This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/934599-f38e-444a-a3c0-6bf2bdbae5c4/1/iD9pgz7Edx87C85PAJNleTVG9qg.mft File: iD9pgz7Edx87C85PAJNleTVG9qg.mft (raw, json) Hash identifier: caAPiE7hXb5FcRu1n4Hev5PqOyfGfz0CkQ/5TtKnyjo= Subject key identifier: 26:BF:5B:A6:E7:7E:E2:04:37:BE:FB:DC:DA:67:EC:A7:75:FC:2A:E8 Authority key identifier: 88:3F:69:83:3E:C4:77:1F:3B:0B:CE:4F:00:93:65:79:35:46:F6:A8 Certificate issuer: /CN=883f69833ec4771f3b0bce4f009365793546f6a8 Certificate serial: 019B72907718DB15B6DB78028671E4594FF3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iD9pgz7Edx87C85PAJNleTVG9qg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/934599-f38e-444a-a3c0-6bf2bdbae5c4/1/iD9pgz7Edx87C85PAJNleTVG9qg.mft Manifest number: 07E0 Signing time: Wed 31 Dec 2025 04:00:28 +0000 Manifest this update: Wed 31 Dec 2025 04:00:28 +0000 Manifest next update: Thu 01 Jan 2026 04:00:28 +0000 Files and hashes: 1: iD9pgz7Edx87C85PAJNleTVG9qg.crl (hash: 7wskWDNwK+UtAIL0T81AkeeMIjFAPetf3GYiUfZVy/c=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/934599-f38e-444a-a3c0-6bf2bdbae5c4/1/iD9pgz7Edx87C85PAJNleTVG9qg.crl rsync://rpki.ripe.net/repository/DEFAULT/00/934599-f38e-444a-a3c0-6bf2bdbae5c4/1/iD9pgz7Edx87C85PAJNleTVG9qg.mft rsync://rpki.ripe.net/repository/DEFAULT/iD9pgz7Edx87C85PAJNleTVG9qg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 01 Jan 2026 00:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:72:90:77:18:db:15:b6:db:78:02:86:71:e4:59:4f:f3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=883f69833ec4771f3b0bce4f009365793546f6a8 Validity Not Before: Dec 31 04:00:28 2025 GMT Not After : Jan 1 04:00:28 2026 GMT Subject: CN=26bf5ba6e77ee20437befbdcda67eca775fc2ae8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:58:6a:cb:9b:1b:b0:ee:b2:73:60:a7:3f:0c: 4d:46:15:7d:0c:91:b0:12:08:c3:01:dc:e0:06:13: 31:73:0d:ce:9a:25:99:8e:fc:69:de:aa:57:8a:2c: 0b:73:af:92:60:07:00:49:57:26:98:c5:c8:f4:3d: 1e:a9:4a:f3:f4:cd:07:73:5a:29:ef:cf:a6:11:88: ca:9b:2d:50:c9:e9:2a:cb:ac:6e:af:8b:64:1f:00: 27:51:be:3e:e7:41:ce:ff:6e:57:36:c8:76:3d:68: 5e:af:29:3c:9b:1b:7f:96:c6:24:a6:04:e5:a9:ed: ad:47:d9:12:b4:4b:40:54:1d:a6:f2:4a:f0:ca:d9: 50:26:95:1f:8c:8c:67:f3:56:20:2c:1c:1e:d4:3e: 1f:6a:6a:4f:c8:92:64:af:55:b6:8c:26:6d:44:be: ce:f9:1a:2e:9e:eb:c7:d7:d7:3f:56:76:7d:2b:f9: 94:8b:d4:78:f6:51:7b:17:f3:27:b3:7f:2d:52:30: 67:d4:d8:ba:e6:d3:63:10:ae:e9:04:75:c1:d1:6d: 01:82:76:2b:90:99:8d:a6:44:7e:4b:a6:81:b7:16: ec:b7:9b:32:d5:e2:46:05:12:57:1f:83:58:1c:16: e2:6b:8d:69:b9:43:c5:33:0b:03:41:c6:fe:43:22: a4:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:BF:5B:A6:E7:7E:E2:04:37:BE:FB:DC:DA:67:EC:A7:75:FC:2A:E8 X509v3 Authority Key Identifier: keyid:88:3F:69:83:3E:C4:77:1F:3B:0B:CE:4F:00:93:65:79:35:46:F6:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iD9pgz7Edx87C85PAJNleTVG9qg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/934599-f38e-444a-a3c0-6bf2bdbae5c4/1/iD9pgz7Edx87C85PAJNleTVG9qg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/00/934599-f38e-444a-a3c0-6bf2bdbae5c4/1/iD9pgz7Edx87C85PAJNleTVG9qg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 71:72:96:bb:b7:dc:bd:3a:12:b6:01:ca:a1:8d:f5:fd:fa:94: 8f:9d:5c:b7:84:d8:38:05:8e:10:04:31:d9:73:32:75:f3:d4: a1:a3:05:00:fc:9c:43:af:3c:35:8d:88:69:f3:d0:d4:b9:17: 00:25:5f:51:bd:cb:7d:cc:07:f1:e1:9e:52:49:c3:4c:ad:2f: 53:7e:44:2c:2b:3e:80:28:6f:9f:00:5e:19:bd:c0:f1:d1:ca: 15:58:6a:aa:c9:ce:4d:02:3d:70:52:b4:b1:09:f0:14:3c:f6: fb:cc:26:a0:b4:1a:d9:3a:43:86:a2:f9:a6:4b:d3:de:9d:a7: 86:c4:53:7d:e4:ed:61:69:f7:b9:69:29:f5:d2:f8:f7:c9:dd: 99:14:66:0f:c9:a9:c3:0d:6e:52:ca:38:ff:28:9e:32:83:6f: fc:8a:0e:7c:15:73:d3:ce:7b:7c:3c:bf:f5:2d:38:92:07:8c: 9e:dd:c5:dd:91:f1:12:ea:d2:ee:07:a9:d6:29:01:15:96:9a: f7:4a:eb:2f:93:be:5e:6f:63:ef:43:17:92:01:a1:a9:90:03: e9:e4:21:39:56:f8:fd:54:ac:98:83:52:ed:db:7f:81:25:ca: 7e:a9:97:69:68:91:1b:f9:69:e0:e1:68:14:d9:cc:8c:41:73: 4c:a9:70:77 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtykHcY2xW223gChnHkWU/zMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg4M2Y2OTgzM2VjNDc3MWYzYjBiY2U0ZjAwOTM2NTc5MzU0 NmY2YTgwHhcNMjUxMjMxMDQwMDI4WhcNMjYwMTAxMDQwMDI4WjAzMTEwLwYDVQQD EygyNmJmNWJhNmU3N2VlMjA0MzdiZWZiZGNkYTY3ZWNhNzc1ZmMyYWU4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnlhqy5sbsO6yc2CnPwxNRhV9DJGw EgjDAdzgBhMxcw3OmiWZjvxp3qpXiiwLc6+SYAcASVcmmMXI9D0eqUrz9M0Hc1op 78+mEYjKmy1Qyekqy6xur4tkHwAnUb4+50HO/25XNsh2PWheryk8mxt/lsYkpgTl qe2tR9kStEtAVB2m8krwytlQJpUfjIxn81YgLBwe1D4fampPyJJkr1W2jCZtRL7O +RounuvH19c/VnZ9K/mUi9R49lF7F/Mns38tUjBn1Ni65tNjEK7pBHXB0W0BgnYr kJmNpkR+S6aBtxbst5sy1eJGBRJXH4NYHBbia41puUPFMwsDQcb+QyKkYwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCa/W6bnfuIEN7773Npn7Kd1/CroMB8GA1UdIwQY MBaAFIg/aYM+xHcfOwvOTwCTZXk1RvaoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaUQ5cGd6N0VkeDg3Qzg1UEFKTmxlVFZHOXFnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC85MzQ1OTktZjM4ZS00NDRhLWEzYzAt NmJmMmJkYmFlNWM0LzEvaUQ5cGd6N0VkeDg3Qzg1UEFKTmxlVFZHOXFnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMC85MzQ1OTktZjM4ZS00NDRhLWEzYzAtNmJmMmJkYmFlNWM0 LzEvaUQ5cGd6N0VkeDg3Qzg1UEFKTmxlVFZHOXFnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcXKWu7fc vToStgHKoY31/fqUj51ct4TYOAWOEAQx2XMydfPUoaMFAPycQ688NY2IafPQ1LkX ACVfUb3LfcwH8eGeUknDTK0vU35ELCs+gChvnwBeGb3A8dHKFVhqqsnOTQI9cFK0 sQnwFDz2+8wmoLQa2TpDhqL5pkvT3p2nhsRTfeTtYWn3uWkp9dL498ndmRRmD8mp ww1uUso4/yieMoNv/IoOfBVz0857fDy/9S04kgeMnt3F3ZHxEurS7gep1ikBFZaa 90rrL5O+Xm9j70MXkgGhqZAD6eQhOVb4/VSsmINS7dt/gSXKfqmXaWiRG/lp4OFo FNnMjEFzTKlwdw== -----END CERTIFICATE-----Generated at Wed Dec 31 09:07:12 2025 by rpki-client