This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/e2a15c-add0-48d6-b04f-cdfef6d5f9b9/1/RciwwWM2uTM7RE_x4YzHjXanw_Y.mft File: RciwwWM2uTM7RE_x4YzHjXanw_Y.mft (raw, json) Hash identifier: Myp+gljQD+m0iFm8RYQiVTalHQxH3uo5pkKN69iFz2E= Subject key identifier: 06:AF:55:BA:3B:F2:54:90:1C:F0:04:FB:CB:FE:3B:FB:5E:97:34:6E Authority key identifier: 45:C8:B0:C1:63:36:B9:33:3B:44:4F:F1:E1:8C:C7:8D:76:A7:C3:F6 Certificate issuer: /CN=45c8b0c16336b9333b444ff1e18cc78d76a7c3f6 Certificate serial: 019AF54129025E74965E0832C18A3214DAF0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RciwwWM2uTM7RE_x4YzHjXanw_Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/e2a15c-add0-48d6-b04f-cdfef6d5f9b9/1/RciwwWM2uTM7RE_x4YzHjXanw_Y.mft Manifest number: 03AB Signing time: Sat 06 Dec 2025 20:01:19 +0000 Manifest this update: Sat 06 Dec 2025 20:01:19 +0000 Manifest next update: Sun 07 Dec 2025 20:01:19 +0000 Files and hashes: 1: NP3I33PqiM24AyrvrXcXkrcATEY.roa (hash: suQmPgK0ZMnJeCcPsZiWpQadlCgzQA44K74kBySWlDw=) 2: RciwwWM2uTM7RE_x4YzHjXanw_Y.crl (hash: xB44YliHqwlw7frHhJf1sucROHlKbmpmV+oZWM6xxak=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/e2a15c-add0-48d6-b04f-cdfef6d5f9b9/1/RciwwWM2uTM7RE_x4YzHjXanw_Y.crl rsync://rpki.ripe.net/repository/DEFAULT/d8/e2a15c-add0-48d6-b04f-cdfef6d5f9b9/1/RciwwWM2uTM7RE_x4YzHjXanw_Y.mft rsync://rpki.ripe.net/repository/DEFAULT/RciwwWM2uTM7RE_x4YzHjXanw_Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 20:01:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:41:29:02:5e:74:96:5e:08:32:c1:8a:32:14:da:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=45c8b0c16336b9333b444ff1e18cc78d76a7c3f6 Validity Not Before: Dec 6 20:01:19 2025 GMT Not After : Dec 7 20:01:19 2025 GMT Subject: CN=06af55ba3bf254901cf004fbcbfe3bfb5e97346e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:1e:4b:02:bf:d6:6b:9d:bc:90:06:de:10:da: c4:7a:c2:de:7b:ce:82:d9:a4:76:f3:d9:17:1e:fa: 0d:ef:d5:40:89:f4:22:6e:fe:3b:ae:85:39:ea:1e: 05:1d:df:b9:b6:3e:17:5b:c1:f9:84:4b:1e:4a:dd: 56:a0:7c:99:23:46:0b:89:17:cd:f3:b0:97:9a:00: d2:08:57:66:1c:33:ae:0a:d6:f6:1b:07:b5:e3:06: 2d:a6:66:60:ad:f5:27:a8:e7:f9:92:db:ba:95:b2: 08:ae:23:ea:e2:8f:f6:04:57:dc:30:4e:59:5b:8f: e0:48:be:e5:be:28:f2:b6:52:72:81:21:f9:d0:f8: 1e:79:f4:c8:ba:cf:04:9c:89:58:aa:e5:b8:1e:05: cc:a9:8a:3b:8f:39:22:86:e7:d1:14:50:75:78:db: e7:30:90:7b:ef:56:82:0e:8b:90:33:18:ec:74:2b: f6:6b:3f:0a:27:a3:2b:ac:a9:20:7b:71:34:1b:4f: db:86:54:39:e4:88:93:7a:7e:c9:c3:83:a4:bb:92: e9:22:39:95:e1:7f:da:ef:6e:60:1f:8c:73:07:cb: 77:3b:d9:74:0b:57:07:42:f3:be:a8:61:69:a7:94: 55:60:da:31:74:f3:df:90:a3:07:b7:f1:17:cb:7d: 4d:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:AF:55:BA:3B:F2:54:90:1C:F0:04:FB:CB:FE:3B:FB:5E:97:34:6E X509v3 Authority Key Identifier: keyid:45:C8:B0:C1:63:36:B9:33:3B:44:4F:F1:E1:8C:C7:8D:76:A7:C3:F6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RciwwWM2uTM7RE_x4YzHjXanw_Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/e2a15c-add0-48d6-b04f-cdfef6d5f9b9/1/RciwwWM2uTM7RE_x4YzHjXanw_Y.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/e2a15c-add0-48d6-b04f-cdfef6d5f9b9/1/RciwwWM2uTM7RE_x4YzHjXanw_Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 29:c8:81:0c:ac:99:cf:ed:2c:45:3f:b2:2d:73:13:7d:0c:72: 7a:85:7d:5b:cb:68:ff:af:6a:d4:f2:4d:3d:9e:80:50:f6:28: 17:d1:60:e7:a0:49:10:b2:fb:87:91:d2:8d:19:80:9a:33:6a: e5:3d:f4:54:17:e0:db:02:2b:75:b3:10:ca:61:83:ad:3b:54: 5b:67:d8:a2:df:2d:af:5d:fd:d3:30:ee:1d:56:0e:2b:84:45: 98:ae:96:1e:87:5e:b7:d8:2a:6a:f6:78:11:ff:29:8e:87:7e: 44:37:99:ed:50:83:4e:8b:94:81:93:b6:c2:7a:5b:9a:ae:09: e8:af:88:52:77:03:c6:eb:b6:03:44:61:4d:ce:82:9e:ea:d8: 9e:79:71:0a:22:a7:f3:f6:79:82:ad:88:7c:25:eb:e6:85:3b: 9a:32:76:52:b6:8a:cf:aa:92:11:c4:41:d1:e4:56:04:40:39: 80:37:8a:9c:db:b1:cb:9f:ae:5d:97:fe:d2:3c:bb:1a:27:ec: 4b:a8:09:f5:ea:43:e7:c7:73:97:07:4e:a5:f2:66:b9:0a:a2: 75:24:6a:14:ca:4a:9a:de:22:15:14:b7:f0:28:0d:a0:81:57: f2:bb:4d:87:61:27:0c:49:94:2e:d5:73:1d:d2:f4:30:99:62: 56:1d:5f:46 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1QSkCXnSWXggywYoyFNrwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ1YzhiMGMxNjMzNmI5MzMzYjQ0NGZmMWUxOGNjNzhkNzZh N2MzZjYwHhcNMjUxMjA2MjAwMTE5WhcNMjUxMjA3MjAwMTE5WjAzMTEwLwYDVQQD EygwNmFmNTViYTNiZjI1NDkwMWNmMDA0ZmJjYmZlM2JmYjVlOTczNDZlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8B5LAr/Wa528kAbeENrEesLee86C 2aR289kXHvoN79VAifQibv47roU56h4FHd+5tj4XW8H5hEseSt1WoHyZI0YLiRfN 87CXmgDSCFdmHDOuCtb2Gwe14wYtpmZgrfUnqOf5ktu6lbIIriPq4o/2BFfcME5Z W4/gSL7lvijytlJygSH50PgeefTIus8EnIlYquW4HgXMqYo7jzkihufRFFB1eNvn MJB771aCDouQMxjsdCv2az8KJ6MrrKkge3E0G0/bhlQ55IiTen7Jw4Oku5LpIjmV 4X/a725gH4xzB8t3O9l0C1cHQvO+qGFpp5RVYNoxdPPfkKMHt/EXy31NswIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAavVbo78lSQHPAE+8v+O/telzRuMB8GA1UdIwQY MBaAFEXIsMFjNrkzO0RP8eGMx412p8P2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUmNpd3dXTTJ1VE03UkVfeDRZekhqWGFud19ZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOC9lMmExNWMtYWRkMC00OGQ2LWIwNGYt Y2RmZWY2ZDVmOWI5LzEvUmNpd3dXTTJ1VE03UkVfeDRZekhqWGFud19ZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kOC9lMmExNWMtYWRkMC00OGQ2LWIwNGYtY2RmZWY2ZDVmOWI5 LzEvUmNpd3dXTTJ1VE03UkVfeDRZekhqWGFud19ZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKciBDKyZ z+0sRT+yLXMTfQxyeoV9W8to/69q1PJNPZ6AUPYoF9Fg56BJELL7h5HSjRmAmjNq 5T30VBfg2wIrdbMQymGDrTtUW2fYot8tr1390zDuHVYOK4RFmK6WHodet9gqavZ4 Ef8pjod+RDeZ7VCDTouUgZO2wnpbmq4J6K+IUncDxuu2A0RhTc6CnurYnnlxCiKn 8/Z5gq2IfCXr5oU7mjJ2UraKz6qSEcRB0eRWBEA5gDeKnNuxy5+uXZf+0jy7Gifs S6gJ9epD58dzlwdOpfJmuQqidSRqFMpKmt4iFRS38CgNoIFX8rtNh2EnDEmULtVz HdL0MJliVh1fRg== -----END CERTIFICATE-----Generated at Sun Dec 7 02:16:07 2025 by rpki-client