This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/a314cc-066e-4c09-a36a-d0bd0e803fd1/1/IkCgcYD88zY191fMFEng1dvU_bg.mft File: IkCgcYD88zY191fMFEng1dvU_bg.mft (raw, json) Hash identifier: tdFg0okXFOP0hKXlphRHhd7HacQfYplyMEILQ5/LD0s= Subject key identifier: 75:03:C8:A8:F8:A3:03:2C:55:56:B7:B6:CB:17:B2:A4:53:8A:5C:E7 Authority key identifier: 22:40:A0:71:80:FC:F3:36:35:F7:57:CC:14:49:E0:D5:DB:D4:FD:B8 Certificate issuer: /CN=2240a07180fcf33635f757cc1449e0d5dbd4fdb8 Certificate serial: 019B2852ADFE9C3752D316A77AFFBAC66A93 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IkCgcYD88zY191fMFEng1dvU_bg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/a314cc-066e-4c09-a36a-d0bd0e803fd1/1/IkCgcYD88zY191fMFEng1dvU_bg.mft Manifest number: 0365 Signing time: Tue 16 Dec 2025 18:01:05 +0000 Manifest this update: Tue 16 Dec 2025 18:01:05 +0000 Manifest next update: Wed 17 Dec 2025 18:01:05 +0000 Files and hashes: 1: IkCgcYD88zY191fMFEng1dvU_bg.crl (hash: Ey8bZ+6rlulxyEBmQy14BBhYE8zQ/vBBc33jP5VxHnE=) 2: nvx0QRZQO1QzuvMN00Bva6hTGZw.roa (hash: Gw59i4bicuVuHEY8V6dHsuW9MPHvsYhnw1rq0LLdv8I=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/a314cc-066e-4c09-a36a-d0bd0e803fd1/1/IkCgcYD88zY191fMFEng1dvU_bg.crl rsync://rpki.ripe.net/repository/DEFAULT/d3/a314cc-066e-4c09-a36a-d0bd0e803fd1/1/IkCgcYD88zY191fMFEng1dvU_bg.mft rsync://rpki.ripe.net/repository/DEFAULT/IkCgcYD88zY191fMFEng1dvU_bg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 14:45:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:28:52:ad:fe:9c:37:52:d3:16:a7:7a:ff:ba:c6:6a:93 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2240a07180fcf33635f757cc1449e0d5dbd4fdb8 Validity Not Before: Dec 16 18:01:05 2025 GMT Not After : Dec 17 18:01:05 2025 GMT Subject: CN=7503c8a8f8a3032c5556b7b6cb17b2a4538a5ce7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:0f:03:97:38:0e:69:6c:d7:c0:53:df:f8:24: d7:e3:4e:19:e7:b5:6d:81:fc:a1:5d:07:57:0b:1c: 0e:59:f9:dd:a8:30:dd:a4:c0:6d:45:a3:97:5b:dd: 80:76:83:72:d7:13:d9:c0:ca:92:32:dd:ad:d8:44: 5a:2c:77:25:29:ea:b8:fa:b4:a5:e5:53:e7:09:d3: 5f:bc:2f:fb:f4:9e:ce:53:63:c3:e9:0f:1d:a6:e7: b6:f0:84:cc:67:99:a6:22:fc:8a:fa:3a:66:fd:68: 81:c3:5d:5d:c1:3a:cb:de:c9:a6:8b:28:54:b8:87: ea:ac:66:26:10:7a:aa:a0:8d:15:8a:fc:1e:09:e5: 4e:b6:f8:af:f9:4b:f5:95:a5:bc:ac:8f:36:09:7c: 7c:0f:a2:6c:b7:1f:2c:40:53:0c:29:6d:45:8c:59: c9:5e:21:df:00:44:a6:b6:15:d1:7e:b9:3b:99:09: 48:28:b6:9b:cb:aa:52:fc:72:16:ba:9f:94:b8:d0: e7:ea:1a:af:0c:81:be:cf:34:d0:24:6a:b8:c3:97: 50:8f:7d:95:22:83:23:b4:c9:aa:ef:9b:71:6e:64: 69:b9:46:8a:cf:87:42:f9:29:4e:90:6c:bc:b6:e4: a3:b8:53:d2:33:5e:29:6e:85:d4:cb:0f:97:b7:af: af:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:03:C8:A8:F8:A3:03:2C:55:56:B7:B6:CB:17:B2:A4:53:8A:5C:E7 X509v3 Authority Key Identifier: keyid:22:40:A0:71:80:FC:F3:36:35:F7:57:CC:14:49:E0:D5:DB:D4:FD:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IkCgcYD88zY191fMFEng1dvU_bg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/a314cc-066e-4c09-a36a-d0bd0e803fd1/1/IkCgcYD88zY191fMFEng1dvU_bg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/a314cc-066e-4c09-a36a-d0bd0e803fd1/1/IkCgcYD88zY191fMFEng1dvU_bg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9f:44:a6:9d:62:15:a6:2e:20:a2:48:a9:0b:0f:e9:bb:96:0c: a0:6c:9c:ba:f2:83:61:7f:38:d1:4e:d8:6c:b5:dc:97:4c:30: 51:31:e8:81:a8:a9:ca:f9:6f:81:7d:71:a8:51:c8:63:f4:e6: 2a:f9:bd:8d:0c:7c:ad:eb:44:fb:3e:7d:03:dd:6e:38:fa:d6: 7d:9f:6c:6d:99:4b:73:f2:92:4e:ee:f6:49:e0:d8:79:bf:c6: 1d:ab:a0:d8:3f:27:dc:f5:8d:44:19:26:67:ec:42:97:e4:92: e2:88:b3:51:17:75:17:b8:a2:20:c9:8a:2c:c6:47:53:84:9a: 60:77:c6:bf:0e:ae:69:d3:bd:5a:63:db:8e:83:ff:8a:1d:f5: 30:95:51:f2:5b:7f:5e:84:f8:81:82:42:a0:c0:a2:92:00:53: 67:ac:a4:13:2a:bb:24:f3:1e:70:c9:a3:a3:0c:66:01:b7:3e: d6:16:d8:c0:f2:7d:a4:8b:62:b7:22:d7:d9:aa:b0:76:96:52: 20:f6:25:1c:e4:72:87:27:49:bb:fe:be:38:5e:f9:ea:d9:d7: fc:0a:dd:e6:f3:21:5e:42:14:16:bf:aa:00:f2:61:1d:7d:c0: c4:f3:ca:98:62:32:82:2b:63:d7:b5:51:0b:8d:49:03:3b:43: f1:da:30:13 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsoUq3+nDdS0xanev+6xmqTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIyNDBhMDcxODBmY2YzMzYzNWY3NTdjYzE0NDllMGQ1ZGJk NGZkYjgwHhcNMjUxMjE2MTgwMTA1WhcNMjUxMjE3MTgwMTA1WjAzMTEwLwYDVQQD Eyg3NTAzYzhhOGY4YTMwMzJjNTU1NmI3YjZjYjE3YjJhNDUzOGE1Y2U3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnw8DlzgOaWzXwFPf+CTX404Z57Vt gfyhXQdXCxwOWfndqDDdpMBtRaOXW92AdoNy1xPZwMqSMt2t2ERaLHclKeq4+rSl 5VPnCdNfvC/79J7OU2PD6Q8dpue28ITMZ5mmIvyK+jpm/WiBw11dwTrL3smmiyhU uIfqrGYmEHqqoI0VivweCeVOtviv+Uv1laW8rI82CXx8D6Jstx8sQFMMKW1FjFnJ XiHfAESmthXRfrk7mQlIKLaby6pS/HIWup+UuNDn6hqvDIG+zzTQJGq4w5dQj32V IoMjtMmq75txbmRpuUaKz4dC+SlOkGy8tuSjuFPSM14pboXUyw+Xt6+vfQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHUDyKj4owMsVVa3tssXsqRTilznMB8GA1UdIwQY MBaAFCJAoHGA/PM2NfdXzBRJ4NXb1P24MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSWtDZ2NZRDg4elkxOTFmTUZFbmcxZHZVX2JnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy9hMzE0Y2MtMDY2ZS00YzA5LWEzNmEt ZDBiZDBlODAzZmQxLzEvSWtDZ2NZRDg4elkxOTFmTUZFbmcxZHZVX2JnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMy9hMzE0Y2MtMDY2ZS00YzA5LWEzNmEtZDBiZDBlODAzZmQx LzEvSWtDZ2NZRDg4elkxOTFmTUZFbmcxZHZVX2JnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAn0SmnWIV pi4gokipCw/pu5YMoGycuvKDYX840U7YbLXcl0wwUTHogaipyvlvgX1xqFHIY/Tm Kvm9jQx8retE+z59A91uOPrWfZ9sbZlLc/KSTu72SeDYeb/GHaug2D8n3PWNRBkm Z+xCl+SS4oizURd1F7iiIMmKLMZHU4SaYHfGvw6uadO9WmPbjoP/ih31MJVR8lt/ XoT4gYJCoMCikgBTZ6ykEyq7JPMecMmjowxmAbc+1hbYwPJ9pItityLX2aqwdpZS IPYlHORyhydJu/6+OF756tnX/Ard5vMhXkIUFr+qAPJhHX3AxPPKmGIygitj17VR C41JAztD8dowEw== -----END CERTIFICATE-----Generated at Tue Dec 16 21:05:45 2025 by rpki-client