This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/f72a1e-6adb-4302-a0e8-d42a81b81e23/1/20bM9fil_kT0v9m6ZrpRJG2osYQ.mft File: 20bM9fil_kT0v9m6ZrpRJG2osYQ.mft (raw, json) Hash identifier: LPs/kcCD/L816Zyp2GXv++T7oDbgudwwdUZN2tgLbAc= Subject key identifier: A5:AB:9E:DE:CA:1E:3F:00:F2:A8:04:9D:FE:56:9C:D5:04:A7:1B:3E Authority key identifier: DB:46:CC:F5:F8:A5:FE:44:F4:BF:D9:BA:66:BA:51:24:6D:A8:B1:84 Certificate issuer: /CN=db46ccf5f8a5fe44f4bfd9ba66ba51246da8b184 Certificate serial: 019AF1D256239BB899F7AECAAEFF175FFBBB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/20bM9fil_kT0v9m6ZrpRJG2osYQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/f72a1e-6adb-4302-a0e8-d42a81b81e23/1/20bM9fil_kT0v9m6ZrpRJG2osYQ.mft Manifest number: 1526 Signing time: Sat 06 Dec 2025 04:01:24 +0000 Manifest this update: Sat 06 Dec 2025 04:01:24 +0000 Manifest next update: Sun 07 Dec 2025 04:01:24 +0000 Files and hashes: 1: 20bM9fil_kT0v9m6ZrpRJG2osYQ.crl (hash: rb6z3Cz6SZ5pMzcFMGfZSKZdPX3o66Cvzo+2ZQDUQXQ=) 2: tE13-Z8TEXFI2N_Q3eslEjXwYJ4.roa (hash: 7axnrMAdFOe7EcvPvTZA4mgDnvv0sfD7w1s1AvMo3bY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/f72a1e-6adb-4302-a0e8-d42a81b81e23/1/20bM9fil_kT0v9m6ZrpRJG2osYQ.crl rsync://rpki.ripe.net/repository/DEFAULT/3e/f72a1e-6adb-4302-a0e8-d42a81b81e23/1/20bM9fil_kT0v9m6ZrpRJG2osYQ.mft rsync://rpki.ripe.net/repository/DEFAULT/20bM9fil_kT0v9m6ZrpRJG2osYQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d2:56:23:9b:b8:99:f7:ae:ca:ae:ff:17:5f:fb:bb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=db46ccf5f8a5fe44f4bfd9ba66ba51246da8b184 Validity Not Before: Dec 6 04:01:24 2025 GMT Not After : Dec 7 04:01:24 2025 GMT Subject: CN=a5ab9edeca1e3f00f2a8049dfe569cd504a71b3e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:81:52:41:aa:0f:6c:ea:4b:af:f9:7d:e4:27: 46:d6:2c:0d:5e:ca:4c:60:f8:7c:ea:43:28:37:82: ac:6e:6d:35:0f:5a:2f:76:3b:c7:c9:7b:29:f9:b3: 18:02:27:fa:39:7e:70:34:98:7f:fd:a2:83:85:90: a6:5d:dc:4c:6d:e0:d5:21:12:48:bc:50:19:7e:9a: 81:11:a7:f2:68:fc:28:90:d4:7f:50:e3:ae:2d:4a: 0a:af:4b:03:f0:51:87:56:e5:d1:35:ab:ac:af:ee: c2:79:85:8f:8d:74:62:04:03:92:ed:f6:64:b8:ab: 78:7a:2f:b6:96:b0:f9:68:fb:a0:96:1e:62:f9:29: f1:15:77:24:6f:81:17:c2:11:16:7c:86:45:ae:7d: 0f:13:2a:9a:fc:a0:52:70:44:67:d8:e6:ba:e6:31: 1c:85:f9:12:c9:d2:0d:fb:cf:28:f5:4d:f2:7e:2a: 5c:f9:c0:a1:39:50:87:f3:3d:36:14:af:06:60:13: a6:5a:02:26:1c:74:d6:d0:9b:5a:df:27:24:4d:fc: 8d:a8:88:cd:f7:ca:48:4b:7b:5f:8f:1d:eb:03:fb: ef:62:5d:c0:20:71:3d:55:2c:64:7a:f2:cb:7c:3c: 54:72:5c:eb:8f:a0:62:3c:a9:6b:38:3a:bc:ca:c8: 47:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:AB:9E:DE:CA:1E:3F:00:F2:A8:04:9D:FE:56:9C:D5:04:A7:1B:3E X509v3 Authority Key Identifier: keyid:DB:46:CC:F5:F8:A5:FE:44:F4:BF:D9:BA:66:BA:51:24:6D:A8:B1:84 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/20bM9fil_kT0v9m6ZrpRJG2osYQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/f72a1e-6adb-4302-a0e8-d42a81b81e23/1/20bM9fil_kT0v9m6ZrpRJG2osYQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/f72a1e-6adb-4302-a0e8-d42a81b81e23/1/20bM9fil_kT0v9m6ZrpRJG2osYQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0c:b7:1a:eb:90:38:6b:38:2e:3f:78:e9:49:94:65:33:45:f3: 70:31:60:25:4c:9f:ef:59:b8:25:cf:f6:f7:30:95:25:04:af: 8d:cf:e4:b0:53:82:69:63:c7:fb:5a:de:e6:88:6a:06:bd:ad: 37:4d:9b:bb:c8:7b:ec:af:dc:d9:7a:c0:71:79:14:3d:f0:d0: 57:ca:24:22:55:62:1e:28:33:eb:f7:f9:96:3e:fa:f2:1e:9b: 95:fd:eb:ad:ac:0b:2c:fc:d6:d5:60:ea:a3:66:40:75:ea:1d: fa:ca:75:c2:7a:8a:d1:b3:01:f8:7d:22:e5:ff:01:6e:e5:ae: 57:de:de:b9:48:5d:71:7a:7d:a3:fc:73:ca:1c:22:10:25:9e: f8:5c:5b:42:93:05:13:fb:6f:90:4b:7f:fe:c4:4a:4f:46:4e: f2:fb:9e:b9:26:3d:09:3e:2f:36:66:46:b4:07:82:58:c8:36: a3:03:5d:c7:65:b9:ce:56:d6:21:de:7e:9b:b8:7b:e8:a1:da: de:1c:bd:0f:35:9a:5d:13:22:78:3f:28:61:46:5b:9d:1e:93: e8:60:4f:23:64:ce:07:f5:84:d9:0a:f7:d9:18:9f:56:0f:d7: 6c:1e:cb:68:e9:1e:82:65:96:86:66:80:0c:3f:6e:98:c3:61: c9:a9:51:e3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0lYjm7iZ967Krv8XX/u7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRiNDZjY2Y1ZjhhNWZlNDRmNGJmZDliYTY2YmE1MTI0NmRh OGIxODQwHhcNMjUxMjA2MDQwMTI0WhcNMjUxMjA3MDQwMTI0WjAzMTEwLwYDVQQD EyhhNWFiOWVkZWNhMWUzZjAwZjJhODA0OWRmZTU2OWNkNTA0YTcxYjNlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvIFSQaoPbOpLr/l95CdG1iwNXspM YPh86kMoN4Ksbm01D1ovdjvHyXsp+bMYAif6OX5wNJh//aKDhZCmXdxMbeDVIRJI vFAZfpqBEafyaPwokNR/UOOuLUoKr0sD8FGHVuXRNausr+7CeYWPjXRiBAOS7fZk uKt4ei+2lrD5aPuglh5i+SnxFXckb4EXwhEWfIZFrn0PEyqa/KBScERn2Oa65jEc hfkSydIN+88o9U3yfipc+cChOVCH8z02FK8GYBOmWgImHHTW0Jta3yckTfyNqIjN 98pIS3tfjx3rA/vvYl3AIHE9VSxkevLLfDxUclzrj6BiPKlrODq8yshHjQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKWrnt7KHj8A8qgEnf5WnNUEpxs+MB8GA1UdIwQY MBaAFNtGzPX4pf5E9L/Zuma6USRtqLGEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMjBiTTlmaWxfa1QwdjltNlpycFJKRzJvc1lRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZS9mNzJhMWUtNmFkYi00MzAyLWEwZTgt ZDQyYTgxYjgxZTIzLzEvMjBiTTlmaWxfa1QwdjltNlpycFJKRzJvc1lRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZS9mNzJhMWUtNmFkYi00MzAyLWEwZTgtZDQyYTgxYjgxZTIz LzEvMjBiTTlmaWxfa1QwdjltNlpycFJKRzJvc1lRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADLca65A4 azguP3jpSZRlM0XzcDFgJUyf71m4Jc/29zCVJQSvjc/ksFOCaWPH+1re5ohqBr2t N02bu8h77K/c2XrAcXkUPfDQV8okIlViHigz6/f5lj768h6blf3rrawLLPzW1WDq o2ZAdeod+sp1wnqK0bMB+H0i5f8BbuWuV97euUhdcXp9o/xzyhwiECWe+FxbQpMF E/tvkEt//sRKT0ZO8vueuSY9CT4vNmZGtAeCWMg2owNdx2W5zlbWId5+m7h76KHa 3hy9DzWaXRMieD8oYUZbnR6T6GBPI2TOB/WE2Qr32RifVg/XbB7LaOkegmWWhmaA DD9umMNhyalR4w== -----END CERTIFICATE-----Generated at Sat Dec 6 06:59:03 2025 by rpki-client