This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/77f4df-c3b9-4859-8bb2-08774b6c6bb3/1/CiA8bv-edCJgMJP4PmIR2pjHWCk.mft File: CiA8bv-edCJgMJP4PmIR2pjHWCk.mft (raw, json) Hash identifier: VY+fMbGbo+TD/r8FaWaMCOek3WLOKAkMUEn69vvojs8= Subject key identifier: 82:83:C0:D5:9D:EB:E1:E7:52:24:F3:85:7D:E6:3F:CC:4C:36:DF:1E Authority key identifier: 0A:20:3C:6E:FF:9E:74:22:60:30:93:F8:3E:62:11:DA:98:C7:58:29 Certificate issuer: /CN=0a203c6eff9e7422603093f83e6211da98c75829 Certificate serial: 019B2DB06934C986F02D55715DBD09F0F9AD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CiA8bv-edCJgMJP4PmIR2pjHWCk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/77f4df-c3b9-4859-8bb2-08774b6c6bb3/1/CiA8bv-edCJgMJP4PmIR2pjHWCk.mft Manifest number: 0B14 Signing time: Wed 17 Dec 2025 19:01:34 +0000 Manifest this update: Wed 17 Dec 2025 19:01:34 +0000 Manifest next update: Thu 18 Dec 2025 19:01:34 +0000 Files and hashes: 1: 86UP9_zfWrm8I2wKVn4nqcw7tgQ.roa (hash: 3J5NqPkKkcPBxfbwq2fM/SjV37VEXbNMo9GruUt6NNo=) 2: CiA8bv-edCJgMJP4PmIR2pjHWCk.crl (hash: QJ3LykUznCb1n5uAl8aa7657/51sT2kf+vDOZxQgpU0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/77f4df-c3b9-4859-8bb2-08774b6c6bb3/1/CiA8bv-edCJgMJP4PmIR2pjHWCk.crl rsync://rpki.ripe.net/repository/DEFAULT/0b/77f4df-c3b9-4859-8bb2-08774b6c6bb3/1/CiA8bv-edCJgMJP4PmIR2pjHWCk.mft rsync://rpki.ripe.net/repository/DEFAULT/CiA8bv-edCJgMJP4PmIR2pjHWCk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 19:00:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2d:b0:69:34:c9:86:f0:2d:55:71:5d:bd:09:f0:f9:ad Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0a203c6eff9e7422603093f83e6211da98c75829 Validity Not Before: Dec 17 19:01:34 2025 GMT Not After : Dec 18 19:01:34 2025 GMT Subject: CN=8283c0d59debe1e75224f3857de63fcc4c36df1e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:20:18:19:ff:9b:40:46:40:e9:cd:ec:4d:42: 4c:f2:44:d1:62:af:ef:56:27:43:95:38:65:07:b1: 52:29:e6:ac:42:28:74:f9:e9:90:b0:78:8b:53:8d: e7:55:31:d4:e7:31:e7:ff:aa:e8:d5:0b:aa:70:a5: da:6d:20:28:7c:0f:06:8c:bb:82:a1:96:24:03:39: 8b:96:81:76:42:c2:d5:74:72:53:b9:c0:df:1a:c8: 8c:ad:a1:cd:ca:2f:5f:4d:60:be:81:0e:19:92:af: b4:df:c7:ba:0a:a1:71:16:e7:51:ae:b2:af:1c:1f: 26:f0:7c:17:fe:82:aa:3e:39:7d:12:24:b2:f5:14: f9:6b:58:7a:70:0a:dc:11:d0:61:f9:1e:2d:c8:47: ed:0b:88:1e:0f:af:4f:2d:0b:bc:08:c9:5d:e7:fc: ae:3d:c9:ea:53:59:3e:94:31:31:80:02:f3:bb:e8: 62:74:2e:e5:01:8c:9f:3a:51:28:41:75:cb:e8:a7: fb:8d:6e:b8:ef:f9:ed:74:d0:0c:04:5f:bb:ea:7a: eb:a3:41:3e:bf:cf:87:78:6e:bf:8e:7b:2c:20:91: af:26:cb:63:f1:72:30:57:56:fa:47:20:6e:f2:10: 2c:f3:12:af:8e:3f:07:07:24:2c:e8:b6:07:cc:34: 00:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:83:C0:D5:9D:EB:E1:E7:52:24:F3:85:7D:E6:3F:CC:4C:36:DF:1E X509v3 Authority Key Identifier: keyid:0A:20:3C:6E:FF:9E:74:22:60:30:93:F8:3E:62:11:DA:98:C7:58:29 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CiA8bv-edCJgMJP4PmIR2pjHWCk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/77f4df-c3b9-4859-8bb2-08774b6c6bb3/1/CiA8bv-edCJgMJP4PmIR2pjHWCk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/77f4df-c3b9-4859-8bb2-08774b6c6bb3/1/CiA8bv-edCJgMJP4PmIR2pjHWCk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a8:bf:84:f7:33:56:cf:47:c5:15:f2:ed:84:f3:ab:85:58:c4: be:f9:ac:a7:bc:70:76:75:38:6f:62:4b:a3:4f:53:c2:b7:78: 9e:d0:35:25:be:13:7f:43:65:07:e1:e7:b9:50:d6:9c:e5:16: ee:ec:11:c3:6c:34:96:f7:ea:6e:aa:eb:39:8d:55:cf:fb:ba: 26:f1:68:c0:fc:56:db:cf:df:0b:32:4b:e7:85:d8:30:40:91: 97:e3:d0:bd:18:2c:34:5f:50:f6:0a:52:74:de:03:9e:4b:5f: 97:7a:ce:42:c3:63:df:33:ad:e8:7f:1b:40:13:07:0d:80:13: d9:29:db:1c:99:be:64:1b:23:89:70:0d:2c:f5:7a:fb:13:19: 88:a4:75:02:14:9c:8e:8d:7d:7e:d8:53:a1:7f:23:10:9f:8c: f6:21:b7:f9:8a:6b:ae:b6:db:41:70:cb:72:23:2e:8c:2f:89: 3b:75:6d:6f:43:97:15:f5:4b:5b:2a:1d:6a:6f:b0:b6:a8:65: 85:db:dd:79:32:bb:03:25:98:bd:89:db:3b:7e:f4:d8:c3:d5: 90:57:4d:07:4e:3b:18:a2:68:6e:5a:55:e1:93:56:9e:ff:a3: 99:d8:53:14:dc:cb:7f:e5:c5:76:48:64:a4:70:5a:22:e4:cf: 13:ee:93:3b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZstsGk0yYbwLVVxXb0J8PmtMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBhMjAzYzZlZmY5ZTc0MjI2MDMwOTNmODNlNjIxMWRhOThj NzU4MjkwHhcNMjUxMjE3MTkwMTM0WhcNMjUxMjE4MTkwMTM0WjAzMTEwLwYDVQQD Eyg4MjgzYzBkNTlkZWJlMWU3NTIyNGYzODU3ZGU2M2ZjYzRjMzZkZjFlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArCAYGf+bQEZA6c3sTUJM8kTRYq/v VidDlThlB7FSKeasQih0+emQsHiLU43nVTHU5zHn/6ro1QuqcKXabSAofA8GjLuC oZYkAzmLloF2QsLVdHJTucDfGsiMraHNyi9fTWC+gQ4Zkq+038e6CqFxFudRrrKv HB8m8HwX/oKqPjl9EiSy9RT5a1h6cArcEdBh+R4tyEftC4geD69PLQu8CMld5/yu PcnqU1k+lDExgALzu+hidC7lAYyfOlEoQXXL6Kf7jW647/ntdNAMBF+76nrro0E+ v8+HeG6/jnssIJGvJstj8XIwV1b6RyBu8hAs8xKvjj8HByQs6LYHzDQApwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIKDwNWd6+HnUiTzhX3mP8xMNt8eMB8GA1UdIwQY MBaAFAogPG7/nnQiYDCT+D5iEdqYx1gpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ2lBOGJ2LWVkQ0pnTUpQNFBtSVIycGpIV0NrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYi83N2Y0ZGYtYzNiOS00ODU5LThiYjIt MDg3NzRiNmM2YmIzLzEvQ2lBOGJ2LWVkQ0pnTUpQNFBtSVIycGpIV0NrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYi83N2Y0ZGYtYzNiOS00ODU5LThiYjItMDg3NzRiNmM2YmIz LzEvQ2lBOGJ2LWVkQ0pnTUpQNFBtSVIycGpIV0NrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqL+E9zNW z0fFFfLthPOrhVjEvvmsp7xwdnU4b2JLo09Twrd4ntA1Jb4Tf0NlB+HnuVDWnOUW 7uwRw2w0lvfqbqrrOY1Vz/u6JvFowPxW28/fCzJL54XYMECRl+PQvRgsNF9Q9gpS dN4Dnktfl3rOQsNj3zOt6H8bQBMHDYAT2SnbHJm+ZBsjiXANLPV6+xMZiKR1AhSc jo19fthToX8jEJ+M9iG3+YprrrbbQXDLciMujC+JO3Vtb0OXFfVLWyodam+wtqhl hdvdeTK7AyWYvYnbO3702MPVkFdNB047GKJoblpV4ZNWnv+jmdhTFNzLf+XFdkhk pHBaIuTPE+6TOw== -----END CERTIFICATE-----Generated at Thu Dec 18 04:16:25 2025 by rpki-client