This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/851d45-1422-4b31-bd8f-7993b9e03b0f/1/CiebQDjgAue9ZOUHbRo56-lvI8Q.mft File: CiebQDjgAue9ZOUHbRo56-lvI8Q.mft (raw, json) Hash identifier: m2rnaaqizDRXsMluv8fmbtXzjZXMLO5D4CsB8ytvBIY= Subject key identifier: E8:67:14:D6:60:FB:8E:77:8A:5B:13:43:A2:23:D6:7A:85:D4:6A:82 Authority key identifier: 0A:27:9B:40:38:E0:02:E7:BD:64:E5:07:6D:1A:39:EB:E9:6F:23:C4 Certificate issuer: /CN=0a279b4038e002e7bd64e5076d1a39ebe96f23c4 Certificate serial: 019AF12E86D64DB58D68EF19758D82919309 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CiebQDjgAue9ZOUHbRo56-lvI8Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/851d45-1422-4b31-bd8f-7993b9e03b0f/1/CiebQDjgAue9ZOUHbRo56-lvI8Q.mft Manifest number: 0810 Signing time: Sat 06 Dec 2025 01:02:29 +0000 Manifest this update: Sat 06 Dec 2025 01:02:29 +0000 Manifest next update: Sun 07 Dec 2025 01:02:29 +0000 Files and hashes: 1: CiebQDjgAue9ZOUHbRo56-lvI8Q.crl (hash: NHD5KgDkzYI2CO5ctC04c5w51HN6BTuNgnBnE+kfM+E=) 2: XgZiHyWgL10sySKObf_Bjn8Hh_Q.roa (hash: 2Dl4jp91F4zOnOBtmwjhJgpK+aRbbY/cT57xX5iOAng=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/851d45-1422-4b31-bd8f-7993b9e03b0f/1/CiebQDjgAue9ZOUHbRo56-lvI8Q.crl rsync://rpki.ripe.net/repository/DEFAULT/30/851d45-1422-4b31-bd8f-7993b9e03b0f/1/CiebQDjgAue9ZOUHbRo56-lvI8Q.mft rsync://rpki.ripe.net/repository/DEFAULT/CiebQDjgAue9ZOUHbRo56-lvI8Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:02:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2e:86:d6:4d:b5:8d:68:ef:19:75:8d:82:91:93:09 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0a279b4038e002e7bd64e5076d1a39ebe96f23c4 Validity Not Before: Dec 6 01:02:29 2025 GMT Not After : Dec 7 01:02:29 2025 GMT Subject: CN=e86714d660fb8e778a5b1343a223d67a85d46a82 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:64:6a:93:27:b2:b4:bd:47:41:9c:de:42:03: f8:1d:29:84:4c:aa:1c:94:84:35:e5:88:36:13:bf: 4e:dc:29:04:2d:3a:7c:93:50:6d:67:b4:99:4a:db: 0e:b3:7b:59:f4:15:42:4f:44:a4:56:8f:bf:1b:ec: 1b:27:22:7b:cc:ce:c8:24:4f:9c:ac:6f:d5:c3:1e: df:69:82:5e:b5:d1:ca:66:95:db:31:ba:88:ef:a4: db:31:32:1c:30:f9:bf:d5:64:95:1a:aa:38:4b:9f: 49:08:8c:29:e2:0a:af:48:96:f9:2b:ed:1b:6d:f2: 68:dd:26:bf:b3:41:42:c3:14:04:cf:73:59:e0:8d: 0d:27:c1:92:87:5a:69:d8:51:da:c2:9f:b0:7c:74: 0c:26:c0:e4:47:38:21:43:be:b2:36:f6:aa:33:5c: 69:ba:f3:81:41:fc:e2:c6:a8:28:48:aa:e4:3e:ae: 96:6e:d2:cc:26:99:ae:3d:1a:cb:28:eb:fc:32:28: 49:16:02:82:44:89:92:41:46:70:a4:0a:5b:b3:aa: bb:01:a3:f4:f5:6a:06:89:51:a8:e0:eb:74:7a:43: 87:7e:22:27:6a:08:88:cd:b5:89:8b:60:fe:02:62: 98:8e:8a:a1:e3:07:49:89:97:f3:b3:f2:3e:82:d3: 31:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:67:14:D6:60:FB:8E:77:8A:5B:13:43:A2:23:D6:7A:85:D4:6A:82 X509v3 Authority Key Identifier: keyid:0A:27:9B:40:38:E0:02:E7:BD:64:E5:07:6D:1A:39:EB:E9:6F:23:C4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CiebQDjgAue9ZOUHbRo56-lvI8Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/851d45-1422-4b31-bd8f-7993b9e03b0f/1/CiebQDjgAue9ZOUHbRo56-lvI8Q.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/30/851d45-1422-4b31-bd8f-7993b9e03b0f/1/CiebQDjgAue9ZOUHbRo56-lvI8Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 93:7f:2b:2e:47:9b:13:6f:d0:78:23:14:ff:b0:2b:28:47:d7: c1:5b:6a:32:7a:49:90:c2:57:ad:f1:38:c8:c7:db:87:bd:f9: 1a:df:9b:1d:17:15:2a:d9:50:67:80:3a:94:e2:cf:e5:77:d8: 0f:d4:cc:63:38:16:db:f1:b0:42:8d:32:73:c5:64:f6:d8:4d: e3:d7:c0:b3:00:68:92:46:73:21:fa:a0:48:45:99:c1:a2:ee: 1e:47:f9:70:23:e2:f3:37:1f:2f:7a:b9:78:13:51:66:27:08: 39:30:68:42:e0:91:67:c4:b4:29:f6:be:72:ea:45:fa:1b:27: aa:d0:bf:59:4b:aa:1e:4f:c3:15:df:d4:27:e1:34:2c:a5:fe: 49:e3:1e:15:d0:8f:6d:fa:89:db:c1:de:91:48:e5:1f:c0:0f: ef:75:e1:8d:84:c8:f7:d7:7f:da:13:9d:a9:e3:a2:63:43:d2: ee:ac:b5:20:8e:7b:cf:ef:12:7a:00:7c:82:5c:3f:09:e6:4c: 4e:9c:c2:17:64:07:37:f0:f8:d0:c1:a2:0d:7f:61:d3:41:e0: b6:47:07:37:f9:9c:68:b4:65:9f:f9:25:38:32:83:1f:d0:35: 56:b9:7d:9b:a3:76:35:e3:8b:d8:48:72:62:c3:dd:cb:1d:b2: 2e:7c:e4:72 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLobWTbWNaO8ZdY2CkZMJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBhMjc5YjQwMzhlMDAyZTdiZDY0ZTUwNzZkMWEzOWViZTk2 ZjIzYzQwHhcNMjUxMjA2MDEwMjI5WhcNMjUxMjA3MDEwMjI5WjAzMTEwLwYDVQQD EyhlODY3MTRkNjYwZmI4ZTc3OGE1YjEzNDNhMjIzZDY3YTg1ZDQ2YTgyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4mRqkyeytL1HQZzeQgP4HSmETKoc lIQ15Yg2E79O3CkELTp8k1BtZ7SZStsOs3tZ9BVCT0SkVo+/G+wbJyJ7zM7IJE+c rG/Vwx7faYJetdHKZpXbMbqI76TbMTIcMPm/1WSVGqo4S59JCIwp4gqvSJb5K+0b bfJo3Sa/s0FCwxQEz3NZ4I0NJ8GSh1pp2FHawp+wfHQMJsDkRzghQ76yNvaqM1xp uvOBQfzixqgoSKrkPq6WbtLMJpmuPRrLKOv8MihJFgKCRImSQUZwpApbs6q7AaP0 9WoGiVGo4Ot0ekOHfiInagiIzbWJi2D+AmKYjoqh4wdJiZfzs/I+gtMxfQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOhnFNZg+453ilsTQ6Ij1nqF1GqCMB8GA1UdIwQY MBaAFAonm0A44ALnvWTlB20aOevpbyPEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ2llYlFEamdBdWU5Wk9VSGJSbzU2LWx2SThRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC84NTFkNDUtMTQyMi00YjMxLWJkOGYt Nzk5M2I5ZTAzYjBmLzEvQ2llYlFEamdBdWU5Wk9VSGJSbzU2LWx2SThRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMC84NTFkNDUtMTQyMi00YjMxLWJkOGYtNzk5M2I5ZTAzYjBm LzEvQ2llYlFEamdBdWU5Wk9VSGJSbzU2LWx2SThRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAk38rLkeb E2/QeCMU/7ArKEfXwVtqMnpJkMJXrfE4yMfbh735Gt+bHRcVKtlQZ4A6lOLP5XfY D9TMYzgW2/GwQo0yc8Vk9thN49fAswBokkZzIfqgSEWZwaLuHkf5cCPi8zcfL3q5 eBNRZicIOTBoQuCRZ8S0Kfa+cupF+hsnqtC/WUuqHk/DFd/UJ+E0LKX+SeMeFdCP bfqJ28HekUjlH8AP73XhjYTI99d/2hOdqeOiY0PS7qy1II57z+8SegB8glw/CeZM TpzCF2QHN/D40MGiDX9h00HgtkcHN/mcaLRln/klODKDH9A1Vrl9m6N2NeOL2Ehy YsPdyx2yLnzkcg== -----END CERTIFICATE-----Generated at Sat Dec 6 10:12:04 2025 by rpki-client