This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/851d45-1422-4b31-bd8f-7993b9e03b0f/1/CiebQDjgAue9ZOUHbRo56-lvI8Q.mft File: CiebQDjgAue9ZOUHbRo56-lvI8Q.mft (raw, json) Hash identifier: C7JEQSE+OnTJydkCMvN0WThyF4luCPMXZluhnLRg6+4= Subject key identifier: 09:10:54:F5:44:3A:CB:12:59:3C:D8:F1:ED:9C:F8:66:32:84:8F:EC Authority key identifier: 0A:27:9B:40:38:E0:02:E7:BD:64:E5:07:6D:1A:39:EB:E9:6F:23:C4 Certificate issuer: /CN=0a279b4038e002e7bd64e5076d1a39ebe96f23c4 Certificate serial: 019B2175A9446D3A434E62E9F7EA3738CCD8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CiebQDjgAue9ZOUHbRo56-lvI8Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/851d45-1422-4b31-bd8f-7993b9e03b0f/1/CiebQDjgAue9ZOUHbRo56-lvI8Q.mft Manifest number: 0829 Signing time: Mon 15 Dec 2025 10:01:57 +0000 Manifest this update: Mon 15 Dec 2025 10:01:57 +0000 Manifest next update: Tue 16 Dec 2025 10:01:57 +0000 Files and hashes: 1: CiebQDjgAue9ZOUHbRo56-lvI8Q.crl (hash: Hwa8efq3wEe0XYfbjC7aOji9RBiEv9TdL2XfXBzM+vg=) 2: XgZiHyWgL10sySKObf_Bjn8Hh_Q.roa (hash: 2Dl4jp91F4zOnOBtmwjhJgpK+aRbbY/cT57xX5iOAng=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/851d45-1422-4b31-bd8f-7993b9e03b0f/1/CiebQDjgAue9ZOUHbRo56-lvI8Q.crl rsync://rpki.ripe.net/repository/DEFAULT/30/851d45-1422-4b31-bd8f-7993b9e03b0f/1/CiebQDjgAue9ZOUHbRo56-lvI8Q.mft rsync://rpki.ripe.net/repository/DEFAULT/CiebQDjgAue9ZOUHbRo56-lvI8Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 10:01:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:21:75:a9:44:6d:3a:43:4e:62:e9:f7:ea:37:38:cc:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0a279b4038e002e7bd64e5076d1a39ebe96f23c4 Validity Not Before: Dec 15 10:01:57 2025 GMT Not After : Dec 16 10:01:57 2025 GMT Subject: CN=091054f5443acb12593cd8f1ed9cf86632848fec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:9b:67:67:54:87:10:1a:67:87:cd:38:c5:8c: a9:86:2c:ce:e5:4e:1f:41:8b:8b:b6:a5:1e:93:d8: 74:b8:d2:76:5c:26:3b:56:00:06:31:46:c2:39:04: da:a6:30:94:fb:c9:c1:18:a7:f5:9d:8f:25:2f:dd: 7f:5e:84:5e:3c:06:39:85:19:70:42:43:83:2c:20: e8:bf:0e:25:b1:2a:5e:c2:26:69:ae:6a:c3:0f:d5: d7:31:5b:87:f4:61:3c:40:a2:97:2f:3a:bb:a2:65: d2:46:f2:13:c9:6c:b3:40:9a:94:84:73:e7:d3:8e: ef:00:94:93:a8:16:f8:7d:60:8c:ad:f5:1c:ba:08: e4:e7:fe:ae:27:5f:9b:14:f0:be:b8:91:64:f3:8e: 7c:43:41:37:cb:e3:f9:03:66:dc:a4:d1:27:8b:c3: 0a:2e:dc:40:d0:3f:86:f3:ee:9f:be:13:99:a5:27: de:c3:3d:89:c4:b0:b9:f8:f9:6a:74:95:e7:e0:2b: 58:41:6a:bf:de:c1:4f:3c:3d:a0:4d:59:ab:8b:f1: b9:6c:ba:70:fe:5f:80:57:58:df:05:2a:bd:b0:17: ce:b9:23:c7:7d:0b:d1:85:48:f3:05:5d:fd:9f:d3: c2:52:d0:7a:73:40:07:57:3c:9d:3c:1c:06:b1:1c: b7:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:10:54:F5:44:3A:CB:12:59:3C:D8:F1:ED:9C:F8:66:32:84:8F:EC X509v3 Authority Key Identifier: keyid:0A:27:9B:40:38:E0:02:E7:BD:64:E5:07:6D:1A:39:EB:E9:6F:23:C4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CiebQDjgAue9ZOUHbRo56-lvI8Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/851d45-1422-4b31-bd8f-7993b9e03b0f/1/CiebQDjgAue9ZOUHbRo56-lvI8Q.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/30/851d45-1422-4b31-bd8f-7993b9e03b0f/1/CiebQDjgAue9ZOUHbRo56-lvI8Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c2:ff:71:fb:b3:e0:26:99:9d:f4:0a:c0:74:26:0c:fb:c1:3d: c9:a7:31:5b:bd:d1:81:30:f5:69:6f:ac:0a:b0:42:be:04:d8: a1:af:77:7f:41:34:2c:33:c8:7e:83:9e:a9:44:d8:dc:38:88: 32:7e:0f:be:98:dd:83:48:44:9c:43:d1:c6:65:ca:91:74:0b: e4:ad:ab:51:a6:d3:db:4e:a7:ee:be:a8:c5:8a:8b:67:7d:0f: ec:c4:ad:53:1f:ef:67:9c:2b:92:19:8c:0b:12:50:5f:db:36: 34:16:dc:a0:19:e0:e7:5e:5b:64:5f:3a:46:43:c9:b7:11:56: ce:e4:8c:96:98:ec:5c:02:5d:8e:30:b0:73:46:ef:60:19:01: 40:c8:0c:17:fe:cb:3b:2b:e6:a6:81:d8:f6:de:6a:95:b1:b9: 79:1f:18:93:0b:b0:ed:48:30:18:5c:5c:e0:f9:30:c9:1c:b6: 38:16:2a:0b:0d:39:dc:fe:97:c8:48:6b:6c:e5:d0:df:93:1a: 89:c8:ed:98:6a:4c:67:ad:4c:0b:90:f9:b0:cf:a2:85:fd:f5: b3:f5:ca:12:db:72:9e:57:c3:1c:a0:94:06:4d:79:13:ae:83: ca:45:b3:4d:9d:fb:4c:75:b6:d0:92:1d:20:f1:a4:ab:84:62: 1c:67:09:36 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZshdalEbTpDTmLp9+o3OMzYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBhMjc5YjQwMzhlMDAyZTdiZDY0ZTUwNzZkMWEzOWViZTk2 ZjIzYzQwHhcNMjUxMjE1MTAwMTU3WhcNMjUxMjE2MTAwMTU3WjAzMTEwLwYDVQQD EygwOTEwNTRmNTQ0M2FjYjEyNTkzY2Q4ZjFlZDljZjg2NjMyODQ4ZmVjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmZtnZ1SHEBpnh804xYyphizO5U4f QYuLtqUek9h0uNJ2XCY7VgAGMUbCOQTapjCU+8nBGKf1nY8lL91/XoRePAY5hRlw QkODLCDovw4lsSpewiZprmrDD9XXMVuH9GE8QKKXLzq7omXSRvITyWyzQJqUhHPn 047vAJSTqBb4fWCMrfUcugjk5/6uJ1+bFPC+uJFk8458Q0E3y+P5A2bcpNEni8MK LtxA0D+G8+6fvhOZpSfewz2JxLC5+PlqdJXn4CtYQWq/3sFPPD2gTVmri/G5bLpw /l+AV1jfBSq9sBfOuSPHfQvRhUjzBV39n9PCUtB6c0AHVzydPBwGsRy3jQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAkQVPVEOssSWTzY8e2c+GYyhI/sMB8GA1UdIwQY MBaAFAonm0A44ALnvWTlB20aOevpbyPEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ2llYlFEamdBdWU5Wk9VSGJSbzU2LWx2SThRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC84NTFkNDUtMTQyMi00YjMxLWJkOGYt Nzk5M2I5ZTAzYjBmLzEvQ2llYlFEamdBdWU5Wk9VSGJSbzU2LWx2SThRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMC84NTFkNDUtMTQyMi00YjMxLWJkOGYtNzk5M2I5ZTAzYjBm LzEvQ2llYlFEamdBdWU5Wk9VSGJSbzU2LWx2SThRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAwv9x+7Pg Jpmd9ArAdCYM+8E9yacxW73RgTD1aW+sCrBCvgTYoa93f0E0LDPIfoOeqUTY3DiI Mn4Pvpjdg0hEnEPRxmXKkXQL5K2rUabT206n7r6oxYqLZ30P7MStUx/vZ5wrkhmM CxJQX9s2NBbcoBng515bZF86RkPJtxFWzuSMlpjsXAJdjjCwc0bvYBkBQMgMF/7L OyvmpoHY9t5qlbG5eR8Ykwuw7UgwGFxc4PkwyRy2OBYqCw053P6XyEhrbOXQ35Ma icjtmGpMZ61MC5D5sM+ihf31s/XKEttynlfDHKCUBk15E66DykWzTZ37THW20JId IPGkq4RiHGcJNg== -----END CERTIFICATE-----Generated at Mon Dec 15 20:23:29 2025 by rpki-client