This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/866754-f0ef-4900-8dd0-6c0403c9a440/1/CIKLx914SFC4lu197ZSD218B4Fk.mft File: CIKLx914SFC4lu197ZSD218B4Fk.mft (raw, json) Hash identifier: w1jqEXVGBkPA7BobHmiGhxvuXaoxf/O/uzarsaOqjTU= Subject key identifier: EF:09:A2:BC:32:A0:AA:3B:4D:0A:C1:93:B9:0F:CD:46:FC:1F:E3:B8 Authority key identifier: 08:82:8B:C7:DD:78:48:50:B8:96:ED:7D:ED:94:83:DB:5F:01:E0:59 Certificate issuer: /CN=08828bc7dd784850b896ed7ded9483db5f01e059 Certificate serial: 019AF208B4DD85BA4F5669A0588C4A8C9AC6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CIKLx914SFC4lu197ZSD218B4Fk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/866754-f0ef-4900-8dd0-6c0403c9a440/1/CIKLx914SFC4lu197ZSD218B4Fk.mft Manifest number: 05AF Signing time: Sat 06 Dec 2025 05:00:48 +0000 Manifest this update: Sat 06 Dec 2025 05:00:48 +0000 Manifest next update: Sun 07 Dec 2025 05:00:48 +0000 Files and hashes: 1: CIKLx914SFC4lu197ZSD218B4Fk.crl (hash: yNtYcm5L1yaFnQg9OjmVAoCowA7Q32H4ItfUWLJhDzQ=) 2: V0Wj0jhw0RxatZH_nx8jTrLFEcc.roa (hash: mmVGDQsdur6eI4Kol0nAjQzRZYdIuybWdILnc/qmeGM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/866754-f0ef-4900-8dd0-6c0403c9a440/1/CIKLx914SFC4lu197ZSD218B4Fk.crl rsync://rpki.ripe.net/repository/DEFAULT/fc/866754-f0ef-4900-8dd0-6c0403c9a440/1/CIKLx914SFC4lu197ZSD218B4Fk.mft rsync://rpki.ripe.net/repository/DEFAULT/CIKLx914SFC4lu197ZSD218B4Fk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:08:b4:dd:85:ba:4f:56:69:a0:58:8c:4a:8c:9a:c6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08828bc7dd784850b896ed7ded9483db5f01e059 Validity Not Before: Dec 6 05:00:48 2025 GMT Not After : Dec 7 05:00:48 2025 GMT Subject: CN=ef09a2bc32a0aa3b4d0ac193b90fcd46fc1fe3b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:07:6e:cb:84:42:13:e7:62:c0:74:f7:1b:32: 6b:5e:6a:00:ab:ee:11:98:00:c2:10:cf:78:7f:c2: fc:c0:85:7f:3d:c3:0e:39:48:3e:cc:4e:7f:b9:82: 1d:6e:97:a4:f7:cf:77:a1:d5:ad:83:41:bc:b6:81: 74:59:69:9d:c1:46:d2:cf:18:42:f4:56:63:e3:16: 7f:56:eb:65:7e:20:b1:a0:c8:96:b6:ec:95:46:47: 3d:0a:e4:0f:2e:8b:0d:a3:f4:14:5f:22:cb:fa:7f: fd:21:4a:ae:cd:0f:30:2d:25:92:26:3b:ed:5d:c2: 9f:c7:7b:78:80:df:cf:73:53:65:86:dd:38:26:59: e0:d7:2c:c7:fe:96:eb:f5:d7:2f:84:35:c2:5c:82: 48:47:7d:c2:de:51:8a:da:ed:c3:a0:31:97:fb:91: 59:59:63:f5:57:8c:6d:9b:bd:4e:46:e2:82:55:db: 32:03:80:33:2c:e2:9b:c4:45:79:39:dc:02:da:88: 6a:4d:5a:8b:df:96:c4:db:be:d1:f5:d4:ef:87:14: 69:8c:33:af:9d:3f:95:1e:56:76:16:0d:64:a2:f6: 31:7b:c1:f0:f5:ad:82:78:23:b6:43:48:a6:7b:ab: 05:6b:d7:16:66:f9:57:e0:80:17:94:7a:dc:56:c3: d9:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:09:A2:BC:32:A0:AA:3B:4D:0A:C1:93:B9:0F:CD:46:FC:1F:E3:B8 X509v3 Authority Key Identifier: keyid:08:82:8B:C7:DD:78:48:50:B8:96:ED:7D:ED:94:83:DB:5F:01:E0:59 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CIKLx914SFC4lu197ZSD218B4Fk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/866754-f0ef-4900-8dd0-6c0403c9a440/1/CIKLx914SFC4lu197ZSD218B4Fk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/866754-f0ef-4900-8dd0-6c0403c9a440/1/CIKLx914SFC4lu197ZSD218B4Fk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a1:fb:03:1c:77:33:fa:43:bf:aa:0e:dd:fb:82:e5:0a:5b:2f: c3:69:2f:5f:2d:ea:55:7c:43:86:35:a8:60:f3:9f:f6:8d:67: a9:b0:89:0e:51:3b:6f:eb:6e:f7:12:4e:0e:90:1c:08:28:95: b5:d5:72:2c:04:27:94:e2:20:4d:f6:b6:0a:cb:4a:c0:f9:c3: 33:76:54:37:d8:43:1e:f6:a2:c4:b1:a6:3a:d4:39:e5:41:d4: c9:7d:1d:7a:27:53:80:64:14:89:a8:b2:f6:5e:32:1a:5f:b9: 8d:15:8a:81:a3:3e:09:ad:d2:8c:4d:28:7d:ef:fe:3b:e3:df: 68:da:89:fa:a4:71:76:f4:ec:95:f8:75:17:65:90:92:0e:3d: 40:fb:05:48:c4:46:e0:4e:79:c2:1d:f8:e0:fd:db:d6:ab:27: 8f:79:ee:c3:91:78:ff:ef:62:73:1b:b1:58:6a:39:13:c5:9f: 16:4a:19:d4:df:fe:28:1b:39:70:7b:24:07:d1:07:d1:33:3f: e1:10:d0:6f:c7:c9:cd:e9:2c:f0:7b:a9:9e:f7:da:65:1b:76: 4b:60:c9:33:89:74:e2:be:92:ca:70:c7:c8:56:1a:73:03:6c: db:09:5f:63:23:d8:c3:b7:73:de:2c:b7:23:d8:22:7d:5c:85: 14:8a:56:ea -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCLTdhbpPVmmgWIxKjJrGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA4ODI4YmM3ZGQ3ODQ4NTBiODk2ZWQ3ZGVkOTQ4M2RiNWYw MWUwNTkwHhcNMjUxMjA2MDUwMDQ4WhcNMjUxMjA3MDUwMDQ4WjAzMTEwLwYDVQQD EyhlZjA5YTJiYzMyYTBhYTNiNGQwYWMxOTNiOTBmY2Q0NmZjMWZlM2I4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuAduy4RCE+diwHT3GzJrXmoAq+4R mADCEM94f8L8wIV/PcMOOUg+zE5/uYIdbpek9893odWtg0G8toF0WWmdwUbSzxhC 9FZj4xZ/VutlfiCxoMiWtuyVRkc9CuQPLosNo/QUXyLL+n/9IUquzQ8wLSWSJjvt XcKfx3t4gN/Pc1Nlht04Jlng1yzH/pbr9dcvhDXCXIJIR33C3lGK2u3DoDGX+5FZ WWP1V4xtm71ORuKCVdsyA4AzLOKbxEV5OdwC2ohqTVqL35bE277R9dTvhxRpjDOv nT+VHlZ2Fg1kovYxe8Hw9a2CeCO2Q0ime6sFa9cWZvlX4IAXlHrcVsPZ8QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFO8JorwyoKo7TQrBk7kPzUb8H+O4MB8GA1UdIwQY MBaAFAiCi8fdeEhQuJbtfe2Ug9tfAeBZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ0lLTHg5MTRTRkM0bHUxOTdaU0QyMThCNEZrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYy84NjY3NTQtZjBlZi00OTAwLThkZDAt NmMwNDAzYzlhNDQwLzEvQ0lLTHg5MTRTRkM0bHUxOTdaU0QyMThCNEZrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYy84NjY3NTQtZjBlZi00OTAwLThkZDAtNmMwNDAzYzlhNDQw LzEvQ0lLTHg5MTRTRkM0bHUxOTdaU0QyMThCNEZrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAofsDHHcz +kO/qg7d+4LlClsvw2kvXy3qVXxDhjWoYPOf9o1nqbCJDlE7b+tu9xJODpAcCCiV tdVyLAQnlOIgTfa2CstKwPnDM3ZUN9hDHvaixLGmOtQ55UHUyX0deidTgGQUiaiy 9l4yGl+5jRWKgaM+Ca3SjE0ofe/+O+PfaNqJ+qRxdvTslfh1F2WQkg49QPsFSMRG 4E55wh344P3b1qsnj3nuw5F4/+9icxuxWGo5E8WfFkoZ1N/+KBs5cHskB9EH0TM/ 4RDQb8fJzeks8HupnvfaZRt2S2DJM4l04r6SynDHyFYacwNs2wlfYyPYw7dz3iy3 I9gifVyFFIpW6g== -----END CERTIFICATE-----Generated at Sat Dec 6 14:13:59 2025 by rpki-client