This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/04ecc0-663c-460e-920d-332ee5425c7a/1/CgIUob8dOv0t1msjqZcxBrXTFso.mft File: CgIUob8dOv0t1msjqZcxBrXTFso.mft (raw, json) Hash identifier: w8RgmyEDzSVqiP0hx4w+H2Ix3ePsL8XeVHQEw7I1AdY= Subject key identifier: EB:26:F8:9C:6B:03:86:3E:E8:C4:19:05:06:48:4B:F4:BB:41:F2:B2 Authority key identifier: 0A:02:14:A1:BF:1D:3A:FD:2D:D6:6B:23:A9:97:31:06:B5:D3:16:CA Certificate issuer: /CN=0a0214a1bf1d3afd2dd66b23a9973106b5d316ca Certificate serial: 019AF1D19EDECCED78232FFD8D19B14623FE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CgIUob8dOv0t1msjqZcxBrXTFso.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/04ecc0-663c-460e-920d-332ee5425c7a/1/CgIUob8dOv0t1msjqZcxBrXTFso.mft Manifest number: 1243 Signing time: Sat 06 Dec 2025 04:00:37 +0000 Manifest this update: Sat 06 Dec 2025 04:00:37 +0000 Manifest next update: Sun 07 Dec 2025 04:00:37 +0000 Files and hashes: 1: CgIUob8dOv0t1msjqZcxBrXTFso.crl (hash: RTNgNZgxUvZgoObjpmkP7iRIfK+9ClIzAZvyOOArGg0=) 2: EaaXkbC8P0tMcWH8_B2AeHqJuik.roa (hash: Agyi8/XYUtn0V9u60ReeITYzaWhDJOT1A+JDHxK163o=) 3: iRncY0RPMdG6ZS1FNbvbNQvbM88.roa (hash: cZd3pDxm+3G7IN3N9+ceJiYJz5MHexdMYYiB+WqQjOw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/04ecc0-663c-460e-920d-332ee5425c7a/1/CgIUob8dOv0t1msjqZcxBrXTFso.crl rsync://rpki.ripe.net/repository/DEFAULT/c9/04ecc0-663c-460e-920d-332ee5425c7a/1/CgIUob8dOv0t1msjqZcxBrXTFso.mft rsync://rpki.ripe.net/repository/DEFAULT/CgIUob8dOv0t1msjqZcxBrXTFso.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d1:9e:de:cc:ed:78:23:2f:fd:8d:19:b1:46:23:fe Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0a0214a1bf1d3afd2dd66b23a9973106b5d316ca Validity Not Before: Dec 6 04:00:37 2025 GMT Not After : Dec 7 04:00:37 2025 GMT Subject: CN=eb26f89c6b03863ee8c4190506484bf4bb41f2b2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:ec:26:67:4f:5c:3e:9a:8a:3c:af:c9:36:09: 3d:f7:27:f4:29:3d:67:14:7a:88:5c:ec:47:48:30: 88:10:bc:b7:4c:c6:64:2c:52:8d:1e:76:24:9a:bb: c2:27:ac:3e:9f:a2:44:64:34:57:09:57:67:2e:d9: 02:2f:ea:bb:9c:d8:ae:6c:7e:b0:18:d0:ec:13:27: 74:38:91:c9:43:38:de:f6:e2:14:78:f5:d1:db:85: 5b:23:00:91:ae:06:11:91:cb:25:05:53:9a:df:fe: ff:b0:f9:df:a0:dc:b3:0e:71:59:75:9f:2d:f4:52: 30:62:8e:6f:46:57:f1:f7:65:33:db:67:df:cb:2f: a6:64:2a:d5:3f:55:31:b8:bf:b9:e2:f4:ad:c4:63: 2f:6f:ac:d9:ba:98:31:d3:02:b2:b8:1f:2e:c4:a6: 3e:e1:f5:c5:1d:04:40:25:33:bd:e1:6e:64:1d:3d: 7e:c7:ed:86:48:b8:26:61:8f:59:ed:1a:89:04:d4: 3a:9b:a5:9b:51:31:da:18:a8:79:11:fe:2f:38:6c: 67:99:26:e3:5c:22:77:64:52:ab:0f:72:15:07:ba: 88:b0:1d:cb:f4:83:04:05:61:7a:b6:d2:47:cc:7b: 07:4f:51:81:88:f0:58:f6:94:fb:5b:b9:68:ad:d1: 45:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:26:F8:9C:6B:03:86:3E:E8:C4:19:05:06:48:4B:F4:BB:41:F2:B2 X509v3 Authority Key Identifier: keyid:0A:02:14:A1:BF:1D:3A:FD:2D:D6:6B:23:A9:97:31:06:B5:D3:16:CA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CgIUob8dOv0t1msjqZcxBrXTFso.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/04ecc0-663c-460e-920d-332ee5425c7a/1/CgIUob8dOv0t1msjqZcxBrXTFso.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/04ecc0-663c-460e-920d-332ee5425c7a/1/CgIUob8dOv0t1msjqZcxBrXTFso.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 11:58:59:0e:b2:2f:13:39:78:af:08:f6:ec:20:48:e5:b6:16: 95:64:e6:9f:d6:3d:53:42:dd:cf:73:c6:56:44:1b:f9:40:e7: af:85:16:08:d0:62:5a:3c:d2:6e:86:ab:a1:73:dc:d8:cd:b8: 70:47:05:b4:d6:15:7c:f1:40:af:76:92:55:b8:31:8f:9b:97: c2:69:87:cf:60:f8:2c:f2:d1:6f:f1:39:96:68:c0:4b:01:44: 6a:ca:61:a5:33:40:a0:c0:72:f8:ba:26:e3:b7:ad:87:58:2e: 82:02:8f:53:a5:16:5c:c5:b8:a2:80:96:dd:ec:0e:b3:96:0e: 32:09:c2:45:05:cb:9c:e4:73:fc:a0:c1:70:d9:41:e7:44:83: c1:aa:8a:60:ef:62:69:27:86:e4:48:f5:cd:1c:ee:04:ef:d0: 79:ee:55:39:fc:b7:e6:8a:db:35:c1:42:6e:56:fe:33:97:8a: b8:b8:e1:e7:5c:89:ea:8d:f3:6b:4c:00:68:f4:49:45:c9:de: 55:96:ef:a5:e9:82:7c:fc:8a:e1:78:09:12:06:cf:c9:b9:c4: ba:d3:77:91:7e:c2:ab:fd:9e:bd:82:db:76:48:80:1a:93:6b: 12:86:cb:29:a4:b7:8f:15:c6:f7:9c:72:0d:21:01:0c:17:75: ca:9d:4a:52 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0Z7ezO14Iy/9jRmxRiP+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBhMDIxNGExYmYxZDNhZmQyZGQ2NmIyM2E5OTczMTA2YjVk MzE2Y2EwHhcNMjUxMjA2MDQwMDM3WhcNMjUxMjA3MDQwMDM3WjAzMTEwLwYDVQQD EyhlYjI2Zjg5YzZiMDM4NjNlZThjNDE5MDUwNjQ4NGJmNGJiNDFmMmIyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx+wmZ09cPpqKPK/JNgk99yf0KT1n FHqIXOxHSDCIELy3TMZkLFKNHnYkmrvCJ6w+n6JEZDRXCVdnLtkCL+q7nNiubH6w GNDsEyd0OJHJQzje9uIUePXR24VbIwCRrgYRkcslBVOa3/7/sPnfoNyzDnFZdZ8t 9FIwYo5vRlfx92Uz22ffyy+mZCrVP1UxuL+54vStxGMvb6zZupgx0wKyuB8uxKY+ 4fXFHQRAJTO94W5kHT1+x+2GSLgmYY9Z7RqJBNQ6m6WbUTHaGKh5Ef4vOGxnmSbj XCJ3ZFKrD3IVB7qIsB3L9IMEBWF6ttJHzHsHT1GBiPBY9pT7W7lordFF1QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOsm+JxrA4Y+6MQZBQZIS/S7QfKyMB8GA1UdIwQY MBaAFAoCFKG/HTr9LdZrI6mXMQa10xbKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ2dJVW9iOGRPdjB0MW1zanFaY3hCclhURnNvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOS8wNGVjYzAtNjYzYy00NjBlLTkyMGQt MzMyZWU1NDI1YzdhLzEvQ2dJVW9iOGRPdjB0MW1zanFaY3hCclhURnNvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOS8wNGVjYzAtNjYzYy00NjBlLTkyMGQtMzMyZWU1NDI1Yzdh LzEvQ2dJVW9iOGRPdjB0MW1zanFaY3hCclhURnNvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEVhZDrIv Ezl4rwj27CBI5bYWlWTmn9Y9U0Ldz3PGVkQb+UDnr4UWCNBiWjzSboaroXPc2M24 cEcFtNYVfPFAr3aSVbgxj5uXwmmHz2D4LPLRb/E5lmjASwFEasphpTNAoMBy+Lom 47eth1guggKPU6UWXMW4ooCW3ewOs5YOMgnCRQXLnORz/KDBcNlB50SDwaqKYO9i aSeG5Ej1zRzuBO/Qee5VOfy35orbNcFCblb+M5eKuLjh51yJ6o3za0wAaPRJRcne VZbvpemCfPyK4XgJEgbPybnEutN3kX7Cq/2evYLbdkiAGpNrEobLKaS3jxXG95xy DSEBDBd1yp1KUg== -----END CERTIFICATE-----Generated at Sat Dec 6 10:18:36 2025 by rpki-client