This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/3cffcc-64ac-4bad-a518-550daeb6e651/1/CIYf5BVH2L_FVz_1J3ygDkc7r-w.mft File: CIYf5BVH2L_FVz_1J3ygDkc7r-w.mft (raw, json) Hash identifier: QDNnS37svLBImawTgu+phxO0+H3zuwUAyfD1O0ju8lM= Subject key identifier: E6:B1:27:35:F7:89:F0:10:04:9E:B0:54:5D:55:E7:32:BD:76:8D:FE Authority key identifier: 08:86:1F:E4:15:47:D8:BF:C5:57:3F:F5:27:7C:A0:0E:47:3B:AF:EC Certificate issuer: /CN=08861fe41547d8bfc5573ff5277ca00e473bafec Certificate serial: 019B3C107660D0482613644BF367C1976459 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CIYf5BVH2L_FVz_1J3ygDkc7r-w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/3cffcc-64ac-4bad-a518-550daeb6e651/1/CIYf5BVH2L_FVz_1J3ygDkc7r-w.mft Manifest number: 09 Signing time: Sat 20 Dec 2025 14:01:10 +0000 Manifest this update: Sat 20 Dec 2025 14:01:10 +0000 Manifest next update: Sun 21 Dec 2025 14:01:10 +0000 Files and hashes: 1: CIYf5BVH2L_FVz_1J3ygDkc7r-w.crl (hash: oNHtX064Cyuh5UBx8fnriH7HA78XZFQYG/9XD6XsCS0=) 2: EFTy86Ee2LhDKWgkvLynXFlpksQ.asa (hash: hTWhFGoY6UVHXRWBWB6TnJGczXQUZBVl4LuFNC+XBvA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/3cffcc-64ac-4bad-a518-550daeb6e651/1/CIYf5BVH2L_FVz_1J3ygDkc7r-w.crl rsync://rpki.ripe.net/repository/DEFAULT/01/3cffcc-64ac-4bad-a518-550daeb6e651/1/CIYf5BVH2L_FVz_1J3ygDkc7r-w.mft rsync://rpki.ripe.net/repository/DEFAULT/CIYf5BVH2L_FVz_1J3ygDkc7r-w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 14:01:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:10:76:60:d0:48:26:13:64:4b:f3:67:c1:97:64:59 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08861fe41547d8bfc5573ff5277ca00e473bafec Validity Not Before: Dec 20 14:01:10 2025 GMT Not After : Dec 21 14:01:10 2025 GMT Subject: CN=e6b12735f789f010049eb0545d55e732bd768dfe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:60:6b:1d:28:8d:99:c3:a6:7a:0e:f9:ca:9c: 37:60:a1:53:82:37:cc:e9:87:56:86:a9:48:05:27: 15:dc:65:e9:86:f0:f0:b0:1b:b8:34:f6:2b:7f:51: 36:74:5c:16:9a:cf:17:00:6f:8f:3c:6f:18:df:81: 75:2c:42:71:5d:12:5f:95:ff:d5:93:89:ad:04:26: 1b:8c:2c:3e:03:b6:82:41:d5:88:6c:a3:31:ec:66: 7e:ce:4c:d7:77:ce:a6:80:20:1e:84:dd:3f:35:35: b8:f3:9c:d6:d0:6d:79:c7:c4:d5:4b:d7:38:cc:4a: 3e:26:76:2f:cd:84:94:54:3e:a6:57:d0:5a:ed:a4: 4a:2a:c1:9b:d4:97:1a:bb:e1:4a:10:6b:73:3b:ee: ae:db:6e:09:2e:86:33:9c:30:2b:31:02:19:07:b0: c1:11:4f:43:c8:40:e3:5f:50:90:a2:fd:5b:00:5f: 22:f1:71:1f:6e:a4:1c:5d:74:e5:79:c2:91:da:1b: 68:a3:da:2c:74:38:eb:7e:98:cc:5a:9a:76:25:98: 42:dc:09:d8:6c:91:30:2c:63:96:21:68:3c:2b:ad: 98:ce:40:6b:9d:46:60:79:73:68:d2:92:13:ad:84: 28:cf:6d:0c:af:15:50:64:45:e1:c3:ed:07:94:5f: f1:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:B1:27:35:F7:89:F0:10:04:9E:B0:54:5D:55:E7:32:BD:76:8D:FE X509v3 Authority Key Identifier: keyid:08:86:1F:E4:15:47:D8:BF:C5:57:3F:F5:27:7C:A0:0E:47:3B:AF:EC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CIYf5BVH2L_FVz_1J3ygDkc7r-w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/3cffcc-64ac-4bad-a518-550daeb6e651/1/CIYf5BVH2L_FVz_1J3ygDkc7r-w.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/01/3cffcc-64ac-4bad-a518-550daeb6e651/1/CIYf5BVH2L_FVz_1J3ygDkc7r-w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4b:47:e2:a4:64:ad:09:b0:d2:15:a8:ea:2e:01:c1:3a:83:c0: f4:2e:91:0f:3a:d7:83:94:81:61:4e:bc:1d:02:67:0b:34:c9: 1d:0e:8d:b3:1e:83:a5:73:11:55:1e:0b:5a:e3:3e:e8:0f:e8: 85:42:db:80:46:6d:60:04:ab:ba:6e:f6:12:b7:82:d9:a9:68: 28:fc:22:ec:5f:3a:d8:7a:5b:a5:98:b7:97:0c:39:85:24:46: b0:09:6b:7b:aa:25:bf:d6:57:9a:93:5a:e1:03:f6:a6:82:15: c3:3e:10:16:a6:2b:50:c8:df:f3:cc:bf:2f:1f:42:af:c6:95: 26:de:23:8b:63:d4:61:ab:f3:0c:78:e9:4d:68:6d:0e:0e:83: a5:5d:9b:7a:f3:63:cd:04:df:8b:26:0b:69:c6:7b:d2:00:53: 90:42:9d:c6:31:42:8c:b9:c7:9c:3b:e4:3b:be:c8:05:d9:d0: cb:9d:aa:76:55:ea:38:e5:d5:97:01:03:d3:f7:ac:7e:a6:19: 2c:3e:36:60:89:67:dc:09:ca:72:1b:24:62:6d:81:18:47:dd: 92:61:73:3d:22:5e:03:31:8a:f5:3c:c9:aa:85:c2:31:cf:79: 52:b2:9f:de:69:c5:11:d8:f8:8a:22:4f:c6:c9:1e:99:e0:c3: 96:9c:7c:fe -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs8EHZg0EgmE2RL82fBl2RZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA4ODYxZmU0MTU0N2Q4YmZjNTU3M2ZmNTI3N2NhMDBlNDcz YmFmZWMwHhcNMjUxMjIwMTQwMTEwWhcNMjUxMjIxMTQwMTEwWjAzMTEwLwYDVQQD EyhlNmIxMjczNWY3ODlmMDEwMDQ5ZWIwNTQ1ZDU1ZTczMmJkNzY4ZGZlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4mBrHSiNmcOmeg75ypw3YKFTgjfM 6YdWhqlIBScV3GXphvDwsBu4NPYrf1E2dFwWms8XAG+PPG8Y34F1LEJxXRJflf/V k4mtBCYbjCw+A7aCQdWIbKMx7GZ+zkzXd86mgCAehN0/NTW485zW0G15x8TVS9c4 zEo+JnYvzYSUVD6mV9Ba7aRKKsGb1Jcau+FKEGtzO+6u224JLoYznDArMQIZB7DB EU9DyEDjX1CQov1bAF8i8XEfbqQcXXTlecKR2htoo9osdDjrfpjMWpp2JZhC3AnY bJEwLGOWIWg8K62YzkBrnUZgeXNo0pITrYQoz20MrxVQZEXhw+0HlF/xcwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOaxJzX3ifAQBJ6wVF1V5zK9do3+MB8GA1UdIwQY MBaAFAiGH+QVR9i/xVc/9Sd8oA5HO6/sMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ0lZZjVCVkgyTF9GVnpfMUozeWdEa2M3ci13LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMS8zY2ZmY2MtNjRhYy00YmFkLWE1MTgt NTUwZGFlYjZlNjUxLzEvQ0lZZjVCVkgyTF9GVnpfMUozeWdEa2M3ci13Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMS8zY2ZmY2MtNjRhYy00YmFkLWE1MTgtNTUwZGFlYjZlNjUx LzEvQ0lZZjVCVkgyTF9GVnpfMUozeWdEa2M3ci13LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAS0fipGSt CbDSFajqLgHBOoPA9C6RDzrXg5SBYU68HQJnCzTJHQ6Nsx6DpXMRVR4LWuM+6A/o hULbgEZtYASrum72EreC2aloKPwi7F862HpbpZi3lww5hSRGsAlre6olv9ZXmpNa 4QP2poIVwz4QFqYrUMjf88y/Lx9Cr8aVJt4ji2PUYavzDHjpTWhtDg6DpV2bevNj zQTfiyYLacZ70gBTkEKdxjFCjLnHnDvkO77IBdnQy52qdlXqOOXVlwED0/esfqYZ LD42YIln3AnKchskYm2BGEfdkmFzPSJeAzGK9TzJqoXCMc95UrKf3mnFEdj4iiJP xskemeDDlpx8/g== -----END CERTIFICATE-----Generated at Sun Dec 21 00:24:19 2025 by rpki-client