This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/cae652-a218-42f6-97af-794b28eb16c5/1/cTm8XO866t8yYT99lZ7I5Ap0KRg.mft File: cTm8XO866t8yYT99lZ7I5Ap0KRg.mft (raw, json) Hash identifier: rSPsQD6ksYSHcNRgMmRp78073/6ytAk913CGGHKmDRg= Subject key identifier: BB:19:07:EB:6C:D8:FA:24:76:07:8C:B6:E5:86:D7:A9:B3:CF:AE:E7 Authority key identifier: 71:39:BC:5C:EF:3A:EA:DF:32:61:3F:7D:95:9E:C8:E4:0A:74:29:18 Certificate issuer: /CN=7139bc5cef3aeadf32613f7d959ec8e40a742918 Certificate serial: 019AF509B4826BF56043835ACA582A3E3134 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cTm8XO866t8yYT99lZ7I5Ap0KRg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/cae652-a218-42f6-97af-794b28eb16c5/1/cTm8XO866t8yYT99lZ7I5Ap0KRg.mft Manifest number: 0DCA Signing time: Sat 06 Dec 2025 19:00:45 +0000 Manifest this update: Sat 06 Dec 2025 19:00:45 +0000 Manifest next update: Sun 07 Dec 2025 19:00:45 +0000 Files and hashes: 1: 1bCVWoklxu9pgUWQ1mLHB-EXkFA.roa (hash: D3wGeYBSZH8FYHWMq5xGTReS6aaUmIPr/PoC2v0b+3Q=) 2: cTm8XO866t8yYT99lZ7I5Ap0KRg.crl (hash: vOdb0AgGbZGkNsSSvhyaSo6AlcjIp2Zl/uykEu12ovQ=) 3: vpqI0SPiMCscv2APIfDksYTh41I.roa (hash: hkscOp/XUtYy+TgoXBDOQozFrFzTsJ23rQpXU2E0uBw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/cae652-a218-42f6-97af-794b28eb16c5/1/cTm8XO866t8yYT99lZ7I5Ap0KRg.crl rsync://rpki.ripe.net/repository/DEFAULT/4d/cae652-a218-42f6-97af-794b28eb16c5/1/cTm8XO866t8yYT99lZ7I5Ap0KRg.mft rsync://rpki.ripe.net/repository/DEFAULT/cTm8XO866t8yYT99lZ7I5Ap0KRg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:09:b4:82:6b:f5:60:43:83:5a:ca:58:2a:3e:31:34 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7139bc5cef3aeadf32613f7d959ec8e40a742918 Validity Not Before: Dec 6 19:00:45 2025 GMT Not After : Dec 7 19:00:45 2025 GMT Subject: CN=bb1907eb6cd8fa2476078cb6e586d7a9b3cfaee7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:c0:58:54:c5:d8:e1:56:45:df:39:0f:3e:f1: 3f:2d:ad:70:7c:65:6f:a9:6d:99:41:6f:4b:cc:cd: 70:56:bb:09:d7:4b:9c:9b:74:ff:5b:53:67:b3:1a: ab:bb:d3:87:de:e2:17:92:9a:e0:ed:c7:0a:18:10: 8a:85:82:41:22:28:d7:1b:56:76:9b:08:a0:41:51: 16:b4:fb:b8:1c:6a:be:68:81:71:de:d6:e8:de:26: bc:c2:31:6d:2b:bd:d8:9e:e0:ba:6c:ab:2a:f0:69: 18:bb:0c:7f:ee:0d:f9:7a:1d:5e:7a:8b:dd:a0:eb: ba:12:81:b4:c7:e0:4e:dc:1f:a8:84:23:bd:3c:bc: 52:ba:c1:3a:f4:9e:e0:4b:4d:52:1a:71:c2:1b:c4: e4:96:c6:eb:4b:9b:93:93:da:be:39:68:de:73:2c: 48:97:81:99:1f:ee:d8:f6:07:cf:1b:3e:3b:d0:e4: 32:78:bb:b1:07:7a:15:23:a1:4a:7f:89:ed:04:be: bc:9b:b0:6a:a7:f2:32:d4:93:24:db:c3:24:a4:89: e9:7f:37:6e:93:40:65:e7:69:b1:3b:cf:00:93:aa: fc:89:f9:45:17:e6:aa:38:23:ee:d3:01:68:3c:fa: dd:d6:28:20:ae:d3:5a:1e:f1:39:29:3f:7e:11:5a: 00:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:19:07:EB:6C:D8:FA:24:76:07:8C:B6:E5:86:D7:A9:B3:CF:AE:E7 X509v3 Authority Key Identifier: keyid:71:39:BC:5C:EF:3A:EA:DF:32:61:3F:7D:95:9E:C8:E4:0A:74:29:18 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cTm8XO866t8yYT99lZ7I5Ap0KRg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/cae652-a218-42f6-97af-794b28eb16c5/1/cTm8XO866t8yYT99lZ7I5Ap0KRg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/cae652-a218-42f6-97af-794b28eb16c5/1/cTm8XO866t8yYT99lZ7I5Ap0KRg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 95:36:00:2c:f4:7a:14:f5:41:f1:69:30:73:3b:bc:73:9d:83: fd:8d:ba:d6:fb:98:c0:19:bb:ad:d3:56:35:5e:4e:97:64:9f: d9:50:30:96:60:26:9b:09:db:0c:90:97:f4:c1:22:ec:2f:03: 45:b8:bc:72:82:02:ca:eb:90:da:5e:4e:c2:93:69:44:90:d8: 01:e4:64:17:47:dc:0c:dc:a6:68:4f:c4:c7:f3:f6:31:b7:f1: e7:d2:b5:d4:4f:70:31:b1:f7:07:47:f6:64:f5:dc:da:8f:39: 5b:aa:64:a9:ff:f4:17:6a:0d:4a:52:9e:b8:9e:c5:cb:ee:32: ff:64:d8:f9:c1:64:15:2a:cf:17:9e:20:ba:61:c2:49:86:88: e6:f1:6b:b9:5a:46:e9:37:a8:1f:f7:d3:e2:f3:31:53:ae:62: 2a:6b:92:32:3a:6f:c0:fd:f1:61:b9:f7:57:8d:38:a7:01:2c: 6e:4c:9b:3e:45:7a:ea:86:6e:87:ca:f7:d9:42:e1:7d:fa:17: 8e:4a:f6:26:92:b9:0d:67:ca:b5:aa:dc:21:0b:3e:52:43:20: ed:9c:ba:d4:3d:8b:af:b1:74:e3:33:da:c5:39:65:e6:49:56: f1:5c:fc:b9:34:c8:75:35:e3:ee:c1:32:05:df:39:42:dd:03: a4:f0:cc:46 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1CbSCa/VgQ4NaylgqPjE0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcxMzliYzVjZWYzYWVhZGYzMjYxM2Y3ZDk1OWVjOGU0MGE3 NDI5MTgwHhcNMjUxMjA2MTkwMDQ1WhcNMjUxMjA3MTkwMDQ1WjAzMTEwLwYDVQQD EyhiYjE5MDdlYjZjZDhmYTI0NzYwNzhjYjZlNTg2ZDdhOWIzY2ZhZWU3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApMBYVMXY4VZF3zkPPvE/La1wfGVv qW2ZQW9LzM1wVrsJ10ucm3T/W1Nnsxqru9OH3uIXkprg7ccKGBCKhYJBIijXG1Z2 mwigQVEWtPu4HGq+aIFx3tbo3ia8wjFtK73YnuC6bKsq8GkYuwx/7g35eh1eeovd oOu6EoG0x+BO3B+ohCO9PLxSusE69J7gS01SGnHCG8TklsbrS5uTk9q+OWjecyxI l4GZH+7Y9gfPGz470OQyeLuxB3oVI6FKf4ntBL68m7Bqp/Iy1JMk28MkpInpfzdu k0Bl52mxO88Ak6r8iflFF+aqOCPu0wFoPPrd1iggrtNaHvE5KT9+EVoAKQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLsZB+ts2PokdgeMtuWG16mzz67nMB8GA1UdIwQY MBaAFHE5vFzvOurfMmE/fZWeyOQKdCkYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY1RtOFhPODY2dDh5WVQ5OWxaN0k1QXAwS1JnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZC9jYWU2NTItYTIxOC00MmY2LTk3YWYt Nzk0YjI4ZWIxNmM1LzEvY1RtOFhPODY2dDh5WVQ5OWxaN0k1QXAwS1JnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80ZC9jYWU2NTItYTIxOC00MmY2LTk3YWYtNzk0YjI4ZWIxNmM1 LzEvY1RtOFhPODY2dDh5WVQ5OWxaN0k1QXAwS1JnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlTYALPR6 FPVB8Wkwczu8c52D/Y261vuYwBm7rdNWNV5Ol2Sf2VAwlmAmmwnbDJCX9MEi7C8D Rbi8coICyuuQ2l5OwpNpRJDYAeRkF0fcDNymaE/Ex/P2Mbfx59K11E9wMbH3B0f2 ZPXc2o85W6pkqf/0F2oNSlKeuJ7Fy+4y/2TY+cFkFSrPF54gumHCSYaI5vFruVpG 6TeoH/fT4vMxU65iKmuSMjpvwP3xYbn3V404pwEsbkybPkV66oZuh8r32ULhffoX jkr2JpK5DWfKtarcIQs+UkMg7Zy61D2Lr7F04zPaxTll5klW8Vz8uTTIdTXj7sEy Bd85Qt0DpPDMRg== -----END CERTIFICATE-----Generated at Sat Dec 6 22:55:32 2025 by rpki-client