This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/3a39e9-3d40-46f8-bb0f-5ba43b118f75/1/CioVfwBRX5W2313A1S6xtdQ_3lw.mft File: CioVfwBRX5W2313A1S6xtdQ_3lw.mft (raw, json) Hash identifier: kjpX7I+io/1KFl6XDvaWV2t4LMJ2yZKhcWyOsikgiPs= Subject key identifier: 01:29:50:9D:D8:FF:74:15:95:E8:74:A8:97:B5:17:7F:4D:75:CE:68 Authority key identifier: 0A:2A:15:7F:00:51:5F:95:B6:DF:5D:C0:D5:2E:B1:B5:D4:3F:DE:5C Certificate issuer: /CN=0a2a157f00515f95b6df5dc0d52eb1b5d43fde5c Certificate serial: 019AF12D0500008FB4E0E2E36146B4D7AC5E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CioVfwBRX5W2313A1S6xtdQ_3lw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/3a39e9-3d40-46f8-bb0f-5ba43b118f75/1/CioVfwBRX5W2313A1S6xtdQ_3lw.mft Manifest number: 175F Signing time: Sat 06 Dec 2025 01:00:50 +0000 Manifest this update: Sat 06 Dec 2025 01:00:50 +0000 Manifest next update: Sun 07 Dec 2025 01:00:50 +0000 Files and hashes: 1: 4tKIyKN2LpGytONfG9Wwzb3sMh8.roa (hash: So7qtpci+LVeK7KYvgn0X4FAkS3oDmYxiev+fG5cuSs=) 2: CioVfwBRX5W2313A1S6xtdQ_3lw.crl (hash: 264n+8odLyKbQ0LCt9yC+ix97ekZRkBOI5UENnHg/cs=) 3: Ulk603SVbOQAiKSzR_IZBatvpSU.roa (hash: 1Gak7FJcv6XeZUXfgmGsLnHftg1ktwdBLJgL9CPQ7IA=) 4: rjFAvFxrdSB0H68aH_zK0lS1GcA.roa (hash: iKO/ulWqGpWzjwhANl857sDa0g01+J+R36f50OBJrb0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/3a39e9-3d40-46f8-bb0f-5ba43b118f75/1/CioVfwBRX5W2313A1S6xtdQ_3lw.crl rsync://rpki.ripe.net/repository/DEFAULT/3e/3a39e9-3d40-46f8-bb0f-5ba43b118f75/1/CioVfwBRX5W2313A1S6xtdQ_3lw.mft rsync://rpki.ripe.net/repository/DEFAULT/CioVfwBRX5W2313A1S6xtdQ_3lw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:00:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2d:05:00:00:8f:b4:e0:e2:e3:61:46:b4:d7:ac:5e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0a2a157f00515f95b6df5dc0d52eb1b5d43fde5c Validity Not Before: Dec 6 01:00:50 2025 GMT Not After : Dec 7 01:00:50 2025 GMT Subject: CN=0129509dd8ff741595e874a897b5177f4d75ce68 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fc:13:12:6f:d8:45:43:ee:fa:5c:a8:f6:d4:c9: 1a:09:d1:0f:6f:71:75:f7:90:fc:e2:c8:7c:6e:ad: 15:b1:d4:fb:77:4f:45:b4:ac:1c:36:ef:e6:a6:9b: 0d:cd:15:21:3f:cd:a9:30:43:4a:f6:bf:14:78:7a: 0b:a3:1f:48:90:2b:ad:cc:00:ad:63:1d:9f:e0:88: 0e:b1:1b:fe:bf:dd:d8:f8:8e:8f:39:54:b5:7d:92: 0d:05:c0:12:83:e7:ef:15:ea:f4:72:5a:54:f6:7d: 0c:62:5f:35:92:18:28:42:de:3d:38:f1:ab:df:27: 75:59:64:06:2b:b5:20:e5:72:2e:80:ed:ed:59:d4: b0:a6:7b:7e:40:b8:47:c4:6a:50:b7:5e:14:3a:5e: 0b:4a:42:1f:8f:14:ed:5f:11:b3:75:a2:cd:68:3f: 58:6e:c4:45:95:09:4b:11:a7:ca:4f:c4:60:d3:0c: 9e:61:12:e3:6d:98:84:96:29:54:55:f3:6f:3b:83: 2f:0e:f6:46:e7:70:8e:42:a1:54:da:82:0e:3d:3f: 33:9d:14:8d:30:bc:2f:74:07:85:fe:6e:79:72:0d: 0b:89:7b:e9:29:61:61:db:2f:6e:26:e2:fb:94:fd: 09:29:da:f6:12:94:f8:07:4e:0e:2e:2c:35:da:a3: 9d:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:29:50:9D:D8:FF:74:15:95:E8:74:A8:97:B5:17:7F:4D:75:CE:68 X509v3 Authority Key Identifier: keyid:0A:2A:15:7F:00:51:5F:95:B6:DF:5D:C0:D5:2E:B1:B5:D4:3F:DE:5C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CioVfwBRX5W2313A1S6xtdQ_3lw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/3a39e9-3d40-46f8-bb0f-5ba43b118f75/1/CioVfwBRX5W2313A1S6xtdQ_3lw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/3a39e9-3d40-46f8-bb0f-5ba43b118f75/1/CioVfwBRX5W2313A1S6xtdQ_3lw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a8:46:75:d8:57:5c:cc:c9:cc:19:c1:13:47:7c:40:50:90:bf: 7c:72:bf:c3:8e:2c:80:7a:b0:95:9c:0c:f2:80:b0:b3:a8:a3: 42:96:50:6d:bf:9f:7c:f3:0b:ea:9a:14:ce:a7:d5:39:ef:4b: 15:d1:0a:26:f0:7b:dc:e1:6d:15:14:37:41:6c:80:c2:d2:d1: d1:ef:c1:d8:01:b3:ec:de:47:81:8f:62:de:59:ba:4c:14:76: 5b:87:d7:a9:c9:3f:12:6c:93:f3:bf:bd:74:fb:67:10:6d:33: 6b:c3:63:39:f2:2b:c2:1f:3c:e1:12:6a:1b:58:f5:7b:5a:fe: b6:c8:54:d9:50:e5:20:68:6f:14:f5:28:9d:02:ff:c7:04:b3: 29:69:69:f8:23:2b:6b:ff:0e:75:52:12:bc:01:c5:82:94:83: 8d:0c:0a:b8:c5:ee:76:f3:03:ab:49:b2:12:c1:d5:21:2b:6f: c3:51:1c:e2:94:a4:7e:c1:af:5c:04:05:35:ea:8d:c3:0a:ea: 3a:af:9e:3e:e1:65:aa:6d:1e:40:a2:4c:0f:72:8e:36:e8:89: 4e:93:7d:79:14:2b:d2:d5:9e:bc:7c:3b:f8:ec:e6:76:56:07: 2f:e2:1a:fb:8e:d3:93:7f:76:ed:0b:48:6b:59:1d:85:61:51: 23:e8:8c:f5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLQUAAI+04OLjYUa016xeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBhMmExNTdmMDA1MTVmOTViNmRmNWRjMGQ1MmViMWI1ZDQz ZmRlNWMwHhcNMjUxMjA2MDEwMDUwWhcNMjUxMjA3MDEwMDUwWjAzMTEwLwYDVQQD EygwMTI5NTA5ZGQ4ZmY3NDE1OTVlODc0YTg5N2I1MTc3ZjRkNzVjZTY4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA/BMSb9hFQ+76XKj21MkaCdEPb3F1 95D84sh8bq0VsdT7d09FtKwcNu/mppsNzRUhP82pMENK9r8UeHoLox9IkCutzACt Yx2f4IgOsRv+v93Y+I6POVS1fZINBcASg+fvFer0clpU9n0MYl81khgoQt49OPGr 3yd1WWQGK7Ug5XIugO3tWdSwpnt+QLhHxGpQt14UOl4LSkIfjxTtXxGzdaLNaD9Y bsRFlQlLEafKT8Rg0wyeYRLjbZiElilUVfNvO4MvDvZG53COQqFU2oIOPT8znRSN MLwvdAeF/m55cg0LiXvpKWFh2y9uJuL7lP0JKdr2EpT4B04OLiw12qOduwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAEpUJ3Y/3QVleh0qJe1F39Ndc5oMB8GA1UdIwQY MBaAFAoqFX8AUV+Vtt9dwNUusbXUP95cMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ2lvVmZ3QlJYNVcyMzEzQTFTNnh0ZFFfM2x3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZS8zYTM5ZTktM2Q0MC00NmY4LWJiMGYt NWJhNDNiMTE4Zjc1LzEvQ2lvVmZ3QlJYNVcyMzEzQTFTNnh0ZFFfM2x3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZS8zYTM5ZTktM2Q0MC00NmY4LWJiMGYtNWJhNDNiMTE4Zjc1 LzEvQ2lvVmZ3QlJYNVcyMzEzQTFTNnh0ZFFfM2x3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqEZ12Fdc zMnMGcETR3xAUJC/fHK/w44sgHqwlZwM8oCws6ijQpZQbb+ffPML6poUzqfVOe9L FdEKJvB73OFtFRQ3QWyAwtLR0e/B2AGz7N5HgY9i3lm6TBR2W4fXqck/EmyT87+9 dPtnEG0za8NjOfIrwh884RJqG1j1e1r+tshU2VDlIGhvFPUonQL/xwSzKWlp+CMr a/8OdVISvAHFgpSDjQwKuMXudvMDq0myEsHVIStvw1Ec4pSkfsGvXAQFNeqNwwrq Oq+ePuFlqm0eQKJMD3KONuiJTpN9eRQr0tWevHw7+OzmdlYHL+Ia+47Tk3927QtI a1kdhWFRI+iM9Q== -----END CERTIFICATE-----Generated at Sat Dec 6 09:25:19 2025 by rpki-client