This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/6bc0f1-d1ea-4900-98ca-f16f994ecf43/1/CIAqhiH4eCf9WXI85my1nDj5HyE.mft File: CIAqhiH4eCf9WXI85my1nDj5HyE.mft (raw, json) Hash identifier: AfJKuR77yroyPaFKLoKO4UaUgqyjX7LO8nt1IJWkAEQ= Subject key identifier: B7:E8:DB:C1:9D:36:36:24:4D:51:15:1E:44:3B:5F:C6:89:28:B6:68 Authority key identifier: 08:80:2A:86:21:F8:78:27:FD:59:72:3C:E6:6C:B5:9C:38:F9:1F:21 Certificate issuer: /CN=08802a8621f87827fd59723ce66cb59c38f91f21 Certificate serial: 019B59E3F788182FB0ED12072E4199AC4168 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CIAqhiH4eCf9WXI85my1nDj5HyE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/6bc0f1-d1ea-4900-98ca-f16f994ecf43/1/CIAqhiH4eCf9WXI85my1nDj5HyE.mft Manifest number: 0AEF Signing time: Fri 26 Dec 2025 09:01:10 +0000 Manifest this update: Fri 26 Dec 2025 09:01:10 +0000 Manifest next update: Sat 27 Dec 2025 09:01:10 +0000 Files and hashes: 1: CIAqhiH4eCf9WXI85my1nDj5HyE.crl (hash: D2jRZE4zEPSu8YAPQ221C4S4CeksqjNu+/kgkKySM9A=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/6bc0f1-d1ea-4900-98ca-f16f994ecf43/1/CIAqhiH4eCf9WXI85my1nDj5HyE.crl rsync://rpki.ripe.net/repository/DEFAULT/a0/6bc0f1-d1ea-4900-98ca-f16f994ecf43/1/CIAqhiH4eCf9WXI85my1nDj5HyE.mft rsync://rpki.ripe.net/repository/DEFAULT/CIAqhiH4eCf9WXI85my1nDj5HyE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:e3:f7:88:18:2f:b0:ed:12:07:2e:41:99:ac:41:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08802a8621f87827fd59723ce66cb59c38f91f21 Validity Not Before: Dec 26 09:01:10 2025 GMT Not After : Dec 27 09:01:10 2025 GMT Subject: CN=b7e8dbc19d3636244d51151e443b5fc68928b668 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:08:cb:e1:57:9c:46:ed:4a:59:3e:a4:b3:e9: 37:7c:45:4d:b9:7c:5d:b4:86:bf:4d:b4:53:6a:02: 65:e5:0f:ee:5d:1b:d6:27:d2:3a:ac:3f:93:94:97: 64:ba:9d:57:87:b0:2e:a2:27:ff:e7:f1:da:d1:38: d3:fc:94:83:92:39:46:77:fa:01:c9:77:d2:e2:eb: ef:9d:1b:ed:63:b9:fa:fc:45:07:1b:3e:83:dc:4c: a4:aa:f1:51:c9:ca:38:86:ef:8d:64:67:8a:12:60: 0a:79:0e:52:bf:0e:06:2d:e5:b8:9e:29:11:54:ec: 0a:d3:6c:6b:ce:ae:70:2c:7c:14:f2:d0:63:03:0c: 9d:d6:f9:0a:6e:9e:83:97:12:e8:ea:53:35:83:19: a0:b9:37:b8:35:a9:0b:e8:28:81:cd:16:29:e0:c6: 2c:f7:c3:da:c4:af:1f:e7:29:d9:74:1a:f9:a7:f6: 01:67:c2:78:48:6e:05:13:16:52:52:e2:8d:c1:28: 18:3b:81:5e:b5:d3:a5:65:10:90:61:2e:df:63:17: f5:24:e8:01:1c:40:ac:ec:a3:bc:44:a0:e2:47:89: db:9e:d9:d5:c4:f4:65:75:9e:df:5e:8c:28:63:28: 51:7a:fa:cb:29:4b:a1:6a:65:40:6b:7d:50:b7:d2: 76:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:E8:DB:C1:9D:36:36:24:4D:51:15:1E:44:3B:5F:C6:89:28:B6:68 X509v3 Authority Key Identifier: keyid:08:80:2A:86:21:F8:78:27:FD:59:72:3C:E6:6C:B5:9C:38:F9:1F:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CIAqhiH4eCf9WXI85my1nDj5HyE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/6bc0f1-d1ea-4900-98ca-f16f994ecf43/1/CIAqhiH4eCf9WXI85my1nDj5HyE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/6bc0f1-d1ea-4900-98ca-f16f994ecf43/1/CIAqhiH4eCf9WXI85my1nDj5HyE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 00:6e:15:88:d2:e9:fe:4f:60:34:aa:db:4a:ab:0a:8d:07:60: 1e:b2:7d:c1:a8:0c:dd:8b:9d:99:17:ff:08:20:80:fd:b9:b1: 8d:62:ba:1b:63:92:27:a1:d9:b9:45:4f:41:1d:da:5f:b0:ed: 00:ee:46:c8:fb:08:bf:c0:f8:f5:e6:cb:40:98:5c:cc:59:b3: ec:ed:4a:71:2c:6a:e1:ad:27:e2:b4:20:ff:6e:b5:88:f7:a4: ae:40:87:13:10:5f:a7:e5:18:55:8e:4e:5b:a5:3e:c1:d5:e0: 7a:e4:f3:bb:bc:85:a7:c4:bf:bf:ba:9e:00:7b:d6:ee:aa:f5: 44:a6:d8:19:22:9c:e4:f3:c4:30:07:1e:a7:bf:b0:51:dc:01: 1d:09:60:ed:b1:12:eb:b1:35:15:ed:fd:36:38:d1:37:29:06: 4e:1d:6b:a0:cb:96:81:8c:d1:8d:ee:19:66:eb:31:7b:89:cd: e1:b3:8b:76:ed:b4:b1:a3:93:89:16:ef:16:41:c0:c1:08:a9: 22:70:71:65:8c:04:78:6c:f7:62:b8:86:e1:03:82:08:91:85: fd:f3:85:05:81:a1:1a:ab:41:cb:d1:e8:bf:87:45:5d:63:88: df:c3:c8:97:0f:13:d6:b1:b5:c2:bb:43:b9:61:cd:3d:1e:4c: bb:44:9f:f7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtZ4/eIGC+w7RIHLkGZrEFoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA4ODAyYTg2MjFmODc4MjdmZDU5NzIzY2U2NmNiNTljMzhm OTFmMjEwHhcNMjUxMjI2MDkwMTEwWhcNMjUxMjI3MDkwMTEwWjAzMTEwLwYDVQQD EyhiN2U4ZGJjMTlkMzYzNjI0NGQ1MTE1MWU0NDNiNWZjNjg5MjhiNjY4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtQjL4VecRu1KWT6ks+k3fEVNuXxd tIa/TbRTagJl5Q/uXRvWJ9I6rD+TlJdkup1Xh7Auoif/5/Ha0TjT/JSDkjlGd/oB yXfS4uvvnRvtY7n6/EUHGz6D3EykqvFRyco4hu+NZGeKEmAKeQ5Svw4GLeW4nikR VOwK02xrzq5wLHwU8tBjAwyd1vkKbp6DlxLo6lM1gxmguTe4NakL6CiBzRYp4MYs 98PaxK8f5ynZdBr5p/YBZ8J4SG4FExZSUuKNwSgYO4FetdOlZRCQYS7fYxf1JOgB HECs7KO8RKDiR4nbntnVxPRldZ7fXowoYyhRevrLKUuhamVAa31Qt9J2gQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLfo28GdNjYkTVEVHkQ7X8aJKLZoMB8GA1UdIwQY MBaAFAiAKoYh+Hgn/VlyPOZstZw4+R8hMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ0lBcWhpSDRlQ2Y5V1hJODVteTFuRGo1SHlFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMC82YmMwZjEtZDFlYS00OTAwLTk4Y2Et ZjE2Zjk5NGVjZjQzLzEvQ0lBcWhpSDRlQ2Y5V1hJODVteTFuRGo1SHlFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMC82YmMwZjEtZDFlYS00OTAwLTk4Y2EtZjE2Zjk5NGVjZjQz LzEvQ0lBcWhpSDRlQ2Y5V1hJODVteTFuRGo1SHlFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAG4ViNLp /k9gNKrbSqsKjQdgHrJ9wagM3YudmRf/CCCA/bmxjWK6G2OSJ6HZuUVPQR3aX7Dt AO5GyPsIv8D49ebLQJhczFmz7O1KcSxq4a0n4rQg/261iPekrkCHExBfp+UYVY5O W6U+wdXgeuTzu7yFp8S/v7qeAHvW7qr1RKbYGSKc5PPEMAcep7+wUdwBHQlg7bES 67E1Fe39NjjRNykGTh1roMuWgYzRje4ZZusxe4nN4bOLdu20saOTiRbvFkHAwQip InBxZYwEeGz3YriG4QOCCJGF/fOFBYGhGqtBy9Hov4dFXWOI38PIlw8T1rG1wrtD uWHNPR5Mu0Sf9w== -----END CERTIFICATE-----Generated at Fri Dec 26 14:17:20 2025 by rpki-client