This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/706c03-7d35-4913-8a18-6e8784a7ad09/1/cIR_giGJfW6VLobqLDOauqzBMfU.mft File: cIR_giGJfW6VLobqLDOauqzBMfU.mft (raw, json) Hash identifier: yLfuCTI/OSDn0P4MIsOrd0PDA0T56iEDaMaT/95orAg= Subject key identifier: 0D:82:A1:28:8F:6E:D7:51:BA:8E:AC:79:F9:B1:D4:17:93:56:B0:6E Authority key identifier: 70:84:7F:82:21:89:7D:6E:95:2E:86:EA:2C:33:9A:BA:AC:C1:31:F5 Certificate issuer: /CN=70847f8221897d6e952e86ea2c339abaacc131f5 Certificate serial: 019B3E6CE488D0CEA7269B27C7065ECF1528 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cIR_giGJfW6VLobqLDOauqzBMfU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/706c03-7d35-4913-8a18-6e8784a7ad09/1/cIR_giGJfW6VLobqLDOauqzBMfU.mft Manifest number: 1093 Signing time: Sun 21 Dec 2025 01:01:22 +0000 Manifest this update: Sun 21 Dec 2025 01:01:22 +0000 Manifest next update: Mon 22 Dec 2025 01:01:22 +0000 Files and hashes: 1: 349zjBrXxWXdbWEBD0TY_PcES-4.roa (hash: dTkBBehXJumOuwcY3aMRaxc4m1QE9Au6OaxONrVwqa8=) 2: FGloAOGdHctONwf864BFw9r6804.roa (hash: idNgzg92xFKVGDg8Q8+8kqcQjJU43tGKLwcMZ1BO8+8=) 3: QeA9h5gc7h5TROkBqdTQKlfxGiI.roa (hash: wvC6P2mkgiV/WDCXbKURUPeQIyZPZgtW7FSvBfEWp/8=) 4: cIR_giGJfW6VLobqLDOauqzBMfU.crl (hash: Hpa7jJmDdeHSlteq8iqiaU8D/XtVYmNX6SKs/J073zg=) 5: f4DXZiMB_Ff_0JwzJIxf0LcmHB4.roa (hash: BYRfPeQZzgZNAMB4knpfUfsNVjUgJWJmqeqw3IISPlY=) 6: rguLiIijQORjnghvpZcGDmu1SjU.roa (hash: JNesrlv42ZJgaFQwOxaZT3TmKgM6sVVqVrh2EttTKxs=) 7: zWJS9qIiKhPDTGBp07EnN-zc5Ok.roa (hash: UIbGdiKmqLamnBzWNetbuRIAxAE+Pp02kC9Gg2VRxdw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/706c03-7d35-4913-8a18-6e8784a7ad09/1/cIR_giGJfW6VLobqLDOauqzBMfU.crl rsync://rpki.ripe.net/repository/DEFAULT/a3/706c03-7d35-4913-8a18-6e8784a7ad09/1/cIR_giGJfW6VLobqLDOauqzBMfU.mft rsync://rpki.ripe.net/repository/DEFAULT/cIR_giGJfW6VLobqLDOauqzBMfU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3e:6c:e4:88:d0:ce:a7:26:9b:27:c7:06:5e:cf:15:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=70847f8221897d6e952e86ea2c339abaacc131f5 Validity Not Before: Dec 21 01:01:22 2025 GMT Not After : Dec 22 01:01:22 2025 GMT Subject: CN=0d82a1288f6ed751ba8eac79f9b1d4179356b06e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:ae:55:98:52:6a:e3:c0:45:01:3c:59:e5:65: b4:ff:f2:f2:66:74:21:15:c2:41:01:19:73:33:98: 23:e6:7c:db:be:c7:56:84:d9:78:55:80:d7:91:a1: d9:2a:78:9f:05:b2:ff:b4:30:22:3b:b7:f6:74:e4: e7:12:ba:0e:b5:99:d4:ea:e4:1a:97:59:3a:51:00: fa:0a:94:02:c0:37:7d:41:fa:74:be:bb:54:8e:1c: 6a:12:d5:08:1e:e6:08:1b:74:a1:fc:f3:8c:91:fd: fe:f7:86:82:3e:40:32:48:a8:3b:43:94:e2:21:b9: 11:18:41:ec:33:e9:5d:fa:ca:32:5d:3b:33:6b:2d: 18:95:e7:50:6c:ae:50:9c:86:f9:a1:8a:11:80:6d: 74:bc:d0:e6:f1:a1:d4:8b:e2:42:91:43:0e:54:26: 8e:df:c2:cc:2f:76:ce:97:11:ab:9f:04:32:b2:10: 49:bc:83:0b:fc:a9:41:b9:70:dc:de:09:d2:68:36: b3:a3:c4:70:48:b5:1d:5a:3c:c3:05:0e:f4:6b:dd: a9:b5:8a:35:9b:cc:de:63:24:db:9a:2a:e2:d9:1d: 82:05:04:8c:13:01:87:3f:af:b5:9d:ab:7f:50:ed: 76:0e:02:0b:c7:69:b6:b3:60:06:e0:77:d0:ac:45: 58:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:82:A1:28:8F:6E:D7:51:BA:8E:AC:79:F9:B1:D4:17:93:56:B0:6E X509v3 Authority Key Identifier: keyid:70:84:7F:82:21:89:7D:6E:95:2E:86:EA:2C:33:9A:BA:AC:C1:31:F5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cIR_giGJfW6VLobqLDOauqzBMfU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/706c03-7d35-4913-8a18-6e8784a7ad09/1/cIR_giGJfW6VLobqLDOauqzBMfU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/706c03-7d35-4913-8a18-6e8784a7ad09/1/cIR_giGJfW6VLobqLDOauqzBMfU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2d:15:38:a6:fb:3e:5a:6f:01:5a:f2:55:8d:cc:bc:df:88:92: e4:12:29:77:c3:3e:94:c6:0a:c5:69:2b:d4:7f:1d:03:c0:d5: 8e:ea:d7:60:83:e2:fa:92:9e:5b:ca:4f:6e:43:9b:f6:75:df: e6:16:da:67:9f:c0:f3:5e:2b:3f:2c:01:71:ad:5e:09:6b:1e: d8:3d:be:bb:b9:9f:37:6c:5b:3c:ab:f0:1a:f4:2e:d0:59:b4: a7:ee:e1:b9:b8:dc:22:dc:d9:f0:32:42:60:ef:29:67:5c:00: 17:bb:d1:6c:1c:03:00:de:81:85:fa:9a:a9:c4:81:20:58:52: 71:06:0a:8a:ad:db:04:78:64:57:7f:a1:ac:e3:b3:07:92:76: 98:f3:c9:f1:73:35:0c:f7:38:98:7b:86:15:68:f5:f6:62:b3: ad:2e:2a:60:f7:73:67:1a:c7:27:03:42:9d:21:f9:d3:8a:c0: 31:0d:38:08:40:18:b1:4e:ac:51:97:fe:99:07:b4:2a:d6:d5: df:37:94:ce:89:d0:de:ef:4c:db:ff:5b:69:7e:a3:ec:ba:89: 87:b6:82:0c:d1:13:6f:d0:fd:3e:58:b8:88:75:9c:b2:b8:bb: 7f:06:80:61:c1:80:c4:65:b9:f4:43:a3:46:fb:08:a4:87:33: 2d:b0:34:33 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs+bOSI0M6nJpsnxwZezxUoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcwODQ3ZjgyMjE4OTdkNmU5NTJlODZlYTJjMzM5YWJhYWNj MTMxZjUwHhcNMjUxMjIxMDEwMTIyWhcNMjUxMjIyMDEwMTIyWjAzMTEwLwYDVQQD EygwZDgyYTEyODhmNmVkNzUxYmE4ZWFjNzlmOWIxZDQxNzkzNTZiMDZlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoa5VmFJq48BFATxZ5WW0//LyZnQh FcJBARlzM5gj5nzbvsdWhNl4VYDXkaHZKnifBbL/tDAiO7f2dOTnEroOtZnU6uQa l1k6UQD6CpQCwDd9Qfp0vrtUjhxqEtUIHuYIG3Sh/POMkf3+94aCPkAySKg7Q5Ti IbkRGEHsM+ld+soyXTszay0YledQbK5QnIb5oYoRgG10vNDm8aHUi+JCkUMOVCaO 38LML3bOlxGrnwQyshBJvIML/KlBuXDc3gnSaDazo8RwSLUdWjzDBQ70a92ptYo1 m8zeYyTbmiri2R2CBQSMEwGHP6+1nat/UO12DgILx2m2s2AG4HfQrEVYpwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFA2CoSiPbtdRuo6sefmx1BeTVrBuMB8GA1UdIwQY MBaAFHCEf4IhiX1ulS6G6iwzmrqswTH1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY0lSX2dpR0pmVzZWTG9icUxET2F1cXpCTWZVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMy83MDZjMDMtN2QzNS00OTEzLThhMTgt NmU4Nzg0YTdhZDA5LzEvY0lSX2dpR0pmVzZWTG9icUxET2F1cXpCTWZVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMy83MDZjMDMtN2QzNS00OTEzLThhMTgtNmU4Nzg0YTdhZDA5 LzEvY0lSX2dpR0pmVzZWTG9icUxET2F1cXpCTWZVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALRU4pvs+ Wm8BWvJVjcy834iS5BIpd8M+lMYKxWkr1H8dA8DVjurXYIPi+pKeW8pPbkOb9nXf 5hbaZ5/A814rPywBca1eCWse2D2+u7mfN2xbPKvwGvQu0Fm0p+7hubjcItzZ8DJC YO8pZ1wAF7vRbBwDAN6BhfqaqcSBIFhScQYKiq3bBHhkV3+hrOOzB5J2mPPJ8XM1 DPc4mHuGFWj19mKzrS4qYPdzZxrHJwNCnSH504rAMQ04CEAYsU6sUZf+mQe0KtbV 3zeUzonQ3u9M2/9baX6j7LqJh7aCDNETb9D9Pli4iHWcsri7fwaAYcGAxGW59EOj RvsIpIczLbA0Mw== -----END CERTIFICATE-----Generated at Sun Dec 21 06:54:19 2025 by rpki-client