This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/ad18a0-b32c-4fcb-be9c-1caf0611374d/1/CIGcJ6W-PS2yIrBWN0R-1ugySHM.mft File: CIGcJ6W-PS2yIrBWN0R-1ugySHM.mft (raw, json) Hash identifier: 2QzK5BQXGJ1Fo1iWMcUW1GYygx5VX3Xp5RdTS03+FBw= Subject key identifier: F8:FE:B9:52:4D:8A:09:84:8C:FC:D1:F9:91:43:48:9C:76:41:16:33 Authority key identifier: 08:81:9C:27:A5:BE:3D:2D:B2:22:B0:56:37:44:7E:D6:E8:32:48:73 Certificate issuer: /CN=08819c27a5be3d2db222b05637447ed6e8324873 Certificate serial: 019AF31CBC50A70A9C12E7DF1CB50E8F6010 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CIGcJ6W-PS2yIrBWN0R-1ugySHM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/ad18a0-b32c-4fcb-be9c-1caf0611374d/1/CIGcJ6W-PS2yIrBWN0R-1ugySHM.mft Manifest number: 14A3 Signing time: Sat 06 Dec 2025 10:02:17 +0000 Manifest this update: Sat 06 Dec 2025 10:02:17 +0000 Manifest next update: Sun 07 Dec 2025 10:02:17 +0000 Files and hashes: 1: CIGcJ6W-PS2yIrBWN0R-1ugySHM.crl (hash: wLO73pcjeCY+bf6BvZl6SYsLyJoHUWaBpx8zho/dYG0=) 2: cwmq1wJ6AkXK6Pc0pO2YSXjmyM4.roa (hash: lzijLPFGvwLgwXEhuBP2K7HD20X3oCBqeudRqI1ymvc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/ad18a0-b32c-4fcb-be9c-1caf0611374d/1/CIGcJ6W-PS2yIrBWN0R-1ugySHM.crl rsync://rpki.ripe.net/repository/DEFAULT/bc/ad18a0-b32c-4fcb-be9c-1caf0611374d/1/CIGcJ6W-PS2yIrBWN0R-1ugySHM.mft rsync://rpki.ripe.net/repository/DEFAULT/CIGcJ6W-PS2yIrBWN0R-1ugySHM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 10:02:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1c:bc:50:a7:0a:9c:12:e7:df:1c:b5:0e:8f:60:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08819c27a5be3d2db222b05637447ed6e8324873 Validity Not Before: Dec 6 10:02:17 2025 GMT Not After : Dec 7 10:02:17 2025 GMT Subject: CN=f8feb9524d8a09848cfcd1f99143489c76411633 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:d0:84:be:6f:c8:17:2a:5c:77:68:f7:86:c2: b2:20:7c:12:d0:d5:52:02:4d:11:8d:e9:f4:4b:6b: 15:8c:54:62:8e:66:78:4c:c7:7a:1a:d4:50:fa:60: 69:47:c7:58:24:75:b5:fb:cd:04:45:45:95:a4:f4: e8:d2:22:b0:f8:cd:64:47:2a:ad:83:bf:d0:3c:81: fe:bb:95:ea:af:dd:10:76:4d:0d:62:a9:4f:0a:6d: 17:6f:23:2c:1d:84:9b:21:97:c9:cd:00:51:1f:f7: d3:5b:bc:f9:9f:45:f3:dd:cd:b4:0e:01:d2:a7:a6: 6d:84:9f:c5:3f:dd:06:cf:57:f6:38:92:b0:71:c4: 24:5d:41:14:63:c1:aa:72:01:8a:fe:a6:01:02:bf: c2:f2:89:4d:e5:3c:bd:e4:51:bc:e5:8c:14:45:bc: ff:78:d0:4f:e9:bb:5d:da:78:6e:80:d8:7e:96:5c: da:e7:14:8d:14:3a:e1:5e:be:f9:0a:fa:22:ad:52: 1e:72:fd:cd:b7:50:b3:eb:aa:26:ec:25:b4:63:4a: b6:2e:5e:79:2f:5d:40:02:d3:49:e9:26:40:e6:71: d7:59:88:b6:91:68:79:f6:31:74:75:1a:0d:c6:e2: 7a:0d:06:ad:61:6c:40:72:c1:04:f3:c2:73:16:bf: 59:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:FE:B9:52:4D:8A:09:84:8C:FC:D1:F9:91:43:48:9C:76:41:16:33 X509v3 Authority Key Identifier: keyid:08:81:9C:27:A5:BE:3D:2D:B2:22:B0:56:37:44:7E:D6:E8:32:48:73 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CIGcJ6W-PS2yIrBWN0R-1ugySHM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/ad18a0-b32c-4fcb-be9c-1caf0611374d/1/CIGcJ6W-PS2yIrBWN0R-1ugySHM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/ad18a0-b32c-4fcb-be9c-1caf0611374d/1/CIGcJ6W-PS2yIrBWN0R-1ugySHM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4e:b9:9f:38:ac:80:fe:6e:ee:47:77:31:15:43:1c:06:70:21: fc:88:97:64:65:c2:42:19:4c:38:ec:03:bc:ce:5e:4d:51:05: 77:f7:cc:bf:9c:e2:c1:9c:66:dd:c2:64:ea:db:c1:40:39:9a: 1f:eb:d7:c7:5a:75:af:05:02:ac:db:e5:40:98:ba:bb:4e:2b: 04:08:56:7b:6a:e8:23:4c:08:47:22:d8:23:c9:74:33:e5:68: ac:ce:4d:6d:77:2f:44:a7:34:99:2d:42:10:da:77:9e:1b:00: 21:af:f0:34:df:47:8c:4e:8b:31:ec:20:0b:0c:7f:1f:48:99: 0a:79:d9:f0:c5:7a:a3:ab:fa:1e:0a:42:86:9c:2b:39:ed:40: 42:f1:31:89:30:1b:72:8e:10:c0:3b:18:52:fc:c9:b0:0e:30: c5:e0:bc:1a:4b:7a:45:ef:62:f9:fa:9a:27:3a:bb:eb:ad:5f: a2:c2:1d:d2:84:ee:4b:5b:7a:2e:6c:a9:4b:d2:3f:b6:b3:5e: e5:82:de:fe:f1:7e:d0:99:52:7d:07:47:9e:d7:19:9e:1d:b9: 51:d0:1f:3f:32:3d:a0:af:18:2d:a6:9c:f0:50:c9:cb:e0:60: bb:c9:b4:fb:93:a3:3b:6d:4e:c7:4f:b0:f6:07:fa:6a:98:50: f3:3e:41:ce -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzHLxQpwqcEuffHLUOj2AQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA4ODE5YzI3YTViZTNkMmRiMjIyYjA1NjM3NDQ3ZWQ2ZTgz MjQ4NzMwHhcNMjUxMjA2MTAwMjE3WhcNMjUxMjA3MTAwMjE3WjAzMTEwLwYDVQQD EyhmOGZlYjk1MjRkOGEwOTg0OGNmY2QxZjk5MTQzNDg5Yzc2NDExNjMzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAntCEvm/IFypcd2j3hsKyIHwS0NVS Ak0Rjen0S2sVjFRijmZ4TMd6GtRQ+mBpR8dYJHW1+80ERUWVpPTo0iKw+M1kRyqt g7/QPIH+u5Xqr90Qdk0NYqlPCm0XbyMsHYSbIZfJzQBRH/fTW7z5n0Xz3c20DgHS p6ZthJ/FP90Gz1f2OJKwccQkXUEUY8GqcgGK/qYBAr/C8olN5Ty95FG85YwURbz/ eNBP6btd2nhugNh+llza5xSNFDrhXr75CvoirVIecv3Nt1Cz66om7CW0Y0q2Ll55 L11AAtNJ6SZA5nHXWYi2kWh59jF0dRoNxuJ6DQatYWxAcsEE88JzFr9ZowIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPj+uVJNigmEjPzR+ZFDSJx2QRYzMB8GA1UdIwQY MBaAFAiBnCelvj0tsiKwVjdEftboMkhzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ0lHY0o2Vy1QUzJ5SXJCV04wUi0xdWd5U0hNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYy9hZDE4YTAtYjMyYy00ZmNiLWJlOWMt MWNhZjA2MTEzNzRkLzEvQ0lHY0o2Vy1QUzJ5SXJCV04wUi0xdWd5U0hNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYy9hZDE4YTAtYjMyYy00ZmNiLWJlOWMtMWNhZjA2MTEzNzRk LzEvQ0lHY0o2Vy1QUzJ5SXJCV04wUi0xdWd5U0hNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATrmfOKyA /m7uR3cxFUMcBnAh/IiXZGXCQhlMOOwDvM5eTVEFd/fMv5ziwZxm3cJk6tvBQDma H+vXx1p1rwUCrNvlQJi6u04rBAhWe2roI0wIRyLYI8l0M+VorM5NbXcvRKc0mS1C ENp3nhsAIa/wNN9HjE6LMewgCwx/H0iZCnnZ8MV6o6v6HgpChpwrOe1AQvExiTAb co4QwDsYUvzJsA4wxeC8Gkt6Re9i+fqaJzq7661fosId0oTuS1t6LmypS9I/trNe 5YLe/vF+0JlSfQdHntcZnh25UdAfPzI9oK8YLaac8FDJy+Bgu8m0+5OjO21Ox0+w 9gf6aphQ8z5Bzg== -----END CERTIFICATE-----Generated at Sat Dec 6 19:19:19 2025 by rpki-client