This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/c41378-dbdf-4cb3-96ee-0238c910a9bf/1/I8_2Rq3BnAP2QXpuKhxBg8a40_4.mft File: I8_2Rq3BnAP2QXpuKhxBg8a40_4.mft (raw, json) Hash identifier: eaOHHe7X49+qPmGVfQgRbU9KB7w5HrbsnhZUvyFa7OE= Subject key identifier: F7:04:74:BC:C2:8D:E2:10:33:24:C6:94:D5:08:12:47:D3:C1:DD:E0 Authority key identifier: 23:CF:F6:46:AD:C1:9C:03:F6:41:7A:6E:2A:1C:41:83:C6:B8:D3:FE Certificate issuer: /CN=23cff646adc19c03f6417a6e2a1c4183c6b8d3fe Certificate serial: 019AF16465963E3627AFB33FA18BC12CC3D6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I8_2Rq3BnAP2QXpuKhxBg8a40_4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/c41378-dbdf-4cb3-96ee-0238c910a9bf/1/I8_2Rq3BnAP2QXpuKhxBg8a40_4.mft Manifest number: 175C Signing time: Sat 06 Dec 2025 02:01:19 +0000 Manifest this update: Sat 06 Dec 2025 02:01:19 +0000 Manifest next update: Sun 07 Dec 2025 02:01:19 +0000 Files and hashes: 1: I8_2Rq3BnAP2QXpuKhxBg8a40_4.crl (hash: HOU40kaEaX896Uaw4N5+tzX0I7R2k7F7xdyfcUHk0nA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/c41378-dbdf-4cb3-96ee-0238c910a9bf/1/I8_2Rq3BnAP2QXpuKhxBg8a40_4.crl rsync://rpki.ripe.net/repository/DEFAULT/48/c41378-dbdf-4cb3-96ee-0238c910a9bf/1/I8_2Rq3BnAP2QXpuKhxBg8a40_4.mft rsync://rpki.ripe.net/repository/DEFAULT/I8_2Rq3BnAP2QXpuKhxBg8a40_4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:64:65:96:3e:36:27:af:b3:3f:a1:8b:c1:2c:c3:d6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=23cff646adc19c03f6417a6e2a1c4183c6b8d3fe Validity Not Before: Dec 6 02:01:19 2025 GMT Not After : Dec 7 02:01:19 2025 GMT Subject: CN=f70474bcc28de2103324c694d5081247d3c1dde0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:72:37:f5:f4:bb:51:26:bb:2e:5d:3d:24:47: 20:4a:46:48:0d:83:28:ff:97:07:d4:00:25:2f:fc: da:86:45:79:ca:a9:db:87:6c:4e:13:f0:d4:25:0e: f8:a8:bd:03:1b:23:cb:e9:ac:3e:09:b8:0d:56:01: 85:b8:dd:da:e2:56:76:8f:fb:11:1b:ef:3b:9e:3e: e2:70:79:eb:1c:c2:44:88:f5:7d:c7:05:6b:3d:7c: f7:9e:97:cc:a4:69:4a:93:c8:8b:37:ee:3d:12:25: c4:d3:4e:c8:6b:8e:2a:e3:52:77:14:89:a5:f7:a9: e9:80:fc:be:41:3e:88:05:9e:b1:5a:9b:c3:95:94: 3a:7e:90:b5:ed:8e:22:9c:04:b9:59:8d:f9:51:c4: 11:2a:6c:92:2b:35:a7:77:77:ea:9b:ff:eb:98:56: 4e:f5:25:90:f4:72:03:51:87:ed:02:81:15:12:e8: 1c:7a:94:5c:54:d5:25:80:59:ed:b3:8c:7c:74:12: b5:a7:5b:25:6f:29:87:ad:7b:e4:4c:cc:d2:db:23: 5d:f6:37:5f:4e:f8:ba:53:f4:4b:4b:b8:9e:8c:b2: 1b:12:dc:3f:1c:60:49:8a:b5:de:d0:97:0a:45:42: 45:d6:f6:ef:12:de:2f:0e:36:62:45:1f:ab:52:f2: 07:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:04:74:BC:C2:8D:E2:10:33:24:C6:94:D5:08:12:47:D3:C1:DD:E0 X509v3 Authority Key Identifier: keyid:23:CF:F6:46:AD:C1:9C:03:F6:41:7A:6E:2A:1C:41:83:C6:B8:D3:FE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I8_2Rq3BnAP2QXpuKhxBg8a40_4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/c41378-dbdf-4cb3-96ee-0238c910a9bf/1/I8_2Rq3BnAP2QXpuKhxBg8a40_4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/48/c41378-dbdf-4cb3-96ee-0238c910a9bf/1/I8_2Rq3BnAP2QXpuKhxBg8a40_4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bd:e6:48:9b:41:07:59:03:c7:34:8b:e6:da:82:00:7a:00:c9: 97:6f:c7:f1:0a:8f:66:77:da:68:6c:79:d3:ab:d3:ef:a7:68: 14:70:ad:64:44:df:25:81:b4:31:8c:1b:03:70:f0:f9:78:ba: ae:f9:fa:01:cb:9e:d3:f9:9a:d8:bf:53:a7:a0:d8:e1:fa:b6: 70:ad:04:c2:c5:91:4a:1f:15:c2:e9:7a:18:55:d0:2d:d5:a9: 2a:12:b5:ee:54:d5:01:dc:3d:be:fb:c8:83:af:03:82:a6:c9: 97:76:39:57:77:b9:c8:b4:ac:61:cd:09:54:a0:98:0d:91:d6: 7e:7c:00:b4:65:b4:b0:84:b6:bc:f1:fc:d0:66:79:f7:79:2f: 6a:3c:c8:38:8e:28:37:01:4d:a4:64:1f:25:7e:f4:f5:22:c3: 12:ef:96:97:4d:f2:27:60:54:6d:8f:2e:5f:fb:88:60:25:5d: 70:11:35:57:c0:6a:21:86:07:98:0c:bc:fa:75:98:bc:1d:ee: 69:0e:3e:12:8d:e9:00:61:1f:fa:53:ae:18:bb:ae:d1:34:72: 4f:c2:e3:18:34:05:c4:76:0f:97:e0:6a:ba:71:f8:9f:1d:fc: 33:7d:fd:96:b0:58:50:41:f2:b3:08:9a:f4:81:37:bf:cf:cb: 41:9a:eb:ab -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxZGWWPjYnr7M/oYvBLMPWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIzY2ZmNjQ2YWRjMTljMDNmNjQxN2E2ZTJhMWM0MTgzYzZi OGQzZmUwHhcNMjUxMjA2MDIwMTE5WhcNMjUxMjA3MDIwMTE5WjAzMTEwLwYDVQQD EyhmNzA0NzRiY2MyOGRlMjEwMzMyNGM2OTRkNTA4MTI0N2QzYzFkZGUwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkXI39fS7USa7Ll09JEcgSkZIDYMo /5cH1AAlL/zahkV5yqnbh2xOE/DUJQ74qL0DGyPL6aw+CbgNVgGFuN3a4lZ2j/sR G+87nj7icHnrHMJEiPV9xwVrPXz3npfMpGlKk8iLN+49EiXE007Ia44q41J3FIml 96npgPy+QT6IBZ6xWpvDlZQ6fpC17Y4inAS5WY35UcQRKmySKzWnd3fqm//rmFZO 9SWQ9HIDUYftAoEVEugcepRcVNUlgFnts4x8dBK1p1slbymHrXvkTMzS2yNd9jdf Tvi6U/RLS7iejLIbEtw/HGBJirXe0JcKRUJF1vbvEt4vDjZiRR+rUvIH3QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPcEdLzCjeIQMyTGlNUIEkfTwd3gMB8GA1UdIwQY MBaAFCPP9katwZwD9kF6biocQYPGuNP+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSThfMlJxM0JuQVAyUVhwdUtoeEJnOGE0MF80LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OC9jNDEzNzgtZGJkZi00Y2IzLTk2ZWUt MDIzOGM5MTBhOWJmLzEvSThfMlJxM0JuQVAyUVhwdUtoeEJnOGE0MF80Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80OC9jNDEzNzgtZGJkZi00Y2IzLTk2ZWUtMDIzOGM5MTBhOWJm LzEvSThfMlJxM0JuQVAyUVhwdUtoeEJnOGE0MF80LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAveZIm0EH WQPHNIvm2oIAegDJl2/H8QqPZnfaaGx506vT76doFHCtZETfJYG0MYwbA3Dw+Xi6 rvn6Acue0/ma2L9Tp6DY4fq2cK0EwsWRSh8Vwul6GFXQLdWpKhK17lTVAdw9vvvI g68DgqbJl3Y5V3e5yLSsYc0JVKCYDZHWfnwAtGW0sIS2vPH80GZ593kvajzIOI4o NwFNpGQfJX709SLDEu+Wl03yJ2BUbY8uX/uIYCVdcBE1V8BqIYYHmAy8+nWYvB3u aQ4+Eo3pAGEf+lOuGLuu0TRyT8LjGDQFxHYPl+BqunH4nx38M339lrBYUEHyswia 9IE3v8/LQZrrqw== -----END CERTIFICATE-----Generated at Sat Dec 6 09:31:11 2025 by rpki-client