This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/1785f1-ae23-40f0-83f2-6def398ce5c9/1/CjC2NdNXRo1_ky0-H1nVNzz59GU.mft File: CjC2NdNXRo1_ky0-H1nVNzz59GU.mft (raw, json) Hash identifier: sWRiofHPjFegLmsJZlssFii+6hnNBADCLMTl5BbyY5Q= Subject key identifier: 08:E6:81:0B:EC:5D:F0:92:17:45:61:CA:D2:62:4F:55:01:8B:67:BD Authority key identifier: 0A:30:B6:35:D3:57:46:8D:7F:93:2D:3E:1F:59:D5:37:3C:F9:F4:65 Certificate issuer: /CN=0a30b635d357468d7f932d3e1f59d5373cf9f465 Certificate serial: 019AF27649584E900BB8A09810EC9CB03F02 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CjC2NdNXRo1_ky0-H1nVNzz59GU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/1785f1-ae23-40f0-83f2-6def398ce5c9/1/CjC2NdNXRo1_ky0-H1nVNzz59GU.mft Manifest number: 1770 Signing time: Sat 06 Dec 2025 07:00:29 +0000 Manifest this update: Sat 06 Dec 2025 07:00:29 +0000 Manifest next update: Sun 07 Dec 2025 07:00:29 +0000 Files and hashes: 1: 43hLg4tOOv7SoGn-XftXhK9a-NE.roa (hash: fTCV6jJu7vHlfoEQtZwLz0NW5RubKgDanJcVlL86nkI=) 2: CjC2NdNXRo1_ky0-H1nVNzz59GU.crl (hash: t+YTXlzsLYRKAXo9U6QjDcDejAVekwHfNkh2XsFixtU=) 3: MxFWnMmlsCx1TmmKhtNcJn8H1K4.roa (hash: r41sfO0em6qrkFr4zaPfNm49MUfMsRWUTWI32MUXIbs=) 4: RservbDL-BVcPWiT5GY7GGmaqNg.roa (hash: 6kmm57SMuR609w7NX9SqjiOxJz1WjZ0ODARP+aV0g60=) 5: SpbFu7cu1hyzijH4Dcq1zO1wfcw.roa (hash: s7llN+uwGj/YltcQ4pU6jWvPZRuwP/LeuHpZEDrxXAg=) 6: nvYcptlp0PUhINL8di32N1PMAlE.roa (hash: pt/p/I9QSvcAJg81FJVs1CNUkiY+sFdwtB0jYLQnIjQ=) 7: wNh0jMOPHCGGtlAG3PiNBZzjcno.roa (hash: NaE5nCG+kp0N7iEIRzHU/rkLw5QEKaxFzRCaxMZ3BjY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/1785f1-ae23-40f0-83f2-6def398ce5c9/1/CjC2NdNXRo1_ky0-H1nVNzz59GU.crl rsync://rpki.ripe.net/repository/DEFAULT/75/1785f1-ae23-40f0-83f2-6def398ce5c9/1/CjC2NdNXRo1_ky0-H1nVNzz59GU.mft rsync://rpki.ripe.net/repository/DEFAULT/CjC2NdNXRo1_ky0-H1nVNzz59GU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:76:49:58:4e:90:0b:b8:a0:98:10:ec:9c:b0:3f:02 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0a30b635d357468d7f932d3e1f59d5373cf9f465 Validity Not Before: Dec 6 07:00:29 2025 GMT Not After : Dec 7 07:00:29 2025 GMT Subject: CN=08e6810bec5df092174561cad2624f55018b67bd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:40:7d:2c:5c:b2:87:33:50:06:eb:d5:a9:0b: ef:97:d2:29:15:f6:2d:c7:64:74:ad:d5:98:bd:27: 3d:32:fb:82:f0:a1:f3:5a:db:4a:fe:15:3e:d7:28: 9a:3b:6d:46:57:19:41:00:f1:75:a1:c4:31:35:db: c6:5e:39:7f:ee:e6:78:d0:91:10:dd:6b:86:10:48: fa:6f:da:b8:f7:e5:51:25:58:2e:99:d2:3d:51:c0: 2f:79:0e:a2:4c:3f:26:93:55:cf:72:ca:d5:5d:5a: b6:16:d7:0c:50:88:e3:65:91:91:de:09:8d:9b:47: 0a:d7:27:b4:bf:31:a1:ce:1a:44:b3:c3:76:ec:3a: ec:fd:78:93:fa:28:f1:ad:59:40:fa:3d:66:c3:42: d5:39:f8:7e:d2:c1:ac:01:56:1d:eb:82:37:cd:32: 65:8e:f0:d6:60:b2:9c:3b:56:c5:4a:8b:5c:40:b2: 54:23:bd:e9:36:83:66:6d:8f:49:2c:bd:05:e6:d6: 95:0d:46:84:ed:ed:7d:9b:0f:e6:bc:f9:c5:a9:37: e3:80:50:6f:4e:19:50:8b:73:43:9f:10:cb:1e:f6: 0a:5f:74:d9:ef:71:97:09:66:f5:69:37:44:68:67: af:9b:7d:0f:78:37:b4:ce:b9:71:c3:81:66:f0:69: d3:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:E6:81:0B:EC:5D:F0:92:17:45:61:CA:D2:62:4F:55:01:8B:67:BD X509v3 Authority Key Identifier: keyid:0A:30:B6:35:D3:57:46:8D:7F:93:2D:3E:1F:59:D5:37:3C:F9:F4:65 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CjC2NdNXRo1_ky0-H1nVNzz59GU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/1785f1-ae23-40f0-83f2-6def398ce5c9/1/CjC2NdNXRo1_ky0-H1nVNzz59GU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/75/1785f1-ae23-40f0-83f2-6def398ce5c9/1/CjC2NdNXRo1_ky0-H1nVNzz59GU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5c:c6:39:32:4d:5f:c5:49:88:79:ea:2a:d0:cd:41:c9:06:9d: ab:89:15:09:18:8d:c8:cc:ab:6a:de:47:8d:cd:bf:d5:9c:f3: 3c:6b:0c:98:0a:ed:45:d2:6a:3e:7c:73:ad:8a:ba:d7:c5:bc: 6f:db:f7:67:b7:bf:a8:65:99:45:34:8b:d8:57:2c:e8:1b:56: d4:e5:14:e9:13:20:74:dc:0b:8a:0b:b9:68:6f:01:a6:6d:74: 69:0d:98:cb:5c:1a:d9:2f:98:ca:7b:c6:1a:57:86:c8:22:03: 8e:c5:8d:6d:26:65:ce:a7:ba:a9:ba:23:db:32:67:b7:df:d7: 5b:12:8f:0e:5f:97:47:8f:c1:0b:0c:8c:7b:00:a7:33:c4:2d: 6d:c9:60:d0:6e:c8:ee:8f:65:b3:76:b3:01:89:fd:9f:b4:bb: 45:10:6f:1d:e4:f4:b6:38:79:ff:a3:f4:64:00:ac:ff:f6:dd: 4b:67:26:67:be:fd:2e:5c:e9:22:7f:ea:5d:0f:8e:84:4f:0f: f1:b6:15:d7:25:6b:1b:4a:bb:fa:5d:83:b2:10:eb:25:1d:ee: e9:6d:a1:c0:00:12:0c:70:a2:26:45:cd:1c:68:0e:59:c0:5f: 18:77:68:cc:74:7f:98:81:cb:f3:da:67:f7:55:6f:01:e9:4a: 32:f9:44:bc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrydklYTpALuKCYEOycsD8CMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBhMzBiNjM1ZDM1NzQ2OGQ3ZjkzMmQzZTFmNTlkNTM3M2Nm OWY0NjUwHhcNMjUxMjA2MDcwMDI5WhcNMjUxMjA3MDcwMDI5WjAzMTEwLwYDVQQD EygwOGU2ODEwYmVjNWRmMDkyMTc0NTYxY2FkMjYyNGY1NTAxOGI2N2JkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx0B9LFyyhzNQBuvVqQvvl9IpFfYt x2R0rdWYvSc9MvuC8KHzWttK/hU+1yiaO21GVxlBAPF1ocQxNdvGXjl/7uZ40JEQ 3WuGEEj6b9q49+VRJVgumdI9UcAveQ6iTD8mk1XPcsrVXVq2FtcMUIjjZZGR3gmN m0cK1ye0vzGhzhpEs8N27Drs/XiT+ijxrVlA+j1mw0LVOfh+0sGsAVYd64I3zTJl jvDWYLKcO1bFSotcQLJUI73pNoNmbY9JLL0F5taVDUaE7e19mw/mvPnFqTfjgFBv ThlQi3NDnxDLHvYKX3TZ73GXCWb1aTdEaGevm30PeDe0zrlxw4Fm8GnT8QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAjmgQvsXfCSF0VhytJiT1UBi2e9MB8GA1UdIwQY MBaAFAowtjXTV0aNf5MtPh9Z1Tc8+fRlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ2pDMk5kTlhSbzFfa3kwLUgxblZOeno1OUdVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NS8xNzg1ZjEtYWUyMy00MGYwLTgzZjIt NmRlZjM5OGNlNWM5LzEvQ2pDMk5kTlhSbzFfa3kwLUgxblZOeno1OUdVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83NS8xNzg1ZjEtYWUyMy00MGYwLTgzZjItNmRlZjM5OGNlNWM5 LzEvQ2pDMk5kTlhSbzFfa3kwLUgxblZOeno1OUdVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXMY5Mk1f xUmIeeoq0M1ByQadq4kVCRiNyMyrat5Hjc2/1ZzzPGsMmArtRdJqPnxzrYq618W8 b9v3Z7e/qGWZRTSL2Fcs6BtW1OUU6RMgdNwLigu5aG8Bpm10aQ2Yy1wa2S+YynvG GleGyCIDjsWNbSZlzqe6qboj2zJnt9/XWxKPDl+XR4/BCwyMewCnM8Qtbclg0G7I 7o9ls3azAYn9n7S7RRBvHeT0tjh5/6P0ZACs//bdS2cmZ779LlzpIn/qXQ+OhE8P 8bYV1yVrG0q7+l2DshDrJR3u6W2hwAASDHCiJkXNHGgOWcBfGHdozHR/mIHL89pn 91VvAelKMvlEvA== -----END CERTIFICATE-----Generated at Sat Dec 6 09:30:53 2025 by rpki-client