This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/22b0fe-9dc8-4bef-a299-30097a246a9c/1/cIYS6HA6ZgiJyg9FfPG02KDVO00.mft File: cIYS6HA6ZgiJyg9FfPG02KDVO00.mft (raw, json) Hash identifier: tZAKNQ9c2uJ+CqO/sl+SKV4Zj/0+8JgHCTNWum/Ba7o= Subject key identifier: 87:B1:2D:F3:CB:C3:CF:16:5F:B9:C3:7C:EF:87:4A:C1:BD:5A:DE:4C Authority key identifier: 70:86:12:E8:70:3A:66:08:89:CA:0F:45:7C:F1:B4:D8:A0:D5:3B:4D Certificate issuer: /CN=708612e8703a660889ca0f457cf1b4d8a0d53b4d Certificate serial: 019B608A978F6FDD2DE1BA6BB86D879B54A2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cIYS6HA6ZgiJyg9FfPG02KDVO00.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/22b0fe-9dc8-4bef-a299-30097a246a9c/1/cIYS6HA6ZgiJyg9FfPG02KDVO00.mft Manifest number: 0E3F Signing time: Sat 27 Dec 2025 16:00:53 +0000 Manifest this update: Sat 27 Dec 2025 16:00:53 +0000 Manifest next update: Sun 28 Dec 2025 16:00:53 +0000 Files and hashes: 1: DmXSHAWyzkOoxqiFMJESxxoNQRE.roa (hash: JS4gdknzcsCYuR0k7tQp82qH1Pua7AKi87dIAAaokTc=) 2: G1B5f1Zo9mXXkjO8qvbHOoggkQk.roa (hash: aEmK04Ia5XU5AnX1t6+4/7AVUK1sMbT5CaQWCjlA0q4=) 3: cIYS6HA6ZgiJyg9FfPG02KDVO00.crl (hash: mkhgHjbNeJQanHLArSGaixsNy+C7gd69MFDN1xAGuqg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/22b0fe-9dc8-4bef-a299-30097a246a9c/1/cIYS6HA6ZgiJyg9FfPG02KDVO00.crl rsync://rpki.ripe.net/repository/DEFAULT/10/22b0fe-9dc8-4bef-a299-30097a246a9c/1/cIYS6HA6ZgiJyg9FfPG02KDVO00.mft rsync://rpki.ripe.net/repository/DEFAULT/cIYS6HA6ZgiJyg9FfPG02KDVO00.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 28 Dec 2025 09:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:60:8a:97:8f:6f:dd:2d:e1:ba:6b:b8:6d:87:9b:54:a2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=708612e8703a660889ca0f457cf1b4d8a0d53b4d Validity Not Before: Dec 27 16:00:53 2025 GMT Not After : Dec 28 16:00:53 2025 GMT Subject: CN=87b12df3cbc3cf165fb9c37cef874ac1bd5ade4c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:86:7e:73:fa:1f:63:f1:d5:1d:18:5b:1e:0a: 15:bd:a5:9b:5e:33:6b:8e:8e:b5:a5:84:7c:ee:fb: 67:5c:4b:21:5f:3f:62:26:31:9f:b9:81:6e:48:5b: c4:59:75:ee:b7:7c:a6:fd:ce:b3:c5:89:6c:4f:2a: b7:74:df:be:20:fa:fc:ec:8b:4d:36:67:9e:64:4a: 7f:bd:7a:96:b2:fc:84:1b:98:fb:3f:ac:d8:45:51: 97:e3:42:fe:31:93:c1:de:01:19:f2:5f:1a:86:e7: 28:59:4c:bd:6f:1d:df:ab:bf:1f:6f:bd:00:88:75: 18:f3:64:f4:98:7a:5a:ed:9e:a8:81:1d:af:d9:da: f4:0d:21:5e:e6:8d:f7:49:7b:0e:2f:07:a5:5c:e5: 88:ec:44:83:4b:2a:46:07:a4:07:3f:da:fa:a0:e5: de:b6:0d:08:5b:43:8a:a0:8e:98:5a:b9:11:e5:6a: 26:20:34:00:b2:65:ad:0e:ed:9e:12:0f:4f:48:2e: 11:41:dd:06:4a:b4:67:fb:4f:b0:e5:2a:6a:5c:94: a6:75:9b:0b:aa:eb:cd:c2:a7:6d:36:a1:02:ca:42: f1:49:5e:92:8a:91:c1:71:8a:15:3c:11:ef:01:f9: 8f:a2:74:71:ce:60:e9:44:38:7b:57:56:2d:a9:50: 4f:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:B1:2D:F3:CB:C3:CF:16:5F:B9:C3:7C:EF:87:4A:C1:BD:5A:DE:4C X509v3 Authority Key Identifier: keyid:70:86:12:E8:70:3A:66:08:89:CA:0F:45:7C:F1:B4:D8:A0:D5:3B:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cIYS6HA6ZgiJyg9FfPG02KDVO00.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/22b0fe-9dc8-4bef-a299-30097a246a9c/1/cIYS6HA6ZgiJyg9FfPG02KDVO00.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/10/22b0fe-9dc8-4bef-a299-30097a246a9c/1/cIYS6HA6ZgiJyg9FfPG02KDVO00.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 25:b9:cb:cf:53:c8:e2:c0:a3:91:3b:ba:7f:53:ab:8b:99:8d: e5:65:cb:58:29:cf:56:83:56:06:b3:9a:3e:5d:4e:1f:76:99: 1d:fa:ef:82:c5:f7:13:e5:f0:c5:4a:fa:2a:16:67:ac:9f:52: 5d:50:f3:68:f8:22:8e:df:d8:90:63:f8:28:ca:0f:fa:52:58: cb:54:63:72:08:04:5c:36:e9:f6:93:a3:90:7d:c8:2c:d9:44: f1:ed:08:59:7c:2b:be:4a:3d:0c:a9:b1:2f:93:52:24:fc:34: 1e:05:31:16:dc:ae:1f:95:2c:15:eb:96:50:b3:f1:95:5f:48: b8:12:00:52:04:48:c8:ec:15:c3:74:27:5f:f2:d8:a0:bd:9b: c9:51:b0:65:5c:25:9b:3d:44:4d:63:39:22:d1:59:7c:01:8c: 26:ac:2e:bc:66:2e:b8:06:80:2c:06:9a:e0:d3:e7:4b:ee:4a: 9c:8f:81:4b:28:d3:78:f5:82:e9:6b:72:dc:28:2b:b6:bd:16: 26:17:fd:f3:5e:0b:ce:ac:bd:71:bc:b7:49:56:90:4a:ed:8a: c0:0f:f2:7b:ec:43:8e:70:0c:19:2f:41:6d:e3:44:17:13:7d: 4f:89:d1:cc:55:f7:ff:06:c5:4d:a6:07:0d:0b:2b:3a:dc:4d: 6e:2e:9c:69 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtgipePb90t4bpruG2Hm1SiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcwODYxMmU4NzAzYTY2MDg4OWNhMGY0NTdjZjFiNGQ4YTBk NTNiNGQwHhcNMjUxMjI3MTYwMDUzWhcNMjUxMjI4MTYwMDUzWjAzMTEwLwYDVQQD Eyg4N2IxMmRmM2NiYzNjZjE2NWZiOWMzN2NlZjg3NGFjMWJkNWFkZTRjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwoZ+c/ofY/HVHRhbHgoVvaWbXjNr jo61pYR87vtnXEshXz9iJjGfuYFuSFvEWXXut3ym/c6zxYlsTyq3dN++IPr87ItN NmeeZEp/vXqWsvyEG5j7P6zYRVGX40L+MZPB3gEZ8l8ahucoWUy9bx3fq78fb70A iHUY82T0mHpa7Z6ogR2v2dr0DSFe5o33SXsOLwelXOWI7ESDSypGB6QHP9r6oOXe tg0IW0OKoI6YWrkR5WomIDQAsmWtDu2eEg9PSC4RQd0GSrRn+0+w5SpqXJSmdZsL quvNwqdtNqECykLxSV6SipHBcYoVPBHvAfmPonRxzmDpRDh7V1YtqVBPrwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIexLfPLw88WX7nDfO+HSsG9Wt5MMB8GA1UdIwQY MBaAFHCGEuhwOmYIicoPRXzxtNig1TtNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY0lZUzZIQTZaZ2lKeWc5RmZQRzAyS0RWTzAwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC8yMmIwZmUtOWRjOC00YmVmLWEyOTkt MzAwOTdhMjQ2YTljLzEvY0lZUzZIQTZaZ2lKeWc5RmZQRzAyS0RWTzAwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMC8yMmIwZmUtOWRjOC00YmVmLWEyOTktMzAwOTdhMjQ2YTlj LzEvY0lZUzZIQTZaZ2lKeWc5RmZQRzAyS0RWTzAwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJbnLz1PI 4sCjkTu6f1Ori5mN5WXLWCnPVoNWBrOaPl1OH3aZHfrvgsX3E+XwxUr6KhZnrJ9S XVDzaPgijt/YkGP4KMoP+lJYy1RjcggEXDbp9pOjkH3ILNlE8e0IWXwrvko9DKmx L5NSJPw0HgUxFtyuH5UsFeuWULPxlV9IuBIAUgRIyOwVw3QnX/LYoL2byVGwZVwl mz1ETWM5ItFZfAGMJqwuvGYuuAaALAaa4NPnS+5KnI+BSyjTePWC6Wty3Cgrtr0W Jhf9814Lzqy9cby3SVaQSu2KwA/ye+xDjnAMGS9BbeNEFxN9T4nRzFX3/wbFTaYH DQsrOtxNbi6caQ== -----END CERTIFICATE-----Generated at Sat Dec 27 17:37:03 2025 by rpki-client