This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/f184a9-c2fe-4279-acdc-7ce6980cb1cc/1/I8cVVBujctWQ1odn14zmmEABMFk.mft File: I8cVVBujctWQ1odn14zmmEABMFk.mft (raw, json) Hash identifier: ZDPUBy56RIYcwPRznnvO658ipJfJM6/hh/5nG3EhSV8= Subject key identifier: 13:E7:B0:43:62:E5:FA:D3:33:66:CD:93:A7:D3:3E:23:A2:CA:41:BA Authority key identifier: 23:C7:15:54:1B:A3:72:D5:90:D6:87:67:D7:8C:E6:98:40:01:30:59 Certificate issuer: /CN=23c715541ba372d590d68767d78ce69840013059 Certificate serial: 019AF12DD0B5B6398DD50B47242602EF35ED Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I8cVVBujctWQ1odn14zmmEABMFk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/f184a9-c2fe-4279-acdc-7ce6980cb1cc/1/I8cVVBujctWQ1odn14zmmEABMFk.mft Manifest number: 175D Signing time: Sat 06 Dec 2025 01:01:42 +0000 Manifest this update: Sat 06 Dec 2025 01:01:42 +0000 Manifest next update: Sun 07 Dec 2025 01:01:42 +0000 Files and hashes: 1: I8cVVBujctWQ1odn14zmmEABMFk.crl (hash: SEBuB8me8jnsx/ZRtHmX1+FCjYURxJYEEMox/jdPrlE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/f184a9-c2fe-4279-acdc-7ce6980cb1cc/1/I8cVVBujctWQ1odn14zmmEABMFk.crl rsync://rpki.ripe.net/repository/DEFAULT/df/f184a9-c2fe-4279-acdc-7ce6980cb1cc/1/I8cVVBujctWQ1odn14zmmEABMFk.mft rsync://rpki.ripe.net/repository/DEFAULT/I8cVVBujctWQ1odn14zmmEABMFk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:01:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2d:d0:b5:b6:39:8d:d5:0b:47:24:26:02:ef:35:ed Signature Algorithm: sha256WithRSAEncryption Issuer: CN=23c715541ba372d590d68767d78ce69840013059 Validity Not Before: Dec 6 01:01:42 2025 GMT Not After : Dec 7 01:01:42 2025 GMT Subject: CN=13e7b04362e5fad33366cd93a7d33e23a2ca41ba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:23:d7:35:99:87:0f:0a:d9:89:0f:03:97:5b: a3:1b:36:e8:25:89:06:55:25:74:eb:d5:cb:db:65: 61:0f:d6:80:af:af:2a:49:80:c6:b2:eb:a4:43:c4: 5a:bc:2d:b0:ab:9f:d3:7d:82:28:a0:ec:12:71:e5: dc:50:a7:ab:7f:d6:07:99:ae:d1:30:fe:1f:7d:9c: c9:13:77:99:88:a4:13:21:33:09:0b:9b:39:f3:02: a3:e8:c1:17:66:17:26:bc:e9:48:50:7e:e4:30:dd: bb:5f:42:80:24:c3:53:f6:f7:89:7c:e6:f9:e3:12: d1:bb:21:f4:e6:7b:e1:a8:3f:fe:24:fc:8a:ae:b6: 11:eb:62:e4:6e:6a:bf:49:2e:b6:a0:80:d4:df:7d: 41:22:92:d8:eb:5c:32:1e:eb:86:d7:01:af:a8:66: 18:dc:bd:08:13:32:f5:11:15:17:93:f5:69:a4:52: 0b:c5:2f:39:cd:e2:35:8d:38:e9:1e:ee:fb:9b:fb: eb:b7:a1:9a:7c:bd:63:1e:1c:b8:ae:09:70:3b:6d: d2:80:63:21:1a:0a:af:4f:0d:57:1e:92:6c:61:6b: 64:c6:b1:07:13:ee:27:c7:cb:ea:2e:3d:a4:dc:eb: 20:66:8a:98:53:e1:4d:95:c9:36:14:04:65:56:4f: 3a:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:E7:B0:43:62:E5:FA:D3:33:66:CD:93:A7:D3:3E:23:A2:CA:41:BA X509v3 Authority Key Identifier: keyid:23:C7:15:54:1B:A3:72:D5:90:D6:87:67:D7:8C:E6:98:40:01:30:59 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I8cVVBujctWQ1odn14zmmEABMFk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/f184a9-c2fe-4279-acdc-7ce6980cb1cc/1/I8cVVBujctWQ1odn14zmmEABMFk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/df/f184a9-c2fe-4279-acdc-7ce6980cb1cc/1/I8cVVBujctWQ1odn14zmmEABMFk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8a:58:84:65:cb:1d:fc:64:5f:4a:f0:8f:5c:e9:58:8b:02:92: 63:02:86:d4:46:0b:13:ca:4d:60:83:19:2f:46:b3:f9:c0:c7: c6:04:51:45:96:de:e4:d1:7e:5c:d4:b4:29:f8:55:b3:1f:3b: ec:7c:21:62:6b:63:74:4a:76:0d:d9:73:26:cd:fa:d6:9c:54: 2a:66:fb:3f:03:7b:18:a6:2b:e7:62:d0:75:f6:96:43:81:38: 35:0f:f4:5b:54:9a:00:4e:f4:cf:7e:50:bc:06:0b:a9:e9:1d: d4:90:11:13:30:88:c2:ee:ae:54:f4:1b:ae:b9:46:9f:40:9d: b1:50:a5:70:5e:fc:10:4f:9a:9b:3d:4c:37:6e:cb:73:e0:a7: 37:b0:71:7f:fd:20:af:33:d6:5a:08:b9:5a:be:05:0f:2f:c8: ce:39:5a:5b:83:42:3c:59:0b:29:f4:d8:d3:05:6c:d5:91:dc: c2:b6:0a:90:2f:74:0f:9c:09:d4:c3:89:03:50:f5:ae:01:f8: 41:d8:b1:8d:ae:1e:6f:57:9d:3a:71:c4:80:3b:89:be:11:dc: 6a:54:f2:a7:eb:85:46:5f:13:5f:bc:30:ea:17:0e:31:09:6a: 2a:58:25:89:ff:6b:53:58:1a:ef:d3:78:36:32:57:ac:45:41: 51:50:ee:d1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLdC1tjmN1QtHJCYC7zXtMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIzYzcxNTU0MWJhMzcyZDU5MGQ2ODc2N2Q3OGNlNjk4NDAw MTMwNTkwHhcNMjUxMjA2MDEwMTQyWhcNMjUxMjA3MDEwMTQyWjAzMTEwLwYDVQQD EygxM2U3YjA0MzYyZTVmYWQzMzM2NmNkOTNhN2QzM2UyM2EyY2E0MWJhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9CPXNZmHDwrZiQ8Dl1ujGzboJYkG VSV069XL22VhD9aAr68qSYDGsuukQ8RavC2wq5/TfYIooOwSceXcUKerf9YHma7R MP4ffZzJE3eZiKQTITMJC5s58wKj6MEXZhcmvOlIUH7kMN27X0KAJMNT9veJfOb5 4xLRuyH05nvhqD/+JPyKrrYR62Lkbmq/SS62oIDU331BIpLY61wyHuuG1wGvqGYY 3L0IEzL1ERUXk/VppFILxS85zeI1jTjpHu77m/vrt6GafL1jHhy4rglwO23SgGMh GgqvTw1XHpJsYWtkxrEHE+4nx8vqLj2k3OsgZoqYU+FNlck2FARlVk86UwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBPnsENi5frTM2bNk6fTPiOiykG6MB8GA1UdIwQY MBaAFCPHFVQbo3LVkNaHZ9eM5phAATBZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSThjVlZCdWpjdFdRMW9kbjE0em1tRUFCTUZrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi9mMTg0YTktYzJmZS00Mjc5LWFjZGMt N2NlNjk4MGNiMWNjLzEvSThjVlZCdWpjdFdRMW9kbjE0em1tRUFCTUZrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZi9mMTg0YTktYzJmZS00Mjc5LWFjZGMtN2NlNjk4MGNiMWNj LzEvSThjVlZCdWpjdFdRMW9kbjE0em1tRUFCTUZrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiliEZcsd /GRfSvCPXOlYiwKSYwKG1EYLE8pNYIMZL0az+cDHxgRRRZbe5NF+XNS0KfhVsx87 7HwhYmtjdEp2DdlzJs361pxUKmb7PwN7GKYr52LQdfaWQ4E4NQ/0W1SaAE70z35Q vAYLqekd1JAREzCIwu6uVPQbrrlGn0CdsVClcF78EE+amz1MN27Lc+CnN7Bxf/0g rzPWWgi5Wr4FDy/IzjlaW4NCPFkLKfTY0wVs1ZHcwrYKkC90D5wJ1MOJA1D1rgH4 Qdixja4eb1edOnHEgDuJvhHcalTyp+uFRl8TX7ww6hcOMQlqKlglif9rU1ga79N4 NjJXrEVBUVDu0Q== -----END CERTIFICATE-----Generated at Sat Dec 6 08:26:30 2025 by rpki-client