This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/3a39e9-3d40-46f8-bb0f-5ba43b118f75/1/CioVfwBRX5W2313A1S6xtdQ_3lw.mft File: CioVfwBRX5W2313A1S6xtdQ_3lw.mft (raw, json) Hash identifier: DOZFyY5RO2fP0QZ5GulnM8wQb8/6nqeTY9R15qyzaLA= Subject key identifier: 7A:6D:4F:40:C3:A0:66:65:88:64:E1:ED:0A:B2:F1:48:EA:DC:7E:91 Authority key identifier: 0A:2A:15:7F:00:51:5F:95:B6:DF:5D:C0:D5:2E:B1:B5:D4:3F:DE:5C Certificate issuer: /CN=0a2a157f00515f95b6df5dc0d52eb1b5d43fde5c Certificate serial: 019B36B303B8B247719F63073F0229FABF69 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CioVfwBRX5W2313A1S6xtdQ_3lw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/3a39e9-3d40-46f8-bb0f-5ba43b118f75/1/CioVfwBRX5W2313A1S6xtdQ_3lw.mft Manifest number: 1783 Signing time: Fri 19 Dec 2025 13:01:00 +0000 Manifest this update: Fri 19 Dec 2025 13:01:00 +0000 Manifest next update: Sat 20 Dec 2025 13:01:00 +0000 Files and hashes: 1: 4tKIyKN2LpGytONfG9Wwzb3sMh8.roa (hash: So7qtpci+LVeK7KYvgn0X4FAkS3oDmYxiev+fG5cuSs=) 2: CioVfwBRX5W2313A1S6xtdQ_3lw.crl (hash: vVXmBwniU71O6GckDkpvou14a3vgcWNhOZDfEpdG0BA=) 3: Ulk603SVbOQAiKSzR_IZBatvpSU.roa (hash: 1Gak7FJcv6XeZUXfgmGsLnHftg1ktwdBLJgL9CPQ7IA=) 4: rjFAvFxrdSB0H68aH_zK0lS1GcA.roa (hash: iKO/ulWqGpWzjwhANl857sDa0g01+J+R36f50OBJrb0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/3a39e9-3d40-46f8-bb0f-5ba43b118f75/1/CioVfwBRX5W2313A1S6xtdQ_3lw.crl rsync://rpki.ripe.net/repository/DEFAULT/3e/3a39e9-3d40-46f8-bb0f-5ba43b118f75/1/CioVfwBRX5W2313A1S6xtdQ_3lw.mft rsync://rpki.ripe.net/repository/DEFAULT/CioVfwBRX5W2313A1S6xtdQ_3lw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 13:01:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:36:b3:03:b8:b2:47:71:9f:63:07:3f:02:29:fa:bf:69 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0a2a157f00515f95b6df5dc0d52eb1b5d43fde5c Validity Not Before: Dec 19 13:01:00 2025 GMT Not After : Dec 20 13:01:00 2025 GMT Subject: CN=7a6d4f40c3a066658864e1ed0ab2f148eadc7e91 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:78:91:c3:ae:a8:27:b1:f7:29:a7:c7:b0:63: e6:bd:2b:39:ec:a8:fd:a7:4d:33:69:75:fb:b7:b0: 03:61:8c:21:a4:ac:ca:f8:55:ed:a5:3e:7c:78:9d: ed:25:d2:f3:d3:fe:12:a1:98:22:9f:82:16:e3:d1: 8b:62:93:1f:83:a1:de:15:b2:b8:89:f4:3c:f6:70: f2:16:5c:40:89:a3:50:15:9b:79:52:a7:83:3d:7e: f3:6a:20:e1:4d:57:39:66:45:e1:40:de:00:9d:ec: 18:36:10:37:8c:5b:db:60:0d:4b:55:a8:50:1b:04: ad:29:8c:10:1d:34:c4:b4:8d:36:7a:a9:64:dc:5c: 7a:d7:46:60:7c:d5:3b:d1:87:31:c5:96:6d:46:a7: 4c:96:b0:14:1d:64:73:dc:37:6f:60:91:cd:1d:4d: cf:d7:6b:00:4b:df:26:4b:c1:b4:9c:eb:10:d9:f8: b8:4b:7d:56:ed:41:62:85:e5:a2:34:5a:88:7c:42: f6:62:17:b8:8a:c1:89:d7:bf:e1:86:56:24:d7:3b: bd:34:26:e4:f0:7f:3c:4a:2d:30:17:52:56:6a:c5: a1:83:d3:b3:ea:bf:d9:b4:e3:ba:18:20:00:18:f4: bc:8b:3c:61:a8:b0:64:ee:35:86:1b:d0:38:67:3d: c9:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:6D:4F:40:C3:A0:66:65:88:64:E1:ED:0A:B2:F1:48:EA:DC:7E:91 X509v3 Authority Key Identifier: keyid:0A:2A:15:7F:00:51:5F:95:B6:DF:5D:C0:D5:2E:B1:B5:D4:3F:DE:5C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CioVfwBRX5W2313A1S6xtdQ_3lw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/3a39e9-3d40-46f8-bb0f-5ba43b118f75/1/CioVfwBRX5W2313A1S6xtdQ_3lw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/3a39e9-3d40-46f8-bb0f-5ba43b118f75/1/CioVfwBRX5W2313A1S6xtdQ_3lw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 57:c2:00:31:9d:3c:ff:78:ff:90:c9:41:bc:66:7e:ae:97:7b: 7a:4b:7a:6c:e3:1d:43:55:a3:ed:d6:77:2d:b3:44:3a:44:ae: 83:c2:c1:82:24:05:b7:93:00:37:98:37:3f:b1:b0:62:2a:76: 32:4d:7d:a0:60:d3:d6:e1:4f:30:bc:bf:16:c9:cb:0e:fd:5c: 63:0a:ce:c5:8b:b3:25:2a:d8:b5:25:eb:4f:dd:62:7e:a4:45: e0:7a:15:d2:8b:0f:d8:d5:98:3f:6e:de:f8:65:dc:56:62:b7: 85:ba:63:2e:7b:e0:d0:01:df:70:e2:48:05:11:e8:5a:d1:63: d3:18:7f:ce:bd:ba:9e:59:76:7b:00:93:d7:cc:b1:20:b7:54: 72:b9:05:2c:88:db:05:98:2d:27:20:e8:fe:da:1f:a7:60:0d: 29:66:d2:c7:a2:a3:e2:e5:56:ee:54:02:0a:e7:4d:61:4a:4b: fc:7a:f9:ec:81:6f:1e:55:5b:6c:85:11:1d:b2:7e:c0:45:97: 50:4b:90:87:85:20:52:4f:19:17:39:c9:fa:8b:22:fc:45:32: ef:db:ca:f6:08:8b:fd:4a:8f:9f:d7:34:fb:9b:c7:1d:f7:cc: bb:b4:21:bd:e6:a1:c6:e8:79:be:fa:a0:e1:6b:d4:b2:df:0c: e0:db:f5:30 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs2swO4skdxn2MHPwIp+r9pMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBhMmExNTdmMDA1MTVmOTViNmRmNWRjMGQ1MmViMWI1ZDQz ZmRlNWMwHhcNMjUxMjE5MTMwMTAwWhcNMjUxMjIwMTMwMTAwWjAzMTEwLwYDVQQD Eyg3YTZkNGY0MGMzYTA2NjY1ODg2NGUxZWQwYWIyZjE0OGVhZGM3ZTkxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvniRw66oJ7H3KafHsGPmvSs57Kj9 p00zaXX7t7ADYYwhpKzK+FXtpT58eJ3tJdLz0/4SoZgin4IW49GLYpMfg6HeFbK4 ifQ89nDyFlxAiaNQFZt5UqeDPX7zaiDhTVc5ZkXhQN4AnewYNhA3jFvbYA1LVahQ GwStKYwQHTTEtI02eqlk3Fx610ZgfNU70YcxxZZtRqdMlrAUHWRz3DdvYJHNHU3P 12sAS98mS8G0nOsQ2fi4S31W7UFiheWiNFqIfEL2Yhe4isGJ17/hhlYk1zu9NCbk 8H88Si0wF1JWasWhg9Oz6r/ZtOO6GCAAGPS8izxhqLBk7jWGG9A4Zz3J7wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHptT0DDoGZliGTh7Qqy8Ujq3H6RMB8GA1UdIwQY MBaAFAoqFX8AUV+Vtt9dwNUusbXUP95cMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ2lvVmZ3QlJYNVcyMzEzQTFTNnh0ZFFfM2x3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZS8zYTM5ZTktM2Q0MC00NmY4LWJiMGYt NWJhNDNiMTE4Zjc1LzEvQ2lvVmZ3QlJYNVcyMzEzQTFTNnh0ZFFfM2x3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZS8zYTM5ZTktM2Q0MC00NmY4LWJiMGYtNWJhNDNiMTE4Zjc1 LzEvQ2lvVmZ3QlJYNVcyMzEzQTFTNnh0ZFFfM2x3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAV8IAMZ08 /3j/kMlBvGZ+rpd7ekt6bOMdQ1Wj7dZ3LbNEOkSug8LBgiQFt5MAN5g3P7GwYip2 Mk19oGDT1uFPMLy/FsnLDv1cYwrOxYuzJSrYtSXrT91ifqRF4HoV0osP2NWYP27e +GXcVmK3hbpjLnvg0AHfcOJIBRHoWtFj0xh/zr26nll2ewCT18yxILdUcrkFLIjb BZgtJyDo/tofp2ANKWbSx6Kj4uVW7lQCCudNYUpL/Hr57IFvHlVbbIURHbJ+wEWX UEuQh4UgUk8ZFznJ+osi/EUy79vK9giL/UqPn9c0+5vHHffMu7Qhveahxuh5vvqg 4WvUst8M4Nv1MA== -----END CERTIFICATE-----Generated at Fri Dec 19 22:38:54 2025 by rpki-client