This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/ab6a7b-65ab-4977-9937-ea9b6bb2e39c/1/iY7BAjeR9tQ_l5fgUtE1S-v_xzI.mft File: iY7BAjeR9tQ_l5fgUtE1S-v_xzI.mft (raw, json) Hash identifier: zH2muGFH4DhSeCgctSzVNYhITO13ojJ5GCc+xuZxAmA= Subject key identifier: 50:CD:21:11:8E:B8:E6:D7:D1:FA:A0:50:0B:B8:A2:28:0B:17:87:C3 Authority key identifier: 89:8E:C1:02:37:91:F6:D4:3F:97:97:E0:52:D1:35:4B:EB:FF:C7:32 Certificate issuer: /CN=898ec1023791f6d43f9797e052d1354bebffc732 Certificate serial: 019AF46504A56A6884DADDD17A0A63786743 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iY7BAjeR9tQ_l5fgUtE1S-v_xzI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/ab6a7b-65ab-4977-9937-ea9b6bb2e39c/1/iY7BAjeR9tQ_l5fgUtE1S-v_xzI.mft Manifest number: B2 Signing time: Sat 06 Dec 2025 16:00:52 +0000 Manifest this update: Sat 06 Dec 2025 16:00:52 +0000 Manifest next update: Sun 07 Dec 2025 16:00:52 +0000 Files and hashes: 1: iY7BAjeR9tQ_l5fgUtE1S-v_xzI.crl (hash: RhMnOLYkXkL1lO2GTm3JydwrksbAfTJOaBb5MSIxK/g=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/ab6a7b-65ab-4977-9937-ea9b6bb2e39c/1/iY7BAjeR9tQ_l5fgUtE1S-v_xzI.crl rsync://rpki.ripe.net/repository/DEFAULT/ef/ab6a7b-65ab-4977-9937-ea9b6bb2e39c/1/iY7BAjeR9tQ_l5fgUtE1S-v_xzI.mft rsync://rpki.ripe.net/repository/DEFAULT/iY7BAjeR9tQ_l5fgUtE1S-v_xzI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 14:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:65:04:a5:6a:68:84:da:dd:d1:7a:0a:63:78:67:43 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=898ec1023791f6d43f9797e052d1354bebffc732 Validity Not Before: Dec 6 16:00:52 2025 GMT Not After : Dec 7 16:00:52 2025 GMT Subject: CN=50cd21118eb8e6d7d1faa0500bb8a2280b1787c3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:b9:4b:b5:18:ea:41:d5:50:13:c5:19:10:ae: 5d:8c:08:27:b8:97:c1:9d:f3:d9:6f:e1:d5:98:70: 13:1e:c4:97:24:27:44:02:b9:ef:b9:dc:81:a4:b1: 3f:b2:5c:db:6a:e4:04:a7:29:63:2c:d4:f1:33:a4: 43:35:03:d3:a1:bb:fd:e1:b0:0c:87:b4:dc:e2:89: 77:fd:c4:15:3a:d3:ad:40:c6:54:57:47:e7:3a:ff: 4a:a2:9e:74:0b:50:94:a7:50:91:83:76:4e:c3:ca: 6a:86:21:e0:fe:3a:12:f2:7c:9c:e8:ed:dd:8d:3c: 8f:d8:80:2a:8b:7c:30:a6:5e:0c:82:2a:b6:25:19: 18:61:06:b8:ff:b6:57:7b:2a:54:39:69:9f:ec:1b: 3e:3a:bf:f6:11:c1:b8:3a:5b:ae:20:0f:1d:67:93: 2b:53:46:57:69:c6:56:0a:22:75:ba:df:00:5c:26: 0b:91:f9:c8:ca:68:99:24:56:8c:5c:9e:ea:44:da: 50:8e:ca:31:d4:02:3f:57:da:e6:19:5a:d2:33:ba: b7:b7:e9:f1:57:5b:71:61:9d:3f:6d:38:41:4a:d9: 40:40:d7:ff:ad:a0:cb:4e:cb:31:bb:f0:42:7d:22: 48:03:eb:6f:ef:47:aa:d9:04:24:1d:7b:97:24:4f: a4:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:CD:21:11:8E:B8:E6:D7:D1:FA:A0:50:0B:B8:A2:28:0B:17:87:C3 X509v3 Authority Key Identifier: keyid:89:8E:C1:02:37:91:F6:D4:3F:97:97:E0:52:D1:35:4B:EB:FF:C7:32 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iY7BAjeR9tQ_l5fgUtE1S-v_xzI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/ab6a7b-65ab-4977-9937-ea9b6bb2e39c/1/iY7BAjeR9tQ_l5fgUtE1S-v_xzI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/ab6a7b-65ab-4977-9937-ea9b6bb2e39c/1/iY7BAjeR9tQ_l5fgUtE1S-v_xzI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 21:8f:59:98:18:09:9f:cb:6c:bd:57:08:ac:bd:01:c7:ac:04: 9f:fc:ed:b4:75:6f:1e:44:54:ca:cb:f1:8c:a2:c1:61:c8:25: e3:e3:02:d8:d1:db:71:69:36:c8:60:30:fe:93:ac:d3:37:dd: 6c:5c:58:ba:19:cb:d7:db:65:51:7e:ff:cf:90:5a:14:cd:b3: 43:00:d8:45:42:be:5c:55:f6:9b:6a:10:26:76:1d:f5:ae:09: 22:c6:08:d7:f3:93:a3:30:82:de:e3:25:b5:8a:42:ad:e7:77: 84:b2:91:1d:c5:b9:58:91:99:32:68:0a:84:56:77:68:fe:13: 59:83:60:47:87:a2:8d:43:90:96:04:0d:f8:4a:27:fa:b0:51: 9b:9f:b2:e4:a8:86:78:8c:20:68:37:10:8e:db:91:42:87:c9: f1:f4:c4:f6:8b:56:3f:ba:ba:98:94:01:11:91:bb:4c:7a:b4: 07:ab:da:76:27:9b:47:42:d1:d2:92:6f:cc:11:a8:fe:e7:06: 67:42:50:0b:03:81:96:a7:f1:81:88:22:60:3a:e5:05:73:d1: 2c:ee:5f:bd:3c:94:ab:79:c3:33:97:c3:85:db:72:e6:97:59: 66:48:4a:8f:b1:c1:35:92:e3:fa:fa:7a:7d:b9:38:d0:84:55: ac:35:bb:57 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr0ZQSlamiE2t3RegpjeGdDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg5OGVjMTAyMzc5MWY2ZDQzZjk3OTdlMDUyZDEzNTRiZWJm ZmM3MzIwHhcNMjUxMjA2MTYwMDUyWhcNMjUxMjA3MTYwMDUyWjAzMTEwLwYDVQQD Eyg1MGNkMjExMThlYjhlNmQ3ZDFmYWEwNTAwYmI4YTIyODBiMTc4N2MzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvblLtRjqQdVQE8UZEK5djAgnuJfB nfPZb+HVmHATHsSXJCdEArnvudyBpLE/slzbauQEpyljLNTxM6RDNQPTobv94bAM h7Tc4ol3/cQVOtOtQMZUV0fnOv9Kop50C1CUp1CRg3ZOw8pqhiHg/joS8nyc6O3d jTyP2IAqi3wwpl4Mgiq2JRkYYQa4/7ZXeypUOWmf7Bs+Or/2EcG4OluuIA8dZ5Mr U0ZXacZWCiJ1ut8AXCYLkfnIymiZJFaMXJ7qRNpQjsox1AI/V9rmGVrSM7q3t+nx V1txYZ0/bThBStlAQNf/raDLTssxu/BCfSJIA+tv70eq2QQkHXuXJE+kOQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFDNIRGOuObX0fqgUAu4oigLF4fDMB8GA1UdIwQY MBaAFImOwQI3kfbUP5eX4FLRNUvr/8cyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaVk3QkFqZVI5dFFfbDVmZ1V0RTFTLXZfeHpJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZi9hYjZhN2ItNjVhYi00OTc3LTk5Mzct ZWE5YjZiYjJlMzljLzEvaVk3QkFqZVI5dFFfbDVmZ1V0RTFTLXZfeHpJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZi9hYjZhN2ItNjVhYi00OTc3LTk5MzctZWE5YjZiYjJlMzlj LzEvaVk3QkFqZVI5dFFfbDVmZ1V0RTFTLXZfeHpJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIY9ZmBgJ n8tsvVcIrL0Bx6wEn/zttHVvHkRUysvxjKLBYcgl4+MC2NHbcWk2yGAw/pOs0zfd bFxYuhnL19tlUX7/z5BaFM2zQwDYRUK+XFX2m2oQJnYd9a4JIsYI1/OTozCC3uMl tYpCred3hLKRHcW5WJGZMmgKhFZ3aP4TWYNgR4eijUOQlgQN+Eon+rBRm5+y5KiG eIwgaDcQjtuRQofJ8fTE9otWP7q6mJQBEZG7THq0B6vadiebR0LR0pJvzBGo/ucG Z0JQCwOBlqfxgYgiYDrlBXPRLO5fvTyUq3nDM5fDhdty5pdZZkhKj7HBNZLj+vp6 fbk40IRVrDW7Vw== -----END CERTIFICATE-----Generated at Sat Dec 6 23:56:31 2025 by rpki-client