This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/4e5c10-71ed-4deb-b4e0-19d57ff1fbd9/1/20iBY9r1DbZG3k3yTTTLrJk_RX8.mft File: 20iBY9r1DbZG3k3yTTTLrJk_RX8.mft (raw, json) Hash identifier: ebdBd3epWeza6q1yFIeT9toBwqoXvRqK7Ux/PLSZIU0= Subject key identifier: 37:EF:CA:47:A4:F4:3B:AB:E3:57:90:A0:11:A7:E6:BC:1E:A3:E1:8E Authority key identifier: DB:48:81:63:DA:F5:0D:B6:46:DE:4D:F2:4D:34:CB:AC:99:3F:45:7F Certificate issuer: /CN=db488163daf50db646de4df24d34cbac993f457f Certificate serial: 019AF276D9D21936A407EDEF91BDE330FE9F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/20iBY9r1DbZG3k3yTTTLrJk_RX8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/4e5c10-71ed-4deb-b4e0-19d57ff1fbd9/1/20iBY9r1DbZG3k3yTTTLrJk_RX8.mft Manifest number: 1760 Signing time: Sat 06 Dec 2025 07:01:06 +0000 Manifest this update: Sat 06 Dec 2025 07:01:06 +0000 Manifest next update: Sun 07 Dec 2025 07:01:06 +0000 Files and hashes: 1: 20iBY9r1DbZG3k3yTTTLrJk_RX8.crl (hash: +J0OLOwxryTB0uilyEMfBqUvZ4L3T5RDPXAevW3AyyY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/4e5c10-71ed-4deb-b4e0-19d57ff1fbd9/1/20iBY9r1DbZG3k3yTTTLrJk_RX8.crl rsync://rpki.ripe.net/repository/DEFAULT/b7/4e5c10-71ed-4deb-b4e0-19d57ff1fbd9/1/20iBY9r1DbZG3k3yTTTLrJk_RX8.mft rsync://rpki.ripe.net/repository/DEFAULT/20iBY9r1DbZG3k3yTTTLrJk_RX8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:76:d9:d2:19:36:a4:07:ed:ef:91:bd:e3:30:fe:9f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=db488163daf50db646de4df24d34cbac993f457f Validity Not Before: Dec 6 07:01:06 2025 GMT Not After : Dec 7 07:01:06 2025 GMT Subject: CN=37efca47a4f43babe35790a011a7e6bc1ea3e18e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:b9:ee:8d:3d:e9:e7:5a:ef:52:08:b3:d7:6e: 5a:42:81:c5:30:73:81:bb:e6:15:d8:e1:c7:50:31: 72:04:b5:21:8a:eb:0b:32:30:42:22:f7:f5:6f:45: bb:c6:9a:25:8f:7f:8f:db:e6:f9:e2:9c:a0:de:ed: 63:a8:41:47:0a:9a:a0:be:47:8a:6e:1a:48:9a:80: ff:57:e1:f6:b4:b5:3b:2c:3d:fe:20:86:cc:37:32: ef:37:71:7d:a9:55:49:2c:80:15:33:3a:70:78:8e: 3b:22:d5:c3:5a:e0:f1:4d:c1:83:67:90:1d:f9:0a: 04:41:38:94:c9:f0:d8:0e:8c:57:3c:51:00:b9:f6: 7c:16:26:d3:43:70:bd:b9:97:8f:11:fe:50:c4:4b: 81:2b:37:21:2c:c1:ea:39:e9:ee:ff:ef:4d:95:59: 08:79:a7:41:5a:26:8a:ce:07:e7:88:3b:3e:d1:4b: 9e:67:d9:4e:b2:00:eb:70:cf:3c:03:6b:42:a8:17: 72:89:f8:d1:d4:5f:00:59:89:da:3b:a6:a2:c5:0b: f2:fe:c7:c9:bc:da:56:cd:60:29:1d:0a:ff:ee:da: c0:03:0d:ba:85:52:4f:3e:ca:48:8f:18:e5:fc:1b: 35:bf:b3:12:c7:25:28:93:b8:81:ab:de:ae:7f:1a: 9c:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:EF:CA:47:A4:F4:3B:AB:E3:57:90:A0:11:A7:E6:BC:1E:A3:E1:8E X509v3 Authority Key Identifier: keyid:DB:48:81:63:DA:F5:0D:B6:46:DE:4D:F2:4D:34:CB:AC:99:3F:45:7F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/20iBY9r1DbZG3k3yTTTLrJk_RX8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/4e5c10-71ed-4deb-b4e0-19d57ff1fbd9/1/20iBY9r1DbZG3k3yTTTLrJk_RX8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/4e5c10-71ed-4deb-b4e0-19d57ff1fbd9/1/20iBY9r1DbZG3k3yTTTLrJk_RX8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5f:7c:f4:1b:9c:c6:85:03:cd:7d:ce:d5:38:fe:f4:c6:22:3a: e9:46:51:9c:34:34:d1:8d:32:d4:5c:cf:00:e1:e1:1f:de:54: 00:cb:f6:73:31:82:ee:32:ac:4e:7e:72:e6:7b:93:cb:3e:0e: b4:64:a7:cd:f4:52:6e:be:d6:39:a0:27:35:7d:59:6b:48:d0: 5d:26:f7:6d:6c:ac:b4:f1:2d:d1:86:9a:1f:c6:78:f0:9b:10: 59:41:c5:f2:d0:5c:82:82:ac:17:48:44:4b:96:9a:bd:ef:0d: c0:9d:bd:c9:f4:82:be:9d:1d:3f:75:f0:72:9f:ce:42:b9:53: bf:f3:b8:81:9b:dc:73:a8:6d:ee:98:e6:4b:1d:c9:a0:75:73: 44:cf:91:3d:b9:10:22:86:6c:66:28:3a:67:a1:b3:e4:bd:84: fb:47:0a:b0:4a:02:42:71:11:46:56:52:14:a0:b4:a5:2c:b1: 3c:29:33:29:87:b0:f0:53:55:90:ac:0e:bf:5e:bf:5a:84:e3: f8:c9:ca:4d:d2:91:53:3b:1b:56:cd:a3:1f:ad:e2:5f:33:44: d0:62:26:3b:63:fd:5d:74:da:b0:ea:88:a8:ca:56:62:2e:7d: 21:ba:7d:8c:b6:48:e7:c7:2c:e4:58:fb:22:d0:97:4a:dc:a7: 5f:6a:ee:a2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrydtnSGTakB+3vkb3jMP6fMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRiNDg4MTYzZGFmNTBkYjY0NmRlNGRmMjRkMzRjYmFjOTkz ZjQ1N2YwHhcNMjUxMjA2MDcwMTA2WhcNMjUxMjA3MDcwMTA2WjAzMTEwLwYDVQQD EygzN2VmY2E0N2E0ZjQzYmFiZTM1NzkwYTAxMWE3ZTZiYzFlYTNlMThlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz7nujT3p51rvUgiz125aQoHFMHOB u+YV2OHHUDFyBLUhiusLMjBCIvf1b0W7xpolj3+P2+b54pyg3u1jqEFHCpqgvkeK bhpImoD/V+H2tLU7LD3+IIbMNzLvN3F9qVVJLIAVMzpweI47ItXDWuDxTcGDZ5Ad +QoEQTiUyfDYDoxXPFEAufZ8FibTQ3C9uZePEf5QxEuBKzchLMHqOenu/+9NlVkI eadBWiaKzgfniDs+0UueZ9lOsgDrcM88A2tCqBdyifjR1F8AWYnaO6aixQvy/sfJ vNpWzWApHQr/7trAAw26hVJPPspIjxjl/Bs1v7MSxyUok7iBq96ufxqcvQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDfvykek9Dur41eQoBGn5rweo+GOMB8GA1UdIwQY MBaAFNtIgWPa9Q22Rt5N8k00y6yZP0V/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMjBpQlk5cjFEYlpHM2szeVRUVExySmtfUlg4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNy80ZTVjMTAtNzFlZC00ZGViLWI0ZTAt MTlkNTdmZjFmYmQ5LzEvMjBpQlk5cjFEYlpHM2szeVRUVExySmtfUlg4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNy80ZTVjMTAtNzFlZC00ZGViLWI0ZTAtMTlkNTdmZjFmYmQ5 LzEvMjBpQlk5cjFEYlpHM2szeVRUVExySmtfUlg4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAX3z0G5zG hQPNfc7VOP70xiI66UZRnDQ00Y0y1FzPAOHhH95UAMv2czGC7jKsTn5y5nuTyz4O tGSnzfRSbr7WOaAnNX1Za0jQXSb3bWystPEt0YaaH8Z48JsQWUHF8tBcgoKsF0hE S5aave8NwJ29yfSCvp0dP3Xwcp/OQrlTv/O4gZvcc6ht7pjmSx3JoHVzRM+RPbkQ IoZsZig6Z6Gz5L2E+0cKsEoCQnERRlZSFKC0pSyxPCkzKYew8FNVkKwOv16/WoTj +MnKTdKRUzsbVs2jH63iXzNE0GImO2P9XXTasOqIqMpWYi59Ibp9jLZI58cs5Fj7 ItCXStynX2ruog== -----END CERTIFICATE-----Generated at Sat Dec 6 09:59:15 2025 by rpki-client