This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/dc3246-c85a-46df-8c30-48cee26c55bb/1/cLteVPJ0jstdhpjTeTOcwV8yuJM.mft File: cLteVPJ0jstdhpjTeTOcwV8yuJM.mft (raw, json) Hash identifier: iRJf66oVSzH2Q8O/RsyqF0EqP2Y5RwYwREpd7ffOzJ4= Subject key identifier: 6B:99:FA:39:4F:5D:83:95:F1:D4:FD:6A:ED:50:42:DA:2D:FF:CD:7C Authority key identifier: 70:BB:5E:54:F2:74:8E:CB:5D:86:98:D3:79:33:9C:C1:5F:32:B8:93 Certificate issuer: /CN=70bb5e54f2748ecb5d8698d379339cc15f32b893 Certificate serial: 019AF49C5CA46280EA164DFBB2C9C234AADD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cLteVPJ0jstdhpjTeTOcwV8yuJM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/dc3246-c85a-46df-8c30-48cee26c55bb/1/cLteVPJ0jstdhpjTeTOcwV8yuJM.mft Manifest number: 1366 Signing time: Sat 06 Dec 2025 17:01:19 +0000 Manifest this update: Sat 06 Dec 2025 17:01:19 +0000 Manifest next update: Sun 07 Dec 2025 17:01:19 +0000 Files and hashes: 1: VABLE3iBHalb6Jl_c3u-oyHeiS8.roa (hash: s1CBILyJSh7gNgL+QAYvHKZM5KaEqmZAwVEcKOw0A0E=) 2: cLteVPJ0jstdhpjTeTOcwV8yuJM.crl (hash: iOlitB0XDz/bqWZ5GzeErTlbmUHN2smyMlw/FPjgyTY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/dc3246-c85a-46df-8c30-48cee26c55bb/1/cLteVPJ0jstdhpjTeTOcwV8yuJM.crl rsync://rpki.ripe.net/repository/DEFAULT/5f/dc3246-c85a-46df-8c30-48cee26c55bb/1/cLteVPJ0jstdhpjTeTOcwV8yuJM.mft rsync://rpki.ripe.net/repository/DEFAULT/cLteVPJ0jstdhpjTeTOcwV8yuJM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:9c:5c:a4:62:80:ea:16:4d:fb:b2:c9:c2:34:aa:dd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=70bb5e54f2748ecb5d8698d379339cc15f32b893 Validity Not Before: Dec 6 17:01:19 2025 GMT Not After : Dec 7 17:01:19 2025 GMT Subject: CN=6b99fa394f5d8395f1d4fd6aed5042da2dffcd7c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:1c:19:b7:66:ec:44:21:1d:54:5f:4a:2e:74: 9d:15:fb:a7:52:1e:0a:9e:6d:6c:cf:b8:30:75:dd: 43:91:4a:15:22:64:7f:18:06:a5:b9:bd:e5:ce:d0: db:c2:3a:f5:f3:e1:69:c1:82:0f:8d:57:ad:e9:c2: 92:ec:c4:6d:23:d1:63:e3:ea:4b:1c:15:b8:97:85: f2:0b:3d:aa:4a:fd:da:85:43:31:b9:47:49:2d:81: ad:49:46:ad:c7:51:76:63:d6:65:95:a9:f8:d5:db: e4:f5:0b:ea:03:24:b2:24:7c:f6:50:a8:c6:43:3b: da:86:04:b2:b4:cc:8f:5a:8b:f1:5a:52:b7:68:05: e2:aa:aa:81:84:8e:3f:88:e5:ed:34:b0:e0:06:cc: 9c:92:ed:0f:9b:e9:a6:55:d0:45:24:24:92:a1:02: fd:db:2f:b3:06:58:76:d0:ec:7f:a3:05:5f:26:a0: e3:7b:09:7d:d6:60:cc:65:11:3c:20:6b:25:2b:e4: 86:d6:af:8f:ea:d5:b0:10:54:92:75:72:2e:84:54: d4:4e:fe:52:5c:f6:5e:ff:2d:fa:14:c3:9e:93:1f: 1c:73:ea:d2:34:b9:64:17:83:66:61:20:87:6f:ef: 10:eb:62:96:59:fd:22:81:c3:d5:39:4e:2a:1a:5c: 76:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:99:FA:39:4F:5D:83:95:F1:D4:FD:6A:ED:50:42:DA:2D:FF:CD:7C X509v3 Authority Key Identifier: keyid:70:BB:5E:54:F2:74:8E:CB:5D:86:98:D3:79:33:9C:C1:5F:32:B8:93 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cLteVPJ0jstdhpjTeTOcwV8yuJM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/dc3246-c85a-46df-8c30-48cee26c55bb/1/cLteVPJ0jstdhpjTeTOcwV8yuJM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/dc3246-c85a-46df-8c30-48cee26c55bb/1/cLteVPJ0jstdhpjTeTOcwV8yuJM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a2:1e:14:6b:c2:48:41:1f:7b:c7:23:b5:64:f7:6a:1c:2e:88: 1c:8e:c3:67:36:23:a6:45:43:c2:8b:5c:d9:2e:70:bc:4a:d4: 61:4d:97:6a:0e:bc:dd:55:47:84:30:ad:85:1d:22:01:e1:66: 2b:7b:0b:67:29:ac:3c:51:49:44:62:f8:ae:3a:6a:e4:2c:50: f0:dd:50:27:17:c1:42:dd:ac:42:d2:e2:3c:e4:69:db:a8:6e: a0:c2:c1:63:89:70:b8:e4:36:de:c9:e5:c3:d6:ba:0e:5a:44: 7c:ff:c8:22:95:5a:e9:19:38:4a:64:7c:2e:43:28:9c:d6:a7: b1:44:f2:46:39:b9:43:8f:ed:d6:b2:46:a1:2f:3c:94:df:fb: 3b:57:c4:3c:c4:2f:d6:0d:07:b2:d8:61:6a:73:db:25:e5:62: 36:da:74:6f:e4:04:27:19:f4:52:46:8a:87:68:d7:40:2d:aa: 3f:a3:f3:05:b3:7e:ed:f9:1e:7a:5c:65:c6:ba:d7:18:63:1e: 95:b9:05:12:da:83:08:d2:d3:d4:39:0a:6b:fb:3b:6e:f6:95: ce:ce:47:b0:3f:94:97:0d:4d:6c:be:87:0c:d5:e2:e2:57:d2: c4:f6:63:00:eb:dc:1b:b1:f1:ea:1f:63:0b:58:69:ef:70:37: d3:9d:62:24 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr0nFykYoDqFk37ssnCNKrdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcwYmI1ZTU0ZjI3NDhlY2I1ZDg2OThkMzc5MzM5Y2MxNWYz MmI4OTMwHhcNMjUxMjA2MTcwMTE5WhcNMjUxMjA3MTcwMTE5WjAzMTEwLwYDVQQD Eyg2Yjk5ZmEzOTRmNWQ4Mzk1ZjFkNGZkNmFlZDUwNDJkYTJkZmZjZDdjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqxwZt2bsRCEdVF9KLnSdFfunUh4K nm1sz7gwdd1DkUoVImR/GAalub3lztDbwjr18+FpwYIPjVet6cKS7MRtI9Fj4+pL HBW4l4XyCz2qSv3ahUMxuUdJLYGtSUatx1F2Y9Zllan41dvk9QvqAySyJHz2UKjG QzvahgSytMyPWovxWlK3aAXiqqqBhI4/iOXtNLDgBsycku0Pm+mmVdBFJCSSoQL9 2y+zBlh20Ox/owVfJqDjewl91mDMZRE8IGslK+SG1q+P6tWwEFSSdXIuhFTUTv5S XPZe/y36FMOekx8cc+rSNLlkF4NmYSCHb+8Q62KWWf0igcPVOU4qGlx29QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGuZ+jlPXYOV8dT9au1QQtot/818MB8GA1UdIwQY MBaAFHC7XlTydI7LXYaY03kznMFfMriTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY0x0ZVZQSjBqc3RkaHBqVGVUT2N3Vjh5dUpNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi9kYzMyNDYtYzg1YS00NmRmLThjMzAt NDhjZWUyNmM1NWJiLzEvY0x0ZVZQSjBqc3RkaHBqVGVUT2N3Vjh5dUpNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Zi9kYzMyNDYtYzg1YS00NmRmLThjMzAtNDhjZWUyNmM1NWJi LzEvY0x0ZVZQSjBqc3RkaHBqVGVUT2N3Vjh5dUpNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoh4Ua8JI QR97xyO1ZPdqHC6IHI7DZzYjpkVDwotc2S5wvErUYU2Xag683VVHhDCthR0iAeFm K3sLZymsPFFJRGL4rjpq5CxQ8N1QJxfBQt2sQtLiPORp26huoMLBY4lwuOQ23snl w9a6DlpEfP/IIpVa6Rk4SmR8LkMonNansUTyRjm5Q4/t1rJGoS88lN/7O1fEPMQv 1g0HsthhanPbJeViNtp0b+QEJxn0UkaKh2jXQC2qP6PzBbN+7fkeelxlxrrXGGMe lbkFEtqDCNLT1DkKa/s7bvaVzs5HsD+Ulw1NbL6HDNXi4lfSxPZjAOvcG7Hx6h9j C1hp73A3051iJA== -----END CERTIFICATE-----Generated at Sat Dec 6 22:38:10 2025 by rpki-client