This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/866754-f0ef-4900-8dd0-6c0403c9a440/1/CIKLx914SFC4lu197ZSD218B4Fk.mft File: CIKLx914SFC4lu197ZSD218B4Fk.mft (raw, json) Hash identifier: yOwDZVOvKYzLbjhY5cVE+LuO3uv8ACeCwa7EP1IhENQ= Subject key identifier: F7:C6:C0:02:03:F6:4B:3E:7E:BA:73:19:59:53:BB:FB:8A:A3:B1:B2 Authority key identifier: 08:82:8B:C7:DD:78:48:50:B8:96:ED:7D:ED:94:83:DB:5F:01:E0:59 Certificate issuer: /CN=08828bc7dd784850b896ed7ded9483db5f01e059 Certificate serial: 019B3D598D62A838F0175FC319B51E10E689 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CIKLx914SFC4lu197ZSD218B4Fk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/866754-f0ef-4900-8dd0-6c0403c9a440/1/CIKLx914SFC4lu197ZSD218B4Fk.mft Manifest number: 05D6 Signing time: Sat 20 Dec 2025 20:00:37 +0000 Manifest this update: Sat 20 Dec 2025 20:00:37 +0000 Manifest next update: Sun 21 Dec 2025 20:00:37 +0000 Files and hashes: 1: CIKLx914SFC4lu197ZSD218B4Fk.crl (hash: 5nC96bCrZ2wmsC2/d6s39MHqTyj6f3hKUiVL4ciGFX0=) 2: V0Wj0jhw0RxatZH_nx8jTrLFEcc.roa (hash: mmVGDQsdur6eI4Kol0nAjQzRZYdIuybWdILnc/qmeGM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/866754-f0ef-4900-8dd0-6c0403c9a440/1/CIKLx914SFC4lu197ZSD218B4Fk.crl rsync://rpki.ripe.net/repository/DEFAULT/fc/866754-f0ef-4900-8dd0-6c0403c9a440/1/CIKLx914SFC4lu197ZSD218B4Fk.mft rsync://rpki.ripe.net/repository/DEFAULT/CIKLx914SFC4lu197ZSD218B4Fk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 19:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:59:8d:62:a8:38:f0:17:5f:c3:19:b5:1e:10:e6:89 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08828bc7dd784850b896ed7ded9483db5f01e059 Validity Not Before: Dec 20 20:00:37 2025 GMT Not After : Dec 21 20:00:37 2025 GMT Subject: CN=f7c6c00203f64b3e7eba73195953bbfb8aa3b1b2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:6e:ec:6b:d9:c6:11:13:3f:af:5c:c9:72:a1: 58:ef:a2:7b:20:2f:3a:2c:36:48:4f:b0:bc:db:2d: 91:cd:af:50:e7:53:01:d1:48:1c:bb:cc:fe:21:2c: 5f:e0:6d:8c:d1:5e:33:9d:c5:d0:33:15:48:93:2d: 83:cd:63:f6:90:ff:09:89:44:79:68:2a:62:4c:7d: 77:76:0e:a6:cf:21:da:b5:a6:75:8a:31:21:b9:22: f7:a4:f3:74:e6:70:93:30:b9:34:4b:a4:1a:75:31: 57:3f:67:ef:ce:04:58:a3:17:ec:0e:d9:c3:6d:5f: 7f:46:85:71:6f:ba:1e:da:a9:6a:14:36:e8:28:bf: f7:cb:ea:03:cd:9b:cb:b7:7b:79:07:ce:1d:6f:a4: ea:b5:35:70:b7:34:44:b8:d7:aa:aa:a4:88:48:1d: 45:3f:5f:da:a3:b7:5c:ea:60:b1:dc:02:51:4b:23: 89:a2:90:ad:0f:3a:d6:97:2e:8f:e0:7b:68:49:30: 80:cd:ba:8a:55:7b:d1:34:2e:9f:23:93:01:ca:da: d2:9d:b6:b1:d8:ea:39:ef:03:29:ef:4b:6d:51:3c: af:eb:02:db:d7:cb:63:9f:a9:f5:77:1f:31:ce:86: 0f:04:4f:d5:71:80:18:2e:12:1b:81:d7:43:31:30: fa:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:C6:C0:02:03:F6:4B:3E:7E:BA:73:19:59:53:BB:FB:8A:A3:B1:B2 X509v3 Authority Key Identifier: keyid:08:82:8B:C7:DD:78:48:50:B8:96:ED:7D:ED:94:83:DB:5F:01:E0:59 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CIKLx914SFC4lu197ZSD218B4Fk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/866754-f0ef-4900-8dd0-6c0403c9a440/1/CIKLx914SFC4lu197ZSD218B4Fk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/866754-f0ef-4900-8dd0-6c0403c9a440/1/CIKLx914SFC4lu197ZSD218B4Fk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7c:af:e2:5e:9e:50:2b:ff:37:96:0a:a2:00:48:8b:28:7f:fd: 95:65:57:3f:be:a1:1f:39:1a:5b:61:ce:a6:8f:3f:92:07:3d: d3:d5:a2:73:22:aa:8e:5d:75:76:fa:d7:8a:e9:81:e0:a0:a0: 17:53:72:c7:97:9a:74:33:eb:5f:30:63:98:03:7f:49:44:be: 2b:bf:64:d0:5a:df:26:97:ef:8f:d0:25:58:ca:00:36:1a:3b: 21:44:f7:37:e5:d0:c8:48:ab:ac:86:19:e1:c0:b0:ac:bd:2e: 79:6c:4b:ad:68:24:b7:58:d9:a4:38:c2:4d:29:b2:40:8b:cd: a8:44:ab:3a:4f:36:27:84:69:e6:95:22:46:d3:b5:e2:29:cc: d9:b5:c6:34:13:83:6d:ce:9b:62:2e:b1:e7:21:ad:c6:ff:d6: 07:dc:60:8f:bd:86:55:2a:d6:68:e9:5f:1c:71:9e:e8:72:0b: ae:9b:67:f8:de:5f:65:7f:91:7e:ab:0b:df:c2:3a:23:cc:1b: 9a:86:04:33:8b:05:25:2f:18:7e:74:a4:33:e2:5c:09:06:23: cb:78:f5:c8:4d:cd:d2:19:60:6a:51:fd:61:33:e0:92:71:26: b7:ee:9a:ce:c7:a3:2d:3a:6e:85:82:7a:8d:f3:80:88:7a:98: 57:af:af:98 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9WY1iqDjwF1/DGbUeEOaJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA4ODI4YmM3ZGQ3ODQ4NTBiODk2ZWQ3ZGVkOTQ4M2RiNWYw MWUwNTkwHhcNMjUxMjIwMjAwMDM3WhcNMjUxMjIxMjAwMDM3WjAzMTEwLwYDVQQD EyhmN2M2YzAwMjAzZjY0YjNlN2ViYTczMTk1OTUzYmJmYjhhYTNiMWIyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1W7sa9nGERM/r1zJcqFY76J7IC86 LDZIT7C82y2Rza9Q51MB0Ugcu8z+ISxf4G2M0V4zncXQMxVIky2DzWP2kP8JiUR5 aCpiTH13dg6mzyHataZ1ijEhuSL3pPN05nCTMLk0S6QadTFXP2fvzgRYoxfsDtnD bV9/RoVxb7oe2qlqFDboKL/3y+oDzZvLt3t5B84db6TqtTVwtzREuNeqqqSISB1F P1/ao7dc6mCx3AJRSyOJopCtDzrWly6P4HtoSTCAzbqKVXvRNC6fI5MBytrSnbax 2Oo57wMp70ttUTyv6wLb18tjn6n1dx8xzoYPBE/VcYAYLhIbgddDMTD6HQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPfGwAID9ks+frpzGVlTu/uKo7GyMB8GA1UdIwQY MBaAFAiCi8fdeEhQuJbtfe2Ug9tfAeBZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ0lLTHg5MTRTRkM0bHUxOTdaU0QyMThCNEZrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYy84NjY3NTQtZjBlZi00OTAwLThkZDAt NmMwNDAzYzlhNDQwLzEvQ0lLTHg5MTRTRkM0bHUxOTdaU0QyMThCNEZrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYy84NjY3NTQtZjBlZi00OTAwLThkZDAtNmMwNDAzYzlhNDQw LzEvQ0lLTHg5MTRTRkM0bHUxOTdaU0QyMThCNEZrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfK/iXp5Q K/83lgqiAEiLKH/9lWVXP76hHzkaW2HOpo8/kgc909WicyKqjl11dvrXiumB4KCg F1Nyx5eadDPrXzBjmAN/SUS+K79k0FrfJpfvj9AlWMoANho7IUT3N+XQyEirrIYZ 4cCwrL0ueWxLrWgkt1jZpDjCTSmyQIvNqESrOk82J4Rp5pUiRtO14inM2bXGNBOD bc6bYi6x5yGtxv/WB9xgj72GVSrWaOlfHHGe6HILrptn+N5fZX+RfqsL38I6I8wb moYEM4sFJS8YfnSkM+JcCQYjy3j1yE3N0hlgalH9YTPgknEmt+6azsejLTpuhYJ6 jfOAiHqYV6+vmA== -----END CERTIFICATE-----Generated at Sun Dec 21 04:57:49 2025 by rpki-client