This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/08d44c-f102-4b70-8db0-72abeefeda4a/1/cIAppnQXfv2ZJSJ1CUYYwMnPvR0.mft File: cIAppnQXfv2ZJSJ1CUYYwMnPvR0.mft (raw, json) Hash identifier: woplLAzzinYm1DmHl3b3BM9G+Hb579JaR+T3TFMxTa4= Subject key identifier: 25:D7:71:F4:70:BC:4A:C9:BD:D9:1B:DC:17:EA:43:62:C4:AE:BC:CB Authority key identifier: 70:80:29:A6:74:17:7E:FD:99:25:22:75:09:46:18:C0:C9:CF:BD:1D Certificate issuer: /CN=708029a674177efd99252275094618c0c9cfbd1d Certificate serial: 019AF1647E22BB394B63497E43E6ED779D64 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cIAppnQXfv2ZJSJ1CUYYwMnPvR0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/08d44c-f102-4b70-8db0-72abeefeda4a/1/cIAppnQXfv2ZJSJ1CUYYwMnPvR0.mft Manifest number: 072C Signing time: Sat 06 Dec 2025 02:01:26 +0000 Manifest this update: Sat 06 Dec 2025 02:01:26 +0000 Manifest next update: Sun 07 Dec 2025 02:01:26 +0000 Files and hashes: 1: cIAppnQXfv2ZJSJ1CUYYwMnPvR0.crl (hash: UudIWhW7zPWf7Ld1mjzdE5OkPRSRif7TEpWvIhajaKs=) 2: gf0Xy6qbBLzQzsLjIlFfh_7JZjk.roa (hash: Ah/uhPrNkgzcI+es99gluPPaRScN93x4JTQmt+pb9V0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/08d44c-f102-4b70-8db0-72abeefeda4a/1/cIAppnQXfv2ZJSJ1CUYYwMnPvR0.crl rsync://rpki.ripe.net/repository/DEFAULT/8d/08d44c-f102-4b70-8db0-72abeefeda4a/1/cIAppnQXfv2ZJSJ1CUYYwMnPvR0.mft rsync://rpki.ripe.net/repository/DEFAULT/cIAppnQXfv2ZJSJ1CUYYwMnPvR0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:64:7e:22:bb:39:4b:63:49:7e:43:e6:ed:77:9d:64 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=708029a674177efd99252275094618c0c9cfbd1d Validity Not Before: Dec 6 02:01:26 2025 GMT Not After : Dec 7 02:01:26 2025 GMT Subject: CN=25d771f470bc4ac9bdd91bdc17ea4362c4aebccb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:00:7c:85:64:39:1d:96:56:b7:e3:02:f8:ed: 15:33:77:c6:23:6c:6b:e2:af:4f:bf:51:70:1e:a6: 28:06:04:21:6f:8f:e6:7b:8f:91:78:67:cc:68:16: b2:20:a9:49:fe:b7:a3:a2:89:d5:25:0a:19:10:4e: 4c:3c:be:d2:16:e2:61:b0:c3:d9:b7:e1:22:3e:e8: e7:ad:d5:3b:ad:09:5e:c7:e6:2c:87:a2:c7:ee:02: 1a:4e:d9:4c:44:b3:a6:f5:d8:b1:cb:f7:c4:e8:74: 52:42:aa:e0:46:b1:82:a1:34:99:1f:6e:49:cc:96: c0:5b:de:0b:ed:7e:99:ee:87:c6:4f:74:d2:07:cd: 73:e6:30:aa:c3:2b:e8:7f:d3:62:42:88:4a:eb:89: ef:1c:eb:7a:ae:72:c0:69:62:c6:26:44:01:a7:d9: fc:44:d2:04:79:f6:1b:79:12:d3:8b:ef:b1:40:14: a5:4c:c3:ae:c1:a5:53:f7:54:d0:cd:dd:e4:60:56: 7b:3a:cf:bb:40:58:29:2c:36:9a:a8:89:d8:1b:22: 8c:d7:00:b9:36:a8:2d:41:e0:86:fc:d7:18:9e:e7: 2d:ee:8d:ba:c2:96:11:02:4e:aa:44:f2:d7:0d:5b: d5:ce:d8:17:f5:88:9c:08:e0:30:ea:89:45:ce:01: da:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:D7:71:F4:70:BC:4A:C9:BD:D9:1B:DC:17:EA:43:62:C4:AE:BC:CB X509v3 Authority Key Identifier: keyid:70:80:29:A6:74:17:7E:FD:99:25:22:75:09:46:18:C0:C9:CF:BD:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cIAppnQXfv2ZJSJ1CUYYwMnPvR0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/08d44c-f102-4b70-8db0-72abeefeda4a/1/cIAppnQXfv2ZJSJ1CUYYwMnPvR0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/08d44c-f102-4b70-8db0-72abeefeda4a/1/cIAppnQXfv2ZJSJ1CUYYwMnPvR0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a5:a3:3d:27:02:d0:3d:0a:18:2e:25:38:15:c1:73:b7:84:7b: cc:11:18:60:7d:44:42:4c:5c:9d:47:5e:3c:88:30:a3:bf:d8: 1d:c9:66:0f:aa:b6:0c:85:41:c0:09:1e:34:f8:2c:e5:47:43: 06:f1:4b:98:eb:06:a9:c2:fa:7b:8c:55:86:ed:ce:c1:e7:41: 71:c9:e2:3b:b5:d3:96:60:c7:86:cc:d4:f8:6c:0d:cb:24:ec: 3b:14:5f:0b:10:96:11:a2:5b:54:86:cd:82:fa:ab:2f:77:26: cf:a7:22:14:a9:71:8c:67:6e:2e:39:2f:18:fd:6f:29:20:d5: 30:42:1f:28:09:70:ce:d2:9b:77:c5:7e:e7:b6:84:5e:eb:e3: 1d:b4:6a:c7:72:f6:34:d9:00:60:ed:dd:5b:4b:12:97:02:b6: 81:48:e2:20:a6:5f:ae:46:2d:5c:d6:9f:51:82:75:ad:3d:88: 1b:eb:7c:f9:84:15:c6:1e:eb:29:b4:ce:72:83:23:a2:b8:de: 8b:ba:83:cc:b1:f0:c2:42:91:d6:51:44:65:10:da:27:f2:77: e1:8e:77:64:4f:76:e6:dc:08:ef:8d:d2:78:21:b5:08:99:46: be:16:20:a9:23:6e:cb:74:c3:90:23:6d:29:38:6e:4d:f5:6e: 88:1c:75:be -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxZH4iuzlLY0l+Q+btd51kMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcwODAyOWE2NzQxNzdlZmQ5OTI1MjI3NTA5NDYxOGMwYzlj ZmJkMWQwHhcNMjUxMjA2MDIwMTI2WhcNMjUxMjA3MDIwMTI2WjAzMTEwLwYDVQQD EygyNWQ3NzFmNDcwYmM0YWM5YmRkOTFiZGMxN2VhNDM2MmM0YWViY2NiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlwB8hWQ5HZZWt+MC+O0VM3fGI2xr 4q9Pv1FwHqYoBgQhb4/me4+ReGfMaBayIKlJ/rejoonVJQoZEE5MPL7SFuJhsMPZ t+EiPujnrdU7rQlex+Ysh6LH7gIaTtlMRLOm9dixy/fE6HRSQqrgRrGCoTSZH25J zJbAW94L7X6Z7ofGT3TSB81z5jCqwyvof9NiQohK64nvHOt6rnLAaWLGJkQBp9n8 RNIEefYbeRLTi++xQBSlTMOuwaVT91TQzd3kYFZ7Os+7QFgpLDaaqInYGyKM1wC5 NqgtQeCG/NcYnuct7o26wpYRAk6qRPLXDVvVztgX9YicCOAw6olFzgHa1wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCXXcfRwvErJvdkb3BfqQ2LErrzLMB8GA1UdIwQY MBaAFHCAKaZ0F379mSUidQlGGMDJz70dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY0lBcHBuUVhmdjJaSlNKMUNVWVl3TW5QdlIwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZC8wOGQ0NGMtZjEwMi00YjcwLThkYjAt NzJhYmVlZmVkYTRhLzEvY0lBcHBuUVhmdjJaSlNKMUNVWVl3TW5QdlIwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZC8wOGQ0NGMtZjEwMi00YjcwLThkYjAtNzJhYmVlZmVkYTRh LzEvY0lBcHBuUVhmdjJaSlNKMUNVWVl3TW5QdlIwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApaM9JwLQ PQoYLiU4FcFzt4R7zBEYYH1EQkxcnUdePIgwo7/YHclmD6q2DIVBwAkeNPgs5UdD BvFLmOsGqcL6e4xVhu3OwedBccniO7XTlmDHhszU+GwNyyTsOxRfCxCWEaJbVIbN gvqrL3cmz6ciFKlxjGduLjkvGP1vKSDVMEIfKAlwztKbd8V+57aEXuvjHbRqx3L2 NNkAYO3dW0sSlwK2gUjiIKZfrkYtXNafUYJ1rT2IG+t8+YQVxh7rKbTOcoMjorje i7qDzLHwwkKR1lFEZRDaJ/J34Y53ZE925twI743SeCG1CJlGvhYgqSNuy3TDkCNt KThuTfVuiBx1vg== -----END CERTIFICATE-----Generated at Sat Dec 6 09:52:41 2025 by rpki-client