This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/706c03-7d35-4913-8a18-6e8784a7ad09/1/cIR_giGJfW6VLobqLDOauqzBMfU.mft File: cIR_giGJfW6VLobqLDOauqzBMfU.mft (raw, json) Hash identifier: wsa9zI0jzBsWtD0WabpPayMRIATnL6nMnydyjQtVXUY= Subject key identifier: E0:B0:83:18:C3:DA:F7:AA:A5:94:05:D4:6C:87:E4:DE:81:1F:22:FE Authority key identifier: 70:84:7F:82:21:89:7D:6E:95:2E:86:EA:2C:33:9A:BA:AC:C1:31:F5 Certificate issuer: /CN=70847f8221897d6e952e86ea2c339abaacc131f5 Certificate serial: 019AF12D7D873B0918F21ACB912FBC2DAB9C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cIR_giGJfW6VLobqLDOauqzBMfU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/706c03-7d35-4913-8a18-6e8784a7ad09/1/cIR_giGJfW6VLobqLDOauqzBMfU.mft Manifest number: 106B Signing time: Sat 06 Dec 2025 01:01:21 +0000 Manifest this update: Sat 06 Dec 2025 01:01:21 +0000 Manifest next update: Sun 07 Dec 2025 01:01:21 +0000 Files and hashes: 1: 349zjBrXxWXdbWEBD0TY_PcES-4.roa (hash: dTkBBehXJumOuwcY3aMRaxc4m1QE9Au6OaxONrVwqa8=) 2: FGloAOGdHctONwf864BFw9r6804.roa (hash: idNgzg92xFKVGDg8Q8+8kqcQjJU43tGKLwcMZ1BO8+8=) 3: QeA9h5gc7h5TROkBqdTQKlfxGiI.roa (hash: wvC6P2mkgiV/WDCXbKURUPeQIyZPZgtW7FSvBfEWp/8=) 4: cIR_giGJfW6VLobqLDOauqzBMfU.crl (hash: 9THU37a7uKShTTFBE7XqyOHEyvoqTMCpb+pyeOsDilw=) 5: f4DXZiMB_Ff_0JwzJIxf0LcmHB4.roa (hash: BYRfPeQZzgZNAMB4knpfUfsNVjUgJWJmqeqw3IISPlY=) 6: rguLiIijQORjnghvpZcGDmu1SjU.roa (hash: JNesrlv42ZJgaFQwOxaZT3TmKgM6sVVqVrh2EttTKxs=) 7: zWJS9qIiKhPDTGBp07EnN-zc5Ok.roa (hash: UIbGdiKmqLamnBzWNetbuRIAxAE+Pp02kC9Gg2VRxdw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/706c03-7d35-4913-8a18-6e8784a7ad09/1/cIR_giGJfW6VLobqLDOauqzBMfU.crl rsync://rpki.ripe.net/repository/DEFAULT/a3/706c03-7d35-4913-8a18-6e8784a7ad09/1/cIR_giGJfW6VLobqLDOauqzBMfU.mft rsync://rpki.ripe.net/repository/DEFAULT/cIR_giGJfW6VLobqLDOauqzBMfU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:01:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2d:7d:87:3b:09:18:f2:1a:cb:91:2f:bc:2d:ab:9c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=70847f8221897d6e952e86ea2c339abaacc131f5 Validity Not Before: Dec 6 01:01:21 2025 GMT Not After : Dec 7 01:01:21 2025 GMT Subject: CN=e0b08318c3daf7aaa59405d46c87e4de811f22fe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:8e:15:c5:21:9b:f5:f1:b1:e1:1c:15:71:88: 30:3a:a1:f2:0b:87:28:d7:c7:ae:fc:b8:43:da:61: e4:76:24:d0:f1:dc:c2:8e:a6:5b:b1:e6:78:b1:f8: 75:33:ca:1d:a8:e5:8e:69:85:87:2d:e4:a9:92:a2: c2:79:8f:a8:94:67:7f:d7:b3:43:aa:92:1d:6e:4a: 01:bf:a6:3a:c9:cb:97:53:f2:c6:91:5d:5b:54:79: fc:06:ea:21:3d:d5:86:bc:d5:0a:fd:49:a1:69:35: 45:a4:c1:d3:91:db:81:5d:67:6c:98:0e:e5:e7:79: e6:fe:0a:9a:43:16:77:94:5a:60:64:25:6c:d5:88: ed:f6:f3:fb:2c:f8:6e:e5:b2:b8:28:c2:6b:80:47: 4d:6d:9a:a2:07:ae:1d:ba:14:ca:6d:ef:43:24:2b: 39:c6:a6:22:21:4b:06:02:f5:da:c2:9f:d4:5b:c2: 85:77:4a:f6:db:b4:58:53:7a:8e:db:ea:bb:61:5b: e9:a6:ca:f3:98:4b:92:30:f1:94:30:97:fa:9b:5f: b6:9d:58:e7:b7:fa:fd:56:8a:8e:de:c7:c6:d0:6d: 1c:e6:9a:8a:b7:b9:77:45:49:a5:2f:21:f1:6f:18: a6:23:a1:40:d8:b9:98:44:ef:af:55:7f:8f:c9:7f: 02:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:B0:83:18:C3:DA:F7:AA:A5:94:05:D4:6C:87:E4:DE:81:1F:22:FE X509v3 Authority Key Identifier: keyid:70:84:7F:82:21:89:7D:6E:95:2E:86:EA:2C:33:9A:BA:AC:C1:31:F5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cIR_giGJfW6VLobqLDOauqzBMfU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/706c03-7d35-4913-8a18-6e8784a7ad09/1/cIR_giGJfW6VLobqLDOauqzBMfU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/706c03-7d35-4913-8a18-6e8784a7ad09/1/cIR_giGJfW6VLobqLDOauqzBMfU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bc:79:54:5e:0c:a3:00:93:1a:5c:a5:b2:f6:d2:ea:97:1f:0e: 35:48:0d:1d:46:3f:12:43:ec:85:69:a5:df:2a:3f:a0:37:dc: 91:a9:26:8f:62:43:14:7c:9a:21:ce:a1:50:3f:ee:cf:6b:e8: 03:9f:90:d4:31:27:57:82:0b:74:f4:a0:44:65:72:a8:e8:4d: 60:3b:f0:8f:34:41:8a:d7:40:46:73:ce:c6:f9:5a:ca:c2:f5: a5:a6:0b:2e:02:aa:16:34:6e:c2:d3:9b:43:c5:6b:a6:bd:9d: 0a:77:66:14:dd:c8:fb:b5:e3:78:63:26:37:5c:a4:ee:c7:53: 4e:9a:82:28:22:ac:12:6b:0b:41:f0:85:6b:38:01:8d:f7:18: eb:a7:d1:aa:cb:fc:b0:28:82:02:75:7d:63:61:c5:52:d3:af: 3c:46:8c:cf:12:dc:a9:17:4b:6b:6c:db:ba:ee:b8:88:83:47: 6f:28:4a:6d:0d:0a:08:59:21:29:bc:8a:95:2a:05:4d:48:b2: 22:51:20:77:8b:89:2c:cc:a5:e5:61:0d:e4:db:b6:1c:f0:e3: 43:ef:b0:a3:ee:a9:47:43:a1:9d:42:b3:6b:73:9a:d1:34:c4: 9b:f6:a6:c1:3d:4a:0e:9e:9d:36:7f:55:e7:fa:3c:0d:72:7b: 89:8f:88:b5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLX2HOwkY8hrLkS+8LaucMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcwODQ3ZjgyMjE4OTdkNmU5NTJlODZlYTJjMzM5YWJhYWNj MTMxZjUwHhcNMjUxMjA2MDEwMTIxWhcNMjUxMjA3MDEwMTIxWjAzMTEwLwYDVQQD EyhlMGIwODMxOGMzZGFmN2FhYTU5NDA1ZDQ2Yzg3ZTRkZTgxMWYyMmZlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvI4VxSGb9fGx4RwVcYgwOqHyC4co 18eu/LhD2mHkdiTQ8dzCjqZbseZ4sfh1M8odqOWOaYWHLeSpkqLCeY+olGd/17ND qpIdbkoBv6Y6ycuXU/LGkV1bVHn8BuohPdWGvNUK/UmhaTVFpMHTkduBXWdsmA7l 53nm/gqaQxZ3lFpgZCVs1Yjt9vP7LPhu5bK4KMJrgEdNbZqiB64duhTKbe9DJCs5 xqYiIUsGAvXawp/UW8KFd0r227RYU3qO2+q7YVvppsrzmEuSMPGUMJf6m1+2nVjn t/r9VoqO3sfG0G0c5pqKt7l3RUmlLyHxbximI6FA2LmYRO+vVX+PyX8C0QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOCwgxjD2veqpZQF1GyH5N6BHyL+MB8GA1UdIwQY MBaAFHCEf4IhiX1ulS6G6iwzmrqswTH1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY0lSX2dpR0pmVzZWTG9icUxET2F1cXpCTWZVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMy83MDZjMDMtN2QzNS00OTEzLThhMTgt NmU4Nzg0YTdhZDA5LzEvY0lSX2dpR0pmVzZWTG9icUxET2F1cXpCTWZVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMy83MDZjMDMtN2QzNS00OTEzLThhMTgtNmU4Nzg0YTdhZDA5 LzEvY0lSX2dpR0pmVzZWTG9icUxET2F1cXpCTWZVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvHlUXgyj AJMaXKWy9tLqlx8ONUgNHUY/EkPshWml3yo/oDfckakmj2JDFHyaIc6hUD/uz2vo A5+Q1DEnV4ILdPSgRGVyqOhNYDvwjzRBitdARnPOxvlaysL1paYLLgKqFjRuwtOb Q8Vrpr2dCndmFN3I+7XjeGMmN1yk7sdTTpqCKCKsEmsLQfCFazgBjfcY66fRqsv8 sCiCAnV9Y2HFUtOvPEaMzxLcqRdLa2zbuu64iINHbyhKbQ0KCFkhKbyKlSoFTUiy IlEgd4uJLMyl5WEN5Nu2HPDjQ++wo+6pR0OhnUKza3Oa0TTEm/amwT1KDp6dNn9V 5/o8DXJ7iY+ItQ== -----END CERTIFICATE-----Generated at Sat Dec 6 07:22:16 2025 by rpki-client