This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/45e632-b0fd-4d81-9cf7-8fd22105806b/1/cIEc4M5zU_A-3py3ylEWJV-_t70.mft File: cIEc4M5zU_A-3py3ylEWJV-_t70.mft (raw, json) Hash identifier: csgIo/AGAEjthKr5atgIkwavEEt37/jX5j2XVnagXKo= Subject key identifier: 3E:CF:B8:8C:0C:6D:8C:B4:14:05:C1:FD:3E:66:B2:0F:78:B2:70:26 Authority key identifier: 70:81:1C:E0:CE:73:53:F0:3E:DE:9C:B7:CA:51:16:25:5F:BF:B7:BD Certificate issuer: /CN=70811ce0ce7353f03ede9cb7ca5116255fbfb7bd Certificate serial: 019AF31B40D10425254D5BE36FCABAFEB4EE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cIEc4M5zU_A-3py3ylEWJV-_t70.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/45e632-b0fd-4d81-9cf7-8fd22105806b/1/cIEc4M5zU_A-3py3ylEWJV-_t70.mft Manifest number: 0C1B Signing time: Sat 06 Dec 2025 10:00:40 +0000 Manifest this update: Sat 06 Dec 2025 10:00:40 +0000 Manifest next update: Sun 07 Dec 2025 10:00:40 +0000 Files and hashes: 1: 1-VdOr1FUP7HNxfqfhOHB4LyOJ2Y.roa (hash: QB9LyYahw6voR06UwItPSAyVLMKgN6beiVidIvS+Rxs=) 2: cIEc4M5zU_A-3py3ylEWJV-_t70.crl (hash: Hh8+am2FBKM75A9x9G3NxFN9vbvTFvy7I3wgGxREVFc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/45e632-b0fd-4d81-9cf7-8fd22105806b/1/cIEc4M5zU_A-3py3ylEWJV-_t70.crl rsync://rpki.ripe.net/repository/DEFAULT/43/45e632-b0fd-4d81-9cf7-8fd22105806b/1/cIEc4M5zU_A-3py3ylEWJV-_t70.mft rsync://rpki.ripe.net/repository/DEFAULT/cIEc4M5zU_A-3py3ylEWJV-_t70.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1b:40:d1:04:25:25:4d:5b:e3:6f:ca:ba:fe:b4:ee Signature Algorithm: sha256WithRSAEncryption Issuer: CN=70811ce0ce7353f03ede9cb7ca5116255fbfb7bd Validity Not Before: Dec 6 10:00:40 2025 GMT Not After : Dec 7 10:00:40 2025 GMT Subject: CN=3ecfb88c0c6d8cb41405c1fd3e66b20f78b27026 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:dc:71:28:b3:33:50:5a:be:29:fb:c9:68:8c: 53:12:f7:7f:99:b6:aa:76:2c:2c:ab:56:1d:20:4c: 0f:62:86:c1:81:73:f7:ca:55:2d:70:f0:16:42:e2: 14:9e:4b:a7:11:89:aa:46:87:98:5e:35:b1:01:e0: 65:67:19:c8:18:33:45:15:86:45:90:a6:dc:1e:a8: a6:c5:cd:d5:a9:fc:89:6f:c9:50:7b:b2:24:b1:63: da:04:3a:37:0f:af:2f:9a:53:19:50:ee:78:a3:7a: 4f:ce:e7:ff:22:74:49:a5:1f:11:7e:3a:1f:6a:32: ce:f4:49:ae:83:7b:ff:6f:71:4d:74:0b:7d:50:a7: ed:12:92:8e:e7:0c:18:dd:75:99:59:29:1e:4f:2a: 95:f1:de:67:05:8a:48:bb:4b:38:9b:a3:ff:59:93: 43:f2:0b:5c:7e:09:3a:a1:26:e3:aa:95:ca:30:12: 39:a5:59:48:5f:8d:0e:6a:48:76:74:51:ca:5f:de: 3b:40:41:4e:8f:bb:8f:03:ab:39:af:8d:e9:e7:ee: c5:b4:1e:ca:bf:e4:73:17:42:a8:81:f2:1d:f2:6d: 0c:86:ef:ff:d3:f7:9f:01:2b:cb:8e:77:2e:c7:30: 19:a5:f4:11:a3:1b:5f:40:5c:0f:fa:d6:f8:ca:58: 47:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:CF:B8:8C:0C:6D:8C:B4:14:05:C1:FD:3E:66:B2:0F:78:B2:70:26 X509v3 Authority Key Identifier: keyid:70:81:1C:E0:CE:73:53:F0:3E:DE:9C:B7:CA:51:16:25:5F:BF:B7:BD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cIEc4M5zU_A-3py3ylEWJV-_t70.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/45e632-b0fd-4d81-9cf7-8fd22105806b/1/cIEc4M5zU_A-3py3ylEWJV-_t70.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/43/45e632-b0fd-4d81-9cf7-8fd22105806b/1/cIEc4M5zU_A-3py3ylEWJV-_t70.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 02:07:a3:e7:75:45:cb:26:1e:58:ea:0b:a9:33:89:99:4f:8f: 55:ba:36:b8:5d:b6:a3:d1:e0:0a:45:e4:09:09:e6:53:f3:05: 3a:13:73:6c:cc:bf:b5:bd:c6:77:31:72:ae:12:af:d5:c7:57: 5c:0d:83:5e:53:f5:28:c9:46:39:3c:5e:4b:f8:9d:3a:34:2d: df:92:4e:a6:c2:d5:cf:c5:4c:4f:ea:53:a9:bc:1f:28:e7:de: b0:82:6b:90:44:3c:7d:ef:f8:ca:33:e2:a1:e1:e0:1a:04:89: fd:8e:1f:c5:4a:6a:25:6b:26:9a:7b:c2:e9:10:b8:f6:6c:5d: 88:ba:bc:bb:f6:47:35:d1:26:63:74:61:22:16:99:72:42:68: c5:b1:29:c5:6a:ab:ec:7b:f5:d4:72:42:96:ce:be:8a:96:c0: 60:67:54:7c:dd:c1:40:bc:0f:50:f6:11:63:7d:f4:62:32:4e: 7d:77:dc:d7:d1:30:0d:aa:25:d3:81:4c:99:cf:11:d4:76:3b: 55:42:a1:46:9c:56:c1:af:7b:60:3e:99:23:57:18:91:5c:6e: 4c:25:1a:a6:dc:3c:4e:eb:8c:84:e7:ec:1f:6e:bd:04:f8:89: a4:03:58:33:0d:1b:4a:f7:ad:c1:d1:86:ac:27:05:aa:93:c4: 35:5a:32:a5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzG0DRBCUlTVvjb8q6/rTuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcwODExY2UwY2U3MzUzZjAzZWRlOWNiN2NhNTExNjI1NWZi ZmI3YmQwHhcNMjUxMjA2MTAwMDQwWhcNMjUxMjA3MTAwMDQwWjAzMTEwLwYDVQQD EygzZWNmYjg4YzBjNmQ4Y2I0MTQwNWMxZmQzZTY2YjIwZjc4YjI3MDI2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8NxxKLMzUFq+KfvJaIxTEvd/mbaq diwsq1YdIEwPYobBgXP3ylUtcPAWQuIUnkunEYmqRoeYXjWxAeBlZxnIGDNFFYZF kKbcHqimxc3VqfyJb8lQe7IksWPaBDo3D68vmlMZUO54o3pPzuf/InRJpR8Rfjof ajLO9Emug3v/b3FNdAt9UKftEpKO5wwY3XWZWSkeTyqV8d5nBYpIu0s4m6P/WZND 8gtcfgk6oSbjqpXKMBI5pVlIX40Oakh2dFHKX947QEFOj7uPA6s5r43p5+7FtB7K v+RzF0KogfId8m0Mhu//0/efASvLjncuxzAZpfQRoxtfQFwP+tb4ylhHvwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFD7PuIwMbYy0FAXB/T5msg94snAmMB8GA1UdIwQY MBaAFHCBHODOc1PwPt6ct8pRFiVfv7e9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY0lFYzRNNXpVX0EtM3B5M3lsRVdKVi1fdDcwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80My80NWU2MzItYjBmZC00ZDgxLTljZjct OGZkMjIxMDU4MDZiLzEvY0lFYzRNNXpVX0EtM3B5M3lsRVdKVi1fdDcwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80My80NWU2MzItYjBmZC00ZDgxLTljZjctOGZkMjIxMDU4MDZi LzEvY0lFYzRNNXpVX0EtM3B5M3lsRVdKVi1fdDcwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAgej53VF yyYeWOoLqTOJmU+PVbo2uF22o9HgCkXkCQnmU/MFOhNzbMy/tb3GdzFyrhKv1cdX XA2DXlP1KMlGOTxeS/idOjQt35JOpsLVz8VMT+pTqbwfKOfesIJrkEQ8fe/4yjPi oeHgGgSJ/Y4fxUpqJWsmmnvC6RC49mxdiLq8u/ZHNdEmY3RhIhaZckJoxbEpxWqr 7Hv11HJCls6+ipbAYGdUfN3BQLwPUPYRY330YjJOfXfc19EwDaol04FMmc8R1HY7 VUKhRpxWwa97YD6ZI1cYkVxuTCUaptw8TuuMhOfsH269BPiJpANYMw0bSvetwdGG rCcFqpPENVoypQ== -----END CERTIFICATE-----Generated at Sat Dec 6 12:11:15 2025 by rpki-client