This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/3cffcc-64ac-4bad-a518-550daeb6e651/1/CIYf5BVH2L_FVz_1J3ygDkc7r-w.mft File: CIYf5BVH2L_FVz_1J3ygDkc7r-w.mft (raw, json) Hash identifier: 9N7Cx6tkF3UEMEU1UxBBoMeJfO6pJSdHLu3J9qDNam8= Subject key identifier: 69:4F:41:E5:4C:44:9A:1E:82:8D:23:F7:B8:4A:4B:A0:25:43:19:4B Authority key identifier: 08:86:1F:E4:15:47:D8:BF:C5:57:3F:F5:27:7C:A0:0E:47:3B:AF:EC Certificate issuer: /CN=08861fe41547d8bfc5573ff5277ca00e473bafec Certificate serial: 019B5AF69FB5C150FA6CF32EFEC268214E65 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CIYf5BVH2L_FVz_1J3ygDkc7r-w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/3cffcc-64ac-4bad-a518-550daeb6e651/1/CIYf5BVH2L_FVz_1J3ygDkc7r-w.mft Manifest number: 19 Signing time: Fri 26 Dec 2025 14:01:10 +0000 Manifest this update: Fri 26 Dec 2025 14:01:10 +0000 Manifest next update: Sat 27 Dec 2025 14:01:10 +0000 Files and hashes: 1: CIYf5BVH2L_FVz_1J3ygDkc7r-w.crl (hash: TzFXjIMRGwFeyIp0se8Bm85Wfi0x3+PPSIwG00CrMw4=) 2: EFTy86Ee2LhDKWgkvLynXFlpksQ.asa (hash: hTWhFGoY6UVHXRWBWB6TnJGczXQUZBVl4LuFNC+XBvA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/3cffcc-64ac-4bad-a518-550daeb6e651/1/CIYf5BVH2L_FVz_1J3ygDkc7r-w.crl rsync://rpki.ripe.net/repository/DEFAULT/01/3cffcc-64ac-4bad-a518-550daeb6e651/1/CIYf5BVH2L_FVz_1J3ygDkc7r-w.mft rsync://rpki.ripe.net/repository/DEFAULT/CIYf5BVH2L_FVz_1J3ygDkc7r-w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5a:f6:9f:b5:c1:50:fa:6c:f3:2e:fe:c2:68:21:4e:65 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08861fe41547d8bfc5573ff5277ca00e473bafec Validity Not Before: Dec 26 14:01:10 2025 GMT Not After : Dec 27 14:01:10 2025 GMT Subject: CN=694f41e54c449a1e828d23f7b84a4ba02543194b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:ec:96:cd:d3:50:b2:f2:d4:ab:97:2b:e8:10: 69:b9:d8:e4:1e:24:8b:1c:9f:33:98:69:e4:f8:1b: 17:56:79:ae:e4:b1:da:2c:3b:27:20:08:e6:43:43: 7f:13:08:9c:ea:b5:3e:32:a5:1e:4e:86:1c:b6:43: be:90:5c:79:4d:1e:2b:e5:4b:8e:ad:70:fc:3e:04: ba:a2:70:04:dd:ff:05:79:e4:09:a4:ab:39:29:d9: cd:7c:55:47:aa:8f:e8:f3:d6:a2:f4:4a:af:13:89: be:44:d2:95:5d:2e:75:88:7f:6b:b7:68:5d:06:b5: 2b:d4:4d:96:0e:d1:20:cb:0d:1e:42:b6:72:ac:55: f2:b2:b4:35:cc:ce:02:a1:66:76:89:39:ba:df:5b: 87:d3:32:3a:68:c0:ab:26:86:cb:6e:ca:51:4e:42: 44:91:d1:b4:64:33:6f:d9:84:d8:68:b1:92:78:8e: f8:85:81:5c:54:7e:be:e8:8c:70:0d:ce:d8:65:77: 04:52:4e:5d:ce:fe:79:0f:f3:d3:a1:8a:8a:5a:72: c6:50:77:87:15:5e:07:fd:78:a6:93:df:ee:57:6b: e7:e9:bf:bf:ee:74:f9:a2:e6:f2:4b:a9:6a:c3:ea: 8e:70:ed:b9:8e:15:b2:e3:f5:35:21:92:e9:eb:c9: b6:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:4F:41:E5:4C:44:9A:1E:82:8D:23:F7:B8:4A:4B:A0:25:43:19:4B X509v3 Authority Key Identifier: keyid:08:86:1F:E4:15:47:D8:BF:C5:57:3F:F5:27:7C:A0:0E:47:3B:AF:EC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CIYf5BVH2L_FVz_1J3ygDkc7r-w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/3cffcc-64ac-4bad-a518-550daeb6e651/1/CIYf5BVH2L_FVz_1J3ygDkc7r-w.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/01/3cffcc-64ac-4bad-a518-550daeb6e651/1/CIYf5BVH2L_FVz_1J3ygDkc7r-w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 87:ea:70:e6:97:ee:11:fa:12:7b:84:ea:aa:76:10:53:ff:83: 19:af:a9:10:71:07:f6:68:41:c6:3b:fd:dd:ba:fd:10:c3:1a: 0f:fe:c5:72:2c:04:ce:03:1d:45:10:c2:52:96:77:7e:ff:09: af:59:13:9f:1a:92:80:96:e1:4b:7b:f5:ed:b8:67:0e:d0:8e: c7:ca:16:a5:42:6d:c3:43:81:9d:82:5d:61:30:bd:0e:0d:ae: f8:d7:6f:5d:ad:13:51:bb:db:ec:a8:8b:56:08:59:f5:bd:10: b0:17:de:70:b4:48:2d:ca:10:47:51:6b:50:36:1f:7c:4c:46: d6:29:2b:fb:49:9d:b2:28:35:fc:ae:b4:54:d7:c0:af:e3:bc: ed:b4:a1:ca:74:dd:d4:ef:2d:b4:e5:b4:55:73:3b:16:84:8e: 78:10:b8:64:1c:66:51:bd:66:d2:0c:0e:de:6e:b6:40:59:dc: 8f:65:5a:90:59:a5:3a:48:7f:7c:7f:52:2a:e7:2a:bc:41:b3: 4f:c0:1e:ab:fd:2a:a7:5a:a3:a2:f6:1a:6a:d8:72:c3:2d:23: 97:b0:43:eb:c5:62:48:06:f7:c1:74:e1:cc:6b:c3:21:9e:6e: c9:ec:e3:c5:9c:26:ce:16:c7:37:a7:cd:23:5f:73:68:fb:ef: b2:a0:ff:fe -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZta9p+1wVD6bPMu/sJoIU5lMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA4ODYxZmU0MTU0N2Q4YmZjNTU3M2ZmNTI3N2NhMDBlNDcz YmFmZWMwHhcNMjUxMjI2MTQwMTEwWhcNMjUxMjI3MTQwMTEwWjAzMTEwLwYDVQQD Eyg2OTRmNDFlNTRjNDQ5YTFlODI4ZDIzZjdiODRhNGJhMDI1NDMxOTRiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxuyWzdNQsvLUq5cr6BBpudjkHiSL HJ8zmGnk+BsXVnmu5LHaLDsnIAjmQ0N/Ewic6rU+MqUeToYctkO+kFx5TR4r5UuO rXD8PgS6onAE3f8FeeQJpKs5KdnNfFVHqo/o89ai9EqvE4m+RNKVXS51iH9rt2hd BrUr1E2WDtEgyw0eQrZyrFXysrQ1zM4CoWZ2iTm631uH0zI6aMCrJobLbspRTkJE kdG0ZDNv2YTYaLGSeI74hYFcVH6+6IxwDc7YZXcEUk5dzv55D/PToYqKWnLGUHeH FV4H/Ximk9/uV2vn6b+/7nT5oubyS6lqw+qOcO25jhWy4/U1IZLp68m2xwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGlPQeVMRJoego0j97hKS6AlQxlLMB8GA1UdIwQY MBaAFAiGH+QVR9i/xVc/9Sd8oA5HO6/sMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ0lZZjVCVkgyTF9GVnpfMUozeWdEa2M3ci13LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMS8zY2ZmY2MtNjRhYy00YmFkLWE1MTgt NTUwZGFlYjZlNjUxLzEvQ0lZZjVCVkgyTF9GVnpfMUozeWdEa2M3ci13Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMS8zY2ZmY2MtNjRhYy00YmFkLWE1MTgtNTUwZGFlYjZlNjUx LzEvQ0lZZjVCVkgyTF9GVnpfMUozeWdEa2M3ci13LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAh+pw5pfu EfoSe4TqqnYQU/+DGa+pEHEH9mhBxjv93br9EMMaD/7FciwEzgMdRRDCUpZ3fv8J r1kTnxqSgJbhS3v17bhnDtCOx8oWpUJtw0OBnYJdYTC9Dg2u+NdvXa0TUbvb7KiL VghZ9b0QsBfecLRILcoQR1FrUDYffExG1ikr+0mdsig1/K60VNfAr+O87bShynTd 1O8ttOW0VXM7FoSOeBC4ZBxmUb1m0gwO3m62QFncj2VakFmlOkh/fH9SKucqvEGz T8Aeq/0qp1qjovYaathywy0jl7BD68ViSAb3wXThzGvDIZ5uyezjxZwmzhbHN6fN I19zaPvvsqD//g== -----END CERTIFICATE-----Generated at Fri Dec 26 15:43:14 2025 by rpki-client