This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/6cac50-3f13-4ef9-8b6d-decec41a71d1/1/20ifvpiZTLwJjIdrpj5WCsF-Wy8.mft File: 20ifvpiZTLwJjIdrpj5WCsF-Wy8.mft (raw, json) Hash identifier: uB4qM68jHeG6NueXhdNSZ8FidWBfUOupFj6XHVnrKpI= Subject key identifier: 54:F0:47:41:0A:3E:7E:DA:98:36:6A:99:FF:9E:67:B8:E7:C9:95:86 Authority key identifier: DB:48:9F:BE:98:99:4C:BC:09:8C:87:6B:A6:3E:56:0A:C1:7E:5B:2F Certificate issuer: /CN=db489fbe98994cbc098c876ba63e560ac17e5b2f Certificate serial: 019AF1D18CEF2891D06ED366AD90151BA710 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/20ifvpiZTLwJjIdrpj5WCsF-Wy8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/6cac50-3f13-4ef9-8b6d-decec41a71d1/1/20ifvpiZTLwJjIdrpj5WCsF-Wy8.mft Manifest number: 1317 Signing time: Sat 06 Dec 2025 04:00:33 +0000 Manifest this update: Sat 06 Dec 2025 04:00:33 +0000 Manifest next update: Sun 07 Dec 2025 04:00:33 +0000 Files and hashes: 1: 20ifvpiZTLwJjIdrpj5WCsF-Wy8.crl (hash: 0URVrJXrTpC6ctC8s8uLgp3sC+NpZE09tcMQT14m0b0=) 2: O7dVmdulXoSGFdWUdpvv3bkJxU8.roa (hash: hmlWALQMbQbIcNvaSImT+aYBz0m3Sm9TMeYp/ubqBkw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/6cac50-3f13-4ef9-8b6d-decec41a71d1/1/20ifvpiZTLwJjIdrpj5WCsF-Wy8.crl rsync://rpki.ripe.net/repository/DEFAULT/d1/6cac50-3f13-4ef9-8b6d-decec41a71d1/1/20ifvpiZTLwJjIdrpj5WCsF-Wy8.mft rsync://rpki.ripe.net/repository/DEFAULT/20ifvpiZTLwJjIdrpj5WCsF-Wy8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d1:8c:ef:28:91:d0:6e:d3:66:ad:90:15:1b:a7:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=db489fbe98994cbc098c876ba63e560ac17e5b2f Validity Not Before: Dec 6 04:00:33 2025 GMT Not After : Dec 7 04:00:33 2025 GMT Subject: CN=54f047410a3e7eda98366a99ff9e67b8e7c99586 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:47:08:9a:d7:c4:24:cb:8d:31:5d:fc:50:d8: 5e:52:a2:16:14:8f:20:aa:f9:8b:20:0e:8a:9f:93: 60:93:59:c3:47:3e:95:1c:01:54:5b:db:66:dd:a9: 79:ab:7e:1e:79:81:f5:0f:ac:29:e1:fe:a8:27:a7: 2d:86:64:8a:af:48:47:37:09:d7:1e:b9:47:19:62: ef:d3:9d:34:bd:c5:48:15:0e:f1:28:a0:51:f0:de: a1:93:e1:ae:31:5a:c5:ac:d6:27:07:c4:9b:3c:69: ec:02:ec:ee:7f:0e:63:00:7e:4b:ad:3b:89:f1:91: 0b:89:06:2d:55:7e:6c:b4:41:42:95:85:fd:a1:10: 59:d3:3b:94:d9:c4:d5:7c:81:04:5e:e8:29:c3:d7: b5:2b:1c:8c:e7:ac:0c:33:7e:8c:3b:17:0c:05:d0: 92:8b:48:f6:0f:54:ba:22:c0:6d:d6:80:95:94:c6: 3b:21:95:37:be:01:77:a6:88:2e:05:a5:af:42:99: bc:a7:55:4f:35:c4:54:d2:d3:2b:f1:f9:b2:37:f7: ca:1e:2a:d4:6d:33:4a:8f:e9:d7:ef:c6:da:6f:f1: db:66:71:56:e2:c6:8d:e2:70:ff:1b:fe:e9:ca:47: fd:84:28:46:d8:73:63:9a:6d:4c:7d:bb:8e:58:85: b7:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:F0:47:41:0A:3E:7E:DA:98:36:6A:99:FF:9E:67:B8:E7:C9:95:86 X509v3 Authority Key Identifier: keyid:DB:48:9F:BE:98:99:4C:BC:09:8C:87:6B:A6:3E:56:0A:C1:7E:5B:2F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/20ifvpiZTLwJjIdrpj5WCsF-Wy8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/6cac50-3f13-4ef9-8b6d-decec41a71d1/1/20ifvpiZTLwJjIdrpj5WCsF-Wy8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/6cac50-3f13-4ef9-8b6d-decec41a71d1/1/20ifvpiZTLwJjIdrpj5WCsF-Wy8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1f:e8:65:8d:51:a2:1e:ab:90:70:ed:63:22:25:f5:42:be:7c: 7c:e4:e5:88:62:9e:da:de:d5:c2:ea:63:e3:cd:87:9a:d2:90: a3:6a:7e:89:e1:04:8f:19:fd:72:93:80:46:12:ce:6f:24:8a: 3e:3a:46:38:56:d9:22:ba:2d:07:72:33:a1:a4:4b:0a:f2:94: ac:c1:0c:ae:51:18:4c:ff:a1:e1:40:db:3e:c3:5a:ec:c4:10: 37:80:b8:3c:cf:cd:f4:55:f6:51:c2:62:e6:87:aa:b8:09:22: 52:18:11:f6:e3:f8:16:e2:5e:98:ce:c6:ba:5b:f7:6c:c6:1a: 49:65:59:a2:b0:b5:a7:aa:59:4f:d8:c9:9c:94:39:f6:40:44: fd:8b:9f:0e:af:af:8e:bb:e1:ba:ca:d3:30:cd:2b:88:21:8c: 2f:db:7b:3c:b6:f4:23:0b:33:f6:e4:5c:cd:5d:c2:94:0f:75: 51:16:95:96:15:75:93:0b:3c:65:9d:af:b4:ee:97:1c:83:3e: 04:e4:7d:78:3b:17:a4:6a:4d:df:77:20:93:db:88:68:7c:5a: 6d:5c:1b:53:39:ad:b7:e1:37:4d:73:05:d7:5b:8c:e4:a9:5a: 0a:58:9c:b0:8f:9a:08:b1:74:e6:62:2f:f5:df:b9:f6:a9:e6: 02:5c:b1:5a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0YzvKJHQbtNmrZAVG6cQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRiNDg5ZmJlOTg5OTRjYmMwOThjODc2YmE2M2U1NjBhYzE3 ZTViMmYwHhcNMjUxMjA2MDQwMDMzWhcNMjUxMjA3MDQwMDMzWjAzMTEwLwYDVQQD Eyg1NGYwNDc0MTBhM2U3ZWRhOTgzNjZhOTlmZjllNjdiOGU3Yzk5NTg2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvEcImtfEJMuNMV38UNheUqIWFI8g qvmLIA6Kn5Ngk1nDRz6VHAFUW9tm3al5q34eeYH1D6wp4f6oJ6cthmSKr0hHNwnX HrlHGWLv0500vcVIFQ7xKKBR8N6hk+GuMVrFrNYnB8SbPGnsAuzufw5jAH5LrTuJ 8ZELiQYtVX5stEFClYX9oRBZ0zuU2cTVfIEEXugpw9e1KxyM56wMM36MOxcMBdCS i0j2D1S6IsBt1oCVlMY7IZU3vgF3poguBaWvQpm8p1VPNcRU0tMr8fmyN/fKHirU bTNKj+nX78bab/HbZnFW4saN4nD/G/7pykf9hChG2HNjmm1MfbuOWIW3EQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFTwR0EKPn7amDZqmf+eZ7jnyZWGMB8GA1UdIwQY MBaAFNtIn76YmUy8CYyHa6Y+VgrBflsvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMjBpZnZwaVpUTHdKaklkcnBqNVdDc0YtV3k4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMS82Y2FjNTAtM2YxMy00ZWY5LThiNmQt ZGVjZWM0MWE3MWQxLzEvMjBpZnZwaVpUTHdKaklkcnBqNVdDc0YtV3k4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMS82Y2FjNTAtM2YxMy00ZWY5LThiNmQtZGVjZWM0MWE3MWQx LzEvMjBpZnZwaVpUTHdKaklkcnBqNVdDc0YtV3k4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAH+hljVGi HquQcO1jIiX1Qr58fOTliGKe2t7Vwupj482HmtKQo2p+ieEEjxn9cpOARhLObySK PjpGOFbZIrotB3IzoaRLCvKUrMEMrlEYTP+h4UDbPsNa7MQQN4C4PM/N9FX2UcJi 5oequAkiUhgR9uP4FuJemM7Gulv3bMYaSWVZorC1p6pZT9jJnJQ59kBE/YufDq+v jrvhusrTMM0riCGML9t7PLb0Iwsz9uRczV3ClA91URaVlhV1kws8ZZ2vtO6XHIM+ BOR9eDsXpGpN33cgk9uIaHxabVwbUzmtt+E3TXMF11uM5KlaClicsI+aCLF05mIv 9d+59qnmAlyxWg== -----END CERTIFICATE-----Generated at Sat Dec 6 08:19:10 2025 by rpki-client