This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/2b910f-dcc1-41db-96cd-092e89d59fa8/1/Ci1xwNFF7yeARxCSe5Q8Z-UK56s.mft File: Ci1xwNFF7yeARxCSe5Q8Z-UK56s.mft (raw, json) Hash identifier: XdVDqMaHDnGld5RmOXmRr+kFmGa/SK6qus/cNzKOvx0= Subject key identifier: B9:6D:78:1A:4A:6D:21:ED:DE:06:08:2B:74:61:2C:CF:F8:78:40:84 Authority key identifier: 0A:2D:71:C0:D1:45:EF:27:80:47:10:92:7B:94:3C:67:E5:0A:E7:AB Certificate issuer: /CN=0a2d71c0d145ef27804710927b943c67e50ae7ab Certificate serial: 019B299BDD944609CA029416FA76B4CFAF6B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ci1xwNFF7yeARxCSe5Q8Z-UK56s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/2b910f-dcc1-41db-96cd-092e89d59fa8/1/Ci1xwNFF7yeARxCSe5Q8Z-UK56s.mft Manifest number: 14B7 Signing time: Wed 17 Dec 2025 00:00:39 +0000 Manifest this update: Wed 17 Dec 2025 00:00:39 +0000 Manifest next update: Thu 18 Dec 2025 00:00:39 +0000 Files and hashes: 1: 2WXmLCsyw8fMc90USjqmpJq_P0k.roa (hash: X6trTAm4sd1BCoRMyM8T/lu1+HYVfbsSp9+0QPBx8Ps=) 2: Ci1xwNFF7yeARxCSe5Q8Z-UK56s.crl (hash: mkl99MO+aZzrmryUIZSncYDdCZiOX0RRWp8VYhK6Eek=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/2b910f-dcc1-41db-96cd-092e89d59fa8/1/Ci1xwNFF7yeARxCSe5Q8Z-UK56s.crl rsync://rpki.ripe.net/repository/DEFAULT/1e/2b910f-dcc1-41db-96cd-092e89d59fa8/1/Ci1xwNFF7yeARxCSe5Q8Z-UK56s.mft rsync://rpki.ripe.net/repository/DEFAULT/Ci1xwNFF7yeARxCSe5Q8Z-UK56s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 23:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:29:9b:dd:94:46:09:ca:02:94:16:fa:76:b4:cf:af:6b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0a2d71c0d145ef27804710927b943c67e50ae7ab Validity Not Before: Dec 17 00:00:39 2025 GMT Not After : Dec 18 00:00:39 2025 GMT Subject: CN=b96d781a4a6d21edde06082b74612ccff8784084 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:d4:cb:f8:e1:4f:fe:9f:3c:2b:e2:df:cd:6d: db:56:a4:61:f9:33:c5:8d:c7:49:27:8f:44:61:52: c5:30:a8:82:ed:f2:11:2f:fc:68:96:0b:db:8d:aa: c1:9d:f4:2e:8c:85:9d:3f:b7:13:17:e9:2a:75:1a: 3e:4b:ac:4a:09:8c:d7:16:a7:ad:54:8c:9a:7b:a9: 0b:6a:24:54:d9:99:0f:a5:47:ce:b2:e4:96:b6:14: d5:34:91:2e:eb:83:2a:70:99:7c:a4:b4:bd:75:44: 9b:98:2c:b0:01:fb:3c:5b:1c:a1:2d:af:94:36:73: c6:5d:1d:b3:64:11:10:fc:63:ae:c8:08:3c:e6:58: 00:b6:6e:2a:74:db:63:34:78:f3:c8:1a:fb:86:84: 8e:50:79:5e:ac:ad:63:63:53:6e:fe:fe:2d:d1:dd: 19:bc:bb:0d:db:9e:e9:d3:18:cf:84:55:f5:c4:91: 46:f3:07:ae:fd:b9:6f:c9:00:71:5e:d6:e4:6c:a3: 3e:2a:8c:17:32:1a:f7:fd:80:6f:d5:d9:1d:86:8c: 7e:15:d5:e2:eb:a5:58:79:77:66:08:ae:21:1b:42: ec:d0:ff:8c:dc:e7:8e:c0:64:54:8a:17:f6:ee:44: 1f:36:60:b7:9d:38:93:bc:18:ad:e0:1e:e6:a8:51: 98:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:6D:78:1A:4A:6D:21:ED:DE:06:08:2B:74:61:2C:CF:F8:78:40:84 X509v3 Authority Key Identifier: keyid:0A:2D:71:C0:D1:45:EF:27:80:47:10:92:7B:94:3C:67:E5:0A:E7:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ci1xwNFF7yeARxCSe5Q8Z-UK56s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/2b910f-dcc1-41db-96cd-092e89d59fa8/1/Ci1xwNFF7yeARxCSe5Q8Z-UK56s.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/2b910f-dcc1-41db-96cd-092e89d59fa8/1/Ci1xwNFF7yeARxCSe5Q8Z-UK56s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b2:7a:61:8b:c8:87:3d:9c:65:2a:24:43:94:cd:9f:be:06:97: f9:c9:0f:1e:55:7f:5c:77:7c:e8:a9:02:cc:8f:e6:e8:ef:2d: 6a:7e:0f:01:a6:66:5e:52:74:af:54:fc:a0:f3:5f:4f:e6:e9: 09:b0:b6:b1:f0:5f:e8:11:10:67:8c:60:2a:d4:1f:88:10:f6: aa:7a:a7:a6:e4:36:47:e3:ce:8e:1c:12:61:10:0c:74:8a:02: 0e:63:3d:13:d6:2d:1f:ee:3d:05:d3:7b:f8:35:48:c1:06:32: 44:5f:53:4c:30:a6:a7:28:ce:90:54:74:05:36:59:0c:30:13: 47:fc:55:b9:88:e2:c3:43:f6:40:50:c9:f3:b4:3e:2b:79:b9: d6:91:00:a9:86:81:ad:b0:f5:32:5c:c7:9a:4a:b2:c9:c4:42: c0:44:fa:4a:6d:27:a1:d2:90:8a:9e:ae:a1:8f:48:20:d1:37: 49:3b:27:ef:95:a1:26:44:0e:2e:b3:9f:08:0a:43:9a:4e:c9: f8:73:d8:62:e7:dd:94:29:c1:29:8a:5e:80:51:30:1d:cc:f1: 42:dc:31:7e:71:80:84:7b:6e:f7:d4:9e:88:72:50:75:34:30: 7b:e1:a2:a9:0d:27:51:66:ac:4b:cf:74:10:e0:1f:c8:b6:2b: fe:9b:e6:86 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZspm92URgnKApQW+na0z69rMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBhMmQ3MWMwZDE0NWVmMjc4MDQ3MTA5MjdiOTQzYzY3ZTUw YWU3YWIwHhcNMjUxMjE3MDAwMDM5WhcNMjUxMjE4MDAwMDM5WjAzMTEwLwYDVQQD EyhiOTZkNzgxYTRhNmQyMWVkZGUwNjA4MmI3NDYxMmNjZmY4Nzg0MDg0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5dTL+OFP/p88K+LfzW3bVqRh+TPF jcdJJ49EYVLFMKiC7fIRL/xolgvbjarBnfQujIWdP7cTF+kqdRo+S6xKCYzXFqet VIyae6kLaiRU2ZkPpUfOsuSWthTVNJEu64MqcJl8pLS9dUSbmCywAfs8WxyhLa+U NnPGXR2zZBEQ/GOuyAg85lgAtm4qdNtjNHjzyBr7hoSOUHlerK1jY1Nu/v4t0d0Z vLsN257p0xjPhFX1xJFG8weu/blvyQBxXtbkbKM+KowXMhr3/YBv1dkdhox+FdXi 66VYeXdmCK4hG0Ls0P+M3OeOwGRUihf27kQfNmC3nTiTvBit4B7mqFGYdwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLlteBpKbSHt3gYIK3RhLM/4eECEMB8GA1UdIwQY MBaAFAotccDRRe8ngEcQknuUPGflCuerMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ2kxeHdORkY3eWVBUnhDU2U1UThaLVVLNTZzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZS8yYjkxMGYtZGNjMS00MWRiLTk2Y2Qt MDkyZTg5ZDU5ZmE4LzEvQ2kxeHdORkY3eWVBUnhDU2U1UThaLVVLNTZzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xZS8yYjkxMGYtZGNjMS00MWRiLTk2Y2QtMDkyZTg5ZDU5ZmE4 LzEvQ2kxeHdORkY3eWVBUnhDU2U1UThaLVVLNTZzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsnphi8iH PZxlKiRDlM2fvgaX+ckPHlV/XHd86KkCzI/m6O8tan4PAaZmXlJ0r1T8oPNfT+bp CbC2sfBf6BEQZ4xgKtQfiBD2qnqnpuQ2R+POjhwSYRAMdIoCDmM9E9YtH+49BdN7 +DVIwQYyRF9TTDCmpyjOkFR0BTZZDDATR/xVuYjiw0P2QFDJ87Q+K3m51pEAqYaB rbD1MlzHmkqyycRCwET6Sm0nodKQip6uoY9IINE3STsn75WhJkQOLrOfCApDmk7J +HPYYufdlCnBKYpegFEwHczxQtwxfnGAhHtu99SeiHJQdTQwe+GiqQ0nUWasS890 EOAfyLYr/pvmhg== -----END CERTIFICATE-----Generated at Wed Dec 17 09:46:27 2025 by rpki-client