This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/d0abd0-b114-4e3a-ae59-e21763c672fa/1/cGdFrZI1PaioDLLg0inWjC71PbI.mft File: cGdFrZI1PaioDLLg0inWjC71PbI.mft (raw, json) Hash identifier: xSNpBBCLfP8JLx3AIyMWU+lSc5OdyRtcZZCuHGXkgOg= Subject key identifier: 31:AF:40:32:D1:78:69:A1:E3:21:9B:F3:D2:0D:6A:64:78:C2:9E:9B Authority key identifier: 70:67:45:AD:92:35:3D:A8:A8:0C:B2:E0:D2:29:D6:8C:2E:F5:3D:B2 Certificate issuer: /CN=706745ad92353da8a80cb2e0d229d68c2ef53db2 Certificate serial: 019AF0BF20923B50456596C1D8C8BBDD4F90 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cGdFrZI1PaioDLLg0inWjC71PbI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/d0abd0-b114-4e3a-ae59-e21763c672fa/1/cGdFrZI1PaioDLLg0inWjC71PbI.mft Manifest number: 01B5 Signing time: Fri 05 Dec 2025 23:00:48 +0000 Manifest this update: Fri 05 Dec 2025 23:00:48 +0000 Manifest next update: Sat 06 Dec 2025 23:00:48 +0000 Files and hashes: 1: EYiC8rZDROngapMz8xaIOJD1dHU.roa (hash: ul7B9oyKE2fD0KSaQvWlrbwdtA9ZauZfUIroMtS1L6M=) 2: RFxrkGA2zH2WQjsUp2RXnNNqDn8.roa (hash: Dj37juStZFglq0q0nO7RgArBR6ogM5/v0WvVt1lzaPs=) 3: Woja1iJmyNmfoaEOc5-UV7lJYyM.roa (hash: pj2lWeg9+m6c8f4vMzTRr1R6JkX7vQt6znpH3BEG0ig=) 4: cGdFrZI1PaioDLLg0inWjC71PbI.crl (hash: iilA9VxPWt0WUqse6bCIldMLc+j9V9HHbPKJmBVFD2U=) 5: ghNDZNJhpYP_Htc1Wek-L5R4BeI.roa (hash: R8J6wlPRCV7dUDvscKB1CZV2169wkfxGRLHSAdA+H2w=) 6: l3EQEBZnleFof5yb88UhTSSdRTM.roa (hash: UQRjHQuRnFXbfdwyx6MJct5Sj+7na+HTqU/QptK8INI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/d0abd0-b114-4e3a-ae59-e21763c672fa/1/cGdFrZI1PaioDLLg0inWjC71PbI.crl rsync://rpki.ripe.net/repository/DEFAULT/d8/d0abd0-b114-4e3a-ae59-e21763c672fa/1/cGdFrZI1PaioDLLg0inWjC71PbI.mft rsync://rpki.ripe.net/repository/DEFAULT/cGdFrZI1PaioDLLg0inWjC71PbI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 23:00:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:bf:20:92:3b:50:45:65:96:c1:d8:c8:bb:dd:4f:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=706745ad92353da8a80cb2e0d229d68c2ef53db2 Validity Not Before: Dec 5 23:00:48 2025 GMT Not After : Dec 6 23:00:48 2025 GMT Subject: CN=31af4032d17869a1e3219bf3d20d6a6478c29e9b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:28:e2:ff:7d:fc:9b:8b:f9:72:10:47:79:f7: 88:a4:8d:fb:a8:3c:c9:b9:34:d0:d4:23:96:21:81: 81:31:4b:0c:01:71:70:52:db:36:54:34:10:3e:60: 04:1c:0f:f8:52:ee:2a:99:a3:b9:f9:98:f2:f7:bc: ac:b9:33:5a:2a:35:fd:ad:dd:93:e0:93:c0:56:98: eb:7e:86:fb:24:51:92:15:8d:67:7a:0f:9e:df:d3: 79:66:61:73:c5:2d:0d:cb:19:73:e3:c8:41:2c:3f: 1d:a9:54:d3:d3:f8:b2:da:ec:19:c9:46:bc:99:08: c2:20:48:a8:8f:04:8d:d4:31:90:b1:a9:ae:d7:28: 22:9c:c1:20:20:b9:70:9f:da:35:13:fa:48:1c:55: b0:ae:79:6d:5b:f8:b2:f5:99:f5:80:b5:7b:bd:9e: a2:12:0e:90:21:88:a3:2d:1c:c0:bc:8b:d9:68:6a: d3:61:99:6d:7f:77:7f:2c:56:00:a9:b7:0b:19:16: 8b:dc:86:64:7d:2b:e5:45:79:d5:74:28:e9:e0:b2: 78:d0:cf:4d:36:bf:d3:15:59:b4:ba:c0:aa:69:81: b5:0e:77:e2:ae:61:23:7b:da:0c:ef:21:b5:de:8a: 78:a2:5d:c0:96:2b:5c:f0:6d:06:9f:26:8e:4a:e0: 55:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:AF:40:32:D1:78:69:A1:E3:21:9B:F3:D2:0D:6A:64:78:C2:9E:9B X509v3 Authority Key Identifier: keyid:70:67:45:AD:92:35:3D:A8:A8:0C:B2:E0:D2:29:D6:8C:2E:F5:3D:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cGdFrZI1PaioDLLg0inWjC71PbI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/d0abd0-b114-4e3a-ae59-e21763c672fa/1/cGdFrZI1PaioDLLg0inWjC71PbI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/d0abd0-b114-4e3a-ae59-e21763c672fa/1/cGdFrZI1PaioDLLg0inWjC71PbI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 24:48:16:d3:8b:a0:31:18:5d:dc:79:77:37:74:60:ce:07:d0: a2:15:30:b7:6f:9b:fc:a1:5a:e1:42:f6:29:46:82:22:8b:0c: cc:97:53:a5:db:2d:1e:66:76:1d:f7:cb:25:eb:3c:c8:bf:15: e6:bf:8a:b8:33:1a:c6:ce:7d:c5:83:18:7f:2d:f3:2e:ce:0b: 7d:64:51:f7:31:33:52:49:f2:ba:74:95:df:c2:4b:ca:46:8f: 73:d3:a3:8e:9a:2e:26:10:d5:ff:52:28:10:5c:3e:d5:a2:7d: 82:cb:09:47:de:ec:ed:bb:aa:be:c8:ed:08:d2:3a:e8:b2:47: 42:2a:a1:ed:2d:3a:78:7d:f2:ef:f9:58:b0:ce:89:7c:7b:b9: 23:70:16:48:7a:bf:1b:33:e8:84:5d:e9:d8:6a:7d:14:46:19: a0:aa:2d:27:3b:69:92:d1:bd:b5:11:06:c1:78:69:23:c2:1d: ca:97:76:35:a0:f6:a1:ff:49:57:a3:34:23:cc:c5:62:95:70: dc:07:4d:41:15:a9:fc:4b:5e:59:72:c0:5b:b4:b3:d9:7d:66: a2:e0:dd:1a:07:b3:34:cf:14:52:73:7e:9d:33:f6:82:b2:09: 41:d2:ad:5b:2e:ac:3a:3e:c4:2a:c5:51:dd:74:cc:6e:ce:4f: 36:3d:43:8a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrwvyCSO1BFZZbB2Mi73U+QMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcwNjc0NWFkOTIzNTNkYThhODBjYjJlMGQyMjlkNjhjMmVm NTNkYjIwHhcNMjUxMjA1MjMwMDQ4WhcNMjUxMjA2MjMwMDQ4WjAzMTEwLwYDVQQD EygzMWFmNDAzMmQxNzg2OWExZTMyMTliZjNkMjBkNmE2NDc4YzI5ZTliMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3Cji/338m4v5chBHefeIpI37qDzJ uTTQ1COWIYGBMUsMAXFwUts2VDQQPmAEHA/4Uu4qmaO5+Zjy97ysuTNaKjX9rd2T 4JPAVpjrfob7JFGSFY1neg+e39N5ZmFzxS0Nyxlz48hBLD8dqVTT0/iy2uwZyUa8 mQjCIEiojwSN1DGQsamu1yginMEgILlwn9o1E/pIHFWwrnltW/iy9Zn1gLV7vZ6i Eg6QIYijLRzAvIvZaGrTYZltf3d/LFYAqbcLGRaL3IZkfSvlRXnVdCjp4LJ40M9N Nr/TFVm0usCqaYG1DnfirmEje9oM7yG13op4ol3Alitc8G0GnyaOSuBVLwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDGvQDLReGmh4yGb89INamR4wp6bMB8GA1UdIwQY MBaAFHBnRa2SNT2oqAyy4NIp1owu9T2yMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY0dkRnJaSTFQYWlvRExMZzBpbldqQzcxUGJJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOC9kMGFiZDAtYjExNC00ZTNhLWFlNTkt ZTIxNzYzYzY3MmZhLzEvY0dkRnJaSTFQYWlvRExMZzBpbldqQzcxUGJJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kOC9kMGFiZDAtYjExNC00ZTNhLWFlNTktZTIxNzYzYzY3MmZh LzEvY0dkRnJaSTFQYWlvRExMZzBpbldqQzcxUGJJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJEgW04ug MRhd3Hl3N3RgzgfQohUwt2+b/KFa4UL2KUaCIosMzJdTpdstHmZ2HffLJes8yL8V 5r+KuDMaxs59xYMYfy3zLs4LfWRR9zEzUknyunSV38JLykaPc9OjjpouJhDV/1Io EFw+1aJ9gssJR97s7buqvsjtCNI66LJHQiqh7S06eH3y7/lYsM6JfHu5I3AWSHq/ GzPohF3p2Gp9FEYZoKotJztpktG9tREGwXhpI8Idypd2NaD2of9JV6M0I8zFYpVw 3AdNQRWp/EteWXLAW7Sz2X1mouDdGgezNM8UUnN+nTP2grIJQdKtWy6sOj7EKsVR 3XTMbs5PNj1Dig== -----END CERTIFICATE-----Generated at Sat Dec 6 09:21:35 2025 by rpki-client