This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/c67522-71c5-4061-a18b-6933a90c53fa/1/cnadbkoPwsmAE7ci6yvrnm6HH8Y.mft File: cnadbkoPwsmAE7ci6yvrnm6HH8Y.mft (raw, json) Hash identifier: +u1AQYD8Ru7jw3oqlBzy0HdM8ZszrF9gxhHK6F25Jx0= Subject key identifier: A8:E8:3D:62:5D:1F:83:81:7A:B8:7C:C3:2D:22:4F:03:9C:62:AB:0A Authority key identifier: 72:76:9D:6E:4A:0F:C2:C9:80:13:B7:22:EB:2B:EB:9E:6E:87:1F:C6 Certificate issuer: /CN=72769d6e4a0fc2c98013b722eb2beb9e6e871fc6 Certificate serial: 019B364504FA30FE03F160B4903F56AC72FA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cnadbkoPwsmAE7ci6yvrnm6HH8Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/c67522-71c5-4061-a18b-6933a90c53fa/1/cnadbkoPwsmAE7ci6yvrnm6HH8Y.mft Manifest number: 178E Signing time: Fri 19 Dec 2025 11:00:51 +0000 Manifest this update: Fri 19 Dec 2025 11:00:51 +0000 Manifest next update: Sat 20 Dec 2025 11:00:51 +0000 Files and hashes: 1: M3fOEClsXKvLtAnTcn5Su0j9iMg.roa (hash: E6qGvNO+V5ltNH3cwyFEtJdp+n857np9BM5la+TV5nM=) 2: bkHUy_sgghNYVbWsbVxAbLGezkg.roa (hash: yMeTm4bL37IzjPkhConJ8z6pYcZ3+b2hJFSO0Nigh2w=) 3: cnadbkoPwsmAE7ci6yvrnm6HH8Y.crl (hash: SU9/DsrrhfUa+vVVbszj9cpgGwoK2xasTJza8bvc8Wk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/c67522-71c5-4061-a18b-6933a90c53fa/1/cnadbkoPwsmAE7ci6yvrnm6HH8Y.crl rsync://rpki.ripe.net/repository/DEFAULT/81/c67522-71c5-4061-a18b-6933a90c53fa/1/cnadbkoPwsmAE7ci6yvrnm6HH8Y.mft rsync://rpki.ripe.net/repository/DEFAULT/cnadbkoPwsmAE7ci6yvrnm6HH8Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 11:00:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:36:45:04:fa:30:fe:03:f1:60:b4:90:3f:56:ac:72:fa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=72769d6e4a0fc2c98013b722eb2beb9e6e871fc6 Validity Not Before: Dec 19 11:00:51 2025 GMT Not After : Dec 20 11:00:51 2025 GMT Subject: CN=a8e83d625d1f83817ab87cc32d224f039c62ab0a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:7a:4b:64:f7:ce:a7:a3:6c:c7:65:25:c9:6c: 3f:f6:2c:3d:cb:df:40:7c:15:26:af:3e:24:0e:20: 3b:1d:10:43:29:fa:b0:f7:6c:10:eb:f1:32:5f:50: 65:03:d6:8b:82:f0:9c:92:3b:d5:06:36:84:27:f1: 30:9f:f3:e2:96:20:92:ac:f6:12:14:16:8b:4c:ff: a2:33:f5:e3:79:bc:cb:1a:f5:d6:53:e2:25:f0:8d: 36:1b:a9:b6:d5:17:73:20:4e:ed:ab:61:ec:47:b1: 1b:ba:96:63:c0:1d:59:58:3f:0c:3a:14:38:0f:6c: 4a:ce:59:d6:3d:6a:29:c1:d3:29:f6:84:bd:3f:6a: 69:6f:70:33:5a:9f:be:2b:32:15:54:3c:13:bc:a0: 96:81:04:07:ca:9d:a7:ec:d0:d7:6d:a0:7b:d4:82: 95:b7:60:bd:1a:ca:ee:86:e1:b3:96:ed:c8:1a:cc: cb:36:f6:6c:92:03:24:6f:61:d2:32:ac:7a:89:ac: 44:07:83:15:0e:32:12:32:b4:0b:a2:30:f9:a1:c4: 3c:70:26:a3:3b:8f:e2:5b:cd:28:1f:96:a2:5d:3b: da:6f:a2:16:33:03:2e:07:6d:ee:97:9f:13:18:55: 69:d2:f2:b5:9d:bf:39:a0:59:fb:eb:0a:84:66:6e: 3a:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:E8:3D:62:5D:1F:83:81:7A:B8:7C:C3:2D:22:4F:03:9C:62:AB:0A X509v3 Authority Key Identifier: keyid:72:76:9D:6E:4A:0F:C2:C9:80:13:B7:22:EB:2B:EB:9E:6E:87:1F:C6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cnadbkoPwsmAE7ci6yvrnm6HH8Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/c67522-71c5-4061-a18b-6933a90c53fa/1/cnadbkoPwsmAE7ci6yvrnm6HH8Y.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/81/c67522-71c5-4061-a18b-6933a90c53fa/1/cnadbkoPwsmAE7ci6yvrnm6HH8Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4b:07:23:31:97:fe:9f:ea:ca:de:74:ff:59:b4:af:e8:58:8e: 5b:c8:7f:b7:91:4d:e3:6c:b7:99:50:a1:98:e0:8a:7e:1b:81: ee:f2:26:6f:5d:0d:c6:5c:f1:17:0b:bd:e2:5f:c2:63:d9:fd: 98:3f:02:e0:2f:cb:1a:2d:6f:b1:bd:de:17:09:d5:6e:2f:77: 1e:5a:92:e3:66:64:1b:bc:73:23:db:02:c8:18:04:50:1d:a8: a6:a9:71:f6:09:62:1c:ba:5b:28:a0:e0:b8:92:53:37:7e:71: 39:20:b6:af:42:46:98:29:55:cf:59:d1:73:96:83:76:94:7a: dc:81:e6:52:2c:d9:f7:5e:ac:e6:28:c1:eb:fb:d9:aa:d7:4f: e2:d4:79:0b:c8:b7:56:cb:0d:7c:78:a1:00:9f:40:80:20:89: 63:60:e6:c1:4f:19:10:ef:2d:cc:6c:45:fd:ea:6c:12:2a:d1: 5f:f1:f1:6a:ad:88:a7:bd:4b:cb:48:1a:98:5e:52:2e:db:f0: 7c:cf:67:c2:73:45:39:a8:23:3c:f1:04:b0:12:a2:23:1c:09: ca:58:db:65:df:55:51:c5:ee:06:b4:2f:f8:03:55:87:8c:da: 82:e7:9b:de:2e:45:cb:47:15:19:34:1f:3d:4f:fa:33:aa:b0: d1:58:a1:e1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs2RQT6MP4D8WC0kD9WrHL6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcyNzY5ZDZlNGEwZmMyYzk4MDEzYjcyMmViMmJlYjllNmU4 NzFmYzYwHhcNMjUxMjE5MTEwMDUxWhcNMjUxMjIwMTEwMDUxWjAzMTEwLwYDVQQD EyhhOGU4M2Q2MjVkMWY4MzgxN2FiODdjYzMyZDIyNGYwMzljNjJhYjBhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl3pLZPfOp6Nsx2UlyWw/9iw9y99A fBUmrz4kDiA7HRBDKfqw92wQ6/EyX1BlA9aLgvCckjvVBjaEJ/Ewn/PiliCSrPYS FBaLTP+iM/XjebzLGvXWU+Il8I02G6m21RdzIE7tq2HsR7EbupZjwB1ZWD8MOhQ4 D2xKzlnWPWopwdMp9oS9P2ppb3AzWp++KzIVVDwTvKCWgQQHyp2n7NDXbaB71IKV t2C9GsruhuGzlu3IGszLNvZskgMkb2HSMqx6iaxEB4MVDjISMrQLojD5ocQ8cCaj O4/iW80oH5aiXTvab6IWMwMuB23ul58TGFVp0vK1nb85oFn76wqEZm46ZQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKjoPWJdH4OBerh8wy0iTwOcYqsKMB8GA1UdIwQY MBaAFHJ2nW5KD8LJgBO3Iusr655uhx/GMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY25hZGJrb1B3c21BRTdjaTZ5dnJubTZISDhZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MS9jNjc1MjItNzFjNS00MDYxLWExOGIt NjkzM2E5MGM1M2ZhLzEvY25hZGJrb1B3c21BRTdjaTZ5dnJubTZISDhZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84MS9jNjc1MjItNzFjNS00MDYxLWExOGItNjkzM2E5MGM1M2Zh LzEvY25hZGJrb1B3c21BRTdjaTZ5dnJubTZISDhZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASwcjMZf+ n+rK3nT/WbSv6FiOW8h/t5FN42y3mVChmOCKfhuB7vImb10NxlzxFwu94l/CY9n9 mD8C4C/LGi1vsb3eFwnVbi93HlqS42ZkG7xzI9sCyBgEUB2opqlx9gliHLpbKKDg uJJTN35xOSC2r0JGmClVz1nRc5aDdpR63IHmUizZ916s5ijB6/vZqtdP4tR5C8i3 VssNfHihAJ9AgCCJY2DmwU8ZEO8tzGxF/epsEirRX/Hxaq2Ip71Ly0gamF5SLtvw fM9nwnNFOagjPPEEsBKiIxwJyljbZd9VUcXuBrQv+ANVh4zagueb3i5Fy0cVGTQf PU/6M6qw0Vih4Q== -----END CERTIFICATE-----Generated at Fri Dec 19 20:17:30 2025 by rpki-client