This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/04ecc0-663c-460e-920d-332ee5425c7a/1/CgIUob8dOv0t1msjqZcxBrXTFso.mft File: CgIUob8dOv0t1msjqZcxBrXTFso.mft (raw, json) Hash identifier: vBLLkdeMDl+ZJ0ACy6+eqAsq5igSPmpKyNNvbn4u4QY= Subject key identifier: 3F:E8:83:EE:DB:A0:56:C2:83:39:C3:51:7F:E9:A8:55:F5:73:0A:0F Authority key identifier: 0A:02:14:A1:BF:1D:3A:FD:2D:D6:6B:23:A9:97:31:06:B5:D3:16:CA Certificate issuer: /CN=0a0214a1bf1d3afd2dd66b23a9973106b5d316ca Certificate serial: 019B2F9E4A239F36271AD1674EC2A4562104 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CgIUob8dOv0t1msjqZcxBrXTFso.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/04ecc0-663c-460e-920d-332ee5425c7a/1/CgIUob8dOv0t1msjqZcxBrXTFso.mft Manifest number: 1263 Signing time: Thu 18 Dec 2025 04:01:01 +0000 Manifest this update: Thu 18 Dec 2025 04:01:01 +0000 Manifest next update: Fri 19 Dec 2025 04:01:01 +0000 Files and hashes: 1: CgIUob8dOv0t1msjqZcxBrXTFso.crl (hash: E6bGVlG3Jt/ircAaacBeFDXdxvlDbMB9BLrRqowKRD8=) 2: EaaXkbC8P0tMcWH8_B2AeHqJuik.roa (hash: Agyi8/XYUtn0V9u60ReeITYzaWhDJOT1A+JDHxK163o=) 3: iRncY0RPMdG6ZS1FNbvbNQvbM88.roa (hash: cZd3pDxm+3G7IN3N9+ceJiYJz5MHexdMYYiB+WqQjOw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/04ecc0-663c-460e-920d-332ee5425c7a/1/CgIUob8dOv0t1msjqZcxBrXTFso.crl rsync://rpki.ripe.net/repository/DEFAULT/c9/04ecc0-663c-460e-920d-332ee5425c7a/1/CgIUob8dOv0t1msjqZcxBrXTFso.mft rsync://rpki.ripe.net/repository/DEFAULT/CgIUob8dOv0t1msjqZcxBrXTFso.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 04:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2f:9e:4a:23:9f:36:27:1a:d1:67:4e:c2:a4:56:21:04 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0a0214a1bf1d3afd2dd66b23a9973106b5d316ca Validity Not Before: Dec 18 04:01:01 2025 GMT Not After : Dec 19 04:01:01 2025 GMT Subject: CN=3fe883eedba056c28339c3517fe9a855f5730a0f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:99:78:1e:c5:05:a8:45:5d:12:ec:e1:e3:96: 73:c0:17:03:7a:07:3b:85:9e:31:8f:fb:47:19:2d: c2:a6:c8:23:6a:a3:a6:5a:d6:a5:28:2e:cc:25:db: cc:54:30:d1:80:59:c5:90:4b:e9:70:46:3c:35:43: db:48:7e:9e:1c:59:b6:17:4f:97:6d:48:5e:bf:5d: a1:76:df:b9:96:ce:d5:f9:44:5a:01:97:cd:85:02: 89:eb:96:94:9a:a2:6d:d1:5d:b0:b0:1d:ca:ca:b0: 18:23:32:0d:ac:f2:46:f8:3b:9e:f1:13:2a:fb:85: 3b:17:27:99:7f:e2:ab:5b:5a:19:b4:ec:4c:4f:63: c7:82:59:56:7e:32:1f:12:53:c7:d5:b0:0f:68:52: c8:11:a3:d8:62:d1:0a:39:e2:41:6c:a2:b9:19:26: 73:2a:b2:a9:ba:51:28:54:f7:28:5d:ac:62:22:27: 51:e3:1b:aa:26:eb:ae:ef:09:6e:90:b4:45:50:e6: 55:34:05:9d:e1:bf:a8:cf:0d:2c:76:f4:34:8b:e9: 9f:eb:50:e7:47:1c:15:b1:ba:14:f8:cc:5b:c1:9c: 0e:91:46:2a:ec:f2:8b:80:63:16:25:15:86:34:24: 79:04:84:a6:f7:57:b0:19:fe:98:1b:a3:bf:b8:73: 88:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:E8:83:EE:DB:A0:56:C2:83:39:C3:51:7F:E9:A8:55:F5:73:0A:0F X509v3 Authority Key Identifier: keyid:0A:02:14:A1:BF:1D:3A:FD:2D:D6:6B:23:A9:97:31:06:B5:D3:16:CA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CgIUob8dOv0t1msjqZcxBrXTFso.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/04ecc0-663c-460e-920d-332ee5425c7a/1/CgIUob8dOv0t1msjqZcxBrXTFso.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/04ecc0-663c-460e-920d-332ee5425c7a/1/CgIUob8dOv0t1msjqZcxBrXTFso.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b4:a2:c5:9e:84:db:76:53:52:da:ad:cc:e6:cd:9f:74:61:6c: 96:10:84:2d:81:54:2e:e4:a1:5c:a9:89:c5:91:d2:03:de:fc: b7:de:bb:aa:b7:e3:2a:bf:ea:38:04:32:90:6a:98:3b:ef:52: 01:45:e1:c2:b0:1f:79:58:c0:cb:b5:6c:7b:cd:02:6f:7a:81: 25:ee:4b:36:c9:a1:11:c8:9a:0a:3e:eb:4f:17:23:2c:15:41: f7:81:b8:f3:56:aa:a4:5a:74:80:51:96:18:2e:5c:8d:41:e0: bb:37:ab:45:28:5c:1e:ab:e5:4a:8e:92:0e:e4:20:be:2c:14: ea:2f:cb:84:3c:c6:a6:0d:12:71:d6:f4:d1:18:0f:8f:b8:2a: d1:9c:30:4a:00:4e:4c:a9:31:65:ee:9f:1c:4a:b2:ad:f0:2e: e1:54:d2:bd:a5:0e:f9:2a:26:6c:76:e1:d6:62:c5:00:2c:e8: 87:c3:fb:02:92:0b:5f:ac:55:f0:a1:55:4c:6f:a5:66:cc:d9: 15:af:bc:00:1d:bb:d5:7a:e6:9d:50:bd:93:aa:4a:41:bf:a7: 25:2d:9e:0a:c5:18:87:96:ee:5b:ef:52:fb:9f:05:5c:c1:2f: 0a:35:81:d5:b8:36:2e:b6:30:f6:12:26:98:40:f4:ef:f1:5d: 13:24:e1:aa -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsvnkojnzYnGtFnTsKkViEEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBhMDIxNGExYmYxZDNhZmQyZGQ2NmIyM2E5OTczMTA2YjVk MzE2Y2EwHhcNMjUxMjE4MDQwMTAxWhcNMjUxMjE5MDQwMTAxWjAzMTEwLwYDVQQD EygzZmU4ODNlZWRiYTA1NmMyODMzOWMzNTE3ZmU5YTg1NWY1NzMwYTBmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtZl4HsUFqEVdEuzh45ZzwBcDegc7 hZ4xj/tHGS3CpsgjaqOmWtalKC7MJdvMVDDRgFnFkEvpcEY8NUPbSH6eHFm2F0+X bUhev12hdt+5ls7V+URaAZfNhQKJ65aUmqJt0V2wsB3KyrAYIzINrPJG+Due8RMq +4U7FyeZf+KrW1oZtOxMT2PHgllWfjIfElPH1bAPaFLIEaPYYtEKOeJBbKK5GSZz KrKpulEoVPcoXaxiIidR4xuqJuuu7wlukLRFUOZVNAWd4b+ozw0sdvQ0i+mf61Dn RxwVsboU+MxbwZwOkUYq7PKLgGMWJRWGNCR5BISm91ewGf6YG6O/uHOIhwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFD/og+7boFbCgznDUX/pqFX1cwoPMB8GA1UdIwQY MBaAFAoCFKG/HTr9LdZrI6mXMQa10xbKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ2dJVW9iOGRPdjB0MW1zanFaY3hCclhURnNvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOS8wNGVjYzAtNjYzYy00NjBlLTkyMGQt MzMyZWU1NDI1YzdhLzEvQ2dJVW9iOGRPdjB0MW1zanFaY3hCclhURnNvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOS8wNGVjYzAtNjYzYy00NjBlLTkyMGQtMzMyZWU1NDI1Yzdh LzEvQ2dJVW9iOGRPdjB0MW1zanFaY3hCclhURnNvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtKLFnoTb dlNS2q3M5s2fdGFslhCELYFULuShXKmJxZHSA978t967qrfjKr/qOAQykGqYO+9S AUXhwrAfeVjAy7Vse80Cb3qBJe5LNsmhEciaCj7rTxcjLBVB94G481aqpFp0gFGW GC5cjUHguzerRShcHqvlSo6SDuQgviwU6i/LhDzGpg0Scdb00RgPj7gq0ZwwSgBO TKkxZe6fHEqyrfAu4VTSvaUO+SombHbh1mLFACzoh8P7ApILX6xV8KFVTG+lZszZ Fa+8AB271XrmnVC9k6pKQb+nJS2eCsUYh5buW+9S+58FXMEvCjWB1bg2LrYw9hIm mED07/FdEyThqg== -----END CERTIFICATE-----Generated at Thu Dec 18 11:27:05 2025 by rpki-client