This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/a314cc-066e-4c09-a36a-d0bd0e803fd1/1/IkCgcYD88zY191fMFEng1dvU_bg.mft File: IkCgcYD88zY191fMFEng1dvU_bg.mft (raw, json) Hash identifier: wyGIUNYxlIUzABnl2Cfe35lFt9/aNPpu+vs92YI+6EY= Subject key identifier: 4B:C8:6D:02:B8:16:C4:63:A4:30:81:4B:7D:C6:CD:5C:44:DC:A7:E4 Authority key identifier: 22:40:A0:71:80:FC:F3:36:35:F7:57:CC:14:49:E0:D5:DB:D4:FD:B8 Certificate issuer: /CN=2240a07180fcf33635f757cc1449e0d5dbd4fdb8 Certificate serial: 019AFBE7AF733C180E4A76F4A86DF4E0F258 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IkCgcYD88zY191fMFEng1dvU_bg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/a314cc-066e-4c09-a36a-d0bd0e803fd1/1/IkCgcYD88zY191fMFEng1dvU_bg.mft Manifest number: 034E Signing time: Mon 08 Dec 2025 03:00:56 +0000 Manifest this update: Mon 08 Dec 2025 03:00:56 +0000 Manifest next update: Tue 09 Dec 2025 03:00:56 +0000 Files and hashes: 1: IkCgcYD88zY191fMFEng1dvU_bg.crl (hash: SPIgfuZpKkrTkCNTO9uL8i21QLN8QEnX1+iOb8O4u1Q=) 2: nvx0QRZQO1QzuvMN00Bva6hTGZw.roa (hash: Gw59i4bicuVuHEY8V6dHsuW9MPHvsYhnw1rq0LLdv8I=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/a314cc-066e-4c09-a36a-d0bd0e803fd1/1/IkCgcYD88zY191fMFEng1dvU_bg.crl rsync://rpki.ripe.net/repository/DEFAULT/d3/a314cc-066e-4c09-a36a-d0bd0e803fd1/1/IkCgcYD88zY191fMFEng1dvU_bg.mft rsync://rpki.ripe.net/repository/DEFAULT/IkCgcYD88zY191fMFEng1dvU_bg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 09 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:fb:e7:af:73:3c:18:0e:4a:76:f4:a8:6d:f4:e0:f2:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2240a07180fcf33635f757cc1449e0d5dbd4fdb8 Validity Not Before: Dec 8 03:00:56 2025 GMT Not After : Dec 9 03:00:56 2025 GMT Subject: CN=4bc86d02b816c463a430814b7dc6cd5c44dca7e4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:df:d9:39:cc:6c:ca:42:86:0f:97:02:ab:09: 3c:d3:ee:1e:df:27:c0:62:80:d8:ef:53:85:55:f8: 4e:75:37:45:61:22:bd:8b:45:89:c8:b5:3a:00:dd: d9:47:09:a4:4f:ef:25:d6:8d:72:a4:6d:4f:02:56: 88:0f:93:24:50:7c:e5:9d:3b:20:9e:b4:c3:9f:e7: 3c:31:36:80:cc:ce:47:39:5d:d3:58:de:ee:61:5f: 3c:f0:3c:7d:bd:cc:00:19:31:4f:32:98:79:47:d6: ea:9f:61:05:77:98:65:0c:2d:77:bf:f7:6a:90:7d: 66:e2:26:09:4e:35:ff:5e:81:51:ef:2e:41:51:fc: 6f:86:ba:2c:eb:0e:6a:b7:7d:11:9f:0b:6f:45:2c: 6e:1a:03:09:0a:20:36:a1:7b:11:1d:cd:f7:86:0f: 25:3f:8f:db:37:fe:2c:b0:f1:46:46:9f:89:71:24: ba:c1:f5:b6:0f:05:64:3b:60:55:ca:b3:02:22:bf: 52:1e:b0:70:a5:14:05:6c:a0:39:ad:c3:4e:20:79: 08:cc:64:9e:3e:c6:5b:97:da:77:78:00:26:b4:d4: 17:c2:e6:fb:4a:ca:bc:44:83:57:bd:43:2a:66:e3: 46:98:50:d7:5d:c6:2c:a5:07:4c:8c:cb:7d:f8:69: 50:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:C8:6D:02:B8:16:C4:63:A4:30:81:4B:7D:C6:CD:5C:44:DC:A7:E4 X509v3 Authority Key Identifier: keyid:22:40:A0:71:80:FC:F3:36:35:F7:57:CC:14:49:E0:D5:DB:D4:FD:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IkCgcYD88zY191fMFEng1dvU_bg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/a314cc-066e-4c09-a36a-d0bd0e803fd1/1/IkCgcYD88zY191fMFEng1dvU_bg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/a314cc-066e-4c09-a36a-d0bd0e803fd1/1/IkCgcYD88zY191fMFEng1dvU_bg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7e:11:84:6a:d2:80:4d:cf:cf:2a:ab:0e:a4:10:93:cf:f3:0a: 1e:63:2a:ae:6f:56:2c:47:2a:38:51:66:6f:37:43:bd:5c:fe: e7:49:6d:49:71:19:f6:89:3e:e8:bb:e1:a2:08:61:cb:14:be: fe:33:d7:75:e8:35:2f:24:31:4e:b6:79:23:82:19:ff:b1:1e: a5:ff:6e:d8:0f:7e:ce:06:72:d5:52:0f:dc:24:af:e3:d7:c8: 13:a2:21:a1:b9:c9:7c:7a:8f:e8:e2:bd:83:91:48:64:48:04: 0c:12:d8:56:f0:d5:e4:87:dc:3b:cb:2f:15:75:36:ec:0b:7c: 95:fd:cd:9f:e2:9f:e6:a3:a0:37:68:67:4c:05:fc:89:fd:7e: f1:9a:60:e6:84:01:fa:91:5a:2a:a1:54:38:22:36:cb:63:41: a1:38:82:a9:19:97:02:30:4e:9f:59:5b:ac:66:7c:3a:30:cf: b3:74:b5:fe:a9:99:4f:7e:8e:bf:27:f4:b4:4b:45:1f:41:70: c7:0b:22:d4:ef:b4:42:70:53:dd:33:c1:e6:cb:95:e6:96:95: ee:a1:f8:7d:ba:5b:30:60:72:dd:b6:35:e0:c5:c0:75:85:1d: 2f:d7:cc:37:92:b3:3b:3e:bd:93:b7:ce:00:d2:67:b5:9f:fa: 9e:a6:f1:f9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr7569zPBgOSnb0qG304PJYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIyNDBhMDcxODBmY2YzMzYzNWY3NTdjYzE0NDllMGQ1ZGJk NGZkYjgwHhcNMjUxMjA4MDMwMDU2WhcNMjUxMjA5MDMwMDU2WjAzMTEwLwYDVQQD Eyg0YmM4NmQwMmI4MTZjNDYzYTQzMDgxNGI3ZGM2Y2Q1YzQ0ZGNhN2U0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0N/ZOcxsykKGD5cCqwk80+4e3yfA YoDY71OFVfhOdTdFYSK9i0WJyLU6AN3ZRwmkT+8l1o1ypG1PAlaID5MkUHzlnTsg nrTDn+c8MTaAzM5HOV3TWN7uYV888Dx9vcwAGTFPMph5R9bqn2EFd5hlDC13v/dq kH1m4iYJTjX/XoFR7y5BUfxvhros6w5qt30RnwtvRSxuGgMJCiA2oXsRHc33hg8l P4/bN/4ssPFGRp+JcSS6wfW2DwVkO2BVyrMCIr9SHrBwpRQFbKA5rcNOIHkIzGSe PsZbl9p3eAAmtNQXwub7Ssq8RINXvUMqZuNGmFDXXcYspQdMjMt9+GlQHQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEvIbQK4FsRjpDCBS33GzVxE3KfkMB8GA1UdIwQY MBaAFCJAoHGA/PM2NfdXzBRJ4NXb1P24MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSWtDZ2NZRDg4elkxOTFmTUZFbmcxZHZVX2JnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy9hMzE0Y2MtMDY2ZS00YzA5LWEzNmEt ZDBiZDBlODAzZmQxLzEvSWtDZ2NZRDg4elkxOTFmTUZFbmcxZHZVX2JnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMy9hMzE0Y2MtMDY2ZS00YzA5LWEzNmEtZDBiZDBlODAzZmQx LzEvSWtDZ2NZRDg4elkxOTFmTUZFbmcxZHZVX2JnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfhGEatKA Tc/PKqsOpBCTz/MKHmMqrm9WLEcqOFFmbzdDvVz+50ltSXEZ9ok+6LvhoghhyxS+ /jPXdeg1LyQxTrZ5I4IZ/7Eepf9u2A9+zgZy1VIP3CSv49fIE6IhobnJfHqP6OK9 g5FIZEgEDBLYVvDV5IfcO8svFXU27At8lf3Nn+Kf5qOgN2hnTAX8if1+8Zpg5oQB +pFaKqFUOCI2y2NBoTiCqRmXAjBOn1lbrGZ8OjDPs3S1/qmZT36Ovyf0tEtFH0Fw xwsi1O+0QnBT3TPB5suV5paV7qH4fbpbMGBy3bY14MXAdYUdL9fMN5KzOz69k7fO ANJntZ/6nqbx+Q== -----END CERTIFICATE-----Generated at Mon Dec 8 08:44:58 2025 by rpki-client