This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/934fc6-0724-4cd6-a417-eea9661381b4/1/IxNmmEaTAQHlodA48EtTTaCLonY.mft File: IxNmmEaTAQHlodA48EtTTaCLonY.mft (raw, json) Hash identifier: 84vDPiULN5+PBgqzsLGDCbg5lPvwyCKXvrsnRwJBcEM= Subject key identifier: C6:DF:3C:51:F4:6B:F9:3F:0A:3C:07:FF:47:AE:E6:D1:A3:25:79:9A Authority key identifier: 23:13:66:98:46:93:01:01:E5:A1:D0:38:F0:4B:53:4D:A0:8B:A2:76 Certificate issuer: /CN=2313669846930101e5a1d038f04b534da08ba276 Certificate serial: 019AF276DBA35A09B51FC85CD1C8BA5ACD47 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IxNmmEaTAQHlodA48EtTTaCLonY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/934fc6-0724-4cd6-a417-eea9661381b4/1/IxNmmEaTAQHlodA48EtTTaCLonY.mft Manifest number: 0131 Signing time: Sat 06 Dec 2025 07:01:07 +0000 Manifest this update: Sat 06 Dec 2025 07:01:07 +0000 Manifest next update: Sun 07 Dec 2025 07:01:07 +0000 Files and hashes: 1: IxNmmEaTAQHlodA48EtTTaCLonY.crl (hash: xI8PfT5EQbsAq/3PfIxYGGqs4nFJn10mwqIFudkaCpM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/934fc6-0724-4cd6-a417-eea9661381b4/1/IxNmmEaTAQHlodA48EtTTaCLonY.crl rsync://rpki.ripe.net/repository/DEFAULT/c9/934fc6-0724-4cd6-a417-eea9661381b4/1/IxNmmEaTAQHlodA48EtTTaCLonY.mft rsync://rpki.ripe.net/repository/DEFAULT/IxNmmEaTAQHlodA48EtTTaCLonY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:76:db:a3:5a:09:b5:1f:c8:5c:d1:c8:ba:5a:cd:47 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2313669846930101e5a1d038f04b534da08ba276 Validity Not Before: Dec 6 07:01:07 2025 GMT Not After : Dec 7 07:01:07 2025 GMT Subject: CN=c6df3c51f46bf93f0a3c07ff47aee6d1a325799a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:cc:c1:3e:e3:9b:a8:95:9d:b9:ff:bc:86:85: da:d2:8d:ce:fe:85:de:8b:22:11:c5:cd:f3:b6:f0: 3b:b5:bf:63:72:d3:ed:20:98:b9:fd:6c:90:5c:47: 66:f0:51:33:9e:fc:9b:e0:ea:1f:5c:fa:4f:2c:7e: ce:3a:b5:79:57:c9:a9:be:31:c9:aa:9e:c8:47:f5: bf:3f:cc:0a:93:c3:18:06:d6:58:29:81:37:f5:f5: a8:22:d8:df:5e:17:15:45:96:7a:2c:b6:08:0c:9b: 08:3e:93:de:85:5d:44:5e:24:95:ce:d5:46:72:c4: c2:fb:c6:ab:5f:56:0b:1d:12:72:c5:8c:e9:05:fd: d6:dd:c1:01:da:18:5c:9c:7b:97:1d:d0:01:b9:1b: 7c:ad:2b:88:19:2b:04:1e:03:29:9e:03:00:ca:68: 53:7e:c4:f7:aa:66:31:7e:ed:32:34:41:4c:d2:7a: d6:75:41:69:13:82:ba:32:ec:fe:ac:10:c8:da:0a: 29:16:5b:f9:ba:41:fa:73:ef:75:15:c1:5a:7b:f6: 64:24:01:e8:b7:88:7d:50:df:0c:c0:0e:34:8f:12: 53:c7:70:d5:0a:5f:24:c0:0c:77:a9:be:b3:7d:16: 66:35:13:e4:36:62:9a:71:c1:8d:4a:90:32:fc:91: 7c:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:DF:3C:51:F4:6B:F9:3F:0A:3C:07:FF:47:AE:E6:D1:A3:25:79:9A X509v3 Authority Key Identifier: keyid:23:13:66:98:46:93:01:01:E5:A1:D0:38:F0:4B:53:4D:A0:8B:A2:76 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IxNmmEaTAQHlodA48EtTTaCLonY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/934fc6-0724-4cd6-a417-eea9661381b4/1/IxNmmEaTAQHlodA48EtTTaCLonY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/934fc6-0724-4cd6-a417-eea9661381b4/1/IxNmmEaTAQHlodA48EtTTaCLonY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 82:ce:d3:44:d6:dc:b5:a9:9d:1c:a5:a6:e5:0b:99:60:a3:ee: d1:45:de:c1:ce:b5:84:b1:23:91:b8:4e:30:64:d1:85:8a:5e: 4c:b2:d2:5a:17:4e:06:e2:62:77:09:24:9c:38:9d:8d:5a:6f: ce:0e:0c:cb:9b:92:56:aa:00:6d:5d:15:94:cc:93:14:68:d9: a8:38:83:ff:ca:ae:df:94:df:a0:76:24:d6:96:18:d3:89:5a: 38:e1:ab:32:19:50:82:76:85:ec:f9:b9:d8:73:a4:df:aa:2c: 34:29:21:7e:9d:6f:5c:91:be:b4:36:0d:d1:b3:ee:e5:a1:9b: 0e:7a:65:7d:e0:44:41:7d:64:6d:9d:12:ef:25:2e:cc:fa:91: fd:82:42:20:df:3f:07:d6:54:98:7b:e0:47:87:b3:af:72:b0: 9a:c6:5c:ab:78:d8:87:07:be:2c:80:07:d8:44:1f:e9:87:6b: 25:4d:e0:2b:dd:29:91:ed:fa:89:b3:5f:c9:a1:63:68:ab:72: 84:7a:d5:6f:f2:85:0e:ff:ae:db:cb:da:02:bd:71:01:ab:12: a1:28:25:d2:3c:de:19:30:77:df:82:99:10:fc:a2:09:21:79: 65:d9:e5:4c:4a:95:e9:15:35:95:ce:56:b7:d7:47:1e:4b:d0: 6f:e7:7b:57 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrydtujWgm1H8hc0ci6Ws1HMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIzMTM2Njk4NDY5MzAxMDFlNWExZDAzOGYwNGI1MzRkYTA4 YmEyNzYwHhcNMjUxMjA2MDcwMTA3WhcNMjUxMjA3MDcwMTA3WjAzMTEwLwYDVQQD EyhjNmRmM2M1MWY0NmJmOTNmMGEzYzA3ZmY0N2FlZTZkMWEzMjU3OTlhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0szBPuObqJWduf+8hoXa0o3O/oXe iyIRxc3ztvA7tb9jctPtIJi5/WyQXEdm8FEznvyb4OofXPpPLH7OOrV5V8mpvjHJ qp7IR/W/P8wKk8MYBtZYKYE39fWoItjfXhcVRZZ6LLYIDJsIPpPehV1EXiSVztVG csTC+8arX1YLHRJyxYzpBf3W3cEB2hhcnHuXHdABuRt8rSuIGSsEHgMpngMAymhT fsT3qmYxfu0yNEFM0nrWdUFpE4K6Muz+rBDI2gopFlv5ukH6c+91FcFae/ZkJAHo t4h9UN8MwA40jxJTx3DVCl8kwAx3qb6zfRZmNRPkNmKaccGNSpAy/JF8jQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMbfPFH0a/k/CjwH/0eu5tGjJXmaMB8GA1UdIwQY MBaAFCMTZphGkwEB5aHQOPBLU02gi6J2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSXhObW1FYVRBUUhsb2RBNDhFdFRUYUNMb25ZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOS85MzRmYzYtMDcyNC00Y2Q2LWE0MTct ZWVhOTY2MTM4MWI0LzEvSXhObW1FYVRBUUhsb2RBNDhFdFRUYUNMb25ZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOS85MzRmYzYtMDcyNC00Y2Q2LWE0MTctZWVhOTY2MTM4MWI0 LzEvSXhObW1FYVRBUUhsb2RBNDhFdFRUYUNMb25ZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgs7TRNbc tamdHKWm5QuZYKPu0UXewc61hLEjkbhOMGTRhYpeTLLSWhdOBuJidwkknDidjVpv zg4My5uSVqoAbV0VlMyTFGjZqDiD/8qu35TfoHYk1pYY04laOOGrMhlQgnaF7Pm5 2HOk36osNCkhfp1vXJG+tDYN0bPu5aGbDnplfeBEQX1kbZ0S7yUuzPqR/YJCIN8/ B9ZUmHvgR4ezr3KwmsZcq3jYhwe+LIAH2EQf6YdrJU3gK90pke36ibNfyaFjaKty hHrVb/KFDv+u28vaAr1xAasSoSgl0jzeGTB334KZEPyiCSF5ZdnlTEqV6RU1lc5W t9dHHkvQb+d7Vw== -----END CERTIFICATE-----Generated at Sat Dec 6 13:06:21 2025 by rpki-client