This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/a2a52c-136a-43a8-967c-f6d966ca4f07/1/CI4DIScTMq_HfkyFefDlVZzAnFA.mft File: CI4DIScTMq_HfkyFefDlVZzAnFA.mft (raw, json) Hash identifier: DxK7DY1EQRE4k0dbdmvojSHVw7IemU4Jl/5Pku2wmHc= Subject key identifier: 9B:D6:4A:39:4A:AF:A1:1C:E4:FB:B4:85:FA:79:10:63:23:EE:18:81 Authority key identifier: 08:8E:03:21:27:13:32:AF:C7:7E:4C:85:79:F0:E5:55:9C:C0:9C:50 Certificate issuer: /CN=088e0321271332afc77e4c8579f0e5559cc09c50 Certificate serial: 019B22F572B04B1551E2D33538D0E75F8751 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CI4DIScTMq_HfkyFefDlVZzAnFA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/a2a52c-136a-43a8-967c-f6d966ca4f07/1/CI4DIScTMq_HfkyFefDlVZzAnFA.mft Manifest number: 1442 Signing time: Mon 15 Dec 2025 17:01:09 +0000 Manifest this update: Mon 15 Dec 2025 17:01:09 +0000 Manifest next update: Tue 16 Dec 2025 17:01:09 +0000 Files and hashes: 1: CI4DIScTMq_HfkyFefDlVZzAnFA.crl (hash: tRbDd0vUCk21sybdHUzTyMuYfLHHrSawgJIuu8D4jZk=) 2: ICR_37PsCBP-8LWQQc9BQZWkbu8.roa (hash: qbGaCfhiVfxLumC4av9v0LJhrwsxTdIAQc0ayhncJww=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/a2a52c-136a-43a8-967c-f6d966ca4f07/1/CI4DIScTMq_HfkyFefDlVZzAnFA.crl rsync://rpki.ripe.net/repository/DEFAULT/d0/a2a52c-136a-43a8-967c-f6d966ca4f07/1/CI4DIScTMq_HfkyFefDlVZzAnFA.mft rsync://rpki.ripe.net/repository/DEFAULT/CI4DIScTMq_HfkyFefDlVZzAnFA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 15:30:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:22:f5:72:b0:4b:15:51:e2:d3:35:38:d0:e7:5f:87:51 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=088e0321271332afc77e4c8579f0e5559cc09c50 Validity Not Before: Dec 15 17:01:09 2025 GMT Not After : Dec 16 17:01:09 2025 GMT Subject: CN=9bd64a394aafa11ce4fbb485fa79106323ee1881 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:dd:76:6b:e4:bb:6f:18:ed:f1:54:bd:98:c0: a3:43:14:46:98:ea:09:fc:06:69:14:a7:82:32:ae: 09:ce:bb:65:af:27:7d:4f:88:54:38:01:95:8e:95: 91:e8:79:31:3f:42:c1:61:a9:d8:d3:ac:88:cc:52: 76:0b:fe:3a:6e:52:16:af:0b:03:ea:b5:5b:c8:4c: 41:de:0c:00:11:be:a5:88:d4:df:fe:19:8e:35:f8: 3b:a3:01:39:a1:b0:b2:45:f2:03:54:b2:38:4b:f2: cc:d4:9b:ad:c5:09:e3:f7:50:73:a9:df:5e:e9:93: 15:39:9b:31:3b:1a:e9:73:e6:9b:5d:05:e5:a9:d3: 82:58:06:b5:08:90:9a:7d:ee:dc:f5:83:66:55:e9: b0:ed:cc:57:02:ab:15:2d:bc:e8:85:29:cc:fb:e7: 71:1c:00:33:53:fa:fe:8b:47:6d:ff:71:57:38:f8: f0:06:0c:fe:c3:d5:1a:22:64:b4:a2:c2:50:e5:72: 4b:1c:f5:ac:58:b6:c4:4a:97:61:c0:7e:bb:88:ff: 9c:21:44:01:36:1f:14:ff:9f:5e:82:79:51:45:96: 50:1f:3f:e3:d9:87:f4:69:d9:c4:b9:96:f4:f5:4e: 0f:fe:7d:fb:be:63:bc:8f:5d:02:c5:8a:36:c6:a3: 35:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:D6:4A:39:4A:AF:A1:1C:E4:FB:B4:85:FA:79:10:63:23:EE:18:81 X509v3 Authority Key Identifier: keyid:08:8E:03:21:27:13:32:AF:C7:7E:4C:85:79:F0:E5:55:9C:C0:9C:50 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CI4DIScTMq_HfkyFefDlVZzAnFA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/a2a52c-136a-43a8-967c-f6d966ca4f07/1/CI4DIScTMq_HfkyFefDlVZzAnFA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/a2a52c-136a-43a8-967c-f6d966ca4f07/1/CI4DIScTMq_HfkyFefDlVZzAnFA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1e:8d:7f:85:f6:41:33:16:55:4e:35:fd:dc:42:6a:81:1e:e7: 86:d2:99:f1:13:3b:44:27:2f:3e:d0:72:2d:0a:8e:af:89:71: 8e:ef:c3:3a:9a:d0:b4:12:43:c9:4b:89:b0:a6:82:c9:2a:67: 65:58:96:24:a5:fc:26:16:10:26:66:a6:d8:40:62:a7:ce:b4: 0a:4a:51:be:fc:ff:fa:a1:c3:06:06:90:ba:ea:45:1e:51:d0: b1:d9:19:f3:c2:43:f5:f4:29:fe:4a:ad:e2:da:e9:a1:45:79: 1c:2a:38:55:4f:94:b4:72:75:42:8b:fc:bd:b5:44:e6:da:f4: a2:cf:10:d4:c2:f3:5b:29:5e:c2:1a:04:8c:ea:0f:94:e7:42: 52:dd:4a:6c:ef:bb:56:39:8e:91:50:f4:66:12:75:9a:f1:b9: 25:8d:b4:03:ea:e3:b9:22:f6:64:d4:fd:57:22:30:cc:b8:e1: 35:4a:37:df:37:f5:98:5f:3a:81:60:fb:05:a1:85:31:49:da: 65:71:38:65:fe:a1:8f:f1:ad:1e:d5:11:69:21:50:ae:55:3f: c3:ac:8b:4a:d1:ea:ae:f1:54:69:2c:d2:a7:6a:26:89:be:6d: a5:8b:40:e5:54:8f:7e:29:99:e3:a6:8f:32:22:93:22:4e:a0: 51:5e:40:ce -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsi9XKwSxVR4tM1ONDnX4dRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA4OGUwMzIxMjcxMzMyYWZjNzdlNGM4NTc5ZjBlNTU1OWNj MDljNTAwHhcNMjUxMjE1MTcwMTA5WhcNMjUxMjE2MTcwMTA5WjAzMTEwLwYDVQQD Eyg5YmQ2NGEzOTRhYWZhMTFjZTRmYmI0ODVmYTc5MTA2MzIzZWUxODgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2d12a+S7bxjt8VS9mMCjQxRGmOoJ /AZpFKeCMq4Jzrtlryd9T4hUOAGVjpWR6HkxP0LBYanY06yIzFJ2C/46blIWrwsD 6rVbyExB3gwAEb6liNTf/hmONfg7owE5obCyRfIDVLI4S/LM1JutxQnj91Bzqd9e 6ZMVOZsxOxrpc+abXQXlqdOCWAa1CJCafe7c9YNmVemw7cxXAqsVLbzohSnM++dx HAAzU/r+i0dt/3FXOPjwBgz+w9UaImS0osJQ5XJLHPWsWLbESpdhwH67iP+cIUQB Nh8U/59egnlRRZZQHz/j2Yf0adnEuZb09U4P/n37vmO8j10CxYo2xqM14wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJvWSjlKr6Ec5Pu0hfp5EGMj7hiBMB8GA1UdIwQY MBaAFAiOAyEnEzKvx35MhXnw5VWcwJxQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ0k0RElTY1RNcV9IZmt5RmVmRGxWWnpBbkZBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC9hMmE1MmMtMTM2YS00M2E4LTk2N2Mt ZjZkOTY2Y2E0ZjA3LzEvQ0k0RElTY1RNcV9IZmt5RmVmRGxWWnpBbkZBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMC9hMmE1MmMtMTM2YS00M2E4LTk2N2MtZjZkOTY2Y2E0ZjA3 LzEvQ0k0RElTY1RNcV9IZmt5RmVmRGxWWnpBbkZBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHo1/hfZB MxZVTjX93EJqgR7nhtKZ8RM7RCcvPtByLQqOr4lxju/DOprQtBJDyUuJsKaCySpn ZViWJKX8JhYQJmam2EBip860CkpRvvz/+qHDBgaQuupFHlHQsdkZ88JD9fQp/kqt 4trpoUV5HCo4VU+UtHJ1Qov8vbVE5tr0os8Q1MLzWylewhoEjOoPlOdCUt1KbO+7 VjmOkVD0ZhJ1mvG5JY20A+rjuSL2ZNT9VyIwzLjhNUo33zf1mF86gWD7BaGFMUna ZXE4Zf6hj/GtHtURaSFQrlU/w6yLStHqrvFUaSzSp2omib5tpYtA5VSPfimZ46aP MiKTIk6gUV5Azg== -----END CERTIFICATE-----Generated at Mon Dec 15 19:53:56 2025 by rpki-client