This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/77f4df-c3b9-4859-8bb2-08774b6c6bb3/1/CiA8bv-edCJgMJP4PmIR2pjHWCk.mft File: CiA8bv-edCJgMJP4PmIR2pjHWCk.mft (raw, json) Hash identifier: 6jfMv3YYgKJii5oSf0BCabDMvtBrDN7hSt7R5VOIhxs= Subject key identifier: E5:36:4D:BB:5F:F0:07:D3:D2:A4:E4:6C:02:90:54:B1:93:8F:12:E4 Authority key identifier: 0A:20:3C:6E:FF:9E:74:22:60:30:93:F8:3E:62:11:DA:98:C7:58:29 Certificate issuer: /CN=0a203c6eff9e7422603093f83e6211da98c75829 Certificate serial: 019AF3C0A5156B113C8F2B9851E192928940 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CiA8bv-edCJgMJP4PmIR2pjHWCk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/77f4df-c3b9-4859-8bb2-08774b6c6bb3/1/CiA8bv-edCJgMJP4PmIR2pjHWCk.mft Manifest number: 0AF6 Signing time: Sat 06 Dec 2025 13:01:19 +0000 Manifest this update: Sat 06 Dec 2025 13:01:19 +0000 Manifest next update: Sun 07 Dec 2025 13:01:19 +0000 Files and hashes: 1: 86UP9_zfWrm8I2wKVn4nqcw7tgQ.roa (hash: 3J5NqPkKkcPBxfbwq2fM/SjV37VEXbNMo9GruUt6NNo=) 2: CiA8bv-edCJgMJP4PmIR2pjHWCk.crl (hash: QtpOpsepJS/2MzwKt8pFXU7YpKilBr4w5LRhyg85mjU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/77f4df-c3b9-4859-8bb2-08774b6c6bb3/1/CiA8bv-edCJgMJP4PmIR2pjHWCk.crl rsync://rpki.ripe.net/repository/DEFAULT/0b/77f4df-c3b9-4859-8bb2-08774b6c6bb3/1/CiA8bv-edCJgMJP4PmIR2pjHWCk.mft rsync://rpki.ripe.net/repository/DEFAULT/CiA8bv-edCJgMJP4PmIR2pjHWCk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:01:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:c0:a5:15:6b:11:3c:8f:2b:98:51:e1:92:92:89:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0a203c6eff9e7422603093f83e6211da98c75829 Validity Not Before: Dec 6 13:01:19 2025 GMT Not After : Dec 7 13:01:19 2025 GMT Subject: CN=e5364dbb5ff007d3d2a4e46c029054b1938f12e4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:64:b9:e6:3e:f6:7f:2f:12:fc:07:d2:0a:e0: 96:d2:3c:31:7b:8b:eb:e4:8e:e6:2f:5c:3e:21:ec: 0d:07:9b:02:46:9d:02:67:f4:d5:60:25:5e:df:fb: 8b:94:5a:16:31:d8:41:9c:cf:bb:61:43:3f:bc:af: d3:8c:bc:18:1f:80:06:94:07:0f:ac:97:b4:b3:b5: 99:ee:2d:0f:90:11:f0:75:9e:eb:b7:fa:87:53:2c: 7d:7b:71:de:b6:c6:1f:a6:29:2d:75:3f:a6:2f:a4: 97:f6:47:ba:1c:e3:d9:ad:9a:f0:99:b3:be:2f:f3: 7c:2e:76:cd:59:2b:1a:91:4b:38:e1:b2:c5:ae:24: f2:48:92:08:06:c9:22:4b:65:df:45:e2:5c:88:51: 01:9f:cf:31:bb:47:08:fd:63:a5:86:cb:d7:e7:49: 33:6a:db:62:ce:07:79:c9:98:0e:27:1d:e3:38:33: 9d:b6:1a:e6:51:ac:f6:db:cd:85:31:c7:f8:f5:08: 7b:27:54:db:ea:27:89:82:1d:9e:7e:c4:9e:38:c6: 8f:18:da:f5:ac:68:da:54:bc:3b:87:f7:65:c2:4f: b6:86:8d:d3:94:de:cc:32:ec:fd:52:04:a9:60:8f: 5e:42:58:5f:fc:68:1f:53:3a:ae:eb:31:c7:cf:be: b1:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:36:4D:BB:5F:F0:07:D3:D2:A4:E4:6C:02:90:54:B1:93:8F:12:E4 X509v3 Authority Key Identifier: keyid:0A:20:3C:6E:FF:9E:74:22:60:30:93:F8:3E:62:11:DA:98:C7:58:29 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CiA8bv-edCJgMJP4PmIR2pjHWCk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/77f4df-c3b9-4859-8bb2-08774b6c6bb3/1/CiA8bv-edCJgMJP4PmIR2pjHWCk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/77f4df-c3b9-4859-8bb2-08774b6c6bb3/1/CiA8bv-edCJgMJP4PmIR2pjHWCk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 44:31:52:88:ba:f3:ac:3d:e0:de:ba:18:34:b9:c5:30:71:90: a0:20:0d:af:77:16:14:63:c2:19:96:e9:5e:15:91:6c:bd:a4: d9:49:b7:d0:02:ff:55:b4:5d:8a:0d:87:66:42:ca:86:4d:09: 1a:bf:fe:9e:24:95:16:c4:ec:11:79:fb:92:ec:94:1c:29:c1: ed:47:b9:34:f0:b1:42:8d:9a:d9:29:72:ef:c0:55:71:e8:62: cc:6d:95:1a:dc:30:86:d4:c4:59:2a:a8:43:75:2d:03:cb:05: 57:64:2c:f8:db:6d:99:bb:24:cc:b2:fd:9c:07:70:f4:13:73: 6c:3e:9b:7f:4e:84:3e:ad:c3:30:8e:34:99:84:80:15:2e:ef: 63:c4:20:41:22:c2:a1:d3:ca:9a:3f:ea:6a:00:b6:b2:6c:87: 2c:0a:0c:0d:ff:ea:46:49:8a:77:c0:7b:1c:18:5d:64:56:f9: 25:b9:54:9c:92:53:c3:3e:21:a8:fd:b8:ce:6c:d2:ea:16:6d: 91:03:f3:2e:38:ae:b4:4d:5e:c6:65:35:f2:74:2e:64:93:92: f2:d8:3d:f7:f2:35:03:5f:e5:55:f2:c2:57:17:22:3e:23:8b: 5d:7b:5f:c4:04:19:da:f9:b7:4f:1d:65:3c:2b:3e:6d:1f:39: 81:45:bb:df -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzwKUVaxE8jyuYUeGSkolAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBhMjAzYzZlZmY5ZTc0MjI2MDMwOTNmODNlNjIxMWRhOThj NzU4MjkwHhcNMjUxMjA2MTMwMTE5WhcNMjUxMjA3MTMwMTE5WjAzMTEwLwYDVQQD EyhlNTM2NGRiYjVmZjAwN2QzZDJhNGU0NmMwMjkwNTRiMTkzOGYxMmU0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8mS55j72fy8S/AfSCuCW0jwxe4vr 5I7mL1w+IewNB5sCRp0CZ/TVYCVe3/uLlFoWMdhBnM+7YUM/vK/TjLwYH4AGlAcP rJe0s7WZ7i0PkBHwdZ7rt/qHUyx9e3HetsYfpiktdT+mL6SX9ke6HOPZrZrwmbO+ L/N8LnbNWSsakUs44bLFriTySJIIBskiS2XfReJciFEBn88xu0cI/WOlhsvX50kz attizgd5yZgOJx3jODOdthrmUaz2282FMcf49Qh7J1Tb6ieJgh2efsSeOMaPGNr1 rGjaVLw7h/dlwk+2ho3TlN7MMuz9UgSpYI9eQlhf/GgfUzqu6zHHz76xMwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOU2Tbtf8AfT0qTkbAKQVLGTjxLkMB8GA1UdIwQY MBaAFAogPG7/nnQiYDCT+D5iEdqYx1gpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ2lBOGJ2LWVkQ0pnTUpQNFBtSVIycGpIV0NrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYi83N2Y0ZGYtYzNiOS00ODU5LThiYjIt MDg3NzRiNmM2YmIzLzEvQ2lBOGJ2LWVkQ0pnTUpQNFBtSVIycGpIV0NrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYi83N2Y0ZGYtYzNiOS00ODU5LThiYjItMDg3NzRiNmM2YmIz LzEvQ2lBOGJ2LWVkQ0pnTUpQNFBtSVIycGpIV0NrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARDFSiLrz rD3g3roYNLnFMHGQoCANr3cWFGPCGZbpXhWRbL2k2Um30AL/VbRdig2HZkLKhk0J Gr/+niSVFsTsEXn7kuyUHCnB7Ue5NPCxQo2a2Sly78BVcehizG2VGtwwhtTEWSqo Q3UtA8sFV2Qs+NttmbskzLL9nAdw9BNzbD6bf06EPq3DMI40mYSAFS7vY8QgQSLC odPKmj/qagC2smyHLAoMDf/qRkmKd8B7HBhdZFb5JblUnJJTwz4hqP24zmzS6hZt kQPzLjiutE1exmU18nQuZJOS8tg99/I1A1/lVfLCVxciPiOLXXtfxAQZ2vm3Tx1l PCs+bR85gUW73w== -----END CERTIFICATE-----Generated at Sat Dec 6 20:54:05 2025 by rpki-client