This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/f1d439-7cc7-449f-a9e2-2ea6f5efb27f/1/I_ifV9ByhJ4MqyGVzQuvJVeTXqA.mft File: I_ifV9ByhJ4MqyGVzQuvJVeTXqA.mft (raw, json) Hash identifier: Iq+1s3AsRiDZFSiW/Td9+ZN7P11Q89PbZHf30HvME0g= Subject key identifier: ED:51:D6:06:06:4A:B7:F6:7C:03:DC:C9:F2:40:20:71:CF:AA:C3:D0 Authority key identifier: 23:F8:9F:57:D0:72:84:9E:0C:AB:21:95:CD:0B:AF:25:57:93:5E:A0 Certificate issuer: /CN=23f89f57d072849e0cab2195cd0baf2557935ea0 Certificate serial: 019B2C667888057AF325F475088C377EE576 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I_ifV9ByhJ4MqyGVzQuvJVeTXqA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/f1d439-7cc7-449f-a9e2-2ea6f5efb27f/1/I_ifV9ByhJ4MqyGVzQuvJVeTXqA.mft Manifest number: 177C Signing time: Wed 17 Dec 2025 13:01:11 +0000 Manifest this update: Wed 17 Dec 2025 13:01:11 +0000 Manifest next update: Thu 18 Dec 2025 13:01:11 +0000 Files and hashes: 1: I_ifV9ByhJ4MqyGVzQuvJVeTXqA.crl (hash: V5A/Nsy/rcFfkNuZgVQ+g5sJQIPVpka2mJ17ECdHyAc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/f1d439-7cc7-449f-a9e2-2ea6f5efb27f/1/I_ifV9ByhJ4MqyGVzQuvJVeTXqA.crl rsync://rpki.ripe.net/repository/DEFAULT/04/f1d439-7cc7-449f-a9e2-2ea6f5efb27f/1/I_ifV9ByhJ4MqyGVzQuvJVeTXqA.mft rsync://rpki.ripe.net/repository/DEFAULT/I_ifV9ByhJ4MqyGVzQuvJVeTXqA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 13:01:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2c:66:78:88:05:7a:f3:25:f4:75:08:8c:37:7e:e5:76 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=23f89f57d072849e0cab2195cd0baf2557935ea0 Validity Not Before: Dec 17 13:01:11 2025 GMT Not After : Dec 18 13:01:11 2025 GMT Subject: CN=ed51d606064ab7f67c03dcc9f2402071cfaac3d0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:05:5e:4a:cc:12:9d:aa:8e:14:c0:f5:5e:cf: d4:a0:1c:5b:93:88:57:53:6b:58:26:ed:6f:98:1b: 7f:bb:02:dd:29:28:60:eb:3a:5e:03:e5:c6:06:87: a6:25:80:07:b4:f6:7d:96:f4:2d:5b:b7:4b:43:68: 5f:53:cf:2f:e1:25:b5:cf:23:cc:61:8b:6e:8f:9e: 0c:1e:9a:7b:79:e0:ef:0b:91:c8:5d:eb:28:e6:34: 2e:44:d1:ee:bb:21:ce:02:2e:5f:87:b7:09:16:3d: e5:fc:6e:8c:ad:99:6c:0f:ba:a7:1c:ad:32:15:3e: da:6f:ea:b5:cf:65:dc:5b:66:a9:44:6a:58:4e:79: cf:cb:36:f6:bc:f5:b1:73:d6:a4:2f:97:57:4d:25: ca:0c:53:1c:dd:72:42:14:26:f6:6d:ad:10:d1:5d: d8:6b:49:75:bd:33:22:f5:36:8e:3a:54:cc:5c:f2: 52:87:84:ea:40:a1:af:e9:6c:75:06:53:6f:6e:bc: 21:64:90:54:1a:eb:28:db:4a:b4:61:80:6f:1b:af: 35:24:06:7b:3d:fd:7a:03:c6:8b:5f:1d:6d:62:88: 65:a9:5d:e8:e7:cc:49:63:6d:a7:ed:6e:f0:0a:86: 2d:b2:1f:5e:6d:ab:64:87:bd:a6:d0:f8:60:e4:ec: d8:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:51:D6:06:06:4A:B7:F6:7C:03:DC:C9:F2:40:20:71:CF:AA:C3:D0 X509v3 Authority Key Identifier: keyid:23:F8:9F:57:D0:72:84:9E:0C:AB:21:95:CD:0B:AF:25:57:93:5E:A0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I_ifV9ByhJ4MqyGVzQuvJVeTXqA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/f1d439-7cc7-449f-a9e2-2ea6f5efb27f/1/I_ifV9ByhJ4MqyGVzQuvJVeTXqA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/04/f1d439-7cc7-449f-a9e2-2ea6f5efb27f/1/I_ifV9ByhJ4MqyGVzQuvJVeTXqA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 91:c2:a1:a5:85:d1:df:ad:4c:3c:67:02:06:9b:ef:72:45:f2: 80:a8:31:8b:02:81:1e:17:66:30:43:08:18:67:9f:45:4e:7e: 67:1e:1e:1e:05:8a:10:cb:6a:9c:25:3b:e4:4a:14:67:cf:cd: 17:a6:72:59:8f:03:b6:67:95:4b:44:5f:82:f8:99:58:35:79: cb:8c:d1:9b:e8:14:01:3c:d7:ff:cf:3c:bd:cc:25:aa:16:4a: 3e:ab:9c:e6:21:e7:29:8c:b2:cb:09:35:0b:57:00:07:df:a6: 96:94:08:ac:66:d4:83:f0:b4:25:27:34:d9:0a:b2:27:de:f5: a7:06:9d:60:86:ca:17:7d:ec:41:0a:12:f2:af:80:80:9d:63: cd:6d:73:60:12:e4:bb:af:24:03:00:62:75:41:9d:a5:e5:7a: f3:2e:d1:dc:f9:3a:3b:b2:95:31:c5:89:cb:64:05:60:8d:05: 56:d3:34:e9:e4:e7:72:dd:4c:87:68:7b:ed:77:ad:44:6f:ac: d1:94:6b:e3:e5:1f:45:1a:18:5b:d4:92:85:30:c3:f6:26:87: e6:00:c5:35:99:2f:ba:02:ac:f3:81:d8:d6:fb:23:e6:4e:3c: 7d:8c:71:81:69:a4:c7:03:51:92:e6:0d:26:58:6c:56:7b:cc: 4e:05:de:92 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZssZniIBXrzJfR1CIw3fuV2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIzZjg5ZjU3ZDA3Mjg0OWUwY2FiMjE5NWNkMGJhZjI1NTc5 MzVlYTAwHhcNMjUxMjE3MTMwMTExWhcNMjUxMjE4MTMwMTExWjAzMTEwLwYDVQQD EyhlZDUxZDYwNjA2NGFiN2Y2N2MwM2RjYzlmMjQwMjA3MWNmYWFjM2QwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5QVeSswSnaqOFMD1Xs/UoBxbk4hX U2tYJu1vmBt/uwLdKShg6zpeA+XGBoemJYAHtPZ9lvQtW7dLQ2hfU88v4SW1zyPM YYtuj54MHpp7eeDvC5HIXeso5jQuRNHuuyHOAi5fh7cJFj3l/G6MrZlsD7qnHK0y FT7ab+q1z2XcW2apRGpYTnnPyzb2vPWxc9akL5dXTSXKDFMc3XJCFCb2ba0Q0V3Y a0l1vTMi9TaOOlTMXPJSh4TqQKGv6Wx1BlNvbrwhZJBUGuso20q0YYBvG681JAZ7 Pf16A8aLXx1tYohlqV3o58xJY22n7W7wCoYtsh9ebatkh72m0Phg5OzYeQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFO1R1gYGSrf2fAPcyfJAIHHPqsPQMB8GA1UdIwQY MBaAFCP4n1fQcoSeDKshlc0LryVXk16gMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSV9pZlY5QnloSjRNcXlHVnpRdXZKVmVUWHFBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNC9mMWQ0MzktN2NjNy00NDlmLWE5ZTIt MmVhNmY1ZWZiMjdmLzEvSV9pZlY5QnloSjRNcXlHVnpRdXZKVmVUWHFBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNC9mMWQ0MzktN2NjNy00NDlmLWE5ZTItMmVhNmY1ZWZiMjdm LzEvSV9pZlY5QnloSjRNcXlHVnpRdXZKVmVUWHFBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkcKhpYXR 361MPGcCBpvvckXygKgxiwKBHhdmMEMIGGefRU5+Zx4eHgWKEMtqnCU75EoUZ8/N F6ZyWY8DtmeVS0RfgviZWDV5y4zRm+gUATzX/888vcwlqhZKPquc5iHnKYyyywk1 C1cAB9+mlpQIrGbUg/C0JSc02QqyJ971pwadYIbKF33sQQoS8q+AgJ1jzW1zYBLk u68kAwBidUGdpeV68y7R3Pk6O7KVMcWJy2QFYI0FVtM06eTnct1Mh2h77XetRG+s 0ZRr4+UfRRoYW9SShTDD9iaH5gDFNZkvugKs84HY1vsj5k48fYxxgWmkxwNRkuYN JlhsVnvMTgXekg== -----END CERTIFICATE-----Generated at Wed Dec 17 20:47:58 2025 by rpki-client