This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/6f590a-c1fd-4019-bbe8-87aae3575a2a/1/cIx-If6q6sViZpSXVEPndzXz_Kc.mft File: cIx-If6q6sViZpSXVEPndzXz_Kc.mft (raw, json) Hash identifier: SCqS1ql5DAg6TG1wM9ThV4T8uXSInMM8osPT0mRYVfA= Subject key identifier: 40:5C:15:02:B8:61:E3:72:FC:99:C6:46:0A:EA:0C:A1:3E:61:B8:0F Authority key identifier: 70:8C:7E:21:FE:AA:EA:C5:62:66:94:97:54:43:E7:77:35:F3:FC:A7 Certificate issuer: /CN=708c7e21feaaeac5626694975443e77735f3fca7 Certificate serial: 019B5977507707C57851D9556AB48A0E670B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cIx-If6q6sViZpSXVEPndzXz_Kc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/6f590a-c1fd-4019-bbe8-87aae3575a2a/1/cIx-If6q6sViZpSXVEPndzXz_Kc.mft Manifest number: 93 Signing time: Fri 26 Dec 2025 07:02:30 +0000 Manifest this update: Fri 26 Dec 2025 07:02:30 +0000 Manifest next update: Sat 27 Dec 2025 07:02:30 +0000 Files and hashes: 1: cIx-If6q6sViZpSXVEPndzXz_Kc.crl (hash: plw8C+hZOox7GiYqR67uUgfk0iMJ7MjJpuur/DXLtoM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/6f590a-c1fd-4019-bbe8-87aae3575a2a/1/cIx-If6q6sViZpSXVEPndzXz_Kc.crl rsync://rpki.ripe.net/repository/DEFAULT/91/6f590a-c1fd-4019-bbe8-87aae3575a2a/1/cIx-If6q6sViZpSXVEPndzXz_Kc.mft rsync://rpki.ripe.net/repository/DEFAULT/cIx-If6q6sViZpSXVEPndzXz_Kc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:77:50:77:07:c5:78:51:d9:55:6a:b4:8a:0e:67:0b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=708c7e21feaaeac5626694975443e77735f3fca7 Validity Not Before: Dec 26 07:02:30 2025 GMT Not After : Dec 27 07:02:30 2025 GMT Subject: CN=405c1502b861e372fc99c6460aea0ca13e61b80f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:61:b5:71:54:69:73:ac:09:5e:18:f7:39:bb: ab:40:06:df:26:2b:8f:33:f6:20:a3:fc:8a:4f:c9: 51:9c:fe:51:52:fd:c0:fd:8a:1c:15:11:9e:c6:c8: 3b:d1:40:a7:64:f5:0c:6e:07:48:20:fa:95:fc:23: c6:73:27:7d:68:5e:d8:c4:d8:2d:d1:89:5c:e1:de: 21:6f:0a:3e:04:39:2e:a1:f2:17:a8:20:19:18:88: 53:36:71:d5:7d:29:00:3e:95:fb:2a:31:06:d7:b5: b2:f5:fd:f9:9d:ae:7e:1f:d2:5e:78:29:0d:2a:11: 6d:d1:6e:56:47:d0:12:63:91:b5:72:8d:3e:98:ef: 92:ce:4d:b8:2e:96:ef:f0:35:87:11:e0:e6:7e:b1: d4:de:7a:66:c9:0a:a8:35:e3:04:97:76:62:c1:cc: 67:98:f3:e3:d1:23:be:ef:e4:66:b0:1c:4f:07:cb: 13:3d:3d:ff:9f:1e:1c:42:fd:62:36:c6:3e:ac:ba: b0:12:a2:bb:cb:78:84:69:a5:a5:9d:cb:80:90:81: f2:93:46:e0:d6:d9:5c:d9:99:db:a0:3c:b6:8c:6e: 0c:3e:c6:58:27:56:f8:75:55:de:20:4d:39:b7:b6: f7:f2:44:e5:46:3b:d3:68:86:49:86:fe:d5:c1:8f: 7b:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:5C:15:02:B8:61:E3:72:FC:99:C6:46:0A:EA:0C:A1:3E:61:B8:0F X509v3 Authority Key Identifier: keyid:70:8C:7E:21:FE:AA:EA:C5:62:66:94:97:54:43:E7:77:35:F3:FC:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cIx-If6q6sViZpSXVEPndzXz_Kc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/6f590a-c1fd-4019-bbe8-87aae3575a2a/1/cIx-If6q6sViZpSXVEPndzXz_Kc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/91/6f590a-c1fd-4019-bbe8-87aae3575a2a/1/cIx-If6q6sViZpSXVEPndzXz_Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 75:43:95:98:9a:63:0f:ff:2c:44:2f:77:53:11:c8:49:dc:22: d8:fd:de:40:f1:60:0e:1b:79:27:3d:f4:61:da:6a:0f:91:bd: de:07:46:ef:19:5c:c3:6b:96:6d:63:3c:6a:b9:a8:23:fc:96: fa:d5:6e:12:5a:b2:2a:0a:15:a6:bf:5a:e4:d4:5e:ce:41:b6: 47:3e:09:17:e0:3d:b1:3c:91:ca:86:f6:47:ca:ad:d8:b9:d5: 70:64:3e:1a:49:08:87:9f:dd:cd:db:21:87:27:fe:4e:3a:d2: be:a1:43:c5:0d:1f:d0:02:82:77:19:8c:05:d7:0f:97:e1:f5: c5:27:22:f2:11:ae:75:b6:be:5a:ca:3e:07:ef:a9:8b:a5:b9: 69:68:2f:7a:07:4f:68:9d:57:f2:f6:5d:e1:79:11:93:ef:ba: eb:c2:a2:f1:a8:d9:af:9d:28:b9:a3:60:54:e5:37:19:fe:a5: 3c:c4:23:6b:ab:59:60:33:b0:a7:08:68:36:2e:8e:9f:7d:1b: cb:57:85:b7:0c:02:c8:99:b9:e5:06:49:09:da:6c:12:6a:d5: f1:7b:92:5e:62:14:2e:50:6b:61:dc:2d:da:0e:2a:27:60:3c: 19:77:52:a9:f2:57:c2:1e:e1:aa:6c:9c:3f:ed:01:d4:f0:e4: 58:88:17:f9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtZd1B3B8V4UdlVarSKDmcLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcwOGM3ZTIxZmVhYWVhYzU2MjY2OTQ5NzU0NDNlNzc3MzVm M2ZjYTcwHhcNMjUxMjI2MDcwMjMwWhcNMjUxMjI3MDcwMjMwWjAzMTEwLwYDVQQD Eyg0MDVjMTUwMmI4NjFlMzcyZmM5OWM2NDYwYWVhMGNhMTNlNjFiODBmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvGG1cVRpc6wJXhj3OburQAbfJiuP M/Ygo/yKT8lRnP5RUv3A/YocFRGexsg70UCnZPUMbgdIIPqV/CPGcyd9aF7YxNgt 0Ylc4d4hbwo+BDkuofIXqCAZGIhTNnHVfSkAPpX7KjEG17Wy9f35na5+H9JeeCkN KhFt0W5WR9ASY5G1co0+mO+Szk24Lpbv8DWHEeDmfrHU3npmyQqoNeMEl3Ziwcxn mPPj0SO+7+RmsBxPB8sTPT3/nx4cQv1iNsY+rLqwEqK7y3iEaaWlncuAkIHyk0bg 1tlc2ZnboDy2jG4MPsZYJ1b4dVXeIE05t7b38kTlRjvTaIZJhv7VwY97JQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEBcFQK4YeNy/JnGRgrqDKE+YbgPMB8GA1UdIwQY MBaAFHCMfiH+qurFYmaUl1RD53c18/ynMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY0l4LUlmNnE2c1ZpWnBTWFZFUG5kelh6X0tjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MS82ZjU5MGEtYzFmZC00MDE5LWJiZTgt ODdhYWUzNTc1YTJhLzEvY0l4LUlmNnE2c1ZpWnBTWFZFUG5kelh6X0tjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85MS82ZjU5MGEtYzFmZC00MDE5LWJiZTgtODdhYWUzNTc1YTJh LzEvY0l4LUlmNnE2c1ZpWnBTWFZFUG5kelh6X0tjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdUOVmJpj D/8sRC93UxHISdwi2P3eQPFgDht5Jz30YdpqD5G93gdG7xlcw2uWbWM8armoI/yW +tVuElqyKgoVpr9a5NRezkG2Rz4JF+A9sTyRyob2R8qt2LnVcGQ+GkkIh5/dzdsh hyf+TjrSvqFDxQ0f0AKCdxmMBdcPl+H1xSci8hGudba+Wso+B++pi6W5aWgvegdP aJ1X8vZd4XkRk++668Ki8ajZr50ouaNgVOU3Gf6lPMQja6tZYDOwpwhoNi6On30b y1eFtwwCyJm55QZJCdpsEmrV8XuSXmIULlBrYdwt2g4qJ2A8GXdSqfJXwh7hqmyc P+0B1PDkWIgX+Q== -----END CERTIFICATE-----Generated at Fri Dec 26 14:17:31 2025 by rpki-client