This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/28d7cf-22f8-4363-ad02-a0ac49ad343f/1/IBjvCLVd2yDIgWpiGkWc25J7MgE.mft File: IBjvCLVd2yDIgWpiGkWc25J7MgE.mft (raw, json) Hash identifier: MVniNWj/V4M72IDZU3Boj7xZcX1NnZ01khocEVdvdLw= Subject key identifier: 28:30:FF:65:DC:5B:C2:B5:18:C8:C4:6B:24:CE:32:C2:FF:02:0B:BC Authority key identifier: 20:18:EF:08:B5:5D:DB:20:C8:81:6A:62:1A:45:9C:DB:92:7B:32:01 Certificate issuer: /CN=2018ef08b55ddb20c8816a621a459cdb927b3201 Certificate serial: 019AF12D3A85FBF5083DC6181F44D31310F4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IBjvCLVd2yDIgWpiGkWc25J7MgE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/28d7cf-22f8-4363-ad02-a0ac49ad343f/1/IBjvCLVd2yDIgWpiGkWc25J7MgE.mft Manifest number: 16F4 Signing time: Sat 06 Dec 2025 01:01:04 +0000 Manifest this update: Sat 06 Dec 2025 01:01:04 +0000 Manifest next update: Sun 07 Dec 2025 01:01:04 +0000 Files and hashes: 1: IBjvCLVd2yDIgWpiGkWc25J7MgE.crl (hash: tqJiUwS41CIHycz/e55BUPmySmcwKO0X2KjFIjhaxb0=) 2: sg6Ke3Csa6eOc_sincTW9jDFk9g.roa (hash: JJ9uMfjWarSgHm6HNb7BDGcOt4jlyu+d939+XIEHnuI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/28d7cf-22f8-4363-ad02-a0ac49ad343f/1/IBjvCLVd2yDIgWpiGkWc25J7MgE.crl rsync://rpki.ripe.net/repository/DEFAULT/3a/28d7cf-22f8-4363-ad02-a0ac49ad343f/1/IBjvCLVd2yDIgWpiGkWc25J7MgE.mft rsync://rpki.ripe.net/repository/DEFAULT/IBjvCLVd2yDIgWpiGkWc25J7MgE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:01:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2d:3a:85:fb:f5:08:3d:c6:18:1f:44:d3:13:10:f4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2018ef08b55ddb20c8816a621a459cdb927b3201 Validity Not Before: Dec 6 01:01:04 2025 GMT Not After : Dec 7 01:01:04 2025 GMT Subject: CN=2830ff65dc5bc2b518c8c46b24ce32c2ff020bbc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:15:f2:b7:5f:54:44:0d:13:e7:05:5a:1d:41: 0b:a1:5e:cf:e0:5e:ef:32:d0:74:b5:51:0b:f7:a4: 22:1f:39:f0:66:fa:97:6d:46:b1:d6:79:31:c3:8d: 25:be:d4:b0:85:5e:0b:ef:11:96:bc:97:bf:92:dd: 90:61:d3:f4:09:8c:44:db:81:16:0b:3e:74:1d:31: 71:86:88:f9:4f:b8:63:68:f2:f3:44:81:d7:e7:df: 27:12:f6:f0:df:23:ef:13:c4:e5:32:6c:f4:8b:99: 2e:f7:48:7d:d1:98:2c:40:ca:68:66:4a:33:19:d1: 09:0d:84:3b:9d:32:ff:f4:4f:5e:f7:45:dc:87:6d: a0:09:22:fd:81:92:7b:9f:71:cd:d0:76:c6:2f:8c: 8c:2d:47:d8:ec:c3:b6:84:95:5b:b3:1b:85:19:b9: 31:11:f1:f1:8b:73:1f:ad:74:c6:eb:b3:22:6a:94: 3f:20:fd:0e:21:ca:de:94:0c:8e:b5:00:ed:43:71: b4:bc:6c:30:25:26:b4:f6:23:da:67:43:a3:4f:fa: 21:6f:0d:69:5a:c8:49:8c:26:62:54:6e:c0:50:8b: 06:86:16:7b:be:e0:d1:1c:e3:dd:5f:94:6e:70:1a: a3:dc:7e:24:79:58:89:5d:ef:2a:4d:69:96:5c:33: ac:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:30:FF:65:DC:5B:C2:B5:18:C8:C4:6B:24:CE:32:C2:FF:02:0B:BC X509v3 Authority Key Identifier: keyid:20:18:EF:08:B5:5D:DB:20:C8:81:6A:62:1A:45:9C:DB:92:7B:32:01 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IBjvCLVd2yDIgWpiGkWc25J7MgE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/28d7cf-22f8-4363-ad02-a0ac49ad343f/1/IBjvCLVd2yDIgWpiGkWc25J7MgE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/28d7cf-22f8-4363-ad02-a0ac49ad343f/1/IBjvCLVd2yDIgWpiGkWc25J7MgE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 38:3f:d0:b7:7f:88:63:16:e2:4b:69:cf:43:84:5e:0b:9f:f7: c6:d1:b7:ac:d7:db:b0:87:df:0e:3c:81:42:75:de:ce:e2:1f: e6:b4:cb:08:47:70:c2:ee:12:97:8c:41:9c:b6:76:2b:09:cd: 1f:ee:62:3b:98:ec:75:17:94:63:18:53:5b:69:66:8d:86:6d: af:44:b5:a4:ab:b3:94:28:d0:78:ed:4b:9b:d5:ad:a4:7b:9e: 32:d0:38:cf:35:a8:b1:1b:61:fd:c5:4b:de:57:84:84:a1:76: d3:3a:db:28:03:ae:da:17:bb:ab:74:bc:1e:68:34:e6:1a:19: 46:12:f0:88:1f:84:d3:82:f0:e1:10:8b:ba:96:c9:86:e3:d2: b6:3b:8c:ab:d9:75:3e:8e:3c:60:24:cf:e6:a0:e7:c1:20:99: 76:fc:94:4b:13:1e:b2:22:91:a0:23:52:a0:1a:61:26:3a:55: b6:3a:21:75:7d:ee:29:ac:32:62:31:4f:b1:6e:92:6a:d5:c0: 93:22:df:94:04:9e:7a:e5:3a:13:62:ad:f3:e8:1c:5e:02:03: cb:b7:cc:0e:5b:04:1d:b0:d4:3f:1e:a3:2a:68:cf:62:76:d6: 07:12:7e:e1:46:3c:43:10:04:40:5b:03:45:1c:b1:cc:ee:14: a4:51:b2:36 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLTqF+/UIPcYYH0TTExD0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIwMThlZjA4YjU1ZGRiMjBjODgxNmE2MjFhNDU5Y2RiOTI3 YjMyMDEwHhcNMjUxMjA2MDEwMTA0WhcNMjUxMjA3MDEwMTA0WjAzMTEwLwYDVQQD EygyODMwZmY2NWRjNWJjMmI1MThjOGM0NmIyNGNlMzJjMmZmMDIwYmJjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmRXyt19URA0T5wVaHUELoV7P4F7v MtB0tVEL96QiHznwZvqXbUax1nkxw40lvtSwhV4L7xGWvJe/kt2QYdP0CYxE24EW Cz50HTFxhoj5T7hjaPLzRIHX598nEvbw3yPvE8TlMmz0i5ku90h90ZgsQMpoZkoz GdEJDYQ7nTL/9E9e90Xch22gCSL9gZJ7n3HN0HbGL4yMLUfY7MO2hJVbsxuFGbkx EfHxi3MfrXTG67MiapQ/IP0OIcrelAyOtQDtQ3G0vGwwJSa09iPaZ0OjT/ohbw1p WshJjCZiVG7AUIsGhhZ7vuDRHOPdX5RucBqj3H4keViJXe8qTWmWXDOsZwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCgw/2XcW8K1GMjEayTOMsL/Agu8MB8GA1UdIwQY MBaAFCAY7wi1XdsgyIFqYhpFnNuSezIBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSUJqdkNMVmQyeURJZ1dwaUdrV2MyNUo3TWdFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYS8yOGQ3Y2YtMjJmOC00MzYzLWFkMDIt YTBhYzQ5YWQzNDNmLzEvSUJqdkNMVmQyeURJZ1dwaUdrV2MyNUo3TWdFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYS8yOGQ3Y2YtMjJmOC00MzYzLWFkMDItYTBhYzQ5YWQzNDNm LzEvSUJqdkNMVmQyeURJZ1dwaUdrV2MyNUo3TWdFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOD/Qt3+I YxbiS2nPQ4ReC5/3xtG3rNfbsIffDjyBQnXezuIf5rTLCEdwwu4Sl4xBnLZ2KwnN H+5iO5jsdReUYxhTW2lmjYZtr0S1pKuzlCjQeO1Lm9WtpHueMtA4zzWosRth/cVL 3leEhKF20zrbKAOu2he7q3S8Hmg05hoZRhLwiB+E04Lw4RCLupbJhuPStjuMq9l1 Po48YCTP5qDnwSCZdvyUSxMesiKRoCNSoBphJjpVtjohdX3uKawyYjFPsW6SatXA kyLflASeeuU6E2Kt8+gcXgIDy7fMDlsEHbDUPx6jKmjPYnbWBxJ+4UY8QxAEQFsD RRyxzO4UpFGyNg== -----END CERTIFICATE-----Generated at Sat Dec 6 09:20:58 2025 by rpki-client