This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/3a39e9-3d40-46f8-bb0f-5ba43b118f75/1/CioVfwBRX5W2313A1S6xtdQ_3lw.mft File: CioVfwBRX5W2313A1S6xtdQ_3lw.mft (raw, json) Hash identifier: lPB+tj03mvFNaybitq7SjSCpjsiDnMP/tmG24I8k/Ys= Subject key identifier: 47:C0:98:75:AF:1E:0C:83:EE:B3:64:9A:09:84:BC:A3:E1:07:BE:24 Authority key identifier: 0A:2A:15:7F:00:51:5F:95:B6:DF:5D:C0:D5:2E:B1:B5:D4:3F:DE:5C Certificate issuer: /CN=0a2a157f00515f95b6df5dc0d52eb1b5d43fde5c Certificate serial: 019B3A8FCF4B469AD58399A9DFB240566785 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CioVfwBRX5W2313A1S6xtdQ_3lw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/3a39e9-3d40-46f8-bb0f-5ba43b118f75/1/CioVfwBRX5W2313A1S6xtdQ_3lw.mft Manifest number: 1785 Signing time: Sat 20 Dec 2025 07:01:01 +0000 Manifest this update: Sat 20 Dec 2025 07:01:01 +0000 Manifest next update: Sun 21 Dec 2025 07:01:01 +0000 Files and hashes: 1: 4tKIyKN2LpGytONfG9Wwzb3sMh8.roa (hash: So7qtpci+LVeK7KYvgn0X4FAkS3oDmYxiev+fG5cuSs=) 2: CioVfwBRX5W2313A1S6xtdQ_3lw.crl (hash: FmZmZgineAfUlhpr1ucu8Pd2J0SMG79nLu/Yv9JlMK0=) 3: Ulk603SVbOQAiKSzR_IZBatvpSU.roa (hash: 1Gak7FJcv6XeZUXfgmGsLnHftg1ktwdBLJgL9CPQ7IA=) 4: rjFAvFxrdSB0H68aH_zK0lS1GcA.roa (hash: iKO/ulWqGpWzjwhANl857sDa0g01+J+R36f50OBJrb0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/3a39e9-3d40-46f8-bb0f-5ba43b118f75/1/CioVfwBRX5W2313A1S6xtdQ_3lw.crl rsync://rpki.ripe.net/repository/DEFAULT/3e/3a39e9-3d40-46f8-bb0f-5ba43b118f75/1/CioVfwBRX5W2313A1S6xtdQ_3lw.mft rsync://rpki.ripe.net/repository/DEFAULT/CioVfwBRX5W2313A1S6xtdQ_3lw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 07:01:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3a:8f:cf:4b:46:9a:d5:83:99:a9:df:b2:40:56:67:85 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0a2a157f00515f95b6df5dc0d52eb1b5d43fde5c Validity Not Before: Dec 20 07:01:01 2025 GMT Not After : Dec 21 07:01:01 2025 GMT Subject: CN=47c09875af1e0c83eeb3649a0984bca3e107be24 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:12:d0:1d:01:42:3d:12:43:4c:85:fd:de:b6: 85:0b:3b:47:f7:b0:35:a8:08:f3:57:4e:e4:8f:49: c6:35:4e:fc:fd:aa:0f:09:1c:3d:46:da:34:4e:b6: b6:e6:90:76:90:01:12:aa:01:4a:f0:fe:7c:f9:58: 42:d9:4f:cb:94:a0:db:83:32:50:fa:60:61:d6:72: 66:13:b2:83:9e:a1:c3:89:21:b2:d0:65:fd:4b:bc: 7d:83:c1:98:e1:b6:27:dd:72:fe:0c:d7:67:d9:dd: f5:37:d5:46:06:ab:35:f0:5c:7b:b6:6b:cb:81:b1: 28:36:9f:20:88:59:25:5e:9f:97:d7:83:90:66:2d: 22:d6:6c:3c:c3:1f:c1:99:c5:ed:d5:0d:eb:fd:df: bc:2c:f0:77:16:2e:76:16:d0:00:79:e4:39:59:e8: f7:4c:00:8b:50:3c:89:d6:7d:3b:93:56:d0:f7:92: 00:0a:12:15:6c:15:10:6d:3a:b2:31:69:58:c3:54: 93:30:fa:92:c2:20:cb:f1:34:33:18:7d:f9:13:4f: bb:08:75:96:ce:bb:70:5a:61:5f:31:4d:fa:b5:8f: c1:5a:13:42:a6:74:f6:62:8a:e6:a6:30:d3:03:30: 63:45:4f:0e:3a:76:ae:fe:6f:43:d8:0d:b3:19:48: 4a:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:C0:98:75:AF:1E:0C:83:EE:B3:64:9A:09:84:BC:A3:E1:07:BE:24 X509v3 Authority Key Identifier: keyid:0A:2A:15:7F:00:51:5F:95:B6:DF:5D:C0:D5:2E:B1:B5:D4:3F:DE:5C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CioVfwBRX5W2313A1S6xtdQ_3lw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/3a39e9-3d40-46f8-bb0f-5ba43b118f75/1/CioVfwBRX5W2313A1S6xtdQ_3lw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/3a39e9-3d40-46f8-bb0f-5ba43b118f75/1/CioVfwBRX5W2313A1S6xtdQ_3lw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 28:d2:54:12:31:bf:94:de:25:65:dd:66:27:eb:10:53:16:3e: 83:21:6f:8e:fb:ee:cc:62:67:e3:8a:44:62:c9:8c:55:c0:4e: 86:8b:74:a3:3f:29:49:a8:f0:f3:32:84:8f:00:a6:12:22:c9: 7e:99:f8:e5:22:d8:4e:79:f9:45:0c:4c:7d:da:29:a7:8c:d0: a7:23:14:3f:02:d5:63:b5:d5:41:66:4b:d2:9d:ff:df:10:07: 82:6d:f0:a5:a5:e4:a2:98:2f:33:21:a9:1f:d6:2d:1f:9a:ea: fc:b8:ec:cb:df:9a:1b:ef:2d:14:29:3f:88:47:dc:37:41:25: ed:3a:b9:30:29:b6:fc:d1:6e:c2:9d:ce:98:12:6c:da:5f:43: 51:6f:ab:34:cd:bf:3f:d9:6d:98:fe:f5:ad:0a:55:07:87:1f: 17:e8:5d:2a:37:86:cf:68:41:e7:f0:fd:cd:7f:bc:8d:49:75: d9:41:e2:22:85:3e:13:c8:80:bb:29:9d:2d:b5:6e:17:d3:3a: 17:10:c2:fb:d8:a9:3e:38:da:30:4b:cf:d2:1c:26:a8:20:03: 4a:16:9f:09:3c:0a:13:d4:fb:dd:bf:36:d1:8b:62:2e:8c:3d: 20:e7:79:8d:a1:b2:4e:a7:3e:a3:21:fc:0b:d1:c1:1f:41:aa: 02:cf:fb:ad -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs6j89LRprVg5mp37JAVmeFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBhMmExNTdmMDA1MTVmOTViNmRmNWRjMGQ1MmViMWI1ZDQz ZmRlNWMwHhcNMjUxMjIwMDcwMTAxWhcNMjUxMjIxMDcwMTAxWjAzMTEwLwYDVQQD Eyg0N2MwOTg3NWFmMWUwYzgzZWViMzY0OWEwOTg0YmNhM2UxMDdiZTI0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0BLQHQFCPRJDTIX93raFCztH97A1 qAjzV07kj0nGNU78/aoPCRw9Rto0Tra25pB2kAESqgFK8P58+VhC2U/LlKDbgzJQ +mBh1nJmE7KDnqHDiSGy0GX9S7x9g8GY4bYn3XL+DNdn2d31N9VGBqs18Fx7tmvL gbEoNp8giFklXp+X14OQZi0i1mw8wx/BmcXt1Q3r/d+8LPB3Fi52FtAAeeQ5Wej3 TACLUDyJ1n07k1bQ95IAChIVbBUQbTqyMWlYw1STMPqSwiDL8TQzGH35E0+7CHWW zrtwWmFfMU36tY/BWhNCpnT2YormpjDTAzBjRU8OOnau/m9D2A2zGUhKhwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEfAmHWvHgyD7rNkmgmEvKPhB74kMB8GA1UdIwQY MBaAFAoqFX8AUV+Vtt9dwNUusbXUP95cMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ2lvVmZ3QlJYNVcyMzEzQTFTNnh0ZFFfM2x3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZS8zYTM5ZTktM2Q0MC00NmY4LWJiMGYt NWJhNDNiMTE4Zjc1LzEvQ2lvVmZ3QlJYNVcyMzEzQTFTNnh0ZFFfM2x3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZS8zYTM5ZTktM2Q0MC00NmY4LWJiMGYtNWJhNDNiMTE4Zjc1 LzEvQ2lvVmZ3QlJYNVcyMzEzQTFTNnh0ZFFfM2x3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKNJUEjG/ lN4lZd1mJ+sQUxY+gyFvjvvuzGJn44pEYsmMVcBOhot0oz8pSajw8zKEjwCmEiLJ fpn45SLYTnn5RQxMfdopp4zQpyMUPwLVY7XVQWZL0p3/3xAHgm3wpaXkopgvMyGp H9YtH5rq/Ljsy9+aG+8tFCk/iEfcN0El7Tq5MCm2/NFuwp3OmBJs2l9DUW+rNM2/ P9ltmP71rQpVB4cfF+hdKjeGz2hB5/D9zX+8jUl12UHiIoU+E8iAuymdLbVuF9M6 FxDC+9ipPjjaMEvP0hwmqCADShafCTwKE9T73b820YtiLow9IOd5jaGyTqc+oyH8 C9HBH0GqAs/7rQ== -----END CERTIFICATE-----Generated at Sat Dec 20 16:02:56 2025 by rpki-client