This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/a9091f-27a2-42a3-952b-9ed1804f3282/1/ctjb6kAj1p9H-JvSCC__skZt0qU.mft File: ctjb6kAj1p9H-JvSCC__skZt0qU.mft (raw, json) Hash identifier: aTor/hbsC3PGKc0Sz9jwbbMMroxfZ5AUU1QqPGc8NW8= Subject key identifier: 97:EB:FD:EE:D8:F7:32:53:86:94:6A:A7:9A:0F:99:56:37:02:34:61 Authority key identifier: 72:D8:DB:EA:40:23:D6:9F:47:F8:9B:D2:08:2F:FF:B2:46:6D:D2:A5 Certificate issuer: /CN=72d8dbea4023d69f47f89bd2082fffb2466dd2a5 Certificate serial: 019B35A0DF9EA8732477F6506739F7018180 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ctjb6kAj1p9H-JvSCC__skZt0qU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/a9091f-27a2-42a3-952b-9ed1804f3282/1/ctjb6kAj1p9H-JvSCC__skZt0qU.mft Manifest number: 0943 Signing time: Fri 19 Dec 2025 08:01:33 +0000 Manifest this update: Fri 19 Dec 2025 08:01:33 +0000 Manifest next update: Sat 20 Dec 2025 08:01:33 +0000 Files and hashes: 1: Egv_COpkQ4qE0m0lj_BQmNwIMRA.roa (hash: 7o6c3PTeF8AIq/25Q6USnosQEeLS7MscdEHZbwRxm6I=) 2: ctjb6kAj1p9H-JvSCC__skZt0qU.crl (hash: xkiwYAfLIyUkWYOQQIqlKGotOFWq0sjiEMUm55ndhXA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/a9091f-27a2-42a3-952b-9ed1804f3282/1/ctjb6kAj1p9H-JvSCC__skZt0qU.crl rsync://rpki.ripe.net/repository/DEFAULT/95/a9091f-27a2-42a3-952b-9ed1804f3282/1/ctjb6kAj1p9H-JvSCC__skZt0qU.mft rsync://rpki.ripe.net/repository/DEFAULT/ctjb6kAj1p9H-JvSCC__skZt0qU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 07:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:35:a0:df:9e:a8:73:24:77:f6:50:67:39:f7:01:81:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=72d8dbea4023d69f47f89bd2082fffb2466dd2a5 Validity Not Before: Dec 19 08:01:33 2025 GMT Not After : Dec 20 08:01:33 2025 GMT Subject: CN=97ebfdeed8f7325386946aa79a0f995637023461 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:1d:16:df:5c:81:c3:b5:40:78:84:79:a9:ee: 96:41:4b:33:ce:d3:7d:05:e9:5f:95:78:68:8a:58: 49:1e:97:80:5d:bb:5e:d6:0e:6e:f6:0b:be:2c:b4: 82:f1:28:fa:4b:64:d7:da:e6:94:07:f8:d2:00:02: 83:2e:6d:93:41:4b:d6:b0:60:f4:72:d2:93:a2:6d: dc:3d:f4:a3:24:ce:43:c7:22:6a:b3:e1:50:56:a6: 1f:34:44:40:67:f3:ba:12:9b:87:96:ba:aa:17:05: 2c:62:15:d1:38:b9:34:31:30:77:e9:8f:4b:36:94: f2:f8:9d:9c:d6:19:ae:60:d8:ab:82:a1:ce:c6:80: 01:3d:a5:51:71:2f:71:b2:ef:10:d0:13:c5:4e:eb: 06:23:63:a0:29:42:15:aa:ce:58:14:35:1d:be:1e: 4d:b9:51:85:5d:7d:23:ef:3c:a5:20:e1:1e:0f:6f: e7:8a:5a:e1:30:17:76:30:63:42:31:3f:7e:ee:69: e8:99:6a:5b:cf:ae:2d:77:bb:67:6c:6b:30:cb:5a: e7:14:8b:71:d1:0e:3d:0c:0e:26:14:2d:97:e6:4f: 12:d8:91:b5:4b:fb:7f:eb:4e:7c:4c:26:6f:99:9a: 70:c1:5b:99:5d:f2:1b:93:25:12:d4:d3:eb:ce:6a: c1:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:EB:FD:EE:D8:F7:32:53:86:94:6A:A7:9A:0F:99:56:37:02:34:61 X509v3 Authority Key Identifier: keyid:72:D8:DB:EA:40:23:D6:9F:47:F8:9B:D2:08:2F:FF:B2:46:6D:D2:A5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ctjb6kAj1p9H-JvSCC__skZt0qU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/a9091f-27a2-42a3-952b-9ed1804f3282/1/ctjb6kAj1p9H-JvSCC__skZt0qU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/95/a9091f-27a2-42a3-952b-9ed1804f3282/1/ctjb6kAj1p9H-JvSCC__skZt0qU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ce:98:c6:95:3c:09:0e:ad:09:fb:8f:74:99:9b:29:ef:93:10: 5a:78:ac:c1:32:59:1b:05:3b:3d:b9:fd:d4:d2:c2:bb:71:99: 16:1b:61:6b:fe:fe:49:b4:f6:2f:d2:af:4a:a8:cf:fb:69:e7: 84:ff:24:b7:14:f0:30:4f:68:e3:b6:09:f2:af:41:78:5c:2e: 2b:71:ac:cb:15:90:3b:ef:c6:5d:f4:5d:18:2f:02:13:fa:de: 94:b1:32:2f:db:d7:50:fb:fe:ed:cf:8f:85:7f:1e:8d:60:dc: bf:d5:f0:9c:fe:2a:9e:2e:f5:86:2d:fc:65:74:d7:7e:cf:be: f3:de:9c:a9:15:0e:8b:a7:83:d1:5e:83:47:e0:3f:76:d6:65: d3:8a:84:ed:a3:28:58:fb:13:ba:04:e1:19:d4:a4:8e:b7:3a: ff:80:84:12:16:5c:97:31:bd:e3:ec:e6:14:5a:da:dd:ce:aa: 59:af:25:c9:f9:7a:ca:99:c2:58:6b:24:ed:28:aa:36:6e:e1: c7:db:fb:ff:e5:49:62:e8:ac:4a:28:01:28:fe:7c:5f:f8:a1: 6f:ef:f2:78:42:3e:0e:a1:6c:40:5b:48:bf:3f:4b:01:ee:c4: 0a:32:56:2a:10:a3:54:62:7b:85:68:f0:db:51:83:f0:c4:af: 88:f5:cf:34 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs1oN+eqHMkd/ZQZzn3AYGAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcyZDhkYmVhNDAyM2Q2OWY0N2Y4OWJkMjA4MmZmZmIyNDY2 ZGQyYTUwHhcNMjUxMjE5MDgwMTMzWhcNMjUxMjIwMDgwMTMzWjAzMTEwLwYDVQQD Eyg5N2ViZmRlZWQ4ZjczMjUzODY5NDZhYTc5YTBmOTk1NjM3MDIzNDYxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzx0W31yBw7VAeIR5qe6WQUszztN9 BelflXhoilhJHpeAXbte1g5u9gu+LLSC8Sj6S2TX2uaUB/jSAAKDLm2TQUvWsGD0 ctKTom3cPfSjJM5DxyJqs+FQVqYfNERAZ/O6EpuHlrqqFwUsYhXROLk0MTB36Y9L NpTy+J2c1hmuYNirgqHOxoABPaVRcS9xsu8Q0BPFTusGI2OgKUIVqs5YFDUdvh5N uVGFXX0j7zylIOEeD2/nilrhMBd2MGNCMT9+7mnomWpbz64td7tnbGswy1rnFItx 0Q49DA4mFC2X5k8S2JG1S/t/6058TCZvmZpwwVuZXfIbkyUS1NPrzmrBMwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJfr/e7Y9zJThpRqp5oPmVY3AjRhMB8GA1UdIwQY MBaAFHLY2+pAI9afR/ib0ggv/7JGbdKlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY3RqYjZrQWoxcDlILUp2U0NDX19za1p0MHFVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NS9hOTA5MWYtMjdhMi00MmEzLTk1MmIt OWVkMTgwNGYzMjgyLzEvY3RqYjZrQWoxcDlILUp2U0NDX19za1p0MHFVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85NS9hOTA5MWYtMjdhMi00MmEzLTk1MmItOWVkMTgwNGYzMjgy LzEvY3RqYjZrQWoxcDlILUp2U0NDX19za1p0MHFVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAzpjGlTwJ Dq0J+490mZsp75MQWniswTJZGwU7Pbn91NLCu3GZFhtha/7+SbT2L9KvSqjP+2nn hP8ktxTwME9o47YJ8q9BeFwuK3GsyxWQO+/GXfRdGC8CE/relLEyL9vXUPv+7c+P hX8ejWDcv9XwnP4qni71hi38ZXTXfs++896cqRUOi6eD0V6DR+A/dtZl04qE7aMo WPsTugThGdSkjrc6/4CEEhZclzG94+zmFFra3c6qWa8lyfl6ypnCWGsk7SiqNm7h x9v7/+VJYuisSigBKP58X/ihb+/yeEI+DqFsQFtIvz9LAe7ECjJWKhCjVGJ7hWjw 21GD8MSviPXPNA== -----END CERTIFICATE-----Generated at Fri Dec 19 13:41:08 2025 by rpki-client