This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/c983aa-b61e-4ed8-8e81-bc1e55c69755/1/CiPi8LBkCH_YTwSLH6mZcCPVmeE.mft File: CiPi8LBkCH_YTwSLH6mZcCPVmeE.mft (raw, json) Hash identifier: B5WY0lN5C2pIfYXgygbmIDF3g+YD37q7KhSIJqKSvWc= Subject key identifier: 7D:A8:CC:FB:8F:7F:A3:9C:54:BA:A2:C0:79:DF:BC:51:D5:02:82:22 Authority key identifier: 0A:23:E2:F0:B0:64:08:7F:D8:4F:04:8B:1F:A9:99:70:23:D5:99:E1 Certificate issuer: /CN=0a23e2f0b064087fd84f048b1fa9997023d599e1 Certificate serial: 019B25884DCB2E2103C573077CA1FDDA4600 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CiPi8LBkCH_YTwSLH6mZcCPVmeE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/c983aa-b61e-4ed8-8e81-bc1e55c69755/1/CiPi8LBkCH_YTwSLH6mZcCPVmeE.mft Manifest number: 177B Signing time: Tue 16 Dec 2025 05:00:48 +0000 Manifest this update: Tue 16 Dec 2025 05:00:48 +0000 Manifest next update: Wed 17 Dec 2025 05:00:48 +0000 Files and hashes: 1: CiPi8LBkCH_YTwSLH6mZcCPVmeE.crl (hash: Bw1n/IuvCD740j96enD4R/1W1EfY3h1204fCEaU4o40=) 2: w5pXk-zMDjFo7rYudSF_ATInnUI.roa (hash: 33j8kQlj8EM4Xb9f4KytIpk1E+D5CzmOoXGUrxjI1vU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/c983aa-b61e-4ed8-8e81-bc1e55c69755/1/CiPi8LBkCH_YTwSLH6mZcCPVmeE.crl rsync://rpki.ripe.net/repository/DEFAULT/98/c983aa-b61e-4ed8-8e81-bc1e55c69755/1/CiPi8LBkCH_YTwSLH6mZcCPVmeE.mft rsync://rpki.ripe.net/repository/DEFAULT/CiPi8LBkCH_YTwSLH6mZcCPVmeE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 05:00:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:25:88:4d:cb:2e:21:03:c5:73:07:7c:a1:fd:da:46:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0a23e2f0b064087fd84f048b1fa9997023d599e1 Validity Not Before: Dec 16 05:00:48 2025 GMT Not After : Dec 17 05:00:48 2025 GMT Subject: CN=7da8ccfb8f7fa39c54baa2c079dfbc51d5028222 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:ae:e3:ee:d5:d0:8b:93:3f:b9:fd:8f:02:9d: 7e:cc:32:81:52:7a:3d:5f:82:c5:b5:6b:a4:c8:96: 3c:ed:b6:3b:5a:be:ee:52:ab:24:ca:76:b9:54:d5: b9:18:ae:3b:09:b9:2c:f2:07:ab:63:5a:8a:ed:43: db:aa:fe:a5:c4:a2:57:86:8c:31:c3:50:d9:b8:2b: 5d:30:1b:34:a7:e1:fe:52:27:a1:1c:6c:24:16:3c: 76:55:6b:e4:fd:47:83:3f:0d:42:1b:55:3f:30:f8: b3:d4:78:6a:52:84:b1:b7:c9:4a:80:ee:03:c6:4a: 9c:1c:bd:b2:5d:dd:49:f6:0b:cf:f4:1f:97:49:a2: c9:36:72:16:b0:69:c0:9c:bb:82:ca:56:d7:71:6c: d3:2c:ab:b4:9c:d1:c1:c1:22:ca:e6:db:22:a4:07: 01:16:83:40:6a:ea:97:87:fd:b6:1c:a4:c6:d3:12: 05:56:4e:d0:90:0e:b9:1d:de:c6:3e:f6:71:32:6e: 31:e5:74:d4:81:ed:69:34:0a:bc:2b:86:c2:2c:6a: 2b:60:bb:6b:cb:4a:75:4e:cd:1a:cd:e7:f1:fa:a1: 58:9d:41:f8:68:43:14:28:65:26:0e:05:05:12:ff: 45:a8:cc:b2:86:65:21:7b:eb:69:65:63:44:92:71: 29:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:A8:CC:FB:8F:7F:A3:9C:54:BA:A2:C0:79:DF:BC:51:D5:02:82:22 X509v3 Authority Key Identifier: keyid:0A:23:E2:F0:B0:64:08:7F:D8:4F:04:8B:1F:A9:99:70:23:D5:99:E1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CiPi8LBkCH_YTwSLH6mZcCPVmeE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/c983aa-b61e-4ed8-8e81-bc1e55c69755/1/CiPi8LBkCH_YTwSLH6mZcCPVmeE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/98/c983aa-b61e-4ed8-8e81-bc1e55c69755/1/CiPi8LBkCH_YTwSLH6mZcCPVmeE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 21:e4:dd:e2:57:d5:cb:09:be:d6:dc:17:c8:92:6d:16:55:f6: 2c:ac:08:db:41:db:25:87:6e:9c:8d:68:ff:a2:d2:fa:4f:1f: 53:db:3f:6e:ed:d5:13:3a:1e:fb:bf:cf:0e:0d:fe:54:79:03: bd:b5:69:82:33:a4:c0:63:6e:4c:49:2a:57:c0:f9:17:6d:9d: cb:55:e6:f5:30:b8:ac:fc:4e:46:62:f2:50:c5:c4:74:40:d1: 7d:2a:e6:24:ca:88:31:20:de:41:bb:6d:16:e7:e3:35:8b:19: 2a:84:9c:f4:5b:25:b5:d4:cc:d9:21:ee:66:42:bb:9a:1f:39: 46:3a:87:7d:5a:8c:84:db:5f:3e:e8:c6:21:33:5c:68:66:8e: d5:cd:e1:d8:f9:66:27:6e:e6:72:75:fb:ec:01:49:e7:31:75: ed:0c:13:ed:23:d4:1c:aa:05:4d:69:dc:98:70:58:1f:a1:70: 1c:26:fe:df:1f:3e:f8:9e:f8:07:66:37:ea:7e:e7:8b:52:47: 54:a3:2a:71:64:aa:6b:fa:d7:0b:0d:72:06:be:c9:5d:22:a5: 32:c0:3e:a3:a0:b7:f5:1b:11:49:2b:00:35:93:f9:34:d3:f6: bd:8f:8d:f8:bf:16:3c:c5:3c:07:f9:4b:de:e7:24:61:8e:2d: d6:8f:62:dd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsliE3LLiEDxXMHfKH92kYAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBhMjNlMmYwYjA2NDA4N2ZkODRmMDQ4YjFmYTk5OTcwMjNk NTk5ZTEwHhcNMjUxMjE2MDUwMDQ4WhcNMjUxMjE3MDUwMDQ4WjAzMTEwLwYDVQQD Eyg3ZGE4Y2NmYjhmN2ZhMzljNTRiYWEyYzA3OWRmYmM1MWQ1MDI4MjIyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn67j7tXQi5M/uf2PAp1+zDKBUno9 X4LFtWukyJY87bY7Wr7uUqskyna5VNW5GK47Cbks8gerY1qK7UPbqv6lxKJXhowx w1DZuCtdMBs0p+H+UiehHGwkFjx2VWvk/UeDPw1CG1U/MPiz1HhqUoSxt8lKgO4D xkqcHL2yXd1J9gvP9B+XSaLJNnIWsGnAnLuCylbXcWzTLKu0nNHBwSLK5tsipAcB FoNAauqXh/22HKTG0xIFVk7QkA65Hd7GPvZxMm4x5XTUge1pNAq8K4bCLGorYLtr y0p1Ts0azefx+qFYnUH4aEMUKGUmDgUFEv9FqMyyhmUhe+tpZWNEknEpAwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFH2ozPuPf6OcVLqiwHnfvFHVAoIiMB8GA1UdIwQY MBaAFAoj4vCwZAh/2E8Eix+pmXAj1ZnhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ2lQaThMQmtDSF9ZVHdTTEg2bVpjQ1BWbWVFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OC9jOTgzYWEtYjYxZS00ZWQ4LThlODEt YmMxZTU1YzY5NzU1LzEvQ2lQaThMQmtDSF9ZVHdTTEg2bVpjQ1BWbWVFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85OC9jOTgzYWEtYjYxZS00ZWQ4LThlODEtYmMxZTU1YzY5NzU1 LzEvQ2lQaThMQmtDSF9ZVHdTTEg2bVpjQ1BWbWVFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIeTd4lfV ywm+1twXyJJtFlX2LKwI20HbJYdunI1o/6LS+k8fU9s/bu3VEzoe+7/PDg3+VHkD vbVpgjOkwGNuTEkqV8D5F22dy1Xm9TC4rPxORmLyUMXEdEDRfSrmJMqIMSDeQbtt FufjNYsZKoSc9FsltdTM2SHuZkK7mh85RjqHfVqMhNtfPujGITNcaGaO1c3h2Plm J27mcnX77AFJ5zF17QwT7SPUHKoFTWncmHBYH6FwHCb+3x8++J74B2Y36n7ni1JH VKMqcWSqa/rXCw1yBr7JXSKlMsA+o6C39RsRSSsANZP5NNP2vY+N+L8WPMU8B/lL 3uckYY4t1o9i3Q== -----END CERTIFICATE-----Generated at Tue Dec 16 12:31:41 2025 by rpki-client