This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/981b84-9ff0-48e9-ab21-9b6cbfb43246/1/X-C-IOAv_HNU1bLTPg_ncVGa_R8.mft File: X-C-IOAv_HNU1bLTPg_ncVGa_R8.mft (raw, json) Hash identifier: CNZRMZEF2QBSxlSLUhfg4LjuzVJLom09CZOgO3T2Ib0= Subject key identifier: 01:75:71:DC:A4:6C:8A:88:76:D5:F6:D4:2E:3F:DD:77:8D:22:8B:3F Authority key identifier: 5F:E0:BE:20:E0:2F:FC:73:54:D5:B2:D3:3E:0F:E7:71:51:9A:FD:1F Certificate issuer: /CN=5fe0be20e02ffc7354d5b2d33e0fe771519afd1f Certificate serial: 019AF31BDB846DEB2EF3036D2282ED3FAC0F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X-C-IOAv_HNU1bLTPg_ncVGa_R8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/981b84-9ff0-48e9-ab21-9b6cbfb43246/1/X-C-IOAv_HNU1bLTPg_ncVGa_R8.mft Manifest number: 080E Signing time: Sat 06 Dec 2025 10:01:20 +0000 Manifest this update: Sat 06 Dec 2025 10:01:20 +0000 Manifest next update: Sun 07 Dec 2025 10:01:20 +0000 Files and hashes: 1: X-C-IOAv_HNU1bLTPg_ncVGa_R8.crl (hash: eYRS8hbuxAF0bfbTLhZKytLY9286gP+xnDtvF7CenL0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/981b84-9ff0-48e9-ab21-9b6cbfb43246/1/X-C-IOAv_HNU1bLTPg_ncVGa_R8.crl rsync://rpki.ripe.net/repository/DEFAULT/41/981b84-9ff0-48e9-ab21-9b6cbfb43246/1/X-C-IOAv_HNU1bLTPg_ncVGa_R8.mft rsync://rpki.ripe.net/repository/DEFAULT/X-C-IOAv_HNU1bLTPg_ncVGa_R8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1b:db:84:6d:eb:2e:f3:03:6d:22:82:ed:3f:ac:0f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5fe0be20e02ffc7354d5b2d33e0fe771519afd1f Validity Not Before: Dec 6 10:01:20 2025 GMT Not After : Dec 7 10:01:20 2025 GMT Subject: CN=017571dca46c8a8876d5f6d42e3fdd778d228b3f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:79:88:0d:e3:8d:b7:03:7e:48:42:be:64:bd: 52:b3:9b:95:70:bb:8c:80:f0:02:d3:35:2c:e6:30: 94:f6:3a:e1:5d:80:75:05:ac:51:d4:13:f0:b5:09: b6:e6:53:c3:d7:68:5b:99:d3:aa:20:d2:07:4a:cc: 7a:d7:0f:27:1c:8f:4d:22:2b:36:4c:8b:0f:47:d9: 1a:09:af:d7:0b:36:8b:72:d4:16:9f:28:8e:0d:5e: 02:6d:f2:87:ce:91:96:f1:5d:cb:a0:51:c4:9c:fd: 5d:bc:66:fa:03:fe:0f:9f:c6:2d:6c:8d:e2:c5:5f: 36:73:2e:80:2f:9b:30:a1:76:cb:40:89:fe:e3:a5: 9e:07:1e:05:29:2a:c9:a5:7c:5a:d8:d2:e3:f6:ca: 04:5d:d6:d2:30:40:3b:7e:2d:ee:82:c3:a2:0f:b8: 3a:54:8b:e3:7d:75:63:94:50:42:2e:f3:5c:0e:8d: b2:37:ee:d4:00:31:86:f7:c2:10:d2:ae:35:8e:18: dd:46:ba:60:fd:26:b4:f3:02:d4:87:73:91:7b:19: 7c:c4:79:d6:ef:d5:9f:cf:d1:0b:97:c6:35:81:2a: b1:a9:32:5e:ba:41:de:a1:70:12:28:d5:bb:2a:ae: 22:8b:e4:39:26:fb:78:12:85:05:1e:c0:04:33:be: 05:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:75:71:DC:A4:6C:8A:88:76:D5:F6:D4:2E:3F:DD:77:8D:22:8B:3F X509v3 Authority Key Identifier: keyid:5F:E0:BE:20:E0:2F:FC:73:54:D5:B2:D3:3E:0F:E7:71:51:9A:FD:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X-C-IOAv_HNU1bLTPg_ncVGa_R8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/981b84-9ff0-48e9-ab21-9b6cbfb43246/1/X-C-IOAv_HNU1bLTPg_ncVGa_R8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/41/981b84-9ff0-48e9-ab21-9b6cbfb43246/1/X-C-IOAv_HNU1bLTPg_ncVGa_R8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0c:e8:d0:6d:12:15:a0:92:57:0a:48:53:c1:d5:c5:f6:7b:6b: 9f:67:8e:8a:16:26:ce:3c:26:fa:1b:11:50:d0:f0:0e:cb:e0: f3:0b:33:ad:23:9a:65:74:49:3c:fc:20:bc:4a:41:73:63:7c: 3e:75:bf:8b:03:86:75:aa:a1:d9:71:85:25:fc:15:2c:ff:5b: 3c:83:1f:7e:d1:20:12:f7:11:c6:b9:d7:41:7d:9f:84:59:d8: 56:77:a0:17:d7:d8:1a:04:80:e5:5b:2f:1d:dd:41:e8:11:51: cf:0a:44:3f:83:3f:f4:e4:dc:89:32:35:47:a0:83:a5:bc:3d: fa:75:f5:cf:22:c8:ed:c0:e5:23:d9:86:58:61:b6:86:66:22: bc:2d:50:55:9a:b3:ad:5d:2e:78:7f:1e:11:7e:cc:15:a9:e4: 3b:4d:71:41:ea:b9:2f:ec:a0:ce:51:78:d9:a1:18:1e:5a:2a: e0:cf:00:ea:cd:cb:6b:96:55:b8:01:45:90:87:bd:f9:03:79: 6c:4a:de:1e:d3:48:fd:a4:c9:9a:75:7c:2b:de:71:aa:6e:73: 06:8c:a4:f6:c9:9d:56:cb:21:7b:ed:03:d8:52:10:c4:67:f8: 13:22:0f:9f:07:5c:d8:6c:f1:84:f0:ed:c0:7d:77:09:60:3b: 8d:f4:6c:1d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzG9uEbesu8wNtIoLtP6wPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVmZTBiZTIwZTAyZmZjNzM1NGQ1YjJkMzNlMGZlNzcxNTE5 YWZkMWYwHhcNMjUxMjA2MTAwMTIwWhcNMjUxMjA3MTAwMTIwWjAzMTEwLwYDVQQD EygwMTc1NzFkY2E0NmM4YTg4NzZkNWY2ZDQyZTNmZGQ3NzhkMjI4YjNmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArHmIDeONtwN+SEK+ZL1Ss5uVcLuM gPAC0zUs5jCU9jrhXYB1BaxR1BPwtQm25lPD12hbmdOqINIHSsx61w8nHI9NIis2 TIsPR9kaCa/XCzaLctQWnyiODV4CbfKHzpGW8V3LoFHEnP1dvGb6A/4Pn8YtbI3i xV82cy6AL5swoXbLQIn+46WeBx4FKSrJpXxa2NLj9soEXdbSMEA7fi3ugsOiD7g6 VIvjfXVjlFBCLvNcDo2yN+7UADGG98IQ0q41jhjdRrpg/Sa08wLUh3ORexl8xHnW 79Wfz9ELl8Y1gSqxqTJeukHeoXASKNW7Kq4ii+Q5Jvt4EoUFHsAEM74FNQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAF1cdykbIqIdtX21C4/3XeNIos/MB8GA1UdIwQY MBaAFF/gviDgL/xzVNWy0z4P53FRmv0fMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWC1DLUlPQXZfSE5VMWJMVFBnX25jVkdhX1I4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MS85ODFiODQtOWZmMC00OGU5LWFiMjEt OWI2Y2JmYjQzMjQ2LzEvWC1DLUlPQXZfSE5VMWJMVFBnX25jVkdhX1I4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80MS85ODFiODQtOWZmMC00OGU5LWFiMjEtOWI2Y2JmYjQzMjQ2 LzEvWC1DLUlPQXZfSE5VMWJMVFBnX25jVkdhX1I4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADOjQbRIV oJJXCkhTwdXF9ntrn2eOihYmzjwm+hsRUNDwDsvg8wszrSOaZXRJPPwgvEpBc2N8 PnW/iwOGdaqh2XGFJfwVLP9bPIMfftEgEvcRxrnXQX2fhFnYVnegF9fYGgSA5Vsv Hd1B6BFRzwpEP4M/9OTciTI1R6CDpbw9+nX1zyLI7cDlI9mGWGG2hmYivC1QVZqz rV0ueH8eEX7MFankO01xQeq5L+ygzlF42aEYHloq4M8A6s3La5ZVuAFFkIe9+QN5 bEreHtNI/aTJmnV8K95xqm5zBoyk9smdVsshe+0D2FIQxGf4EyIPnwdc2GzxhPDt wH13CWA7jfRsHQ== -----END CERTIFICATE-----Generated at Sat Dec 6 11:50:17 2025 by rpki-client