This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/851d45-1422-4b31-bd8f-7993b9e03b0f/1/CiebQDjgAue9ZOUHbRo56-lvI8Q.mft File: CiebQDjgAue9ZOUHbRo56-lvI8Q.mft (raw, json) Hash identifier: T6Y91XThm9Vnt5dzRnjb4c659I7tKULaz0iJpMXG+7w= Subject key identifier: FE:B8:14:72:78:5F:9D:4D:35:77:43:6B:4A:31:FE:BE:86:72:7D:FB Authority key identifier: 0A:27:9B:40:38:E0:02:E7:BD:64:E5:07:6D:1A:39:EB:E9:6F:23:C4 Certificate issuer: /CN=0a279b4038e002e7bd64e5076d1a39ebe96f23c4 Certificate serial: 019B32D791794973450429E4FB2876568936 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CiebQDjgAue9ZOUHbRo56-lvI8Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/851d45-1422-4b31-bd8f-7993b9e03b0f/1/CiebQDjgAue9ZOUHbRo56-lvI8Q.mft Manifest number: 0832 Signing time: Thu 18 Dec 2025 19:02:26 +0000 Manifest this update: Thu 18 Dec 2025 19:02:26 +0000 Manifest next update: Fri 19 Dec 2025 19:02:26 +0000 Files and hashes: 1: CiebQDjgAue9ZOUHbRo56-lvI8Q.crl (hash: 2YMHCbdxzaGoE3e71Hs1l6W2FmDbYTs9stRhHHkHfbk=) 2: XgZiHyWgL10sySKObf_Bjn8Hh_Q.roa (hash: 2Dl4jp91F4zOnOBtmwjhJgpK+aRbbY/cT57xX5iOAng=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/851d45-1422-4b31-bd8f-7993b9e03b0f/1/CiebQDjgAue9ZOUHbRo56-lvI8Q.crl rsync://rpki.ripe.net/repository/DEFAULT/30/851d45-1422-4b31-bd8f-7993b9e03b0f/1/CiebQDjgAue9ZOUHbRo56-lvI8Q.mft rsync://rpki.ripe.net/repository/DEFAULT/CiebQDjgAue9ZOUHbRo56-lvI8Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 19:02:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:32:d7:91:79:49:73:45:04:29:e4:fb:28:76:56:89:36 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0a279b4038e002e7bd64e5076d1a39ebe96f23c4 Validity Not Before: Dec 18 19:02:26 2025 GMT Not After : Dec 19 19:02:26 2025 GMT Subject: CN=feb81472785f9d4d3577436b4a31febe86727dfb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:f6:9b:14:e8:a3:4f:30:28:e3:d3:5a:15:37: 89:fc:c4:7c:df:d7:a3:06:4b:61:84:af:5a:b6:56: 54:6b:c1:cc:0e:2a:27:8b:a1:12:e6:9c:3d:76:66: 96:3a:ae:44:a4:f4:14:dc:5f:ed:7b:ae:2e:13:75: 17:6b:db:ad:c8:c5:10:12:88:2a:83:b7:53:fa:cd: cb:04:7b:bc:75:db:17:a2:ce:dc:1b:8f:9d:97:4f: c1:bc:83:86:a1:38:4b:b8:89:b8:2c:01:0c:41:3e: 49:07:2c:7b:d6:a3:22:41:13:cb:60:31:ba:e6:b1: 38:0e:b6:54:43:c1:94:7b:a2:96:41:a7:33:4f:f5: 3c:ab:8b:fe:04:df:fd:04:0b:fa:68:d0:93:bc:8e: 8a:49:24:f2:ef:3b:cc:f1:8a:5a:f5:86:52:43:8c: a0:7c:e7:2d:d5:36:bb:73:08:45:dc:47:ff:00:85: ef:56:e2:d9:0e:b2:c2:a2:e7:84:3e:34:7a:8f:4b: 72:e7:74:b8:9c:2b:05:35:ea:a7:cb:2b:89:92:d5: a4:65:09:6e:54:bd:5c:e5:81:d0:e8:cb:14:f1:20: 12:60:5d:07:02:9a:34:64:13:90:f6:ac:ec:28:2a: c9:40:f8:17:d6:20:f8:79:5f:79:46:d2:28:49:0f: 75:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:B8:14:72:78:5F:9D:4D:35:77:43:6B:4A:31:FE:BE:86:72:7D:FB X509v3 Authority Key Identifier: keyid:0A:27:9B:40:38:E0:02:E7:BD:64:E5:07:6D:1A:39:EB:E9:6F:23:C4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CiebQDjgAue9ZOUHbRo56-lvI8Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/851d45-1422-4b31-bd8f-7993b9e03b0f/1/CiebQDjgAue9ZOUHbRo56-lvI8Q.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/30/851d45-1422-4b31-bd8f-7993b9e03b0f/1/CiebQDjgAue9ZOUHbRo56-lvI8Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 01:fb:33:d9:ec:df:56:a8:8b:3a:b2:bc:50:84:5f:7f:d3:a0: cf:89:45:6f:46:59:05:da:3a:63:0d:2c:a8:2f:5a:50:bf:cb: a9:6f:79:4f:ed:0a:2d:f4:42:98:17:3f:de:d2:94:39:a6:b4: d0:f6:8f:9d:a7:de:8a:97:b4:c7:5f:1e:9c:f3:8c:f8:f5:60: 7a:d9:be:99:7e:40:3d:d4:73:05:9a:37:be:4f:dc:72:a6:eb: 3f:24:a0:8e:49:d2:90:86:35:13:a2:b3:9b:19:07:9b:89:52: 1e:19:a3:d9:e4:c6:26:21:04:61:c9:ff:1f:a8:7e:af:b4:ed: 6e:ab:98:65:02:76:dd:d4:d4:aa:7d:b4:d0:87:60:44:e3:33: d0:43:ce:89:2e:45:e6:be:b9:4b:e9:6f:e0:0b:e3:fe:e9:0e: 79:b2:a6:59:5b:f3:ce:68:e6:a9:45:a6:47:f9:93:fb:90:54: cd:36:b1:60:06:1e:16:1a:fb:05:e1:17:fe:49:6e:93:cd:2e: e9:0f:64:f8:f1:f7:8c:72:68:ca:d5:02:98:59:f2:2d:3a:bb: 89:76:6f:e3:8a:f7:3e:bb:fe:c5:a4:e3:63:9b:bf:50:fa:3c: c9:97:42:ce:0b:2d:28:2b:49:1c:50:72:ad:15:43:3a:b5:83: 35:bf:1a:bb -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsy15F5SXNFBCnk+yh2Vok2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBhMjc5YjQwMzhlMDAyZTdiZDY0ZTUwNzZkMWEzOWViZTk2 ZjIzYzQwHhcNMjUxMjE4MTkwMjI2WhcNMjUxMjE5MTkwMjI2WjAzMTEwLwYDVQQD EyhmZWI4MTQ3Mjc4NWY5ZDRkMzU3NzQzNmI0YTMxZmViZTg2NzI3ZGZiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvPabFOijTzAo49NaFTeJ/MR839ej BkthhK9atlZUa8HMDioni6ES5pw9dmaWOq5EpPQU3F/te64uE3UXa9utyMUQEogq g7dT+s3LBHu8ddsXos7cG4+dl0/BvIOGoThLuIm4LAEMQT5JByx71qMiQRPLYDG6 5rE4DrZUQ8GUe6KWQaczT/U8q4v+BN/9BAv6aNCTvI6KSSTy7zvM8Ypa9YZSQ4yg fOct1Ta7cwhF3Ef/AIXvVuLZDrLCoueEPjR6j0ty53S4nCsFNeqnyyuJktWkZQlu VL1c5YHQ6MsU8SASYF0HApo0ZBOQ9qzsKCrJQPgX1iD4eV95RtIoSQ91dQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFP64FHJ4X51NNXdDa0ox/r6Gcn37MB8GA1UdIwQY MBaAFAonm0A44ALnvWTlB20aOevpbyPEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ2llYlFEamdBdWU5Wk9VSGJSbzU2LWx2SThRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC84NTFkNDUtMTQyMi00YjMxLWJkOGYt Nzk5M2I5ZTAzYjBmLzEvQ2llYlFEamdBdWU5Wk9VSGJSbzU2LWx2SThRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMC84NTFkNDUtMTQyMi00YjMxLWJkOGYtNzk5M2I5ZTAzYjBm LzEvQ2llYlFEamdBdWU5Wk9VSGJSbzU2LWx2SThRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAfsz2ezf VqiLOrK8UIRff9Ogz4lFb0ZZBdo6Yw0sqC9aUL/LqW95T+0KLfRCmBc/3tKUOaa0 0PaPnafeipe0x18enPOM+PVgetm+mX5APdRzBZo3vk/ccqbrPySgjknSkIY1E6Kz mxkHm4lSHhmj2eTGJiEEYcn/H6h+r7TtbquYZQJ23dTUqn200IdgROMz0EPOiS5F 5r65S+lv4Avj/ukOebKmWVvzzmjmqUWmR/mT+5BUzTaxYAYeFhr7BeEX/kluk80u 6Q9k+PH3jHJoytUCmFnyLTq7iXZv44r3Prv+xaTjY5u/UPo8yZdCzgstKCtJHFBy rRVDOrWDNb8auw== -----END CERTIFICATE-----Generated at Fri Dec 19 00:30:24 2025 by rpki-client