This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/b1083d-c078-415e-8d9d-576337e50dc4/1/cPTWBuHReQgGOXe2mHdoLtfi0e8.mft File: cPTWBuHReQgGOXe2mHdoLtfi0e8.mft (raw, json) Hash identifier: 7Rgy6cmAuxtLkY/hseQ8aRRdSAJSbM5bHXE0gkhHl8I= Subject key identifier: 41:09:05:74:5B:54:B6:28:43:F7:CF:51:F5:43:D4:2D:83:B8:1D:31 Authority key identifier: 70:F4:D6:06:E1:D1:79:08:06:39:77:B6:98:77:68:2E:D7:E2:D1:EF Certificate issuer: /CN=70f4d606e1d17908063977b69877682ed7e2d1ef Certificate serial: 019AF20923985E562E9F94F85EB39C327DBC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cPTWBuHReQgGOXe2mHdoLtfi0e8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/b1083d-c078-415e-8d9d-576337e50dc4/1/cPTWBuHReQgGOXe2mHdoLtfi0e8.mft Manifest number: 045A Signing time: Sat 06 Dec 2025 05:01:16 +0000 Manifest this update: Sat 06 Dec 2025 05:01:16 +0000 Manifest next update: Sun 07 Dec 2025 05:01:16 +0000 Files and hashes: 1: Ou9DEYWo3su4Hpz7mWRAUY0_xHI.roa (hash: 8FTp4AmQ8yrNnOSj2Y/1nrH6lz6jMuxxvh24QGuNmXY=) 2: cPTWBuHReQgGOXe2mHdoLtfi0e8.crl (hash: atdyxhGzw5giugDj3fB9U1aDFMMjTF7+lwwGyXgpT4k=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/b1083d-c078-415e-8d9d-576337e50dc4/1/cPTWBuHReQgGOXe2mHdoLtfi0e8.crl rsync://rpki.ripe.net/repository/DEFAULT/c8/b1083d-c078-415e-8d9d-576337e50dc4/1/cPTWBuHReQgGOXe2mHdoLtfi0e8.mft rsync://rpki.ripe.net/repository/DEFAULT/cPTWBuHReQgGOXe2mHdoLtfi0e8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:09:23:98:5e:56:2e:9f:94:f8:5e:b3:9c:32:7d:bc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=70f4d606e1d17908063977b69877682ed7e2d1ef Validity Not Before: Dec 6 05:01:16 2025 GMT Not After : Dec 7 05:01:16 2025 GMT Subject: CN=410905745b54b62843f7cf51f543d42d83b81d31 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:72:94:fa:aa:57:58:da:61:cf:de:19:19:87: 81:1b:92:1e:bc:84:82:f8:e9:30:35:45:ff:97:3f: dc:9c:80:0e:37:23:12:80:70:ee:c0:15:98:ca:a7: a0:ff:bc:d1:4e:58:bd:b4:60:91:84:8f:e5:f5:e7: cf:08:47:6a:22:5b:8c:5d:0b:62:08:e7:b4:ec:54: 5c:dd:86:72:9a:c0:15:82:1a:57:51:42:3c:1c:d5: 9e:4b:91:2a:da:3d:41:86:e0:68:b0:b2:b5:14:d8: 69:f0:be:ea:63:6c:24:2e:63:8a:68:b4:29:f7:f6: 85:1e:7c:94:c9:19:32:61:7c:b4:7c:f9:68:ee:bb: 8f:d2:b6:8b:3e:57:34:9e:4f:d8:20:17:3e:37:77: dd:04:00:cf:13:2f:d5:14:11:89:5f:ac:63:4f:30: b7:37:42:61:66:bf:d6:ba:36:ed:83:0a:4b:a7:bd: 4e:30:21:ef:f2:b3:a1:de:55:60:b4:6e:36:f3:3f: bb:42:0d:f3:d5:d5:23:9a:5d:93:35:61:fb:80:b6: 04:55:aa:f4:37:bf:8f:08:6c:b5:56:79:c1:67:b3: a8:93:39:17:59:a8:16:a0:d7:e6:56:78:23:47:0c: bc:aa:56:39:40:b1:3e:01:3b:ca:8a:22:77:e6:49: e2:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:09:05:74:5B:54:B6:28:43:F7:CF:51:F5:43:D4:2D:83:B8:1D:31 X509v3 Authority Key Identifier: keyid:70:F4:D6:06:E1:D1:79:08:06:39:77:B6:98:77:68:2E:D7:E2:D1:EF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cPTWBuHReQgGOXe2mHdoLtfi0e8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/b1083d-c078-415e-8d9d-576337e50dc4/1/cPTWBuHReQgGOXe2mHdoLtfi0e8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/b1083d-c078-415e-8d9d-576337e50dc4/1/cPTWBuHReQgGOXe2mHdoLtfi0e8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1c:a6:31:68:e8:e6:4b:05:a5:69:fa:3a:8f:27:de:18:f7:05: 79:eb:35:ca:1d:1f:a2:9e:5a:9a:de:d8:1d:ec:ca:77:4f:5f: 9b:6a:99:94:21:2a:a6:0e:62:cb:f9:8a:12:56:4d:c7:e4:78: 63:d2:c7:36:5a:e2:fd:0b:8c:49:c0:d5:c1:c7:ff:89:30:7d: bd:85:91:40:b4:48:22:67:ae:ab:d3:a4:4e:69:18:c6:9c:8a: fa:76:99:d0:e8:a8:11:e4:40:c0:62:7e:dd:a1:93:72:8e:78: 49:e3:ab:9f:f8:48:6a:e8:ff:c9:9c:7a:90:1e:05:38:57:f3: 8f:23:28:2e:c2:dc:37:29:65:4c:43:21:de:09:78:cc:48:32: aa:e5:e2:55:93:a3:a0:57:8d:90:28:4a:d1:42:ae:9b:1f:38: 52:79:63:17:9a:29:27:fc:e5:c3:d8:a9:f5:c8:75:1b:05:a3: 72:bb:84:8f:7d:68:89:39:a3:0d:5b:33:74:8e:81:53:02:49: a2:fa:7a:16:99:05:ce:95:cf:c3:25:11:d8:f0:26:a3:77:43: ef:c3:58:58:e4:88:46:66:df:eb:01:ea:51:e4:f3:41:27:a8: 9d:4a:bb:e7:ee:da:71:45:6e:98:68:1d:17:4b:37:a9:35:cc: 74:e1:6a:4a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCSOYXlYun5T4XrOcMn28MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcwZjRkNjA2ZTFkMTc5MDgwNjM5NzdiNjk4Nzc2ODJlZDdl MmQxZWYwHhcNMjUxMjA2MDUwMTE2WhcNMjUxMjA3MDUwMTE2WjAzMTEwLwYDVQQD Eyg0MTA5MDU3NDViNTRiNjI4NDNmN2NmNTFmNTQzZDQyZDgzYjgxZDMxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuXKU+qpXWNphz94ZGYeBG5IevISC +OkwNUX/lz/cnIAONyMSgHDuwBWYyqeg/7zRTli9tGCRhI/l9efPCEdqIluMXQti COe07FRc3YZymsAVghpXUUI8HNWeS5Eq2j1BhuBosLK1FNhp8L7qY2wkLmOKaLQp 9/aFHnyUyRkyYXy0fPlo7ruP0raLPlc0nk/YIBc+N3fdBADPEy/VFBGJX6xjTzC3 N0JhZr/WujbtgwpLp71OMCHv8rOh3lVgtG428z+7Qg3z1dUjml2TNWH7gLYEVar0 N7+PCGy1VnnBZ7OokzkXWagWoNfmVngjRwy8qlY5QLE+ATvKiiJ35kniVwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEEJBXRbVLYoQ/fPUfVD1C2DuB0xMB8GA1UdIwQY MBaAFHD01gbh0XkIBjl3tph3aC7X4tHvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY1BUV0J1SFJlUWdHT1hlMm1IZG9MdGZpMGU4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9iMTA4M2QtYzA3OC00MTVlLThkOWQt NTc2MzM3ZTUwZGM0LzEvY1BUV0J1SFJlUWdHT1hlMm1IZG9MdGZpMGU4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOC9iMTA4M2QtYzA3OC00MTVlLThkOWQtNTc2MzM3ZTUwZGM0 LzEvY1BUV0J1SFJlUWdHT1hlMm1IZG9MdGZpMGU4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHKYxaOjm SwWlafo6jyfeGPcFees1yh0fop5amt7YHezKd09fm2qZlCEqpg5iy/mKElZNx+R4 Y9LHNlri/QuMScDVwcf/iTB9vYWRQLRIImeuq9OkTmkYxpyK+naZ0OioEeRAwGJ+ 3aGTco54SeOrn/hIauj/yZx6kB4FOFfzjyMoLsLcNyllTEMh3gl4zEgyquXiVZOj oFeNkChK0UKumx84UnljF5opJ/zlw9ip9ch1GwWjcruEj31oiTmjDVszdI6BUwJJ ovp6FpkFzpXPwyUR2PAmo3dD78NYWOSIRmbf6wHqUeTzQSeonUq75+7acUVumGgd F0s3qTXMdOFqSg== -----END CERTIFICATE-----Generated at Sat Dec 6 09:21:46 2025 by rpki-client