This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/956db9-c8f7-4b9f-a56e-bc6db7248add/1/cPmxat8v0xmIhZkitEV0gd1-70A.mft File: cPmxat8v0xmIhZkitEV0gd1-70A.mft (raw, json) Hash identifier: 2g0fZeoDhHBx5hVWINPObwySlPDRKP4cgncC5JZm33U= Subject key identifier: BD:3B:A5:79:3E:20:0C:78:AD:2C:08:F4:8E:3E:C4:53:74:CD:37:4B Authority key identifier: 70:F9:B1:6A:DF:2F:D3:19:88:85:99:22:B4:45:74:81:DD:7E:EF:40 Certificate issuer: /CN=70f9b16adf2fd31988859922b4457481dd7eef40 Certificate serial: 019AF20935FA820C7691C8B9598FEB60C730 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cPmxat8v0xmIhZkitEV0gd1-70A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/956db9-c8f7-4b9f-a56e-bc6db7248add/1/cPmxat8v0xmIhZkitEV0gd1-70A.mft Manifest number: 1508 Signing time: Sat 06 Dec 2025 05:01:21 +0000 Manifest this update: Sat 06 Dec 2025 05:01:21 +0000 Manifest next update: Sun 07 Dec 2025 05:01:21 +0000 Files and hashes: 1: 5WpWrypca4XGx0ISHtuZYRT_cno.roa (hash: R8ZoU8UZw1Z3gy7t3IJTFumdlDzgJjWSubPKAJkbvV0=) 2: 5hhLPsRpw9KA7o9wasEihzJSXoA.roa (hash: rLTFQz+FRyLZFkOs44WSv8ULNMp8Sfi16jOBN6XhYiE=) 3: 8-icgNG9YFfARW17qjTdCn9yD80.roa (hash: vebs5VRK2d7EVc4VYZnrKXN0FKJQS1X4sYhCt1gzy4o=) 4: EmX6XyNl91Tm8cirnJelJMWv5jw.roa (hash: ecaOyMml05HDIHHtJ4OiOiljQ7sD0n4R4TT3SS/C9pQ=) 5: JOBERo-vgg6dldBoWViTCfV7X-A.roa (hash: ce+d5taUPY+G9x5sjcA70ndAe38v7dhbZx0JrAG/CD4=) 6: PV2mCkS-UgVkDARZVBwroYA25_s.roa (hash: IURPukZTcQABJnfofXQZ8uQ6EdE7QIiPt7LuWjaU7ck=) 7: T1V76bxlhezLMl4Tzlvgqgk0pcg.roa (hash: Hk9kWyBSS3VZQ3ORtc2F2qsaXDclUxsqlus/HDJzLds=) 8: TGAbtOOQvJAO29jntkyfdiXsA34.roa (hash: Qa/Pmj8niQ7pWqzQURSMGZYQ5K31JvVZc6izGiwMvgM=) 9: Z5phhVwVfpK6dkc5C1-vYmhcYUU.roa (hash: iIyIPk2NBxkdVR06TYJeH+vh01QOalQb+F2tpumtM+w=) 10: cF-NETmL2tObtWSmyBQoXJnoEx8.roa (hash: A/p/4RndIub/XOYrnQVBToTK2tsLnhe4q2Yyjp+gHrA=) 11: cPmxat8v0xmIhZkitEV0gd1-70A.crl (hash: qNu9FuLpdY6WQpcAqGOpYry6Fb+Eaq+zWBF3Dnj+EJA=) 12: ezMLdhISIqr2PAqGoulAf-qQ6FY.roa (hash: MoVmtNQ9G0A/NJidABkGuBmF42AfIIukbBtAhp8lY68=) 13: fC3AtSHj4uWnRNCJOJWyffnxb_c.roa (hash: k4yZxxd7Kbg9gUH1VtnIM62vxLC45Jz4VtvfU0eH3rQ=) 14: irItIVR6u-ZjJg2ky_t330Puetw.roa (hash: jdzhDlqJouvAYoBby6ytKGVftFOiZZckZb8p5RQravo=) 15: mA4IEAHXR0LDJS0AO7AgvdyymfA.roa (hash: B62czMPy2pKQJ5FL2R2C5ZUZdywtpL+Cj+O5hZ16Rv4=) 16: qQMnV_AHkaoypfzXBStNqOIC8i4.roa (hash: 8/gHPP6AgbL3NuW+OG2JLB+jSLFsV5WrdZq7Of0LMpg=) 17: t-GC4kGf7lvSnOYAiTpgmlkKEL4.roa (hash: 9rNbslHDQxGg0Ew50MQa2Fk3HC4+vs4VNNeusuZLYr8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/956db9-c8f7-4b9f-a56e-bc6db7248add/1/cPmxat8v0xmIhZkitEV0gd1-70A.crl rsync://rpki.ripe.net/repository/DEFAULT/5f/956db9-c8f7-4b9f-a56e-bc6db7248add/1/cPmxat8v0xmIhZkitEV0gd1-70A.mft rsync://rpki.ripe.net/repository/DEFAULT/cPmxat8v0xmIhZkitEV0gd1-70A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:09:35:fa:82:0c:76:91:c8:b9:59:8f:eb:60:c7:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=70f9b16adf2fd31988859922b4457481dd7eef40 Validity Not Before: Dec 6 05:01:21 2025 GMT Not After : Dec 7 05:01:21 2025 GMT Subject: CN=bd3ba5793e200c78ad2c08f48e3ec45374cd374b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:58:a6:a2:06:08:15:ff:93:36:e5:1d:59:46: f2:b9:8a:92:42:62:19:b1:17:a0:56:6c:db:56:f7: 6d:b2:3f:0b:c3:f8:5d:e1:5f:ee:e7:3a:cb:58:e6: c4:d6:e5:4c:af:fc:8c:b7:4b:bc:b2:ff:e6:6d:40: 68:92:4c:ec:17:df:4d:e6:05:e4:7e:24:ad:fb:52: 34:9e:75:7c:52:4c:83:5b:ca:ab:a8:1c:1b:37:85: a6:c2:48:56:67:bd:5c:62:38:c4:ee:a6:f0:18:26: 65:fe:6e:04:73:fd:ef:a2:d2:85:f4:f7:0f:39:44: fa:db:e0:d0:cc:43:e7:30:9f:f3:33:8d:e0:81:21: 69:04:02:8d:14:ee:b1:c0:b4:90:30:02:3f:7c:13: d3:93:ff:0c:ad:e5:45:da:2f:03:08:e5:46:07:ba: d5:7b:16:be:2d:2b:e4:48:63:a7:bd:68:ca:7f:a8: 20:fa:32:4f:d5:97:f4:42:8b:3c:90:51:7f:ac:be: fb:2a:62:e7:e2:db:b3:1c:c5:7f:7a:eb:ed:d6:bf: bf:ce:a5:36:0e:86:2a:a2:b2:c6:36:45:cf:1e:fb: ca:ba:c6:6f:00:df:2d:75:b5:5f:35:d6:3a:08:52: d7:d1:dd:77:46:ea:77:58:4e:2d:89:87:39:24:76: 88:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:3B:A5:79:3E:20:0C:78:AD:2C:08:F4:8E:3E:C4:53:74:CD:37:4B X509v3 Authority Key Identifier: keyid:70:F9:B1:6A:DF:2F:D3:19:88:85:99:22:B4:45:74:81:DD:7E:EF:40 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cPmxat8v0xmIhZkitEV0gd1-70A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/956db9-c8f7-4b9f-a56e-bc6db7248add/1/cPmxat8v0xmIhZkitEV0gd1-70A.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/956db9-c8f7-4b9f-a56e-bc6db7248add/1/cPmxat8v0xmIhZkitEV0gd1-70A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2c:87:7e:9f:49:b6:f3:1a:8c:a9:c8:63:94:9d:2e:76:bf:d1: 72:28:6f:bf:aa:19:30:4b:31:92:46:3d:d4:09:0b:4e:5b:7b: a7:d9:1b:e1:63:51:fd:c7:ee:43:f3:ed:b8:a0:20:79:1e:ab: 75:33:f0:5c:a1:fb:68:88:64:0e:fa:64:e5:3e:6a:e6:0b:7b: eb:86:9f:f5:d9:ba:3f:b5:c7:2f:79:1a:b0:1f:af:60:aa:44: 49:97:79:d7:ef:5c:68:e7:cf:4c:56:e1:45:7e:ed:3c:66:ab: 90:53:3f:16:5e:ff:88:22:c0:cb:b6:45:ae:d1:92:65:19:b8: 36:af:7d:a9:d7:8f:af:d2:07:88:86:33:0c:af:28:1a:9f:3f: 0f:10:63:7e:b2:d2:5c:53:a2:68:4d:ed:a8:e9:d9:cc:b9:e4: 04:09:64:83:ea:67:12:b8:a8:62:66:21:80:7b:7b:40:47:26: 4a:07:fd:b4:60:3d:0e:3a:c6:56:11:c4:44:bf:93:2f:d0:c7: 57:c1:d6:a6:80:de:62:20:c1:d8:8e:cf:ad:a4:ab:40:9e:38: 41:89:3c:b4:6a:67:67:2a:97:3e:bf:9f:85:f0:62:b3:ae:16: 95:49:fd:b0:36:74:66:f9:c5:06:ad:48:51:8d:10:2a:25:e7: 7a:2c:68:b8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCTX6ggx2kci5WY/rYMcwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcwZjliMTZhZGYyZmQzMTk4ODg1OTkyMmI0NDU3NDgxZGQ3 ZWVmNDAwHhcNMjUxMjA2MDUwMTIxWhcNMjUxMjA3MDUwMTIxWjAzMTEwLwYDVQQD EyhiZDNiYTU3OTNlMjAwYzc4YWQyYzA4ZjQ4ZTNlYzQ1Mzc0Y2QzNzRiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAylimogYIFf+TNuUdWUbyuYqSQmIZ sRegVmzbVvdtsj8Lw/hd4V/u5zrLWObE1uVMr/yMt0u8sv/mbUBokkzsF99N5gXk fiSt+1I0nnV8UkyDW8qrqBwbN4WmwkhWZ71cYjjE7qbwGCZl/m4Ec/3votKF9PcP OUT62+DQzEPnMJ/zM43ggSFpBAKNFO6xwLSQMAI/fBPTk/8MreVF2i8DCOVGB7rV exa+LSvkSGOnvWjKf6gg+jJP1Zf0Qos8kFF/rL77KmLn4tuzHMV/euvt1r+/zqU2 DoYqorLGNkXPHvvKusZvAN8tdbVfNdY6CFLX0d13Rup3WE4tiYc5JHaIoQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFL07pXk+IAx4rSwI9I4+xFN0zTdLMB8GA1UdIwQY MBaAFHD5sWrfL9MZiIWZIrRFdIHdfu9AMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY1BteGF0OHYweG1JaFpraXRFVjBnZDEtNzBBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi85NTZkYjktYzhmNy00YjlmLWE1NmUt YmM2ZGI3MjQ4YWRkLzEvY1BteGF0OHYweG1JaFpraXRFVjBnZDEtNzBBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Zi85NTZkYjktYzhmNy00YjlmLWE1NmUtYmM2ZGI3MjQ4YWRk LzEvY1BteGF0OHYweG1JaFpraXRFVjBnZDEtNzBBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALId+n0m2 8xqMqchjlJ0udr/Rcihvv6oZMEsxkkY91AkLTlt7p9kb4WNR/cfuQ/PtuKAgeR6r dTPwXKH7aIhkDvpk5T5q5gt764af9dm6P7XHL3kasB+vYKpESZd51+9caOfPTFbh RX7tPGarkFM/Fl7/iCLAy7ZFrtGSZRm4Nq99qdePr9IHiIYzDK8oGp8/DxBjfrLS XFOiaE3tqOnZzLnkBAlkg+pnErioYmYhgHt7QEcmSgf9tGA9DjrGVhHERL+TL9DH V8HWpoDeYiDB2I7PraSrQJ44QYk8tGpnZyqXPr+fhfBis64WlUn9sDZ0ZvnFBq1I UY0QKiXneixouA== -----END CERTIFICATE-----Generated at Sat Dec 6 12:04:13 2025 by rpki-client