This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/d50528-a020-43c6-8d06-5730efb58774/1/i5lZUf0Cf8c5sEUTuPjWvGeEGMA.mft File: i5lZUf0Cf8c5sEUTuPjWvGeEGMA.mft (raw, json) Hash identifier: V1CqW7b7ilSLvRRs/rEpFO9jZNf7skHEpnXP8wO/BaA= Subject key identifier: 3C:39:84:B1:E3:89:FE:22:0A:C3:C0:18:70:66:29:48:99:8D:78:B1 Authority key identifier: 8B:99:59:51:FD:02:7F:C7:39:B0:45:13:B8:F8:D6:BC:67:84:18:C0 Certificate issuer: /CN=8b995951fd027fc739b04513b8f8d6bc678418c0 Certificate serial: 019AF208FE68BB2C3BA782BCE740E62A4BF2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i5lZUf0Cf8c5sEUTuPjWvGeEGMA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/d50528-a020-43c6-8d06-5730efb58774/1/i5lZUf0Cf8c5sEUTuPjWvGeEGMA.mft Manifest number: 15AE Signing time: Sat 06 Dec 2025 05:01:06 +0000 Manifest this update: Sat 06 Dec 2025 05:01:06 +0000 Manifest next update: Sun 07 Dec 2025 05:01:06 +0000 Files and hashes: 1: i5lZUf0Cf8c5sEUTuPjWvGeEGMA.crl (hash: t18lff51rZazzyWGpmD/cryS2OptnwYNGebsSRN6chg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/d50528-a020-43c6-8d06-5730efb58774/1/i5lZUf0Cf8c5sEUTuPjWvGeEGMA.crl rsync://rpki.ripe.net/repository/DEFAULT/bb/d50528-a020-43c6-8d06-5730efb58774/1/i5lZUf0Cf8c5sEUTuPjWvGeEGMA.mft rsync://rpki.ripe.net/repository/DEFAULT/i5lZUf0Cf8c5sEUTuPjWvGeEGMA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:08:fe:68:bb:2c:3b:a7:82:bc:e7:40:e6:2a:4b:f2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8b995951fd027fc739b04513b8f8d6bc678418c0 Validity Not Before: Dec 6 05:01:06 2025 GMT Not After : Dec 7 05:01:06 2025 GMT Subject: CN=3c3984b1e389fe220ac3c01870662948998d78b1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:94:da:0d:85:a8:3d:d6:14:82:56:93:c3:8b: 77:0a:e5:6e:f3:8d:c5:b5:21:50:c7:a9:09:6e:7f: a8:b1:6f:32:36:02:d6:35:5f:4f:6f:a8:7c:00:75: c2:aa:31:c2:d4:dc:25:d7:4a:8e:ae:54:94:e1:01: 2f:db:31:2a:09:7e:32:13:9e:e7:54:81:97:b6:bd: d0:71:50:01:29:51:c0:00:52:b1:7b:79:f9:db:c1: 82:dc:c5:aa:13:ef:6d:5b:b8:a6:e3:55:02:cc:42: 6f:2a:cc:0b:9a:3c:7d:6b:9b:a3:ee:ad:2d:c3:4f: fc:52:f6:e0:cf:b0:0b:06:b1:ac:9e:d2:69:89:2c: 1a:9e:b6:34:8e:60:d2:d0:e0:37:57:62:9c:2d:9d: 5a:96:61:4c:89:99:c4:29:7a:69:2f:05:95:25:27: ab:d6:ac:61:c2:39:bd:ed:05:0d:0f:f8:18:d5:67: 42:a0:84:b4:f7:84:df:c1:7a:82:1b:e9:18:6b:39: b7:07:10:ef:43:01:e9:de:f8:bd:73:b7:62:b5:79: 4c:d9:a0:aa:fb:fb:45:36:4b:31:c6:05:7f:14:ae: 0c:01:f7:97:be:bb:af:14:19:8a:cc:c6:d9:15:5c: 8c:82:c4:42:fa:43:4c:44:7f:4c:ae:d1:7a:79:7e: d3:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:39:84:B1:E3:89:FE:22:0A:C3:C0:18:70:66:29:48:99:8D:78:B1 X509v3 Authority Key Identifier: keyid:8B:99:59:51:FD:02:7F:C7:39:B0:45:13:B8:F8:D6:BC:67:84:18:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i5lZUf0Cf8c5sEUTuPjWvGeEGMA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/d50528-a020-43c6-8d06-5730efb58774/1/i5lZUf0Cf8c5sEUTuPjWvGeEGMA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/d50528-a020-43c6-8d06-5730efb58774/1/i5lZUf0Cf8c5sEUTuPjWvGeEGMA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 65:b3:e7:8b:31:63:d3:8a:ce:04:03:f2:3c:b0:db:8f:86:02: c6:c0:5e:57:89:2b:57:cf:17:4a:30:f8:f2:71:c7:9b:f9:43: 53:2a:37:fc:4a:b3:03:3f:8c:73:80:15:cf:86:d0:73:89:f5: 01:cc:bb:31:55:e4:2b:96:19:6c:a3:24:ed:1f:62:e8:f6:b2: b9:06:f2:14:81:dd:da:66:06:72:75:2c:0e:32:84:66:c9:3b: 75:77:2c:b6:2a:3b:fb:1c:6c:8b:86:9b:c5:35:f3:73:24:9e: de:cf:fb:65:d3:a4:06:6e:06:09:d3:1c:50:b4:8b:fb:96:4d: 55:d4:fd:79:9f:70:de:19:6b:68:1c:0a:9d:91:d3:4e:93:6e: 40:93:e0:3c:46:18:24:12:45:f4:de:a7:de:8e:d8:a5:71:4e: 21:93:1d:80:4e:f7:0f:9e:b4:1c:d2:73:11:f8:d2:4f:89:b8: 6e:69:c1:1f:cd:cb:e7:b1:6b:c7:90:58:9f:de:2c:b6:58:aa: 79:41:dd:50:d6:12:bd:f1:57:4a:56:45:dc:17:be:2e:82:be: 95:4a:b8:13:04:d7:a7:6a:ba:0c:d3:f0:1d:e2:e1:e9:6f:af: c5:30:21:dd:64:57:dc:78:bf:48:32:17:02:39:34:72:fe:dc: fe:ae:32:fe -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCP5ouyw7p4K850DmKkvyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhiOTk1OTUxZmQwMjdmYzczOWIwNDUxM2I4ZjhkNmJjNjc4 NDE4YzAwHhcNMjUxMjA2MDUwMTA2WhcNMjUxMjA3MDUwMTA2WjAzMTEwLwYDVQQD EygzYzM5ODRiMWUzODlmZTIyMGFjM2MwMTg3MDY2Mjk0ODk5OGQ3OGIxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5pTaDYWoPdYUglaTw4t3CuVu843F tSFQx6kJbn+osW8yNgLWNV9Pb6h8AHXCqjHC1Nwl10qOrlSU4QEv2zEqCX4yE57n VIGXtr3QcVABKVHAAFKxe3n528GC3MWqE+9tW7im41UCzEJvKswLmjx9a5uj7q0t w0/8Uvbgz7ALBrGsntJpiSwanrY0jmDS0OA3V2KcLZ1almFMiZnEKXppLwWVJSer 1qxhwjm97QUND/gY1WdCoIS094TfwXqCG+kYazm3BxDvQwHp3vi9c7ditXlM2aCq +/tFNksxxgV/FK4MAfeXvruvFBmKzMbZFVyMgsRC+kNMRH9MrtF6eX7TgwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDw5hLHjif4iCsPAGHBmKUiZjXixMB8GA1UdIwQY MBaAFIuZWVH9An/HObBFE7j41rxnhBjAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaTVsWlVmMENmOGM1c0VVVHVQald2R2VFR01BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYi9kNTA1MjgtYTAyMC00M2M2LThkMDYt NTczMGVmYjU4Nzc0LzEvaTVsWlVmMENmOGM1c0VVVHVQald2R2VFR01BLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYi9kNTA1MjgtYTAyMC00M2M2LThkMDYtNTczMGVmYjU4Nzc0 LzEvaTVsWlVmMENmOGM1c0VVVHVQald2R2VFR01BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZbPnizFj 04rOBAPyPLDbj4YCxsBeV4krV88XSjD48nHHm/lDUyo3/EqzAz+Mc4AVz4bQc4n1 Acy7MVXkK5YZbKMk7R9i6PayuQbyFIHd2mYGcnUsDjKEZsk7dXcstio7+xxsi4ab xTXzcySe3s/7ZdOkBm4GCdMcULSL+5ZNVdT9eZ9w3hlraBwKnZHTTpNuQJPgPEYY JBJF9N6n3o7YpXFOIZMdgE73D560HNJzEfjST4m4bmnBH83L57Frx5BYn94stliq eUHdUNYSvfFXSlZF3Be+LoK+lUq4EwTXp2q6DNPwHeLh6W+vxTAh3WRX3Hi/SDIX Ajk0cv7c/q4y/g== -----END CERTIFICATE-----Generated at Sat Dec 6 11:32:07 2025 by rpki-client