This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/3a39e9-3d40-46f8-bb0f-5ba43b118f75/1/CioVfwBRX5W2313A1S6xtdQ_3lw.mft File: CioVfwBRX5W2313A1S6xtdQ_3lw.mft (raw, json) Hash identifier: +agmUECcPXVcFockANi4TXAOTIuNCxKwgEeQJzzR5pY= Subject key identifier: A8:D4:D2:4A:13:C3:5F:12:06:E0:D1:92:DC:D0:46:FD:22:BB:90:57 Authority key identifier: 0A:2A:15:7F:00:51:5F:95:B6:DF:5D:C0:D5:2E:B1:B5:D4:3F:DE:5C Certificate issuer: /CN=0a2a157f00515f95b6df5dc0d52eb1b5d43fde5c Certificate serial: 019B10135D8925277082B191740AD343F6C4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CioVfwBRX5W2313A1S6xtdQ_3lw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/3a39e9-3d40-46f8-bb0f-5ba43b118f75/1/CioVfwBRX5W2313A1S6xtdQ_3lw.mft Manifest number: 176F Signing time: Fri 12 Dec 2025 01:01:03 +0000 Manifest this update: Fri 12 Dec 2025 01:01:03 +0000 Manifest next update: Sat 13 Dec 2025 01:01:03 +0000 Files and hashes: 1: 4tKIyKN2LpGytONfG9Wwzb3sMh8.roa (hash: So7qtpci+LVeK7KYvgn0X4FAkS3oDmYxiev+fG5cuSs=) 2: CioVfwBRX5W2313A1S6xtdQ_3lw.crl (hash: PTkpJoZBsBs24BgbzExDGsFMbu5gSNK6Z0yjzT6/qHM=) 3: Ulk603SVbOQAiKSzR_IZBatvpSU.roa (hash: 1Gak7FJcv6XeZUXfgmGsLnHftg1ktwdBLJgL9CPQ7IA=) 4: rjFAvFxrdSB0H68aH_zK0lS1GcA.roa (hash: iKO/ulWqGpWzjwhANl857sDa0g01+J+R36f50OBJrb0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/3a39e9-3d40-46f8-bb0f-5ba43b118f75/1/CioVfwBRX5W2313A1S6xtdQ_3lw.crl rsync://rpki.ripe.net/repository/DEFAULT/3e/3a39e9-3d40-46f8-bb0f-5ba43b118f75/1/CioVfwBRX5W2313A1S6xtdQ_3lw.mft rsync://rpki.ripe.net/repository/DEFAULT/CioVfwBRX5W2313A1S6xtdQ_3lw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 19:27:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:10:13:5d:89:25:27:70:82:b1:91:74:0a:d3:43:f6:c4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0a2a157f00515f95b6df5dc0d52eb1b5d43fde5c Validity Not Before: Dec 12 01:01:03 2025 GMT Not After : Dec 13 01:01:03 2025 GMT Subject: CN=a8d4d24a13c35f1206e0d192dcd046fd22bb9057 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:48:e7:73:92:4f:29:33:95:57:95:38:8a:1f: af:63:9c:9c:fe:2d:ca:39:ff:5a:0b:d8:01:25:d6: bc:0d:b7:aa:e9:1b:c0:8c:a0:a0:00:b7:42:c0:3f: e6:26:38:1a:30:58:f6:d4:37:a8:96:a4:c1:2b:9c: d5:ee:1f:76:64:15:64:b8:7e:df:48:e2:c3:11:ad: 33:f8:32:78:69:79:88:35:d8:07:80:fe:aa:af:cb: fe:55:cd:95:0e:9d:c4:9d:04:ec:23:f7:b7:a5:77: 08:e9:c9:c5:b4:a6:c3:e1:d0:9d:a2:07:2d:91:36: ee:8e:93:7a:fc:02:47:01:38:6c:c7:49:cd:30:5d: 68:0a:19:e7:4d:54:50:88:0f:7a:d1:91:4d:f8:e2: 4e:70:56:68:df:8c:70:8c:79:57:0c:fb:c4:52:e0: 64:27:71:2a:84:01:c2:5d:2c:2f:4c:9d:83:00:c5: 60:e5:1d:37:40:2c:8c:f1:51:b8:7a:5a:71:09:25: 5d:c1:27:66:72:72:04:69:96:c7:c4:4f:23:bf:21: 54:38:b7:4a:1a:a3:c5:d5:76:8c:d6:77:08:81:8b: 87:dd:1c:77:38:97:83:9f:e9:f6:14:ad:f7:56:c6: 6d:f7:70:34:c6:e8:74:a2:16:05:20:f6:36:08:c1: 05:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:D4:D2:4A:13:C3:5F:12:06:E0:D1:92:DC:D0:46:FD:22:BB:90:57 X509v3 Authority Key Identifier: keyid:0A:2A:15:7F:00:51:5F:95:B6:DF:5D:C0:D5:2E:B1:B5:D4:3F:DE:5C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CioVfwBRX5W2313A1S6xtdQ_3lw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/3a39e9-3d40-46f8-bb0f-5ba43b118f75/1/CioVfwBRX5W2313A1S6xtdQ_3lw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/3a39e9-3d40-46f8-bb0f-5ba43b118f75/1/CioVfwBRX5W2313A1S6xtdQ_3lw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3c:62:07:b8:0a:a3:0e:54:a1:0e:bf:11:da:48:f3:64:6e:33: 56:06:99:38:62:be:7c:1c:9b:47:79:93:25:3a:b2:17:13:3b: 68:e6:31:74:13:e4:20:a3:d7:82:fa:79:92:0d:a9:35:18:d3: 59:18:e3:e9:fc:5b:40:09:87:0c:6e:6e:46:26:20:6f:76:72: ce:c5:bc:a4:8d:f4:11:91:cf:72:57:11:19:07:d3:d3:71:28: 98:0d:c9:06:8e:02:87:6b:6a:c7:d7:4e:61:c0:b6:95:6d:32: 17:d2:b7:4d:7a:91:c5:55:63:75:f7:b5:a0:25:84:ac:39:29: 1a:2b:a1:22:ea:38:39:b9:3d:ed:85:4f:72:d0:74:06:74:aa: dc:32:8e:ce:40:6d:6b:04:3a:9d:4c:0b:4b:e3:7e:82:1d:92: 40:bc:33:ff:79:6f:aa:85:f5:24:50:85:7c:fa:fd:05:5a:94: 5f:dd:f4:02:8d:fb:ff:1d:32:f5:24:ba:52:8f:e6:c5:23:ed: d0:8d:df:92:a1:24:06:45:33:cf:56:e3:ec:8c:f9:d4:e9:79: 8e:db:ec:17:d8:8e:56:5e:70:89:22:7f:9b:15:8b:23:30:9c: 15:c5:ff:e4:d1:00:1d:4f:ad:bf:5c:84:cd:ab:63:1e:8f:c7: 69:27:34:84 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsQE12JJSdwgrGRdArTQ/bEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBhMmExNTdmMDA1MTVmOTViNmRmNWRjMGQ1MmViMWI1ZDQz ZmRlNWMwHhcNMjUxMjEyMDEwMTAzWhcNMjUxMjEzMDEwMTAzWjAzMTEwLwYDVQQD EyhhOGQ0ZDI0YTEzYzM1ZjEyMDZlMGQxOTJkY2QwNDZmZDIyYmI5MDU3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0kjnc5JPKTOVV5U4ih+vY5yc/i3K Of9aC9gBJda8Dbeq6RvAjKCgALdCwD/mJjgaMFj21DeolqTBK5zV7h92ZBVkuH7f SOLDEa0z+DJ4aXmINdgHgP6qr8v+Vc2VDp3EnQTsI/e3pXcI6cnFtKbD4dCdogct kTbujpN6/AJHAThsx0nNMF1oChnnTVRQiA960ZFN+OJOcFZo34xwjHlXDPvEUuBk J3EqhAHCXSwvTJ2DAMVg5R03QCyM8VG4elpxCSVdwSdmcnIEaZbHxE8jvyFUOLdK GqPF1XaM1ncIgYuH3Rx3OJeDn+n2FK33VsZt93A0xuh0ohYFIPY2CMEF6wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKjU0koTw18SBuDRktzQRv0iu5BXMB8GA1UdIwQY MBaAFAoqFX8AUV+Vtt9dwNUusbXUP95cMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ2lvVmZ3QlJYNVcyMzEzQTFTNnh0ZFFfM2x3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZS8zYTM5ZTktM2Q0MC00NmY4LWJiMGYt NWJhNDNiMTE4Zjc1LzEvQ2lvVmZ3QlJYNVcyMzEzQTFTNnh0ZFFfM2x3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZS8zYTM5ZTktM2Q0MC00NmY4LWJiMGYtNWJhNDNiMTE4Zjc1 LzEvQ2lvVmZ3QlJYNVcyMzEzQTFTNnh0ZFFfM2x3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPGIHuAqj DlShDr8R2kjzZG4zVgaZOGK+fBybR3mTJTqyFxM7aOYxdBPkIKPXgvp5kg2pNRjT WRjj6fxbQAmHDG5uRiYgb3ZyzsW8pI30EZHPclcRGQfT03EomA3JBo4Ch2tqx9dO YcC2lW0yF9K3TXqRxVVjdfe1oCWErDkpGiuhIuo4Obk97YVPctB0BnSq3DKOzkBt awQ6nUwLS+N+gh2SQLwz/3lvqoX1JFCFfPr9BVqUX930Ao37/x0y9SS6Uo/mxSPt 0I3fkqEkBkUzz1bj7Iz51Ol5jtvsF9iOVl5wiSJ/mxWLIzCcFcX/5NEAHU+tv1yE zatjHo/HaSc0hA== -----END CERTIFICATE-----Generated at Fri Dec 12 03:42:51 2025 by rpki-client