This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/03e4f7-10f3-4114-a1e5-3502658ae6f5/1/_-cGk0VLwzSF3sadIZ0FAmVKwEo.mft File: _-cGk0VLwzSF3sadIZ0FAmVKwEo.mft (raw, json) Hash identifier: tAN2gY4vNdHzhTyyiPqJ1sFJKz40S3oWeGm7kuwTZro= Subject key identifier: 80:EE:B9:2E:0B:96:6D:BC:E7:DF:13:30:63:5B:85:B2:BD:1C:1B:9E Authority key identifier: FF:E7:06:93:45:4B:C3:34:85:DE:C6:9D:21:9D:05:02:65:4A:C0:4A Certificate issuer: /CN=ffe70693454bc33485dec69d219d0502654ac04a Certificate serial: 019B31FA9FDD57FADEFB32A2DFCE612E740C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_-cGk0VLwzSF3sadIZ0FAmVKwEo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/03e4f7-10f3-4114-a1e5-3502658ae6f5/1/_-cGk0VLwzSF3sadIZ0FAmVKwEo.mft Manifest number: 1216 Signing time: Thu 18 Dec 2025 15:01:06 +0000 Manifest this update: Thu 18 Dec 2025 15:01:06 +0000 Manifest next update: Fri 19 Dec 2025 15:01:06 +0000 Files and hashes: 1: OnTLDt3Nc2PgiE0wfBx1gh_wnCQ.roa (hash: P3A8SEYJNBvqfSywrf4GPl+VIksmqFOkn5T1DwyuNHI=) 2: _-cGk0VLwzSF3sadIZ0FAmVKwEo.crl (hash: 97u95TqKEIvcFbkhaYnaGgqrEABjva9375dXF/PjX9E=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9d/03e4f7-10f3-4114-a1e5-3502658ae6f5/1/_-cGk0VLwzSF3sadIZ0FAmVKwEo.crl rsync://rpki.ripe.net/repository/DEFAULT/9d/03e4f7-10f3-4114-a1e5-3502658ae6f5/1/_-cGk0VLwzSF3sadIZ0FAmVKwEo.mft rsync://rpki.ripe.net/repository/DEFAULT/_-cGk0VLwzSF3sadIZ0FAmVKwEo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 13:00:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:31:fa:9f:dd:57:fa:de:fb:32:a2:df:ce:61:2e:74:0c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ffe70693454bc33485dec69d219d0502654ac04a Validity Not Before: Dec 18 15:01:06 2025 GMT Not After : Dec 19 15:01:06 2025 GMT Subject: CN=80eeb92e0b966dbce7df1330635b85b2bd1c1b9e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:1c:4a:e2:17:f1:bf:94:fd:d7:e2:d9:12:f0: af:fe:b7:ff:8d:2c:06:5b:dd:37:02:28:fe:b0:24: c8:12:7c:9d:de:8e:01:2c:06:73:47:9a:13:58:e2: f6:fa:b0:d4:68:d7:e5:dc:c4:6b:a9:6f:43:91:c4: e9:4b:c3:30:f0:78:d8:88:05:a9:85:0e:51:6a:2d: c5:ce:d4:d7:cd:23:f9:0e:f7:30:e8:6c:77:9b:91: 26:9b:ac:eb:e4:79:a8:c4:e8:98:3b:50:dc:27:0b: ab:df:97:88:2b:f3:f9:56:37:fd:16:0a:a0:ee:54: 68:34:c3:44:03:c2:e9:7d:8a:d0:3c:1b:85:1a:19: 8b:02:33:bf:6f:3a:89:8e:f8:20:43:08:4e:0a:ef: 5d:b5:3c:41:51:51:da:f9:ec:ac:ba:40:23:61:80: 6b:60:2a:4f:fd:37:b2:81:53:7f:d3:1b:ca:3a:56: a0:0e:96:36:f1:d7:f3:60:da:fc:46:4a:8c:6f:cd: d1:19:ee:c1:d2:96:1f:54:e6:9f:7a:02:1c:9b:93: 49:25:cd:65:45:d7:86:7a:0f:6b:4f:a4:d2:66:e7: 04:0a:48:33:6b:fd:46:2e:08:34:99:ff:f7:44:ee: 5a:8a:c4:5a:59:0e:69:4b:78:74:9c:2f:0c:57:c5: 16:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:EE:B9:2E:0B:96:6D:BC:E7:DF:13:30:63:5B:85:B2:BD:1C:1B:9E X509v3 Authority Key Identifier: keyid:FF:E7:06:93:45:4B:C3:34:85:DE:C6:9D:21:9D:05:02:65:4A:C0:4A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_-cGk0VLwzSF3sadIZ0FAmVKwEo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/03e4f7-10f3-4114-a1e5-3502658ae6f5/1/_-cGk0VLwzSF3sadIZ0FAmVKwEo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/03e4f7-10f3-4114-a1e5-3502658ae6f5/1/_-cGk0VLwzSF3sadIZ0FAmVKwEo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 81:72:bf:54:bf:48:f4:ba:44:f8:29:f8:52:a6:97:1f:3d:49: 5d:d6:70:3a:28:1d:be:a1:87:c1:3d:e6:8f:9b:76:3c:f1:48: b8:cd:93:e7:46:b7:c7:c3:64:2d:95:c4:69:3b:7d:7e:d1:7e: 42:69:d5:cb:33:f3:cc:62:32:57:4b:70:f3:1f:af:6d:02:12: eb:2e:c2:88:01:e4:1f:a2:9e:64:3e:b8:69:03:a2:db:10:6b: ef:7e:b7:42:df:db:3e:4f:0a:46:41:bc:5c:b5:d4:44:fb:04: 6a:ac:d7:26:7c:ee:b5:79:3d:86:a5:27:57:8b:01:1a:d9:10: 2f:f1:07:bc:f5:43:88:ef:55:f5:5a:04:0d:a8:2e:4e:6f:5e: 46:1b:f4:a2:f7:e6:e7:0e:ea:35:7f:dc:9e:fc:fc:37:0e:85: 6d:50:da:ea:02:54:d2:1f:59:f0:a8:12:68:0a:fa:f7:6e:89: fd:53:af:2d:77:d2:43:7a:02:1f:89:d8:af:4c:c5:e0:f6:eb: f6:04:5f:c3:2c:57:72:5f:1e:88:95:2b:20:ba:92:1a:fc:43: 3c:e1:8b:ff:ce:4d:92:ee:27:ae:4d:d0:7e:f2:cb:0e:34:e1: 03:99:f6:9a:60:e5:b4:21:6d:2e:8f:72:de:9d:e4:7f:5e:26: ac:0c:3c:f3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsx+p/dV/re+zKi385hLnQMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZmZTcwNjkzNDU0YmMzMzQ4NWRlYzY5ZDIxOWQwNTAyNjU0 YWMwNGEwHhcNMjUxMjE4MTUwMTA2WhcNMjUxMjE5MTUwMTA2WjAzMTEwLwYDVQQD Eyg4MGVlYjkyZTBiOTY2ZGJjZTdkZjEzMzA2MzViODViMmJkMWMxYjllMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwhxK4hfxv5T91+LZEvCv/rf/jSwG W903Aij+sCTIEnyd3o4BLAZzR5oTWOL2+rDUaNfl3MRrqW9DkcTpS8Mw8HjYiAWp hQ5Rai3FztTXzSP5Dvcw6Gx3m5Emm6zr5HmoxOiYO1DcJwur35eIK/P5Vjf9Fgqg 7lRoNMNEA8LpfYrQPBuFGhmLAjO/bzqJjvggQwhOCu9dtTxBUVHa+eysukAjYYBr YCpP/TeygVN/0xvKOlagDpY28dfzYNr8RkqMb83RGe7B0pYfVOafegIcm5NJJc1l RdeGeg9rT6TSZucECkgza/1GLgg0mf/3RO5aisRaWQ5pS3h0nC8MV8UW8wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIDuuS4Llm28598TMGNbhbK9HBueMB8GA1UdIwQY MBaAFP/nBpNFS8M0hd7GnSGdBQJlSsBKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvXy1jR2swVkx3elNGM3NhZElaMEZBbVZLd0VvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZC8wM2U0ZjctMTBmMy00MTE0LWExZTUt MzUwMjY1OGFlNmY1LzEvXy1jR2swVkx3elNGM3NhZElaMEZBbVZLd0VvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85ZC8wM2U0ZjctMTBmMy00MTE0LWExZTUtMzUwMjY1OGFlNmY1 LzEvXy1jR2swVkx3elNGM3NhZElaMEZBbVZLd0VvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgXK/VL9I 9LpE+Cn4UqaXHz1JXdZwOigdvqGHwT3mj5t2PPFIuM2T50a3x8NkLZXEaTt9ftF+ QmnVyzPzzGIyV0tw8x+vbQIS6y7CiAHkH6KeZD64aQOi2xBr7363Qt/bPk8KRkG8 XLXURPsEaqzXJnzutXk9hqUnV4sBGtkQL/EHvPVDiO9V9VoEDaguTm9eRhv0ovfm 5w7qNX/cnvz8Nw6FbVDa6gJU0h9Z8KgSaAr6926J/VOvLXfSQ3oCH4nYr0zF4Pbr 9gRfwyxXcl8eiJUrILqSGvxDPOGL/85Nku4nrk3QfvLLDjThA5n2mmDltCFtLo9y 3p3kf14mrAw88w== -----END CERTIFICATE-----Generated at Thu Dec 18 18:47:05 2025 by rpki-client