This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/6f385e-7fe1-49ad-81fb-1882f4c276cd/1/iCl5Lj_yH8NYJ_aKeMgFABXGanI.mft File: iCl5Lj_yH8NYJ_aKeMgFABXGanI.mft (raw, json) Hash identifier: Ed+tjYP9vK4D0rM1ERqRrS8nvK2ny0xFWv+jdQg2FSA= Subject key identifier: DB:4C:93:9A:3D:A7:54:67:0E:9D:94:81:29:2C:BC:A6:5C:ED:4D:40 Authority key identifier: 88:29:79:2E:3F:F2:1F:C3:58:27:F6:8A:78:C8:05:00:15:C6:6A:72 Certificate issuer: /CN=8829792e3ff21fc35827f68a78c8050015c66a72 Certificate serial: 019AF1D199E5A08ABA27DE5E9197CA1AB855 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iCl5Lj_yH8NYJ_aKeMgFABXGanI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/6f385e-7fe1-49ad-81fb-1882f4c276cd/1/iCl5Lj_yH8NYJ_aKeMgFABXGanI.mft Manifest number: 175E Signing time: Sat 06 Dec 2025 04:00:36 +0000 Manifest this update: Sat 06 Dec 2025 04:00:36 +0000 Manifest next update: Sun 07 Dec 2025 04:00:36 +0000 Files and hashes: 1: iCl5Lj_yH8NYJ_aKeMgFABXGanI.crl (hash: fykgahPk9xy+cYy+bXLGOvQ84NtWl6k4++EYMa3nutQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/6f385e-7fe1-49ad-81fb-1882f4c276cd/1/iCl5Lj_yH8NYJ_aKeMgFABXGanI.crl rsync://rpki.ripe.net/repository/DEFAULT/6d/6f385e-7fe1-49ad-81fb-1882f4c276cd/1/iCl5Lj_yH8NYJ_aKeMgFABXGanI.mft rsync://rpki.ripe.net/repository/DEFAULT/iCl5Lj_yH8NYJ_aKeMgFABXGanI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d1:99:e5:a0:8a:ba:27:de:5e:91:97:ca:1a:b8:55 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8829792e3ff21fc35827f68a78c8050015c66a72 Validity Not Before: Dec 6 04:00:36 2025 GMT Not After : Dec 7 04:00:36 2025 GMT Subject: CN=db4c939a3da754670e9d9481292cbca65ced4d40 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:0c:5e:52:59:07:f9:35:b9:9e:08:63:14:75: 75:12:91:08:ab:a0:d4:0d:c3:1d:f6:e4:61:7b:dd: ce:1b:b8:d5:7d:03:9c:8a:69:0e:94:ed:52:da:3b: 35:8c:fe:b8:d8:46:c3:ec:9f:15:f8:9c:38:07:56: a4:d3:aa:a0:27:d4:67:13:45:94:40:5f:b7:8c:ee: 7b:89:7b:2a:bf:c9:1c:4e:fc:df:d8:08:3d:ac:2f: 17:a5:4c:98:02:db:64:88:72:f6:9d:99:2f:2d:0f: 8f:ec:82:88:34:64:76:4f:37:8f:e4:d0:2f:18:f6: db:da:cc:46:46:4a:67:b4:7b:02:09:fb:c7:7b:d5: 6d:ba:8c:90:d3:fc:6f:24:5e:7d:61:f1:06:8a:ce: 6d:44:6b:54:01:e4:b4:21:2f:d1:25:a9:35:8b:de: 47:b4:06:de:f3:c6:a6:e5:f5:c3:31:77:82:a7:29: 68:7d:ab:ba:53:b0:61:74:02:31:2c:c2:93:e6:bf: 95:7c:a8:b7:cf:3f:27:b7:21:9e:5a:42:a8:ef:ca: bd:fc:c9:01:34:62:df:14:55:69:16:4c:10:2e:e0: 76:ae:03:89:fc:f0:63:d9:93:2a:81:8e:cc:d5:3f: 99:cc:0b:21:90:5c:7b:2c:93:47:7b:4f:2e:50:12: 5e:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:4C:93:9A:3D:A7:54:67:0E:9D:94:81:29:2C:BC:A6:5C:ED:4D:40 X509v3 Authority Key Identifier: keyid:88:29:79:2E:3F:F2:1F:C3:58:27:F6:8A:78:C8:05:00:15:C6:6A:72 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iCl5Lj_yH8NYJ_aKeMgFABXGanI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/6f385e-7fe1-49ad-81fb-1882f4c276cd/1/iCl5Lj_yH8NYJ_aKeMgFABXGanI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/6f385e-7fe1-49ad-81fb-1882f4c276cd/1/iCl5Lj_yH8NYJ_aKeMgFABXGanI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0a:bb:17:e7:42:55:0b:45:0a:f1:d0:9a:27:aa:80:24:d6:4e: c8:45:fe:7d:6a:a1:7c:43:da:61:7d:39:1c:2c:ef:9e:a2:90: 32:df:c5:fe:16:1f:47:f5:e5:1d:f3:11:1b:3f:24:c5:4d:69: e7:d1:3e:39:d4:94:3d:33:45:0e:58:a8:7a:34:5d:03:fe:99: 8d:ff:4f:e3:e9:18:d5:35:12:70:cd:24:fa:2f:6b:1c:b1:f1: 8e:cd:39:2e:16:75:67:61:2a:d0:f8:eb:d0:58:d9:df:b5:7c: 1d:e8:65:85:ef:45:15:67:45:fa:b8:59:64:f4:2e:b9:ae:51: 91:04:24:e9:a4:0f:89:03:4f:c8:61:fc:94:50:5f:53:85:65: a2:c5:34:4f:cd:35:5d:16:aa:e1:0b:2c:74:eb:e1:19:57:bf: 27:e0:8c:92:b0:e2:98:4c:f2:ce:7d:2f:0d:e2:fc:34:da:8f: 9c:6a:63:be:8f:63:b9:9c:40:cc:4c:63:c8:20:84:cd:bb:63: df:83:44:de:85:91:71:79:d7:08:f2:a2:c7:11:f1:6a:2e:af: cb:28:6d:77:db:02:82:7b:28:b1:17:4e:f9:11:e9:26:18:d5: b3:12:a5:cb:e8:f1:23:9b:c4:2f:db:61:c1:8e:8c:90:58:43: b1:1e:df:ad -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0ZnloIq6J95ekZfKGrhVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg4Mjk3OTJlM2ZmMjFmYzM1ODI3ZjY4YTc4YzgwNTAwMTVj NjZhNzIwHhcNMjUxMjA2MDQwMDM2WhcNMjUxMjA3MDQwMDM2WjAzMTEwLwYDVQQD EyhkYjRjOTM5YTNkYTc1NDY3MGU5ZDk0ODEyOTJjYmNhNjVjZWQ0ZDQwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzAxeUlkH+TW5nghjFHV1EpEIq6DU DcMd9uRhe93OG7jVfQOcimkOlO1S2js1jP642EbD7J8V+Jw4B1ak06qgJ9RnE0WU QF+3jO57iXsqv8kcTvzf2Ag9rC8XpUyYAttkiHL2nZkvLQ+P7IKINGR2TzeP5NAv GPbb2sxGRkpntHsCCfvHe9VtuoyQ0/xvJF59YfEGis5tRGtUAeS0IS/RJak1i95H tAbe88am5fXDMXeCpylofau6U7BhdAIxLMKT5r+VfKi3zz8ntyGeWkKo78q9/MkB NGLfFFVpFkwQLuB2rgOJ/PBj2ZMqgY7M1T+ZzAshkFx7LJNHe08uUBJeEwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNtMk5o9p1RnDp2UgSksvKZc7U1AMB8GA1UdIwQY MBaAFIgpeS4/8h/DWCf2injIBQAVxmpyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaUNsNUxqX3lIOE5ZSl9hS2VNZ0ZBQlhHYW5JLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZC82ZjM4NWUtN2ZlMS00OWFkLTgxZmIt MTg4MmY0YzI3NmNkLzEvaUNsNUxqX3lIOE5ZSl9hS2VNZ0ZBQlhHYW5JLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82ZC82ZjM4NWUtN2ZlMS00OWFkLTgxZmItMTg4MmY0YzI3NmNk LzEvaUNsNUxqX3lIOE5ZSl9hS2VNZ0ZBQlhHYW5JLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACrsX50JV C0UK8dCaJ6qAJNZOyEX+fWqhfEPaYX05HCzvnqKQMt/F/hYfR/XlHfMRGz8kxU1p 59E+OdSUPTNFDlioejRdA/6Zjf9P4+kY1TUScM0k+i9rHLHxjs05LhZ1Z2Eq0Pjr 0FjZ37V8Hehlhe9FFWdF+rhZZPQuua5RkQQk6aQPiQNPyGH8lFBfU4VlosU0T801 XRaq4QssdOvhGVe/J+CMkrDimEzyzn0vDeL8NNqPnGpjvo9juZxAzExjyCCEzbtj 34NE3oWRcXnXCPKixxHxai6vyyhtd9sCgnsosRdO+RHpJhjVsxKly+jxI5vEL9th wY6MkFhDsR7frQ== -----END CERTIFICATE-----Generated at Sat Dec 6 09:23:06 2025 by rpki-client