This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/1cb9fc-6b33-42d5-9423-79ecd8a9b6d6/1/cTXjiUY0SCsIMXd1x5ZX6bgxLU0.mft File: cTXjiUY0SCsIMXd1x5ZX6bgxLU0.mft (raw, json) Hash identifier: OBUCUOutLcd+6/0Zl1YORNP5F0pT0wBVpPzKkiZ9qRg= Subject key identifier: BF:5E:19:AC:D0:15:14:D9:24:B0:12:F6:CF:E3:BF:96:C5:55:5C:3E Authority key identifier: 71:35:E3:89:46:34:48:2B:08:31:77:75:C7:96:57:E9:B8:31:2D:4D Certificate issuer: /CN=7135e3894634482b08317775c79657e9b8312d4d Certificate serial: 019AF2ADA0684B55576E70FB165F0A723D3F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cTXjiUY0SCsIMXd1x5ZX6bgxLU0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/1cb9fc-6b33-42d5-9423-79ecd8a9b6d6/1/cTXjiUY0SCsIMXd1x5ZX6bgxLU0.mft Manifest number: 1198 Signing time: Sat 06 Dec 2025 08:00:56 +0000 Manifest this update: Sat 06 Dec 2025 08:00:56 +0000 Manifest next update: Sun 07 Dec 2025 08:00:56 +0000 Files and hashes: 1: 3vMVhDVuSakGpKEegLzmX9CZn_0.roa (hash: 0WA7LBg+VlA+MYR6g5nbmdux2cCvdzgMgFAqrxmL/5k=) 2: cTXjiUY0SCsIMXd1x5ZX6bgxLU0.crl (hash: VxC1D8PrKN5mo6TjsheE7J6wVUxJ0cTL6Kg/JUjAw4g=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/1cb9fc-6b33-42d5-9423-79ecd8a9b6d6/1/cTXjiUY0SCsIMXd1x5ZX6bgxLU0.crl rsync://rpki.ripe.net/repository/DEFAULT/62/1cb9fc-6b33-42d5-9423-79ecd8a9b6d6/1/cTXjiUY0SCsIMXd1x5ZX6bgxLU0.mft rsync://rpki.ripe.net/repository/DEFAULT/cTXjiUY0SCsIMXd1x5ZX6bgxLU0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 08:00:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:ad:a0:68:4b:55:57:6e:70:fb:16:5f:0a:72:3d:3f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7135e3894634482b08317775c79657e9b8312d4d Validity Not Before: Dec 6 08:00:56 2025 GMT Not After : Dec 7 08:00:56 2025 GMT Subject: CN=bf5e19acd01514d924b012f6cfe3bf96c5555c3e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f8:c8:75:11:5d:bc:d3:47:ce:f8:2d:b3:8b:28: ab:54:32:e5:92:5d:ab:0a:5a:e0:9a:1b:8e:61:42: 36:e9:c3:a5:37:40:c9:b4:fa:8a:c5:db:2c:37:c8: c6:88:66:3d:a1:2e:a1:c1:f3:4a:95:3c:4c:bf:7c: b2:aa:16:c6:02:7d:73:e6:72:c2:97:70:18:81:40: ee:47:db:0d:16:a5:bc:c6:0d:57:4d:88:a8:22:6c: aa:d9:22:61:2d:16:1c:01:5f:55:1c:2d:6d:a4:85: 15:54:74:33:01:22:b7:73:b6:a6:91:54:79:b4:78: bc:41:c8:7d:67:c6:d9:57:56:88:17:7a:92:f2:79: f5:5a:e0:63:83:44:74:0e:a7:a9:dc:dd:69:b2:74: f6:95:1d:1a:3f:3a:a2:7e:d2:c4:22:d4:06:3b:f6: 97:9e:82:8e:cc:92:9c:51:a2:11:97:a0:a4:0b:e0: 38:f5:5b:08:81:bb:6e:bd:a6:af:2f:3a:b6:a6:e3: bd:88:7a:b9:58:b9:61:df:a1:68:71:86:da:04:0f: ea:fa:0a:d8:a5:4d:fe:a0:6a:c0:09:59:52:b4:e3: 1e:7f:68:e1:7f:0f:25:08:a0:12:49:04:fc:f9:3a: 20:89:c1:05:b5:a5:31:f1:b8:12:77:44:ae:c0:79: 43:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:5E:19:AC:D0:15:14:D9:24:B0:12:F6:CF:E3:BF:96:C5:55:5C:3E X509v3 Authority Key Identifier: keyid:71:35:E3:89:46:34:48:2B:08:31:77:75:C7:96:57:E9:B8:31:2D:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cTXjiUY0SCsIMXd1x5ZX6bgxLU0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/1cb9fc-6b33-42d5-9423-79ecd8a9b6d6/1/cTXjiUY0SCsIMXd1x5ZX6bgxLU0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/62/1cb9fc-6b33-42d5-9423-79ecd8a9b6d6/1/cTXjiUY0SCsIMXd1x5ZX6bgxLU0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 28:be:8d:3b:89:f0:af:11:ac:a8:04:47:fd:e5:23:70:5a:08: df:f1:2f:c3:65:94:e0:b2:06:09:34:9b:d2:54:2b:d4:97:28: 4e:52:91:94:58:ae:a5:d1:c9:ce:a1:00:41:ca:18:f9:81:ec: 7e:73:d5:ad:36:52:47:12:d8:b6:88:66:36:4b:f0:b2:c0:5f: a0:83:ce:43:02:1e:ee:cb:90:37:b7:d8:39:e8:2a:63:b6:11: 1c:f3:39:3b:a3:97:33:85:17:aa:a0:81:c9:50:61:16:72:ad: 63:a4:6a:d4:36:29:df:82:0f:62:b6:5a:ce:6a:e4:dd:dd:a6: 12:8e:1a:11:14:e5:ea:eb:fc:52:42:f9:80:f3:85:2a:0c:3d: 90:c6:6b:53:b2:cd:58:9c:fb:4b:00:00:3c:d9:c7:1e:fd:d1: a9:9c:46:4c:2e:4f:ed:7d:d1:e0:5d:a4:e7:89:aa:6e:be:18: 45:03:20:1d:34:69:9c:55:85:46:d6:aa:7e:c2:58:e4:71:5e: 8f:26:b0:d8:ff:b4:94:a3:d6:43:c7:d0:49:2a:1b:11:5e:14: 37:99:c1:0d:01:2c:c3:5c:51:e8:d2:dd:b3:9b:5f:df:31:cb: 4c:41:c0:8d:01:6f:59:76:0d:dc:e7:e4:e2:a5:d7:f2:93:0d: 60:c7:57:25 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryraBoS1VXbnD7Fl8Kcj0/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcxMzVlMzg5NDYzNDQ4MmIwODMxNzc3NWM3OTY1N2U5Yjgz MTJkNGQwHhcNMjUxMjA2MDgwMDU2WhcNMjUxMjA3MDgwMDU2WjAzMTEwLwYDVQQD EyhiZjVlMTlhY2QwMTUxNGQ5MjRiMDEyZjZjZmUzYmY5NmM1NTU1YzNlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+Mh1EV2800fO+C2ziyirVDLlkl2r ClrgmhuOYUI26cOlN0DJtPqKxdssN8jGiGY9oS6hwfNKlTxMv3yyqhbGAn1z5nLC l3AYgUDuR9sNFqW8xg1XTYioImyq2SJhLRYcAV9VHC1tpIUVVHQzASK3c7amkVR5 tHi8Qch9Z8bZV1aIF3qS8nn1WuBjg0R0Dqep3N1psnT2lR0aPzqiftLEItQGO/aX noKOzJKcUaIRl6CkC+A49VsIgbtuvaavLzq2puO9iHq5WLlh36FocYbaBA/q+grY pU3+oGrACVlStOMef2jhfw8lCKASSQT8+TogicEFtaUx8bgSd0SuwHlDgwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFL9eGazQFRTZJLAS9s/jv5bFVVw+MB8GA1UdIwQY MBaAFHE144lGNEgrCDF3dceWV+m4MS1NMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY1RYamlVWTBTQ3NJTVhkMXg1Wlg2Ymd4TFUwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Mi8xY2I5ZmMtNmIzMy00MmQ1LTk0MjMt NzllY2Q4YTliNmQ2LzEvY1RYamlVWTBTQ3NJTVhkMXg1Wlg2Ymd4TFUwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Mi8xY2I5ZmMtNmIzMy00MmQ1LTk0MjMtNzllY2Q4YTliNmQ2 LzEvY1RYamlVWTBTQ3NJTVhkMXg1Wlg2Ymd4TFUwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKL6NO4nw rxGsqARH/eUjcFoI3/Evw2WU4LIGCTSb0lQr1JcoTlKRlFiupdHJzqEAQcoY+YHs fnPVrTZSRxLYtohmNkvwssBfoIPOQwIe7suQN7fYOegqY7YRHPM5O6OXM4UXqqCB yVBhFnKtY6Rq1DYp34IPYrZazmrk3d2mEo4aERTl6uv8UkL5gPOFKgw9kMZrU7LN WJz7SwAAPNnHHv3RqZxGTC5P7X3R4F2k54mqbr4YRQMgHTRpnFWFRtaqfsJY5HFe jyaw2P+0lKPWQ8fQSSobEV4UN5nBDQEsw1xR6NLds5tf3zHLTEHAjQFvWXYN3Ofk 4qXX8pMNYMdXJQ== -----END CERTIFICATE-----Generated at Sat Dec 6 17:52:52 2025 by rpki-client