This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/b41519-46fc-44da-a9af-e3f4bbcbbbd7/1/IDG8f3G7DRqFZv1GBCFFB8DUcRs.mft File: IDG8f3G7DRqFZv1GBCFFB8DUcRs.mft (raw, json) Hash identifier: wSTppfD8i+3xjZ33mW4O3K6AaAWoAD4O54jE146voeQ= Subject key identifier: 38:61:B2:D4:B1:55:59:D0:BF:0D:C7:5F:C8:50:24:DB:08:55:1D:2E Authority key identifier: 20:31:BC:7F:71:BB:0D:1A:85:66:FD:46:04:21:45:07:C0:D4:71:1B Certificate issuer: /CN=2031bc7f71bb0d1a8566fd4604214507c0d4711b Certificate serial: 019AF16469CFCE6D98007E97F349197FEE8E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IDG8f3G7DRqFZv1GBCFFB8DUcRs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/b41519-46fc-44da-a9af-e3f4bbcbbbd7/1/IDG8f3G7DRqFZv1GBCFFB8DUcRs.mft Manifest number: 1760 Signing time: Sat 06 Dec 2025 02:01:20 +0000 Manifest this update: Sat 06 Dec 2025 02:01:20 +0000 Manifest next update: Sun 07 Dec 2025 02:01:20 +0000 Files and hashes: 1: IDG8f3G7DRqFZv1GBCFFB8DUcRs.crl (hash: SIRdSipx33u02z4gpozPlKgN9yNiBE1Z+XCqSBAFbCg=) 2: J46kuUmF_sgE0zFOUz0hgWBo52M.roa (hash: jPrLPvaHVRm/LYCKQXvlkQimqCpYkjCK3g37WDkRjQ0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/b41519-46fc-44da-a9af-e3f4bbcbbbd7/1/IDG8f3G7DRqFZv1GBCFFB8DUcRs.crl rsync://rpki.ripe.net/repository/DEFAULT/89/b41519-46fc-44da-a9af-e3f4bbcbbbd7/1/IDG8f3G7DRqFZv1GBCFFB8DUcRs.mft rsync://rpki.ripe.net/repository/DEFAULT/IDG8f3G7DRqFZv1GBCFFB8DUcRs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:64:69:cf:ce:6d:98:00:7e:97:f3:49:19:7f:ee:8e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2031bc7f71bb0d1a8566fd4604214507c0d4711b Validity Not Before: Dec 6 02:01:20 2025 GMT Not After : Dec 7 02:01:20 2025 GMT Subject: CN=3861b2d4b15559d0bf0dc75fc85024db08551d2e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:8d:d4:6a:64:03:e4:f4:50:98:9c:2c:8d:43: 2f:e6:2d:6d:84:c5:4f:84:5f:39:26:86:4e:d0:ff: 7f:e6:70:46:06:09:32:59:1b:4d:5a:ae:d9:dc:54: 0d:ad:cf:dd:aa:5d:32:ba:b3:dc:4c:fe:f8:80:a9: 39:89:2c:87:47:f7:7c:7f:07:3d:75:25:25:2c:b0: 68:70:9c:48:c9:fe:f8:41:04:8b:5e:0c:da:55:49: 75:e5:a2:4b:42:82:c6:68:c9:60:f7:b4:bb:e9:ae: da:b6:3d:43:0e:44:9e:f4:66:6a:51:7f:8e:1f:64: fd:fb:77:75:1f:00:d6:ca:7b:3b:d4:fe:92:0e:5d: 3b:ab:f9:3c:9f:fd:90:ce:f6:21:d1:ec:46:7b:84: c1:11:81:be:06:02:f7:2d:ab:60:23:bf:da:0b:52: d8:b0:ad:44:15:55:29:42:72:4d:6e:03:dc:a1:ac: 3c:64:e5:27:c4:8c:f5:f1:33:23:99:12:7b:0b:dd: 1f:70:0c:5e:1a:75:b2:a8:38:41:36:f3:2c:d0:eb: 8f:ac:1a:5f:a2:a8:0f:f4:f2:7f:8c:e7:5a:99:7b: bd:72:51:d2:5d:64:7f:00:5e:be:3a:0c:b0:0f:10: 08:75:7a:4e:ec:4b:32:7d:8b:f0:0f:c4:31:87:df: 73:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:61:B2:D4:B1:55:59:D0:BF:0D:C7:5F:C8:50:24:DB:08:55:1D:2E X509v3 Authority Key Identifier: keyid:20:31:BC:7F:71:BB:0D:1A:85:66:FD:46:04:21:45:07:C0:D4:71:1B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IDG8f3G7DRqFZv1GBCFFB8DUcRs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/b41519-46fc-44da-a9af-e3f4bbcbbbd7/1/IDG8f3G7DRqFZv1GBCFFB8DUcRs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/89/b41519-46fc-44da-a9af-e3f4bbcbbbd7/1/IDG8f3G7DRqFZv1GBCFFB8DUcRs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 50:8a:2c:01:68:23:28:93:47:8d:a4:ef:14:9e:6a:b0:36:28: e4:69:4e:71:4a:a1:17:a1:e7:31:f3:cf:cd:e8:49:d3:4e:e3: ee:88:0f:dc:8f:39:bc:3f:ef:f1:35:7a:4f:43:78:73:b7:11: 59:d8:17:17:6b:e3:9d:24:f2:0d:5c:3f:aa:69:4a:38:17:2d: 1a:b5:49:f9:86:33:a8:28:8f:16:9f:d8:01:21:75:8d:3c:49: 66:d6:9a:ab:18:8a:4e:02:12:ef:46:41:4f:08:a7:93:82:82: d3:f2:e0:3a:df:b3:e9:02:03:1c:29:af:a9:5f:33:09:c7:e5: f0:9d:d5:f9:4f:11:0c:26:22:54:6d:6c:6c:f6:de:cf:26:da: 33:52:9a:49:d6:73:11:af:06:fc:2a:67:6f:27:3c:d8:47:74: f7:02:8b:8c:b2:70:78:61:fa:bb:87:28:5b:d4:d8:41:89:86: 30:ad:b6:24:12:71:08:5b:20:c1:47:9f:e2:c7:ce:ea:1a:27: f5:c4:1d:47:b7:11:0b:d3:6a:2c:61:76:3f:81:20:eb:e5:82: 84:28:3a:e9:e2:8e:de:9d:ee:d0:aa:69:3b:08:08:c0:3b:20: 30:34:92:dd:06:44:e1:51:58:e4:43:98:4a:26:99:81:d9:3a: 1a:8c:ef:3e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxZGnPzm2YAH6X80kZf+6OMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIwMzFiYzdmNzFiYjBkMWE4NTY2ZmQ0NjA0MjE0NTA3YzBk NDcxMWIwHhcNMjUxMjA2MDIwMTIwWhcNMjUxMjA3MDIwMTIwWjAzMTEwLwYDVQQD EygzODYxYjJkNGIxNTU1OWQwYmYwZGM3NWZjODUwMjRkYjA4NTUxZDJlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2I3UamQD5PRQmJwsjUMv5i1thMVP hF85JoZO0P9/5nBGBgkyWRtNWq7Z3FQNrc/dql0yurPcTP74gKk5iSyHR/d8fwc9 dSUlLLBocJxIyf74QQSLXgzaVUl15aJLQoLGaMlg97S76a7atj1DDkSe9GZqUX+O H2T9+3d1HwDWyns71P6SDl07q/k8n/2QzvYh0exGe4TBEYG+BgL3LatgI7/aC1LY sK1EFVUpQnJNbgPcoaw8ZOUnxIz18TMjmRJ7C90fcAxeGnWyqDhBNvMs0OuPrBpf oqgP9PJ/jOdamXu9clHSXWR/AF6+OgywDxAIdXpO7EsyfYvwD8Qxh99z7QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDhhstSxVVnQvw3HX8hQJNsIVR0uMB8GA1UdIwQY MBaAFCAxvH9xuw0ahWb9RgQhRQfA1HEbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSURHOGYzRzdEUnFGWnYxR0JDRkZCOERVY1JzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OS9iNDE1MTktNDZmYy00NGRhLWE5YWYt ZTNmNGJiY2JiYmQ3LzEvSURHOGYzRzdEUnFGWnYxR0JDRkZCOERVY1JzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84OS9iNDE1MTktNDZmYy00NGRhLWE5YWYtZTNmNGJiY2JiYmQ3 LzEvSURHOGYzRzdEUnFGWnYxR0JDRkZCOERVY1JzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUIosAWgj KJNHjaTvFJ5qsDYo5GlOcUqhF6HnMfPPzehJ007j7ogP3I85vD/v8TV6T0N4c7cR WdgXF2vjnSTyDVw/qmlKOBctGrVJ+YYzqCiPFp/YASF1jTxJZtaaqxiKTgIS70ZB Twink4KC0/LgOt+z6QIDHCmvqV8zCcfl8J3V+U8RDCYiVG1sbPbezybaM1KaSdZz Ea8G/Cpnbyc82Ed09wKLjLJweGH6u4coW9TYQYmGMK22JBJxCFsgwUef4sfO6hon 9cQdR7cRC9NqLGF2P4Eg6+WChCg66eKO3p3u0KppOwgIwDsgMDSS3QZE4VFY5EOY SiaZgdk6GozvPg== -----END CERTIFICATE-----Generated at Sat Dec 6 07:24:36 2025 by rpki-client