This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/7b2885-3cf3-4367-b64a-99e35c709486/1/cIKkpfKWFe2f7k9nURSF40z3EuA.mft File: cIKkpfKWFe2f7k9nURSF40z3EuA.mft (raw, json) Hash identifier: KcWrpenWLgYrPbTwc7SrlXBUgGAUVkFt19c/c1wEluQ= Subject key identifier: 7B:1B:D1:D7:63:61:49:02:E3:9B:69:14:01:DD:10:A2:FE:30:C6:00 Authority key identifier: 70:82:A4:A5:F2:96:15:ED:9F:EE:4F:67:51:14:85:E3:4C:F7:12:E0 Certificate issuer: /CN=7082a4a5f29615ed9fee4f67511485e34cf712e0 Certificate serial: 019AF2ADC0B0BF7A87FB0B81C66DBCFA9488 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cIKkpfKWFe2f7k9nURSF40z3EuA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/7b2885-3cf3-4367-b64a-99e35c709486/1/cIKkpfKWFe2f7k9nURSF40z3EuA.mft Manifest number: 01FD Signing time: Sat 06 Dec 2025 08:01:04 +0000 Manifest this update: Sat 06 Dec 2025 08:01:04 +0000 Manifest next update: Sun 07 Dec 2025 08:01:04 +0000 Files and hashes: 1: cIKkpfKWFe2f7k9nURSF40z3EuA.crl (hash: zBYNYz+Z+f+VfLz/UMU5tfa/u4FEAKKCKW8VOGQOwIg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/7b2885-3cf3-4367-b64a-99e35c709486/1/cIKkpfKWFe2f7k9nURSF40z3EuA.crl rsync://rpki.ripe.net/repository/DEFAULT/90/7b2885-3cf3-4367-b64a-99e35c709486/1/cIKkpfKWFe2f7k9nURSF40z3EuA.mft rsync://rpki.ripe.net/repository/DEFAULT/cIKkpfKWFe2f7k9nURSF40z3EuA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 08:01:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:ad:c0:b0:bf:7a:87:fb:0b:81:c6:6d:bc:fa:94:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7082a4a5f29615ed9fee4f67511485e34cf712e0 Validity Not Before: Dec 6 08:01:04 2025 GMT Not After : Dec 7 08:01:04 2025 GMT Subject: CN=7b1bd1d763614902e39b691401dd10a2fe30c600 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:f0:1c:f9:8d:dd:25:5a:32:d6:4a:21:6f:a4: 9e:4c:7e:2a:82:f5:17:f2:b1:e5:09:00:fe:76:59: b5:89:cb:6b:f0:36:91:b1:17:aa:26:54:53:a0:d7: 51:71:2e:b1:df:80:57:00:ed:ba:3e:0c:e3:a3:a3: d9:0a:03:e1:ea:0b:9f:da:6d:84:ee:f4:44:a6:81: 03:a1:66:24:1d:c2:f1:d3:ec:88:7f:d7:44:39:d1: 67:14:3b:73:ee:3f:19:97:1d:32:9a:e5:7f:8d:cb: 99:79:b6:31:3c:54:17:54:f7:cc:2f:52:f4:41:5c: f9:66:e3:a8:5d:d4:7d:d1:fd:73:7a:c0:9e:f9:38: d3:1f:ee:1f:a9:43:c1:9a:4e:89:84:ef:cc:bc:c5: 71:02:13:e8:98:c3:21:25:52:82:4a:38:fb:37:0e: bd:4f:1f:15:ad:c4:13:a0:5e:43:3a:31:4e:7b:85: c2:9d:9a:91:e4:6c:1b:00:a0:df:a4:df:6a:3b:a8: 12:15:fd:d0:b8:15:e0:87:60:e2:35:6c:d2:9b:02: d6:1e:a3:29:43:5a:4c:b6:7e:78:72:39:fe:b1:ef: 35:7f:9f:47:d0:0e:f0:93:72:92:3e:60:31:00:fe: f2:9f:74:82:52:57:da:21:38:f0:8e:bd:cf:83:1a: 7e:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:1B:D1:D7:63:61:49:02:E3:9B:69:14:01:DD:10:A2:FE:30:C6:00 X509v3 Authority Key Identifier: keyid:70:82:A4:A5:F2:96:15:ED:9F:EE:4F:67:51:14:85:E3:4C:F7:12:E0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cIKkpfKWFe2f7k9nURSF40z3EuA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/7b2885-3cf3-4367-b64a-99e35c709486/1/cIKkpfKWFe2f7k9nURSF40z3EuA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/90/7b2885-3cf3-4367-b64a-99e35c709486/1/cIKkpfKWFe2f7k9nURSF40z3EuA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bc:7b:8b:82:dd:55:2b:5c:5e:fc:e0:67:ac:b6:ae:e7:0d:87: 6d:2f:42:06:d9:17:2c:c4:08:48:62:a5:36:22:31:8a:8b:7f: 79:0c:30:2d:46:a9:5c:06:df:5e:09:87:20:84:3f:82:99:7d: 35:d1:4b:d5:2b:43:38:6c:57:4d:e4:45:6d:91:4a:27:02:ae: 02:fc:f0:9b:f5:bd:5a:37:79:3c:b9:25:7b:7c:75:ba:32:a6: bf:b7:06:ea:01:32:96:c6:5e:5a:02:80:68:c8:63:39:e7:a2: a0:07:6c:c6:41:be:35:20:c6:ed:2a:77:52:7e:e7:23:db:9e: 0a:8e:97:0f:01:9a:98:9e:25:26:db:77:2e:4e:15:56:f6:b8: 49:95:05:c8:62:4a:3b:42:6b:99:57:74:64:82:e3:75:40:50: 2b:e4:14:0e:a1:06:3c:03:21:c7:45:c2:71:0f:6b:ce:3f:f6: 4f:bc:f2:3b:28:5f:ef:fb:15:cc:e3:3c:66:f9:f7:70:b8:03: 40:e3:49:d0:88:91:bd:29:cd:11:c6:11:fb:b8:ee:5c:0c:55: 1f:57:51:98:88:cd:58:55:a5:ae:bf:70:51:69:da:71:c3:11: da:36:56:bf:f4:3f:3a:f7:4e:69:0e:45:f6:4f:74:6b:32:a1: fe:75:90:9c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryrcCwv3qH+wuBxm28+pSIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcwODJhNGE1ZjI5NjE1ZWQ5ZmVlNGY2NzUxMTQ4NWUzNGNm NzEyZTAwHhcNMjUxMjA2MDgwMTA0WhcNMjUxMjA3MDgwMTA0WjAzMTEwLwYDVQQD Eyg3YjFiZDFkNzYzNjE0OTAyZTM5YjY5MTQwMWRkMTBhMmZlMzBjNjAwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo/Ac+Y3dJVoy1kohb6SeTH4qgvUX 8rHlCQD+dlm1ictr8DaRsReqJlRToNdRcS6x34BXAO26Pgzjo6PZCgPh6guf2m2E 7vREpoEDoWYkHcLx0+yIf9dEOdFnFDtz7j8Zlx0ymuV/jcuZebYxPFQXVPfML1L0 QVz5ZuOoXdR90f1zesCe+TjTH+4fqUPBmk6JhO/MvMVxAhPomMMhJVKCSjj7Nw69 Tx8VrcQToF5DOjFOe4XCnZqR5GwbAKDfpN9qO6gSFf3QuBXgh2DiNWzSmwLWHqMp Q1pMtn54cjn+se81f59H0A7wk3KSPmAxAP7yn3SCUlfaITjwjr3Pgxp+eQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHsb0ddjYUkC45tpFAHdEKL+MMYAMB8GA1UdIwQY MBaAFHCCpKXylhXtn+5PZ1EUheNM9xLgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY0lLa3BmS1dGZTJmN2s5blVSU0Y0MHozRXVBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MC83YjI4ODUtM2NmMy00MzY3LWI2NGEt OTllMzVjNzA5NDg2LzEvY0lLa3BmS1dGZTJmN2s5blVSU0Y0MHozRXVBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85MC83YjI4ODUtM2NmMy00MzY3LWI2NGEtOTllMzVjNzA5NDg2 LzEvY0lLa3BmS1dGZTJmN2s5blVSU0Y0MHozRXVBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvHuLgt1V K1xe/OBnrLau5w2HbS9CBtkXLMQISGKlNiIxiot/eQwwLUapXAbfXgmHIIQ/gpl9 NdFL1StDOGxXTeRFbZFKJwKuAvzwm/W9Wjd5PLkle3x1ujKmv7cG6gEylsZeWgKA aMhjOeeioAdsxkG+NSDG7Sp3Un7nI9ueCo6XDwGamJ4lJtt3Lk4VVva4SZUFyGJK O0JrmVd0ZILjdUBQK+QUDqEGPAMhx0XCcQ9rzj/2T7zyOyhf7/sVzOM8Zvn3cLgD QONJ0IiRvSnNEcYR+7juXAxVH1dRmIjNWFWlrr9wUWnaccMR2jZWv/Q/OvdOaQ5F 9k90azKh/nWQnA== -----END CERTIFICATE-----Generated at Sat Dec 6 16:57:20 2025 by rpki-client