This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/1cb9fc-6b33-42d5-9423-79ecd8a9b6d6/1/cTXjiUY0SCsIMXd1x5ZX6bgxLU0.mft File: cTXjiUY0SCsIMXd1x5ZX6bgxLU0.mft (raw, json) Hash identifier: D/MiyNX9VaDAt61tFkOL3be1E8HWhdIvDC5azSPftM4= Subject key identifier: 5C:EC:7D:74:63:06:6E:D8:2C:A0:82:D0:40:66:F5:35:62:91:4A:50 Authority key identifier: 71:35:E3:89:46:34:48:2B:08:31:77:75:C7:96:57:E9:B8:31:2D:4D Certificate issuer: /CN=7135e3894634482b08317775c79657e9b8312d4d Certificate serial: 019AF49BD0529D25F4C63B5766F5274CABAE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cTXjiUY0SCsIMXd1x5ZX6bgxLU0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/1cb9fc-6b33-42d5-9423-79ecd8a9b6d6/1/cTXjiUY0SCsIMXd1x5ZX6bgxLU0.mft Manifest number: 1199 Signing time: Sat 06 Dec 2025 17:00:43 +0000 Manifest this update: Sat 06 Dec 2025 17:00:43 +0000 Manifest next update: Sun 07 Dec 2025 17:00:43 +0000 Files and hashes: 1: 3vMVhDVuSakGpKEegLzmX9CZn_0.roa (hash: 0WA7LBg+VlA+MYR6g5nbmdux2cCvdzgMgFAqrxmL/5k=) 2: cTXjiUY0SCsIMXd1x5ZX6bgxLU0.crl (hash: JVbST7NDdbB4v6uaJTtgnK6o29nMEl5jgLq/z7WKCgU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/1cb9fc-6b33-42d5-9423-79ecd8a9b6d6/1/cTXjiUY0SCsIMXd1x5ZX6bgxLU0.crl rsync://rpki.ripe.net/repository/DEFAULT/62/1cb9fc-6b33-42d5-9423-79ecd8a9b6d6/1/cTXjiUY0SCsIMXd1x5ZX6bgxLU0.mft rsync://rpki.ripe.net/repository/DEFAULT/cTXjiUY0SCsIMXd1x5ZX6bgxLU0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:9b:d0:52:9d:25:f4:c6:3b:57:66:f5:27:4c:ab:ae Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7135e3894634482b08317775c79657e9b8312d4d Validity Not Before: Dec 6 17:00:43 2025 GMT Not After : Dec 7 17:00:43 2025 GMT Subject: CN=5cec7d7463066ed82ca082d04066f53562914a50 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:90:08:40:dc:eb:63:e7:2b:7b:12:77:c7:a3: fb:1f:a2:d9:33:05:3f:a9:ad:c4:3c:81:e8:0f:06: 9d:b2:25:35:21:d5:fd:fd:74:f4:e2:bc:f9:a0:9a: e2:ac:a0:cc:2e:f8:a7:a9:31:c8:73:27:eb:bf:79: 25:41:62:86:a9:e9:03:3c:a7:dc:0d:40:81:82:ff: bc:bb:aa:35:d4:e2:80:92:22:4b:a6:36:2f:73:b7: a6:27:bf:ce:5b:ce:a2:32:87:08:b8:b7:17:ba:3a: bb:c6:8d:85:91:e4:ea:5f:ac:e9:94:c4:bb:98:ff: 0f:3d:11:47:56:a6:16:bd:d1:92:d4:6d:b5:f0:ee: a5:cf:be:cc:05:c3:46:b1:6c:a4:f9:0a:a1:b2:38: c4:e0:9e:de:8b:15:04:28:96:a0:1a:81:e6:a5:1e: c5:e8:7d:33:4b:08:7e:b4:df:85:56:2f:2d:4c:80: e1:4d:19:11:f9:15:2c:67:f0:76:f2:4c:96:ff:2b: a8:3d:bb:d0:8f:ac:88:1a:26:52:f7:e0:bd:4f:16: b6:a9:bd:7d:f7:dd:b1:2f:11:11:60:12:bf:51:cf: 9a:f4:8c:10:f4:5b:70:a2:38:05:a9:79:48:eb:43: d2:80:c4:c6:ae:c7:b8:5e:01:bc:ed:04:5f:ef:91: 6b:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:EC:7D:74:63:06:6E:D8:2C:A0:82:D0:40:66:F5:35:62:91:4A:50 X509v3 Authority Key Identifier: keyid:71:35:E3:89:46:34:48:2B:08:31:77:75:C7:96:57:E9:B8:31:2D:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cTXjiUY0SCsIMXd1x5ZX6bgxLU0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/1cb9fc-6b33-42d5-9423-79ecd8a9b6d6/1/cTXjiUY0SCsIMXd1x5ZX6bgxLU0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/62/1cb9fc-6b33-42d5-9423-79ecd8a9b6d6/1/cTXjiUY0SCsIMXd1x5ZX6bgxLU0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9e:89:2d:dc:05:cf:8c:01:e3:97:7b:50:bc:77:b3:97:17:50: 5d:f3:45:05:fe:92:9d:8c:74:80:87:48:82:a9:d8:80:5a:2e: cc:da:fc:1c:68:7d:4a:38:2a:8d:a9:0a:43:66:85:75:9f:92: 1b:ce:11:61:d6:0b:80:ff:32:c8:a5:e3:09:48:ba:03:ee:ce: 46:c6:2a:16:1f:e3:a5:a4:09:f4:fe:90:80:a3:88:16:6a:23: 63:37:31:b4:f4:f5:af:d3:2c:bb:03:d9:c2:65:3e:cb:d7:f5: 55:5d:8d:61:3c:64:bf:95:ea:94:c0:02:4f:7f:e1:60:77:3d: 09:49:1e:9a:98:a1:74:d1:13:14:cb:97:27:ba:61:09:cb:6b: e3:26:20:e5:f3:cd:ff:e6:62:62:a2:e4:99:66:ad:66:11:26: d1:41:a8:82:fb:6a:89:11:95:02:b2:e2:ff:02:1b:27:7e:74: 8d:f9:f1:b7:66:60:0f:99:6b:7b:49:bc:17:31:b1:87:bc:33: dc:b7:99:41:34:6e:00:a3:92:b2:52:05:6c:4d:54:16:c4:ff: 49:da:6f:0f:8f:e0:64:06:6d:2e:d3:13:8f:e9:c6:b8:f6:3b: 65:a1:50:51:42:80:f7:95:96:2e:cb:9a:bf:15:f4:75:8d:4d: d4:12:cf:b8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr0m9BSnSX0xjtXZvUnTKuuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcxMzVlMzg5NDYzNDQ4MmIwODMxNzc3NWM3OTY1N2U5Yjgz MTJkNGQwHhcNMjUxMjA2MTcwMDQzWhcNMjUxMjA3MTcwMDQzWjAzMTEwLwYDVQQD Eyg1Y2VjN2Q3NDYzMDY2ZWQ4MmNhMDgyZDA0MDY2ZjUzNTYyOTE0YTUwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy5AIQNzrY+crexJ3x6P7H6LZMwU/ qa3EPIHoDwadsiU1IdX9/XT04rz5oJrirKDMLvinqTHIcyfrv3klQWKGqekDPKfc DUCBgv+8u6o11OKAkiJLpjYvc7emJ7/OW86iMocIuLcXujq7xo2FkeTqX6zplMS7 mP8PPRFHVqYWvdGS1G218O6lz77MBcNGsWyk+QqhsjjE4J7eixUEKJagGoHmpR7F 6H0zSwh+tN+FVi8tTIDhTRkR+RUsZ/B28kyW/yuoPbvQj6yIGiZS9+C9Txa2qb19 992xLxERYBK/Uc+a9IwQ9FtwojgFqXlI60PSgMTGrse4XgG87QRf75FrmQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFzsfXRjBm7YLKCC0EBm9TVikUpQMB8GA1UdIwQY MBaAFHE144lGNEgrCDF3dceWV+m4MS1NMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY1RYamlVWTBTQ3NJTVhkMXg1Wlg2Ymd4TFUwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Mi8xY2I5ZmMtNmIzMy00MmQ1LTk0MjMt NzllY2Q4YTliNmQ2LzEvY1RYamlVWTBTQ3NJTVhkMXg1Wlg2Ymd4TFUwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Mi8xY2I5ZmMtNmIzMy00MmQ1LTk0MjMtNzllY2Q4YTliNmQ2 LzEvY1RYamlVWTBTQ3NJTVhkMXg1Wlg2Ymd4TFUwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnokt3AXP jAHjl3tQvHezlxdQXfNFBf6SnYx0gIdIgqnYgFouzNr8HGh9SjgqjakKQ2aFdZ+S G84RYdYLgP8yyKXjCUi6A+7ORsYqFh/jpaQJ9P6QgKOIFmojYzcxtPT1r9MsuwPZ wmU+y9f1VV2NYTxkv5XqlMACT3/hYHc9CUkempihdNETFMuXJ7phCctr4yYg5fPN /+ZiYqLkmWatZhEm0UGogvtqiRGVArLi/wIbJ350jfnxt2ZgD5lre0m8FzGxh7wz 3LeZQTRuAKOSslIFbE1UFsT/SdpvD4/gZAZtLtMTj+nGuPY7ZaFQUUKA95WWLsua vxX0dY1N1BLPuA== -----END CERTIFICATE-----Generated at Sat Dec 6 19:46:43 2025 by rpki-client