This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/dd32a3-dfe9-4160-85df-a1b2703b0a9e/1/inwNQWIenTgIi43T5t4VVBvuHIw.mft File: inwNQWIenTgIi43T5t4VVBvuHIw.mft (raw, json) Hash identifier: f0IYY8RvQlArMy84veaUX3O8MKA3XFyYF0zcpuVziFo= Subject key identifier: AD:4F:77:5A:30:A0:1A:0C:E3:8F:85:A6:9A:E4:4C:E3:02:42:3F:77 Authority key identifier: 8A:7C:0D:41:62:1E:9D:38:08:8B:8D:D3:E6:DE:15:54:1B:EE:1C:8C Certificate issuer: /CN=8a7c0d41621e9d38088b8dd3e6de15541bee1c8c Certificate serial: 019AF5E583330A036723BAC0EFCC2DFBDD4E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/inwNQWIenTgIi43T5t4VVBvuHIw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/dd32a3-dfe9-4160-85df-a1b2703b0a9e/1/inwNQWIenTgIi43T5t4VVBvuHIw.mft Manifest number: 1761 Signing time: Sat 06 Dec 2025 23:00:50 +0000 Manifest this update: Sat 06 Dec 2025 23:00:50 +0000 Manifest next update: Sun 07 Dec 2025 23:00:50 +0000 Files and hashes: 1: inwNQWIenTgIi43T5t4VVBvuHIw.crl (hash: g3Mg2Uy+KXfWzDQA0gEza1jUh1rRd+4E4zt1ns8irLc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/dd32a3-dfe9-4160-85df-a1b2703b0a9e/1/inwNQWIenTgIi43T5t4VVBvuHIw.crl rsync://rpki.ripe.net/repository/DEFAULT/22/dd32a3-dfe9-4160-85df-a1b2703b0a9e/1/inwNQWIenTgIi43T5t4VVBvuHIw.mft rsync://rpki.ripe.net/repository/DEFAULT/inwNQWIenTgIi43T5t4VVBvuHIw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 23:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:e5:83:33:0a:03:67:23:ba:c0:ef:cc:2d:fb:dd:4e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8a7c0d41621e9d38088b8dd3e6de15541bee1c8c Validity Not Before: Dec 6 23:00:50 2025 GMT Not After : Dec 7 23:00:50 2025 GMT Subject: CN=ad4f775a30a01a0ce38f85a69ae44ce302423f77 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:18:a2:57:1b:88:68:83:57:96:2f:ff:7c:f4: 02:34:f2:34:a1:a6:73:2e:bb:30:44:0d:17:42:bd: da:fb:a0:99:67:b9:1a:7f:3d:a8:53:ce:97:6b:5d: 60:4d:ff:85:87:b2:70:26:b9:f4:9a:64:fd:dc:00: ee:a2:ba:c6:d1:a4:35:70:49:16:1c:a8:20:f9:2e: 06:df:b8:ad:dd:3e:69:a0:63:f8:58:40:61:bf:67: b3:fd:31:11:97:f4:cc:ff:62:4c:1e:46:40:f2:b3: 6a:20:bf:20:78:ec:2e:35:79:b9:a2:b3:ed:11:10: db:ac:19:2d:f3:b5:30:0a:44:5b:19:60:e6:66:14: 59:79:99:06:b2:d4:6b:f5:10:e4:6e:95:92:da:97: b3:9f:fb:6e:76:6c:47:ec:58:74:e4:60:83:3b:81: b6:ff:56:d7:e9:23:66:a7:a2:83:60:27:11:2f:0f: 03:d9:e2:20:a9:43:68:6e:f4:d9:9a:41:ae:7d:14: a6:00:61:5c:65:e8:af:5f:6a:78:b0:83:8c:7c:4c: 8d:14:9b:20:23:82:49:8a:66:31:71:d6:65:9e:6d: b5:1e:1b:23:65:ba:6a:87:ef:4d:db:11:f8:32:32: 9d:1e:28:30:61:b9:3b:4d:fb:88:da:95:90:9a:8b: 6e:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:4F:77:5A:30:A0:1A:0C:E3:8F:85:A6:9A:E4:4C:E3:02:42:3F:77 X509v3 Authority Key Identifier: keyid:8A:7C:0D:41:62:1E:9D:38:08:8B:8D:D3:E6:DE:15:54:1B:EE:1C:8C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/inwNQWIenTgIi43T5t4VVBvuHIw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/dd32a3-dfe9-4160-85df-a1b2703b0a9e/1/inwNQWIenTgIi43T5t4VVBvuHIw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/22/dd32a3-dfe9-4160-85df-a1b2703b0a9e/1/inwNQWIenTgIi43T5t4VVBvuHIw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 07:5d:37:3a:35:a6:95:3b:e1:11:a9:4e:16:73:7f:55:0e:71: a8:40:0c:e2:c8:14:4e:e8:27:bf:a9:5b:fb:3d:c2:47:56:98: c5:94:46:eb:53:ad:8d:1c:4e:5d:e9:07:ad:bb:be:0d:e1:89: 0b:bf:44:62:0d:6b:fa:db:82:ee:bb:07:6e:bf:45:e6:96:65: 44:95:ae:f2:ed:c3:8a:10:f1:68:af:75:c1:b2:6d:d7:45:4a: 2f:e8:4b:2c:04:cf:cf:c1:e9:8e:5c:9f:5b:90:13:91:9f:27: ab:1d:68:a1:f1:2c:17:68:2a:20:64:9c:07:0c:e3:43:ac:d8: 64:bf:a7:2a:e9:ef:26:33:65:5e:0b:f1:9a:ca:f2:05:9f:95: cf:78:80:54:27:06:91:fa:b9:5a:46:27:b0:3a:e4:9d:e2:fc: d0:21:90:ea:a9:e9:da:04:a6:d6:34:ab:11:10:9c:d6:a3:f4: 31:52:1b:ca:72:c4:22:33:58:17:1f:67:aa:5a:65:69:c2:ff: eb:a2:59:e0:16:f2:7d:4e:95:aa:c7:33:28:c5:68:51:c9:09: 86:38:e5:47:59:50:a4:47:8c:97:ef:4d:7d:55:8e:7b:16:6b: 82:f7:c6:27:d3:a6:f5:10:89:4a:fd:72:19:e9:84:f0:69:9b: b1:7d:9d:bd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr15YMzCgNnI7rA78wt+91OMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhhN2MwZDQxNjIxZTlkMzgwODhiOGRkM2U2ZGUxNTU0MWJl ZTFjOGMwHhcNMjUxMjA2MjMwMDUwWhcNMjUxMjA3MjMwMDUwWjAzMTEwLwYDVQQD EyhhZDRmNzc1YTMwYTAxYTBjZTM4Zjg1YTY5YWU0NGNlMzAyNDIzZjc3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3xiiVxuIaINXli//fPQCNPI0oaZz LrswRA0XQr3a+6CZZ7kafz2oU86Xa11gTf+Fh7JwJrn0mmT93ADuorrG0aQ1cEkW HKgg+S4G37it3T5poGP4WEBhv2ez/TERl/TM/2JMHkZA8rNqIL8geOwuNXm5orPt ERDbrBkt87UwCkRbGWDmZhRZeZkGstRr9RDkbpWS2pezn/tudmxH7Fh05GCDO4G2 /1bX6SNmp6KDYCcRLw8D2eIgqUNobvTZmkGufRSmAGFcZeivX2p4sIOMfEyNFJsg I4JJimYxcdZlnm21HhsjZbpqh+9N2xH4MjKdHigwYbk7TfuI2pWQmotuYQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFK1Pd1owoBoM44+FpprkTOMCQj93MB8GA1UdIwQY MBaAFIp8DUFiHp04CIuN0+beFVQb7hyMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaW53TlFXSWVuVGdJaTQzVDV0NFZWQnZ1SEl3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMi9kZDMyYTMtZGZlOS00MTYwLTg1ZGYt YTFiMjcwM2IwYTllLzEvaW53TlFXSWVuVGdJaTQzVDV0NFZWQnZ1SEl3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMi9kZDMyYTMtZGZlOS00MTYwLTg1ZGYtYTFiMjcwM2IwYTll LzEvaW53TlFXSWVuVGdJaTQzVDV0NFZWQnZ1SEl3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAB103OjWm lTvhEalOFnN/VQ5xqEAM4sgUTugnv6lb+z3CR1aYxZRG61OtjRxOXekHrbu+DeGJ C79EYg1r+tuC7rsHbr9F5pZlRJWu8u3DihDxaK91wbJt10VKL+hLLATPz8Hpjlyf W5ATkZ8nqx1oofEsF2gqIGScBwzjQ6zYZL+nKunvJjNlXgvxmsryBZ+Vz3iAVCcG kfq5WkYnsDrkneL80CGQ6qnp2gSm1jSrERCc1qP0MVIbynLEIjNYFx9nqlplacL/ 66JZ4BbyfU6VqsczKMVoUckJhjjlR1lQpEeMl+9NfVWOexZrgvfGJ9Om9RCJSv1y GemE8GmbsX2dvQ== -----END CERTIFICATE-----Generated at Sun Dec 7 08:12:48 2025 by rpki-client