This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/d36409-8845-4fa3-9dbd-9834171eb7d6/1/cIPC79QTNUG2RbZheEzd1JxInFs.mft File: cIPC79QTNUG2RbZheEzd1JxInFs.mft (raw, json) Hash identifier: hxK/hy3SOA0OkEJlppwGkdWGE5q9VSk0Rt7TDlpWmmo= Subject key identifier: B2:57:29:C1:F6:BA:94:4D:DB:4E:2E:41:E6:9B:54:02:76:C8:B5:C2 Authority key identifier: 70:83:C2:EF:D4:13:35:41:B6:45:B6:61:78:4C:DD:D4:9C:48:9C:5B Certificate issuer: /CN=7083c2efd4133541b645b661784cddd49c489c5b Certificate serial: 019AF12D44B17601D89BA54A375177B6525D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cIPC79QTNUG2RbZheEzd1JxInFs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/d36409-8845-4fa3-9dbd-9834171eb7d6/1/cIPC79QTNUG2RbZheEzd1JxInFs.mft Manifest number: 01CE Signing time: Sat 06 Dec 2025 01:01:06 +0000 Manifest this update: Sat 06 Dec 2025 01:01:06 +0000 Manifest next update: Sun 07 Dec 2025 01:01:06 +0000 Files and hashes: 1: WvOZemqg-ypHTTal2SMuUFTSuok.roa (hash: 2VHKeSfOF/+IIaH05goA5gK0Fp6ZUSiibX9gEoU9FvE=) 2: cIPC79QTNUG2RbZheEzd1JxInFs.crl (hash: wl0IEWMb6tEyejIevShpgwXXwA4PuimnE2cXepODEnE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/d36409-8845-4fa3-9dbd-9834171eb7d6/1/cIPC79QTNUG2RbZheEzd1JxInFs.crl rsync://rpki.ripe.net/repository/DEFAULT/80/d36409-8845-4fa3-9dbd-9834171eb7d6/1/cIPC79QTNUG2RbZheEzd1JxInFs.mft rsync://rpki.ripe.net/repository/DEFAULT/cIPC79QTNUG2RbZheEzd1JxInFs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:01:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2d:44:b1:76:01:d8:9b:a5:4a:37:51:77:b6:52:5d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7083c2efd4133541b645b661784cddd49c489c5b Validity Not Before: Dec 6 01:01:06 2025 GMT Not After : Dec 7 01:01:06 2025 GMT Subject: CN=b25729c1f6ba944ddb4e2e41e69b540276c8b5c2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:67:87:2d:43:27:20:38:da:9c:e0:bc:65:4a: c0:d1:75:35:88:e7:16:d9:67:62:c7:40:32:ff:2e: 88:8a:a1:93:99:d1:65:b3:f8:64:28:89:e4:5b:98: 88:ac:b1:e2:c9:3b:38:bc:ef:9d:52:4e:20:25:81: 67:21:1d:da:87:29:fb:4c:b8:e3:5f:54:46:09:60: f9:bc:7b:18:05:a4:da:05:b7:ec:0f:1a:b4:a8:36: 25:05:d5:a6:eb:9a:e1:00:16:a3:0a:46:71:84:e9: aa:de:ba:06:07:d2:79:78:2d:81:5a:18:fb:2c:8b: 41:79:a6:72:e4:61:04:a6:5a:24:e4:0b:ab:62:c2: 64:c0:77:dd:6a:27:d9:6a:00:27:60:98:d5:68:21: e6:fc:48:86:ff:9f:0f:44:57:1f:f6:36:a5:db:b1: 36:63:e0:57:df:9e:ff:48:09:fa:00:a8:97:46:c4: ec:5e:f5:c0:40:6a:fe:fb:99:57:16:a3:23:b4:a3: 6d:d6:8f:56:66:40:7c:20:c4:f7:cd:fa:9c:2e:fc: d7:42:ba:7b:73:59:3e:32:37:22:95:39:67:ea:61: 9f:d5:e4:9e:da:7e:1b:8d:ae:0d:1b:db:89:7f:3c: 1d:73:6a:70:e5:49:d1:cd:7f:e9:38:95:9d:57:cf: e4:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:57:29:C1:F6:BA:94:4D:DB:4E:2E:41:E6:9B:54:02:76:C8:B5:C2 X509v3 Authority Key Identifier: keyid:70:83:C2:EF:D4:13:35:41:B6:45:B6:61:78:4C:DD:D4:9C:48:9C:5B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cIPC79QTNUG2RbZheEzd1JxInFs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/d36409-8845-4fa3-9dbd-9834171eb7d6/1/cIPC79QTNUG2RbZheEzd1JxInFs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/80/d36409-8845-4fa3-9dbd-9834171eb7d6/1/cIPC79QTNUG2RbZheEzd1JxInFs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 41:a2:da:d9:28:86:ad:ad:8f:0d:f7:cb:26:d1:f9:bf:22:e3: 94:1a:6a:4a:de:13:a0:d8:ab:da:d2:60:8e:0e:2d:55:b3:e7: d5:4c:00:e9:d0:06:8c:6c:ce:30:fc:8e:0f:be:39:93:90:0d: a1:e0:0f:8a:44:b7:8b:b5:01:de:ce:86:23:d7:61:c5:49:f1: 26:74:5e:cc:b4:d9:a9:a8:81:ea:6f:b6:c4:c6:2d:7e:0b:eb: 3c:c7:80:41:06:b2:ff:1d:88:59:1d:8b:58:71:9f:a8:97:bf: c5:28:84:82:6b:38:fe:39:9f:4e:3e:55:ea:18:65:f1:4b:e8: 9c:30:8a:a2:2d:50:92:4c:f9:bf:54:f1:79:f2:bd:1b:eb:17: 38:80:ff:e1:c3:21:a5:4e:b5:c4:52:d6:5f:fd:34:56:e2:cc: 1f:9e:c5:dd:50:1c:63:89:51:dd:b4:39:3f:5e:46:a9:d8:fe: 79:bc:51:bb:f0:da:4c:46:8b:6e:22:fe:41:81:8a:77:ef:a5: bd:16:a4:c5:4f:10:65:78:4d:c6:f8:7c:f1:de:60:7e:2c:72: 81:62:ac:89:20:88:13:fa:18:fc:ac:ae:07:a7:78:5c:2b:3b: 70:58:ac:45:e1:cc:76:10:89:c3:58:84:32:4b:74:99:34:46: cd:d9:0e:87 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLUSxdgHYm6VKN1F3tlJdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcwODNjMmVmZDQxMzM1NDFiNjQ1YjY2MTc4NGNkZGQ0OWM0 ODljNWIwHhcNMjUxMjA2MDEwMTA2WhcNMjUxMjA3MDEwMTA2WjAzMTEwLwYDVQQD EyhiMjU3MjljMWY2YmE5NDRkZGI0ZTJlNDFlNjliNTQwMjc2YzhiNWMyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuWeHLUMnIDjanOC8ZUrA0XU1iOcW 2Wdix0Ay/y6IiqGTmdFls/hkKInkW5iIrLHiyTs4vO+dUk4gJYFnIR3ahyn7TLjj X1RGCWD5vHsYBaTaBbfsDxq0qDYlBdWm65rhABajCkZxhOmq3roGB9J5eC2BWhj7 LItBeaZy5GEEplok5AurYsJkwHfdaifZagAnYJjVaCHm/EiG/58PRFcf9jal27E2 Y+BX357/SAn6AKiXRsTsXvXAQGr++5lXFqMjtKNt1o9WZkB8IMT3zfqcLvzXQrp7 c1k+MjcilTln6mGf1eSe2n4bja4NG9uJfzwdc2pw5UnRzX/pOJWdV8/kkwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLJXKcH2upRN204uQeabVAJ2yLXCMB8GA1UdIwQY MBaAFHCDwu/UEzVBtkW2YXhM3dScSJxbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY0lQQzc5UVROVUcyUmJaaGVFemQxSnhJbkZzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC9kMzY0MDktODg0NS00ZmEzLTlkYmQt OTgzNDE3MWViN2Q2LzEvY0lQQzc5UVROVUcyUmJaaGVFemQxSnhJbkZzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84MC9kMzY0MDktODg0NS00ZmEzLTlkYmQtOTgzNDE3MWViN2Q2 LzEvY0lQQzc5UVROVUcyUmJaaGVFemQxSnhJbkZzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQaLa2SiG ra2PDffLJtH5vyLjlBpqSt4ToNir2tJgjg4tVbPn1UwA6dAGjGzOMPyOD745k5AN oeAPikS3i7UB3s6GI9dhxUnxJnRezLTZqaiB6m+2xMYtfgvrPMeAQQay/x2IWR2L WHGfqJe/xSiEgms4/jmfTj5V6hhl8UvonDCKoi1Qkkz5v1TxefK9G+sXOID/4cMh pU61xFLWX/00VuLMH57F3VAcY4lR3bQ5P15Gqdj+ebxRu/DaTEaLbiL+QYGKd++l vRakxU8QZXhNxvh88d5gfixygWKsiSCIE/oY/KyuB6d4XCs7cFisReHMdhCJw1iE Mkt0mTRGzdkOhw== -----END CERTIFICATE-----Generated at Sat Dec 6 07:24:25 2025 by rpki-client