This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/851d45-1422-4b31-bd8f-7993b9e03b0f/1/CiebQDjgAue9ZOUHbRo56-lvI8Q.mft File: CiebQDjgAue9ZOUHbRo56-lvI8Q.mft (raw, json) Hash identifier: 7O7kY/FhtIgVwErNk4bUmlshU1oFa5Vpb1a+F1hx6zc= Subject key identifier: FD:B7:2A:61:E9:6E:8D:FB:2F:E7:04:2E:D9:E5:71:59:99:C3:15:CB Authority key identifier: 0A:27:9B:40:38:E0:02:E7:BD:64:E5:07:6D:1A:39:EB:E9:6F:23:C4 Certificate issuer: /CN=0a279b4038e002e7bd64e5076d1a39ebe96f23c4 Certificate serial: 019B3A8F7A9F50646CDB3867694C636849F5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CiebQDjgAue9ZOUHbRo56-lvI8Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/851d45-1422-4b31-bd8f-7993b9e03b0f/1/CiebQDjgAue9ZOUHbRo56-lvI8Q.mft Manifest number: 0836 Signing time: Sat 20 Dec 2025 07:00:40 +0000 Manifest this update: Sat 20 Dec 2025 07:00:40 +0000 Manifest next update: Sun 21 Dec 2025 07:00:40 +0000 Files and hashes: 1: CiebQDjgAue9ZOUHbRo56-lvI8Q.crl (hash: dbckbBi91j/pl5TzF3UsvOoXEIvk6sFSM7uKhy9ozCE=) 2: XgZiHyWgL10sySKObf_Bjn8Hh_Q.roa (hash: 2Dl4jp91F4zOnOBtmwjhJgpK+aRbbY/cT57xX5iOAng=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/851d45-1422-4b31-bd8f-7993b9e03b0f/1/CiebQDjgAue9ZOUHbRo56-lvI8Q.crl rsync://rpki.ripe.net/repository/DEFAULT/30/851d45-1422-4b31-bd8f-7993b9e03b0f/1/CiebQDjgAue9ZOUHbRo56-lvI8Q.mft rsync://rpki.ripe.net/repository/DEFAULT/CiebQDjgAue9ZOUHbRo56-lvI8Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 07:00:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3a:8f:7a:9f:50:64:6c:db:38:67:69:4c:63:68:49:f5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0a279b4038e002e7bd64e5076d1a39ebe96f23c4 Validity Not Before: Dec 20 07:00:40 2025 GMT Not After : Dec 21 07:00:40 2025 GMT Subject: CN=fdb72a61e96e8dfb2fe7042ed9e5715999c315cb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:d6:b8:58:5e:19:8a:cb:7c:30:fa:ce:8e:75: ae:07:80:97:3c:4e:3f:3a:e4:ff:17:47:86:63:da: cd:c6:1a:98:ec:47:8c:ca:a7:4f:a9:03:9c:1d:4c: 89:b8:97:0d:a5:a3:55:c9:bf:d4:ab:cf:dc:e8:3a: 6c:62:e9:8f:52:a1:1a:f1:c4:06:07:31:a5:44:ff: e9:73:cd:1e:b4:7c:7e:ba:eb:44:8a:bf:d4:30:b3: 8d:a1:47:55:b8:1d:54:ac:68:53:6d:4a:b3:f4:42: 3e:7b:9a:5e:81:fa:b2:22:ab:fd:0d:20:cf:73:19: a6:d0:95:be:a7:42:7e:60:54:96:b4:b6:0a:84:d1: 58:53:69:33:3f:c6:f3:6a:40:74:82:49:a6:88:1b: 9b:79:ec:48:53:07:8b:d0:bc:81:9a:6c:37:55:d8: bf:38:59:c6:7c:8b:f3:ec:ac:f2:cd:05:92:b4:20: ab:bc:f4:e4:35:29:53:58:3d:0c:ac:3e:05:49:ff: ce:10:ea:98:56:3e:be:a1:e1:bd:2c:5a:3e:64:fc: 2d:97:35:03:42:c6:45:6b:2e:30:e6:9e:01:34:10: 50:7f:3b:f3:db:6b:34:e8:8e:1f:11:2f:ac:da:23: 86:2b:1a:d0:a7:b4:17:2a:d8:48:00:0e:33:91:57: c3:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:B7:2A:61:E9:6E:8D:FB:2F:E7:04:2E:D9:E5:71:59:99:C3:15:CB X509v3 Authority Key Identifier: keyid:0A:27:9B:40:38:E0:02:E7:BD:64:E5:07:6D:1A:39:EB:E9:6F:23:C4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CiebQDjgAue9ZOUHbRo56-lvI8Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/851d45-1422-4b31-bd8f-7993b9e03b0f/1/CiebQDjgAue9ZOUHbRo56-lvI8Q.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/30/851d45-1422-4b31-bd8f-7993b9e03b0f/1/CiebQDjgAue9ZOUHbRo56-lvI8Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b1:57:be:66:56:1f:af:4f:46:fe:00:25:81:aa:d8:7a:ce:1c: 3d:f0:d4:32:86:34:5d:de:e6:78:7a:f3:e4:08:ae:01:6b:7c: c4:ff:1b:f6:83:bc:23:1e:d8:f0:74:e6:f1:0a:32:90:99:7d: 39:07:40:48:89:79:c8:d1:97:fd:11:3d:8b:21:51:41:a2:50: e3:32:6d:96:71:7d:cd:a3:d3:27:31:7b:b7:fc:bc:48:9e:8c: 6f:01:55:52:80:d2:af:15:ed:08:7e:d8:5d:2e:88:65:ef:3d: 54:dd:54:e6:23:8a:8c:bb:97:af:fd:3f:e7:e6:3e:ff:10:07: f1:b3:8d:83:e7:c3:61:b2:db:92:98:3a:ea:b9:9c:16:a2:62: d3:aa:33:50:4c:40:e2:ff:ec:aa:85:fe:44:96:9e:2d:cf:0c: a8:3f:15:ac:33:d6:36:62:f5:9c:a3:9d:6f:ce:50:c2:13:85: c7:c3:59:7a:8b:3f:8c:49:68:29:dd:43:e3:b4:07:76:9a:e1: c1:05:92:4f:99:b5:d8:1d:f6:c3:c6:f3:5b:22:26:4e:9d:ea: c3:a6:c0:40:c9:08:7b:ec:a2:a0:41:ea:fc:d3:32:2c:d8:07: 45:00:d5:b1:a6:96:7a:33:5a:b9:89:97:41:af:34:ec:d4:f6: fa:58:46:67 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs6j3qfUGRs2zhnaUxjaEn1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBhMjc5YjQwMzhlMDAyZTdiZDY0ZTUwNzZkMWEzOWViZTk2 ZjIzYzQwHhcNMjUxMjIwMDcwMDQwWhcNMjUxMjIxMDcwMDQwWjAzMTEwLwYDVQQD EyhmZGI3MmE2MWU5NmU4ZGZiMmZlNzA0MmVkOWU1NzE1OTk5YzMxNWNiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo9a4WF4Zist8MPrOjnWuB4CXPE4/ OuT/F0eGY9rNxhqY7EeMyqdPqQOcHUyJuJcNpaNVyb/Uq8/c6DpsYumPUqEa8cQG BzGlRP/pc80etHx+uutEir/UMLONoUdVuB1UrGhTbUqz9EI+e5pegfqyIqv9DSDP cxmm0JW+p0J+YFSWtLYKhNFYU2kzP8bzakB0gkmmiBubeexIUweL0LyBmmw3Vdi/ OFnGfIvz7KzyzQWStCCrvPTkNSlTWD0MrD4FSf/OEOqYVj6+oeG9LFo+ZPwtlzUD QsZFay4w5p4BNBBQfzvz22s06I4fES+s2iOGKxrQp7QXKthIAA4zkVfD7QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFP23KmHpbo37L+cELtnlcVmZwxXLMB8GA1UdIwQY MBaAFAonm0A44ALnvWTlB20aOevpbyPEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ2llYlFEamdBdWU5Wk9VSGJSbzU2LWx2SThRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC84NTFkNDUtMTQyMi00YjMxLWJkOGYt Nzk5M2I5ZTAzYjBmLzEvQ2llYlFEamdBdWU5Wk9VSGJSbzU2LWx2SThRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMC84NTFkNDUtMTQyMi00YjMxLWJkOGYtNzk5M2I5ZTAzYjBm LzEvQ2llYlFEamdBdWU5Wk9VSGJSbzU2LWx2SThRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsVe+ZlYf r09G/gAlgarYes4cPfDUMoY0Xd7meHrz5AiuAWt8xP8b9oO8Ix7Y8HTm8QoykJl9 OQdASIl5yNGX/RE9iyFRQaJQ4zJtlnF9zaPTJzF7t/y8SJ6MbwFVUoDSrxXtCH7Y XS6IZe89VN1U5iOKjLuXr/0/5+Y+/xAH8bONg+fDYbLbkpg66rmcFqJi06ozUExA 4v/sqoX+RJaeLc8MqD8VrDPWNmL1nKOdb85QwhOFx8NZeos/jEloKd1D47QHdprh wQWST5m12B32w8bzWyImTp3qw6bAQMkIe+yioEHq/NMyLNgHRQDVsaaWejNauYmX Qa807NT2+lhGZw== -----END CERTIFICATE-----Generated at Sat Dec 20 12:31:06 2025 by rpki-client