This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/866754-f0ef-4900-8dd0-6c0403c9a440/1/CIKLx914SFC4lu197ZSD218B4Fk.mft File: CIKLx914SFC4lu197ZSD218B4Fk.mft (raw, json) Hash identifier: VeXuo+vRzVCCcmZ5i6sisCQIKHd7Xm+m60Gm4xInGJ4= Subject key identifier: F0:79:1D:45:1E:C5:DA:1D:95:21:DE:4C:E1:8E:BD:C9:50:A5:46:E9 Authority key identifier: 08:82:8B:C7:DD:78:48:50:B8:96:ED:7D:ED:94:83:DB:5F:01:E0:59 Certificate issuer: /CN=08828bc7dd784850b896ed7ded9483db5f01e059 Certificate serial: 019AFD9F07250924BC26AA3C66EA09D2EF86 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CIKLx914SFC4lu197ZSD218B4Fk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/866754-f0ef-4900-8dd0-6c0403c9a440/1/CIKLx914SFC4lu197ZSD218B4Fk.mft Manifest number: 05B5 Signing time: Mon 08 Dec 2025 11:00:48 +0000 Manifest this update: Mon 08 Dec 2025 11:00:48 +0000 Manifest next update: Tue 09 Dec 2025 11:00:48 +0000 Files and hashes: 1: CIKLx914SFC4lu197ZSD218B4Fk.crl (hash: CvuhaenP2ObEASCZJTqyXWttlu1YXaR7/xExmkFTmxc=) 2: V0Wj0jhw0RxatZH_nx8jTrLFEcc.roa (hash: mmVGDQsdur6eI4Kol0nAjQzRZYdIuybWdILnc/qmeGM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/866754-f0ef-4900-8dd0-6c0403c9a440/1/CIKLx914SFC4lu197ZSD218B4Fk.crl rsync://rpki.ripe.net/repository/DEFAULT/fc/866754-f0ef-4900-8dd0-6c0403c9a440/1/CIKLx914SFC4lu197ZSD218B4Fk.mft rsync://rpki.ripe.net/repository/DEFAULT/CIKLx914SFC4lu197ZSD218B4Fk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 09 Dec 2025 11:00:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:fd:9f:07:25:09:24:bc:26:aa:3c:66:ea:09:d2:ef:86 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08828bc7dd784850b896ed7ded9483db5f01e059 Validity Not Before: Dec 8 11:00:48 2025 GMT Not After : Dec 9 11:00:48 2025 GMT Subject: CN=f0791d451ec5da1d9521de4ce18ebdc950a546e9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:3f:dc:8a:6b:07:e2:70:63:67:9e:d8:f6:10: de:89:8a:06:5c:1f:7d:83:af:8a:24:56:c5:91:56: 37:83:27:f2:81:a4:50:92:49:45:f9:52:76:36:9e: 91:c4:d2:4a:aa:24:95:8c:d6:db:a4:52:a8:b9:a7: 85:a1:8d:5d:3f:5d:3b:fe:2d:fc:c8:ca:7a:bc:5a: 89:38:ff:2c:92:c3:a5:c9:bf:29:99:98:68:b9:d5: f1:94:fd:c9:46:c3:dc:ac:b1:69:01:23:07:be:e2: 09:4b:0a:32:61:09:10:e2:73:74:65:a4:0e:c0:61: e6:94:41:b0:d9:e8:ca:cd:9b:a8:d0:73:7a:7a:a7: cf:80:0a:09:30:85:be:f8:45:9a:0f:2f:b3:af:89: 24:f2:31:52:fe:73:35:37:9f:b9:64:66:60:fd:c8: 3e:01:f7:77:f2:4a:06:42:15:f8:d5:91:87:46:57: 56:f9:64:be:1b:05:21:63:6b:5b:dc:3c:e4:87:3a: 29:d2:f9:7d:2b:aa:d0:2c:1c:63:0c:38:ae:66:a9: 13:c9:bd:fb:5e:08:fb:a6:6d:ca:b2:6d:01:8e:cb: d1:92:97:ed:07:27:47:00:62:9c:24:b2:9f:30:96: 5a:7f:a6:cf:9d:3f:ca:90:7d:54:57:32:4a:a3:d9: e5:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:79:1D:45:1E:C5:DA:1D:95:21:DE:4C:E1:8E:BD:C9:50:A5:46:E9 X509v3 Authority Key Identifier: keyid:08:82:8B:C7:DD:78:48:50:B8:96:ED:7D:ED:94:83:DB:5F:01:E0:59 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CIKLx914SFC4lu197ZSD218B4Fk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/866754-f0ef-4900-8dd0-6c0403c9a440/1/CIKLx914SFC4lu197ZSD218B4Fk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/866754-f0ef-4900-8dd0-6c0403c9a440/1/CIKLx914SFC4lu197ZSD218B4Fk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption af:58:b3:e5:82:c4:c6:46:93:d9:c2:d0:7d:b9:f4:90:72:7d: 27:21:a5:cc:2f:51:85:cf:b7:6e:1a:d1:3f:75:4e:b9:65:9c: e6:dc:d9:cb:48:f5:3c:68:ca:97:2e:08:d8:ed:a6:50:37:e3: 35:bd:58:2a:cd:01:de:f7:22:23:7c:fc:1d:ed:6a:e2:0b:76: 2d:6a:94:8c:52:f1:de:81:d8:bd:ce:cd:5d:de:8e:4f:f1:fe: a1:0b:a3:ac:4e:bf:5c:82:16:3b:47:1e:39:9a:7e:0b:b8:22: 85:86:f4:95:78:41:a6:88:de:59:b7:47:2f:c4:f7:cf:66:1d: 94:3c:f2:18:ec:f0:3a:f1:01:7f:f7:94:93:10:05:a3:ee:a2: 39:7a:d6:aa:39:f0:20:5b:f5:88:41:6d:87:1c:83:6e:4a:93: 73:8e:5e:82:56:c6:89:f8:6f:85:21:72:50:4c:67:23:07:79: 01:6f:5c:a2:bf:5f:7e:fc:7f:3b:d0:e3:6f:6a:49:74:ca:50: cd:91:cd:48:62:4a:96:d7:3f:fd:db:93:98:f8:6d:1e:3b:a0: d2:b7:7d:cb:b0:53:ee:e8:c2:1f:44:55:82:80:6c:38:ff:8a: 8d:c5:83:a4:b2:0e:0f:18:00:92:73:92:95:49:d8:73:d8:61: 0d:fa:07:67 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr9nwclCSS8Jqo8ZuoJ0u+GMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA4ODI4YmM3ZGQ3ODQ4NTBiODk2ZWQ3ZGVkOTQ4M2RiNWYw MWUwNTkwHhcNMjUxMjA4MTEwMDQ4WhcNMjUxMjA5MTEwMDQ4WjAzMTEwLwYDVQQD EyhmMDc5MWQ0NTFlYzVkYTFkOTUyMWRlNGNlMThlYmRjOTUwYTU0NmU5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApz/cimsH4nBjZ57Y9hDeiYoGXB99 g6+KJFbFkVY3gyfygaRQkklF+VJ2Np6RxNJKqiSVjNbbpFKouaeFoY1dP107/i38 yMp6vFqJOP8sksOlyb8pmZhoudXxlP3JRsPcrLFpASMHvuIJSwoyYQkQ4nN0ZaQO wGHmlEGw2ejKzZuo0HN6eqfPgAoJMIW++EWaDy+zr4kk8jFS/nM1N5+5ZGZg/cg+ Afd38koGQhX41ZGHRldW+WS+GwUhY2tb3Dzkhzop0vl9K6rQLBxjDDiuZqkTyb37 Xgj7pm3Ksm0BjsvRkpftBydHAGKcJLKfMJZaf6bPnT/KkH1UVzJKo9nlBQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPB5HUUexdodlSHeTOGOvclQpUbpMB8GA1UdIwQY MBaAFAiCi8fdeEhQuJbtfe2Ug9tfAeBZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ0lLTHg5MTRTRkM0bHUxOTdaU0QyMThCNEZrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYy84NjY3NTQtZjBlZi00OTAwLThkZDAt NmMwNDAzYzlhNDQwLzEvQ0lLTHg5MTRTRkM0bHUxOTdaU0QyMThCNEZrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYy84NjY3NTQtZjBlZi00OTAwLThkZDAtNmMwNDAzYzlhNDQw LzEvQ0lLTHg5MTRTRkM0bHUxOTdaU0QyMThCNEZrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAr1iz5YLE xkaT2cLQfbn0kHJ9JyGlzC9Rhc+3bhrRP3VOuWWc5tzZy0j1PGjKly4I2O2mUDfj Nb1YKs0B3vciI3z8He1q4gt2LWqUjFLx3oHYvc7NXd6OT/H+oQujrE6/XIIWO0ce OZp+C7gihYb0lXhBpojeWbdHL8T3z2YdlDzyGOzwOvEBf/eUkxAFo+6iOXrWqjnw IFv1iEFthxyDbkqTc45eglbGifhvhSFyUExnIwd5AW9cor9ffvx/O9Djb2pJdMpQ zZHNSGJKltc//duTmPhtHjug0rd9y7BT7ujCH0RVgoBsOP+KjcWDpLIODxgAknOS lUnYc9hhDfoHZw== -----END CERTIFICATE-----Generated at Mon Dec 8 17:24:45 2025 by rpki-client