This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/56ae15-1ca5-4d69-9a3a-837b10c2c636/1/cPeLaBtmF_7XDOhn-5qMbyXP2lU.mft File: cPeLaBtmF_7XDOhn-5qMbyXP2lU.mft (raw, json) Hash identifier: UlCz3gITClWr5/4mUSgrQ49PEyOFDSiqy90JvRnZ8Ro= Subject key identifier: 55:76:1F:80:D8:AE:08:E6:FF:8C:79:A3:46:16:54:E0:AC:CF:62:01 Authority key identifier: 70:F7:8B:68:1B:66:17:FE:D7:0C:E8:67:FB:9A:8C:6F:25:CF:DA:55 Certificate issuer: /CN=70f78b681b6617fed70ce867fb9a8c6f25cfda55 Certificate serial: 019AF6F8A66FCB48602DD6402E4EF7D23EE5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cPeLaBtmF_7XDOhn-5qMbyXP2lU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/56ae15-1ca5-4d69-9a3a-837b10c2c636/1/cPeLaBtmF_7XDOhn-5qMbyXP2lU.mft Manifest number: 0847 Signing time: Sun 07 Dec 2025 04:01:21 +0000 Manifest this update: Sun 07 Dec 2025 04:01:21 +0000 Manifest next update: Mon 08 Dec 2025 04:01:21 +0000 Files and hashes: 1: 7vwEs2K4HN_LwUWqzjIICNGiknc.roa (hash: wTMMtevJNZjpsr8DvgOjhFZoAuNt0W+HiAbIshmL9sQ=) 2: cPeLaBtmF_7XDOhn-5qMbyXP2lU.crl (hash: sSqrWl097+SmB1XCR9nRrHNsqVyNG8xdcaUE9HaczFI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/56ae15-1ca5-4d69-9a3a-837b10c2c636/1/cPeLaBtmF_7XDOhn-5qMbyXP2lU.crl rsync://rpki.ripe.net/repository/DEFAULT/37/56ae15-1ca5-4d69-9a3a-837b10c2c636/1/cPeLaBtmF_7XDOhn-5qMbyXP2lU.mft rsync://rpki.ripe.net/repository/DEFAULT/cPeLaBtmF_7XDOhn-5qMbyXP2lU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 08 Dec 2025 04:01:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f6:f8:a6:6f:cb:48:60:2d:d6:40:2e:4e:f7:d2:3e:e5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=70f78b681b6617fed70ce867fb9a8c6f25cfda55 Validity Not Before: Dec 7 04:01:21 2025 GMT Not After : Dec 8 04:01:21 2025 GMT Subject: CN=55761f80d8ae08e6ff8c79a3461654e0accf6201 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:3a:42:2a:f0:bc:d6:cb:72:79:9a:eb:00:66: 90:37:31:66:b3:97:e7:27:a1:c4:59:35:4f:ba:80: c9:20:f7:34:a3:15:80:61:bb:c3:ba:1c:81:86:27: b2:99:0e:f5:9d:a8:3b:46:5b:4b:7c:bf:db:13:2a: 0a:5b:11:d7:96:55:d5:63:aa:f4:2b:79:bc:bb:52: 13:39:86:7a:91:4b:bf:5c:0d:ed:35:2d:e1:77:c2: 1b:a0:44:5c:cd:f8:5c:2e:79:06:84:a2:40:11:7d: c9:e7:15:68:21:b6:0e:e7:d4:0e:0d:07:e8:a0:ee: d9:bf:16:62:ae:e9:0d:f1:32:18:cf:70:a0:c0:59: b4:80:97:b7:c2:cd:50:ce:3f:6a:b7:bd:af:7e:22: 51:10:d4:de:6d:dc:dd:d7:d1:b4:4a:02:53:05:19: 05:05:a1:25:ae:f1:7d:9d:9f:4b:da:64:0e:d4:0f: 2c:bb:f4:4a:e3:da:7b:14:6c:7d:52:55:75:1a:b5: 3f:51:ab:95:de:0b:0b:02:c7:0d:1d:ec:2a:36:0f: 7a:d5:3b:7e:12:2b:68:61:71:55:78:e2:52:0f:a3: 78:f7:4a:b9:94:2e:80:a3:c4:a4:a9:b1:79:00:df: f3:73:62:45:dc:d5:ac:bf:f1:1f:be:04:27:14:57: 52:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:76:1F:80:D8:AE:08:E6:FF:8C:79:A3:46:16:54:E0:AC:CF:62:01 X509v3 Authority Key Identifier: keyid:70:F7:8B:68:1B:66:17:FE:D7:0C:E8:67:FB:9A:8C:6F:25:CF:DA:55 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cPeLaBtmF_7XDOhn-5qMbyXP2lU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/56ae15-1ca5-4d69-9a3a-837b10c2c636/1/cPeLaBtmF_7XDOhn-5qMbyXP2lU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/37/56ae15-1ca5-4d69-9a3a-837b10c2c636/1/cPeLaBtmF_7XDOhn-5qMbyXP2lU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 56:fb:3a:86:45:50:97:38:e0:7c:8d:f7:41:d3:a2:b0:c3:70: 79:7f:9c:0e:2c:81:c9:b1:31:11:39:aa:56:4a:2c:e9:be:de: da:3c:f4:35:f7:6b:57:27:c1:eb:c7:33:7a:4b:1f:be:4e:27: 06:9a:e5:d7:4b:df:e3:f5:73:e5:10:39:01:09:3e:58:31:cc: fb:54:2d:6c:89:28:16:1b:65:aa:d6:cd:df:f6:49:8c:3a:9c: 99:f9:7d:fd:a6:09:39:d7:be:8d:06:46:cd:a3:2c:a1:43:ab: 81:c6:81:af:08:01:e0:6f:67:79:d0:a3:f1:25:f1:60:76:e0: f6:aa:9d:1b:98:ec:3f:e0:6c:e7:92:23:9e:1e:fc:a2:47:03: 8b:9e:e6:b6:ef:76:ad:fa:bb:a8:d5:c8:77:99:bb:c8:c7:c6: 8f:64:96:a2:c6:01:9e:ee:98:4a:d9:01:ef:61:0f:bb:41:8d: 3f:98:7f:f0:44:7d:6e:4b:62:5c:fc:b4:a7:01:da:20:56:26: 27:5b:54:ba:dc:43:37:d1:f8:be:07:f4:46:37:f7:fb:a4:fc: 4a:57:8d:8b:fa:65:ba:9d:98:06:95:64:b6:ea:a0:1a:d0:6a: 6a:a9:41:d7:a8:17:d5:cf:1f:a6:8f:7b:6f:82:b9:a7:c6:37: 35:c3:ba:ed -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr2+KZvy0hgLdZALk730j7lMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcwZjc4YjY4MWI2NjE3ZmVkNzBjZTg2N2ZiOWE4YzZmMjVj ZmRhNTUwHhcNMjUxMjA3MDQwMTIxWhcNMjUxMjA4MDQwMTIxWjAzMTEwLwYDVQQD Eyg1NTc2MWY4MGQ4YWUwOGU2ZmY4Yzc5YTM0NjE2NTRlMGFjY2Y2MjAxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuzpCKvC81styeZrrAGaQNzFms5fn J6HEWTVPuoDJIPc0oxWAYbvDuhyBhieymQ71nag7RltLfL/bEyoKWxHXllXVY6r0 K3m8u1ITOYZ6kUu/XA3tNS3hd8IboERczfhcLnkGhKJAEX3J5xVoIbYO59QODQfo oO7ZvxZirukN8TIYz3CgwFm0gJe3ws1Qzj9qt72vfiJRENTebdzd19G0SgJTBRkF BaElrvF9nZ9L2mQO1A8su/RK49p7FGx9UlV1GrU/UauV3gsLAscNHewqNg961Tt+ EitoYXFVeOJSD6N490q5lC6Ao8SkqbF5AN/zc2JF3NWsv/EfvgQnFFdSSwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFV2H4DYrgjm/4x5o0YWVOCsz2IBMB8GA1UdIwQY MBaAFHD3i2gbZhf+1wzoZ/uajG8lz9pVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY1BlTGFCdG1GXzdYRE9obi01cU1ieVhQMmxVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNy81NmFlMTUtMWNhNS00ZDY5LTlhM2Et ODM3YjEwYzJjNjM2LzEvY1BlTGFCdG1GXzdYRE9obi01cU1ieVhQMmxVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNy81NmFlMTUtMWNhNS00ZDY5LTlhM2EtODM3YjEwYzJjNjM2 LzEvY1BlTGFCdG1GXzdYRE9obi01cU1ieVhQMmxVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVvs6hkVQ lzjgfI33QdOisMNweX+cDiyBybExETmqVkos6b7e2jz0NfdrVyfB68czeksfvk4n Bprl10vf4/Vz5RA5AQk+WDHM+1QtbIkoFhtlqtbN3/ZJjDqcmfl9/aYJOde+jQZG zaMsoUOrgcaBrwgB4G9nedCj8SXxYHbg9qqdG5jsP+Bs55Ijnh78okcDi57mtu92 rfq7qNXId5m7yMfGj2SWosYBnu6YStkB72EPu0GNP5h/8ER9bktiXPy0pwHaIFYm J1tUutxDN9H4vgf0Rjf3+6T8SleNi/plup2YBpVktuqgGtBqaqlB16gX1c8fpo97 b4K5p8Y3NcO67Q== -----END CERTIFICATE-----Generated at Sun Dec 7 11:19:21 2025 by rpki-client