This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/3a39e9-3d40-46f8-bb0f-5ba43b118f75/1/CioVfwBRX5W2313A1S6xtdQ_3lw.mft File: CioVfwBRX5W2313A1S6xtdQ_3lw.mft (raw, json) Hash identifier: 7CwpEoS6gNAZrIhC0tRQj61oyb6BZXnoGKW0JFcb4WY= Subject key identifier: BE:1B:B8:E3:AD:B2:43:9B:31:E2:DA:14:50:A2:A4:09:BB:D3:68:14 Authority key identifier: 0A:2A:15:7F:00:51:5F:95:B6:DF:5D:C0:D5:2E:B1:B5:D4:3F:DE:5C Certificate issuer: /CN=0a2a157f00515f95b6df5dc0d52eb1b5d43fde5c Certificate serial: 019B5D5311F1DD1ADE55E6381B8C34A00E79 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CioVfwBRX5W2313A1S6xtdQ_3lw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/3a39e9-3d40-46f8-bb0f-5ba43b118f75/1/CioVfwBRX5W2313A1S6xtdQ_3lw.mft Manifest number: 1797 Signing time: Sat 27 Dec 2025 01:01:23 +0000 Manifest this update: Sat 27 Dec 2025 01:01:23 +0000 Manifest next update: Sun 28 Dec 2025 01:01:23 +0000 Files and hashes: 1: 4tKIyKN2LpGytONfG9Wwzb3sMh8.roa (hash: So7qtpci+LVeK7KYvgn0X4FAkS3oDmYxiev+fG5cuSs=) 2: CioVfwBRX5W2313A1S6xtdQ_3lw.crl (hash: I/Xhek57UJxrtKQkVSit7LXUEEomgxgn29dpPZ7j/5c=) 3: Ulk603SVbOQAiKSzR_IZBatvpSU.roa (hash: 1Gak7FJcv6XeZUXfgmGsLnHftg1ktwdBLJgL9CPQ7IA=) 4: rjFAvFxrdSB0H68aH_zK0lS1GcA.roa (hash: iKO/ulWqGpWzjwhANl857sDa0g01+J+R36f50OBJrb0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/3a39e9-3d40-46f8-bb0f-5ba43b118f75/1/CioVfwBRX5W2313A1S6xtdQ_3lw.crl rsync://rpki.ripe.net/repository/DEFAULT/3e/3a39e9-3d40-46f8-bb0f-5ba43b118f75/1/CioVfwBRX5W2313A1S6xtdQ_3lw.mft rsync://rpki.ripe.net/repository/DEFAULT/CioVfwBRX5W2313A1S6xtdQ_3lw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 28 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5d:53:11:f1:dd:1a:de:55:e6:38:1b:8c:34:a0:0e:79 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0a2a157f00515f95b6df5dc0d52eb1b5d43fde5c Validity Not Before: Dec 27 01:01:23 2025 GMT Not After : Dec 28 01:01:23 2025 GMT Subject: CN=be1bb8e3adb2439b31e2da1450a2a409bbd36814 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:b2:f9:ea:09:e4:02:ef:a6:52:55:c7:b0:d3: 70:94:3c:a3:fd:4f:be:86:e2:24:69:2e:68:1e:e5: d2:5e:9a:32:28:53:1c:a8:6d:b1:b5:01:90:23:b3: b0:40:9b:e0:69:ae:73:c5:cf:f6:97:9f:91:9b:7a: 0d:c4:b8:87:5a:76:62:33:bc:24:f6:34:e9:0e:05: 7d:0d:f7:43:ee:46:3d:2e:38:4b:9c:d8:c4:e9:23: aa:fa:2c:73:78:3a:f6:f3:fd:96:66:53:a7:0b:ab: ea:82:fa:a5:cc:4e:6e:24:67:25:73:fc:9e:91:32: c5:f5:de:81:89:1d:ff:ec:34:4e:ff:de:3c:d0:20: 65:7e:88:68:13:9c:b6:49:75:ef:8a:05:b7:bc:9b: 92:2c:7d:15:8f:4a:3b:db:b5:04:f5:63:d2:03:4d: e1:fb:40:28:c8:9e:cc:a0:07:cb:f8:12:5d:da:32: e7:f0:80:07:c9:fc:1c:09:3b:97:c6:06:81:86:41: 8b:61:3c:c1:a9:fd:69:1a:4b:9e:2e:f1:d2:72:56: ce:e1:da:46:97:c9:d2:29:0d:00:1e:68:1b:97:93: 35:9e:18:22:a7:7a:d3:a5:bb:35:71:6b:ee:05:a1: 93:bf:d5:00:a3:e9:f7:eb:25:a4:ca:fe:9f:0c:26: 8e:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:1B:B8:E3:AD:B2:43:9B:31:E2:DA:14:50:A2:A4:09:BB:D3:68:14 X509v3 Authority Key Identifier: keyid:0A:2A:15:7F:00:51:5F:95:B6:DF:5D:C0:D5:2E:B1:B5:D4:3F:DE:5C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CioVfwBRX5W2313A1S6xtdQ_3lw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/3a39e9-3d40-46f8-bb0f-5ba43b118f75/1/CioVfwBRX5W2313A1S6xtdQ_3lw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/3a39e9-3d40-46f8-bb0f-5ba43b118f75/1/CioVfwBRX5W2313A1S6xtdQ_3lw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 87:e9:bc:0e:1a:cb:44:59:1c:9e:9f:3d:cc:79:71:3f:f9:ed: 04:85:ec:57:2c:42:7c:f2:58:44:9d:e3:f8:71:9c:5a:c9:39: 21:cd:f0:d4:c4:f0:b0:3e:68:a6:44:e5:fd:42:9d:a6:b1:53: 61:f1:56:5d:ec:71:d7:0f:b6:ff:48:09:40:cb:53:a5:38:fa: a1:8b:99:2a:d2:31:ba:b5:54:9c:b9:08:3b:95:9a:d9:a2:62: 54:4c:d3:ac:01:b3:96:04:ab:b6:eb:c7:7e:fa:b0:2b:ca:46: a6:4d:ca:d5:f7:96:11:f0:ac:38:f8:73:45:ad:d2:b0:5c:cf: e0:68:65:76:09:71:55:7c:ee:dc:c7:ea:47:0d:c9:19:a2:e4: 15:87:ba:71:1c:c3:20:73:d7:48:67:d5:d2:d1:25:86:de:17: 85:f1:a6:97:77:49:b8:b7:b7:8a:68:82:a1:16:67:11:ff:90: 46:8c:84:b0:54:fb:14:28:14:dc:52:dd:c5:43:53:81:13:70: 13:a4:49:52:a9:07:29:4b:fb:94:19:3b:73:69:7b:54:3c:6a: a3:3f:e5:0d:3c:a0:f8:24:ab:c4:8b:d3:5c:4b:d7:0d:bb:6e: 72:91:5c:e0:4a:14:66:e5:7e:5e:17:ab:1c:6f:3f:4a:ee:76: 93:b7:36:85 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtdUxHx3RreVeY4G4w0oA55MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBhMmExNTdmMDA1MTVmOTViNmRmNWRjMGQ1MmViMWI1ZDQz ZmRlNWMwHhcNMjUxMjI3MDEwMTIzWhcNMjUxMjI4MDEwMTIzWjAzMTEwLwYDVQQD EyhiZTFiYjhlM2FkYjI0MzliMzFlMmRhMTQ1MGEyYTQwOWJiZDM2ODE0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnbL56gnkAu+mUlXHsNNwlDyj/U++ huIkaS5oHuXSXpoyKFMcqG2xtQGQI7OwQJvgaa5zxc/2l5+Rm3oNxLiHWnZiM7wk 9jTpDgV9DfdD7kY9LjhLnNjE6SOq+ixzeDr28/2WZlOnC6vqgvqlzE5uJGclc/ye kTLF9d6BiR3/7DRO/9480CBlfohoE5y2SXXvigW3vJuSLH0Vj0o727UE9WPSA03h +0AoyJ7MoAfL+BJd2jLn8IAHyfwcCTuXxgaBhkGLYTzBqf1pGkueLvHSclbO4dpG l8nSKQ0AHmgbl5M1nhgip3rTpbs1cWvuBaGTv9UAo+n36yWkyv6fDCaOzQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFL4buOOtskObMeLaFFCipAm702gUMB8GA1UdIwQY MBaAFAoqFX8AUV+Vtt9dwNUusbXUP95cMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ2lvVmZ3QlJYNVcyMzEzQTFTNnh0ZFFfM2x3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZS8zYTM5ZTktM2Q0MC00NmY4LWJiMGYt NWJhNDNiMTE4Zjc1LzEvQ2lvVmZ3QlJYNVcyMzEzQTFTNnh0ZFFfM2x3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZS8zYTM5ZTktM2Q0MC00NmY4LWJiMGYtNWJhNDNiMTE4Zjc1 LzEvQ2lvVmZ3QlJYNVcyMzEzQTFTNnh0ZFFfM2x3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAh+m8DhrL RFkcnp89zHlxP/ntBIXsVyxCfPJYRJ3j+HGcWsk5Ic3w1MTwsD5opkTl/UKdprFT YfFWXexx1w+2/0gJQMtTpTj6oYuZKtIxurVUnLkIO5Wa2aJiVEzTrAGzlgSrtuvH fvqwK8pGpk3K1feWEfCsOPhzRa3SsFzP4GhldglxVXzu3MfqRw3JGaLkFYe6cRzD IHPXSGfV0tElht4XhfGml3dJuLe3imiCoRZnEf+QRoyEsFT7FCgU3FLdxUNTgRNw E6RJUqkHKUv7lBk7c2l7VDxqoz/lDTyg+CSrxIvTXEvXDbtucpFc4EoUZuV+Xher HG8/Su52k7c2hQ== -----END CERTIFICATE-----Generated at Sat Dec 27 06:15:28 2025 by rpki-client