This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/77f4df-c3b9-4859-8bb2-08774b6c6bb3/1/CiA8bv-edCJgMJP4PmIR2pjHWCk.mft File: CiA8bv-edCJgMJP4PmIR2pjHWCk.mft (raw, json) Hash identifier: h91t26RXVJOAdiigi1wPKhzOdXO4ZM/h/KKCj2GJx4g= Subject key identifier: 12:2E:C5:8F:38:0D:FE:B1:4B:BD:ED:F0:E6:71:27:97:6D:5F:6F:25 Authority key identifier: 0A:20:3C:6E:FF:9E:74:22:60:30:93:F8:3E:62:11:DA:98:C7:58:29 Certificate issuer: /CN=0a203c6eff9e7422603093f83e6211da98c75829 Certificate serial: 019B2BC1809E9881B4BE0070A28C682D1882 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CiA8bv-edCJgMJP4PmIR2pjHWCk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/77f4df-c3b9-4859-8bb2-08774b6c6bb3/1/CiA8bv-edCJgMJP4PmIR2pjHWCk.mft Manifest number: 0B13 Signing time: Wed 17 Dec 2025 10:01:00 +0000 Manifest this update: Wed 17 Dec 2025 10:01:00 +0000 Manifest next update: Thu 18 Dec 2025 10:01:00 +0000 Files and hashes: 1: 86UP9_zfWrm8I2wKVn4nqcw7tgQ.roa (hash: 3J5NqPkKkcPBxfbwq2fM/SjV37VEXbNMo9GruUt6NNo=) 2: CiA8bv-edCJgMJP4PmIR2pjHWCk.crl (hash: 8Qb2nvzOWgo4hfmO2puQhkGIYZTzO83OY8CLUaq/22w=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/77f4df-c3b9-4859-8bb2-08774b6c6bb3/1/CiA8bv-edCJgMJP4PmIR2pjHWCk.crl rsync://rpki.ripe.net/repository/DEFAULT/0b/77f4df-c3b9-4859-8bb2-08774b6c6bb3/1/CiA8bv-edCJgMJP4PmIR2pjHWCk.mft rsync://rpki.ripe.net/repository/DEFAULT/CiA8bv-edCJgMJP4PmIR2pjHWCk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 10:00:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2b:c1:80:9e:98:81:b4:be:00:70:a2:8c:68:2d:18:82 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0a203c6eff9e7422603093f83e6211da98c75829 Validity Not Before: Dec 17 10:01:00 2025 GMT Not After : Dec 18 10:01:00 2025 GMT Subject: CN=122ec58f380dfeb14bbdedf0e67127976d5f6f25 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:90:c7:b1:f3:7d:06:18:69:be:01:7f:bf:38: 90:f9:e2:bd:48:12:13:14:09:62:d0:40:5f:c0:db: 56:95:b5:00:8d:41:af:a7:00:32:4c:18:6f:67:b6: 03:99:8b:86:15:80:dc:02:38:63:b6:c9:52:7b:de: a3:9e:a0:ce:8b:5e:48:28:2e:88:c9:9c:45:18:4f: ae:86:cb:76:33:85:24:b0:cb:c3:38:0b:bb:8d:df: b3:40:33:9b:6c:f8:9d:9a:f2:84:77:00:6c:9b:4a: 48:d5:9d:30:48:f7:1c:11:10:5a:d3:0d:86:97:67: 14:a2:8f:66:27:8b:90:ea:b7:0c:e5:6c:90:88:a2: a7:60:74:fd:76:cb:1e:2b:5c:4e:f3:a8:51:f2:7b: 1c:64:b5:86:54:f7:9f:33:f2:9b:4d:4c:86:3d:31: 19:82:21:39:3b:80:f7:db:17:ea:6a:93:c2:d7:4d: 7b:bd:e6:11:de:ee:d9:e5:ac:ae:be:5e:52:1a:15: 9c:aa:c5:1d:d1:cf:c4:2d:a3:74:e7:e9:03:4d:01: c4:3c:2a:e4:4f:d5:37:5b:2d:9a:1e:62:c9:ae:f9: 2d:d8:64:55:e0:3b:fa:73:a0:e5:80:ae:ea:4a:5d: 76:90:28:53:0b:89:20:47:9e:06:0c:50:c3:97:94: 91:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:2E:C5:8F:38:0D:FE:B1:4B:BD:ED:F0:E6:71:27:97:6D:5F:6F:25 X509v3 Authority Key Identifier: keyid:0A:20:3C:6E:FF:9E:74:22:60:30:93:F8:3E:62:11:DA:98:C7:58:29 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CiA8bv-edCJgMJP4PmIR2pjHWCk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/77f4df-c3b9-4859-8bb2-08774b6c6bb3/1/CiA8bv-edCJgMJP4PmIR2pjHWCk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/77f4df-c3b9-4859-8bb2-08774b6c6bb3/1/CiA8bv-edCJgMJP4PmIR2pjHWCk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 43:74:78:c0:6a:97:0d:24:26:0a:87:93:55:fa:73:85:b7:77: ff:c1:61:b4:74:f7:f3:97:58:67:96:60:90:8f:fe:72:d1:0b: 7d:75:d5:85:10:f4:b3:19:30:a4:31:11:7d:9b:8a:51:01:23: 7d:3d:62:c1:f1:95:b5:17:93:67:fd:ad:04:2b:3c:cf:3b:58: 3e:12:33:c3:07:5d:3f:91:0f:93:ff:fb:12:3c:25:1f:d1:ec: 43:a1:70:cd:d4:6f:82:b9:c1:5c:ba:80:9a:cd:a6:90:20:67: 29:c0:e0:65:13:83:ac:64:06:9a:43:5b:bb:f7:32:da:af:68: 87:75:7d:e2:05:e2:16:d9:1a:82:a2:cb:f0:90:20:16:05:94: 6d:09:0b:eb:9b:f2:40:57:63:30:d8:17:23:bf:ab:88:20:11: 60:0a:05:f4:2d:91:f8:ca:f3:67:10:d7:1f:00:6f:98:5a:1f: f8:b7:89:f3:97:5a:e1:06:fc:86:0d:23:3d:c0:a3:52:fd:43: 77:d2:0d:e0:8d:77:0c:55:f3:16:7f:70:2c:4a:e4:c7:8d:cd: e9:ab:af:85:95:ee:8d:50:d8:9d:9f:87:74:5a:35:b0:2f:bb: 76:17:04:c7:2f:94:d3:15:71:82:b8:85:ef:71:02:34:a1:19: d9:fa:73:6e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsrwYCemIG0vgBwooxoLRiCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBhMjAzYzZlZmY5ZTc0MjI2MDMwOTNmODNlNjIxMWRhOThj NzU4MjkwHhcNMjUxMjE3MTAwMTAwWhcNMjUxMjE4MTAwMTAwWjAzMTEwLwYDVQQD EygxMjJlYzU4ZjM4MGRmZWIxNGJiZGVkZjBlNjcxMjc5NzZkNWY2ZjI1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyJDHsfN9BhhpvgF/vziQ+eK9SBIT FAli0EBfwNtWlbUAjUGvpwAyTBhvZ7YDmYuGFYDcAjhjtslSe96jnqDOi15IKC6I yZxFGE+uhst2M4UksMvDOAu7jd+zQDObbPidmvKEdwBsm0pI1Z0wSPccERBa0w2G l2cUoo9mJ4uQ6rcM5WyQiKKnYHT9dsseK1xO86hR8nscZLWGVPefM/KbTUyGPTEZ giE5O4D32xfqapPC1017veYR3u7Z5ayuvl5SGhWcqsUd0c/ELaN05+kDTQHEPCrk T9U3Wy2aHmLJrvkt2GRV4Dv6c6DlgK7qSl12kChTC4kgR54GDFDDl5SRTwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBIuxY84Df6xS73t8OZxJ5dtX28lMB8GA1UdIwQY MBaAFAogPG7/nnQiYDCT+D5iEdqYx1gpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ2lBOGJ2LWVkQ0pnTUpQNFBtSVIycGpIV0NrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYi83N2Y0ZGYtYzNiOS00ODU5LThiYjIt MDg3NzRiNmM2YmIzLzEvQ2lBOGJ2LWVkQ0pnTUpQNFBtSVIycGpIV0NrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYi83N2Y0ZGYtYzNiOS00ODU5LThiYjItMDg3NzRiNmM2YmIz LzEvQ2lBOGJ2LWVkQ0pnTUpQNFBtSVIycGpIV0NrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQ3R4wGqX DSQmCoeTVfpzhbd3/8FhtHT385dYZ5ZgkI/+ctELfXXVhRD0sxkwpDERfZuKUQEj fT1iwfGVtReTZ/2tBCs8zztYPhIzwwddP5EPk//7EjwlH9HsQ6FwzdRvgrnBXLqA ms2mkCBnKcDgZRODrGQGmkNbu/cy2q9oh3V94gXiFtkagqLL8JAgFgWUbQkL65vy QFdjMNgXI7+riCARYAoF9C2R+MrzZxDXHwBvmFof+LeJ85da4Qb8hg0jPcCjUv1D d9IN4I13DFXzFn9wLErkx43N6auvhZXujVDYnZ+HdFo1sC+7dhcExy+U0xVxgriF 73ECNKEZ2fpzbg== -----END CERTIFICATE-----Generated at Wed Dec 17 18:39:47 2025 by rpki-client