This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/d814b4-02b1-4fb3-acef-1601d41fdc1f/1/i024ekl6Fbp5pwbRLukExESdG1U.mft File: i024ekl6Fbp5pwbRLukExESdG1U.mft (raw, json) Hash identifier: QF6ytFrPVq2AIZO+e5Ehb5eKWGoV1P7cnXryL5u/bzA= Subject key identifier: 51:81:66:42:7E:CC:13:F1:F3:22:0D:01:CA:14:80:33:57:4D:E8:80 Authority key identifier: 8B:4D:B8:7A:49:7A:15:BA:79:A7:06:D1:2E:E9:04:C4:44:9D:1B:55 Certificate issuer: /CN=8b4db87a497a15ba79a706d12ee904c4449d1b55 Certificate serial: 019AF1D208653483A0A39737FE25C50D19D5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i024ekl6Fbp5pwbRLukExESdG1U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/d814b4-02b1-4fb3-acef-1601d41fdc1f/1/i024ekl6Fbp5pwbRLukExESdG1U.mft Manifest number: 020F Signing time: Sat 06 Dec 2025 04:01:05 +0000 Manifest this update: Sat 06 Dec 2025 04:01:05 +0000 Manifest next update: Sun 07 Dec 2025 04:01:05 +0000 Files and hashes: 1: Mf_fXP2jPHVmLONdZ1xYPtuNu7Q.roa (hash: LOr2gDDIVLXiBV/jZXlGLfpc3s69N4tqrkcfM7qBuoA=) 2: i024ekl6Fbp5pwbRLukExESdG1U.crl (hash: GeTE3kogI776EttD25PJOEO/64UEQKG80H2h2Tg23q0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/d814b4-02b1-4fb3-acef-1601d41fdc1f/1/i024ekl6Fbp5pwbRLukExESdG1U.crl rsync://rpki.ripe.net/repository/DEFAULT/d8/d814b4-02b1-4fb3-acef-1601d41fdc1f/1/i024ekl6Fbp5pwbRLukExESdG1U.mft rsync://rpki.ripe.net/repository/DEFAULT/i024ekl6Fbp5pwbRLukExESdG1U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d2:08:65:34:83:a0:a3:97:37:fe:25:c5:0d:19:d5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8b4db87a497a15ba79a706d12ee904c4449d1b55 Validity Not Before: Dec 6 04:01:05 2025 GMT Not After : Dec 7 04:01:05 2025 GMT Subject: CN=518166427ecc13f1f3220d01ca148033574de880 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:6a:87:60:13:71:68:02:7a:52:2a:a7:26:9a: 89:69:b7:63:2c:de:c4:ad:1d:56:98:02:af:e1:73: be:6c:2e:80:de:fd:11:51:9f:4c:c3:56:dd:b8:55: b7:14:ac:25:30:c7:d9:76:e7:a3:2c:02:7c:67:b1: 7b:8a:db:de:30:0a:c1:09:a3:9f:aa:c1:7a:b8:59: 83:d6:58:fd:4d:17:1e:8a:ff:cf:dd:7a:49:75:bd: 98:73:94:20:db:4a:98:96:0b:67:4d:db:c2:54:3b: 42:aa:c7:87:51:06:b7:3c:bc:5a:70:1e:06:48:e0: 49:d6:03:dc:0d:8c:ef:10:1b:87:30:14:2e:7c:9b: 6c:30:3a:5d:4c:12:8f:05:08:c2:23:bc:e7:07:ca: b7:f9:0b:3b:70:ad:67:f3:98:3d:b5:5e:c8:7b:81: a7:80:f4:88:cb:fb:61:17:b4:ed:5d:05:ab:5d:24: c9:7a:12:2d:d3:79:cf:57:bd:9d:12:ac:e2:fc:f1: ad:15:16:3e:bd:62:c8:95:f4:be:70:40:ee:54:d1: b9:92:9a:1d:86:36:79:ee:71:c5:bb:37:35:f2:22: 85:89:18:72:36:b8:f8:16:d7:b7:e4:df:08:aa:03: c5:4d:95:3c:20:bb:b8:4e:04:b5:be:75:be:f7:af: 40:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:81:66:42:7E:CC:13:F1:F3:22:0D:01:CA:14:80:33:57:4D:E8:80 X509v3 Authority Key Identifier: keyid:8B:4D:B8:7A:49:7A:15:BA:79:A7:06:D1:2E:E9:04:C4:44:9D:1B:55 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i024ekl6Fbp5pwbRLukExESdG1U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/d814b4-02b1-4fb3-acef-1601d41fdc1f/1/i024ekl6Fbp5pwbRLukExESdG1U.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/d814b4-02b1-4fb3-acef-1601d41fdc1f/1/i024ekl6Fbp5pwbRLukExESdG1U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a8:f9:58:3a:4b:8b:9c:24:c1:4e:27:ba:c7:68:cb:77:5d:9e: 40:0d:12:49:a7:06:20:2f:eb:e5:66:79:f7:58:15:73:c9:ae: 64:f0:45:ae:e4:71:3b:80:ff:43:1e:1d:64:47:da:f5:1f:9d: 5a:6a:48:fc:f8:17:93:0e:5a:57:08:91:d2:04:49:78:8d:d0: 21:61:53:dd:9e:d4:bc:f1:59:f1:28:82:bc:ac:b8:61:79:c6: 05:e9:cc:9e:e2:b2:ec:65:fd:49:21:e5:40:f2:07:11:bf:cc: 5f:63:7f:15:9c:d3:61:9f:da:6c:fd:49:6f:f1:2b:c2:14:46: 69:1f:ca:c5:b2:f3:3f:cc:b0:6e:54:9b:72:e3:06:20:1e:e9: 30:e2:12:fd:8a:fc:1f:3a:49:56:cf:56:aa:ea:c7:16:d4:c5: e9:55:2b:00:cf:ba:62:51:1c:6b:9f:08:8c:b2:f6:2a:da:c0: 5a:dc:da:eb:c9:5d:a2:d5:26:f1:ae:b9:3a:04:01:01:18:e5: 69:5a:39:75:37:76:53:a0:53:fe:a1:e8:78:3a:33:14:ce:b1: fe:1a:4a:f4:15:59:33:a7:74:d9:0a:00:38:7d:56:de:87:aa: 67:ae:8d:5a:e2:10:77:2b:05:34:0a:21:9d:7a:38:91:0a:80: f8:92:e1:99 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0ghlNIOgo5c3/iXFDRnVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhiNGRiODdhNDk3YTE1YmE3OWE3MDZkMTJlZTkwNGM0NDQ5 ZDFiNTUwHhcNMjUxMjA2MDQwMTA1WhcNMjUxMjA3MDQwMTA1WjAzMTEwLwYDVQQD Eyg1MTgxNjY0MjdlY2MxM2YxZjMyMjBkMDFjYTE0ODAzMzU3NGRlODgwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsWqHYBNxaAJ6UiqnJpqJabdjLN7E rR1WmAKv4XO+bC6A3v0RUZ9Mw1bduFW3FKwlMMfZduejLAJ8Z7F7itveMArBCaOf qsF6uFmD1lj9TRceiv/P3XpJdb2Yc5Qg20qYlgtnTdvCVDtCqseHUQa3PLxacB4G SOBJ1gPcDYzvEBuHMBQufJtsMDpdTBKPBQjCI7znB8q3+Qs7cK1n85g9tV7Ie4Gn gPSIy/thF7TtXQWrXSTJehIt03nPV72dEqzi/PGtFRY+vWLIlfS+cEDuVNG5kpod hjZ57nHFuzc18iKFiRhyNrj4Fte35N8IqgPFTZU8ILu4TgS1vnW+969ABwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFGBZkJ+zBPx8yINAcoUgDNXTeiAMB8GA1UdIwQY MBaAFItNuHpJehW6eacG0S7pBMREnRtVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaTAyNGVrbDZGYnA1cHdiUkx1a0V4RVNkRzFVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOC9kODE0YjQtMDJiMS00ZmIzLWFjZWYt MTYwMWQ0MWZkYzFmLzEvaTAyNGVrbDZGYnA1cHdiUkx1a0V4RVNkRzFVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kOC9kODE0YjQtMDJiMS00ZmIzLWFjZWYtMTYwMWQ0MWZkYzFm LzEvaTAyNGVrbDZGYnA1cHdiUkx1a0V4RVNkRzFVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqPlYOkuL nCTBTie6x2jLd12eQA0SSacGIC/r5WZ591gVc8muZPBFruRxO4D/Qx4dZEfa9R+d WmpI/PgXkw5aVwiR0gRJeI3QIWFT3Z7UvPFZ8SiCvKy4YXnGBenMnuKy7GX9SSHl QPIHEb/MX2N/FZzTYZ/abP1Jb/ErwhRGaR/KxbLzP8ywblSbcuMGIB7pMOIS/Yr8 HzpJVs9WqurHFtTF6VUrAM+6YlEca58IjLL2KtrAWtza68ldotUm8a65OgQBARjl aVo5dTd2U6BT/qHoeDozFM6x/hpK9BVZM6d02QoAOH1W3oeqZ66NWuIQdysFNAoh nXo4kQqA+JLhmQ== -----END CERTIFICATE-----Generated at Sat Dec 6 06:57:47 2025 by rpki-client