This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/96d14f-18c2-43a8-bc58-647289ad5a22/1/ci8LM2ULfWSYufWKrFopfpJhSCI.mft File: ci8LM2ULfWSYufWKrFopfpJhSCI.mft (raw, json) Hash identifier: hajCVLKeMW58zvwCMDjM1OfNNJNKd5p2infn5MeIR78= Subject key identifier: D2:C7:2C:3C:BA:F8:1E:39:93:A9:3F:15:5C:45:ED:05:20:1D:5A:84 Authority key identifier: 72:2F:0B:33:65:0B:7D:64:98:B9:F5:8A:AC:5A:29:7E:92:61:48:22 Certificate issuer: /CN=722f0b33650b7d6498b9f58aac5a297e92614822 Certificate serial: 019AF1D215EB21F71C2891CAA710D2196C39 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ci8LM2ULfWSYufWKrFopfpJhSCI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/96d14f-18c2-43a8-bc58-647289ad5a22/1/ci8LM2ULfWSYufWKrFopfpJhSCI.mft Manifest number: 0AF4 Signing time: Sat 06 Dec 2025 04:01:08 +0000 Manifest this update: Sat 06 Dec 2025 04:01:08 +0000 Manifest next update: Sun 07 Dec 2025 04:01:08 +0000 Files and hashes: 1: 5uh-8NvfQB_oZowhRUdfu_0v2fA.roa (hash: gCC1UC6wWvqsz5JLnyhaum++DmlgyZmiMdDqSAXaOG4=) 2: ci8LM2ULfWSYufWKrFopfpJhSCI.crl (hash: 8dqN2v6JSVQ8bovk0n6aiBwPANMpgjPVPNXZ7CUdEHo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/96d14f-18c2-43a8-bc58-647289ad5a22/1/ci8LM2ULfWSYufWKrFopfpJhSCI.crl rsync://rpki.ripe.net/repository/DEFAULT/26/96d14f-18c2-43a8-bc58-647289ad5a22/1/ci8LM2ULfWSYufWKrFopfpJhSCI.mft rsync://rpki.ripe.net/repository/DEFAULT/ci8LM2ULfWSYufWKrFopfpJhSCI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d2:15:eb:21:f7:1c:28:91:ca:a7:10:d2:19:6c:39 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=722f0b33650b7d6498b9f58aac5a297e92614822 Validity Not Before: Dec 6 04:01:08 2025 GMT Not After : Dec 7 04:01:08 2025 GMT Subject: CN=d2c72c3cbaf81e3993a93f155c45ed05201d5a84 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:e4:c4:37:c7:35:4e:62:1b:97:a3:29:5a:b9: 22:55:c7:65:f2:da:38:db:e6:76:64:ac:bd:c6:2a: e5:db:56:8b:e3:7b:9f:33:11:af:37:6c:29:85:7f: 98:a3:f7:76:07:66:ec:e0:d4:4c:73:e8:6e:23:1b: 93:15:bb:fc:cf:5c:f5:6a:4e:b7:8a:79:70:e5:11: da:57:8d:9a:95:ee:1c:b2:a3:24:b5:6d:3c:5c:12: fa:c7:8d:4b:f7:cf:ec:12:57:67:21:38:63:43:37: 0d:d5:00:9c:f7:14:6d:98:d6:b9:4f:d0:6d:df:77: b6:4b:15:b3:9c:9c:88:e8:1f:ef:ac:b4:e9:ac:86: 38:55:fb:58:89:b4:e0:24:0e:29:c9:08:bb:7c:3b: 93:f7:16:73:c0:c2:5e:56:59:86:da:cd:a4:e9:7a: fe:5c:7e:2f:e2:16:6a:a6:7c:e9:4f:8e:05:a7:52: ee:5a:29:99:22:3b:52:06:2a:e7:4a:9f:57:cd:26: 38:a6:3d:db:d3:15:86:20:ae:45:27:8b:61:89:67: d6:16:3c:4f:9b:93:35:74:32:27:f0:1a:7d:fa:30: ae:f3:b7:0f:61:90:a9:9f:1e:9a:2b:b7:c0:22:b2: 82:55:df:b5:d1:53:3e:d9:9c:c9:95:8d:a4:f4:c5: 55:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:C7:2C:3C:BA:F8:1E:39:93:A9:3F:15:5C:45:ED:05:20:1D:5A:84 X509v3 Authority Key Identifier: keyid:72:2F:0B:33:65:0B:7D:64:98:B9:F5:8A:AC:5A:29:7E:92:61:48:22 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ci8LM2ULfWSYufWKrFopfpJhSCI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/96d14f-18c2-43a8-bc58-647289ad5a22/1/ci8LM2ULfWSYufWKrFopfpJhSCI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/26/96d14f-18c2-43a8-bc58-647289ad5a22/1/ci8LM2ULfWSYufWKrFopfpJhSCI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6d:9a:ed:c5:d4:b8:87:54:c7:3e:b9:5d:7a:93:cc:e5:d8:6e: 68:d9:47:5a:83:99:ee:ca:df:2d:68:fc:d0:81:cb:ac:eb:e9: 46:8f:15:84:b2:90:b4:84:b8:45:ac:ce:98:38:de:e3:c0:98: bb:ed:82:bd:5d:81:e0:ea:11:1a:d1:78:5b:ba:a8:0e:8d:1f: 5a:c4:a6:3c:de:45:5c:73:20:00:07:51:e8:f1:bd:ef:ba:4b: c4:9d:b7:b9:5b:7b:86:e1:3f:2d:eb:51:a9:10:b6:ef:c0:c9: 6f:18:d4:d9:dc:e2:f7:15:15:5a:77:4b:60:a4:c8:33:a4:b0: 17:87:33:54:c0:aa:4b:d5:d9:a0:e1:8b:78:49:df:f2:d9:83: 40:72:70:b8:87:34:fc:b8:1f:42:20:7a:86:04:53:3e:fd:e8: 6a:dd:ec:01:3e:c6:8e:a9:22:37:b2:fb:1f:72:14:a0:43:2d: 3c:dd:be:5b:ff:33:4d:0e:db:ac:55:eb:35:e7:5e:ae:13:47: 12:4a:c6:6d:9d:2d:4f:ec:b4:f2:a7:90:da:65:cd:b8:c2:88: 70:36:f3:c2:b7:bb:e9:76:6e:3f:cc:c2:fa:b5:5f:f4:ee:38: ad:b1:f3:62:ee:0e:f7:5a:a2:df:62:91:50:9e:7c:e1:e4:da: d6:47:e2:b2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0hXrIfccKJHKpxDSGWw5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcyMmYwYjMzNjUwYjdkNjQ5OGI5ZjU4YWFjNWEyOTdlOTI2 MTQ4MjIwHhcNMjUxMjA2MDQwMTA4WhcNMjUxMjA3MDQwMTA4WjAzMTEwLwYDVQQD EyhkMmM3MmMzY2JhZjgxZTM5OTNhOTNmMTU1YzQ1ZWQwNTIwMWQ1YTg0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxuTEN8c1TmIbl6MpWrkiVcdl8to4 2+Z2ZKy9xirl21aL43ufMxGvN2wphX+Yo/d2B2bs4NRMc+huIxuTFbv8z1z1ak63 inlw5RHaV42ale4csqMktW08XBL6x41L98/sEldnIThjQzcN1QCc9xRtmNa5T9Bt 33e2SxWznJyI6B/vrLTprIY4VftYibTgJA4pyQi7fDuT9xZzwMJeVlmG2s2k6Xr+ XH4v4hZqpnzpT44Fp1LuWimZIjtSBirnSp9XzSY4pj3b0xWGIK5FJ4thiWfWFjxP m5M1dDIn8Bp9+jCu87cPYZCpnx6aK7fAIrKCVd+10VM+2ZzJlY2k9MVVxwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNLHLDy6+B45k6k/FVxF7QUgHVqEMB8GA1UdIwQY MBaAFHIvCzNlC31kmLn1iqxaKX6SYUgiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY2k4TE0yVUxmV1NZdWZXS3JGb3BmcEpoU0NJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNi85NmQxNGYtMThjMi00M2E4LWJjNTgt NjQ3Mjg5YWQ1YTIyLzEvY2k4TE0yVUxmV1NZdWZXS3JGb3BmcEpoU0NJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNi85NmQxNGYtMThjMi00M2E4LWJjNTgtNjQ3Mjg5YWQ1YTIy LzEvY2k4TE0yVUxmV1NZdWZXS3JGb3BmcEpoU0NJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbZrtxdS4 h1THPrldepPM5dhuaNlHWoOZ7srfLWj80IHLrOvpRo8VhLKQtIS4RazOmDje48CY u+2CvV2B4OoRGtF4W7qoDo0fWsSmPN5FXHMgAAdR6PG977pLxJ23uVt7huE/LetR qRC278DJbxjU2dzi9xUVWndLYKTIM6SwF4czVMCqS9XZoOGLeEnf8tmDQHJwuIc0 /LgfQiB6hgRTPv3oat3sAT7GjqkiN7L7H3IUoEMtPN2+W/8zTQ7brFXrNederhNH EkrGbZ0tT+y08qeQ2mXNuMKIcDbzwre76XZuP8zC+rVf9O44rbHzYu4O91qi32KR UJ584eTa1kfisg== -----END CERTIFICATE-----Generated at Sat Dec 6 08:27:14 2025 by rpki-client