This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/04ecc0-663c-460e-920d-332ee5425c7a/1/CgIUob8dOv0t1msjqZcxBrXTFso.mft File: CgIUob8dOv0t1msjqZcxBrXTFso.mft (raw, json) Hash identifier: OLyNu3Hqvc/OS/DNEAjqZ71S6pDGBrx8EI65LpSbnoo= Subject key identifier: B3:42:9B:5F:4F:D1:76:95:AB:07:22:AB:10:6A:B9:2E:0E:08:BF:91 Authority key identifier: 0A:02:14:A1:BF:1D:3A:FD:2D:D6:6B:23:A9:97:31:06:B5:D3:16:CA Certificate issuer: /CN=0a0214a1bf1d3afd2dd66b23a9973106b5d316ca Certificate serial: 019B44DCA2E654C0BCB4EE6D8931D0EE0DA2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CgIUob8dOv0t1msjqZcxBrXTFso.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/04ecc0-663c-460e-920d-332ee5425c7a/1/CgIUob8dOv0t1msjqZcxBrXTFso.mft Manifest number: 126E Signing time: Mon 22 Dec 2025 07:01:08 +0000 Manifest this update: Mon 22 Dec 2025 07:01:08 +0000 Manifest next update: Tue 23 Dec 2025 07:01:08 +0000 Files and hashes: 1: CgIUob8dOv0t1msjqZcxBrXTFso.crl (hash: wl5xKbLIEJrCWab2i4tYOo93O9JXWAUbE1FYg2iu4x0=) 2: EaaXkbC8P0tMcWH8_B2AeHqJuik.roa (hash: Agyi8/XYUtn0V9u60ReeITYzaWhDJOT1A+JDHxK163o=) 3: iRncY0RPMdG6ZS1FNbvbNQvbM88.roa (hash: cZd3pDxm+3G7IN3N9+ceJiYJz5MHexdMYYiB+WqQjOw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/04ecc0-663c-460e-920d-332ee5425c7a/1/CgIUob8dOv0t1msjqZcxBrXTFso.crl rsync://rpki.ripe.net/repository/DEFAULT/c9/04ecc0-663c-460e-920d-332ee5425c7a/1/CgIUob8dOv0t1msjqZcxBrXTFso.mft rsync://rpki.ripe.net/repository/DEFAULT/CgIUob8dOv0t1msjqZcxBrXTFso.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 07:01:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:44:dc:a2:e6:54:c0:bc:b4:ee:6d:89:31:d0:ee:0d:a2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0a0214a1bf1d3afd2dd66b23a9973106b5d316ca Validity Not Before: Dec 22 07:01:08 2025 GMT Not After : Dec 23 07:01:08 2025 GMT Subject: CN=b3429b5f4fd17695ab0722ab106ab92e0e08bf91 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:ac:02:06:90:8a:25:21:48:7c:a2:07:a2:d8: c7:f2:0d:24:80:67:2a:f2:7c:e2:47:90:9f:40:be: 82:5b:62:40:26:1e:78:41:45:8a:fe:75:ba:5e:6c: 32:ce:1a:2f:ee:e9:55:d1:2c:33:74:70:88:be:36: 67:50:69:50:cd:c7:6d:8a:fc:81:75:ae:bd:cd:ca: 50:43:64:4d:b6:16:96:78:ac:f2:c9:b3:75:95:d9: 16:91:10:4b:81:4f:bf:da:7d:3f:fb:6e:cf:36:09: ca:a9:c6:3c:66:b5:28:93:18:47:20:74:02:44:68: c6:c3:bc:a3:7b:b6:5b:ee:05:3e:b7:22:80:e0:e6: 99:1d:4c:7e:0d:b8:9b:c9:a5:d2:b6:60:31:bf:05: 11:03:42:a5:4f:6b:8a:24:a8:26:3b:1d:88:2a:c5: 8c:35:ad:ba:d6:9c:99:f1:69:ae:69:ce:2d:f6:bd: 76:ef:45:1f:b3:15:a0:46:7a:79:97:38:30:73:11: e3:15:63:a8:d4:6b:9b:bc:52:1e:1e:6f:d1:0b:e4: f0:82:48:f4:99:07:35:61:7f:4e:43:9d:b0:b7:1d: 23:3d:54:66:34:27:90:56:4e:b4:61:6e:d6:17:f3: 95:fd:0f:5e:28:0a:38:97:63:69:25:81:e9:85:41: 65:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:42:9B:5F:4F:D1:76:95:AB:07:22:AB:10:6A:B9:2E:0E:08:BF:91 X509v3 Authority Key Identifier: keyid:0A:02:14:A1:BF:1D:3A:FD:2D:D6:6B:23:A9:97:31:06:B5:D3:16:CA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CgIUob8dOv0t1msjqZcxBrXTFso.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/04ecc0-663c-460e-920d-332ee5425c7a/1/CgIUob8dOv0t1msjqZcxBrXTFso.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/04ecc0-663c-460e-920d-332ee5425c7a/1/CgIUob8dOv0t1msjqZcxBrXTFso.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 62:32:c2:f9:58:0c:18:6a:a8:61:7a:be:89:b0:3c:e2:6d:7d: d3:40:ca:83:17:be:ea:f6:fc:a2:3c:f3:eb:3a:5b:1d:ab:b0: d7:a9:70:08:a2:80:9c:ee:cc:60:b2:60:b4:a7:b0:c1:38:1c: 76:86:e1:1f:fe:a1:5c:7b:9c:78:8b:14:52:47:c5:5e:7e:e4: 3e:b4:aa:d0:63:03:e5:5b:24:ef:c1:55:a2:44:29:73:f7:01: a4:12:bd:ee:c0:34:29:87:be:21:5d:14:46:1f:f7:a2:ca:1a: 9b:62:56:a7:11:9c:1a:a7:ec:3c:e1:82:ea:6c:3b:69:1b:aa: 33:81:0e:2b:f1:bc:bd:ab:98:00:42:46:30:bd:54:d2:ee:0c: bb:28:dd:25:d8:01:4c:f9:8c:e7:4f:b6:03:30:88:7f:b1:7a: d8:e0:5d:83:c9:73:c4:42:05:40:e9:8c:36:33:15:72:b5:6b: 57:a0:f6:af:61:ae:af:13:25:31:39:b1:aa:03:08:ec:f4:f8: 10:c3:71:e0:a6:ef:8f:5d:0c:ef:15:fd:bf:23:69:c4:3c:47: 8a:fb:1f:18:5a:bf:26:f0:a9:d4:c6:9b:50:cb:b8:a8:2f:2f: 76:93:c3:8f:c3:77:2e:3f:1f:6a:a1:39:99:75:a6:f5:14:80: 1b:70:34:1a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtE3KLmVMC8tO5tiTHQ7g2iMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBhMDIxNGExYmYxZDNhZmQyZGQ2NmIyM2E5OTczMTA2YjVk MzE2Y2EwHhcNMjUxMjIyMDcwMTA4WhcNMjUxMjIzMDcwMTA4WjAzMTEwLwYDVQQD EyhiMzQyOWI1ZjRmZDE3Njk1YWIwNzIyYWIxMDZhYjkyZTBlMDhiZjkxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzawCBpCKJSFIfKIHotjH8g0kgGcq 8nziR5CfQL6CW2JAJh54QUWK/nW6Xmwyzhov7ulV0SwzdHCIvjZnUGlQzcdtivyB da69zcpQQ2RNthaWeKzyybN1ldkWkRBLgU+/2n0/+27PNgnKqcY8ZrUokxhHIHQC RGjGw7yje7Zb7gU+tyKA4OaZHUx+DbibyaXStmAxvwURA0KlT2uKJKgmOx2IKsWM Na261pyZ8Wmuac4t9r1270UfsxWgRnp5lzgwcxHjFWOo1GubvFIeHm/RC+Twgkj0 mQc1YX9OQ52wtx0jPVRmNCeQVk60YW7WF/OV/Q9eKAo4l2NpJYHphUFl7wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLNCm19P0XaVqwciqxBquS4OCL+RMB8GA1UdIwQY MBaAFAoCFKG/HTr9LdZrI6mXMQa10xbKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ2dJVW9iOGRPdjB0MW1zanFaY3hCclhURnNvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOS8wNGVjYzAtNjYzYy00NjBlLTkyMGQt MzMyZWU1NDI1YzdhLzEvQ2dJVW9iOGRPdjB0MW1zanFaY3hCclhURnNvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOS8wNGVjYzAtNjYzYy00NjBlLTkyMGQtMzMyZWU1NDI1Yzdh LzEvQ2dJVW9iOGRPdjB0MW1zanFaY3hCclhURnNvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYjLC+VgM GGqoYXq+ibA84m1900DKgxe+6vb8ojzz6zpbHauw16lwCKKAnO7MYLJgtKewwTgc dobhH/6hXHuceIsUUkfFXn7kPrSq0GMD5Vsk78FVokQpc/cBpBK97sA0KYe+IV0U Rh/3osoam2JWpxGcGqfsPOGC6mw7aRuqM4EOK/G8vauYAEJGML1U0u4MuyjdJdgB TPmM50+2AzCIf7F62OBdg8lzxEIFQOmMNjMVcrVrV6D2r2GurxMlMTmxqgMI7PT4 EMNx4Kbvj10M7xX9vyNpxDxHivsfGFq/JvCp1MabUMu4qC8vdpPDj8N3Lj8faqE5 mXWm9RSAG3A0Gg== -----END CERTIFICATE-----Generated at Mon Dec 22 15:40:05 2025 by rpki-client