This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/b46f93-b86f-462c-8d44-8b5ef68b41bd/1/ixWBJ-mH_gNxG3qX1Mqd-gAGUow.mft File: ixWBJ-mH_gNxG3qX1Mqd-gAGUow.mft (raw, json) Hash identifier: GcX3XA7JCevlGtg+8ATanOIhwe23hQ8GIM3ALmJPaNQ= Subject key identifier: 5C:93:84:FC:30:F1:5D:5A:EB:7A:84:DA:FC:67:B3:98:74:35:5C:BB Authority key identifier: 8B:15:81:27:E9:87:FE:03:71:1B:7A:97:D4:CA:9D:FA:00:06:52:8C Certificate issuer: /CN=8b158127e987fe03711b7a97d4ca9dfa0006528c Certificate serial: 019B2E5446193B6B344A791498ADE2C5CBE8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ixWBJ-mH_gNxG3qX1Mqd-gAGUow.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/b46f93-b86f-462c-8d44-8b5ef68b41bd/1/ixWBJ-mH_gNxG3qX1Mqd-gAGUow.mft Manifest number: 123F Signing time: Wed 17 Dec 2025 22:00:33 +0000 Manifest this update: Wed 17 Dec 2025 22:00:33 +0000 Manifest next update: Thu 18 Dec 2025 22:00:33 +0000 Files and hashes: 1: ixWBJ-mH_gNxG3qX1Mqd-gAGUow.crl (hash: D2UJpRS2xs2R2dVb61cUrs5Rs5qCz4zjWsUqTpfmj5Q=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/b46f93-b86f-462c-8d44-8b5ef68b41bd/1/ixWBJ-mH_gNxG3qX1Mqd-gAGUow.crl rsync://rpki.ripe.net/repository/DEFAULT/05/b46f93-b86f-462c-8d44-8b5ef68b41bd/1/ixWBJ-mH_gNxG3qX1Mqd-gAGUow.mft rsync://rpki.ripe.net/repository/DEFAULT/ixWBJ-mH_gNxG3qX1Mqd-gAGUow.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 19:00:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2e:54:46:19:3b:6b:34:4a:79:14:98:ad:e2:c5:cb:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8b158127e987fe03711b7a97d4ca9dfa0006528c Validity Not Before: Dec 17 22:00:33 2025 GMT Not After : Dec 18 22:00:33 2025 GMT Subject: CN=5c9384fc30f15d5aeb7a84dafc67b39874355cbb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:a0:6c:77:99:e9:89:ee:e0:95:1e:0a:5f:56: 57:56:98:5e:40:9c:0d:b0:86:18:5f:13:87:dc:ba: 2c:18:f5:6d:b5:00:07:aa:f4:8b:af:bf:9d:46:3a: d8:3c:9c:56:7d:b5:02:2e:55:a6:69:64:75:94:84: 4a:93:f3:de:99:ca:81:f9:9c:e1:31:a8:f9:bb:48: be:44:fa:7b:30:95:55:f2:f1:64:4f:62:4a:b3:09: 3c:91:76:06:55:a8:27:5e:56:62:d9:72:6f:59:f3: 59:a2:86:7e:79:27:c9:48:6e:c7:20:f4:79:5c:fc: 18:53:f4:ef:4d:f0:da:94:9a:c7:60:36:a3:4f:e6: 71:80:64:ba:81:07:70:8a:dc:8a:90:5c:7b:38:ab: 58:be:1f:55:fe:9d:ac:56:1d:84:87:4e:b9:04:b7: c5:0a:3a:6b:82:aa:08:ea:4c:c7:5f:b8:e7:fb:0a: 12:12:fb:38:7a:77:fe:4f:1a:0e:ca:3b:a9:cc:00: 72:0c:60:dc:65:94:87:be:84:1c:40:f9:50:7e:1a: 2f:93:16:69:aa:7d:4c:a5:dc:0e:82:4d:78:9d:61: bd:9b:f3:8f:ef:19:b8:09:24:bb:74:87:08:b9:d4: df:35:32:7a:ee:3b:77:9e:bc:b4:b4:27:a2:42:dc: d4:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:93:84:FC:30:F1:5D:5A:EB:7A:84:DA:FC:67:B3:98:74:35:5C:BB X509v3 Authority Key Identifier: keyid:8B:15:81:27:E9:87:FE:03:71:1B:7A:97:D4:CA:9D:FA:00:06:52:8C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ixWBJ-mH_gNxG3qX1Mqd-gAGUow.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/b46f93-b86f-462c-8d44-8b5ef68b41bd/1/ixWBJ-mH_gNxG3qX1Mqd-gAGUow.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/05/b46f93-b86f-462c-8d44-8b5ef68b41bd/1/ixWBJ-mH_gNxG3qX1Mqd-gAGUow.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a2:88:c0:0b:80:dc:6f:98:f4:de:e8:3e:79:21:e1:23:77:b5: c1:8a:8e:2c:c3:38:f9:77:43:8b:cb:80:6e:c7:81:4f:b3:43: b0:fe:08:e9:5f:86:b1:a3:e7:d9:2a:1c:61:51:53:09:a8:24: 1b:eb:01:3f:43:8c:e2:1e:56:5d:71:a0:1f:03:1c:e6:f7:e3: e9:76:36:7c:c8:6d:7f:98:55:ef:93:17:97:29:38:ac:fe:82: eb:45:94:93:0a:1a:b3:64:35:e9:35:a0:90:e9:ff:f0:6d:11: b6:8f:b8:11:b1:95:2e:61:77:0d:0b:24:e2:a5:fd:55:7a:6e: 77:d7:48:5e:18:25:e8:fb:fd:22:cb:5e:e3:1a:e8:a1:e8:9c: 43:b7:8c:15:11:9b:5e:60:23:9a:3f:03:b1:db:a2:21:f3:c6: 3f:da:7b:b3:79:57:8d:5d:bb:04:e6:69:60:80:37:2a:83:b5: 4b:69:f1:5e:1a:63:b8:6d:90:ab:fa:94:8c:36:25:10:d1:1e: 99:97:a4:12:f3:9b:81:a4:8a:b1:93:ff:8c:0c:ff:25:94:f3: 2c:54:80:e5:15:36:50:69:85:f9:8d:2e:29:01:16:a1:c8:11: 9d:3b:d3:8a:a2:af:1d:3b:e3:91:c5:79:44:f9:10:bf:dc:59: 03:f4:86:d6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsuVEYZO2s0SnkUmK3ixcvoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhiMTU4MTI3ZTk4N2ZlMDM3MTFiN2E5N2Q0Y2E5ZGZhMDAw NjUyOGMwHhcNMjUxMjE3MjIwMDMzWhcNMjUxMjE4MjIwMDMzWjAzMTEwLwYDVQQD Eyg1YzkzODRmYzMwZjE1ZDVhZWI3YTg0ZGFmYzY3YjM5ODc0MzU1Y2JiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmqBsd5npie7glR4KX1ZXVpheQJwN sIYYXxOH3LosGPVttQAHqvSLr7+dRjrYPJxWfbUCLlWmaWR1lIRKk/PemcqB+Zzh Maj5u0i+RPp7MJVV8vFkT2JKswk8kXYGVagnXlZi2XJvWfNZooZ+eSfJSG7HIPR5 XPwYU/TvTfDalJrHYDajT+ZxgGS6gQdwityKkFx7OKtYvh9V/p2sVh2Eh065BLfF CjprgqoI6kzHX7jn+woSEvs4enf+TxoOyjupzAByDGDcZZSHvoQcQPlQfhovkxZp qn1MpdwOgk14nWG9m/OP7xm4CSS7dIcIudTfNTJ67jt3nry0tCeiQtzU4QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFyThPww8V1a63qE2vxns5h0NVy7MB8GA1UdIwQY MBaAFIsVgSfph/4DcRt6l9TKnfoABlKMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaXhXQkotbUhfZ054RzNxWDFNcWQtZ0FHVW93LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNS9iNDZmOTMtYjg2Zi00NjJjLThkNDQt OGI1ZWY2OGI0MWJkLzEvaXhXQkotbUhfZ054RzNxWDFNcWQtZ0FHVW93Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNS9iNDZmOTMtYjg2Zi00NjJjLThkNDQtOGI1ZWY2OGI0MWJk LzEvaXhXQkotbUhfZ054RzNxWDFNcWQtZ0FHVW93LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoojAC4Dc b5j03ug+eSHhI3e1wYqOLMM4+XdDi8uAbseBT7NDsP4I6V+GsaPn2SocYVFTCagk G+sBP0OM4h5WXXGgHwMc5vfj6XY2fMhtf5hV75MXlyk4rP6C60WUkwoas2Q16TWg kOn/8G0Rto+4EbGVLmF3DQsk4qX9VXpud9dIXhgl6Pv9Iste4xrooeicQ7eMFRGb XmAjmj8DsduiIfPGP9p7s3lXjV27BOZpYIA3KoO1S2nxXhpjuG2Qq/qUjDYlENEe mZekEvObgaSKsZP/jAz/JZTzLFSA5RU2UGmF+Y0uKQEWocgRnTvTiqKvHTvjkcV5 RPkQv9xZA/SG1g== -----END CERTIFICATE-----Generated at Thu Dec 18 05:01:44 2025 by rpki-client