This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/ddf529-1536-44f0-9eda-4dad48a16e42/1/cBXtJ1AFQI0qhqIwNwF0RDDto0o.mft File: cBXtJ1AFQI0qhqIwNwF0RDDto0o.mft (raw, json) Hash identifier: GG1avdecEzPtBNxD9SjoqnJ9Gsdbxwmzemmar08Ah94= Subject key identifier: 90:2A:6A:60:A6:81:C9:31:A8:6F:A6:CB:79:9C:E6:E4:2C:CD:C3:52 Authority key identifier: 70:15:ED:27:50:05:40:8D:2A:86:A2:30:37:01:74:44:30:ED:A3:4A Certificate issuer: /CN=7015ed275005408d2a86a2303701744430eda34a Certificate serial: 019AF46588BDFDCC6FAE93CCF2A5981ED6F0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cBXtJ1AFQI0qhqIwNwF0RDDto0o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/ddf529-1536-44f0-9eda-4dad48a16e42/1/cBXtJ1AFQI0qhqIwNwF0RDDto0o.mft Manifest number: 147B Signing time: Sat 06 Dec 2025 16:01:25 +0000 Manifest this update: Sat 06 Dec 2025 16:01:25 +0000 Manifest next update: Sun 07 Dec 2025 16:01:25 +0000 Files and hashes: 1: HSf-a0eTcicBmzn4zJZRWXp92WE.roa (hash: vvlQV7Jpi0XVGKQA4HOtArKcD3xjeMm171XNaqqkcT0=) 2: a5SThzVTiz_HAgBiI_2C-cBicRU.roa (hash: cXR8rbnSwDhsbHRTW7l3Pqi32yZZ/V3whRHlpIMP7KU=) 3: cBXtJ1AFQI0qhqIwNwF0RDDto0o.crl (hash: u9hO21uyEsAwZYWtPxSZLbibaaj3sOd2D0/9CEBFiDQ=) 4: e8yOi_zjBd2PptdyDsyc4j2wCEY.roa (hash: gTBImvzLksx7wicV0C8XssUh2BDoKizjYT0J7tkJ1HY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/ddf529-1536-44f0-9eda-4dad48a16e42/1/cBXtJ1AFQI0qhqIwNwF0RDDto0o.crl rsync://rpki.ripe.net/repository/DEFAULT/78/ddf529-1536-44f0-9eda-4dad48a16e42/1/cBXtJ1AFQI0qhqIwNwF0RDDto0o.mft rsync://rpki.ripe.net/repository/DEFAULT/cBXtJ1AFQI0qhqIwNwF0RDDto0o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 16:01:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:65:88:bd:fd:cc:6f:ae:93:cc:f2:a5:98:1e:d6:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7015ed275005408d2a86a2303701744430eda34a Validity Not Before: Dec 6 16:01:25 2025 GMT Not After : Dec 7 16:01:25 2025 GMT Subject: CN=902a6a60a681c931a86fa6cb799ce6e42ccdc352 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:06:1c:04:f8:83:7a:ce:27:13:79:84:89:fb: c4:2c:ee:25:5d:e4:d1:79:59:b7:8a:78:3b:79:f7: 72:4b:4d:43:ed:af:12:a6:07:3a:13:09:e4:22:c1: 1d:ca:f1:29:94:e1:8c:c0:bc:34:48:43:b1:1b:14: 7b:dd:91:64:fe:c9:84:8d:cb:14:90:96:a8:e2:e3: 5e:70:ae:23:af:2d:4e:bb:8e:03:d2:54:bb:01:72: 54:11:ec:40:41:39:a2:aa:09:c9:51:d9:89:b3:89: d4:c4:f0:07:f1:40:8a:37:39:a6:37:c2:2a:8b:ef: 6c:76:cf:bf:2c:54:b9:69:31:64:17:54:4d:f6:c6: 7e:27:53:4f:d8:3b:bb:9b:4b:05:04:3d:61:25:c6: d2:dc:65:7f:c7:a5:84:e2:61:0a:10:6a:a1:03:54: 1b:55:7b:8b:20:ce:9c:f9:d9:ed:48:91:b5:f9:ad: 90:ab:3e:43:ab:91:95:ff:9a:cb:b1:a7:d2:7b:88: 65:74:cc:6b:d8:3c:41:47:92:a4:f7:5d:57:52:29: 5e:be:41:5c:e8:94:7a:fd:0f:fb:4f:ee:15:94:e6: 54:22:32:05:63:11:5e:1d:18:53:3d:3d:98:de:49: c6:18:c2:48:ca:90:c5:79:76:ae:82:a3:79:cb:b5: 50:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:2A:6A:60:A6:81:C9:31:A8:6F:A6:CB:79:9C:E6:E4:2C:CD:C3:52 X509v3 Authority Key Identifier: keyid:70:15:ED:27:50:05:40:8D:2A:86:A2:30:37:01:74:44:30:ED:A3:4A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cBXtJ1AFQI0qhqIwNwF0RDDto0o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/ddf529-1536-44f0-9eda-4dad48a16e42/1/cBXtJ1AFQI0qhqIwNwF0RDDto0o.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/78/ddf529-1536-44f0-9eda-4dad48a16e42/1/cBXtJ1AFQI0qhqIwNwF0RDDto0o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bc:e9:89:53:99:cb:a3:2e:f2:89:96:a7:cc:c3:9a:d4:e5:5b: 9f:e0:16:6d:d2:2e:d2:41:5d:37:6d:cb:11:6d:09:da:e9:80: e2:5a:9e:cb:2e:2a:43:a1:47:74:f7:bc:36:d5:c0:38:34:a7: 3b:aa:b8:bd:2c:f7:7f:68:15:dd:6b:63:d3:8d:bd:48:f2:a6: bc:e2:33:dd:8c:fc:61:9e:b9:c1:81:44:89:87:be:f5:06:b2: 74:02:54:22:fc:ce:67:88:bf:04:38:00:58:87:99:d3:21:2f: f7:68:0a:66:72:da:ac:21:d7:16:63:57:a9:03:9c:5f:50:6e: 98:e4:ec:dc:f7:b5:b1:52:fd:f7:4c:81:b5:f6:d3:0d:d3:3b: e7:7b:e8:92:84:1c:ac:da:a3:9f:81:ee:88:94:51:86:c4:06: 61:96:0c:2f:69:15:c5:23:ab:37:e0:20:eb:3f:11:4a:5e:1d: cf:01:87:d7:f5:11:64:1a:33:90:7a:2b:09:19:8f:74:6f:c6: c8:38:c2:21:8a:fe:df:59:65:29:c3:d9:63:c3:08:f0:d2:51: 27:25:51:be:dc:9b:1b:72:0a:ad:5b:cd:80:ee:a9:7c:71:34: 65:97:d1:77:fd:7b:9f:13:55:35:44:b3:ca:ea:32:33:9b:26: 4a:ba:61:c4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr0ZYi9/cxvrpPM8qWYHtbwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcwMTVlZDI3NTAwNTQwOGQyYTg2YTIzMDM3MDE3NDQ0MzBl ZGEzNGEwHhcNMjUxMjA2MTYwMTI1WhcNMjUxMjA3MTYwMTI1WjAzMTEwLwYDVQQD Eyg5MDJhNmE2MGE2ODFjOTMxYTg2ZmE2Y2I3OTljZTZlNDJjY2RjMzUyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAywYcBPiDes4nE3mEifvELO4lXeTR eVm3ing7efdyS01D7a8Spgc6EwnkIsEdyvEplOGMwLw0SEOxGxR73ZFk/smEjcsU kJao4uNecK4jry1Ou44D0lS7AXJUEexAQTmiqgnJUdmJs4nUxPAH8UCKNzmmN8Iq i+9sds+/LFS5aTFkF1RN9sZ+J1NP2Du7m0sFBD1hJcbS3GV/x6WE4mEKEGqhA1Qb VXuLIM6c+dntSJG1+a2Qqz5Dq5GV/5rLsafSe4hldMxr2DxBR5Kk911XUilevkFc 6JR6/Q/7T+4VlOZUIjIFYxFeHRhTPT2Y3knGGMJIypDFeXaugqN5y7VQyQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJAqamCmgckxqG+my3mc5uQszcNSMB8GA1UdIwQY MBaAFHAV7SdQBUCNKoaiMDcBdEQw7aNKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY0JYdEoxQUZRSTBxaHFJd053RjBSRER0bzBvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OC9kZGY1MjktMTUzNi00NGYwLTllZGEt NGRhZDQ4YTE2ZTQyLzEvY0JYdEoxQUZRSTBxaHFJd053RjBSRER0bzBvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83OC9kZGY1MjktMTUzNi00NGYwLTllZGEtNGRhZDQ4YTE2ZTQy LzEvY0JYdEoxQUZRSTBxaHFJd053RjBSRER0bzBvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvOmJU5nL oy7yiZanzMOa1OVbn+AWbdIu0kFdN23LEW0J2umA4lqeyy4qQ6FHdPe8NtXAODSn O6q4vSz3f2gV3Wtj0429SPKmvOIz3Yz8YZ65wYFEiYe+9QaydAJUIvzOZ4i/BDgA WIeZ0yEv92gKZnLarCHXFmNXqQOcX1BumOTs3Pe1sVL990yBtfbTDdM753vokoQc rNqjn4HuiJRRhsQGYZYML2kVxSOrN+Ag6z8RSl4dzwGH1/URZBozkHorCRmPdG/G yDjCIYr+31llKcPZY8MI8NJRJyVRvtybG3IKrVvNgO6pfHE0ZZfRd/17nxNVNUSz yuoyM5smSrphxA== -----END CERTIFICATE-----Generated at Sun Dec 7 01:57:23 2025 by rpki-client