This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/a40bbb-556a-40c5-b97c-32b2be06222c/1/iFeQ87X0pUUjTzIwv4lmOFbge8c.mft File: iFeQ87X0pUUjTzIwv4lmOFbge8c.mft (raw, json) Hash identifier: txNbN8kMV7ILZOFHVQ6zwdLpCHxbLEA3cEBHheyfyr8= Subject key identifier: DE:0F:B3:64:90:45:D2:C6:68:30:A7:40:30:C0:16:F2:60:B5:53:F4 Authority key identifier: 88:57:90:F3:B5:F4:A5:45:23:4F:32:30:BF:89:66:38:56:E0:7B:C7 Certificate issuer: /CN=885790f3b5f4a545234f3230bf89663856e07bc7 Certificate serial: 019AF12D875CC504BE4BA8184EC669E2D2D7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iFeQ87X0pUUjTzIwv4lmOFbge8c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/a40bbb-556a-40c5-b97c-32b2be06222c/1/iFeQ87X0pUUjTzIwv4lmOFbge8c.mft Manifest number: 175D Signing time: Sat 06 Dec 2025 01:01:23 +0000 Manifest this update: Sat 06 Dec 2025 01:01:23 +0000 Manifest next update: Sun 07 Dec 2025 01:01:23 +0000 Files and hashes: 1: iFeQ87X0pUUjTzIwv4lmOFbge8c.crl (hash: faXXEtomn4+qvMjNnbs9F+xtVgbekwTaxLCw6zr9K6I=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/a40bbb-556a-40c5-b97c-32b2be06222c/1/iFeQ87X0pUUjTzIwv4lmOFbge8c.crl rsync://rpki.ripe.net/repository/DEFAULT/e2/a40bbb-556a-40c5-b97c-32b2be06222c/1/iFeQ87X0pUUjTzIwv4lmOFbge8c.mft rsync://rpki.ripe.net/repository/DEFAULT/iFeQ87X0pUUjTzIwv4lmOFbge8c.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:01:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2d:87:5c:c5:04:be:4b:a8:18:4e:c6:69:e2:d2:d7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=885790f3b5f4a545234f3230bf89663856e07bc7 Validity Not Before: Dec 6 01:01:23 2025 GMT Not After : Dec 7 01:01:23 2025 GMT Subject: CN=de0fb3649045d2c66830a74030c016f260b553f4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:f0:ef:05:cb:13:89:3a:b0:9e:73:8e:6a:4d: 15:ff:f8:63:ab:4b:b9:a2:10:cc:f7:86:1b:21:12: 40:90:e6:02:4c:8b:19:56:37:67:08:f6:f1:bb:7a: 08:c5:b7:a8:ee:f0:7c:a3:2e:9e:e4:05:be:e3:4a: 07:57:d0:fb:ad:55:76:2e:7c:25:34:6e:05:ed:7d: 1a:20:a4:ca:5b:cf:70:50:5f:a7:5f:e4:ca:f7:7c: b2:36:13:67:31:b4:00:af:60:7f:48:16:11:75:15: 9c:d0:d2:58:19:98:a1:08:86:ec:3c:9d:b0:dd:e2: 45:26:76:31:d9:d0:a6:7b:53:b7:3b:fa:3b:0c:26: 93:e0:52:55:6e:7f:ff:19:75:4c:0f:55:47:1e:29: 27:f0:d0:ed:3b:31:51:39:de:d9:04:96:85:57:86: 9d:4b:67:6c:d4:e6:91:9d:be:f5:d4:a2:d4:44:90: 83:80:52:0c:51:f6:79:a6:f4:3e:44:fb:5c:63:40: fa:38:1a:b0:4c:d7:ab:3a:cd:2a:2c:6a:dc:eb:17: 31:9f:3b:d7:62:51:a2:79:21:59:91:aa:00:29:08: 72:93:af:43:b4:26:e2:eb:eb:22:d6:8e:0e:d8:4a: 1d:32:e2:2b:30:c7:7c:d5:60:a4:0a:f6:19:a3:27: e5:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:0F:B3:64:90:45:D2:C6:68:30:A7:40:30:C0:16:F2:60:B5:53:F4 X509v3 Authority Key Identifier: keyid:88:57:90:F3:B5:F4:A5:45:23:4F:32:30:BF:89:66:38:56:E0:7B:C7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iFeQ87X0pUUjTzIwv4lmOFbge8c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/a40bbb-556a-40c5-b97c-32b2be06222c/1/iFeQ87X0pUUjTzIwv4lmOFbge8c.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/a40bbb-556a-40c5-b97c-32b2be06222c/1/iFeQ87X0pUUjTzIwv4lmOFbge8c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption af:6e:13:9a:2e:51:8b:5c:05:ef:fe:b7:d0:6e:4e:ff:26:29: 7b:ba:48:a2:d6:2e:dc:e4:2c:3c:d9:8c:8f:84:93:57:44:03: 08:88:cc:1f:c2:8c:f7:ce:05:0d:db:ea:17:c6:b6:29:29:99: 6b:d5:20:e7:1f:39:2a:2d:48:e7:bf:4c:06:e4:53:d8:7c:f4: 5a:19:49:6e:0d:d4:a7:5e:15:34:d6:11:c9:58:ce:43:a2:f9: f5:08:e0:6f:d2:ed:69:90:5e:8e:16:e3:69:18:ed:e3:ec:b5: 3e:5a:cf:ae:dc:5b:37:45:5d:49:18:63:5b:e8:28:15:ef:76: fb:84:db:2f:36:6e:79:53:74:c7:35:31:41:fe:7f:12:86:35: 0b:e9:80:88:12:07:91:cc:b0:ae:c6:ec:7c:26:e8:bb:02:64: d8:bb:84:0a:cb:3e:f7:ef:6c:c9:70:22:05:00:6a:8b:8b:45: d0:b4:a8:25:62:f2:cb:ea:16:d2:6e:d1:72:a1:c4:73:20:0a: a8:29:0e:1d:65:64:4e:2f:d3:25:5c:d9:87:b9:6d:d9:34:79: a4:43:de:ce:01:9c:3b:37:43:23:90:ee:0c:89:1c:50:c5:31: 85:20:85:b6:51:3e:24:91:aa:f8:08:88:e2:f5:fe:13:26:e2: 96:2f:18:f9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLYdcxQS+S6gYTsZp4tLXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg4NTc5MGYzYjVmNGE1NDUyMzRmMzIzMGJmODk2NjM4NTZl MDdiYzcwHhcNMjUxMjA2MDEwMTIzWhcNMjUxMjA3MDEwMTIzWjAzMTEwLwYDVQQD EyhkZTBmYjM2NDkwNDVkMmM2NjgzMGE3NDAzMGMwMTZmMjYwYjU1M2Y0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6vDvBcsTiTqwnnOOak0V//hjq0u5 ohDM94YbIRJAkOYCTIsZVjdnCPbxu3oIxbeo7vB8oy6e5AW+40oHV9D7rVV2Lnwl NG4F7X0aIKTKW89wUF+nX+TK93yyNhNnMbQAr2B/SBYRdRWc0NJYGZihCIbsPJ2w 3eJFJnYx2dCme1O3O/o7DCaT4FJVbn//GXVMD1VHHikn8NDtOzFROd7ZBJaFV4ad S2ds1OaRnb711KLURJCDgFIMUfZ5pvQ+RPtcY0D6OBqwTNerOs0qLGrc6xcxnzvX YlGieSFZkaoAKQhyk69DtCbi6+si1o4O2EodMuIrMMd81WCkCvYZoyflFQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFN4Ps2SQRdLGaDCnQDDAFvJgtVP0MB8GA1UdIwQY MBaAFIhXkPO19KVFI08yML+JZjhW4HvHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaUZlUTg3WDBwVVVqVHpJd3Y0bG1PRmJnZThjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMi9hNDBiYmItNTU2YS00MGM1LWI5N2Mt MzJiMmJlMDYyMjJjLzEvaUZlUTg3WDBwVVVqVHpJd3Y0bG1PRmJnZThjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMi9hNDBiYmItNTU2YS00MGM1LWI5N2MtMzJiMmJlMDYyMjJj LzEvaUZlUTg3WDBwVVVqVHpJd3Y0bG1PRmJnZThjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAr24Tmi5R i1wF7/630G5O/yYpe7pIotYu3OQsPNmMj4STV0QDCIjMH8KM984FDdvqF8a2KSmZ a9Ug5x85Ki1I579MBuRT2Hz0WhlJbg3Up14VNNYRyVjOQ6L59Qjgb9LtaZBejhbj aRjt4+y1PlrPrtxbN0VdSRhjW+goFe92+4TbLzZueVN0xzUxQf5/EoY1C+mAiBIH kcywrsbsfCbouwJk2LuECss+9+9syXAiBQBqi4tF0LSoJWLyy+oW0m7RcqHEcyAK qCkOHWVkTi/TJVzZh7lt2TR5pEPezgGcOzdDI5DuDIkcUMUxhSCFtlE+JJGq+AiI 4vX+Eybili8Y+Q== -----END CERTIFICATE-----Generated at Sat Dec 6 10:56:17 2025 by rpki-client