This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/2b910f-dcc1-41db-96cd-092e89d59fa8/1/Ci1xwNFF7yeARxCSe5Q8Z-UK56s.mft File: Ci1xwNFF7yeARxCSe5Q8Z-UK56s.mft (raw, json) Hash identifier: lQWsTm60gQj6oX7Uo6VBpClpq8jcTuz9pAgEqdncprU= Subject key identifier: 34:0F:8C:F8:7F:0A:A6:57:A2:5F:23:56:47:C4:34:65:F8:42:6E:84 Authority key identifier: 0A:2D:71:C0:D1:45:EF:27:80:47:10:92:7B:94:3C:67:E5:0A:E7:AB Certificate issuer: /CN=0a2d71c0d145ef27804710927b943c67e50ae7ab Certificate serial: 019AF19B5B74436FB0E59AFAB6315569936E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ci1xwNFF7yeARxCSe5Q8Z-UK56s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/2b910f-dcc1-41db-96cd-092e89d59fa8/1/Ci1xwNFF7yeARxCSe5Q8Z-UK56s.mft Manifest number: 149A Signing time: Sat 06 Dec 2025 03:01:21 +0000 Manifest this update: Sat 06 Dec 2025 03:01:21 +0000 Manifest next update: Sun 07 Dec 2025 03:01:21 +0000 Files and hashes: 1: 2WXmLCsyw8fMc90USjqmpJq_P0k.roa (hash: X6trTAm4sd1BCoRMyM8T/lu1+HYVfbsSp9+0QPBx8Ps=) 2: Ci1xwNFF7yeARxCSe5Q8Z-UK56s.crl (hash: jrZ6d7861lL8nx68V+FwdzhHIdB0jMyD/GiGDe5hxMA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/2b910f-dcc1-41db-96cd-092e89d59fa8/1/Ci1xwNFF7yeARxCSe5Q8Z-UK56s.crl rsync://rpki.ripe.net/repository/DEFAULT/1e/2b910f-dcc1-41db-96cd-092e89d59fa8/1/Ci1xwNFF7yeARxCSe5Q8Z-UK56s.mft rsync://rpki.ripe.net/repository/DEFAULT/Ci1xwNFF7yeARxCSe5Q8Z-UK56s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 03:01:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9b:5b:74:43:6f:b0:e5:9a:fa:b6:31:55:69:93:6e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0a2d71c0d145ef27804710927b943c67e50ae7ab Validity Not Before: Dec 6 03:01:21 2025 GMT Not After : Dec 7 03:01:21 2025 GMT Subject: CN=340f8cf87f0aa657a25f235647c43465f8426e84 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:f3:d4:93:93:7f:e7:0a:70:e4:98:1c:49:bf: 40:dd:bf:98:45:dc:bb:b7:63:2c:48:04:71:81:c2: 67:32:d2:b3:f0:45:64:74:b2:e7:06:51:11:05:93: 13:0e:f6:3c:fe:03:f5:9a:63:5c:fa:07:b1:0e:8c: 2d:71:81:46:ff:2e:67:b2:ce:4e:95:df:da:10:67: 41:f5:eb:88:17:66:dd:ad:b0:8e:ac:8c:b8:4b:d8: 88:8b:8f:9f:05:33:7f:06:d4:47:53:41:a9:15:84: b1:a7:4c:e6:1e:b3:28:aa:47:5e:4b:26:9f:f8:82: 94:85:8e:69:b4:1a:a3:5e:75:3d:de:da:f2:6e:c2: 51:7f:c5:aa:df:d6:dc:8a:09:4a:1f:07:4d:29:3d: 92:e5:30:94:a6:bb:f6:9f:a5:bc:b7:f1:ba:e3:3e: 5f:de:4f:12:58:6b:30:ca:9f:46:67:80:27:4d:9f: 39:18:80:be:8b:02:de:25:d0:80:81:d0:dd:ec:4f: 9b:2e:19:31:a4:3c:b4:fb:30:52:40:05:08:3d:bd: d3:1b:eb:05:a6:46:8d:30:53:11:78:53:f4:56:63: d6:6a:2f:d0:b4:44:8b:2d:15:dc:a9:37:2c:70:7e: aa:d5:78:ad:e2:cc:91:2f:b2:57:7e:1e:c0:23:16: 94:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:0F:8C:F8:7F:0A:A6:57:A2:5F:23:56:47:C4:34:65:F8:42:6E:84 X509v3 Authority Key Identifier: keyid:0A:2D:71:C0:D1:45:EF:27:80:47:10:92:7B:94:3C:67:E5:0A:E7:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ci1xwNFF7yeARxCSe5Q8Z-UK56s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/2b910f-dcc1-41db-96cd-092e89d59fa8/1/Ci1xwNFF7yeARxCSe5Q8Z-UK56s.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/2b910f-dcc1-41db-96cd-092e89d59fa8/1/Ci1xwNFF7yeARxCSe5Q8Z-UK56s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 49:b4:98:8e:6c:21:12:76:6d:f9:a7:48:8e:c0:49:82:dd:19: 7e:58:97:0c:cd:f9:02:20:6f:f9:01:1f:b0:7a:70:95:55:9b: 78:90:95:f8:5c:54:6d:78:0f:9e:c1:55:39:e6:5e:f3:6c:4c: 3b:ed:44:55:af:59:32:de:37:1f:47:22:80:27:70:1d:11:4c: 75:7e:c9:73:46:14:a6:55:4f:bc:b3:c7:ca:05:ec:9e:70:9d: 9a:90:51:d9:cb:bc:06:fb:2a:af:38:db:77:12:f3:1a:23:8e: a8:53:ee:15:81:39:63:69:89:0d:d6:bc:bb:15:70:b2:08:d8: bf:e3:64:47:63:a6:c5:d6:40:1b:b7:e0:57:21:85:ae:8d:53: d0:d3:87:ad:20:b6:0d:a1:91:bf:c6:b6:43:ed:3c:97:cd:e1: 82:e1:94:72:7b:f6:19:d7:8f:10:3b:2f:c1:ce:b9:1b:3d:89: 3c:f1:0e:0c:82:9b:f1:de:35:ae:27:c8:3b:af:d6:6c:8a:58: b8:ad:45:20:c0:71:b0:90:b1:39:ea:75:ba:7d:08:02:df:99: 30:ce:62:70:bc:12:95:61:7a:15:d9:ae:3e:36:4e:b5:95:af: af:3d:eb:68:31:a7:69:04:60:1d:76:79:bd:a5:28:0a:ad:e1: 74:04:c0:e2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxm1t0Q2+w5Zr6tjFVaZNuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBhMmQ3MWMwZDE0NWVmMjc4MDQ3MTA5MjdiOTQzYzY3ZTUw YWU3YWIwHhcNMjUxMjA2MDMwMTIxWhcNMjUxMjA3MDMwMTIxWjAzMTEwLwYDVQQD EygzNDBmOGNmODdmMGFhNjU3YTI1ZjIzNTY0N2M0MzQ2NWY4NDI2ZTg0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2PPUk5N/5wpw5JgcSb9A3b+YRdy7 t2MsSARxgcJnMtKz8EVkdLLnBlERBZMTDvY8/gP1mmNc+gexDowtcYFG/y5nss5O ld/aEGdB9euIF2bdrbCOrIy4S9iIi4+fBTN/BtRHU0GpFYSxp0zmHrMoqkdeSyaf +IKUhY5ptBqjXnU93trybsJRf8Wq39bciglKHwdNKT2S5TCUprv2n6W8t/G64z5f 3k8SWGswyp9GZ4AnTZ85GIC+iwLeJdCAgdDd7E+bLhkxpDy0+zBSQAUIPb3TG+sF pkaNMFMReFP0VmPWai/QtESLLRXcqTcscH6q1Xit4syRL7JXfh7AIxaU2wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDQPjPh/CqZXol8jVkfENGX4Qm6EMB8GA1UdIwQY MBaAFAotccDRRe8ngEcQknuUPGflCuerMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ2kxeHdORkY3eWVBUnhDU2U1UThaLVVLNTZzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZS8yYjkxMGYtZGNjMS00MWRiLTk2Y2Qt MDkyZTg5ZDU5ZmE4LzEvQ2kxeHdORkY3eWVBUnhDU2U1UThaLVVLNTZzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xZS8yYjkxMGYtZGNjMS00MWRiLTk2Y2QtMDkyZTg5ZDU5ZmE4 LzEvQ2kxeHdORkY3eWVBUnhDU2U1UThaLVVLNTZzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASbSYjmwh EnZt+adIjsBJgt0ZfliXDM35AiBv+QEfsHpwlVWbeJCV+FxUbXgPnsFVOeZe82xM O+1EVa9ZMt43H0cigCdwHRFMdX7Jc0YUplVPvLPHygXsnnCdmpBR2cu8Bvsqrzjb dxLzGiOOqFPuFYE5Y2mJDda8uxVwsgjYv+NkR2OmxdZAG7fgVyGFro1T0NOHrSC2 DaGRv8a2Q+08l83hguGUcnv2GdePEDsvwc65Gz2JPPEODIKb8d41rifIO6/WbIpY uK1FIMBxsJCxOep1un0IAt+ZMM5icLwSlWF6FdmuPjZOtZWvrz3raDGnaQRgHXZ5 vaUoCq3hdATA4g== -----END CERTIFICATE-----Generated at Sat Dec 6 12:47:28 2025 by rpki-client