This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/cbf67b-a65a-42a3-8908-07369e14cade/1/IlVxaqH0w8EChxihwzHiKzOerXw.mft File: IlVxaqH0w8EChxihwzHiKzOerXw.mft (raw, json) Hash identifier: CjPYcDXQ47yh7NVdWZjeTatMEYzKF2Z91/CenOudHf4= Subject key identifier: CC:D4:11:69:87:B5:EC:39:7A:EE:65:AC:CB:F1:33:17:FB:29:E9:58 Authority key identifier: 22:55:71:6A:A1:F4:C3:C1:02:87:18:A1:C3:31:E2:2B:33:9E:AD:7C Certificate issuer: /CN=2255716aa1f4c3c1028718a1c331e22b339ead7c Certificate serial: 019AF5E57F738E44CA440E4BB602A0415540 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IlVxaqH0w8EChxihwzHiKzOerXw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/cbf67b-a65a-42a3-8908-07369e14cade/1/IlVxaqH0w8EChxihwzHiKzOerXw.mft Manifest number: 13E4 Signing time: Sat 06 Dec 2025 23:00:49 +0000 Manifest this update: Sat 06 Dec 2025 23:00:49 +0000 Manifest next update: Sun 07 Dec 2025 23:00:49 +0000 Files and hashes: 1: IlVxaqH0w8EChxihwzHiKzOerXw.crl (hash: 6/ENqdkUpJtMTxnepHgsXldsCfFgyNraXw95vSpWjwo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/cbf67b-a65a-42a3-8908-07369e14cade/1/IlVxaqH0w8EChxihwzHiKzOerXw.crl rsync://rpki.ripe.net/repository/DEFAULT/d5/cbf67b-a65a-42a3-8908-07369e14cade/1/IlVxaqH0w8EChxihwzHiKzOerXw.mft rsync://rpki.ripe.net/repository/DEFAULT/IlVxaqH0w8EChxihwzHiKzOerXw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 21:29:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:e5:7f:73:8e:44:ca:44:0e:4b:b6:02:a0:41:55:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2255716aa1f4c3c1028718a1c331e22b339ead7c Validity Not Before: Dec 6 23:00:49 2025 GMT Not After : Dec 7 23:00:49 2025 GMT Subject: CN=ccd4116987b5ec397aee65accbf13317fb29e958 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:ac:3f:8e:15:b2:ff:f9:51:4e:7c:e7:92:f7: d3:44:97:3c:23:87:f3:2c:dc:b5:b9:66:74:81:e8: c9:6d:a2:cd:79:07:81:6f:11:8c:a8:27:38:f6:92: b2:9d:66:b8:a3:c1:f9:b0:bc:6f:50:d0:12:ab:8e: 1e:3e:f0:28:87:87:71:97:2f:0d:dd:87:00:f1:20: 19:78:a2:59:a0:d1:3e:b4:f0:5b:6f:58:6d:c7:64: 9b:e6:16:03:1a:46:20:16:b2:f8:79:d5:bd:17:b1: fb:93:e2:18:02:35:3e:bf:25:64:57:02:e3:8a:35: 75:82:7c:cc:20:97:c7:eb:aa:41:f1:9e:80:f3:3a: 96:e7:92:4d:59:4d:55:4a:24:38:e8:6f:1b:fa:27: 7b:03:b3:a5:f0:96:9c:e5:47:06:8d:ba:dc:73:b3: b6:ac:32:71:46:0e:66:74:5e:6f:e1:e4:d5:6f:57: dd:12:68:a5:2c:0e:07:d5:3d:8d:ad:e9:97:32:b6: d3:12:bf:f1:3e:45:de:9a:a6:e1:9f:b2:f1:e0:7a: 9d:d7:00:a7:9f:f2:42:ae:12:69:d5:aa:39:24:c4: 54:a0:cd:0b:21:b4:10:fe:4e:fe:41:bc:a3:e1:ed: 67:84:da:6d:7f:36:5a:65:c3:c0:47:aa:8e:94:f5: 86:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:D4:11:69:87:B5:EC:39:7A:EE:65:AC:CB:F1:33:17:FB:29:E9:58 X509v3 Authority Key Identifier: keyid:22:55:71:6A:A1:F4:C3:C1:02:87:18:A1:C3:31:E2:2B:33:9E:AD:7C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IlVxaqH0w8EChxihwzHiKzOerXw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/cbf67b-a65a-42a3-8908-07369e14cade/1/IlVxaqH0w8EChxihwzHiKzOerXw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/cbf67b-a65a-42a3-8908-07369e14cade/1/IlVxaqH0w8EChxihwzHiKzOerXw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 23:39:d8:43:9a:3f:3c:7b:d1:61:40:6c:97:71:a0:4f:97:50: 9e:f3:06:ed:3d:4e:49:67:3c:58:55:8d:f4:e9:6d:32:3e:33: 85:f6:39:8f:87:11:66:e9:17:05:e2:be:9a:7c:1c:75:c9:06: d5:28:8e:5a:64:1b:4a:ea:09:f0:a9:a2:95:03:ec:78:0c:33: 27:db:31:32:55:90:0d:4e:d8:8a:93:28:a7:86:3f:5b:a4:41: ac:5a:16:6f:fd:1d:84:45:a7:30:7b:1d:2b:c1:c7:30:fd:45: b8:42:a8:c8:4c:01:0d:70:d3:28:eb:a2:ab:a6:13:63:c1:c6: b1:43:8f:09:d5:c6:4a:b6:d5:44:3d:ed:dd:2f:27:c1:53:8e: 60:fa:b4:bc:f4:cd:cc:7f:cd:d1:c7:6f:86:91:5f:5a:52:23: b5:a9:9d:36:ab:24:2b:6b:6e:65:c6:ac:23:fa:67:a7:1c:8f: a0:45:df:6c:e1:96:d5:f4:bb:36:0b:a3:88:2a:35:f6:58:c1: 25:ce:bf:13:b3:54:71:de:86:ad:de:a6:9f:f0:7b:a0:b8:e7: 80:8e:35:56:21:f4:7d:49:cb:eb:4b:fa:08:99:21:a4:17:43: 78:d2:a2:7c:44:da:85:4b:e0:8c:a4:56:25:ba:76:7e:93:6b: 4c:a3:04:41 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr15X9zjkTKRA5LtgKgQVVAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIyNTU3MTZhYTFmNGMzYzEwMjg3MThhMWMzMzFlMjJiMzM5 ZWFkN2MwHhcNMjUxMjA2MjMwMDQ5WhcNMjUxMjA3MjMwMDQ5WjAzMTEwLwYDVQQD EyhjY2Q0MTE2OTg3YjVlYzM5N2FlZTY1YWNjYmYxMzMxN2ZiMjllOTU4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqqw/jhWy//lRTnznkvfTRJc8I4fz LNy1uWZ0gejJbaLNeQeBbxGMqCc49pKynWa4o8H5sLxvUNASq44ePvAoh4dxly8N 3YcA8SAZeKJZoNE+tPBbb1htx2Sb5hYDGkYgFrL4edW9F7H7k+IYAjU+vyVkVwLj ijV1gnzMIJfH66pB8Z6A8zqW55JNWU1VSiQ46G8b+id7A7Ol8Jac5UcGjbrcc7O2 rDJxRg5mdF5v4eTVb1fdEmilLA4H1T2NremXMrbTEr/xPkXemqbhn7Lx4Hqd1wCn n/JCrhJp1ao5JMRUoM0LIbQQ/k7+Qbyj4e1nhNptfzZaZcPAR6qOlPWG+wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMzUEWmHtew5eu5lrMvxMxf7KelYMB8GA1UdIwQY MBaAFCJVcWqh9MPBAocYocMx4isznq18MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSWxWeGFxSDB3OEVDaHhpaHd6SGlLek9lclh3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNS9jYmY2N2ItYTY1YS00MmEzLTg5MDgt MDczNjllMTRjYWRlLzEvSWxWeGFxSDB3OEVDaHhpaHd6SGlLek9lclh3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNS9jYmY2N2ItYTY1YS00MmEzLTg5MDgtMDczNjllMTRjYWRl LzEvSWxWeGFxSDB3OEVDaHhpaHd6SGlLek9lclh3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIznYQ5o/ PHvRYUBsl3GgT5dQnvMG7T1OSWc8WFWN9OltMj4zhfY5j4cRZukXBeK+mnwcdckG 1SiOWmQbSuoJ8KmilQPseAwzJ9sxMlWQDU7YipMop4Y/W6RBrFoWb/0dhEWnMHsd K8HHMP1FuEKoyEwBDXDTKOuiq6YTY8HGsUOPCdXGSrbVRD3t3S8nwVOOYPq0vPTN zH/N0cdvhpFfWlIjtamdNqskK2tuZcasI/pnpxyPoEXfbOGW1fS7NgujiCo19ljB Jc6/E7NUcd6Grd6mn/B7oLjngI41ViH0fUnL60v6CJkhpBdDeNKifETahUvgjKRW Jbp2fpNrTKMEQQ== -----END CERTIFICATE-----Generated at Sun Dec 7 01:53:01 2025 by rpki-client