This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/917d50-fc64-4b3e-91e9-a31893b0eafc/1/cAiszpDUdaD6oR0oVIakU1ILgfA.mft File: cAiszpDUdaD6oR0oVIakU1ILgfA.mft (raw, json) Hash identifier: qEhHgp2pOr5IQRmDGf3ArjvWfSbJ5EUrXEfyAyY/C9Q= Subject key identifier: 8E:C8:FE:5F:01:6A:87:7D:E9:B8:E3:48:8F:CE:18:D3:ED:D1:EF:C9 Authority key identifier: 70:08:AC:CE:90:D4:75:A0:FA:A1:1D:28:54:86:A4:53:52:0B:81:F0 Certificate issuer: /CN=7008acce90d475a0faa11d285486a453520b81f0 Certificate serial: 019B711029759D1A420F951C5FE7C5F3AC7F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cAiszpDUdaD6oR0oVIakU1ILgfA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/917d50-fc64-4b3e-91e9-a31893b0eafc/1/cAiszpDUdaD6oR0oVIakU1ILgfA.mft Manifest number: 01E1 Signing time: Tue 30 Dec 2025 21:00:43 +0000 Manifest this update: Tue 30 Dec 2025 21:00:43 +0000 Manifest next update: Wed 31 Dec 2025 21:00:43 +0000 Files and hashes: 1: SGExsZYw7zZNQMmCejqPLZCEzR4.roa (hash: lywDbb/BT202qwVyQW4Rrl3AkbHkGjJUpz5yvpYCOaU=) 2: cAiszpDUdaD6oR0oVIakU1ILgfA.crl (hash: VuIjnnylsWAPQmUaCZo6rcts2OC7bpdXwz1lqc/96yk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/917d50-fc64-4b3e-91e9-a31893b0eafc/1/cAiszpDUdaD6oR0oVIakU1ILgfA.crl rsync://rpki.ripe.net/repository/DEFAULT/33/917d50-fc64-4b3e-91e9-a31893b0eafc/1/cAiszpDUdaD6oR0oVIakU1ILgfA.mft rsync://rpki.ripe.net/repository/DEFAULT/cAiszpDUdaD6oR0oVIakU1ILgfA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 31 Dec 2025 21:00:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:71:10:29:75:9d:1a:42:0f:95:1c:5f:e7:c5:f3:ac:7f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7008acce90d475a0faa11d285486a453520b81f0 Validity Not Before: Dec 30 21:00:43 2025 GMT Not After : Dec 31 21:00:43 2025 GMT Subject: CN=8ec8fe5f016a877de9b8e3488fce18d3edd1efc9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:b5:f6:6c:89:e1:74:bb:8d:2f:3a:b8:a4:95: d4:80:5d:de:57:4e:c4:88:40:96:0c:bc:d8:25:bf: 71:fe:2b:64:90:de:06:13:2b:8a:f7:96:ac:42:29: ca:da:29:b3:55:55:cb:90:0c:01:d4:25:65:f9:b2: 7e:28:25:c8:8e:53:71:1b:9f:e1:49:2f:6e:bf:e1: b6:a8:16:fc:d1:8e:9f:d5:2b:88:cf:d2:71:93:72: d6:d6:3e:cd:22:68:e4:b8:73:a2:76:c8:90:3b:78: c7:ba:f2:19:56:d9:3a:e1:06:49:77:9e:d5:01:7d: 08:84:fd:1b:57:05:60:ab:5f:42:78:05:a4:a9:d1: b5:69:ab:75:8d:f4:9c:8f:15:76:62:9a:fa:a2:f0: 21:13:f2:5c:66:7b:ba:5f:a5:06:f0:0b:ac:ef:54: b5:5c:b7:40:89:0d:d5:b2:df:75:59:cd:68:9f:de: da:58:c2:e1:89:62:9e:f6:b0:4b:04:05:75:27:bc: f0:bf:f2:7e:de:cb:e5:81:5c:00:b1:21:a2:05:9b: 91:e1:cd:b0:8b:42:9c:56:96:7b:b4:9c:ef:23:1b: 45:07:9a:88:61:3a:62:dd:41:67:89:4f:3f:37:a6: 1e:df:fb:a6:8d:9f:ce:71:89:13:4e:0c:26:ca:8c: 9a:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:C8:FE:5F:01:6A:87:7D:E9:B8:E3:48:8F:CE:18:D3:ED:D1:EF:C9 X509v3 Authority Key Identifier: keyid:70:08:AC:CE:90:D4:75:A0:FA:A1:1D:28:54:86:A4:53:52:0B:81:F0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cAiszpDUdaD6oR0oVIakU1ILgfA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/917d50-fc64-4b3e-91e9-a31893b0eafc/1/cAiszpDUdaD6oR0oVIakU1ILgfA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/33/917d50-fc64-4b3e-91e9-a31893b0eafc/1/cAiszpDUdaD6oR0oVIakU1ILgfA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1d:6a:28:03:c7:45:40:ab:4b:35:91:9d:78:ce:d3:4a:29:83: a4:3a:e4:b4:95:4b:5c:5f:02:ed:0f:eb:3c:30:2c:6f:be:2c: 4c:4f:85:e8:63:f8:1f:96:7c:dd:b6:d6:8e:b7:13:dc:5e:83: 3e:e6:01:2f:20:ee:88:06:cc:4f:55:11:03:3e:66:29:f3:1a: af:77:8b:63:e8:57:91:f5:ca:c9:06:ee:cc:b9:6a:ed:55:91: 59:93:58:a2:cb:db:f4:3c:a0:8f:cb:5b:69:73:b7:80:43:35: a0:8d:82:97:98:04:97:fc:d9:fc:9b:bb:1f:71:96:ea:05:e6: a5:6d:89:15:11:3f:13:c5:97:67:63:f7:00:5a:c7:db:be:90: bd:1a:18:ae:55:5a:d0:4a:96:08:d7:14:68:72:b0:57:fb:89: 0d:8a:62:45:3f:0b:e6:fe:5b:f3:4a:a5:f0:c2:75:8c:fd:6c: 08:f2:24:63:e6:9a:5e:66:48:bf:c8:76:6d:43:7a:97:4a:ee: 60:00:99:2d:62:44:8a:3f:11:56:08:02:aa:b8:88:7d:ae:44: 57:83:0b:2c:85:24:81:b2:26:60:0b:78:91:c9:66:02:e1:20: a2:15:6d:44:73:81:88:46:c1:2c:b4:07:a9:e5:1b:1e:25:89: f2:d4:25:f6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtxECl1nRpCD5UcX+fF86x/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcwMDhhY2NlOTBkNDc1YTBmYWExMWQyODU0ODZhNDUzNTIw YjgxZjAwHhcNMjUxMjMwMjEwMDQzWhcNMjUxMjMxMjEwMDQzWjAzMTEwLwYDVQQD Eyg4ZWM4ZmU1ZjAxNmE4NzdkZTliOGUzNDg4ZmNlMThkM2VkZDFlZmM5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsrX2bInhdLuNLzq4pJXUgF3eV07E iECWDLzYJb9x/itkkN4GEyuK95asQinK2imzVVXLkAwB1CVl+bJ+KCXIjlNxG5/h SS9uv+G2qBb80Y6f1SuIz9Jxk3LW1j7NImjkuHOidsiQO3jHuvIZVtk64QZJd57V AX0IhP0bVwVgq19CeAWkqdG1aat1jfScjxV2Ypr6ovAhE/JcZnu6X6UG8Aus71S1 XLdAiQ3Vst91Wc1on97aWMLhiWKe9rBLBAV1J7zwv/J+3svlgVwAsSGiBZuR4c2w i0KcVpZ7tJzvIxtFB5qIYTpi3UFniU8/N6Ye3/umjZ/OcYkTTgwmyoyaaQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFI7I/l8Baod96bjjSI/OGNPt0e/JMB8GA1UdIwQY MBaAFHAIrM6Q1HWg+qEdKFSGpFNSC4HwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY0Fpc3pwRFVkYUQ2b1Iwb1ZJYWtVMUlMZ2ZBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMy85MTdkNTAtZmM2NC00YjNlLTkxZTkt YTMxODkzYjBlYWZjLzEvY0Fpc3pwRFVkYUQ2b1Iwb1ZJYWtVMUlMZ2ZBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMy85MTdkNTAtZmM2NC00YjNlLTkxZTktYTMxODkzYjBlYWZj LzEvY0Fpc3pwRFVkYUQ2b1Iwb1ZJYWtVMUlMZ2ZBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHWooA8dF QKtLNZGdeM7TSimDpDrktJVLXF8C7Q/rPDAsb74sTE+F6GP4H5Z83bbWjrcT3F6D PuYBLyDuiAbMT1URAz5mKfMar3eLY+hXkfXKyQbuzLlq7VWRWZNYosvb9Dygj8tb aXO3gEM1oI2Cl5gEl/zZ/Ju7H3GW6gXmpW2JFRE/E8WXZ2P3AFrH276QvRoYrlVa 0EqWCNcUaHKwV/uJDYpiRT8L5v5b80ql8MJ1jP1sCPIkY+aaXmZIv8h2bUN6l0ru YACZLWJEij8RVggCqriIfa5EV4MLLIUkgbImYAt4kclmAuEgohVtRHOBiEbBLLQH qeUbHiWJ8tQl9g== -----END CERTIFICATE-----Generated at Wed Dec 31 05:42:05 2025 by rpki-client