This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/53d56a-096e-458a-9a94-08a68632a63a/1/cJ1plX0zNDKsysgQIx4ok4jjAuI.mft File: cJ1plX0zNDKsysgQIx4ok4jjAuI.mft (raw, json) Hash identifier: 47SGb/pz25dyITW9Ha6pB9ulK38EjatCfdxu3j/rZiI= Subject key identifier: EB:30:29:24:7D:C6:2A:6D:0B:7D:CF:E9:60:FA:77:7E:D8:48:EC:60 Authority key identifier: 70:9D:69:95:7D:33:34:32:AC:CA:C8:10:23:1E:28:93:88:E3:02:E2 Certificate issuer: /CN=709d69957d333432accac810231e289388e302e2 Certificate serial: 019AF12E22306C5F5DAD24D0B369ECD34120 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cJ1plX0zNDKsysgQIx4ok4jjAuI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/53d56a-096e-458a-9a94-08a68632a63a/1/cJ1plX0zNDKsysgQIx4ok4jjAuI.mft Manifest number: 1762 Signing time: Sat 06 Dec 2025 01:02:03 +0000 Manifest this update: Sat 06 Dec 2025 01:02:03 +0000 Manifest next update: Sun 07 Dec 2025 01:02:03 +0000 Files and hashes: 1: 9y87QXHvPreUOvjZ1Oe2QvXling.roa (hash: THAUh6ARfmUeBlEORlfxrZB6XW0KTPM4GpL4IBGKtq4=) 2: cJ1plX0zNDKsysgQIx4ok4jjAuI.crl (hash: S3NYiBnoapxOvOxVDPH5hvIMqbWuLFstb6wpfa1PrL8=) 3: dagjZoA2cgv7IOwssRcqkxBEGlA.roa (hash: MlQsKiZwSfxtbg0qv4PHAKQxosBgQWpaFiAz9StErlg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/53d56a-096e-458a-9a94-08a68632a63a/1/cJ1plX0zNDKsysgQIx4ok4jjAuI.crl rsync://rpki.ripe.net/repository/DEFAULT/64/53d56a-096e-458a-9a94-08a68632a63a/1/cJ1plX0zNDKsysgQIx4ok4jjAuI.mft rsync://rpki.ripe.net/repository/DEFAULT/cJ1plX0zNDKsysgQIx4ok4jjAuI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:02:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2e:22:30:6c:5f:5d:ad:24:d0:b3:69:ec:d3:41:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=709d69957d333432accac810231e289388e302e2 Validity Not Before: Dec 6 01:02:03 2025 GMT Not After : Dec 7 01:02:03 2025 GMT Subject: CN=eb3029247dc62a6d0b7dcfe960fa777ed848ec60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:db:90:b0:35:39:7e:67:1f:14:85:23:9a:ce: 42:df:39:aa:7b:45:5d:8b:97:ad:fc:b2:2f:9c:ed: 7e:34:5d:e7:2b:28:37:d2:58:d7:f8:dc:37:5e:0d: 41:93:fc:66:b1:4b:9b:56:19:1b:ca:26:c8:f3:00: 05:6b:18:da:48:6f:8d:d3:82:59:f1:35:c2:6b:0d: 00:98:b2:3b:1c:45:91:e8:be:3e:91:04:0e:b1:f4: 08:15:fb:63:19:fa:c0:33:0c:c3:24:3c:70:17:2f: 09:94:08:1f:ae:94:8d:c5:3e:7a:11:4a:8f:22:af: c2:ef:77:de:b2:de:4d:ab:4e:cb:fe:4f:77:c2:de: 84:86:60:e0:3f:da:cc:68:82:05:b2:75:1f:18:28: 15:80:00:4b:02:9b:4d:78:a2:93:bf:6c:3c:fd:94: 14:76:85:d1:ea:d0:8d:98:ec:12:d9:56:1a:fc:95: 32:e5:42:78:af:d4:90:f8:99:72:71:dc:11:4b:1b: 07:14:98:dd:73:2c:98:45:d7:8f:ea:3a:48:73:c9: 9b:01:db:48:93:35:52:90:3c:d3:2f:6e:48:5e:21: ba:bf:6b:b3:bf:f2:02:12:8f:6f:1d:d6:2d:6e:d5: 5d:46:b3:48:45:c3:27:09:40:29:df:7c:bf:4c:6c: 5d:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:30:29:24:7D:C6:2A:6D:0B:7D:CF:E9:60:FA:77:7E:D8:48:EC:60 X509v3 Authority Key Identifier: keyid:70:9D:69:95:7D:33:34:32:AC:CA:C8:10:23:1E:28:93:88:E3:02:E2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cJ1plX0zNDKsysgQIx4ok4jjAuI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/53d56a-096e-458a-9a94-08a68632a63a/1/cJ1plX0zNDKsysgQIx4ok4jjAuI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/64/53d56a-096e-458a-9a94-08a68632a63a/1/cJ1plX0zNDKsysgQIx4ok4jjAuI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 28:fc:00:46:14:63:c6:6c:93:e3:93:67:ae:18:2b:c3:58:46: a4:5a:ed:5c:90:9b:ce:ce:ce:a1:5d:31:44:87:dd:5b:7a:5b: 71:e7:4c:d8:cc:60:9c:fc:fe:82:c0:17:17:f3:ea:5a:c4:6c: 6f:6b:c0:23:1e:ca:fe:3a:dd:f9:47:75:6b:64:8e:98:f0:54: 5a:b7:fe:31:83:41:66:05:39:1b:0c:81:5c:ec:35:f5:79:6a: 51:d9:3e:29:ca:7d:58:af:40:72:b8:9f:99:a8:ef:3f:49:11: 43:19:b4:13:4f:01:56:ca:5d:38:f4:0a:6c:d0:dc:54:58:5e: 77:02:b3:7e:81:3f:77:65:0c:8f:67:9c:f4:32:43:85:e0:af: 95:43:21:d0:44:d2:ba:ee:8b:8b:6d:f1:8d:b6:f1:75:c1:12: af:98:e0:80:17:8c:3e:2f:83:e7:8c:11:a4:58:89:17:57:a8: 77:c6:df:ed:a8:f5:37:14:12:bf:ea:58:b5:78:9c:d6:46:5d: c7:91:2b:f7:f2:c8:b0:54:80:49:dd:89:87:80:ce:4a:7f:bd: be:b1:54:19:9c:f6:01:f1:95:84:8f:d0:d3:5f:73:07:60:de: bc:92:9c:7c:61:f4:d4:e2:18:c2:70:24:2f:46:c7:92:16:a7: 28:32:e6:5d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLiIwbF9drSTQs2ns00EgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcwOWQ2OTk1N2QzMzM0MzJhY2NhYzgxMDIzMWUyODkzODhl MzAyZTIwHhcNMjUxMjA2MDEwMjAzWhcNMjUxMjA3MDEwMjAzWjAzMTEwLwYDVQQD EyhlYjMwMjkyNDdkYzYyYTZkMGI3ZGNmZTk2MGZhNzc3ZWQ4NDhlYzYwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3duQsDU5fmcfFIUjms5C3zmqe0Vd i5et/LIvnO1+NF3nKyg30ljX+Nw3Xg1Bk/xmsUubVhkbyibI8wAFaxjaSG+N04JZ 8TXCaw0AmLI7HEWR6L4+kQQOsfQIFftjGfrAMwzDJDxwFy8JlAgfrpSNxT56EUqP Iq/C73fest5Nq07L/k93wt6EhmDgP9rMaIIFsnUfGCgVgABLAptNeKKTv2w8/ZQU doXR6tCNmOwS2VYa/JUy5UJ4r9SQ+JlycdwRSxsHFJjdcyyYRdeP6jpIc8mbAdtI kzVSkDzTL25IXiG6v2uzv/ICEo9vHdYtbtVdRrNIRcMnCUAp33y/TGxdOQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOswKSR9xiptC33P6WD6d37YSOxgMB8GA1UdIwQY MBaAFHCdaZV9MzQyrMrIECMeKJOI4wLiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY0oxcGxYMHpOREtzeXNnUUl4NG9rNGpqQXVJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NC81M2Q1NmEtMDk2ZS00NThhLTlhOTQt MDhhNjg2MzJhNjNhLzEvY0oxcGxYMHpOREtzeXNnUUl4NG9rNGpqQXVJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NC81M2Q1NmEtMDk2ZS00NThhLTlhOTQtMDhhNjg2MzJhNjNh LzEvY0oxcGxYMHpOREtzeXNnUUl4NG9rNGpqQXVJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKPwARhRj xmyT45Nnrhgrw1hGpFrtXJCbzs7OoV0xRIfdW3pbcedM2MxgnPz+gsAXF/PqWsRs b2vAIx7K/jrd+Ud1a2SOmPBUWrf+MYNBZgU5GwyBXOw19XlqUdk+Kcp9WK9Acrif majvP0kRQxm0E08BVspdOPQKbNDcVFhedwKzfoE/d2UMj2ec9DJDheCvlUMh0ETS uu6Li23xjbbxdcESr5jggBeMPi+D54wRpFiJF1eod8bf7aj1NxQSv+pYtXic1kZd x5Er9/LIsFSASd2Jh4DOSn+9vrFUGZz2AfGVhI/Q019zB2DevJKcfGH01OIYwnAk L0bHkhanKDLmXQ== -----END CERTIFICATE-----Generated at Sat Dec 6 09:21:15 2025 by rpki-client