This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/993364-d85f-4007-96ec-49ac28142318/1/iXlCagvNkDpVJkksxa97TysO2wQ.mft File: iXlCagvNkDpVJkksxa97TysO2wQ.mft (raw, json) Hash identifier: ITxAh7o3TnB5clIIBaaNfMU6NgE0/jEIn1BdpKVUBJw= Subject key identifier: CC:E5:E9:82:A0:BB:25:A2:39:AC:3D:80:C1:5B:60:D5:08:1C:66:85 Authority key identifier: 89:79:42:6A:0B:CD:90:3A:55:26:49:2C:C5:AF:7B:4F:2B:0E:DB:04 Certificate issuer: /CN=8979426a0bcd903a5526492cc5af7b4f2b0edb04 Certificate serial: 019AF42E628B1DB8FE3537774907D05B3651 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iXlCagvNkDpVJkksxa97TysO2wQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/993364-d85f-4007-96ec-49ac28142318/1/iXlCagvNkDpVJkksxa97TysO2wQ.mft Manifest number: 06E4 Signing time: Sat 06 Dec 2025 15:01:11 +0000 Manifest this update: Sat 06 Dec 2025 15:01:11 +0000 Manifest next update: Sun 07 Dec 2025 15:01:11 +0000 Files and hashes: 1: iXlCagvNkDpVJkksxa97TysO2wQ.crl (hash: JP2RKLnaAOKTWeQSCfSauE+YK8S6KHAzIeh4e84Ok9E=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/993364-d85f-4007-96ec-49ac28142318/1/iXlCagvNkDpVJkksxa97TysO2wQ.crl rsync://rpki.ripe.net/repository/DEFAULT/52/993364-d85f-4007-96ec-49ac28142318/1/iXlCagvNkDpVJkksxa97TysO2wQ.mft rsync://rpki.ripe.net/repository/DEFAULT/iXlCagvNkDpVJkksxa97TysO2wQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:2e:62:8b:1d:b8:fe:35:37:77:49:07:d0:5b:36:51 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8979426a0bcd903a5526492cc5af7b4f2b0edb04 Validity Not Before: Dec 6 15:01:11 2025 GMT Not After : Dec 7 15:01:11 2025 GMT Subject: CN=cce5e982a0bb25a239ac3d80c15b60d5081c6685 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:6a:87:d0:fd:fd:8f:89:0b:e5:51:f8:c4:5f: 00:77:07:82:84:e0:60:78:ac:19:78:c6:28:94:ca: 62:2f:40:4b:7f:96:22:08:be:ba:95:bf:ba:ec:df: 94:f6:c9:f7:ff:9c:ac:04:3d:94:34:96:6e:3f:e9: 12:c4:04:24:6e:fa:b7:f4:e6:8f:7f:89:52:db:e8: b0:91:e0:7a:96:93:7c:1d:b4:ec:0a:2d:42:49:31: 61:c7:2b:14:22:03:6e:ad:bc:e3:b7:25:66:79:5d: 34:cb:bc:6c:79:d8:04:e6:b5:83:02:1f:59:44:7d: ec:49:f3:b2:21:a0:87:ba:d4:2f:d6:b6:80:b4:94: 0e:ab:07:9d:26:d7:e5:ec:7e:4e:54:8a:db:4f:f1: 1e:f1:01:a9:50:b7:b8:12:f2:b6:b2:4c:2d:9c:fc: 40:d6:fc:69:59:a8:5d:22:bd:22:ec:49:30:8e:9d: 56:05:78:80:66:79:cd:5f:94:51:66:3b:47:03:b1: 18:09:20:b9:fc:2f:6d:fa:52:e6:40:97:a2:45:2c: 56:24:73:bd:06:a5:cb:d7:be:12:3e:45:0b:81:e8: c5:92:20:f6:08:fe:79:01:1d:49:87:b3:78:b9:29: 82:be:59:df:d4:5a:64:8d:80:09:bc:80:f7:db:0c: 0c:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:E5:E9:82:A0:BB:25:A2:39:AC:3D:80:C1:5B:60:D5:08:1C:66:85 X509v3 Authority Key Identifier: keyid:89:79:42:6A:0B:CD:90:3A:55:26:49:2C:C5:AF:7B:4F:2B:0E:DB:04 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iXlCagvNkDpVJkksxa97TysO2wQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/993364-d85f-4007-96ec-49ac28142318/1/iXlCagvNkDpVJkksxa97TysO2wQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/52/993364-d85f-4007-96ec-49ac28142318/1/iXlCagvNkDpVJkksxa97TysO2wQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1d:08:7f:47:3e:d7:7b:04:b5:bc:99:ba:43:7f:41:f6:ea:73: 00:e5:87:15:89:d6:74:1f:98:b1:f8:84:39:36:6a:6b:0d:52: 91:5c:74:1c:65:5e:14:8c:71:97:58:27:12:b2:92:e0:42:1b: e0:2d:e3:e8:d7:16:73:13:43:ef:97:89:b5:6f:9c:23:a7:f4: 8b:7c:9f:4d:11:5a:b4:0e:16:e9:0a:26:14:31:8d:e3:c9:5a: 85:5e:3a:aa:82:94:7a:01:8d:cf:32:39:a5:1b:ed:13:5d:cf: ad:98:54:ac:d1:1d:d2:ad:4e:93:08:d3:d8:48:24:e4:03:8d: 9b:68:bf:e3:45:aa:44:17:39:b7:45:8d:bb:2b:d0:9f:34:4d: 89:51:5d:bc:44:13:df:42:9e:05:3c:9f:1f:67:33:c1:43:40: 15:fb:9c:55:c7:a3:29:20:07:5d:70:e2:93:05:ad:47:1b:01: 80:ee:8c:f3:a3:2c:46:47:7d:89:bf:36:35:01:91:a7:82:7c: 36:c8:1b:48:91:f1:d3:89:40:51:d1:c6:3c:e9:e5:33:82:d8: 37:05:ee:f1:fa:d5:97:c6:e2:c0:e0:55:96:79:76:ce:15:a8: f1:1b:55:dd:29:9b:9e:0a:21:31:a5:c4:32:45:c9:66:0c:ef: d3:00:3e:88 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr0LmKLHbj+NTd3SQfQWzZRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg5Nzk0MjZhMGJjZDkwM2E1NTI2NDkyY2M1YWY3YjRmMmIw ZWRiMDQwHhcNMjUxMjA2MTUwMTExWhcNMjUxMjA3MTUwMTExWjAzMTEwLwYDVQQD EyhjY2U1ZTk4MmEwYmIyNWEyMzlhYzNkODBjMTViNjBkNTA4MWM2Njg1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6GqH0P39j4kL5VH4xF8AdweChOBg eKwZeMYolMpiL0BLf5YiCL66lb+67N+U9sn3/5ysBD2UNJZuP+kSxAQkbvq39OaP f4lS2+iwkeB6lpN8HbTsCi1CSTFhxysUIgNurbzjtyVmeV00y7xsedgE5rWDAh9Z RH3sSfOyIaCHutQv1raAtJQOqwedJtfl7H5OVIrbT/Ee8QGpULe4EvK2skwtnPxA 1vxpWahdIr0i7Ekwjp1WBXiAZnnNX5RRZjtHA7EYCSC5/C9t+lLmQJeiRSxWJHO9 BqXL174SPkULgejFkiD2CP55AR1Jh7N4uSmCvlnf1FpkjYAJvID32wwMSwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMzl6YKguyWiOaw9gMFbYNUIHGaFMB8GA1UdIwQY MBaAFIl5QmoLzZA6VSZJLMWve08rDtsEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaVhsQ2Fndk5rRHBWSmtrc3hhOTdUeXNPMndRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Mi85OTMzNjQtZDg1Zi00MDA3LTk2ZWMt NDlhYzI4MTQyMzE4LzEvaVhsQ2Fndk5rRHBWSmtrc3hhOTdUeXNPMndRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Mi85OTMzNjQtZDg1Zi00MDA3LTk2ZWMtNDlhYzI4MTQyMzE4 LzEvaVhsQ2Fndk5rRHBWSmtrc3hhOTdUeXNPMndRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHQh/Rz7X ewS1vJm6Q39B9upzAOWHFYnWdB+YsfiEOTZqaw1SkVx0HGVeFIxxl1gnErKS4EIb 4C3j6NcWcxND75eJtW+cI6f0i3yfTRFatA4W6QomFDGN48lahV46qoKUegGNzzI5 pRvtE13PrZhUrNEd0q1OkwjT2Egk5AONm2i/40WqRBc5t0WNuyvQnzRNiVFdvEQT 30KeBTyfH2czwUNAFfucVcejKSAHXXDikwWtRxsBgO6M86MsRkd9ib82NQGRp4J8 NsgbSJHx04lAUdHGPOnlM4LYNwXu8frVl8biwOBVlnl2zhWo8RtV3SmbngohMaXE MkXJZgzv0wA+iA== -----END CERTIFICATE-----Generated at Sat Dec 6 17:28:51 2025 by rpki-client