This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/bf69c4-d64a-4340-9bf1-364854cbc0e8/1/ikHi8tFFLnxMwH2_p4OdWN9X8hg.mft File: ikHi8tFFLnxMwH2_p4OdWN9X8hg.mft (raw, json) Hash identifier: letY0xo1/GdIpXKUOAU7ji8LGrX8i/uxoPha2xgW/hw= Subject key identifier: 79:00:27:A3:45:C3:F8:53:24:C8:FE:DF:6B:28:85:7A:46:7F:BC:33 Authority key identifier: 8A:41:E2:F2:D1:45:2E:7C:4C:C0:7D:BF:A7:83:9D:58:DF:57:F2:18 Certificate issuer: /CN=8a41e2f2d1452e7c4cc07dbfa7839d58df57f218 Certificate serial: 019AF31C2B98C442B8A2E3246B76480D363F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ikHi8tFFLnxMwH2_p4OdWN9X8hg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/bf69c4-d64a-4340-9bf1-364854cbc0e8/1/ikHi8tFFLnxMwH2_p4OdWN9X8hg.mft Manifest number: 175E Signing time: Sat 06 Dec 2025 10:01:40 +0000 Manifest this update: Sat 06 Dec 2025 10:01:40 +0000 Manifest next update: Sun 07 Dec 2025 10:01:40 +0000 Files and hashes: 1: ikHi8tFFLnxMwH2_p4OdWN9X8hg.crl (hash: iO0YAu73kZHh++Usqxke/FfZaLBIEQvtBQHHnpGEwnE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/bf69c4-d64a-4340-9bf1-364854cbc0e8/1/ikHi8tFFLnxMwH2_p4OdWN9X8hg.crl rsync://rpki.ripe.net/repository/DEFAULT/a0/bf69c4-d64a-4340-9bf1-364854cbc0e8/1/ikHi8tFFLnxMwH2_p4OdWN9X8hg.mft rsync://rpki.ripe.net/repository/DEFAULT/ikHi8tFFLnxMwH2_p4OdWN9X8hg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1c:2b:98:c4:42:b8:a2:e3:24:6b:76:48:0d:36:3f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8a41e2f2d1452e7c4cc07dbfa7839d58df57f218 Validity Not Before: Dec 6 10:01:40 2025 GMT Not After : Dec 7 10:01:40 2025 GMT Subject: CN=790027a345c3f85324c8fedf6b28857a467fbc33 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:44:83:53:e7:8d:69:ff:c4:0c:ef:b8:fc:15: b4:e0:73:e4:3b:30:9a:a2:d6:7b:41:71:9b:c1:17: 1c:fe:ca:2a:2b:6b:cc:1f:f9:62:4b:38:5a:f1:29: b7:ee:b0:e8:88:e6:9b:ab:0b:26:0a:ab:e8:89:3d: da:89:21:df:5f:28:2a:2f:cc:23:09:23:f2:81:06: 95:80:ea:b6:b1:42:1a:39:bc:3d:34:24:81:17:6d: 0b:47:b1:11:61:8c:a7:88:3a:8e:36:53:be:15:18: c5:86:32:ce:c5:ed:d3:3a:39:88:61:c0:0f:fb:7c: 64:5e:94:58:1c:f6:08:e4:e9:b9:ad:05:6b:99:d6: d6:15:97:41:3b:44:a8:d6:4b:47:5f:39:c0:c8:ae: 48:86:42:af:63:be:8e:e9:ac:60:d6:35:43:ab:b9: ff:f1:b7:ae:7b:3b:55:4c:78:0a:db:d5:2d:93:e6: eb:15:9b:e9:ea:69:7c:8a:42:fb:ff:40:26:a7:95: b4:71:ea:39:d9:bd:5e:4f:d0:52:5d:83:f1:b2:3a: f2:dd:dc:54:fe:fe:f4:87:eb:21:dc:02:ac:a3:a7: ee:bd:b0:61:b3:42:a0:48:a8:49:e7:de:1e:fb:e3: 82:c3:ad:8d:53:e4:94:e1:ec:a7:7a:69:58:6d:23: 22:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:00:27:A3:45:C3:F8:53:24:C8:FE:DF:6B:28:85:7A:46:7F:BC:33 X509v3 Authority Key Identifier: keyid:8A:41:E2:F2:D1:45:2E:7C:4C:C0:7D:BF:A7:83:9D:58:DF:57:F2:18 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ikHi8tFFLnxMwH2_p4OdWN9X8hg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/bf69c4-d64a-4340-9bf1-364854cbc0e8/1/ikHi8tFFLnxMwH2_p4OdWN9X8hg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/bf69c4-d64a-4340-9bf1-364854cbc0e8/1/ikHi8tFFLnxMwH2_p4OdWN9X8hg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 90:cf:5a:9d:71:63:dc:2a:fa:f3:9f:a5:c8:9b:15:f5:9d:5e: a9:88:80:b8:7c:1e:c4:f5:c6:93:d3:f1:ea:0d:6c:3e:49:6e: 45:1f:bc:c6:7f:ed:2f:b3:cf:07:a9:f7:57:8c:c9:6c:81:6e: 72:66:ef:37:1d:18:89:44:56:c9:69:4e:d3:76:5c:72:09:44: ab:a6:ff:79:12:fe:b9:30:d8:d2:e9:57:cc:84:94:5e:b5:9c: 9b:56:d3:b0:9a:3e:48:1e:63:9d:65:3d:80:63:71:04:4a:6b: 4f:22:b7:97:a9:5a:72:19:1d:c1:02:fc:9c:48:7d:43:97:fc: 8d:b7:b4:b1:c8:01:a7:0c:7c:7b:c2:39:a7:00:cb:6d:a7:4e: 2f:6f:cc:63:6f:69:29:44:52:f7:0e:3e:8a:3b:98:fc:78:08: 58:b8:be:41:13:00:02:c2:f2:09:a9:b5:08:c3:29:38:6f:6d: 7b:00:52:38:bd:2a:4f:8d:b8:f7:0f:a4:15:a8:39:a1:54:14: b7:f0:3c:5f:72:ce:a2:90:a4:e6:de:ba:17:50:a6:41:e8:bb: e5:e7:8e:bd:96:10:de:65:7e:a9:44:84:9d:e0:28:a4:99:fe: 6f:18:76:05:07:81:f2:a7:61:6c:99:32:6d:33:f7:d0:2c:1c: 0b:59:da:c2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzHCuYxEK4ouMka3ZIDTY/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhhNDFlMmYyZDE0NTJlN2M0Y2MwN2RiZmE3ODM5ZDU4ZGY1 N2YyMTgwHhcNMjUxMjA2MTAwMTQwWhcNMjUxMjA3MTAwMTQwWjAzMTEwLwYDVQQD Eyg3OTAwMjdhMzQ1YzNmODUzMjRjOGZlZGY2YjI4ODU3YTQ2N2ZiYzMzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp0SDU+eNaf/EDO+4/BW04HPkOzCa otZ7QXGbwRcc/soqK2vMH/liSzha8Sm37rDoiOabqwsmCqvoiT3aiSHfXygqL8wj CSPygQaVgOq2sUIaObw9NCSBF20LR7ERYYyniDqONlO+FRjFhjLOxe3TOjmIYcAP +3xkXpRYHPYI5Om5rQVrmdbWFZdBO0So1ktHXznAyK5IhkKvY76O6axg1jVDq7n/ 8beueztVTHgK29Utk+brFZvp6ml8ikL7/0Amp5W0ceo52b1eT9BSXYPxsjry3dxU /v70h+sh3AKso6fuvbBhs0KgSKhJ594e++OCw62NU+SU4eynemlYbSMiVQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHkAJ6NFw/hTJMj+32sohXpGf7wzMB8GA1UdIwQY MBaAFIpB4vLRRS58TMB9v6eDnVjfV/IYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaWtIaTh0RkZMbnhNd0gyX3A0T2RXTjlYOGhnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMC9iZjY5YzQtZDY0YS00MzQwLTliZjEt MzY0ODU0Y2JjMGU4LzEvaWtIaTh0RkZMbnhNd0gyX3A0T2RXTjlYOGhnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMC9iZjY5YzQtZDY0YS00MzQwLTliZjEtMzY0ODU0Y2JjMGU4 LzEvaWtIaTh0RkZMbnhNd0gyX3A0T2RXTjlYOGhnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkM9anXFj 3Cr685+lyJsV9Z1eqYiAuHwexPXGk9Px6g1sPkluRR+8xn/tL7PPB6n3V4zJbIFu cmbvNx0YiURWyWlO03ZccglEq6b/eRL+uTDY0ulXzISUXrWcm1bTsJo+SB5jnWU9 gGNxBEprTyK3l6lachkdwQL8nEh9Q5f8jbe0scgBpwx8e8I5pwDLbadOL2/MY29p KURS9w4+ijuY/HgIWLi+QRMAAsLyCam1CMMpOG9tewBSOL0qT4249w+kFag5oVQU t/A8X3LOopCk5t66F1CmQei75eeOvZYQ3mV+qUSEneAopJn+bxh2BQeB8qdhbJky bTP30CwcC1nawg== -----END CERTIFICATE-----Generated at Sat Dec 6 12:45:29 2025 by rpki-client