxNzAtNThiZS00NmJiLWE1ZGUtNzc3MzczZTYwNTVl LzEvY0pTa0pWbGVranhMVTduQUFLcVBHYTJTUHlBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJBN8H2JQ /PWGBT9rLLiy6DCPIDi7ku/nV/WgrFgfnbGa9hvK0LzmbwGUps+tnTXpbbPvCMgi puccmZb7cLu4fxwLk73mUuZ8j1FM46kKcrf/Vkl9cJtI5S/eekOB2x2elWvfY2bQ FwLIGTSlDZmg1GcKhhHX+l8QB57YBkqKnYJXgx8r1uxR/dgN9lgHkjZjtyTiFPts nIEsCp0evauUiI5cZJrmrnBJrUlrwqTYRJNzdb1lZGKiTGzq9cOBqxeI/+jIz6Jj Job/ZTPZd5yeIME+6jn7vql/N80WBy+xGNhrCrpdktj+oHwruodyFfNvnhCEDTf3 8DycBQBucHGWxg== -----END CERTIFICATE-----Generated at Sun Dec 7 01:37:40 2025 by rpki-client