This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/490c50-6c07-4646-9bd2-8cf115aa2cc3/1/IfwUL311pxS5rMZT0LXO0zfKRJU.mft File: IfwUL311pxS5rMZT0LXO0zfKRJU.mft (raw, json) Hash identifier: IBXrfe95AfQJCCCFJySsDsqND4ZEEaX0jb68x7NAF3g= Subject key identifier: 2E:4B:56:54:F4:A0:8A:A7:12:E3:6D:2A:11:5B:98:5D:69:C6:2B:70 Authority key identifier: 21:FC:14:2F:7D:75:A7:14:B9:AC:C6:53:D0:B5:CE:D3:37:CA:44:95 Certificate issuer: /CN=21fc142f7d75a714b9acc653d0b5ced337ca4495 Certificate serial: 019AF1D1ADBB4B79C271364FAFFA7B833AB0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IfwUL311pxS5rMZT0LXO0zfKRJU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/490c50-6c07-4646-9bd2-8cf115aa2cc3/1/IfwUL311pxS5rMZT0LXO0zfKRJU.mft Manifest number: 175F Signing time: Sat 06 Dec 2025 04:00:41 +0000 Manifest this update: Sat 06 Dec 2025 04:00:41 +0000 Manifest next update: Sun 07 Dec 2025 04:00:41 +0000 Files and hashes: 1: IfwUL311pxS5rMZT0LXO0zfKRJU.crl (hash: Ru3x7J0Jne5uiUyZsXAmsYb9WA7OCnBFjNM1jRENVRM=) 2: UipKreH4zZ-JKObDVFkMEdQTy8E.roa (hash: 2lFb7AbIOkpByp+mzj8V6olwzUC3cjME2INFe+siQFg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/490c50-6c07-4646-9bd2-8cf115aa2cc3/1/IfwUL311pxS5rMZT0LXO0zfKRJU.crl rsync://rpki.ripe.net/repository/DEFAULT/a0/490c50-6c07-4646-9bd2-8cf115aa2cc3/1/IfwUL311pxS5rMZT0LXO0zfKRJU.mft rsync://rpki.ripe.net/repository/DEFAULT/IfwUL311pxS5rMZT0LXO0zfKRJU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 04:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d1:ad:bb:4b:79:c2:71:36:4f:af:fa:7b:83:3a:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=21fc142f7d75a714b9acc653d0b5ced337ca4495 Validity Not Before: Dec 6 04:00:41 2025 GMT Not After : Dec 7 04:00:41 2025 GMT Subject: CN=2e4b5654f4a08aa712e36d2a115b985d69c62b70 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:bb:b3:f8:37:dd:89:e2:7a:65:94:31:db:68: a7:96:de:49:ad:75:b0:ab:63:02:d6:f5:ff:12:c1: bc:d1:0b:be:10:5d:c4:d6:c8:94:00:3c:0f:91:a5: 6c:c8:47:9e:3b:09:a8:bb:4f:d0:f6:2d:5a:94:4d: c1:b0:63:d0:54:c7:e0:6f:aa:e4:d8:c2:04:b1:80: bd:5e:5f:cf:38:f6:7f:db:0c:9d:5e:a6:f1:13:68: db:d4:c3:59:32:f2:94:ec:eb:4f:d6:c5:39:b5:d1: cc:73:ff:d7:53:16:cd:a4:36:6a:4b:d2:7c:06:8b: fe:1a:8a:b7:29:d3:5b:05:6b:d5:a9:a8:fb:dc:8b: 49:10:1a:4e:27:c1:07:1f:5f:a7:bf:66:80:15:ed: 09:23:5f:fd:5c:cc:0e:de:f8:8f:eb:3d:f9:85:36: cf:0b:1d:c5:a4:60:fb:a6:8a:6d:0c:0f:87:c8:45: fa:71:55:e2:6c:e6:63:b4:bb:10:c4:38:d2:3e:68: 79:30:fe:d8:b6:a2:16:95:f3:fc:79:cc:59:a0:1f: 70:b7:04:40:80:ff:16:cb:e3:09:04:9b:61:0d:95: a2:bd:c4:5a:84:ba:70:f1:d9:38:bd:a8:99:ef:b6: f7:53:d8:57:c7:1e:91:1d:4f:6b:4d:48:54:e2:09: 9e:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:4B:56:54:F4:A0:8A:A7:12:E3:6D:2A:11:5B:98:5D:69:C6:2B:70 X509v3 Authority Key Identifier: keyid:21:FC:14:2F:7D:75:A7:14:B9:AC:C6:53:D0:B5:CE:D3:37:CA:44:95 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IfwUL311pxS5rMZT0LXO0zfKRJU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/490c50-6c07-4646-9bd2-8cf115aa2cc3/1/IfwUL311pxS5rMZT0LXO0zfKRJU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/490c50-6c07-4646-9bd2-8cf115aa2cc3/1/IfwUL311pxS5rMZT0LXO0zfKRJU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 82:b6:5e:d6:36:a2:d2:59:87:5c:69:c8:a3:e2:f7:6b:ac:aa: a3:9c:bb:d9:b1:48:18:98:66:71:cb:72:21:64:5f:5a:1f:ec: 6e:c6:50:a9:a3:61:9e:d3:12:fe:6c:b5:8e:0a:d8:bc:67:ae: 7c:bb:b6:95:e7:83:41:10:2d:cd:d1:cb:5e:1d:a4:09:09:bc: a8:59:75:ee:e3:bc:53:f0:ed:eb:2b:6d:c4:1b:fb:da:60:a9: 00:57:84:32:6f:3c:e9:aa:ac:00:bd:7f:a8:9e:33:29:d6:2a: 7d:fd:38:9d:a3:0f:4f:93:52:eb:24:47:5d:a5:b7:86:83:5b: fb:23:9d:57:d7:b5:d3:99:e1:d9:71:86:0e:a7:70:f8:dc:3e: b4:1c:7f:56:a1:e2:c4:2a:a9:b8:b5:10:45:28:3f:ae:f6:79: d9:a8:d0:a2:d6:52:37:2a:47:57:59:42:60:63:1b:0d:e5:f3: 7c:59:db:00:36:d1:6b:33:ec:1b:33:28:e9:be:05:30:de:87: 28:c5:41:e8:cb:e8:6d:9d:77:21:34:be:25:cb:6e:ef:00:90: 41:e5:6c:9a:04:e1:46:76:f4:ba:f0:b3:58:7d:c2:0c:57:af: 88:c3:4c:d1:c2:6e:75:6f:e8:6e:e5:52:e8:2c:d7:1f:79:c7: 8f:06:60:a3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0a27S3nCcTZPr/p7gzqwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIxZmMxNDJmN2Q3NWE3MTRiOWFjYzY1M2QwYjVjZWQzMzdj YTQ0OTUwHhcNMjUxMjA2MDQwMDQxWhcNMjUxMjA3MDQwMDQxWjAzMTEwLwYDVQQD EygyZTRiNTY1NGY0YTA4YWE3MTJlMzZkMmExMTViOTg1ZDY5YzYyYjcwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmLuz+DfdieJ6ZZQx22inlt5JrXWw q2MC1vX/EsG80Qu+EF3E1siUADwPkaVsyEeeOwmou0/Q9i1alE3BsGPQVMfgb6rk 2MIEsYC9Xl/POPZ/2wydXqbxE2jb1MNZMvKU7OtP1sU5tdHMc//XUxbNpDZqS9J8 Bov+Goq3KdNbBWvVqaj73ItJEBpOJ8EHH1+nv2aAFe0JI1/9XMwO3viP6z35hTbP Cx3FpGD7poptDA+HyEX6cVXibOZjtLsQxDjSPmh5MP7YtqIWlfP8ecxZoB9wtwRA gP8Wy+MJBJthDZWivcRahLpw8dk4vaiZ77b3U9hXxx6RHU9rTUhU4gme+QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFC5LVlT0oIqnEuNtKhFbmF1pxitwMB8GA1UdIwQY MBaAFCH8FC99dacUuazGU9C1ztM3ykSVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSWZ3VUwzMTFweFM1ck1aVDBMWE8wemZLUkpVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMC80OTBjNTAtNmMwNy00NjQ2LTliZDIt OGNmMTE1YWEyY2MzLzEvSWZ3VUwzMTFweFM1ck1aVDBMWE8wemZLUkpVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMC80OTBjNTAtNmMwNy00NjQ2LTliZDItOGNmMTE1YWEyY2Mz LzEvSWZ3VUwzMTFweFM1ck1aVDBMWE8wemZLUkpVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgrZe1jai 0lmHXGnIo+L3a6yqo5y72bFIGJhmcctyIWRfWh/sbsZQqaNhntMS/my1jgrYvGeu fLu2leeDQRAtzdHLXh2kCQm8qFl17uO8U/Dt6yttxBv72mCpAFeEMm886aqsAL1/ qJ4zKdYqff04naMPT5NS6yRHXaW3hoNb+yOdV9e105nh2XGGDqdw+Nw+tBx/VqHi xCqpuLUQRSg/rvZ52ajQotZSNypHV1lCYGMbDeXzfFnbADbRazPsGzMo6b4FMN6H KMVB6MvobZ13ITS+Jctu7wCQQeVsmgThRnb0uvCzWH3CDFeviMNM0cJudW/obuVS 6CzXH3nHjwZgow== -----END CERTIFICATE-----Generated at Sat Dec 6 15:29:14 2025 by rpki-client