This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/6efb44-012b-415f-8220-c6220e185694/1/IQdBCPDRRZtitsetsn1pNLoL56U.mft File: IQdBCPDRRZtitsetsn1pNLoL56U.mft (raw, json) Hash identifier: wFIqZfixzRTyOK9sSEFFA6qvObnw2XB4ijChT/X6ylI= Subject key identifier: B4:A7:4E:17:94:65:C5:EB:59:EC:3E:E0:32:AA:57:5C:37:C2:93:35 Authority key identifier: 21:07:41:08:F0:D1:45:9B:62:B6:C7:AD:B2:7D:69:34:BA:0B:E7:A5 Certificate issuer: /CN=21074108f0d1459b62b6c7adb27d6934ba0be7a5 Certificate serial: 019AF3C07C10F1A9000B2E4A80925119C2A3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IQdBCPDRRZtitsetsn1pNLoL56U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/6efb44-012b-415f-8220-c6220e185694/1/IQdBCPDRRZtitsetsn1pNLoL56U.mft Manifest number: 16F0 Signing time: Sat 06 Dec 2025 13:01:09 +0000 Manifest this update: Sat 06 Dec 2025 13:01:09 +0000 Manifest next update: Sun 07 Dec 2025 13:01:09 +0000 Files and hashes: 1: IQdBCPDRRZtitsetsn1pNLoL56U.crl (hash: ziVfBOSDRggrqN6+bYW/UhX13ljfbZurUGZqi8AkNv4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/6efb44-012b-415f-8220-c6220e185694/1/IQdBCPDRRZtitsetsn1pNLoL56U.crl rsync://rpki.ripe.net/repository/DEFAULT/90/6efb44-012b-415f-8220-c6220e185694/1/IQdBCPDRRZtitsetsn1pNLoL56U.mft rsync://rpki.ripe.net/repository/DEFAULT/IQdBCPDRRZtitsetsn1pNLoL56U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:01:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:c0:7c:10:f1:a9:00:0b:2e:4a:80:92:51:19:c2:a3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=21074108f0d1459b62b6c7adb27d6934ba0be7a5 Validity Not Before: Dec 6 13:01:09 2025 GMT Not After : Dec 7 13:01:09 2025 GMT Subject: CN=b4a74e179465c5eb59ec3ee032aa575c37c29335 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:e7:a1:c4:84:d5:d8:5e:0b:6a:ea:ba:02:c9: d6:41:76:7c:86:fc:3b:e0:b8:29:6d:e3:59:2f:9f: 7a:2a:fb:03:52:d4:da:10:44:31:81:ac:97:ac:67: f7:d8:df:73:80:62:b7:37:53:c8:b0:d7:96:da:c0: e1:b4:e4:80:f1:62:60:51:fc:72:10:eb:c3:8a:31: e8:50:d2:68:5a:93:2e:16:8e:b1:98:2e:cf:60:8a: 9b:8d:a8:78:82:d5:0d:85:e0:3d:cd:4a:75:56:c2: 66:b1:49:9c:50:00:71:aa:42:f4:52:70:99:de:07: 8d:7b:af:1e:6c:99:34:53:2b:69:9a:87:96:29:7b: eb:b8:5d:e6:10:fb:5e:7c:88:92:40:30:0a:82:01: db:71:e9:40:78:95:66:89:a8:a5:af:b7:10:ac:a8: 5c:ee:99:92:5a:d6:5e:1e:89:f4:ca:1a:19:ec:58: 09:72:b9:fa:8f:ba:6a:ad:0d:dc:c0:50:31:08:02: 56:15:39:aa:c4:cf:99:b4:b6:04:6a:7a:c6:41:02: 14:da:f0:5d:1c:c5:ac:a2:9e:84:20:4f:c8:28:5f: e6:9e:9d:e4:1a:89:d1:a7:35:24:32:5a:21:4c:ef: f6:93:7c:e7:19:4a:87:c9:97:a5:4a:cb:40:7b:52: 68:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:A7:4E:17:94:65:C5:EB:59:EC:3E:E0:32:AA:57:5C:37:C2:93:35 X509v3 Authority Key Identifier: keyid:21:07:41:08:F0:D1:45:9B:62:B6:C7:AD:B2:7D:69:34:BA:0B:E7:A5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IQdBCPDRRZtitsetsn1pNLoL56U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/6efb44-012b-415f-8220-c6220e185694/1/IQdBCPDRRZtitsetsn1pNLoL56U.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/90/6efb44-012b-415f-8220-c6220e185694/1/IQdBCPDRRZtitsetsn1pNLoL56U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6f:80:e6:98:f1:92:03:52:77:6a:0e:46:59:83:75:5b:82:77: c4:8a:b8:80:6c:4e:61:71:1f:5b:44:0c:d4:e4:4e:b5:c8:36: a8:70:09:f8:45:53:a2:ca:63:87:ba:d1:e0:dd:1c:9b:df:37: 9f:14:57:f2:16:e8:67:18:77:b5:f6:25:e0:02:f1:21:f9:22: 16:3e:3f:4a:9b:fb:e0:03:c3:20:67:bb:8b:0d:2e:50:bd:f0: ea:e6:31:80:22:c3:76:19:9a:c1:4f:b0:7b:ca:d9:e4:e3:c6: de:63:47:90:67:2e:a1:cf:c8:1a:63:a2:13:94:ee:4f:92:b3: 03:a5:52:86:0f:35:4d:12:9b:ef:26:b4:57:b2:0a:b2:ae:8b: 21:76:59:c6:eb:3d:ac:7a:db:27:7c:12:b9:29:90:69:80:8b: 74:5b:5b:ed:7b:b0:ff:db:89:fe:7f:35:44:29:9d:26:3c:13: c8:7a:80:ec:23:a9:71:19:5c:cc:0a:e9:04:6d:c7:17:0e:63: 00:56:eb:2b:51:e4:ff:d9:8f:4b:44:fb:4f:64:11:4d:28:77: 5a:92:ff:be:b0:90:07:4a:c4:e7:29:fd:c6:af:36:2a:06:4f: 1f:ed:20:7d:18:70:b0:6f:b8:80:f0:11:09:37:9f:4e:8e:f7: 13:66:0c:d1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzwHwQ8akACy5KgJJRGcKjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIxMDc0MTA4ZjBkMTQ1OWI2MmI2YzdhZGIyN2Q2OTM0YmEw YmU3YTUwHhcNMjUxMjA2MTMwMTA5WhcNMjUxMjA3MTMwMTA5WjAzMTEwLwYDVQQD EyhiNGE3NGUxNzk0NjVjNWViNTllYzNlZTAzMmFhNTc1YzM3YzI5MzM1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmOehxITV2F4Lauq6AsnWQXZ8hvw7 4LgpbeNZL596KvsDUtTaEEQxgayXrGf32N9zgGK3N1PIsNeW2sDhtOSA8WJgUfxy EOvDijHoUNJoWpMuFo6xmC7PYIqbjah4gtUNheA9zUp1VsJmsUmcUABxqkL0UnCZ 3geNe68ebJk0UytpmoeWKXvruF3mEPtefIiSQDAKggHbcelAeJVmiailr7cQrKhc 7pmSWtZeHon0yhoZ7FgJcrn6j7pqrQ3cwFAxCAJWFTmqxM+ZtLYEanrGQQIU2vBd HMWsop6EIE/IKF/mnp3kGonRpzUkMlohTO/2k3znGUqHyZelSstAe1JooQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLSnTheUZcXrWew+4DKqV1w3wpM1MB8GA1UdIwQY MBaAFCEHQQjw0UWbYrbHrbJ9aTS6C+elMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSVFkQkNQRFJSWnRpdHNldHNuMXBOTG9MNTZVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MC82ZWZiNDQtMDEyYi00MTVmLTgyMjAt YzYyMjBlMTg1Njk0LzEvSVFkQkNQRFJSWnRpdHNldHNuMXBOTG9MNTZVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85MC82ZWZiNDQtMDEyYi00MTVmLTgyMjAtYzYyMjBlMTg1Njk0 LzEvSVFkQkNQRFJSWnRpdHNldHNuMXBOTG9MNTZVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAb4DmmPGS A1J3ag5GWYN1W4J3xIq4gGxOYXEfW0QM1OROtcg2qHAJ+EVTospjh7rR4N0cm983 nxRX8hboZxh3tfYl4ALxIfkiFj4/Spv74APDIGe7iw0uUL3w6uYxgCLDdhmawU+w e8rZ5OPG3mNHkGcuoc/IGmOiE5TuT5KzA6VShg81TRKb7ya0V7IKsq6LIXZZxus9 rHrbJ3wSuSmQaYCLdFtb7Xuw/9uJ/n81RCmdJjwTyHqA7COpcRlczArpBG3HFw5j AFbrK1Hk/9mPS0T7T2QRTSh3WpL/vrCQB0rE5yn9xq82KgZPH+0gfRhwsG+4gPAR CTefTo73E2YM0Q== -----END CERTIFICATE-----Generated at Sat Dec 6 20:29:44 2025 by rpki-client