This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/681e1e-7f3f-4ea8-af30-522690be548d/1/iXA6mCNRKxjRduNi6gI8qCR4TSI.mft File: iXA6mCNRKxjRduNi6gI8qCR4TSI.mft (raw, json) Hash identifier: UY0EYyU9DxT1agJ6arBJPmmWk8N8BDMVIHERg50qY5A= Subject key identifier: D1:4D:1C:61:EB:64:30:CE:92:A8:B2:B7:67:5D:C0:BE:C5:87:DB:1F Authority key identifier: 89:70:3A:98:23:51:2B:18:D1:76:E3:62:EA:02:3C:A8:24:78:4D:22 Certificate issuer: /CN=89703a9823512b18d176e362ea023ca824784d22 Certificate serial: 019AF1D1D2D1E1F64449DD7BB3AB437FF724 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iXA6mCNRKxjRduNi6gI8qCR4TSI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/681e1e-7f3f-4ea8-af30-522690be548d/1/iXA6mCNRKxjRduNi6gI8qCR4TSI.mft Manifest number: 1761 Signing time: Sat 06 Dec 2025 04:00:51 +0000 Manifest this update: Sat 06 Dec 2025 04:00:51 +0000 Manifest next update: Sun 07 Dec 2025 04:00:51 +0000 Files and hashes: 1: iXA6mCNRKxjRduNi6gI8qCR4TSI.crl (hash: xQ97ziVj2ltnwgdzjVdcH2dC/D9qDHIt4qchcKl7EQ8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/681e1e-7f3f-4ea8-af30-522690be548d/1/iXA6mCNRKxjRduNi6gI8qCR4TSI.crl rsync://rpki.ripe.net/repository/DEFAULT/e8/681e1e-7f3f-4ea8-af30-522690be548d/1/iXA6mCNRKxjRduNi6gI8qCR4TSI.mft rsync://rpki.ripe.net/repository/DEFAULT/iXA6mCNRKxjRduNi6gI8qCR4TSI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 04:00:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d1:d2:d1:e1:f6:44:49:dd:7b:b3:ab:43:7f:f7:24 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89703a9823512b18d176e362ea023ca824784d22 Validity Not Before: Dec 6 04:00:51 2025 GMT Not After : Dec 7 04:00:51 2025 GMT Subject: CN=d14d1c61eb6430ce92a8b2b7675dc0bec587db1f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:c1:95:29:59:5c:12:ea:91:22:66:61:95:b0: 99:4c:aa:e8:72:06:0a:07:96:d4:c1:b6:89:03:5c: 82:23:10:c3:da:5b:69:bc:1e:e3:87:47:d8:a2:bd: fc:a7:41:15:c3:f1:90:cd:81:42:98:2b:c6:92:af: 65:16:3b:b1:74:c4:3f:6e:3c:28:56:6b:98:59:87: c5:50:af:02:bb:92:dd:b5:9b:22:01:21:e0:13:2f: f5:a6:06:a0:78:e0:ce:82:80:23:42:03:75:ba:e5: c4:11:64:48:e4:6d:07:a8:fc:78:5d:93:6f:84:dc: 30:a1:11:4c:7a:3d:91:4e:a7:89:9e:c2:4d:70:b3: 90:4f:6c:8e:e6:91:7d:49:80:17:9a:49:c2:a8:d2: 28:48:b1:c9:38:88:27:92:9d:25:97:c9:36:4c:b8: fb:4e:4d:a0:d7:7a:14:35:47:ea:0b:18:c2:a6:7f: 9b:d7:92:e0:0b:0b:a6:83:26:4c:fc:fd:30:04:59: 58:3b:2e:35:58:4f:f6:44:3a:21:7e:d9:0a:58:48: d2:a0:0c:38:bb:d5:38:69:b9:7d:bb:f6:b7:b1:5b: dd:7d:44:47:2c:31:9a:4c:eb:e1:44:31:1f:05:1e: a3:36:a0:4e:7e:09:9e:f4:ff:82:6f:eb:78:49:ba: 68:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:4D:1C:61:EB:64:30:CE:92:A8:B2:B7:67:5D:C0:BE:C5:87:DB:1F X509v3 Authority Key Identifier: keyid:89:70:3A:98:23:51:2B:18:D1:76:E3:62:EA:02:3C:A8:24:78:4D:22 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iXA6mCNRKxjRduNi6gI8qCR4TSI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/681e1e-7f3f-4ea8-af30-522690be548d/1/iXA6mCNRKxjRduNi6gI8qCR4TSI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/681e1e-7f3f-4ea8-af30-522690be548d/1/iXA6mCNRKxjRduNi6gI8qCR4TSI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 18:28:bc:e7:86:9e:e2:5d:85:37:24:3e:bb:94:1b:cf:ac:d7: f1:23:f6:bd:56:7b:f5:12:5d:7d:60:bc:e5:46:f8:ff:b1:0f: 05:f4:b1:2c:b5:9e:7a:63:73:53:79:71:f8:a9:e5:7f:e1:12: ef:fa:a9:62:1c:f5:89:b4:0e:78:e4:08:6d:b6:b8:08:67:f4: d3:46:9f:09:d5:0d:92:88:f6:61:11:0d:88:c1:ca:31:e5:52: 63:5d:ce:cd:43:8e:14:dd:69:ed:f4:d8:12:b5:03:4b:b3:9f: 80:25:2b:3a:ce:6f:a4:97:b0:eb:8c:36:e3:5d:f8:88:93:85: b8:b0:93:47:9f:46:e6:73:8d:3a:d1:b8:55:40:4a:c1:1f:e4: 5f:2c:bd:b9:bd:bd:93:b9:32:58:1c:12:c5:83:5d:43:64:23: a5:e9:28:de:d1:a1:00:7a:5e:ff:84:05:a3:06:c7:f1:4c:50: 4c:c3:40:87:41:49:a9:68:2c:63:e6:63:d7:76:85:b8:9b:cc: 05:52:5a:31:12:22:17:01:49:e3:76:6c:71:7d:04:a9:d7:46: 86:bd:9f:70:e6:29:21:f8:d3:26:60:29:25:5a:a8:aa:de:38: f2:28:02:07:a4:82:4d:a4:c2:4f:78:9e:b9:38:b3:75:24:51: a0:8b:74:6e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0dLR4fZESd17s6tDf/ckMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg5NzAzYTk4MjM1MTJiMThkMTc2ZTM2MmVhMDIzY2E4MjQ3 ODRkMjIwHhcNMjUxMjA2MDQwMDUxWhcNMjUxMjA3MDQwMDUxWjAzMTEwLwYDVQQD EyhkMTRkMWM2MWViNjQzMGNlOTJhOGIyYjc2NzVkYzBiZWM1ODdkYjFmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtMGVKVlcEuqRImZhlbCZTKrocgYK B5bUwbaJA1yCIxDD2ltpvB7jh0fYor38p0EVw/GQzYFCmCvGkq9lFjuxdMQ/bjwo VmuYWYfFUK8Cu5LdtZsiASHgEy/1pgageODOgoAjQgN1uuXEEWRI5G0HqPx4XZNv hNwwoRFMej2RTqeJnsJNcLOQT2yO5pF9SYAXmknCqNIoSLHJOIgnkp0ll8k2TLj7 Tk2g13oUNUfqCxjCpn+b15LgCwumgyZM/P0wBFlYOy41WE/2RDohftkKWEjSoAw4 u9U4abl9u/a3sVvdfURHLDGaTOvhRDEfBR6jNqBOfgme9P+Cb+t4SbpoWQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNFNHGHrZDDOkqiyt2ddwL7Fh9sfMB8GA1UdIwQY MBaAFIlwOpgjUSsY0XbjYuoCPKgkeE0iMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaVhBNm1DTlJLeGpSZHVOaTZnSThxQ1I0VFNJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOC82ODFlMWUtN2YzZi00ZWE4LWFmMzAt NTIyNjkwYmU1NDhkLzEvaVhBNm1DTlJLeGpSZHVOaTZnSThxQ1I0VFNJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lOC82ODFlMWUtN2YzZi00ZWE4LWFmMzAtNTIyNjkwYmU1NDhk LzEvaVhBNm1DTlJLeGpSZHVOaTZnSThxQ1I0VFNJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGCi854ae 4l2FNyQ+u5Qbz6zX8SP2vVZ79RJdfWC85Ub4/7EPBfSxLLWeemNzU3lx+Knlf+ES 7/qpYhz1ibQOeOQIbba4CGf000afCdUNkoj2YRENiMHKMeVSY13OzUOOFN1p7fTY ErUDS7OfgCUrOs5vpJew64w24134iJOFuLCTR59G5nONOtG4VUBKwR/kXyy9ub29 k7kyWBwSxYNdQ2Qjpeko3tGhAHpe/4QFowbH8UxQTMNAh0FJqWgsY+Zj13aFuJvM BVJaMRIiFwFJ43ZscX0EqddGhr2fcOYpIfjTJmApJVqoqt448igCB6SCTaTCT3ie uTizdSRRoIt0bg== -----END CERTIFICATE-----Generated at Sat Dec 6 15:28:42 2025 by rpki-client