This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/0b35c5-8990-4e76-aeee-fcaf4cdd1663/1/IPtKDEbqkecGD7KUJqEyM4UmhJU.mft File: IPtKDEbqkecGD7KUJqEyM4UmhJU.mft (raw, json) Hash identifier: AD4+kZjp6nq8s1/wyXrQhD+m8v3lDYw2mYcsvToGnow= Subject key identifier: 08:ED:B1:E8:AF:AF:B4:D8:8B:87:CB:67:AB:21:8D:2F:9B:63:4A:FF Authority key identifier: 20:FB:4A:0C:46:EA:91:E7:06:0F:B2:94:26:A1:32:33:85:26:84:95 Certificate issuer: /CN=20fb4a0c46ea91e7060fb29426a1323385268495 Certificate serial: 019AF19B21EF1D73F7ABAF6237A49F594713 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IPtKDEbqkecGD7KUJqEyM4UmhJU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/0b35c5-8990-4e76-aeee-fcaf4cdd1663/1/IPtKDEbqkecGD7KUJqEyM4UmhJU.mft Manifest number: 06BD Signing time: Sat 06 Dec 2025 03:01:07 +0000 Manifest this update: Sat 06 Dec 2025 03:01:07 +0000 Manifest next update: Sun 07 Dec 2025 03:01:07 +0000 Files and hashes: 1: IPtKDEbqkecGD7KUJqEyM4UmhJU.crl (hash: 3N4QR97x6VYa4zfG2japBWATfpWAOrdS95r0OW9IxTM=) 2: VHq92EwfoMDVXDmr3YDQVJFW754.roa (hash: JpzdYMai2LkiTqQiR+iyiuscebR4y7kmN03dvpWGwHk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/0b35c5-8990-4e76-aeee-fcaf4cdd1663/1/IPtKDEbqkecGD7KUJqEyM4UmhJU.crl rsync://rpki.ripe.net/repository/DEFAULT/a9/0b35c5-8990-4e76-aeee-fcaf4cdd1663/1/IPtKDEbqkecGD7KUJqEyM4UmhJU.mft rsync://rpki.ripe.net/repository/DEFAULT/IPtKDEbqkecGD7KUJqEyM4UmhJU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9b:21:ef:1d:73:f7:ab:af:62:37:a4:9f:59:47:13 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=20fb4a0c46ea91e7060fb29426a1323385268495 Validity Not Before: Dec 6 03:01:07 2025 GMT Not After : Dec 7 03:01:07 2025 GMT Subject: CN=08edb1e8afafb4d88b87cb67ab218d2f9b634aff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:63:82:34:b5:f8:57:41:44:0d:96:0f:7e:86: 6b:2f:c4:38:b0:aa:8b:e5:06:3c:1c:a2:d4:ff:74: 28:91:b8:ae:5b:88:73:f9:05:b5:ac:ef:d7:ff:d5: 6a:e6:20:64:e2:47:3c:97:5b:40:15:b7:46:b9:b0: cb:71:88:b1:c0:f2:e9:86:f9:42:3d:50:f1:ce:1e: 59:0f:8e:7e:f0:06:70:02:35:d5:9d:cc:3d:7b:4f: a8:29:a9:24:14:20:58:b7:87:0a:20:ed:2d:bd:fc: c3:94:e5:f6:b2:cd:d5:1e:50:f2:21:de:21:51:48: 4f:9a:12:ab:ad:7a:78:56:b8:6f:18:92:44:60:9f: 42:eb:d8:16:a0:61:99:a6:71:d7:23:7a:31:55:5e: 24:5d:3a:45:50:f2:ee:cc:62:28:cb:c3:08:d0:0f: b8:6c:a4:c0:c9:1c:c8:f6:bc:fe:63:63:9e:f7:5c: 5e:77:0d:ce:63:3e:55:1e:bd:87:91:c5:e4:2a:fc: fb:c6:ba:29:30:dc:58:99:72:ba:2d:05:ed:de:df: 9b:cd:b4:f7:8b:36:20:6c:c0:ea:a4:3e:f5:89:77: 3a:27:ad:f8:6d:cb:e6:10:ad:15:ba:ec:c4:f4:ce: d4:b1:91:d2:b4:c3:f2:3c:74:7e:b3:49:01:bc:2a: 35:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:ED:B1:E8:AF:AF:B4:D8:8B:87:CB:67:AB:21:8D:2F:9B:63:4A:FF X509v3 Authority Key Identifier: keyid:20:FB:4A:0C:46:EA:91:E7:06:0F:B2:94:26:A1:32:33:85:26:84:95 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IPtKDEbqkecGD7KUJqEyM4UmhJU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/0b35c5-8990-4e76-aeee-fcaf4cdd1663/1/IPtKDEbqkecGD7KUJqEyM4UmhJU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/0b35c5-8990-4e76-aeee-fcaf4cdd1663/1/IPtKDEbqkecGD7KUJqEyM4UmhJU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 37:7a:b0:8e:ed:3a:e3:45:08:cf:52:39:f3:b8:a0:c0:c2:6b: 8a:c8:65:f8:42:66:00:b9:d7:08:e0:e5:ef:08:e1:a7:8d:cc: c6:83:4d:0b:6c:37:bd:83:fa:94:b4:20:57:db:58:16:27:b2: 32:c7:f1:ea:65:36:c9:26:e7:64:78:ef:00:21:99:47:2f:87: 83:4d:34:07:35:b5:f9:fd:8e:9a:5b:cf:6c:45:45:c0:9e:ee: 96:a2:fd:95:9e:5a:37:f3:95:ee:81:f0:ed:c3:c1:6b:43:3c: 2b:8c:f0:fa:33:70:cf:37:cc:15:73:ab:02:d1:99:1c:ac:06: 17:ae:73:3c:3f:ca:67:0c:26:b8:fa:34:91:dc:a7:49:c5:c1: c0:63:e3:80:8f:f6:3d:fb:43:67:18:6d:3a:10:12:2f:eb:67: b9:88:6d:06:89:94:59:22:d1:e0:95:96:76:db:7e:26:fa:62: 44:72:f5:1e:61:f1:c5:5f:76:58:20:eb:83:28:8d:10:87:e8: d6:e2:67:7d:19:10:a5:f0:07:44:2c:22:e5:73:24:e8:4e:55: 4a:5a:30:50:66:84:7a:1b:61:b5:2c:2f:1b:f3:f8:8e:a3:48: a6:ff:70:ba:4f:eb:2a:8a:35:46:82:ee:1a:cd:3e:d7:3c:c3: 29:ad:d4:1b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxmyHvHXP3q69iN6SfWUcTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIwZmI0YTBjNDZlYTkxZTcwNjBmYjI5NDI2YTEzMjMzODUy Njg0OTUwHhcNMjUxMjA2MDMwMTA3WhcNMjUxMjA3MDMwMTA3WjAzMTEwLwYDVQQD EygwOGVkYjFlOGFmYWZiNGQ4OGI4N2NiNjdhYjIxOGQyZjliNjM0YWZmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsmOCNLX4V0FEDZYPfoZrL8Q4sKqL 5QY8HKLU/3QokbiuW4hz+QW1rO/X/9Vq5iBk4kc8l1tAFbdGubDLcYixwPLphvlC PVDxzh5ZD45+8AZwAjXVncw9e0+oKakkFCBYt4cKIO0tvfzDlOX2ss3VHlDyId4h UUhPmhKrrXp4VrhvGJJEYJ9C69gWoGGZpnHXI3oxVV4kXTpFUPLuzGIoy8MI0A+4 bKTAyRzI9rz+Y2Oe91xedw3OYz5VHr2HkcXkKvz7xropMNxYmXK6LQXt3t+bzbT3 izYgbMDqpD71iXc6J634bcvmEK0VuuzE9M7UsZHStMPyPHR+s0kBvCo10QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAjtseivr7TYi4fLZ6shjS+bY0r/MB8GA1UdIwQY MBaAFCD7SgxG6pHnBg+ylCahMjOFJoSVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSVB0S0RFYnFrZWNHRDdLVUpxRXlNNFVtaEpVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOS8wYjM1YzUtODk5MC00ZTc2LWFlZWUt ZmNhZjRjZGQxNjYzLzEvSVB0S0RFYnFrZWNHRDdLVUpxRXlNNFVtaEpVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hOS8wYjM1YzUtODk5MC00ZTc2LWFlZWUtZmNhZjRjZGQxNjYz LzEvSVB0S0RFYnFrZWNHRDdLVUpxRXlNNFVtaEpVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAN3qwju06 40UIz1I587igwMJrishl+EJmALnXCODl7wjhp43MxoNNC2w3vYP6lLQgV9tYFiey Msfx6mU2ySbnZHjvACGZRy+Hg000BzW1+f2OmlvPbEVFwJ7ulqL9lZ5aN/OV7oHw 7cPBa0M8K4zw+jNwzzfMFXOrAtGZHKwGF65zPD/KZwwmuPo0kdynScXBwGPjgI/2 PftDZxhtOhASL+tnuYhtBomUWSLR4JWWdtt+JvpiRHL1HmHxxV92WCDrgyiNEIfo 1uJnfRkQpfAHRCwi5XMk6E5VSlowUGaEehthtSwvG/P4jqNIpv9wuk/rKoo1RoLu Gs0+1zzDKa3UGw== -----END CERTIFICATE-----Generated at Sat Dec 6 08:23:05 2025 by rpki-client