This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/c30dce-156a-4af0-bb38-a1cc1f7c897f/1/_CIELXaLE__agpyz8dfSzz--ihU.mft File: _CIELXaLE__agpyz8dfSzz--ihU.mft (raw, json) Hash identifier: O6pBfBnnCFK2SZwhw5IukVxx1VTuIwKz/G/IxvezD3E= Subject key identifier: 05:45:F0:8E:02:37:EA:8A:00:60:B4:B1:0D:29:38:0F:15:AE:A8:A0 Authority key identifier: FC:22:04:2D:76:8B:13:FF:DA:82:9C:B3:F1:D7:D2:CF:3F:BE:8A:15 Certificate issuer: /CN=fc22042d768b13ffda829cb3f1d7d2cf3fbe8a15 Certificate serial: 019AF1D21C34CFBD46A57BA0BFD4DBEE635A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_CIELXaLE__agpyz8dfSzz--ihU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/c30dce-156a-4af0-bb38-a1cc1f7c897f/1/_CIELXaLE__agpyz8dfSzz--ihU.mft Manifest number: 2B Signing time: Sat 06 Dec 2025 04:01:10 +0000 Manifest this update: Sat 06 Dec 2025 04:01:10 +0000 Manifest next update: Sun 07 Dec 2025 04:01:10 +0000 Files and hashes: 1: _CIELXaLE__agpyz8dfSzz--ihU.crl (hash: lyw3tNXgNzKaTPAdDDu1TKB3acTbmr5KGETfiB8zpEg=) 2: tN0AkyDmJol15awQRnADN-oZ3RQ.roa (hash: oL5gEaRGqyu6ppca7mFNT7h3bplkQYna6bciNHlaqZs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/c30dce-156a-4af0-bb38-a1cc1f7c897f/1/_CIELXaLE__agpyz8dfSzz--ihU.crl rsync://rpki.ripe.net/repository/DEFAULT/39/c30dce-156a-4af0-bb38-a1cc1f7c897f/1/_CIELXaLE__agpyz8dfSzz--ihU.mft rsync://rpki.ripe.net/repository/DEFAULT/_CIELXaLE__agpyz8dfSzz--ihU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d2:1c:34:cf:bd:46:a5:7b:a0:bf:d4:db:ee:63:5a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fc22042d768b13ffda829cb3f1d7d2cf3fbe8a15 Validity Not Before: Dec 6 04:01:10 2025 GMT Not After : Dec 7 04:01:10 2025 GMT Subject: CN=0545f08e0237ea8a0060b4b10d29380f15aea8a0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:e9:7a:ef:ff:3c:5c:bd:fd:14:58:07:44:f0: 53:76:4c:47:27:5b:84:25:ab:4a:d4:54:eb:41:af: 2f:6c:74:1f:c7:50:e1:05:69:e4:b5:41:c0:17:5a: 52:23:f8:9a:ec:24:c6:cf:15:c5:ea:fc:b0:8c:76: 47:8f:f0:6b:e6:eb:8f:3a:30:1a:4d:6c:c6:d6:4d: c7:4a:58:4e:3b:6e:5a:d1:35:d4:a7:22:d4:f0:94: 54:66:57:94:b8:eb:d7:28:e0:ae:f5:09:93:c9:d5: 4f:23:35:e3:dd:fd:57:8d:8c:ab:7f:b0:26:8c:40: fa:65:db:11:ef:61:17:f3:97:c0:1a:45:f3:c2:92: d8:e3:86:f2:7f:4e:0c:81:42:0f:33:04:6a:ff:38: 22:48:a3:4e:6a:23:ac:27:a0:5c:c7:48:7c:3b:2a: f3:72:93:20:c6:7e:4c:98:00:6b:77:48:35:7c:55: 07:39:88:17:cc:dc:82:c9:9d:06:f4:97:2d:2a:90: 66:f0:9c:18:c9:51:9c:38:d6:24:5f:e6:60:51:81: 96:75:7b:cb:ce:ed:6b:6a:67:06:5e:b8:89:5b:1c: d8:3c:2a:e3:02:78:15:76:f1:62:c9:7a:be:0f:82: fb:8b:b8:a9:80:c0:df:c7:1f:fb:89:33:56:29:fa: 03:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:45:F0:8E:02:37:EA:8A:00:60:B4:B1:0D:29:38:0F:15:AE:A8:A0 X509v3 Authority Key Identifier: keyid:FC:22:04:2D:76:8B:13:FF:DA:82:9C:B3:F1:D7:D2:CF:3F:BE:8A:15 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_CIELXaLE__agpyz8dfSzz--ihU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/c30dce-156a-4af0-bb38-a1cc1f7c897f/1/_CIELXaLE__agpyz8dfSzz--ihU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/39/c30dce-156a-4af0-bb38-a1cc1f7c897f/1/_CIELXaLE__agpyz8dfSzz--ihU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 20:bf:17:9c:90:ac:44:5d:03:19:e7:55:bf:3b:bf:76:64:19: 5b:7c:40:e8:e4:ed:b3:c2:f7:ef:38:b7:02:a2:bb:bc:68:a8: 74:81:81:16:bd:e1:90:72:2e:f0:6f:e2:0c:24:ea:73:b1:44: aa:02:d0:44:7c:df:1b:16:05:1c:15:93:cb:2f:4e:85:b9:24: 3b:93:cc:64:1b:a7:68:16:94:0d:00:62:c9:2b:2a:2c:f1:b9: 9f:8d:91:1c:7c:d8:a7:ef:ac:70:3d:e1:bb:54:8f:e4:da:55: e4:fc:81:a6:56:d3:1f:49:8b:e2:9f:bc:55:95:e2:82:86:fa: ef:c1:f3:ba:2f:ad:2b:ad:a7:92:10:fd:08:6c:0b:63:c2:c1: b0:a9:ca:2b:56:d3:a7:a6:35:fc:06:58:a5:f8:0c:79:c6:81: d7:b3:83:d8:1e:2a:af:48:56:17:00:90:9c:15:76:27:34:2a: b2:8e:ed:67:bb:d7:fd:bc:a9:71:b9:47:06:50:4a:ef:0f:80: ca:33:a0:d0:ed:91:8d:85:b9:d0:a2:4e:f7:3b:bc:0d:db:bf: 4c:74:60:83:ab:c3:7b:97:d7:1b:29:92:6d:67:0c:1f:a7:ee: 59:d3:3f:09:f4:02:b0:69:5d:7e:d7:07:52:ec:61:3b:9c:19: 7c:39:8b:44 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0hw0z71GpXugv9Tb7mNaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZjMjIwNDJkNzY4YjEzZmZkYTgyOWNiM2YxZDdkMmNmM2Zi ZThhMTUwHhcNMjUxMjA2MDQwMTEwWhcNMjUxMjA3MDQwMTEwWjAzMTEwLwYDVQQD EygwNTQ1ZjA4ZTAyMzdlYThhMDA2MGI0YjEwZDI5MzgwZjE1YWVhOGEwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu+l67/88XL39FFgHRPBTdkxHJ1uE JatK1FTrQa8vbHQfx1DhBWnktUHAF1pSI/ia7CTGzxXF6vywjHZHj/Br5uuPOjAa TWzG1k3HSlhOO25a0TXUpyLU8JRUZleUuOvXKOCu9QmTydVPIzXj3f1XjYyrf7Am jED6ZdsR72EX85fAGkXzwpLY44byf04MgUIPMwRq/zgiSKNOaiOsJ6Bcx0h8Oyrz cpMgxn5MmABrd0g1fFUHOYgXzNyCyZ0G9JctKpBm8JwYyVGcONYkX+ZgUYGWdXvL zu1ramcGXriJWxzYPCrjAngVdvFiyXq+D4L7i7ipgMDfxx/7iTNWKfoD9wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAVF8I4CN+qKAGC0sQ0pOA8VrqigMB8GA1UdIwQY MBaAFPwiBC12ixP/2oKcs/HX0s8/vooVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX0NJRUxYYUxFX19hZ3B5ejhkZlN6ei0taWhVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOS9jMzBkY2UtMTU2YS00YWYwLWJiMzgt YTFjYzFmN2M4OTdmLzEvX0NJRUxYYUxFX19hZ3B5ejhkZlN6ei0taWhVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zOS9jMzBkY2UtMTU2YS00YWYwLWJiMzgtYTFjYzFmN2M4OTdm LzEvX0NJRUxYYUxFX19hZ3B5ejhkZlN6ei0taWhVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIL8XnJCs RF0DGedVvzu/dmQZW3xA6OTts8L37zi3AqK7vGiodIGBFr3hkHIu8G/iDCTqc7FE qgLQRHzfGxYFHBWTyy9OhbkkO5PMZBunaBaUDQBiySsqLPG5n42RHHzYp++scD3h u1SP5NpV5PyBplbTH0mL4p+8VZXigob678Hzui+tK62nkhD9CGwLY8LBsKnKK1bT p6Y1/AZYpfgMecaB17OD2B4qr0hWFwCQnBV2JzQqso7tZ7vX/bypcblHBlBK7w+A yjOg0O2RjYW50KJO9zu8Ddu/THRgg6vDe5fXGymSbWcMH6fuWdM/CfQCsGldftcH UuxhO5wZfDmLRA== -----END CERTIFICATE-----Generated at Sat Dec 6 08:02:30 2025 by rpki-client