This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/96d14f-18c2-43a8-bc58-647289ad5a22/1/ci8LM2ULfWSYufWKrFopfpJhSCI.mft File: ci8LM2ULfWSYufWKrFopfpJhSCI.mft (raw, json) Hash identifier: aoYYZ9ODGvjUfF/eVCh/eSWpyRfAegErU+oFmx2dvCM= Subject key identifier: F0:49:76:9F:C8:29:94:AF:9E:9E:13:E7:3B:C6:EE:B3:6B:EA:CA:6A Authority key identifier: 72:2F:0B:33:65:0B:7D:64:98:B9:F5:8A:AC:5A:29:7E:92:61:48:22 Certificate issuer: /CN=722f0b33650b7d6498b9f58aac5a297e92614822 Certificate serial: 019B1A602C2D41A67421C3E0D5EE2EA868EE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ci8LM2ULfWSYufWKrFopfpJhSCI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/96d14f-18c2-43a8-bc58-647289ad5a22/1/ci8LM2ULfWSYufWKrFopfpJhSCI.mft Manifest number: 0B09 Signing time: Sun 14 Dec 2025 01:01:08 +0000 Manifest this update: Sun 14 Dec 2025 01:01:08 +0000 Manifest next update: Mon 15 Dec 2025 01:01:08 +0000 Files and hashes: 1: 5uh-8NvfQB_oZowhRUdfu_0v2fA.roa (hash: gCC1UC6wWvqsz5JLnyhaum++DmlgyZmiMdDqSAXaOG4=) 2: ci8LM2ULfWSYufWKrFopfpJhSCI.crl (hash: vS78xo4YqTo3AZUPcTdReeMi05BFU28Qvfl+5ARZbZM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/96d14f-18c2-43a8-bc58-647289ad5a22/1/ci8LM2ULfWSYufWKrFopfpJhSCI.crl rsync://rpki.ripe.net/repository/DEFAULT/26/96d14f-18c2-43a8-bc58-647289ad5a22/1/ci8LM2ULfWSYufWKrFopfpJhSCI.mft rsync://rpki.ripe.net/repository/DEFAULT/ci8LM2ULfWSYufWKrFopfpJhSCI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 15 Dec 2025 01:01:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:1a:60:2c:2d:41:a6:74:21:c3:e0:d5:ee:2e:a8:68:ee Signature Algorithm: sha256WithRSAEncryption Issuer: CN=722f0b33650b7d6498b9f58aac5a297e92614822 Validity Not Before: Dec 14 01:01:08 2025 GMT Not After : Dec 15 01:01:08 2025 GMT Subject: CN=f049769fc82994af9e9e13e73bc6eeb36beaca6a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:b3:39:20:73:b1:39:09:72:db:79:40:9b:a3: 9b:54:90:47:97:2f:23:41:49:4c:1d:80:f1:15:e6: 22:52:db:c4:53:e0:1e:d4:4b:63:ff:26:e5:17:df: b8:fe:3c:0d:b2:5a:d3:df:48:f7:1e:6e:f8:9b:50: 5d:77:2d:62:1f:4b:23:50:99:89:42:27:21:02:e5: 83:e0:81:92:3d:2e:14:ab:56:61:c8:8c:6e:7e:ab: b0:28:00:ec:c9:ce:dc:29:a9:e0:75:bb:70:14:58: 5a:53:73:7b:73:56:f9:aa:cb:21:48:42:4b:db:8a: 45:bc:87:f8:2f:cb:84:1c:4b:57:78:a0:31:25:b2: 1c:db:e4:bf:8d:5e:8c:a3:82:a8:53:69:a0:f5:a1: fa:93:5b:e0:5d:c1:07:df:f7:78:b0:8c:25:8c:87: 16:ff:90:9b:e9:da:88:1f:cd:f7:4b:ee:27:71:57: 6e:90:a6:03:10:d2:ce:a4:94:7b:ad:57:f3:93:fd: d9:80:f2:3c:3f:c6:a2:5f:22:52:80:c4:79:e0:d6: dd:57:22:31:1c:09:82:ba:d1:98:63:b4:00:61:3d: e2:2d:6a:6b:bc:8f:ad:c4:5f:26:c0:87:27:7b:b1: 23:35:c9:d9:5d:a7:6a:31:d6:f0:fe:aa:5c:1f:32: fc:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:49:76:9F:C8:29:94:AF:9E:9E:13:E7:3B:C6:EE:B3:6B:EA:CA:6A X509v3 Authority Key Identifier: keyid:72:2F:0B:33:65:0B:7D:64:98:B9:F5:8A:AC:5A:29:7E:92:61:48:22 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ci8LM2ULfWSYufWKrFopfpJhSCI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/96d14f-18c2-43a8-bc58-647289ad5a22/1/ci8LM2ULfWSYufWKrFopfpJhSCI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/26/96d14f-18c2-43a8-bc58-647289ad5a22/1/ci8LM2ULfWSYufWKrFopfpJhSCI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 28:9b:2c:a8:7f:14:e4:25:6f:1a:16:62:b2:15:b9:f4:2a:e8: 5f:8a:d3:e3:a4:1f:17:47:20:1c:f1:71:90:77:b9:33:6a:6d: 68:5d:c1:4b:b2:90:13:eb:b1:9e:70:cc:48:bb:ea:22:e6:a4: ef:47:94:77:59:56:ad:6d:5a:76:10:65:af:c7:29:0b:28:42: ec:65:4e:e7:81:aa:90:32:bc:fd:2a:bc:91:20:78:6f:02:84: da:8d:e5:c4:03:8f:7e:1b:30:04:41:28:91:e1:3e:89:ba:53: 8e:ea:68:a7:64:0c:ff:07:55:44:2e:3b:f7:30:8d:8f:b8:ac: c8:09:60:eb:7c:c3:37:f6:8e:85:80:8e:4a:d7:35:27:20:de: 3f:37:97:bf:1c:14:5b:4b:d5:2c:1b:c5:c6:3a:d8:ea:b5:e0: 85:97:58:06:44:78:05:f3:37:46:c0:f4:f8:25:1c:99:5b:0c: 32:d8:48:01:67:68:6e:de:59:d7:9c:b2:71:0f:71:d5:5a:89: 4a:d3:06:a4:3e:66:c4:40:7e:57:07:f8:76:c0:58:5a:2e:35: e6:aa:02:de:15:cb:a0:8d:9b:1b:1c:35:49:13:22:c2:9f:c2: b6:57:2e:a5:8a:5c:50:6a:35:aa:a9:52:1b:33:15:40:22:27: 86:93:f1:54 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsaYCwtQaZ0IcPg1e4uqGjuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcyMmYwYjMzNjUwYjdkNjQ5OGI5ZjU4YWFjNWEyOTdlOTI2 MTQ4MjIwHhcNMjUxMjE0MDEwMTA4WhcNMjUxMjE1MDEwMTA4WjAzMTEwLwYDVQQD EyhmMDQ5NzY5ZmM4Mjk5NGFmOWU5ZTEzZTczYmM2ZWViMzZiZWFjYTZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmrM5IHOxOQly23lAm6ObVJBHly8j QUlMHYDxFeYiUtvEU+Ae1Etj/yblF9+4/jwNslrT30j3Hm74m1Bddy1iH0sjUJmJ QichAuWD4IGSPS4Uq1ZhyIxufquwKADsyc7cKangdbtwFFhaU3N7c1b5qsshSEJL 24pFvIf4L8uEHEtXeKAxJbIc2+S/jV6Mo4KoU2mg9aH6k1vgXcEH3/d4sIwljIcW /5Cb6dqIH833S+4ncVdukKYDENLOpJR7rVfzk/3ZgPI8P8aiXyJSgMR54NbdVyIx HAmCutGYY7QAYT3iLWprvI+txF8mwIcne7EjNcnZXadqMdbw/qpcHzL8DwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPBJdp/IKZSvnp4T5zvG7rNr6spqMB8GA1UdIwQY MBaAFHIvCzNlC31kmLn1iqxaKX6SYUgiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY2k4TE0yVUxmV1NZdWZXS3JGb3BmcEpoU0NJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNi85NmQxNGYtMThjMi00M2E4LWJjNTgt NjQ3Mjg5YWQ1YTIyLzEvY2k4TE0yVUxmV1NZdWZXS3JGb3BmcEpoU0NJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNi85NmQxNGYtMThjMi00M2E4LWJjNTgtNjQ3Mjg5YWQ1YTIy LzEvY2k4TE0yVUxmV1NZdWZXS3JGb3BmcEpoU0NJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKJssqH8U 5CVvGhZishW59CroX4rT46QfF0cgHPFxkHe5M2ptaF3BS7KQE+uxnnDMSLvqIuak 70eUd1lWrW1adhBlr8cpCyhC7GVO54GqkDK8/Sq8kSB4bwKE2o3lxAOPfhswBEEo keE+ibpTjupop2QM/wdVRC479zCNj7isyAlg63zDN/aOhYCOStc1JyDePzeXvxwU W0vVLBvFxjrY6rXghZdYBkR4BfM3RsD0+CUcmVsMMthIAWdobt5Z15yycQ9x1VqJ StMGpD5mxEB+Vwf4dsBYWi415qoC3hXLoI2bGxw1SRMiwp/CtlcupYpcUGo1qqlS GzMVQCInhpPxVA== -----END CERTIFICATE-----Generated at Sun Dec 14 07:43:03 2025 by rpki-client