This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/a314cc-066e-4c09-a36a-d0bd0e803fd1/1/IkCgcYD88zY191fMFEng1dvU_bg.mft File: IkCgcYD88zY191fMFEng1dvU_bg.mft (raw, json) Hash identifier: 6knsr39kJ1+V8Ax4ThydkxJ6o3QMJoOv+EVr2n29HeM= Subject key identifier: 16:47:18:3B:84:8F:DF:F9:84:42:D9:D9:C9:4C:E7:FD:08:58:A5:9A Authority key identifier: 22:40:A0:71:80:FC:F3:36:35:F7:57:CC:14:49:E0:D5:DB:D4:FD:B8 Certificate issuer: /CN=2240a07180fcf33635f757cc1449e0d5dbd4fdb8 Certificate serial: 019B2664323E7BE0990DB5A4B7A593CB4426 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IkCgcYD88zY191fMFEng1dvU_bg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/a314cc-066e-4c09-a36a-d0bd0e803fd1/1/IkCgcYD88zY191fMFEng1dvU_bg.mft Manifest number: 0364 Signing time: Tue 16 Dec 2025 09:00:59 +0000 Manifest this update: Tue 16 Dec 2025 09:00:59 +0000 Manifest next update: Wed 17 Dec 2025 09:00:59 +0000 Files and hashes: 1: IkCgcYD88zY191fMFEng1dvU_bg.crl (hash: C0jb5VgYecge81993XVWi9Ht/cSHXBlFpePXCVa1A0w=) 2: nvx0QRZQO1QzuvMN00Bva6hTGZw.roa (hash: Gw59i4bicuVuHEY8V6dHsuW9MPHvsYhnw1rq0LLdv8I=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/a314cc-066e-4c09-a36a-d0bd0e803fd1/1/IkCgcYD88zY191fMFEng1dvU_bg.crl rsync://rpki.ripe.net/repository/DEFAULT/d3/a314cc-066e-4c09-a36a-d0bd0e803fd1/1/IkCgcYD88zY191fMFEng1dvU_bg.mft rsync://rpki.ripe.net/repository/DEFAULT/IkCgcYD88zY191fMFEng1dvU_bg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 09:00:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:26:64:32:3e:7b:e0:99:0d:b5:a4:b7:a5:93:cb:44:26 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2240a07180fcf33635f757cc1449e0d5dbd4fdb8 Validity Not Before: Dec 16 09:00:59 2025 GMT Not After : Dec 17 09:00:59 2025 GMT Subject: CN=1647183b848fdff98442d9d9c94ce7fd0858a59a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:14:3d:43:19:63:9b:06:b5:64:cc:3b:5f:4a: bc:7b:7f:ff:3f:4a:f9:2a:df:04:7a:5b:ea:e8:4f: c6:89:4c:a5:89:66:fa:bc:36:7c:65:3a:03:08:64: 40:ef:1b:9c:d6:8d:4d:91:8e:e0:e8:61:75:3d:6d: 2f:9d:cf:ce:0b:93:f1:dd:e7:69:b7:e5:ea:f5:a1: 03:9c:1e:96:5f:65:55:6f:e4:d1:c6:38:74:54:43: b1:71:e2:f2:8a:24:6c:bb:32:32:9d:fd:21:58:f2: 67:ef:47:cf:35:9c:ff:c0:36:ba:f6:f0:01:6e:b5: e8:ef:5d:87:bd:d8:df:5a:01:16:b7:66:cf:ca:98: ff:1f:29:01:3a:01:5c:3b:82:7c:47:6f:15:8e:00: f0:d4:f6:61:31:42:3c:a0:c0:ba:68:62:8d:46:d0: b9:e9:66:1c:5d:36:aa:d4:dd:04:4f:02:8c:74:4e: 0f:3b:1f:57:d9:09:64:bd:86:be:cb:e3:c9:44:ed: 4f:6a:2b:4a:49:8c:23:50:20:82:d5:f7:28:72:ab: 62:a2:7a:bb:20:55:7c:53:2d:ae:56:8e:3b:15:d7: e4:ce:09:60:12:8b:2f:b6:1c:10:b7:14:ba:ed:80: 13:52:ea:8a:9c:7a:6a:b3:03:e2:40:39:db:47:08: 32:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:47:18:3B:84:8F:DF:F9:84:42:D9:D9:C9:4C:E7:FD:08:58:A5:9A X509v3 Authority Key Identifier: keyid:22:40:A0:71:80:FC:F3:36:35:F7:57:CC:14:49:E0:D5:DB:D4:FD:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IkCgcYD88zY191fMFEng1dvU_bg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/a314cc-066e-4c09-a36a-d0bd0e803fd1/1/IkCgcYD88zY191fMFEng1dvU_bg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/a314cc-066e-4c09-a36a-d0bd0e803fd1/1/IkCgcYD88zY191fMFEng1dvU_bg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 46:59:70:98:95:43:23:4e:b3:65:f3:3a:34:8a:af:aa:13:fc: 4a:a0:79:20:b4:ef:c1:f6:c6:94:0f:ee:2a:0c:70:87:03:4e: 02:3e:87:33:22:7d:ae:5b:8c:f8:0a:70:31:66:28:4b:6b:0a: 87:b9:29:82:a7:9c:a6:d0:6e:8b:86:95:eb:e3:eb:1f:50:59: c5:3c:e3:30:61:88:25:b4:94:e9:70:b8:2b:77:6b:f8:d3:16: 2c:8a:94:a0:03:11:5e:4d:45:58:2b:85:0b:d1:2f:82:7f:70: a9:72:eb:a4:f5:94:34:6e:d2:6c:e4:bb:43:be:da:9f:99:2b: b8:9b:d9:28:e3:22:a9:a6:6c:ce:9d:73:c4:80:a7:76:dc:05: 19:75:5b:98:b7:ab:cf:b2:5f:28:fd:65:42:ed:3b:03:77:e6: 84:f3:7b:d1:80:34:fe:bd:1f:a6:33:be:53:eb:fc:68:71:c8: d4:fe:4b:ea:9a:eb:1c:49:75:0d:b6:7c:f4:37:9c:33:34:9b: 33:ac:c2:f2:cb:28:fe:92:10:0e:fa:21:29:6d:e3:8c:25:3e: 2a:ff:aa:3e:c1:8a:6a:fe:97:21:c9:9d:f2:4e:c0:2e:2d:87: 81:77:bb:f2:2f:bc:8a:5e:fd:b2:aa:f3:31:36:f5:11:90:9b: ba:40:99:71 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsmZDI+e+CZDbWkt6WTy0QmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIyNDBhMDcxODBmY2YzMzYzNWY3NTdjYzE0NDllMGQ1ZGJk NGZkYjgwHhcNMjUxMjE2MDkwMDU5WhcNMjUxMjE3MDkwMDU5WjAzMTEwLwYDVQQD EygxNjQ3MTgzYjg0OGZkZmY5ODQ0MmQ5ZDljOTRjZTdmZDA4NThhNTlhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxxQ9Qxljmwa1ZMw7X0q8e3//P0r5 Kt8Eelvq6E/GiUyliWb6vDZ8ZToDCGRA7xuc1o1NkY7g6GF1PW0vnc/OC5Px3edp t+Xq9aEDnB6WX2VVb+TRxjh0VEOxceLyiiRsuzIynf0hWPJn70fPNZz/wDa69vAB brXo712HvdjfWgEWt2bPypj/HykBOgFcO4J8R28VjgDw1PZhMUI8oMC6aGKNRtC5 6WYcXTaq1N0ETwKMdE4POx9X2QlkvYa+y+PJRO1PaitKSYwjUCCC1fcocqtionq7 IFV8Uy2uVo47FdfkzglgEosvthwQtxS67YATUuqKnHpqswPiQDnbRwgygQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBZHGDuEj9/5hELZ2clM5/0IWKWaMB8GA1UdIwQY MBaAFCJAoHGA/PM2NfdXzBRJ4NXb1P24MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSWtDZ2NZRDg4elkxOTFmTUZFbmcxZHZVX2JnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy9hMzE0Y2MtMDY2ZS00YzA5LWEzNmEt ZDBiZDBlODAzZmQxLzEvSWtDZ2NZRDg4elkxOTFmTUZFbmcxZHZVX2JnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMy9hMzE0Y2MtMDY2ZS00YzA5LWEzNmEtZDBiZDBlODAzZmQx LzEvSWtDZ2NZRDg4elkxOTFmTUZFbmcxZHZVX2JnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARllwmJVD I06zZfM6NIqvqhP8SqB5ILTvwfbGlA/uKgxwhwNOAj6HMyJ9rluM+ApwMWYoS2sK h7kpgqecptBui4aV6+PrH1BZxTzjMGGIJbSU6XC4K3dr+NMWLIqUoAMRXk1FWCuF C9Evgn9wqXLrpPWUNG7SbOS7Q77an5kruJvZKOMiqaZszp1zxICndtwFGXVbmLer z7JfKP1lQu07A3fmhPN70YA0/r0fpjO+U+v8aHHI1P5L6prrHEl1DbZ89DecMzSb M6zC8sso/pIQDvohKW3jjCU+Kv+qPsGKav6XIcmd8k7ALi2HgXe78i+8il79sqrz MTb1EZCbukCZcQ== -----END CERTIFICATE-----Generated at Tue Dec 16 17:57:37 2025 by rpki-client