This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/2eb760-e94a-4ed0-85ff-74bf97c964df/1/IcABb7bLY4np0FbTkmLrRS-ZO9g.mft File: IcABb7bLY4np0FbTkmLrRS-ZO9g.mft (raw, json) Hash identifier: sN6B55faZMpvw4Fnz1KT9lNrF+BG5AMyZ70ASpVEK1o= Subject key identifier: FE:30:38:67:E8:B1:55:80:FE:A7:6E:65:D5:6C:A4:2A:7A:B2:48:31 Authority key identifier: 21:C0:01:6F:B6:CB:63:89:E9:D0:56:D3:92:62:EB:45:2F:99:3B:D8 Certificate issuer: /CN=21c0016fb6cb6389e9d056d39262eb452f993bd8 Certificate serial: 019AF27685D2A68C1F730B4B37C9BE22EDB1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IcABb7bLY4np0FbTkmLrRS-ZO9g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/2eb760-e94a-4ed0-85ff-74bf97c964df/1/IcABb7bLY4np0FbTkmLrRS-ZO9g.mft Manifest number: 1D Signing time: Sat 06 Dec 2025 07:00:44 +0000 Manifest this update: Sat 06 Dec 2025 07:00:44 +0000 Manifest next update: Sun 07 Dec 2025 07:00:44 +0000 Files and hashes: 1: IcABb7bLY4np0FbTkmLrRS-ZO9g.crl (hash: OACWh+ZHDlLr3TizfoOF8aBKj5TrnIiCth7a61EZXq8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/2eb760-e94a-4ed0-85ff-74bf97c964df/1/IcABb7bLY4np0FbTkmLrRS-ZO9g.crl rsync://rpki.ripe.net/repository/DEFAULT/e1/2eb760-e94a-4ed0-85ff-74bf97c964df/1/IcABb7bLY4np0FbTkmLrRS-ZO9g.mft rsync://rpki.ripe.net/repository/DEFAULT/IcABb7bLY4np0FbTkmLrRS-ZO9g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:76:85:d2:a6:8c:1f:73:0b:4b:37:c9:be:22:ed:b1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=21c0016fb6cb6389e9d056d39262eb452f993bd8 Validity Not Before: Dec 6 07:00:44 2025 GMT Not After : Dec 7 07:00:44 2025 GMT Subject: CN=fe303867e8b15580fea76e65d56ca42a7ab24831 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:24:03:43:49:dd:f5:d1:6d:cf:8d:e7:aa:72: b3:88:a0:c9:ca:50:57:ce:bc:12:27:c8:1e:9a:df: 7d:20:bd:21:5b:d4:9d:60:32:43:bf:de:55:ec:28: 05:b5:32:63:fd:7e:14:43:88:e3:6e:78:fc:bd:a3: 7a:eb:f1:ed:c0:02:04:e1:d6:04:e6:48:d7:11:82: a7:48:6d:05:22:9f:75:be:40:70:4e:e5:b3:a1:46: 42:44:3e:e4:09:4a:77:79:f1:0a:8e:06:b5:96:21: 7f:25:36:b9:bc:32:f8:8d:fe:0e:8f:08:69:de:db: d4:7e:e2:04:27:01:51:44:d2:21:86:78:87:82:99: b6:df:fa:9b:b2:15:79:e5:e3:ab:01:49:c5:04:96: 55:99:a5:2b:7f:1d:e6:89:74:a6:99:e3:d4:53:5a: f7:8f:28:a6:ec:91:c1:69:cc:93:75:e2:eb:af:24: 3d:1b:de:8d:60:ee:c4:d9:14:ea:d8:0a:6a:24:a1: 54:e5:01:45:da:ff:3e:d5:f0:bf:bf:cc:bf:95:79: e6:ea:1c:5e:7c:3b:4b:7d:95:80:c9:a9:25:4a:48: 75:b6:0b:1a:29:cd:d1:f8:cd:15:ce:c8:0e:1a:ad: bb:c8:1f:45:39:3b:bf:59:e4:cf:e3:68:4f:92:33: 0b:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:30:38:67:E8:B1:55:80:FE:A7:6E:65:D5:6C:A4:2A:7A:B2:48:31 X509v3 Authority Key Identifier: keyid:21:C0:01:6F:B6:CB:63:89:E9:D0:56:D3:92:62:EB:45:2F:99:3B:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IcABb7bLY4np0FbTkmLrRS-ZO9g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/2eb760-e94a-4ed0-85ff-74bf97c964df/1/IcABb7bLY4np0FbTkmLrRS-ZO9g.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/2eb760-e94a-4ed0-85ff-74bf97c964df/1/IcABb7bLY4np0FbTkmLrRS-ZO9g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 37:fc:5e:d8:5a:d2:19:28:a9:13:57:1a:30:50:86:5b:32:e5: ab:0b:4a:81:29:d8:35:17:0b:32:70:6c:b0:90:a4:ab:d6:c3: cf:9a:84:5e:ec:aa:98:b3:fe:03:e9:37:07:04:ad:b6:8f:41: 6f:cd:e1:6f:22:c6:ba:ff:0b:63:8a:63:e2:e1:53:d3:67:a0: 4f:04:f2:38:be:1b:2b:7f:73:4a:9a:ff:75:d0:5c:1d:09:05: 54:f8:7e:60:f4:00:23:2d:06:ba:90:8d:21:22:97:1d:09:f9: 8b:b3:cc:d5:6c:d6:8a:fa:d4:a2:b1:a2:f1:9c:b3:4d:2a:ac: 0d:d4:4d:ea:27:fa:24:79:b0:3d:1f:25:29:d6:84:5d:99:91: 88:3b:d2:6e:a0:75:d9:51:3f:53:0e:61:8d:94:e9:ca:c9:f8: 19:49:1c:f9:76:97:ce:d0:9c:4f:19:89:ef:62:6d:7d:22:39: 15:e4:40:05:4d:04:dc:0e:2f:57:ff:33:c2:da:60:54:f0:1a: 47:08:5b:e1:e9:c1:87:34:6a:d2:78:04:5a:1c:fc:56:f2:b0: f8:13:15:d8:47:a4:50:01:2d:57:92:28:4d:38:51:8b:3e:57: 50:f2:b4:91:8e:63:52:82:f4:d6:e5:ac:ec:61:b5:3f:34:a1: b7:77:18:97 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrydoXSpowfcwtLN8m+Iu2xMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIxYzAwMTZmYjZjYjYzODllOWQwNTZkMzkyNjJlYjQ1MmY5 OTNiZDgwHhcNMjUxMjA2MDcwMDQ0WhcNMjUxMjA3MDcwMDQ0WjAzMTEwLwYDVQQD EyhmZTMwMzg2N2U4YjE1NTgwZmVhNzZlNjVkNTZjYTQyYTdhYjI0ODMxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtyQDQ0nd9dFtz43nqnKziKDJylBX zrwSJ8gemt99IL0hW9SdYDJDv95V7CgFtTJj/X4UQ4jjbnj8vaN66/HtwAIE4dYE 5kjXEYKnSG0FIp91vkBwTuWzoUZCRD7kCUp3efEKjga1liF/JTa5vDL4jf4Ojwhp 3tvUfuIEJwFRRNIhhniHgpm23/qbshV55eOrAUnFBJZVmaUrfx3miXSmmePUU1r3 jyim7JHBacyTdeLrryQ9G96NYO7E2RTq2ApqJKFU5QFF2v8+1fC/v8y/lXnm6hxe fDtLfZWAyaklSkh1tgsaKc3R+M0VzsgOGq27yB9FOTu/WeTP42hPkjMLowIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFP4wOGfosVWA/qduZdVspCp6skgxMB8GA1UdIwQY MBaAFCHAAW+2y2OJ6dBW05Ji60UvmTvYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSWNBQmI3YkxZNG5wMEZiVGttTHJSUy1aTzlnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMS8yZWI3NjAtZTk0YS00ZWQwLTg1ZmYt NzRiZjk3Yzk2NGRmLzEvSWNBQmI3YkxZNG5wMEZiVGttTHJSUy1aTzlnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMS8yZWI3NjAtZTk0YS00ZWQwLTg1ZmYtNzRiZjk3Yzk2NGRm LzEvSWNBQmI3YkxZNG5wMEZiVGttTHJSUy1aTzlnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAN/xe2FrS GSipE1caMFCGWzLlqwtKgSnYNRcLMnBssJCkq9bDz5qEXuyqmLP+A+k3BwStto9B b83hbyLGuv8LY4pj4uFT02egTwTyOL4bK39zSpr/ddBcHQkFVPh+YPQAIy0GupCN ISKXHQn5i7PM1WzWivrUorGi8ZyzTSqsDdRN6if6JHmwPR8lKdaEXZmRiDvSbqB1 2VE/Uw5hjZTpysn4GUkc+XaXztCcTxmJ72JtfSI5FeRABU0E3A4vV/8zwtpgVPAa Rwhb4enBhzRq0ngEWhz8VvKw+BMV2EekUAEtV5IoTThRiz5XUPK0kY5jUoL01uWs 7GG1PzSht3cYlw== -----END CERTIFICATE-----Generated at Sat Dec 6 11:46:32 2025 by rpki-client