This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/706c03-7d35-4913-8a18-6e8784a7ad09/1/cIR_giGJfW6VLobqLDOauqzBMfU.mft File: cIR_giGJfW6VLobqLDOauqzBMfU.mft (raw, json) Hash identifier: WpvXgvMV1Kg44WeCTm2jEcsue8Tj/tHH3nbpOvVt+hQ= Subject key identifier: FE:54:C5:71:AF:23:DE:3C:83:D6:44:1B:AD:0C:06:89:0C:DA:8B:A5 Authority key identifier: 70:84:7F:82:21:89:7D:6E:95:2E:86:EA:2C:33:9A:BA:AC:C1:31:F5 Certificate issuer: /CN=70847f8221897d6e952e86ea2c339abaacc131f5 Certificate serial: 019B10148E72A29843640B46E98ABEE13156 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cIR_giGJfW6VLobqLDOauqzBMfU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/706c03-7d35-4913-8a18-6e8784a7ad09/1/cIR_giGJfW6VLobqLDOauqzBMfU.mft Manifest number: 107B Signing time: Fri 12 Dec 2025 01:02:21 +0000 Manifest this update: Fri 12 Dec 2025 01:02:21 +0000 Manifest next update: Sat 13 Dec 2025 01:02:21 +0000 Files and hashes: 1: 349zjBrXxWXdbWEBD0TY_PcES-4.roa (hash: dTkBBehXJumOuwcY3aMRaxc4m1QE9Au6OaxONrVwqa8=) 2: FGloAOGdHctONwf864BFw9r6804.roa (hash: idNgzg92xFKVGDg8Q8+8kqcQjJU43tGKLwcMZ1BO8+8=) 3: QeA9h5gc7h5TROkBqdTQKlfxGiI.roa (hash: wvC6P2mkgiV/WDCXbKURUPeQIyZPZgtW7FSvBfEWp/8=) 4: cIR_giGJfW6VLobqLDOauqzBMfU.crl (hash: sPnTGSQnCJOmIuUnc7lVhrBp2Ace/t/tveHNi1IazTg=) 5: f4DXZiMB_Ff_0JwzJIxf0LcmHB4.roa (hash: BYRfPeQZzgZNAMB4knpfUfsNVjUgJWJmqeqw3IISPlY=) 6: rguLiIijQORjnghvpZcGDmu1SjU.roa (hash: JNesrlv42ZJgaFQwOxaZT3TmKgM6sVVqVrh2EttTKxs=) 7: zWJS9qIiKhPDTGBp07EnN-zc5Ok.roa (hash: UIbGdiKmqLamnBzWNetbuRIAxAE+Pp02kC9Gg2VRxdw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/706c03-7d35-4913-8a18-6e8784a7ad09/1/cIR_giGJfW6VLobqLDOauqzBMfU.crl rsync://rpki.ripe.net/repository/DEFAULT/a3/706c03-7d35-4913-8a18-6e8784a7ad09/1/cIR_giGJfW6VLobqLDOauqzBMfU.mft rsync://rpki.ripe.net/repository/DEFAULT/cIR_giGJfW6VLobqLDOauqzBMfU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 23:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:10:14:8e:72:a2:98:43:64:0b:46:e9:8a:be:e1:31:56 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=70847f8221897d6e952e86ea2c339abaacc131f5 Validity Not Before: Dec 12 01:02:21 2025 GMT Not After : Dec 13 01:02:21 2025 GMT Subject: CN=fe54c571af23de3c83d6441bad0c06890cda8ba5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:f4:43:e2:2d:76:81:40:96:7f:32:55:2f:a0: 43:a8:d7:60:46:fa:92:c4:7e:7e:18:d6:1c:23:bb: b8:92:b3:97:0f:b8:fb:5c:9b:b0:a4:0d:df:5b:a2: ac:34:d2:9d:9c:20:74:7a:50:7b:f4:82:28:1a:e8: 3a:0a:4d:ed:e1:63:a1:74:76:d9:cb:f4:1c:fc:a3: 50:8f:99:0a:fa:c3:0b:f7:e7:80:f6:a0:2e:cc:6b: db:c5:6f:54:38:8b:49:74:17:e4:b3:13:92:82:6b: da:03:bf:75:f8:d4:d3:ef:67:a8:77:b1:d7:87:0f: cf:9c:bc:e5:71:e6:ad:0c:2a:94:6c:c6:16:d7:56: 22:30:49:a1:a4:ae:2a:84:d9:60:73:be:18:dd:a7: 97:da:0b:3a:f0:64:5a:30:fb:32:f0:75:2a:ab:aa: 53:a9:16:ba:d6:2e:64:b2:a8:7d:07:4b:e2:de:86: f4:75:f6:eb:f2:e0:aa:49:a1:63:68:48:91:91:98: 83:fc:4b:38:25:09:57:66:c1:a0:2d:07:35:90:77: 20:ee:7c:a7:bf:c4:9d:af:81:f0:9a:7f:fd:d5:96: 65:f7:77:ee:21:7a:5a:23:89:cf:50:70:1f:e4:50: aa:72:b2:ee:12:5e:a5:6e:f3:29:cf:3d:27:f7:75: b7:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:54:C5:71:AF:23:DE:3C:83:D6:44:1B:AD:0C:06:89:0C:DA:8B:A5 X509v3 Authority Key Identifier: keyid:70:84:7F:82:21:89:7D:6E:95:2E:86:EA:2C:33:9A:BA:AC:C1:31:F5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cIR_giGJfW6VLobqLDOauqzBMfU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/706c03-7d35-4913-8a18-6e8784a7ad09/1/cIR_giGJfW6VLobqLDOauqzBMfU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/706c03-7d35-4913-8a18-6e8784a7ad09/1/cIR_giGJfW6VLobqLDOauqzBMfU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 86:fd:30:d6:37:19:aa:01:09:6c:d6:22:88:68:6b:a0:53:68: 50:80:49:86:e8:a6:5c:a3:91:3c:3e:52:8b:c4:1b:79:19:88: 5f:69:55:84:ff:28:8d:69:88:b5:e8:36:99:28:35:90:3a:87: 63:23:76:cd:58:98:2e:85:f0:be:f9:59:4e:e9:ff:f4:52:0e: 12:9c:13:4d:ac:dc:6a:0d:d3:2b:b1:0d:10:5f:6b:58:7f:d7: d2:6f:4f:b8:56:17:95:d2:aa:7a:49:4b:3d:9b:b2:f5:20:c5: 09:86:07:6a:34:f9:eb:7e:c1:48:88:ea:57:e5:50:8f:5c:17: 15:6a:7f:59:20:5d:ae:e3:b7:cd:66:99:62:cf:67:0e:be:87: 71:e3:83:4f:73:b7:ab:4e:13:e9:0c:5b:2d:40:6e:0e:e9:f3: 74:be:59:95:50:b7:c4:42:02:6c:12:f2:62:12:af:a2:ea:1d: 2b:f1:94:6a:36:86:ae:a4:12:e1:f9:fb:aa:58:ef:6b:22:5b: ab:0c:d7:18:a7:5f:85:34:a4:1f:73:1e:f2:9a:08:e4:ac:3c: 1d:85:16:c4:ff:d7:ee:89:ce:aa:dc:15:4c:0b:18:e9:30:58: 9d:6d:11:aa:6a:cd:42:98:84:e7:e2:3d:69:8b:bc:bc:2c:69: c8:0e:49:51 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsQFI5yophDZAtG6Yq+4TFWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcwODQ3ZjgyMjE4OTdkNmU5NTJlODZlYTJjMzM5YWJhYWNj MTMxZjUwHhcNMjUxMjEyMDEwMjIxWhcNMjUxMjEzMDEwMjIxWjAzMTEwLwYDVQQD EyhmZTU0YzU3MWFmMjNkZTNjODNkNjQ0MWJhZDBjMDY4OTBjZGE4YmE1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3vRD4i12gUCWfzJVL6BDqNdgRvqS xH5+GNYcI7u4krOXD7j7XJuwpA3fW6KsNNKdnCB0elB79IIoGug6Ck3t4WOhdHbZ y/Qc/KNQj5kK+sML9+eA9qAuzGvbxW9UOItJdBfksxOSgmvaA791+NTT72eod7HX hw/PnLzlceatDCqUbMYW11YiMEmhpK4qhNlgc74Y3aeX2gs68GRaMPsy8HUqq6pT qRa61i5ksqh9B0vi3ob0dfbr8uCqSaFjaEiRkZiD/Es4JQlXZsGgLQc1kHcg7nyn v8Sdr4Hwmn/91ZZl93fuIXpaI4nPUHAf5FCqcrLuEl6lbvMpzz0n93W3aQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFP5UxXGvI948g9ZEG60MBokM2oulMB8GA1UdIwQY MBaAFHCEf4IhiX1ulS6G6iwzmrqswTH1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY0lSX2dpR0pmVzZWTG9icUxET2F1cXpCTWZVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMy83MDZjMDMtN2QzNS00OTEzLThhMTgt NmU4Nzg0YTdhZDA5LzEvY0lSX2dpR0pmVzZWTG9icUxET2F1cXpCTWZVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMy83MDZjMDMtN2QzNS00OTEzLThhMTgtNmU4Nzg0YTdhZDA5 LzEvY0lSX2dpR0pmVzZWTG9icUxET2F1cXpCTWZVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhv0w1jcZ qgEJbNYiiGhroFNoUIBJhuimXKORPD5Si8QbeRmIX2lVhP8ojWmIteg2mSg1kDqH YyN2zViYLoXwvvlZTun/9FIOEpwTTazcag3TK7ENEF9rWH/X0m9PuFYXldKqeklL PZuy9SDFCYYHajT5637BSIjqV+VQj1wXFWp/WSBdruO3zWaZYs9nDr6HceODT3O3 q04T6QxbLUBuDunzdL5ZlVC3xEICbBLyYhKvouodK/GUajaGrqQS4fn7qljvayJb qwzXGKdfhTSkH3Me8poI5Kw8HYUWxP/X7onOqtwVTAsY6TBYnW0RqmrNQpiE5+I9 aYu8vCxpyA5JUQ== -----END CERTIFICATE-----Generated at Fri Dec 12 08:00:40 2025 by rpki-client