This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/2b910f-dcc1-41db-96cd-092e89d59fa8/1/Ci1xwNFF7yeARxCSe5Q8Z-UK56s.mft File: Ci1xwNFF7yeARxCSe5Q8Z-UK56s.mft (raw, json) Hash identifier: l2mHX0DHqq1poBcj24mErT++gbWx403Up0j9mhHNIgo= Subject key identifier: 44:88:AD:AF:D8:FB:CD:53:67:E0:15:9A:FF:E2:4C:5B:B6:B7:44:28 Authority key identifier: 0A:2D:71:C0:D1:45:EF:27:80:47:10:92:7B:94:3C:67:E5:0A:E7:AB Certificate issuer: /CN=0a2d71c0d145ef27804710927b943c67e50ae7ab Certificate serial: 019B2B8A445E8DBBD06242CA072EBFF914B7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ci1xwNFF7yeARxCSe5Q8Z-UK56s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/2b910f-dcc1-41db-96cd-092e89d59fa8/1/Ci1xwNFF7yeARxCSe5Q8Z-UK56s.mft Manifest number: 14B8 Signing time: Wed 17 Dec 2025 09:00:40 +0000 Manifest this update: Wed 17 Dec 2025 09:00:40 +0000 Manifest next update: Thu 18 Dec 2025 09:00:40 +0000 Files and hashes: 1: 2WXmLCsyw8fMc90USjqmpJq_P0k.roa (hash: X6trTAm4sd1BCoRMyM8T/lu1+HYVfbsSp9+0QPBx8Ps=) 2: Ci1xwNFF7yeARxCSe5Q8Z-UK56s.crl (hash: Yhzz/dRcZkZ89Fltj+Cw+bgKyKGc7Mz+adK1RIfAI/g=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/2b910f-dcc1-41db-96cd-092e89d59fa8/1/Ci1xwNFF7yeARxCSe5Q8Z-UK56s.crl rsync://rpki.ripe.net/repository/DEFAULT/1e/2b910f-dcc1-41db-96cd-092e89d59fa8/1/Ci1xwNFF7yeARxCSe5Q8Z-UK56s.mft rsync://rpki.ripe.net/repository/DEFAULT/Ci1xwNFF7yeARxCSe5Q8Z-UK56s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 09:00:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2b:8a:44:5e:8d:bb:d0:62:42:ca:07:2e:bf:f9:14:b7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0a2d71c0d145ef27804710927b943c67e50ae7ab Validity Not Before: Dec 17 09:00:40 2025 GMT Not After : Dec 18 09:00:40 2025 GMT Subject: CN=4488adafd8fbcd5367e0159affe24c5bb6b74428 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:d6:f9:b7:fc:c9:3d:0a:c4:48:e6:fa:57:49: 8a:16:a6:38:ec:74:45:8b:b5:3a:09:22:6d:6e:0d: f1:80:e6:fc:5d:8a:86:c7:f9:5f:a9:4a:63:6f:56: cb:df:5d:9d:4b:7f:21:7c:e7:06:7b:04:7e:91:4a: 00:c9:18:dc:8a:b2:3f:1c:51:1f:e9:17:60:13:2d: 33:16:6a:ea:57:ee:1d:4e:16:e1:61:ad:51:a0:56: 57:68:db:24:f3:18:3a:8a:49:06:59:1d:15:ed:c9: 87:f7:4f:7e:3c:f7:5b:96:a1:ea:02:eb:4b:c4:78: 60:43:e9:4c:03:37:9b:18:5c:33:ce:0b:96:47:9d: 04:a9:00:b3:8d:f2:3c:68:29:6f:72:c6:60:cd:2e: 55:23:0c:8c:af:39:6a:98:06:58:de:a3:f5:3c:88: 8a:15:58:62:11:4c:eb:16:57:5d:40:6f:7e:a5:93: d2:0e:e2:bc:3c:85:8e:9c:04:c7:86:0b:f9:b1:90: 2c:2a:83:81:5b:eb:62:7a:b7:35:37:4e:1b:54:74: af:b3:72:89:df:1b:8a:13:54:d7:6d:df:f6:a4:3d: 6f:88:1c:14:49:00:0c:75:28:60:99:68:9c:16:c2: f4:50:52:ed:17:67:78:29:5b:e8:90:06:0b:5e:cb: 62:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:88:AD:AF:D8:FB:CD:53:67:E0:15:9A:FF:E2:4C:5B:B6:B7:44:28 X509v3 Authority Key Identifier: keyid:0A:2D:71:C0:D1:45:EF:27:80:47:10:92:7B:94:3C:67:E5:0A:E7:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ci1xwNFF7yeARxCSe5Q8Z-UK56s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/2b910f-dcc1-41db-96cd-092e89d59fa8/1/Ci1xwNFF7yeARxCSe5Q8Z-UK56s.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/2b910f-dcc1-41db-96cd-092e89d59fa8/1/Ci1xwNFF7yeARxCSe5Q8Z-UK56s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 74:e9:24:a2:0e:8d:5e:4f:b7:85:ca:c6:29:95:b0:39:19:59: ab:0e:f2:22:d9:79:44:12:17:56:6a:a8:ca:3e:41:91:26:bc: 79:6e:40:47:b6:ca:19:23:33:b2:dc:2d:d4:85:cc:ec:1a:32: 91:dc:95:ae:8b:f0:41:24:a0:7a:40:06:50:8c:c9:f8:3b:ba: 72:81:e3:d5:d7:5d:da:6b:c1:c4:90:80:31:af:17:45:b8:a1: d9:75:42:6d:a1:53:5f:7b:d9:6a:68:bc:5c:09:59:e9:a2:4f: 4f:15:38:d4:79:95:1a:bc:86:e4:07:c1:5b:a3:50:c7:d1:39: 94:ba:b2:14:b8:bc:28:9f:59:65:47:1a:93:48:a8:a2:3f:67: e6:b5:36:28:07:24:4c:83:52:c4:67:94:84:01:9d:f9:76:83: c7:dc:35:93:4e:22:2d:76:dd:4e:ae:3b:87:78:18:fe:b4:41: 48:97:e5:23:83:32:d8:62:96:52:40:19:f1:44:7c:ac:38:c1: 29:f4:f1:fe:33:32:39:4a:aa:09:67:23:de:41:cc:c2:8c:ee: 92:fe:c5:e4:31:42:7e:54:bb:cb:b9:a7:97:f9:9e:d4:c8:31: ef:0e:c9:1b:c2:52:05:4e:a4:a8:ba:9e:c9:88:88:88:9d:42: 53:ed:54:7f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsrikRejbvQYkLKBy6/+RS3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBhMmQ3MWMwZDE0NWVmMjc4MDQ3MTA5MjdiOTQzYzY3ZTUw YWU3YWIwHhcNMjUxMjE3MDkwMDQwWhcNMjUxMjE4MDkwMDQwWjAzMTEwLwYDVQQD Eyg0NDg4YWRhZmQ4ZmJjZDUzNjdlMDE1OWFmZmUyNGM1YmI2Yjc0NDI4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAktb5t/zJPQrESOb6V0mKFqY47HRF i7U6CSJtbg3xgOb8XYqGx/lfqUpjb1bL312dS38hfOcGewR+kUoAyRjcirI/HFEf 6RdgEy0zFmrqV+4dThbhYa1RoFZXaNsk8xg6ikkGWR0V7cmH909+PPdblqHqAutL xHhgQ+lMAzebGFwzzguWR50EqQCzjfI8aClvcsZgzS5VIwyMrzlqmAZY3qP1PIiK FVhiEUzrFlddQG9+pZPSDuK8PIWOnATHhgv5sZAsKoOBW+tierc1N04bVHSvs3KJ 3xuKE1TXbd/2pD1viBwUSQAMdShgmWicFsL0UFLtF2d4KVvokAYLXstiFwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFESIra/Y+81TZ+AVmv/iTFu2t0QoMB8GA1UdIwQY MBaAFAotccDRRe8ngEcQknuUPGflCuerMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ2kxeHdORkY3eWVBUnhDU2U1UThaLVVLNTZzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZS8yYjkxMGYtZGNjMS00MWRiLTk2Y2Qt MDkyZTg5ZDU5ZmE4LzEvQ2kxeHdORkY3eWVBUnhDU2U1UThaLVVLNTZzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xZS8yYjkxMGYtZGNjMS00MWRiLTk2Y2QtMDkyZTg5ZDU5ZmE4 LzEvQ2kxeHdORkY3eWVBUnhDU2U1UThaLVVLNTZzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdOkkog6N Xk+3hcrGKZWwORlZqw7yItl5RBIXVmqoyj5BkSa8eW5AR7bKGSMzstwt1IXM7Boy kdyVrovwQSSgekAGUIzJ+Du6coHj1ddd2mvBxJCAMa8XRbih2XVCbaFTX3vZami8 XAlZ6aJPTxU41HmVGryG5AfBW6NQx9E5lLqyFLi8KJ9ZZUcak0iooj9n5rU2KAck TINSxGeUhAGd+XaDx9w1k04iLXbdTq47h3gY/rRBSJflI4My2GKWUkAZ8UR8rDjB KfTx/jMyOUqqCWcj3kHMwozukv7F5DFCflS7y7mnl/me1Mgx7w7JG8JSBU6kqLqe yYiIiJ1CU+1Ufw== -----END CERTIFICATE-----Generated at Wed Dec 17 13:27:28 2025 by rpki-client