This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/6ca980-2ce1-4b7c-8321-e5d9a6e48746/1/CiKtYJcp-O8REq28FY9REhWw854.mft File: CiKtYJcp-O8REq28FY9REhWw854.mft (raw, json) Hash identifier: 5GiyXfM8I4uMzqI83zoqnONI5CuCKWDnFgNL3VQ/iPU= Subject key identifier: 0E:F9:A9:AC:D7:71:66:23:C2:2D:74:78:94:0F:31:58:8B:40:50:B0 Authority key identifier: 0A:22:AD:60:97:29:F8:EF:11:12:AD:BC:15:8F:51:12:15:B0:F3:9E Certificate issuer: /CN=0a22ad609729f8ef1112adbc158f511215b0f39e Certificate serial: 019B3BD94AF841D4047ECD8EEC19EC0DAB9B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CiKtYJcp-O8REq28FY9REhWw854.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/6ca980-2ce1-4b7c-8321-e5d9a6e48746/1/CiKtYJcp-O8REq28FY9REhWw854.mft Manifest number: 0605 Signing time: Sat 20 Dec 2025 13:00:54 +0000 Manifest this update: Sat 20 Dec 2025 13:00:54 +0000 Manifest next update: Sun 21 Dec 2025 13:00:54 +0000 Files and hashes: 1: CiKtYJcp-O8REq28FY9REhWw854.crl (hash: 9ByJ3cwTBtDID+7g7iCcPh9KqKS8+oILaEW+kqRGJm0=) 2: Xl6alk1_LCqOIwPT8NdYHl31F1Q.roa (hash: mvzboSXfNbv0bSrCewCz7JJVKGgAnpVL6t7bOyNmT+s=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/6ca980-2ce1-4b7c-8321-e5d9a6e48746/1/CiKtYJcp-O8REq28FY9REhWw854.crl rsync://rpki.ripe.net/repository/DEFAULT/7e/6ca980-2ce1-4b7c-8321-e5d9a6e48746/1/CiKtYJcp-O8REq28FY9REhWw854.mft rsync://rpki.ripe.net/repository/DEFAULT/CiKtYJcp-O8REq28FY9REhWw854.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 13:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3b:d9:4a:f8:41:d4:04:7e:cd:8e:ec:19:ec:0d:ab:9b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0a22ad609729f8ef1112adbc158f511215b0f39e Validity Not Before: Dec 20 13:00:54 2025 GMT Not After : Dec 21 13:00:54 2025 GMT Subject: CN=0ef9a9acd7716623c22d7478940f31588b4050b0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:d4:db:b0:68:e2:17:ee:f2:c0:ce:d0:96:e2: 75:33:8b:98:c1:99:df:f8:e3:e2:bc:fb:fd:83:3c: 90:de:6b:ec:32:a4:70:d5:19:d9:b3:47:22:1f:3a: 6a:7c:20:59:84:72:bd:81:f2:64:e4:3c:f1:3a:3a: 97:af:ff:94:4e:61:0c:65:98:af:11:68:6a:46:14: 9f:10:ed:e0:dc:06:9c:90:70:0a:70:24:87:4f:2f: eb:2d:c6:98:9a:73:82:9b:ae:aa:d8:87:a2:54:2c: fe:06:07:aa:13:f6:68:68:6d:c3:1a:89:17:36:40: 79:bc:09:bf:ad:c6:41:31:e0:89:76:94:25:07:69: ba:10:30:f0:6d:b5:ab:1d:4d:5a:72:97:ee:b7:9a: 93:d4:cb:75:27:25:7a:75:5c:75:49:af:ea:43:5e: e9:3b:fe:72:70:35:be:9d:4e:a1:e1:a0:24:b6:9f: 3c:46:24:c7:c4:65:3b:26:50:88:e9:48:89:52:e2: 48:28:24:2b:fb:9b:30:c8:62:1d:52:5d:82:bb:41: 59:03:b6:8e:c4:6f:cd:19:ce:80:02:8c:6a:28:0c: bf:c3:4e:c1:e1:7a:98:02:51:b1:20:8a:39:ba:3f: 53:a3:58:34:e6:22:fa:27:ef:71:19:6b:e2:f5:9d: 0e:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:F9:A9:AC:D7:71:66:23:C2:2D:74:78:94:0F:31:58:8B:40:50:B0 X509v3 Authority Key Identifier: keyid:0A:22:AD:60:97:29:F8:EF:11:12:AD:BC:15:8F:51:12:15:B0:F3:9E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CiKtYJcp-O8REq28FY9REhWw854.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/6ca980-2ce1-4b7c-8321-e5d9a6e48746/1/CiKtYJcp-O8REq28FY9REhWw854.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/6ca980-2ce1-4b7c-8321-e5d9a6e48746/1/CiKtYJcp-O8REq28FY9REhWw854.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 93:de:9d:41:37:31:b9:85:ef:cd:8e:1e:d5:5a:a6:92:04:3e: 6e:22:c6:a6:66:e1:78:43:a4:ca:c6:70:ed:b8:30:13:5f:ff: 5c:bb:05:fd:2e:3c:4e:d6:be:b3:a9:78:11:52:b7:5b:f8:b2: e5:91:df:2a:33:c9:85:09:a3:77:0a:cf:96:9a:20:d6:e3:fc: cc:17:89:26:cd:33:17:b4:08:f0:f9:62:bf:29:13:50:25:4f: b3:8c:d0:5a:35:88:03:75:3c:d8:34:72:78:50:df:5a:a4:07: e9:35:45:cd:44:e2:77:3d:20:a1:4b:a4:24:fe:64:5a:ec:60: d5:86:13:72:49:36:6c:4a:34:98:f5:0c:b6:b7:2e:5d:c5:0f: 4a:07:fa:20:30:b4:2a:bb:36:67:e9:65:26:4b:b9:6b:61:05: 37:e8:18:72:22:cb:39:e9:45:de:eb:7c:db:17:ad:40:7b:bd: 1e:9f:b4:a3:14:4c:ab:25:9b:3c:1e:2d:de:34:18:13:2d:60: 8b:2f:93:01:8c:11:79:d1:c5:99:19:ef:1c:5d:16:2a:7e:2a: 15:a6:cc:16:72:2a:67:a4:b0:10:c6:74:32:70:eb:d9:0f:d8: 0c:27:47:f9:af:e9:b5:88:8f:5f:9d:3a:f9:52:53:fb:9a:5a: 06:f8:16:f5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs72Ur4QdQEfs2O7BnsDaubMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBhMjJhZDYwOTcyOWY4ZWYxMTEyYWRiYzE1OGY1MTEyMTVi MGYzOWUwHhcNMjUxMjIwMTMwMDU0WhcNMjUxMjIxMTMwMDU0WjAzMTEwLwYDVQQD EygwZWY5YTlhY2Q3NzE2NjIzYzIyZDc0Nzg5NDBmMzE1ODhiNDA1MGIwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApdTbsGjiF+7ywM7QluJ1M4uYwZnf +OPivPv9gzyQ3mvsMqRw1RnZs0ciHzpqfCBZhHK9gfJk5DzxOjqXr/+UTmEMZZiv EWhqRhSfEO3g3AackHAKcCSHTy/rLcaYmnOCm66q2IeiVCz+BgeqE/ZoaG3DGokX NkB5vAm/rcZBMeCJdpQlB2m6EDDwbbWrHU1acpfut5qT1Mt1JyV6dVx1Sa/qQ17p O/5ycDW+nU6h4aAktp88RiTHxGU7JlCI6UiJUuJIKCQr+5swyGIdUl2Cu0FZA7aO xG/NGc6AAoxqKAy/w07B4XqYAlGxIIo5uj9To1g05iL6J+9xGWvi9Z0OBQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFA75qazXcWYjwi10eJQPMViLQFCwMB8GA1UdIwQY MBaAFAoirWCXKfjvERKtvBWPURIVsPOeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ2lLdFlKY3AtTzhSRXEyOEZZOVJFaFd3ODU0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZS82Y2E5ODAtMmNlMS00YjdjLTgzMjEt ZTVkOWE2ZTQ4NzQ2LzEvQ2lLdFlKY3AtTzhSRXEyOEZZOVJFaFd3ODU0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83ZS82Y2E5ODAtMmNlMS00YjdjLTgzMjEtZTVkOWE2ZTQ4NzQ2 LzEvQ2lLdFlKY3AtTzhSRXEyOEZZOVJFaFd3ODU0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAk96dQTcx uYXvzY4e1VqmkgQ+biLGpmbheEOkysZw7bgwE1//XLsF/S48Tta+s6l4EVK3W/iy 5ZHfKjPJhQmjdwrPlpog1uP8zBeJJs0zF7QI8PlivykTUCVPs4zQWjWIA3U82DRy eFDfWqQH6TVFzUTidz0goUukJP5kWuxg1YYTckk2bEo0mPUMtrcuXcUPSgf6IDC0 Krs2Z+llJku5a2EFN+gYciLLOelF3ut82xetQHu9Hp+0oxRMqyWbPB4t3jQYEy1g iy+TAYwRedHFmRnvHF0WKn4qFabMFnIqZ6SwEMZ0MnDr2Q/YDCdH+a/ptYiPX506 +VJT+5paBvgW9Q== -----END CERTIFICATE-----Generated at Sat Dec 20 20:28:01 2025 by rpki-client