This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/22b0fe-9dc8-4bef-a299-30097a246a9c/1/cIYS6HA6ZgiJyg9FfPG02KDVO00.mft File: cIYS6HA6ZgiJyg9FfPG02KDVO00.mft (raw, json) Hash identifier: TZR7vp6ZozB9Tq1zRCVJVnjNBEZQv9n23pwKzs171zg= Subject key identifier: E4:F3:16:A9:58:D5:FB:9F:05:C4:04:56:1E:D4:2D:7D:5E:30:39:F0 Authority key identifier: 70:86:12:E8:70:3A:66:08:89:CA:0F:45:7C:F1:B4:D8:A0:D5:3B:4D Certificate issuer: /CN=708612e8703a660889ca0f457cf1b4d8a0d53b4d Certificate serial: 019AF087F09E580AFD95852A8D24092C1544 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cIYS6HA6ZgiJyg9FfPG02KDVO00.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/22b0fe-9dc8-4bef-a299-30097a246a9c/1/cIYS6HA6ZgiJyg9FfPG02KDVO00.mft Manifest number: 0E05 Signing time: Fri 05 Dec 2025 22:00:31 +0000 Manifest this update: Fri 05 Dec 2025 22:00:31 +0000 Manifest next update: Sat 06 Dec 2025 22:00:31 +0000 Files and hashes: 1: DmXSHAWyzkOoxqiFMJESxxoNQRE.roa (hash: JS4gdknzcsCYuR0k7tQp82qH1Pua7AKi87dIAAaokTc=) 2: G1B5f1Zo9mXXkjO8qvbHOoggkQk.roa (hash: aEmK04Ia5XU5AnX1t6+4/7AVUK1sMbT5CaQWCjlA0q4=) 3: cIYS6HA6ZgiJyg9FfPG02KDVO00.crl (hash: 7Tmig938h3goBG2q8qG9F1e7OQ3ZtEqBcG2aHnPf8J8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/22b0fe-9dc8-4bef-a299-30097a246a9c/1/cIYS6HA6ZgiJyg9FfPG02KDVO00.crl rsync://rpki.ripe.net/repository/DEFAULT/10/22b0fe-9dc8-4bef-a299-30097a246a9c/1/cIYS6HA6ZgiJyg9FfPG02KDVO00.mft rsync://rpki.ripe.net/repository/DEFAULT/cIYS6HA6ZgiJyg9FfPG02KDVO00.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 22:00:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:87:f0:9e:58:0a:fd:95:85:2a:8d:24:09:2c:15:44 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=708612e8703a660889ca0f457cf1b4d8a0d53b4d Validity Not Before: Dec 5 22:00:31 2025 GMT Not After : Dec 6 22:00:31 2025 GMT Subject: CN=e4f316a958d5fb9f05c404561ed42d7d5e3039f0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:db:ca:bc:e0:97:c3:9f:5f:77:57:48:15:55: 31:ef:dc:53:c1:0e:c5:84:9c:ef:1f:65:ff:de:e7: fb:62:34:8c:fe:9b:11:aa:ec:bc:6b:b4:42:bb:6c: b5:cf:50:00:ad:bb:ea:77:e9:97:71:2e:e7:46:b7: 15:0f:2f:86:69:96:09:74:54:fa:d8:d5:ae:c1:22: 5e:be:e8:ce:c5:f2:95:ed:cd:9d:55:05:67:29:63: 64:8c:3d:6a:21:85:1f:63:5e:9f:58:41:6f:83:7b: db:0a:bd:4d:02:46:d3:9a:81:3f:e8:37:bd:2b:ee: 0e:a1:41:27:49:c8:de:d7:95:b3:10:a7:bd:a6:01: 01:98:4e:88:db:73:8c:4a:f8:16:a3:53:6e:f1:be: a8:86:9a:7f:f2:1c:32:f0:7d:fd:c0:ea:6c:b3:74: b1:07:43:93:43:24:b2:1b:a3:ca:25:f7:0d:e5:4d: e1:4a:cc:db:d4:9f:de:f6:9f:66:ce:e9:4e:7c:eb: 86:b9:ff:cd:e8:03:ff:31:2a:98:80:ac:b6:a8:05: 8e:1e:b8:1c:4a:1a:8b:28:a6:6f:98:67:da:8d:56: 43:29:d8:fb:c4:a2:b5:68:f0:30:d2:bc:32:f3:95: 40:35:5e:1e:29:9c:8a:82:7e:6d:b7:7d:6c:e4:55: ca:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:F3:16:A9:58:D5:FB:9F:05:C4:04:56:1E:D4:2D:7D:5E:30:39:F0 X509v3 Authority Key Identifier: keyid:70:86:12:E8:70:3A:66:08:89:CA:0F:45:7C:F1:B4:D8:A0:D5:3B:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cIYS6HA6ZgiJyg9FfPG02KDVO00.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/22b0fe-9dc8-4bef-a299-30097a246a9c/1/cIYS6HA6ZgiJyg9FfPG02KDVO00.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/10/22b0fe-9dc8-4bef-a299-30097a246a9c/1/cIYS6HA6ZgiJyg9FfPG02KDVO00.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 11:be:2f:a1:c5:e5:f4:21:57:07:26:e1:8c:eb:6d:3e:99:5d: ad:80:bc:33:a9:20:30:18:a8:9f:94:c3:5c:b8:9e:8e:28:78: a2:f8:55:34:e9:20:a9:2f:02:3b:ba:9a:55:c6:d2:28:71:87: 86:03:16:cf:ae:c6:2a:c3:5a:73:41:1e:df:f9:27:33:5d:d0: 1c:8e:a9:e3:e3:e8:43:73:27:fa:fa:07:98:64:37:89:cc:07: 1e:d9:6e:ad:41:4f:a3:32:dd:97:e1:50:5a:58:92:7a:9a:a9: b1:71:fd:83:a1:73:20:40:41:61:d9:a3:32:59:c2:1a:d4:a3: 62:75:94:58:ff:71:2a:ca:02:30:36:8f:dd:67:45:98:85:31: bb:4b:e0:cd:99:a0:81:dc:82:d4:fb:f1:87:e0:a6:96:b3:62: 6a:e5:76:59:4b:3c:0e:f1:4f:49:8c:e2:38:a2:5f:04:39:c2: 83:c7:e3:05:63:39:45:d8:83:04:4e:a1:2c:4d:25:9f:f3:d9: 1d:de:8c:c4:54:89:65:85:65:8a:81:e5:b2:1a:56:9e:f6:2a: e6:bf:97:c0:04:af:93:b2:4f:62:14:ee:cd:78:f1:2f:54:a7: 44:2d:9d:c4:c5:e9:ee:45:22:c9:db:d1:d0:3e:cc:1a:88:fc: 60:2c:eb:d7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrwh/CeWAr9lYUqjSQJLBVEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcwODYxMmU4NzAzYTY2MDg4OWNhMGY0NTdjZjFiNGQ4YTBk NTNiNGQwHhcNMjUxMjA1MjIwMDMxWhcNMjUxMjA2MjIwMDMxWjAzMTEwLwYDVQQD EyhlNGYzMTZhOTU4ZDVmYjlmMDVjNDA0NTYxZWQ0MmQ3ZDVlMzAzOWYwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxtvKvOCXw59fd1dIFVUx79xTwQ7F hJzvH2X/3uf7YjSM/psRquy8a7RCu2y1z1AArbvqd+mXcS7nRrcVDy+GaZYJdFT6 2NWuwSJevujOxfKV7c2dVQVnKWNkjD1qIYUfY16fWEFvg3vbCr1NAkbTmoE/6De9 K+4OoUEnScje15WzEKe9pgEBmE6I23OMSvgWo1Nu8b6ohpp/8hwy8H39wOpss3Sx B0OTQySyG6PKJfcN5U3hSszb1J/e9p9mzulOfOuGuf/N6AP/MSqYgKy2qAWOHrgc ShqLKKZvmGfajVZDKdj7xKK1aPAw0rwy85VANV4eKZyKgn5tt31s5FXKmwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOTzFqlY1fufBcQEVh7ULX1eMDnwMB8GA1UdIwQY MBaAFHCGEuhwOmYIicoPRXzxtNig1TtNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY0lZUzZIQTZaZ2lKeWc5RmZQRzAyS0RWTzAwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC8yMmIwZmUtOWRjOC00YmVmLWEyOTkt MzAwOTdhMjQ2YTljLzEvY0lZUzZIQTZaZ2lKeWc5RmZQRzAyS0RWTzAwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMC8yMmIwZmUtOWRjOC00YmVmLWEyOTktMzAwOTdhMjQ2YTlj LzEvY0lZUzZIQTZaZ2lKeWc5RmZQRzAyS0RWTzAwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEb4vocXl 9CFXBybhjOttPpldrYC8M6kgMBion5TDXLiejih4ovhVNOkgqS8CO7qaVcbSKHGH hgMWz67GKsNac0Ee3/knM13QHI6p4+PoQ3Mn+voHmGQ3icwHHtlurUFPozLdl+FQ WliSepqpsXH9g6FzIEBBYdmjMlnCGtSjYnWUWP9xKsoCMDaP3WdFmIUxu0vgzZmg gdyC1Pvxh+CmlrNiauV2WUs8DvFPSYziOKJfBDnCg8fjBWM5RdiDBE6hLE0ln/PZ Hd6MxFSJZYVlioHlshpWnvYq5r+XwASvk7JPYhTuzXjxL1SnRC2dxMXp7kUiydvR 0D7MGoj8YCzr1w== -----END CERTIFICATE-----Generated at Sat Dec 6 08:06:35 2025 by rpki-client