This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/96d14f-18c2-43a8-bc58-647289ad5a22/1/ci8LM2ULfWSYufWKrFopfpJhSCI.mft File: ci8LM2ULfWSYufWKrFopfpJhSCI.mft (raw, json) Hash identifier: GLrZNk4kFE+p8Ir1gVL62sSSGJ/LIkELqMkAjQSfg7Q= Subject key identifier: D1:3E:BA:D7:2E:B2:39:D8:D7:CF:03:F2:5D:73:D0:D0:CA:FC:27:02 Authority key identifier: 72:2F:0B:33:65:0B:7D:64:98:B9:F5:8A:AC:5A:29:7E:92:61:48:22 Certificate issuer: /CN=722f0b33650b7d6498b9f58aac5a297e92614822 Certificate serial: 019B35693A9C2616624A71818DF6BDB91E2F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ci8LM2ULfWSYufWKrFopfpJhSCI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/96d14f-18c2-43a8-bc58-647289ad5a22/1/ci8LM2ULfWSYufWKrFopfpJhSCI.mft Manifest number: 0B17 Signing time: Fri 19 Dec 2025 07:00:47 +0000 Manifest this update: Fri 19 Dec 2025 07:00:47 +0000 Manifest next update: Sat 20 Dec 2025 07:00:47 +0000 Files and hashes: 1: 5uh-8NvfQB_oZowhRUdfu_0v2fA.roa (hash: gCC1UC6wWvqsz5JLnyhaum++DmlgyZmiMdDqSAXaOG4=) 2: ci8LM2ULfWSYufWKrFopfpJhSCI.crl (hash: A/skD2TRn3hJOVOZvpTj90ZV0PLfpEKbAsN8fSoBIRw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/96d14f-18c2-43a8-bc58-647289ad5a22/1/ci8LM2ULfWSYufWKrFopfpJhSCI.crl rsync://rpki.ripe.net/repository/DEFAULT/26/96d14f-18c2-43a8-bc58-647289ad5a22/1/ci8LM2ULfWSYufWKrFopfpJhSCI.mft rsync://rpki.ripe.net/repository/DEFAULT/ci8LM2ULfWSYufWKrFopfpJhSCI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 07:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:35:69:3a:9c:26:16:62:4a:71:81:8d:f6:bd:b9:1e:2f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=722f0b33650b7d6498b9f58aac5a297e92614822 Validity Not Before: Dec 19 07:00:47 2025 GMT Not After : Dec 20 07:00:47 2025 GMT Subject: CN=d13ebad72eb239d8d7cf03f25d73d0d0cafc2702 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:fa:50:cc:33:48:8e:ea:f4:ed:b8:c2:ca:05: d3:af:13:8c:41:6c:7b:22:1c:50:4c:22:3b:e1:09: 0d:70:ec:d6:e0:20:51:c5:16:e1:76:94:85:e6:32: 3f:f5:97:e2:b9:60:4e:23:f5:01:af:e8:57:46:a0: 03:25:1b:49:d3:07:a0:ce:8b:29:34:0e:a0:4b:21: 77:d0:3f:92:3a:5d:60:9c:40:f3:af:ef:32:5c:29: bb:93:b0:c4:ac:2c:aa:dd:e4:97:84:52:26:cb:34: b0:d4:90:18:64:34:c0:64:c3:3d:68:4b:52:6f:56: 13:04:2a:f3:05:83:c4:0f:ed:24:51:ef:2a:b8:1b: 07:0b:cf:67:d4:d8:c1:d6:44:1b:7e:65:72:70:99: cd:e9:66:96:fc:64:68:5c:55:56:0b:9d:fa:db:6b: 69:80:1c:a4:4a:60:50:fa:89:06:9f:ec:09:4a:ef: 40:43:52:8e:01:3a:1f:ce:1b:cf:5e:d4:69:af:99: ca:d6:4d:df:b8:9a:d4:06:4e:0d:66:1a:2f:b4:a6: b3:e8:2f:27:27:48:0e:2b:76:76:88:c4:57:e2:8e: b7:f9:13:3e:86:5a:95:b0:25:f7:c0:87:01:75:63: 68:c0:12:c1:84:58:ee:29:0f:af:1d:83:c2:43:53: 00:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:3E:BA:D7:2E:B2:39:D8:D7:CF:03:F2:5D:73:D0:D0:CA:FC:27:02 X509v3 Authority Key Identifier: keyid:72:2F:0B:33:65:0B:7D:64:98:B9:F5:8A:AC:5A:29:7E:92:61:48:22 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ci8LM2ULfWSYufWKrFopfpJhSCI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/96d14f-18c2-43a8-bc58-647289ad5a22/1/ci8LM2ULfWSYufWKrFopfpJhSCI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/26/96d14f-18c2-43a8-bc58-647289ad5a22/1/ci8LM2ULfWSYufWKrFopfpJhSCI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 69:5e:95:2e:0d:22:21:14:9a:08:f4:75:b7:74:ce:62:41:da: 83:da:14:fc:4f:49:c7:52:78:26:9b:41:a2:49:05:5c:eb:1c: e4:19:82:2e:c6:cf:1e:ee:ac:35:f7:26:65:ed:e8:ca:89:50: 4c:a2:af:25:14:99:f9:2e:01:38:bd:cf:95:c5:6d:34:72:ee: 0f:38:e6:65:6a:41:9e:1e:46:ad:78:91:49:1f:7a:92:31:f3: e3:56:b4:83:c2:ea:a7:77:9a:9c:c4:8b:36:6f:a6:73:47:7d: 9f:73:c6:00:76:af:c4:88:0d:ec:9b:ce:78:f4:96:02:98:b6: 7e:5a:77:ca:89:4b:3c:8f:1f:25:61:20:15:d6:85:88:2b:81: c6:65:01:ab:28:e5:9d:e1:31:6d:89:07:d1:2d:b1:62:4c:4f: 82:7b:f4:68:e4:e1:81:37:8f:94:14:09:b3:57:fc:fa:cd:e7: ab:1a:a2:9d:32:90:c4:95:7c:8b:b6:11:06:0d:37:f4:72:47: 83:dc:4a:65:51:5d:e7:b3:60:00:11:fc:85:3e:fd:18:1b:32: eb:d1:d5:99:a1:40:17:e8:8b:04:b4:ab:73:a0:75:6d:15:9e: fe:3a:a6:5f:f0:69:62:fb:e8:12:e5:14:db:08:3c:42:b9:d6: c3:a2:0c:bb -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs1aTqcJhZiSnGBjfa9uR4vMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcyMmYwYjMzNjUwYjdkNjQ5OGI5ZjU4YWFjNWEyOTdlOTI2 MTQ4MjIwHhcNMjUxMjE5MDcwMDQ3WhcNMjUxMjIwMDcwMDQ3WjAzMTEwLwYDVQQD EyhkMTNlYmFkNzJlYjIzOWQ4ZDdjZjAzZjI1ZDczZDBkMGNhZmMyNzAyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5vpQzDNIjur07bjCygXTrxOMQWx7 IhxQTCI74QkNcOzW4CBRxRbhdpSF5jI/9ZfiuWBOI/UBr+hXRqADJRtJ0wegzosp NA6gSyF30D+SOl1gnEDzr+8yXCm7k7DErCyq3eSXhFImyzSw1JAYZDTAZMM9aEtS b1YTBCrzBYPED+0kUe8quBsHC89n1NjB1kQbfmVycJnN6WaW/GRoXFVWC53622tp gBykSmBQ+okGn+wJSu9AQ1KOATofzhvPXtRpr5nK1k3fuJrUBk4NZhovtKaz6C8n J0gOK3Z2iMRX4o63+RM+hlqVsCX3wIcBdWNowBLBhFjuKQ+vHYPCQ1MAHwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNE+utcusjnY188D8l1z0NDK/CcCMB8GA1UdIwQY MBaAFHIvCzNlC31kmLn1iqxaKX6SYUgiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY2k4TE0yVUxmV1NZdWZXS3JGb3BmcEpoU0NJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNi85NmQxNGYtMThjMi00M2E4LWJjNTgt NjQ3Mjg5YWQ1YTIyLzEvY2k4TE0yVUxmV1NZdWZXS3JGb3BmcEpoU0NJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNi85NmQxNGYtMThjMi00M2E4LWJjNTgtNjQ3Mjg5YWQ1YTIy LzEvY2k4TE0yVUxmV1NZdWZXS3JGb3BmcEpoU0NJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaV6VLg0i IRSaCPR1t3TOYkHag9oU/E9Jx1J4JptBokkFXOsc5BmCLsbPHu6sNfcmZe3oyolQ TKKvJRSZ+S4BOL3PlcVtNHLuDzjmZWpBnh5GrXiRSR96kjHz41a0g8Lqp3eanMSL Nm+mc0d9n3PGAHavxIgN7JvOePSWApi2flp3yolLPI8fJWEgFdaFiCuBxmUBqyjl neExbYkH0S2xYkxPgnv0aOThgTePlBQJs1f8+s3nqxqinTKQxJV8i7YRBg039HJH g9xKZVFd57NgABH8hT79GBsy69HVmaFAF+iLBLSrc6B1bRWe/jqmX/BpYvvoEuUU 2wg8QrnWw6IMuw== -----END CERTIFICATE-----Generated at Fri Dec 19 12:47:26 2025 by rpki-client