This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/ce981a-a05b-4527-80af-693454237ee9/1/IDHrupQ_rRxUh1QOAQXhnCMs95w.mft File: IDHrupQ_rRxUh1QOAQXhnCMs95w.mft (raw, json) Hash identifier: kWNWyeDIPkQMm/eKHUlqcUomx2QmjDlxKyR2XsnT6pI= Subject key identifier: E6:64:00:22:CD:DE:EB:61:96:2D:01:B3:CA:36:7D:2B:9F:F4:D0:B8 Authority key identifier: 20:31:EB:BA:94:3F:AD:1C:54:87:54:0E:01:05:E1:9C:23:2C:F7:9C Certificate issuer: /CN=2031ebba943fad1c5487540e0105e19c232cf79c Certificate serial: 019B432567A138378F3455A1BB6FD735C8F5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IDHrupQ_rRxUh1QOAQXhnCMs95w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/ce981a-a05b-4527-80af-693454237ee9/1/IDHrupQ_rRxUh1QOAQXhnCMs95w.mft Manifest number: 0949 Signing time: Sun 21 Dec 2025 23:01:23 +0000 Manifest this update: Sun 21 Dec 2025 23:01:23 +0000 Manifest next update: Mon 22 Dec 2025 23:01:23 +0000 Files and hashes: 1: IDHrupQ_rRxUh1QOAQXhnCMs95w.crl (hash: lvUl9qvxZl93dlm8Vag4iTTsuCjNgU4Rku4Vns8DCuU=) 2: tKV7ZxqGnJTtEa2_ye8Y1d8JNh0.roa (hash: 8oiml4GgGUwThCKHUcnZfuIG0l8a7ZiiCuW4RZzZ3cA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/ce981a-a05b-4527-80af-693454237ee9/1/IDHrupQ_rRxUh1QOAQXhnCMs95w.crl rsync://rpki.ripe.net/repository/DEFAULT/24/ce981a-a05b-4527-80af-693454237ee9/1/IDHrupQ_rRxUh1QOAQXhnCMs95w.mft rsync://rpki.ripe.net/repository/DEFAULT/IDHrupQ_rRxUh1QOAQXhnCMs95w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:43:25:67:a1:38:37:8f:34:55:a1:bb:6f:d7:35:c8:f5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2031ebba943fad1c5487540e0105e19c232cf79c Validity Not Before: Dec 21 23:01:23 2025 GMT Not After : Dec 22 23:01:23 2025 GMT Subject: CN=e6640022cddeeb61962d01b3ca367d2b9ff4d0b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:ff:02:ce:1d:67:0f:ed:04:d3:b2:94:a6:de: a1:5b:83:29:89:20:01:60:8e:8d:d7:b4:23:e7:c0: fe:76:6d:f1:b4:e1:e9:42:63:bf:ca:b1:be:08:12: 97:77:80:1d:12:93:ac:ce:38:b6:bc:8a:c5:29:91: ce:49:86:08:5d:ea:44:20:21:4a:a8:94:88:64:0b: 4e:9e:2f:10:40:f7:e2:f1:d8:38:3f:08:69:ff:36: 93:6c:5d:c2:8d:a7:3c:0a:ca:ea:4a:d6:96:37:c9: 67:29:43:82:4c:00:3e:95:0e:1c:8c:0c:86:3e:34: b5:b0:a8:f6:56:85:e3:07:fe:6d:7f:86:4e:36:39: 05:47:3e:24:56:c5:0e:17:55:a4:5f:0e:d0:74:80: 9b:39:8d:d5:f4:4a:0c:3e:3e:ca:c5:0a:ff:41:3f: 48:78:b7:39:9c:08:d6:97:d3:fb:80:bf:6f:b3:f0: 86:96:06:46:84:a7:5d:fc:91:a7:05:dc:83:a2:a9: 95:42:83:6a:be:eb:29:6b:e1:0c:42:c7:a0:fb:18: b3:f7:26:ad:a4:a0:d2:48:c2:15:e7:45:bc:b3:d7: 74:17:33:18:8f:e5:22:e6:3f:d0:f8:04:0d:28:d9: d0:3b:73:d0:85:66:0d:33:d4:b5:94:a4:4d:e1:5b: 77:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:64:00:22:CD:DE:EB:61:96:2D:01:B3:CA:36:7D:2B:9F:F4:D0:B8 X509v3 Authority Key Identifier: keyid:20:31:EB:BA:94:3F:AD:1C:54:87:54:0E:01:05:E1:9C:23:2C:F7:9C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IDHrupQ_rRxUh1QOAQXhnCMs95w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/ce981a-a05b-4527-80af-693454237ee9/1/IDHrupQ_rRxUh1QOAQXhnCMs95w.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/24/ce981a-a05b-4527-80af-693454237ee9/1/IDHrupQ_rRxUh1QOAQXhnCMs95w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a1:33:16:f2:1c:b5:cf:08:bb:5f:f2:c6:59:df:90:7e:7d:6d: f7:af:0d:10:62:2c:91:e0:53:2f:f8:b8:dd:be:e2:cf:7d:56: 1d:65:f2:6e:65:0d:13:d9:d2:25:2b:29:40:a7:55:7d:c8:85: c7:87:4e:0a:e6:fe:e5:a3:86:89:9e:5a:e2:28:b4:48:7b:4e: 13:54:ae:f5:ef:ba:b5:f1:21:78:29:b7:8e:b6:76:47:96:fc: 61:51:dc:87:fc:6e:5e:66:d2:f0:10:a5:70:53:f7:05:f9:77: a4:a1:4c:d6:24:9c:be:7a:40:15:e1:52:0c:24:55:8e:ba:e2: a1:8e:f5:cb:ad:22:6c:af:c6:f7:73:bc:09:20:35:94:3e:bd: 05:c6:50:d1:19:39:2d:c5:96:93:24:9b:a8:51:86:55:f0:5c: 1e:6f:5e:30:c2:11:2e:be:d7:1d:29:aa:c6:38:70:7d:3d:d5: 30:e5:b2:51:99:dc:fd:7e:45:88:f3:5b:5a:e8:c8:bd:2c:e4: 61:21:e0:8a:d1:30:02:75:1d:06:7a:65:62:d7:89:07:76:9e: 3e:4d:29:e7:85:18:0c:8a:f8:47:84:fe:cc:69:f1:44:c7:34: 51:61:98:d2:85:ea:e1:8b:ac:a5:1c:b4:3e:01:10:c9:b9:7a: 66:c6:34:be -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtDJWehODePNFWhu2/XNcj1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIwMzFlYmJhOTQzZmFkMWM1NDg3NTQwZTAxMDVlMTljMjMy Y2Y3OWMwHhcNMjUxMjIxMjMwMTIzWhcNMjUxMjIyMjMwMTIzWjAzMTEwLwYDVQQD EyhlNjY0MDAyMmNkZGVlYjYxOTYyZDAxYjNjYTM2N2QyYjlmZjRkMGI4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9P8Czh1nD+0E07KUpt6hW4MpiSAB YI6N17Qj58D+dm3xtOHpQmO/yrG+CBKXd4AdEpOszji2vIrFKZHOSYYIXepEICFK qJSIZAtOni8QQPfi8dg4Pwhp/zaTbF3Cjac8CsrqStaWN8lnKUOCTAA+lQ4cjAyG PjS1sKj2VoXjB/5tf4ZONjkFRz4kVsUOF1WkXw7QdICbOY3V9EoMPj7KxQr/QT9I eLc5nAjWl9P7gL9vs/CGlgZGhKdd/JGnBdyDoqmVQoNqvuspa+EMQseg+xiz9yat pKDSSMIV50W8s9d0FzMYj+Ui5j/Q+AQNKNnQO3PQhWYNM9S1lKRN4Vt35QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOZkACLN3uthli0Bs8o2fSuf9NC4MB8GA1UdIwQY MBaAFCAx67qUP60cVIdUDgEF4ZwjLPecMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSURIcnVwUV9yUnhVaDFRT0FRWGhuQ01zOTV3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNC9jZTk4MWEtYTA1Yi00NTI3LTgwYWYt NjkzNDU0MjM3ZWU5LzEvSURIcnVwUV9yUnhVaDFRT0FRWGhuQ01zOTV3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNC9jZTk4MWEtYTA1Yi00NTI3LTgwYWYtNjkzNDU0MjM3ZWU5 LzEvSURIcnVwUV9yUnhVaDFRT0FRWGhuQ01zOTV3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoTMW8hy1 zwi7X/LGWd+Qfn1t968NEGIskeBTL/i43b7iz31WHWXybmUNE9nSJSspQKdVfciF x4dOCub+5aOGiZ5a4ii0SHtOE1Su9e+6tfEheCm3jrZ2R5b8YVHch/xuXmbS8BCl cFP3Bfl3pKFM1iScvnpAFeFSDCRVjrrioY71y60ibK/G93O8CSA1lD69BcZQ0Rk5 LcWWkySbqFGGVfBcHm9eMMIRLr7XHSmqxjhwfT3VMOWyUZnc/X5FiPNbWujIvSzk YSHgitEwAnUdBnplYteJB3aePk0p54UYDIr4R4T+zGnxRMc0UWGY0oXq4YuspRy0 PgEQybl6ZsY0vg== -----END CERTIFICATE-----Generated at Mon Dec 22 02:09:31 2025 by rpki-client