This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/ad18a0-b32c-4fcb-be9c-1caf0611374d/1/CIGcJ6W-PS2yIrBWN0R-1ugySHM.mft File: CIGcJ6W-PS2yIrBWN0R-1ugySHM.mft (raw, json) Hash identifier: VRVUm3bmO03xRFQwjxE6nZXyT6HJ/R1yS3SbhQeUUjA= Subject key identifier: B6:68:63:21:21:5D:A0:8B:67:9B:AA:29:E4:CE:AE:60:71:1D:B0:A0 Authority key identifier: 08:81:9C:27:A5:BE:3D:2D:B2:22:B0:56:37:44:7E:D6:E8:32:48:73 Certificate issuer: /CN=08819c27a5be3d2db222b05637447ed6e8324873 Certificate serial: 019B2741094283F2D98BCFC07DB32903C3DD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CIGcJ6W-PS2yIrBWN0R-1ugySHM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/ad18a0-b32c-4fcb-be9c-1caf0611374d/1/CIGcJ6W-PS2yIrBWN0R-1ugySHM.mft Manifest number: 14BE Signing time: Tue 16 Dec 2025 13:02:12 +0000 Manifest this update: Tue 16 Dec 2025 13:02:12 +0000 Manifest next update: Wed 17 Dec 2025 13:02:12 +0000 Files and hashes: 1: CIGcJ6W-PS2yIrBWN0R-1ugySHM.crl (hash: IWQyn/CilBR8w5m9bv7aKgRyWotfMCw/O5mZlB/SMMI=) 2: cwmq1wJ6AkXK6Pc0pO2YSXjmyM4.roa (hash: lzijLPFGvwLgwXEhuBP2K7HD20X3oCBqeudRqI1ymvc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/ad18a0-b32c-4fcb-be9c-1caf0611374d/1/CIGcJ6W-PS2yIrBWN0R-1ugySHM.crl rsync://rpki.ripe.net/repository/DEFAULT/bc/ad18a0-b32c-4fcb-be9c-1caf0611374d/1/CIGcJ6W-PS2yIrBWN0R-1ugySHM.mft rsync://rpki.ripe.net/repository/DEFAULT/CIGcJ6W-PS2yIrBWN0R-1ugySHM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 13:02:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:27:41:09:42:83:f2:d9:8b:cf:c0:7d:b3:29:03:c3:dd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08819c27a5be3d2db222b05637447ed6e8324873 Validity Not Before: Dec 16 13:02:12 2025 GMT Not After : Dec 17 13:02:12 2025 GMT Subject: CN=b6686321215da08b679baa29e4ceae60711db0a0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:ba:78:5f:91:19:06:c0:73:2d:ee:77:52:71: 41:68:a6:26:2e:84:57:ae:d3:5e:13:54:9b:89:a1: da:9b:71:94:33:7b:c3:10:9d:fd:d7:1c:22:d6:01: ad:24:70:5e:6d:49:30:0b:8e:f6:8f:69:40:13:99: 0b:31:d9:f9:b0:bf:d1:2a:54:67:d9:c5:80:22:21: c6:67:6c:92:f9:1a:1a:73:3c:0a:7c:40:66:74:d3: c4:2b:bc:39:8a:a2:96:78:1b:bb:9d:63:8d:99:ae: dd:36:31:94:f6:97:43:8c:fd:7c:8b:77:3f:44:02: 28:80:95:50:86:ec:4a:69:54:f1:b5:ac:8c:f6:17: 72:33:eb:f5:63:2a:ad:0e:ae:14:65:a4:43:3f:f4: f3:69:17:32:cf:01:c0:8b:21:2c:42:72:fe:6f:30: 25:b7:9d:df:7f:8b:3b:10:6b:f6:87:2b:df:6f:09: 7a:fc:bf:23:37:fc:b3:b4:23:4e:48:3f:81:82:e4: 07:94:81:28:7a:6f:55:d0:f8:ef:1e:47:fa:42:ba: f4:18:72:e7:6b:97:ef:b8:04:8b:57:b5:80:d4:ef: 84:14:94:5e:ef:f8:50:2b:2b:84:b5:76:3a:8e:df: b0:64:9c:82:bb:fa:f4:48:f3:a4:a8:b6:bb:c2:e8: e1:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:68:63:21:21:5D:A0:8B:67:9B:AA:29:E4:CE:AE:60:71:1D:B0:A0 X509v3 Authority Key Identifier: keyid:08:81:9C:27:A5:BE:3D:2D:B2:22:B0:56:37:44:7E:D6:E8:32:48:73 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CIGcJ6W-PS2yIrBWN0R-1ugySHM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/ad18a0-b32c-4fcb-be9c-1caf0611374d/1/CIGcJ6W-PS2yIrBWN0R-1ugySHM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/ad18a0-b32c-4fcb-be9c-1caf0611374d/1/CIGcJ6W-PS2yIrBWN0R-1ugySHM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8a:05:ce:02:f1:ce:2b:35:1f:ae:91:b7:07:46:13:b7:1c:34: a1:f3:7a:ab:c6:6d:7f:aa:aa:b2:f9:d5:61:5a:1c:b9:41:aa: 69:55:7b:e1:a6:a6:ea:bf:8e:a7:65:12:fd:0f:05:ac:24:16: 93:31:47:10:da:f5:02:c1:b7:10:61:20:32:14:7a:cc:7d:b4: a9:1e:9d:6d:e4:bd:01:d2:fa:c7:d2:03:c6:61:2a:2b:f8:6f: 6c:dc:c0:1c:67:ad:32:d6:43:20:be:7d:d0:3a:73:2b:41:36: e8:7d:2d:1d:24:f6:de:e2:7b:7b:32:67:a6:59:c4:db:80:86: dc:17:ab:b3:02:9e:cf:74:ef:ba:c4:f6:f1:b5:46:8f:85:e0: fb:0b:90:09:91:55:ab:21:e1:bb:74:8b:31:7d:05:31:1b:9c: 08:3c:12:56:df:6e:0a:14:c7:bb:30:48:e9:5e:7b:1f:4e:ea: e1:6c:b0:8d:44:e6:3a:6e:04:cc:75:92:2e:1d:1b:c0:4a:a0: 9f:65:30:41:9d:92:a6:ba:32:17:0c:ff:15:10:c9:2e:5c:24: 18:70:e1:27:52:e2:a8:bb:6f:7c:18:3f:cc:a2:83:2b:42:d4: 66:8b:f2:46:c0:93:ba:d5:83:8f:ab:95:a9:ca:bf:5b:30:98: 53:4f:87:6e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsnQQlCg/LZi8/AfbMpA8PdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA4ODE5YzI3YTViZTNkMmRiMjIyYjA1NjM3NDQ3ZWQ2ZTgz MjQ4NzMwHhcNMjUxMjE2MTMwMjEyWhcNMjUxMjE3MTMwMjEyWjAzMTEwLwYDVQQD EyhiNjY4NjMyMTIxNWRhMDhiNjc5YmFhMjllNGNlYWU2MDcxMWRiMGEwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxrp4X5EZBsBzLe53UnFBaKYmLoRX rtNeE1SbiaHam3GUM3vDEJ391xwi1gGtJHBebUkwC472j2lAE5kLMdn5sL/RKlRn 2cWAIiHGZ2yS+RoaczwKfEBmdNPEK7w5iqKWeBu7nWONma7dNjGU9pdDjP18i3c/ RAIogJVQhuxKaVTxtayM9hdyM+v1YyqtDq4UZaRDP/TzaRcyzwHAiyEsQnL+bzAl t53ff4s7EGv2hyvfbwl6/L8jN/yztCNOSD+BguQHlIEoem9V0PjvHkf6Qrr0GHLn a5fvuASLV7WA1O+EFJRe7/hQKyuEtXY6jt+wZJyCu/r0SPOkqLa7wujhswIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLZoYyEhXaCLZ5uqKeTOrmBxHbCgMB8GA1UdIwQY MBaAFAiBnCelvj0tsiKwVjdEftboMkhzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ0lHY0o2Vy1QUzJ5SXJCV04wUi0xdWd5U0hNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYy9hZDE4YTAtYjMyYy00ZmNiLWJlOWMt MWNhZjA2MTEzNzRkLzEvQ0lHY0o2Vy1QUzJ5SXJCV04wUi0xdWd5U0hNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYy9hZDE4YTAtYjMyYy00ZmNiLWJlOWMtMWNhZjA2MTEzNzRk LzEvQ0lHY0o2Vy1QUzJ5SXJCV04wUi0xdWd5U0hNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAigXOAvHO KzUfrpG3B0YTtxw0ofN6q8Ztf6qqsvnVYVocuUGqaVV74aam6r+Op2US/Q8FrCQW kzFHENr1AsG3EGEgMhR6zH20qR6dbeS9AdL6x9IDxmEqK/hvbNzAHGetMtZDIL59 0DpzK0E26H0tHST23uJ7ezJnplnE24CG3BerswKez3TvusT28bVGj4Xg+wuQCZFV qyHhu3SLMX0FMRucCDwSVt9uChTHuzBI6V57H07q4WywjUTmOm4EzHWSLh0bwEqg n2UwQZ2SproyFwz/FRDJLlwkGHDhJ1LiqLtvfBg/zKKDK0LUZovyRsCTutWDj6uV qcq/WzCYU0+Hbg== -----END CERTIFICATE-----Generated at Tue Dec 16 22:34:15 2025 by rpki-client