This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/cab149-d567-48fc-ac9b-20b024c6fc2f/1/cTm2kHj5bKuvcYo5u1hniurBzMI.mft File: cTm2kHj5bKuvcYo5u1hniurBzMI.mft (raw, json) Hash identifier: h+9X4PGfoMBFoKaELz6hRaMajjovmfRtKUWnv/TBckg= Subject key identifier: 9E:4B:22:D7:DE:E5:57:EA:F2:2B:CD:29:42:44:6B:AB:6E:6F:42:12 Authority key identifier: 71:39:B6:90:78:F9:6C:AB:AF:71:8A:39:BB:58:67:8A:EA:C1:CC:C2 Certificate issuer: /CN=7139b69078f96cabaf718a39bb58678aeac1ccc2 Certificate serial: 019AF208D3A3D6535DD393B5A100A5E416B6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cTm2kHj5bKuvcYo5u1hniurBzMI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/cab149-d567-48fc-ac9b-20b024c6fc2f/1/cTm2kHj5bKuvcYo5u1hniurBzMI.mft Manifest number: 115C Signing time: Sat 06 Dec 2025 05:00:55 +0000 Manifest this update: Sat 06 Dec 2025 05:00:55 +0000 Manifest next update: Sun 07 Dec 2025 05:00:55 +0000 Files and hashes: 1: PYsPgn9EIHR5AYha-d_1rxDJZs0.roa (hash: QRdgsHwd+qGrv8yp41/SIFOyI0EFbmqDBRqqwNJuLIY=) 2: cTm2kHj5bKuvcYo5u1hniurBzMI.crl (hash: 7NKum4+w9JZzkt3xg8Yk/9pvDTaALA8eitSyfnfoAIw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/cab149-d567-48fc-ac9b-20b024c6fc2f/1/cTm2kHj5bKuvcYo5u1hniurBzMI.crl rsync://rpki.ripe.net/repository/DEFAULT/ed/cab149-d567-48fc-ac9b-20b024c6fc2f/1/cTm2kHj5bKuvcYo5u1hniurBzMI.mft rsync://rpki.ripe.net/repository/DEFAULT/cTm2kHj5bKuvcYo5u1hniurBzMI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:08:d3:a3:d6:53:5d:d3:93:b5:a1:00:a5:e4:16:b6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7139b69078f96cabaf718a39bb58678aeac1ccc2 Validity Not Before: Dec 6 05:00:55 2025 GMT Not After : Dec 7 05:00:55 2025 GMT Subject: CN=9e4b22d7dee557eaf22bcd2942446bab6e6f4212 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:d4:71:f9:85:27:f4:62:53:ee:fa:cb:8e:0f: 3b:bd:55:03:7f:c6:da:20:ad:dd:d0:de:d4:eb:76: e1:3f:03:1d:d3:ab:11:0e:36:74:4e:b6:f3:99:42: fe:19:ff:46:b8:53:53:1d:29:8a:d0:32:6c:27:20: 3d:29:1f:2d:45:04:2a:79:60:aa:2f:91:9c:1e:43: f5:ec:36:51:08:b9:59:94:ac:1e:96:82:d1:a7:06: 20:99:f7:a5:86:62:b6:c2:00:45:9c:87:d6:b7:b6: c6:ba:47:96:6e:fa:cd:5c:17:7b:b5:61:78:85:20: df:76:05:99:5c:97:d2:3f:d6:bb:39:d9:5b:c4:55: aa:42:12:46:18:21:57:8c:24:04:bd:a1:86:3d:44: 01:76:ea:a9:40:73:0d:08:2d:35:76:12:d5:4f:53: 53:70:1b:45:7b:23:0e:38:d8:e6:43:17:b0:7a:34: 90:97:a7:90:79:ba:1e:86:15:f4:f8:97:50:1e:c6: 46:d1:a5:d9:92:12:f4:3f:9c:2f:df:01:05:44:0d: 9b:39:4a:34:9b:e0:13:78:a3:b4:ac:a4:b8:62:a8: 38:82:c8:a5:c2:e5:7d:cf:98:f1:f1:43:5a:d3:f5: b1:ba:59:18:8d:b1:7d:f5:a3:ab:4b:e6:4f:5e:52: 2b:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:4B:22:D7:DE:E5:57:EA:F2:2B:CD:29:42:44:6B:AB:6E:6F:42:12 X509v3 Authority Key Identifier: keyid:71:39:B6:90:78:F9:6C:AB:AF:71:8A:39:BB:58:67:8A:EA:C1:CC:C2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cTm2kHj5bKuvcYo5u1hniurBzMI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/cab149-d567-48fc-ac9b-20b024c6fc2f/1/cTm2kHj5bKuvcYo5u1hniurBzMI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/cab149-d567-48fc-ac9b-20b024c6fc2f/1/cTm2kHj5bKuvcYo5u1hniurBzMI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4f:69:ac:97:2d:90:f4:01:2a:62:a0:d5:e1:25:8e:d4:f1:1d: a6:17:1e:5d:43:f0:05:55:be:c1:fb:7e:cb:fe:ab:e7:c6:3e: 75:50:01:d0:61:7f:8d:3c:05:cc:f9:58:27:3e:a1:83:96:36: fe:0c:3f:70:19:45:d0:77:c3:a8:19:f3:4f:c6:9a:64:f0:70: 37:6b:6f:60:ad:10:1e:69:43:19:42:49:88:dd:2e:42:45:23: 89:49:ea:8f:61:09:d0:4a:77:21:e3:06:3b:b1:92:2c:b4:55: c6:0f:fc:ba:88:38:3d:5c:b5:ee:60:55:18:1e:1e:14:07:e3: d7:c0:5e:fd:d8:3b:84:c7:1b:15:07:26:b4:c4:2b:50:d1:c6: c4:a9:89:c6:87:75:ab:ec:7c:f6:75:be:eb:6a:d0:65:70:1e: 84:bf:91:24:b6:e2:21:ef:67:2a:b0:ec:14:da:41:77:63:77: af:32:7c:80:5e:6e:22:05:ac:9b:8e:61:0c:ee:d1:c5:39:79: 4d:c7:19:09:bd:04:5a:b9:34:d6:a4:58:4d:33:80:ee:6e:d1: 7e:39:9a:6d:93:8a:af:b9:c7:3e:29:7d:35:1b:86:40:78:47: cc:fd:fc:1c:7e:d2:b7:00:7d:ba:49:e9:df:c6:05:9c:20:e5: 5d:21:04:e1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCNOj1lNd05O1oQCl5Ba2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcxMzliNjkwNzhmOTZjYWJhZjcxOGEzOWJiNTg2NzhhZWFj MWNjYzIwHhcNMjUxMjA2MDUwMDU1WhcNMjUxMjA3MDUwMDU1WjAzMTEwLwYDVQQD Eyg5ZTRiMjJkN2RlZTU1N2VhZjIyYmNkMjk0MjQ0NmJhYjZlNmY0MjEyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoNRx+YUn9GJT7vrLjg87vVUDf8ba IK3d0N7U63bhPwMd06sRDjZ0TrbzmUL+Gf9GuFNTHSmK0DJsJyA9KR8tRQQqeWCq L5GcHkP17DZRCLlZlKweloLRpwYgmfelhmK2wgBFnIfWt7bGukeWbvrNXBd7tWF4 hSDfdgWZXJfSP9a7OdlbxFWqQhJGGCFXjCQEvaGGPUQBduqpQHMNCC01dhLVT1NT cBtFeyMOONjmQxewejSQl6eQeboehhX0+JdQHsZG0aXZkhL0P5wv3wEFRA2bOUo0 m+ATeKO0rKS4Yqg4gsilwuV9z5jx8UNa0/WxulkYjbF99aOrS+ZPXlIrjwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJ5LItfe5Vfq8ivNKUJEa6tub0ISMB8GA1UdIwQY MBaAFHE5tpB4+Wyrr3GKObtYZ4rqwczCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY1RtMmtIajViS3V2Y1lvNXUxaG5pdXJCek1JLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZC9jYWIxNDktZDU2Ny00OGZjLWFjOWIt MjBiMDI0YzZmYzJmLzEvY1RtMmtIajViS3V2Y1lvNXUxaG5pdXJCek1JLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZC9jYWIxNDktZDU2Ny00OGZjLWFjOWItMjBiMDI0YzZmYzJm LzEvY1RtMmtIajViS3V2Y1lvNXUxaG5pdXJCek1JLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAT2msly2Q 9AEqYqDV4SWO1PEdphceXUPwBVW+wft+y/6r58Y+dVAB0GF/jTwFzPlYJz6hg5Y2 /gw/cBlF0HfDqBnzT8aaZPBwN2tvYK0QHmlDGUJJiN0uQkUjiUnqj2EJ0Ep3IeMG O7GSLLRVxg/8uog4PVy17mBVGB4eFAfj18Be/dg7hMcbFQcmtMQrUNHGxKmJxod1 q+x89nW+62rQZXAehL+RJLbiIe9nKrDsFNpBd2N3rzJ8gF5uIgWsm45hDO7RxTl5 TccZCb0EWrk01qRYTTOA7m7RfjmabZOKr7nHPil9NRuGQHhHzP38HH7StwB9uknp 38YFnCDlXSEE4Q== -----END CERTIFICATE-----Generated at Sat Dec 6 12:11:10 2025 by rpki-client