This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/d56c11-25e1-49c8-8863-7f37b778c011/1/cJgLYODTDkmN4bqmRaG-V6lSBJ0.mft File: cJgLYODTDkmN4bqmRaG-V6lSBJ0.mft (raw, json) Hash identifier: raKEuam+ORG63zZmomVIpyt3Cz7qfFh3U8c9dyMSRbw= Subject key identifier: 30:A8:1B:BB:F6:93:2D:F4:81:F4:D0:82:C3:C5:24:E6:68:77:94:4C Authority key identifier: 70:98:0B:60:E0:D3:0E:49:8D:E1:BA:A6:45:A1:BE:57:A9:52:04:9D Certificate issuer: /CN=70980b60e0d30e498de1baa645a1be57a952049d Certificate serial: 019AF12E484B09D4B7799C13F798BA45FADD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cJgLYODTDkmN4bqmRaG-V6lSBJ0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/d56c11-25e1-49c8-8863-7f37b778c011/1/cJgLYODTDkmN4bqmRaG-V6lSBJ0.mft Manifest number: 0AA4 Signing time: Sat 06 Dec 2025 01:02:13 +0000 Manifest this update: Sat 06 Dec 2025 01:02:13 +0000 Manifest next update: Sun 07 Dec 2025 01:02:13 +0000 Files and hashes: 1: NOXjVjJhFkrwhntmdhaI015mrJA.roa (hash: 0zhl6bNJIqtyw3r+CngdcF4zpHGL2Q4MHDezzg25GbA=) 2: T3NYMawRHngwhI3EFd9dMZQSV1E.roa (hash: f99KOEwXdj6H3ZJRNRBeTA3dMK19zszZZ6xzWHN3tPk=) 3: cJgLYODTDkmN4bqmRaG-V6lSBJ0.crl (hash: hyay1DkaSr2k3iwyo2FlkACGovsSBbCupvLNVCQZT6o=) 4: o1Invfm5a-IuNysIWHt4ChcWwgI.roa (hash: gMX4tPW+RL6Xt4ksxgpRLp72pxNXeej67eQtVQ5iB/g=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/d56c11-25e1-49c8-8863-7f37b778c011/1/cJgLYODTDkmN4bqmRaG-V6lSBJ0.crl rsync://rpki.ripe.net/repository/DEFAULT/b4/d56c11-25e1-49c8-8863-7f37b778c011/1/cJgLYODTDkmN4bqmRaG-V6lSBJ0.mft rsync://rpki.ripe.net/repository/DEFAULT/cJgLYODTDkmN4bqmRaG-V6lSBJ0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:02:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2e:48:4b:09:d4:b7:79:9c:13:f7:98:ba:45:fa:dd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=70980b60e0d30e498de1baa645a1be57a952049d Validity Not Before: Dec 6 01:02:13 2025 GMT Not After : Dec 7 01:02:13 2025 GMT Subject: CN=30a81bbbf6932df481f4d082c3c524e66877944c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:15:bf:f7:5f:25:d3:f5:79:2a:43:fd:4d:db: 5e:e0:8a:97:39:f0:34:10:31:e5:86:c3:d4:de:eb: ef:7d:f1:a8:2e:53:af:0c:e0:8d:bd:63:bd:2d:e2: fd:3f:eb:90:29:14:e0:d6:4c:f8:dd:31:ac:43:bc: 66:de:24:a6:97:00:9e:a7:86:38:ce:91:dc:34:2f: 8a:f1:b6:5b:8b:62:40:83:72:6d:3a:02:ca:ff:58: 8c:9b:d1:4a:9b:d8:48:e0:c3:ed:20:e9:42:46:bb: 24:ea:f2:19:4e:57:0d:6d:fa:a5:df:43:d6:d8:7c: 0b:3b:03:6d:cb:c1:ad:8a:c5:d4:e4:4f:0b:7e:53: d5:9f:7a:8a:1a:d3:91:86:16:53:b2:d8:fa:ca:84: 15:80:6f:35:88:20:31:7d:e8:21:41:72:a4:99:7c: 6d:9f:bd:b8:ee:8a:b2:9b:b0:f7:f6:6c:02:4b:bc: 0c:ad:33:da:54:a1:6c:ad:62:41:d2:61:74:d5:26: 9d:0f:f0:bd:b2:f6:3d:74:67:d3:d3:64:11:6d:97: 90:77:08:ef:ca:f3:f4:a4:ad:25:d5:d0:48:34:92: 3a:6f:fc:a2:e1:a4:4f:0f:dc:36:4d:b5:20:99:03: 0f:5b:f7:c9:6c:9e:ac:1e:fb:92:30:bb:36:02:98: 7a:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:A8:1B:BB:F6:93:2D:F4:81:F4:D0:82:C3:C5:24:E6:68:77:94:4C X509v3 Authority Key Identifier: keyid:70:98:0B:60:E0:D3:0E:49:8D:E1:BA:A6:45:A1:BE:57:A9:52:04:9D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cJgLYODTDkmN4bqmRaG-V6lSBJ0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/d56c11-25e1-49c8-8863-7f37b778c011/1/cJgLYODTDkmN4bqmRaG-V6lSBJ0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/d56c11-25e1-49c8-8863-7f37b778c011/1/cJgLYODTDkmN4bqmRaG-V6lSBJ0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1e:bc:97:9b:6c:ab:40:6e:d9:ec:62:21:99:b5:97:03:a1:f5: 0d:a5:48:ed:7d:dd:44:64:55:d5:5f:07:df:62:94:c7:f0:fd: 1f:04:13:08:07:e4:5c:8b:97:b4:b7:32:4e:9c:03:56:3b:a0: 2a:f8:8c:45:64:71:bf:e9:07:0e:21:c0:6b:86:3a:60:ce:93: 12:eb:42:d7:9a:f4:c3:b5:90:6a:69:6d:af:1b:3d:60:0a:88: 09:2a:d6:ef:b4:50:67:ea:ea:89:ce:05:ed:62:f5:86:9b:ca: 60:27:74:4f:dc:47:a4:3d:9b:c5:02:d3:dc:20:8c:80:20:da: 41:7a:95:cf:75:0c:ae:92:8f:02:c0:e3:7c:eb:de:d4:99:ea: 61:8a:9b:44:07:bd:85:af:6f:20:49:77:6c:e6:da:de:75:15: f1:c5:92:c2:f9:8c:a5:e7:19:7f:b5:57:67:42:ec:81:e7:38: 8e:af:bd:f4:84:75:5e:57:39:9c:62:fa:15:61:16:ea:e8:84: 52:62:5f:b2:2d:4d:7d:12:53:c0:54:0f:51:7a:6e:0b:ac:78: 27:48:c2:45:5c:2e:9d:b2:bb:85:95:9b:e4:7e:ec:a9:b5:cd: 7d:08:b0:35:ea:de:97:36:75:71:37:9c:04:40:f7:fc:b6:33: f0:15:f8:92 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLkhLCdS3eZwT95i6RfrdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcwOTgwYjYwZTBkMzBlNDk4ZGUxYmFhNjQ1YTFiZTU3YTk1 MjA0OWQwHhcNMjUxMjA2MDEwMjEzWhcNMjUxMjA3MDEwMjEzWjAzMTEwLwYDVQQD EygzMGE4MWJiYmY2OTMyZGY0ODFmNGQwODJjM2M1MjRlNjY4Nzc5NDRjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkxW/918l0/V5KkP9Tdte4IqXOfA0 EDHlhsPU3uvvffGoLlOvDOCNvWO9LeL9P+uQKRTg1kz43TGsQ7xm3iSmlwCep4Y4 zpHcNC+K8bZbi2JAg3JtOgLK/1iMm9FKm9hI4MPtIOlCRrsk6vIZTlcNbfql30PW 2HwLOwNty8GtisXU5E8LflPVn3qKGtORhhZTstj6yoQVgG81iCAxfeghQXKkmXxt n7247oqym7D39mwCS7wMrTPaVKFsrWJB0mF01SadD/C9svY9dGfT02QRbZeQdwjv yvP0pK0l1dBINJI6b/yi4aRPD9w2TbUgmQMPW/fJbJ6sHvuSMLs2Aph66QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDCoG7v2ky30gfTQgsPFJOZod5RMMB8GA1UdIwQY MBaAFHCYC2Dg0w5JjeG6pkWhvlepUgSdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY0pnTFlPRFREa21ONGJxbVJhRy1WNmxTQkowLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNC9kNTZjMTEtMjVlMS00OWM4LTg4NjMt N2YzN2I3NzhjMDExLzEvY0pnTFlPRFREa21ONGJxbVJhRy1WNmxTQkowLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNC9kNTZjMTEtMjVlMS00OWM4LTg4NjMtN2YzN2I3NzhjMDEx LzEvY0pnTFlPRFREa21ONGJxbVJhRy1WNmxTQkowLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHryXm2yr QG7Z7GIhmbWXA6H1DaVI7X3dRGRV1V8H32KUx/D9HwQTCAfkXIuXtLcyTpwDVjug KviMRWRxv+kHDiHAa4Y6YM6TEutC15r0w7WQamltrxs9YAqICSrW77RQZ+rqic4F 7WL1hpvKYCd0T9xHpD2bxQLT3CCMgCDaQXqVz3UMrpKPAsDjfOve1JnqYYqbRAe9 ha9vIEl3bOba3nUV8cWSwvmMpecZf7VXZ0Lsgec4jq+99IR1Xlc5nGL6FWEW6uiE UmJfsi1NfRJTwFQPUXpuC6x4J0jCRVwunbK7hZWb5H7sqbXNfQiwNerelzZ1cTec BED3/LYz8BX4kg== -----END CERTIFICATE-----Generated at Sat Dec 6 08:10:53 2025 by rpki-client