This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/1c60ac-ba3f-440b-868b-ea12ef9422ec/1/ciLFq32z3TlmGS-q_gfzEVsMjuU.mft File: ciLFq32z3TlmGS-q_gfzEVsMjuU.mft (raw, json) Hash identifier: 0+pHgbR146vgoymSSkXB1u4mgoki2+2UuhR1MueMwR0= Subject key identifier: E1:DE:87:8C:09:3C:2F:14:22:1F:0E:28:95:C7:79:75:7B:E8:91:EB Authority key identifier: 72:22:C5:AB:7D:B3:DD:39:66:19:2F:AA:FE:07:F3:11:5B:0C:8E:E5 Certificate issuer: /CN=7222c5ab7db3dd3966192faafe07f3115b0c8ee5 Certificate serial: 019AF464FFFB3E944DEEC72569037E694CC4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ciLFq32z3TlmGS-q_gfzEVsMjuU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/1c60ac-ba3f-440b-868b-ea12ef9422ec/1/ciLFq32z3TlmGS-q_gfzEVsMjuU.mft Manifest number: 1439 Signing time: Sat 06 Dec 2025 16:00:50 +0000 Manifest this update: Sat 06 Dec 2025 16:00:50 +0000 Manifest next update: Sun 07 Dec 2025 16:00:50 +0000 Files and hashes: 1: ciLFq32z3TlmGS-q_gfzEVsMjuU.crl (hash: ZAe+efoB+uXy0MzmvPs6JKH4AtXoRp8LTHPqJf7XJZU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/1c60ac-ba3f-440b-868b-ea12ef9422ec/1/ciLFq32z3TlmGS-q_gfzEVsMjuU.crl rsync://rpki.ripe.net/repository/DEFAULT/6c/1c60ac-ba3f-440b-868b-ea12ef9422ec/1/ciLFq32z3TlmGS-q_gfzEVsMjuU.mft rsync://rpki.ripe.net/repository/DEFAULT/ciLFq32z3TlmGS-q_gfzEVsMjuU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 14:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:64:ff:fb:3e:94:4d:ee:c7:25:69:03:7e:69:4c:c4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7222c5ab7db3dd3966192faafe07f3115b0c8ee5 Validity Not Before: Dec 6 16:00:50 2025 GMT Not After : Dec 7 16:00:50 2025 GMT Subject: CN=e1de878c093c2f14221f0e2895c779757be891eb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:5a:94:31:89:ce:49:49:2a:76:e6:3f:32:c6: 0b:25:ab:1c:b2:df:1d:99:ae:87:b4:91:58:dd:57: 99:b1:c2:d3:c9:f7:4c:c8:2e:90:98:86:e2:a1:44: a5:b9:92:02:55:3f:28:67:c8:37:05:60:e4:c0:e9: 29:2f:6e:85:ff:c4:94:5e:d7:dc:7c:c2:44:50:f9: c6:58:d0:0b:59:bc:37:5e:9b:36:c4:e4:f1:11:c4: f8:8b:68:e5:45:c9:af:8a:35:9a:43:de:a8:b1:8d: 63:33:27:8b:62:84:45:6a:72:e5:ba:20:17:c0:33: 03:4f:01:51:96:7c:87:09:6d:b8:fe:56:f3:f8:dd: 13:c8:e4:f5:98:60:fb:70:4e:0f:01:49:49:dd:4e: 2a:e1:c2:aa:dc:cb:6f:6e:8b:98:39:07:83:fb:14: 85:ab:e4:44:ea:c4:33:bd:1a:e2:71:a4:c4:73:fd: 4c:cb:b5:a8:89:d6:47:11:88:d6:78:5a:93:b2:fc: 4e:bf:57:1d:e4:c7:88:5d:97:d3:9a:f1:e5:41:5f: 8d:1e:fb:4c:0f:b7:15:a3:52:ed:36:ef:64:e7:12: 86:b3:3b:2d:c5:cb:01:35:b6:19:ff:82:9c:c8:9d: 5d:81:23:06:cc:12:39:f6:36:27:75:8d:e7:4e:61: 67:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:DE:87:8C:09:3C:2F:14:22:1F:0E:28:95:C7:79:75:7B:E8:91:EB X509v3 Authority Key Identifier: keyid:72:22:C5:AB:7D:B3:DD:39:66:19:2F:AA:FE:07:F3:11:5B:0C:8E:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ciLFq32z3TlmGS-q_gfzEVsMjuU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/1c60ac-ba3f-440b-868b-ea12ef9422ec/1/ciLFq32z3TlmGS-q_gfzEVsMjuU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/1c60ac-ba3f-440b-868b-ea12ef9422ec/1/ciLFq32z3TlmGS-q_gfzEVsMjuU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5b:2d:e5:2d:34:b7:db:d8:5c:99:6f:b8:a7:d1:e8:54:02:d8: 72:68:c4:b9:6a:23:b7:f4:40:24:55:c0:8d:7e:6d:6f:c8:d7: bc:51:a1:a2:92:64:e0:6a:dc:54:44:e7:c7:4c:f1:83:00:e0: 57:5a:40:74:a7:79:8d:aa:e9:8c:d6:63:f4:80:e4:1e:37:3b: 73:d9:d6:6a:90:93:6a:c0:38:da:a3:5c:a2:62:76:3f:a0:17: 03:77:bc:b6:de:6f:f4:d0:60:9c:64:81:c2:e8:10:bd:03:a6: 77:f6:9d:f7:49:1c:13:82:4c:d4:f0:88:9e:71:da:14:c0:6c: a2:dd:0c:e3:63:9d:80:af:9d:df:ae:54:43:ff:31:40:03:18: 83:26:0e:0e:2c:09:fe:d9:ea:de:b1:e2:d3:13:fa:b5:b0:33: b2:be:65:db:3d:7a:d2:9c:49:f0:d4:97:c0:13:cb:48:dc:a1: 4e:02:7c:8f:ed:95:32:62:95:a3:db:ee:4f:b9:b7:9f:d4:e0: f6:e5:b4:20:82:a0:ea:82:0b:d7:9d:26:00:3e:92:b6:db:8b: d2:f6:8a:d9:8e:13:f8:cf:c0:5d:83:a5:ba:df:53:75:45:6a: 27:cb:c4:ff:40:04:08:d2:46:13:84:7b:59:78:2d:4a:a0:07: 2b:39:12:d6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr0ZP/7PpRN7sclaQN+aUzEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcyMjJjNWFiN2RiM2RkMzk2NjE5MmZhYWZlMDdmMzExNWIw YzhlZTUwHhcNMjUxMjA2MTYwMDUwWhcNMjUxMjA3MTYwMDUwWjAzMTEwLwYDVQQD EyhlMWRlODc4YzA5M2MyZjE0MjIxZjBlMjg5NWM3Nzk3NTdiZTg5MWViMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArVqUMYnOSUkqduY/MsYLJascst8d ma6HtJFY3VeZscLTyfdMyC6QmIbioUSluZICVT8oZ8g3BWDkwOkpL26F/8SUXtfc fMJEUPnGWNALWbw3Xps2xOTxEcT4i2jlRcmvijWaQ96osY1jMyeLYoRFanLluiAX wDMDTwFRlnyHCW24/lbz+N0TyOT1mGD7cE4PAUlJ3U4q4cKq3MtvbouYOQeD+xSF q+RE6sQzvRricaTEc/1My7WoidZHEYjWeFqTsvxOv1cd5MeIXZfTmvHlQV+NHvtM D7cVo1LtNu9k5xKGszstxcsBNbYZ/4KcyJ1dgSMGzBI59jYndY3nTmFntwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOHeh4wJPC8UIh8OKJXHeXV76JHrMB8GA1UdIwQY MBaAFHIixat9s905Zhkvqv4H8xFbDI7lMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY2lMRnEzMnozVGxtR1MtcV9nZnpFVnNNanVVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yy8xYzYwYWMtYmEzZi00NDBiLTg2OGIt ZWExMmVmOTQyMmVjLzEvY2lMRnEzMnozVGxtR1MtcV9nZnpFVnNNanVVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Yy8xYzYwYWMtYmEzZi00NDBiLTg2OGItZWExMmVmOTQyMmVj LzEvY2lMRnEzMnozVGxtR1MtcV9nZnpFVnNNanVVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWy3lLTS3 29hcmW+4p9HoVALYcmjEuWojt/RAJFXAjX5tb8jXvFGhopJk4GrcVETnx0zxgwDg V1pAdKd5jarpjNZj9IDkHjc7c9nWapCTasA42qNcomJ2P6AXA3e8tt5v9NBgnGSB wugQvQOmd/ad90kcE4JM1PCInnHaFMBsot0M42OdgK+d365UQ/8xQAMYgyYODiwJ /tnq3rHi0xP6tbAzsr5l2z160pxJ8NSXwBPLSNyhTgJ8j+2VMmKVo9vuT7m3n9Tg 9uW0IIKg6oIL150mAD6SttuL0vaK2Y4T+M/AXYOlut9TdUVqJ8vE/0AECNJGE4R7 WXgtSqAHKzkS1g== -----END CERTIFICATE-----Generated at Sat Dec 6 23:44:43 2025 by rpki-client