This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/22b0fe-9dc8-4bef-a299-30097a246a9c/1/cIYS6HA6ZgiJyg9FfPG02KDVO00.mft File: cIYS6HA6ZgiJyg9FfPG02KDVO00.mft (raw, json) Hash identifier: 9iYiHJag6G/Hmm1RohmjP77nGXUQTAklbridWbOYyAc= Subject key identifier: 86:03:4E:B6:A8:B0:16:76:6A:0C:E3:AB:68:3F:0D:B0:2B:EE:67:5B Authority key identifier: 70:86:12:E8:70:3A:66:08:89:CA:0F:45:7C:F1:B4:D8:A0:D5:3B:4D Certificate issuer: /CN=708612e8703a660889ca0f457cf1b4d8a0d53b4d Certificate serial: 019B5ABF52E5871BC0C5D0701265EB6B1A9E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cIYS6HA6ZgiJyg9FfPG02KDVO00.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/22b0fe-9dc8-4bef-a299-30097a246a9c/1/cIYS6HA6ZgiJyg9FfPG02KDVO00.mft Manifest number: 0E3C Signing time: Fri 26 Dec 2025 13:00:46 +0000 Manifest this update: Fri 26 Dec 2025 13:00:46 +0000 Manifest next update: Sat 27 Dec 2025 13:00:46 +0000 Files and hashes: 1: DmXSHAWyzkOoxqiFMJESxxoNQRE.roa (hash: JS4gdknzcsCYuR0k7tQp82qH1Pua7AKi87dIAAaokTc=) 2: G1B5f1Zo9mXXkjO8qvbHOoggkQk.roa (hash: aEmK04Ia5XU5AnX1t6+4/7AVUK1sMbT5CaQWCjlA0q4=) 3: cIYS6HA6ZgiJyg9FfPG02KDVO00.crl (hash: Vh/om+O9siPFfQvy9eHtBR0aWMosxxcASf/6T8V6DZw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/22b0fe-9dc8-4bef-a299-30097a246a9c/1/cIYS6HA6ZgiJyg9FfPG02KDVO00.crl rsync://rpki.ripe.net/repository/DEFAULT/10/22b0fe-9dc8-4bef-a299-30097a246a9c/1/cIYS6HA6ZgiJyg9FfPG02KDVO00.mft rsync://rpki.ripe.net/repository/DEFAULT/cIYS6HA6ZgiJyg9FfPG02KDVO00.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5a:bf:52:e5:87:1b:c0:c5:d0:70:12:65:eb:6b:1a:9e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=708612e8703a660889ca0f457cf1b4d8a0d53b4d Validity Not Before: Dec 26 13:00:46 2025 GMT Not After : Dec 27 13:00:46 2025 GMT Subject: CN=86034eb6a8b016766a0ce3ab683f0db02bee675b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:82:b1:56:3d:c5:33:cf:f6:19:b8:cb:93:15: a5:ff:df:15:7a:b0:17:0a:e7:34:2b:08:6d:a1:8f: 73:4d:28:2f:14:5d:d4:87:09:e8:60:7a:60:e7:30: 2d:7c:1f:5d:b7:64:60:5b:bf:db:45:7c:c6:76:9c: 68:5f:a2:ac:1f:3c:50:3d:47:a8:48:1d:29:1a:28: 9c:2c:57:fb:c9:4f:1c:3a:7e:0d:4b:89:65:75:f4: b2:72:06:0e:09:27:aa:a2:31:0b:14:20:17:b0:fe: 39:46:df:e0:7a:63:c8:f3:47:b8:27:1f:96:cb:29: f1:ab:83:98:aa:5f:32:92:d6:5c:f8:b5:e5:23:01: 89:fa:00:33:35:9f:ef:12:5b:23:0e:b2:3a:bd:24: 9e:e1:a8:ab:fd:b1:23:87:4e:ba:33:f8:8f:67:3e: 8e:24:61:82:da:21:5b:b7:29:d9:57:b3:7c:aa:2c: a3:d8:e3:c1:07:89:03:11:16:21:dc:f6:83:68:35: cc:44:a3:24:e4:25:09:56:7b:cf:7d:0c:51:f5:2d: 60:e3:88:49:bf:ca:2b:8c:ac:de:e1:40:b4:97:54: a7:6c:8c:33:7c:3d:58:a7:5b:9b:b4:e7:7c:73:11: 4b:e2:16:b1:8f:de:bb:91:80:04:32:59:81:a1:76: b6:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:03:4E:B6:A8:B0:16:76:6A:0C:E3:AB:68:3F:0D:B0:2B:EE:67:5B X509v3 Authority Key Identifier: keyid:70:86:12:E8:70:3A:66:08:89:CA:0F:45:7C:F1:B4:D8:A0:D5:3B:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cIYS6HA6ZgiJyg9FfPG02KDVO00.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/22b0fe-9dc8-4bef-a299-30097a246a9c/1/cIYS6HA6ZgiJyg9FfPG02KDVO00.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/10/22b0fe-9dc8-4bef-a299-30097a246a9c/1/cIYS6HA6ZgiJyg9FfPG02KDVO00.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1f:64:b9:8e:33:cb:ee:26:7a:b2:39:c6:21:46:ae:03:df:19: 01:43:70:34:6a:90:be:90:4e:ee:33:f8:49:b9:a9:2f:0e:66: e7:2e:80:76:55:8c:e6:dc:bf:11:fd:a5:ed:d5:0f:d8:cd:19: 27:fa:fd:c5:4d:25:91:aa:d6:be:54:f7:0b:22:e8:f2:df:aa: d7:b7:e8:77:1e:ae:ea:9f:78:28:9e:d9:70:46:7c:5d:5d:f3: ed:09:8f:8f:dc:bc:da:55:4d:41:42:8d:90:01:8e:39:43:ad: 2b:e0:c9:d6:73:05:9a:77:29:b9:0c:38:d5:30:da:06:10:d4: 75:dc:cf:30:81:93:4a:79:ff:c8:b1:4a:94:ba:61:21:2f:09: 92:0e:4a:4c:5f:ee:1f:fe:bd:c2:44:d6:55:14:6c:49:ac:53: 8b:46:4d:45:05:22:0b:ef:1d:b9:f9:cd:af:f8:f6:81:78:39: e2:ec:9f:6b:76:a2:0d:6f:63:57:4e:74:3d:36:2b:41:b4:50: 21:0f:0e:e3:33:87:3a:fc:8c:6c:03:55:8a:52:92:72:2a:66: e6:52:98:04:45:11:42:92:01:be:0b:68:68:d0:16:dc:e1:ba: 5f:0d:13:5d:e9:1a:79:ba:c7:2f:48:c7:5b:2d:92:c2:79:c4: 1e:96:10:ab -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtav1LlhxvAxdBwEmXraxqeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcwODYxMmU4NzAzYTY2MDg4OWNhMGY0NTdjZjFiNGQ4YTBk NTNiNGQwHhcNMjUxMjI2MTMwMDQ2WhcNMjUxMjI3MTMwMDQ2WjAzMTEwLwYDVQQD Eyg4NjAzNGViNmE4YjAxNjc2NmEwY2UzYWI2ODNmMGRiMDJiZWU2NzViMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh4KxVj3FM8/2GbjLkxWl/98VerAX Cuc0KwhtoY9zTSgvFF3UhwnoYHpg5zAtfB9dt2RgW7/bRXzGdpxoX6KsHzxQPUeo SB0pGiicLFf7yU8cOn4NS4lldfSycgYOCSeqojELFCAXsP45Rt/gemPI80e4Jx+W yynxq4OYql8yktZc+LXlIwGJ+gAzNZ/vElsjDrI6vSSe4air/bEjh066M/iPZz6O JGGC2iFbtynZV7N8qiyj2OPBB4kDERYh3PaDaDXMRKMk5CUJVnvPfQxR9S1g44hJ v8orjKze4UC0l1SnbIwzfD1Yp1ubtOd8cxFL4haxj967kYAEMlmBoXa2BQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIYDTraosBZ2agzjq2g/DbAr7mdbMB8GA1UdIwQY MBaAFHCGEuhwOmYIicoPRXzxtNig1TtNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY0lZUzZIQTZaZ2lKeWc5RmZQRzAyS0RWTzAwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC8yMmIwZmUtOWRjOC00YmVmLWEyOTkt MzAwOTdhMjQ2YTljLzEvY0lZUzZIQTZaZ2lKeWc5RmZQRzAyS0RWTzAwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMC8yMmIwZmUtOWRjOC00YmVmLWEyOTktMzAwOTdhMjQ2YTlj LzEvY0lZUzZIQTZaZ2lKeWc5RmZQRzAyS0RWTzAwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAH2S5jjPL 7iZ6sjnGIUauA98ZAUNwNGqQvpBO7jP4SbmpLw5m5y6AdlWM5ty/Ef2l7dUP2M0Z J/r9xU0lkarWvlT3CyLo8t+q17fodx6u6p94KJ7ZcEZ8XV3z7QmPj9y82lVNQUKN kAGOOUOtK+DJ1nMFmncpuQw41TDaBhDUddzPMIGTSnn/yLFKlLphIS8Jkg5KTF/u H/69wkTWVRRsSaxTi0ZNRQUiC+8dufnNr/j2gXg54uyfa3aiDW9jV050PTYrQbRQ IQ8O4zOHOvyMbANVilKScipm5lKYBEURQpIBvgtoaNAW3OG6Xw0TXekaebrHL0jH Wy2SwnnEHpYQqw== -----END CERTIFICATE-----Generated at Fri Dec 26 14:16:46 2025 by rpki-client