This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/a2a52c-136a-43a8-967c-f6d966ca4f07/1/CI4DIScTMq_HfkyFefDlVZzAnFA.mft File: CI4DIScTMq_HfkyFefDlVZzAnFA.mft (raw, json) Hash identifier: ++D8wuh6ca6jiBxhOWQ1qyaQ3rl1yQARHUR4MR4KPYs= Subject key identifier: E8:35:34:06:47:E6:C6:E7:63:72:68:2F:EA:44:08:DD:07:D8:19:1C Authority key identifier: 08:8E:03:21:27:13:32:AF:C7:7E:4C:85:79:F0:E5:55:9C:C0:9C:50 Certificate issuer: /CN=088e0321271332afc77e4c8579f0e5559cc09c50 Certificate serial: 019B2106FC84AF1FC8916EEA1C3AA2566F23 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CI4DIScTMq_HfkyFefDlVZzAnFA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/a2a52c-136a-43a8-967c-f6d966ca4f07/1/CI4DIScTMq_HfkyFefDlVZzAnFA.mft Manifest number: 1441 Signing time: Mon 15 Dec 2025 08:01:04 +0000 Manifest this update: Mon 15 Dec 2025 08:01:04 +0000 Manifest next update: Tue 16 Dec 2025 08:01:04 +0000 Files and hashes: 1: CI4DIScTMq_HfkyFefDlVZzAnFA.crl (hash: HzPfd0FP/YxkeY7Q9abaoGrgddbJyp0OB4LYqPZFFUY=) 2: ICR_37PsCBP-8LWQQc9BQZWkbu8.roa (hash: qbGaCfhiVfxLumC4av9v0LJhrwsxTdIAQc0ayhncJww=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/a2a52c-136a-43a8-967c-f6d966ca4f07/1/CI4DIScTMq_HfkyFefDlVZzAnFA.crl rsync://rpki.ripe.net/repository/DEFAULT/d0/a2a52c-136a-43a8-967c-f6d966ca4f07/1/CI4DIScTMq_HfkyFefDlVZzAnFA.mft rsync://rpki.ripe.net/repository/DEFAULT/CI4DIScTMq_HfkyFefDlVZzAnFA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 08:00:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:21:06:fc:84:af:1f:c8:91:6e:ea:1c:3a:a2:56:6f:23 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=088e0321271332afc77e4c8579f0e5559cc09c50 Validity Not Before: Dec 15 08:01:04 2025 GMT Not After : Dec 16 08:01:04 2025 GMT Subject: CN=e835340647e6c6e76372682fea4408dd07d8191c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:c9:ad:68:92:73:cc:77:6f:b9:1b:13:99:df: b2:20:8a:3c:0b:9d:c3:ae:97:a1:59:35:d6:f3:4c: 99:ec:bc:b5:41:dd:17:66:3f:68:46:59:c0:62:18: eb:bd:66:3c:d2:ac:28:54:32:ff:e5:f1:49:30:51: 5a:cc:c4:3e:25:63:28:ee:e6:17:ab:51:38:a0:9d: a6:bc:81:d0:f0:5f:1c:40:3e:35:6a:8f:cc:b1:f8: fd:1b:25:9f:0e:82:73:35:79:31:94:95:bd:4d:5f: c3:a1:3b:dd:ec:e2:ec:a1:4f:c1:ae:6f:fc:eb:f3: 7a:4e:85:7e:0e:b1:8c:50:92:49:0e:52:8a:fb:83: 10:11:4d:63:a8:09:24:a2:2f:66:92:da:48:a2:05: 06:a7:99:37:9d:6e:dc:86:ee:5b:59:07:7f:b5:a4: d4:e5:a8:f9:ef:54:66:31:f3:d2:6c:08:e0:9e:aa: 3c:2a:46:1f:3c:de:e4:0d:48:2a:0b:7b:45:90:7d: 7d:f4:0f:38:48:08:66:52:8a:f3:6a:76:ab:41:c5: 46:aa:d9:d2:d3:34:63:5e:41:1b:1f:ac:93:77:f6: 0d:88:0f:93:32:dc:a6:7e:7a:59:29:35:0f:1d:bb: 0a:9e:2a:33:53:33:72:11:5d:14:b4:2d:8f:93:5e: e2:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:35:34:06:47:E6:C6:E7:63:72:68:2F:EA:44:08:DD:07:D8:19:1C X509v3 Authority Key Identifier: keyid:08:8E:03:21:27:13:32:AF:C7:7E:4C:85:79:F0:E5:55:9C:C0:9C:50 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CI4DIScTMq_HfkyFefDlVZzAnFA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/a2a52c-136a-43a8-967c-f6d966ca4f07/1/CI4DIScTMq_HfkyFefDlVZzAnFA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/a2a52c-136a-43a8-967c-f6d966ca4f07/1/CI4DIScTMq_HfkyFefDlVZzAnFA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3b:6c:64:c0:c0:d4:ed:84:d0:6c:a7:24:ff:a9:f1:4d:1b:80: de:41:e5:73:42:ed:b5:cc:12:1f:2e:b7:d2:26:20:73:b4:ff: 85:ec:19:16:da:25:f0:e7:fc:ff:75:70:76:01:90:2e:c6:fa: 2a:a9:38:b5:6a:36:f2:b7:d7:d9:1f:b8:37:24:79:53:d5:16: d3:b3:b9:9f:a0:42:6b:8e:31:4b:61:dd:bf:73:74:5e:46:5e: b9:16:33:d2:4d:a6:39:9d:99:8c:cd:45:75:7e:47:ac:d3:a0: 4b:52:d1:02:0e:78:0e:12:a7:4f:17:3a:86:64:2a:98:27:f5: 48:36:5f:fc:7f:5a:04:c4:5b:fc:57:8e:7f:89:d5:2f:3c:4d: ac:2c:17:ac:fd:d8:39:68:cf:17:de:5e:5b:67:62:1e:8e:33: 3b:dd:a9:9d:b2:00:30:0a:bd:25:b3:c3:74:03:12:62:1a:fa: 74:ea:bc:c5:9a:4d:b8:b0:31:b7:5a:62:44:1b:82:af:a2:e3: 57:34:06:63:c7:60:39:47:11:d6:47:28:cc:2f:5a:d6:a2:c6: fd:f0:33:c3:62:9c:2f:e8:b2:6d:cd:e8:40:d7:7f:8c:ea:6a: e7:03:80:7c:5a:24:21:fc:e3:ff:d5:d0:1a:31:cc:73:75:94: 5a:1f:45:a2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZshBvyErx/IkW7qHDqiVm8jMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA4OGUwMzIxMjcxMzMyYWZjNzdlNGM4NTc5ZjBlNTU1OWNj MDljNTAwHhcNMjUxMjE1MDgwMTA0WhcNMjUxMjE2MDgwMTA0WjAzMTEwLwYDVQQD EyhlODM1MzQwNjQ3ZTZjNmU3NjM3MjY4MmZlYTQ0MDhkZDA3ZDgxOTFjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxcmtaJJzzHdvuRsTmd+yIIo8C53D rpehWTXW80yZ7Ly1Qd0XZj9oRlnAYhjrvWY80qwoVDL/5fFJMFFazMQ+JWMo7uYX q1E4oJ2mvIHQ8F8cQD41ao/Msfj9GyWfDoJzNXkxlJW9TV/DoTvd7OLsoU/Brm/8 6/N6ToV+DrGMUJJJDlKK+4MQEU1jqAkkoi9mktpIogUGp5k3nW7chu5bWQd/taTU 5aj571RmMfPSbAjgnqo8KkYfPN7kDUgqC3tFkH199A84SAhmUorzanarQcVGqtnS 0zRjXkEbH6yTd/YNiA+TMtymfnpZKTUPHbsKniozUzNyEV0UtC2Pk17ilQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOg1NAZH5sbnY3JoL+pECN0H2BkcMB8GA1UdIwQY MBaAFAiOAyEnEzKvx35MhXnw5VWcwJxQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ0k0RElTY1RNcV9IZmt5RmVmRGxWWnpBbkZBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC9hMmE1MmMtMTM2YS00M2E4LTk2N2Mt ZjZkOTY2Y2E0ZjA3LzEvQ0k0RElTY1RNcV9IZmt5RmVmRGxWWnpBbkZBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMC9hMmE1MmMtMTM2YS00M2E4LTk2N2MtZjZkOTY2Y2E0ZjA3 LzEvQ0k0RElTY1RNcV9IZmt5RmVmRGxWWnpBbkZBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAO2xkwMDU 7YTQbKck/6nxTRuA3kHlc0LttcwSHy630iYgc7T/hewZFtol8Of8/3VwdgGQLsb6 Kqk4tWo28rfX2R+4NyR5U9UW07O5n6BCa44xS2Hdv3N0XkZeuRYz0k2mOZ2ZjM1F dX5HrNOgS1LRAg54DhKnTxc6hmQqmCf1SDZf/H9aBMRb/FeOf4nVLzxNrCwXrP3Y OWjPF95eW2diHo4zO92pnbIAMAq9JbPDdAMSYhr6dOq8xZpNuLAxt1piRBuCr6Lj VzQGY8dgOUcR1kcozC9a1qLG/fAzw2KcL+iybc3oQNd/jOpq5wOAfFokIfzj/9XQ GjHMc3WUWh9Fog== -----END CERTIFICATE-----Generated at Mon Dec 15 15:33:39 2025 by rpki-client