This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/e2a15c-add0-48d6-b04f-cdfef6d5f9b9/1/RciwwWM2uTM7RE_x4YzHjXanw_Y.mft File: RciwwWM2uTM7RE_x4YzHjXanw_Y.mft (raw, json) Hash identifier: rjhyyR1n+rpSPyejFyFTYqHh+mSPNqI8Z8LrIRpOaxc= Subject key identifier: F1:B4:E1:08:08:7F:C2:6C:F0:84:8D:E4:7C:7F:A1:43:84:1F:5E:5F Authority key identifier: 45:C8:B0:C1:63:36:B9:33:3B:44:4F:F1:E1:8C:C7:8D:76:A7:C3:F6 Certificate issuer: /CN=45c8b0c16336b9333b444ff1e18cc78d76a7c3f6 Certificate serial: 019B2399A63ABF8B2B4AD1EEBDF6205F8505 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RciwwWM2uTM7RE_x4YzHjXanw_Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/e2a15c-add0-48d6-b04f-cdfef6d5f9b9/1/RciwwWM2uTM7RE_x4YzHjXanw_Y.mft Manifest number: 03C3 Signing time: Mon 15 Dec 2025 20:00:30 +0000 Manifest this update: Mon 15 Dec 2025 20:00:30 +0000 Manifest next update: Tue 16 Dec 2025 20:00:30 +0000 Files and hashes: 1: NP3I33PqiM24AyrvrXcXkrcATEY.roa (hash: suQmPgK0ZMnJeCcPsZiWpQadlCgzQA44K74kBySWlDw=) 2: RciwwWM2uTM7RE_x4YzHjXanw_Y.crl (hash: Nfl1WLppdqIyThXb4m209zjEYsLp7QKN6wA7Ub/aD68=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/e2a15c-add0-48d6-b04f-cdfef6d5f9b9/1/RciwwWM2uTM7RE_x4YzHjXanw_Y.crl rsync://rpki.ripe.net/repository/DEFAULT/d8/e2a15c-add0-48d6-b04f-cdfef6d5f9b9/1/RciwwWM2uTM7RE_x4YzHjXanw_Y.mft rsync://rpki.ripe.net/repository/DEFAULT/RciwwWM2uTM7RE_x4YzHjXanw_Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 20:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:23:99:a6:3a:bf:8b:2b:4a:d1:ee:bd:f6:20:5f:85:05 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=45c8b0c16336b9333b444ff1e18cc78d76a7c3f6 Validity Not Before: Dec 15 20:00:30 2025 GMT Not After : Dec 16 20:00:30 2025 GMT Subject: CN=f1b4e108087fc26cf0848de47c7fa143841f5e5f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:7d:5f:9e:99:24:02:e0:f3:28:98:e4:4d:72: 6a:29:fc:b4:86:e2:10:38:fd:ce:d0:c7:e1:74:24: 6c:9e:c2:1b:c3:e4:63:71:83:38:6e:dd:14:0d:f0: 80:b6:ea:aa:38:46:ba:14:7a:05:04:da:fa:3d:63: 82:65:d4:eb:18:b7:d2:d2:91:ca:bd:1c:86:7b:23: 96:d0:06:28:a1:74:19:e6:da:a2:4a:13:83:31:45: ab:96:8d:86:75:17:39:87:ff:c6:b9:ff:4f:e2:ef: 28:3f:50:2b:7e:64:49:d4:51:1a:ac:0e:c1:56:91: 56:94:a0:75:be:ab:b1:2b:12:e4:1d:b6:c5:60:90: b1:6b:7f:3c:ae:13:50:7b:0f:2a:fc:99:aa:a3:42: b4:7e:68:d7:dd:60:4b:26:18:bd:96:02:37:bd:e7: 2b:8d:0d:3c:06:b7:c8:17:61:e5:89:bc:28:75:04: 42:41:ec:2d:46:6c:96:a7:d9:a2:e6:9c:4a:d7:c4: 6e:22:18:36:aa:42:7e:d1:11:f8:ae:fd:8e:97:28: 78:ec:01:a2:6f:c3:20:6b:78:41:bf:ef:51:1a:c9: af:fc:cd:ca:b2:cc:1c:ae:e5:5e:f6:c8:69:5e:38: 1e:56:c8:e7:de:2c:d8:30:82:f2:ff:67:7f:e4:15: ae:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:B4:E1:08:08:7F:C2:6C:F0:84:8D:E4:7C:7F:A1:43:84:1F:5E:5F X509v3 Authority Key Identifier: keyid:45:C8:B0:C1:63:36:B9:33:3B:44:4F:F1:E1:8C:C7:8D:76:A7:C3:F6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RciwwWM2uTM7RE_x4YzHjXanw_Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/e2a15c-add0-48d6-b04f-cdfef6d5f9b9/1/RciwwWM2uTM7RE_x4YzHjXanw_Y.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/e2a15c-add0-48d6-b04f-cdfef6d5f9b9/1/RciwwWM2uTM7RE_x4YzHjXanw_Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4e:f4:20:21:70:6b:0d:56:6b:3c:03:a5:52:c9:b0:09:f2:07: 29:db:48:2b:98:50:96:45:a7:e1:d6:e0:47:9f:f6:1e:ec:79: 20:8a:e2:75:f7:73:2f:1a:88:28:c9:d0:7f:d4:d4:17:52:41: ea:b0:a1:cf:dd:56:33:d9:df:8d:aa:76:6a:d0:b5:2a:53:a6: 63:6c:e1:f6:38:90:69:06:a9:e9:ba:93:62:60:86:37:af:f3: 2e:6f:cc:67:b8:2d:5b:91:2c:2e:1d:3c:aa:7e:b1:8e:e4:9c: ad:df:34:dd:fc:99:a6:ae:ea:c4:bc:a7:ad:b3:ac:a2:de:0c: be:7e:9a:89:b8:2a:72:99:14:b8:70:f3:6a:d5:98:9d:c5:df: 1f:7f:c4:2a:95:63:e1:91:4b:96:37:04:9e:ef:53:3c:03:82: 1d:44:0e:b7:d2:e6:b0:d6:da:cc:9b:a2:39:a0:c8:b6:8f:cd: 37:d9:8d:c2:e6:65:f0:5b:c9:d2:be:f3:8c:ea:ba:97:b6:1a: 01:7e:6f:db:9a:8e:28:9d:c6:63:23:bb:b3:ce:10:25:b4:10: 91:60:61:e7:01:d0:39:e9:b1:46:14:3f:29:ec:98:2b:72:ce: 81:a6:92:35:24:9c:2e:43:67:70:a1:3f:08:91:da:13:3a:8d: f8:c7:f3:a6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsjmaY6v4srStHuvfYgX4UFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ1YzhiMGMxNjMzNmI5MzMzYjQ0NGZmMWUxOGNjNzhkNzZh N2MzZjYwHhcNMjUxMjE1MjAwMDMwWhcNMjUxMjE2MjAwMDMwWjAzMTEwLwYDVQQD EyhmMWI0ZTEwODA4N2ZjMjZjZjA4NDhkZTQ3YzdmYTE0Mzg0MWY1ZTVmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA631fnpkkAuDzKJjkTXJqKfy0huIQ OP3O0MfhdCRsnsIbw+RjcYM4bt0UDfCAtuqqOEa6FHoFBNr6PWOCZdTrGLfS0pHK vRyGeyOW0AYooXQZ5tqiShODMUWrlo2GdRc5h//Guf9P4u8oP1ArfmRJ1FEarA7B VpFWlKB1vquxKxLkHbbFYJCxa388rhNQew8q/Jmqo0K0fmjX3WBLJhi9lgI3vecr jQ08BrfIF2HlibwodQRCQewtRmyWp9mi5pxK18RuIhg2qkJ+0RH4rv2Olyh47AGi b8Mga3hBv+9RGsmv/M3KsswcruVe9shpXjgeVsjn3izYMILy/2d/5BWurQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPG04QgIf8Js8ISN5Hx/oUOEH15fMB8GA1UdIwQY MBaAFEXIsMFjNrkzO0RP8eGMx412p8P2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUmNpd3dXTTJ1VE03UkVfeDRZekhqWGFud19ZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOC9lMmExNWMtYWRkMC00OGQ2LWIwNGYt Y2RmZWY2ZDVmOWI5LzEvUmNpd3dXTTJ1VE03UkVfeDRZekhqWGFud19ZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kOC9lMmExNWMtYWRkMC00OGQ2LWIwNGYtY2RmZWY2ZDVmOWI5 LzEvUmNpd3dXTTJ1VE03UkVfeDRZekhqWGFud19ZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATvQgIXBr DVZrPAOlUsmwCfIHKdtIK5hQlkWn4dbgR5/2Hux5IIridfdzLxqIKMnQf9TUF1JB 6rChz91WM9nfjap2atC1KlOmY2zh9jiQaQap6bqTYmCGN6/zLm/MZ7gtW5EsLh08 qn6xjuScrd803fyZpq7qxLynrbOsot4Mvn6aibgqcpkUuHDzatWYncXfH3/EKpVj 4ZFLljcEnu9TPAOCHUQOt9LmsNbazJuiOaDIto/NN9mNwuZl8FvJ0r7zjOq6l7Ya AX5v25qOKJ3GYyO7s84QJbQQkWBh5wHQOemxRhQ/KeyYK3LOgaaSNSScLkNncKE/ CJHaEzqN+Mfzpg== -----END CERTIFICATE-----Generated at Tue Dec 16 06:26:08 2025 by rpki-client