This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/981839-9dfa-42d3-acb1-6218828ed896/1/CiINqbbilYVbYn_qYQ4cthZGiUs.mft File: CiINqbbilYVbYn_qYQ4cthZGiUs.mft (raw, json) Hash identifier: HPpHQOpTx2TMOn8IXek/FQ10ay8psOGr/oxuCKqyXro= Subject key identifier: 08:6B:17:1A:08:05:4C:86:42:14:1D:C0:00:0D:67:7D:D9:7C:9E:B9 Authority key identifier: 0A:22:0D:A9:B6:E2:95:85:5B:62:7F:EA:61:0E:1C:B6:16:46:89:4B Certificate issuer: /CN=0a220da9b6e295855b627fea610e1cb61646894b Certificate serial: 019AF276689F32D27772D256C3B45C299AA1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CiINqbbilYVbYn_qYQ4cthZGiUs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/981839-9dfa-42d3-acb1-6218828ed896/1/CiINqbbilYVbYn_qYQ4cthZGiUs.mft Manifest number: 12E1 Signing time: Sat 06 Dec 2025 07:00:37 +0000 Manifest this update: Sat 06 Dec 2025 07:00:37 +0000 Manifest next update: Sun 07 Dec 2025 07:00:37 +0000 Files and hashes: 1: CiINqbbilYVbYn_qYQ4cthZGiUs.crl (hash: 5vKYzYrHqxXEivAsrvu13VcdEZ2zJk6h9m/aVqyjZoY=) 2: wkXSNgmrYa8rCdcuzp6T9kjqo9c.roa (hash: PKA5n5GL19/MWS8CZc9zMrpSRD9clDPEtJzbH91PkU8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/981839-9dfa-42d3-acb1-6218828ed896/1/CiINqbbilYVbYn_qYQ4cthZGiUs.crl rsync://rpki.ripe.net/repository/DEFAULT/09/981839-9dfa-42d3-acb1-6218828ed896/1/CiINqbbilYVbYn_qYQ4cthZGiUs.mft rsync://rpki.ripe.net/repository/DEFAULT/CiINqbbilYVbYn_qYQ4cthZGiUs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 07:00:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:76:68:9f:32:d2:77:72:d2:56:c3:b4:5c:29:9a:a1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0a220da9b6e295855b627fea610e1cb61646894b Validity Not Before: Dec 6 07:00:37 2025 GMT Not After : Dec 7 07:00:37 2025 GMT Subject: CN=086b171a08054c8642141dc0000d677dd97c9eb9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:94:8f:9b:1e:d0:8b:8f:07:a2:52:82:08:14: fb:d0:88:80:ae:b5:66:5b:58:24:61:80:88:4b:3f: c9:6c:5b:8b:cc:f6:db:54:21:9b:35:ef:e3:d5:fd: 3f:0d:53:c8:05:6b:2d:45:73:df:f9:01:03:58:6f: 4e:50:a2:93:52:33:bb:b3:cd:16:51:9f:1e:df:1a: e7:6d:11:11:53:01:7c:40:90:fb:27:6c:1d:fc:bf: 0f:89:61:06:9a:f4:c5:e3:23:db:2c:16:36:fd:d7: cf:3f:8a:c6:ef:3e:cc:55:da:c9:c4:8c:58:90:7b: c2:a1:5a:5b:3c:b6:a0:d7:90:53:f9:2d:33:24:f6: 7f:8c:21:f9:80:f1:17:2f:88:93:95:88:20:fc:5f: ed:c3:2a:f8:6d:30:44:b3:93:22:19:f6:e7:81:72: dd:e4:c5:2d:46:bf:8c:d4:03:f1:57:ac:90:8f:50: e5:09:ac:d7:b9:f0:04:a7:b6:28:92:e3:1e:30:92: db:b7:0c:36:67:bb:5f:7b:51:d7:e0:26:35:6d:05: 2c:a9:82:31:d8:0e:af:3b:79:6f:e3:bc:b9:de:8a: 69:4b:3e:17:88:9e:3c:91:73:51:d6:0d:1b:28:53: 5a:99:dd:a8:0d:d6:e5:22:ac:f8:e2:a6:66:6c:e6: 2d:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:6B:17:1A:08:05:4C:86:42:14:1D:C0:00:0D:67:7D:D9:7C:9E:B9 X509v3 Authority Key Identifier: keyid:0A:22:0D:A9:B6:E2:95:85:5B:62:7F:EA:61:0E:1C:B6:16:46:89:4B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CiINqbbilYVbYn_qYQ4cthZGiUs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/981839-9dfa-42d3-acb1-6218828ed896/1/CiINqbbilYVbYn_qYQ4cthZGiUs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/09/981839-9dfa-42d3-acb1-6218828ed896/1/CiINqbbilYVbYn_qYQ4cthZGiUs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption df:ce:c3:ba:de:28:56:4c:c4:3f:e5:51:b5:2c:ec:49:af:5b: 9f:e9:a8:69:05:ff:08:00:2b:26:b8:ec:ff:b2:46:e9:ff:15: 6b:b5:3c:fc:38:65:14:c4:a5:49:ed:72:83:60:43:63:74:ea: 73:1f:f1:16:d8:fc:b4:77:ce:89:31:c7:e8:b1:14:7d:0a:4d: 59:1e:a8:78:c3:05:e0:49:79:0e:27:c4:49:3c:b8:e5:4f:2b: 9b:3a:89:99:48:60:79:b0:99:d9:03:31:1b:0d:60:c8:c1:d9: eb:01:6f:b7:07:f3:dc:76:9a:42:55:ee:cc:9d:42:30:b1:dc: 2e:78:27:70:c1:ed:99:a3:76:73:1e:f3:bb:76:c6:b7:89:60: 9f:06:72:94:b8:97:6f:85:a6:a4:de:c6:7d:99:9b:63:eb:28: e6:a0:0e:5d:ca:2a:f5:8f:63:17:54:d5:1d:df:77:fc:8e:f0: 16:81:0f:2c:54:af:1d:f4:1f:c1:f4:ae:44:f3:82:52:06:4b: 2f:6f:e0:fe:fc:e0:78:64:e2:99:09:68:63:81:79:6a:10:2e: 67:92:1d:f1:78:a4:c6:0e:e8:43:11:0c:4e:17:ad:ba:93:de: 05:91:1c:72:6c:4f:dd:85:c2:c7:49:15:8c:ce:79:10:7f:be: 8d:3b:71:d2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrydmifMtJ3ctJWw7RcKZqhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBhMjIwZGE5YjZlMjk1ODU1YjYyN2ZlYTYxMGUxY2I2MTY0 Njg5NGIwHhcNMjUxMjA2MDcwMDM3WhcNMjUxMjA3MDcwMDM3WjAzMTEwLwYDVQQD EygwODZiMTcxYTA4MDU0Yzg2NDIxNDFkYzAwMDBkNjc3ZGQ5N2M5ZWI5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlpSPmx7Qi48HolKCCBT70IiArrVm W1gkYYCISz/JbFuLzPbbVCGbNe/j1f0/DVPIBWstRXPf+QEDWG9OUKKTUjO7s80W UZ8e3xrnbRERUwF8QJD7J2wd/L8PiWEGmvTF4yPbLBY2/dfPP4rG7z7MVdrJxIxY kHvCoVpbPLag15BT+S0zJPZ/jCH5gPEXL4iTlYgg/F/twyr4bTBEs5MiGfbngXLd 5MUtRr+M1APxV6yQj1DlCazXufAEp7YokuMeMJLbtww2Z7tfe1HX4CY1bQUsqYIx 2A6vO3lv47y53oppSz4XiJ48kXNR1g0bKFNamd2oDdblIqz44qZmbOYtTwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAhrFxoIBUyGQhQdwAANZ33ZfJ65MB8GA1UdIwQY MBaAFAoiDam24pWFW2J/6mEOHLYWRolLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ2lJTnFiYmlsWVZiWW5fcVlRNGN0aFpHaVVzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS85ODE4MzktOWRmYS00MmQzLWFjYjEt NjIxODgyOGVkODk2LzEvQ2lJTnFiYmlsWVZiWW5fcVlRNGN0aFpHaVVzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wOS85ODE4MzktOWRmYS00MmQzLWFjYjEtNjIxODgyOGVkODk2 LzEvQ2lJTnFiYmlsWVZiWW5fcVlRNGN0aFpHaVVzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA387Dut4o VkzEP+VRtSzsSa9bn+moaQX/CAArJrjs/7JG6f8Va7U8/DhlFMSlSe1yg2BDY3Tq cx/xFtj8tHfOiTHH6LEUfQpNWR6oeMMF4El5DifESTy45U8rmzqJmUhgebCZ2QMx Gw1gyMHZ6wFvtwfz3HaaQlXuzJ1CMLHcLngncMHtmaN2cx7zu3bGt4lgnwZylLiX b4WmpN7GfZmbY+so5qAOXcoq9Y9jF1TVHd93/I7wFoEPLFSvHfQfwfSuRPOCUgZL L2/g/vzgeGTimQloY4F5ahAuZ5Id8Xikxg7oQxEMThetupPeBZEccmxP3YXCx0kV jM55EH++jTtx0g== -----END CERTIFICATE-----Generated at Sat Dec 6 16:29:04 2025 by rpki-client