This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/5ff708-cb7a-41e9-9093-1d00ea841d3e/1/INyR5mZJTQ3FaiuB0imr1u41-Ew.mft File: INyR5mZJTQ3FaiuB0imr1u41-Ew.mft (raw, json) Hash identifier: KBAXl9BD7DVf00OSXH6CeZiOm5n6gGAswT8fruO9fBo= Subject key identifier: 47:2D:58:58:66:0B:AD:53:12:D7:F9:36:40:B4:7F:E0:9A:D4:AC:14 Authority key identifier: 20:DC:91:E6:66:49:4D:0D:C5:6A:2B:81:D2:29:AB:D6:EE:35:F8:4C Certificate issuer: /CN=20dc91e666494d0dc56a2b81d229abd6ee35f84c Certificate serial: 019AF12D63A740C710A45989161F232852F5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/INyR5mZJTQ3FaiuB0imr1u41-Ew.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/5ff708-cb7a-41e9-9093-1d00ea841d3e/1/INyR5mZJTQ3FaiuB0imr1u41-Ew.mft Manifest number: 175C Signing time: Sat 06 Dec 2025 01:01:14 +0000 Manifest this update: Sat 06 Dec 2025 01:01:14 +0000 Manifest next update: Sun 07 Dec 2025 01:01:14 +0000 Files and hashes: 1: INyR5mZJTQ3FaiuB0imr1u41-Ew.crl (hash: ddPn6ETudoRSITfLuRxnywkH5z2n/440xhYcRJ10v9A=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/5ff708-cb7a-41e9-9093-1d00ea841d3e/1/INyR5mZJTQ3FaiuB0imr1u41-Ew.crl rsync://rpki.ripe.net/repository/DEFAULT/b3/5ff708-cb7a-41e9-9093-1d00ea841d3e/1/INyR5mZJTQ3FaiuB0imr1u41-Ew.mft rsync://rpki.ripe.net/repository/DEFAULT/INyR5mZJTQ3FaiuB0imr1u41-Ew.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:01:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2d:63:a7:40:c7:10:a4:59:89:16:1f:23:28:52:f5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=20dc91e666494d0dc56a2b81d229abd6ee35f84c Validity Not Before: Dec 6 01:01:14 2025 GMT Not After : Dec 7 01:01:14 2025 GMT Subject: CN=472d5858660bad5312d7f93640b47fe09ad4ac14 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:00:f2:85:ee:a9:be:2c:2e:29:ea:40:d8:cc: aa:8c:7e:c3:96:d4:65:e9:95:9d:1f:94:2a:3b:5e: 2d:1f:71:15:26:d2:50:aa:88:0a:d7:91:22:a7:7d: a1:76:3a:d8:9b:94:6f:e3:39:b0:bb:53:5a:a6:cf: 0e:e5:f5:83:69:c3:8c:ed:92:53:ea:7f:3c:ca:81: 74:6f:b1:29:22:c3:fe:1d:a4:bd:6f:e4:b5:08:eb: ca:0c:43:bb:09:b3:f2:27:08:80:6d:29:0e:5a:f5: c9:e8:c5:df:74:4c:c9:59:de:1c:bf:b8:c1:71:bc: 95:ae:80:f6:b5:b2:88:66:e5:30:91:e5:8d:e1:1f: 6a:0e:ca:97:0e:9b:d3:62:42:2a:13:6d:28:94:e4: 12:1e:b4:f4:58:e7:dc:44:fa:9b:1e:7a:77:d0:82: e2:1d:37:63:ee:04:f9:d1:43:b0:d7:61:e7:51:8a: 84:de:1d:17:42:e2:31:fe:fe:d1:b4:f2:12:67:34: ab:9b:07:7f:f7:d8:97:ae:39:d8:2e:a9:1b:28:19: ae:46:bf:ad:68:cb:b8:59:8f:de:fe:86:a2:0f:ac: 81:25:10:7d:54:be:fc:11:00:16:83:a1:97:a9:da: b9:b5:01:46:f8:96:0b:ad:ad:fc:f1:1a:fb:00:2b: 08:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:2D:58:58:66:0B:AD:53:12:D7:F9:36:40:B4:7F:E0:9A:D4:AC:14 X509v3 Authority Key Identifier: keyid:20:DC:91:E6:66:49:4D:0D:C5:6A:2B:81:D2:29:AB:D6:EE:35:F8:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/INyR5mZJTQ3FaiuB0imr1u41-Ew.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/5ff708-cb7a-41e9-9093-1d00ea841d3e/1/INyR5mZJTQ3FaiuB0imr1u41-Ew.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/5ff708-cb7a-41e9-9093-1d00ea841d3e/1/INyR5mZJTQ3FaiuB0imr1u41-Ew.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6f:9a:cf:16:9e:15:99:6c:a5:f3:5b:a8:4e:73:12:97:47:83: f0:d1:ec:7d:b8:d8:6c:18:75:21:38:d7:28:39:bf:69:ae:cf: de:07:44:76:37:b1:f5:1a:c5:0e:15:3d:24:d7:42:92:a9:64: 9d:60:85:ec:66:a7:bb:0c:58:ce:e7:b1:6f:e1:74:ce:e6:5d: 98:74:ad:f5:ee:e4:4a:d9:4e:5b:6b:a8:d7:4d:a1:65:5d:ba: 68:cb:8f:65:c9:df:75:12:11:ac:07:1e:3c:97:ca:6d:06:32: 84:ea:f7:87:22:97:5e:8f:98:d8:5b:b0:45:5c:43:1b:81:8f: fd:cd:b7:47:0c:4a:a5:31:bd:08:81:63:13:18:c9:f4:02:6f: 36:8e:db:78:9e:8b:3b:cf:f4:2a:9c:fa:11:75:85:0d:dd:af: ca:d6:c0:5a:c5:cb:aa:ab:92:01:8c:e9:db:18:5b:24:d7:8c: 34:1e:00:80:57:39:13:5d:99:3f:1d:4b:32:5a:25:bc:95:fd: 80:e9:d7:66:e6:25:58:cb:71:a5:4c:3d:9a:62:6d:85:e8:f7: c9:3d:cc:d7:22:a5:78:0a:48:f4:c9:9b:20:ec:9c:c0:1e:09: a6:df:23:54:e3:98:29:0d:b6:34:1d:c0:77:1e:4e:5c:4a:14: 65:e1:d8:05 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLWOnQMcQpFmJFh8jKFL1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIwZGM5MWU2NjY0OTRkMGRjNTZhMmI4MWQyMjlhYmQ2ZWUz NWY4NGMwHhcNMjUxMjA2MDEwMTE0WhcNMjUxMjA3MDEwMTE0WjAzMTEwLwYDVQQD Eyg0NzJkNTg1ODY2MGJhZDUzMTJkN2Y5MzY0MGI0N2ZlMDlhZDRhYzE0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6wDyhe6pviwuKepA2MyqjH7DltRl 6ZWdH5QqO14tH3EVJtJQqogK15Eip32hdjrYm5Rv4zmwu1Naps8O5fWDacOM7ZJT 6n88yoF0b7EpIsP+HaS9b+S1COvKDEO7CbPyJwiAbSkOWvXJ6MXfdEzJWd4cv7jB cbyVroD2tbKIZuUwkeWN4R9qDsqXDpvTYkIqE20olOQSHrT0WOfcRPqbHnp30ILi HTdj7gT50UOw12HnUYqE3h0XQuIx/v7RtPISZzSrmwd/99iXrjnYLqkbKBmuRr+t aMu4WY/e/oaiD6yBJRB9VL78EQAWg6GXqdq5tQFG+JYLra388Rr7ACsIPwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEctWFhmC61TEtf5NkC0f+Ca1KwUMB8GA1UdIwQY MBaAFCDckeZmSU0NxWorgdIpq9buNfhMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSU55UjVtWkpUUTNGYWl1QjBpbXIxdTQxLUV3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMy81ZmY3MDgtY2I3YS00MWU5LTkwOTMt MWQwMGVhODQxZDNlLzEvSU55UjVtWkpUUTNGYWl1QjBpbXIxdTQxLUV3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMy81ZmY3MDgtY2I3YS00MWU5LTkwOTMtMWQwMGVhODQxZDNl LzEvSU55UjVtWkpUUTNGYWl1QjBpbXIxdTQxLUV3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAb5rPFp4V mWyl81uoTnMSl0eD8NHsfbjYbBh1ITjXKDm/aa7P3gdEdjex9RrFDhU9JNdCkqlk nWCF7GanuwxYzuexb+F0zuZdmHSt9e7kStlOW2uo102hZV26aMuPZcnfdRIRrAce PJfKbQYyhOr3hyKXXo+Y2FuwRVxDG4GP/c23RwxKpTG9CIFjExjJ9AJvNo7beJ6L O8/0Kpz6EXWFDd2vytbAWsXLqquSAYzp2xhbJNeMNB4AgFc5E12ZPx1LMlolvJX9 gOnXZuYlWMtxpUw9mmJthej3yT3M1yKleApI9MmbIOycwB4Jpt8jVOOYKQ22NB3A dx5OXEoUZeHYBQ== -----END CERTIFICATE-----Generated at Sat Dec 6 10:21:36 2025 by rpki-client