This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/5b2960-d3c4-426d-bab0-5ae35c030686/1/idLNXdjVE9Suh-z9xVfr9fYj7DQ.mft File: idLNXdjVE9Suh-z9xVfr9fYj7DQ.mft (raw, json) Hash identifier: 0DQqlP4fOsyB40/2In9JjAkF341p+hSg4o+Qxf/lRpQ= Subject key identifier: 3A:90:D4:71:01:34:A6:EF:C0:6D:C9:B6:22:EB:EC:32:5F:E0:CC:80 Authority key identifier: 89:D2:CD:5D:D8:D5:13:D4:AE:87:EC:FD:C5:57:EB:F5:F6:23:EC:34 Certificate issuer: /CN=89d2cd5dd8d513d4ae87ecfdc557ebf5f623ec34 Certificate serial: 019B32D67A0482E401E7E1C5106A4103A6DC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/idLNXdjVE9Suh-z9xVfr9fYj7DQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/5b2960-d3c4-426d-bab0-5ae35c030686/1/idLNXdjVE9Suh-z9xVfr9fYj7DQ.mft Manifest number: 10A2 Signing time: Thu 18 Dec 2025 19:01:15 +0000 Manifest this update: Thu 18 Dec 2025 19:01:15 +0000 Manifest next update: Fri 19 Dec 2025 19:01:15 +0000 Files and hashes: 1: idLNXdjVE9Suh-z9xVfr9fYj7DQ.crl (hash: XQgEAG229Ly/a2kKIoIA9LfdmT0UCvaGPMiI+H4IFkk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/5b2960-d3c4-426d-bab0-5ae35c030686/1/idLNXdjVE9Suh-z9xVfr9fYj7DQ.crl rsync://rpki.ripe.net/repository/DEFAULT/05/5b2960-d3c4-426d-bab0-5ae35c030686/1/idLNXdjVE9Suh-z9xVfr9fYj7DQ.mft rsync://rpki.ripe.net/repository/DEFAULT/idLNXdjVE9Suh-z9xVfr9fYj7DQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 19:01:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:32:d6:7a:04:82:e4:01:e7:e1:c5:10:6a:41:03:a6:dc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89d2cd5dd8d513d4ae87ecfdc557ebf5f623ec34 Validity Not Before: Dec 18 19:01:15 2025 GMT Not After : Dec 19 19:01:15 2025 GMT Subject: CN=3a90d4710134a6efc06dc9b622ebec325fe0cc80 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:68:e3:9c:12:1c:b4:3f:9a:aa:cb:39:dc:2b: 66:2d:12:80:b8:5c:a3:0a:f7:c0:cc:2c:a6:02:84: 03:82:ed:79:8e:b8:3f:0d:02:b0:9b:41:8f:4e:68: 43:47:dd:b8:01:71:c4:78:8f:9a:96:3c:d1:a7:8c: 23:a9:89:83:25:37:42:d9:f4:32:8c:a5:e5:3c:03: 80:11:0b:17:bc:c3:17:ac:13:85:6e:b6:55:25:25: dc:cf:58:ee:29:7b:43:73:27:64:28:d8:ff:e4:db: 80:80:0b:00:5a:32:c8:ba:36:35:4c:fa:82:16:59: 01:10:cb:0f:8a:7e:fa:57:5d:71:4f:ab:0c:b3:e6: 00:e8:50:aa:47:68:34:e7:22:ff:50:e8:4c:44:be: a7:a7:77:8b:93:6b:e5:05:b3:11:9a:19:2f:0b:4c: dc:c4:78:b1:9f:6e:f8:44:4f:9c:e5:5f:49:08:6a: 16:2c:eb:d9:df:a8:34:eb:6b:d1:db:4a:74:bb:09: bc:bf:68:60:15:d5:fc:c3:08:f4:a9:7b:4e:9e:2c: fd:46:b0:d9:f8:77:3f:75:2c:1c:cf:fc:f2:9e:e2: 25:12:48:98:68:79:c3:34:a3:55:fc:74:77:12:e6: f3:32:de:fa:ed:08:ed:24:5d:4a:af:b5:a8:29:38: 74:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:90:D4:71:01:34:A6:EF:C0:6D:C9:B6:22:EB:EC:32:5F:E0:CC:80 X509v3 Authority Key Identifier: keyid:89:D2:CD:5D:D8:D5:13:D4:AE:87:EC:FD:C5:57:EB:F5:F6:23:EC:34 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/idLNXdjVE9Suh-z9xVfr9fYj7DQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/5b2960-d3c4-426d-bab0-5ae35c030686/1/idLNXdjVE9Suh-z9xVfr9fYj7DQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/05/5b2960-d3c4-426d-bab0-5ae35c030686/1/idLNXdjVE9Suh-z9xVfr9fYj7DQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 45:ef:4e:d5:1e:65:eb:aa:46:fe:07:0e:1c:52:94:bb:ab:c2: f9:43:45:48:0e:7f:b3:ca:a7:cc:5f:0f:59:9e:97:82:40:1a: 43:59:4a:a1:49:b3:82:88:ac:59:0c:4a:c4:ef:6d:e7:b7:14: 55:e7:2e:7d:cc:77:e8:e2:50:8b:eb:b4:67:28:1b:9d:ed:30: 41:9a:84:ed:ae:62:d5:79:0a:b6:02:f4:f1:04:fe:64:f2:0a: 07:7d:c6:9a:6d:e6:43:a3:d9:5d:5c:b2:b0:f7:e7:ef:70:7b: 93:3b:41:3d:93:d9:cd:18:8f:43:53:57:ca:a5:98:c0:4d:a6: 15:9f:f9:be:8a:ba:ff:bf:3a:51:e4:18:fc:64:5d:aa:2c:6f: a8:5a:c4:63:f0:a3:77:54:e3:60:45:f6:46:58:42:79:20:40: 71:9f:a3:8f:f3:98:be:ce:36:be:77:24:5a:c6:e9:ac:31:87: 1e:e2:71:1a:2d:70:a9:fc:39:cb:8e:33:a2:9a:d8:69:b8:81: 69:41:c7:1c:2b:80:64:d8:da:fd:7d:34:97:53:c0:de:0d:8c: 01:0f:41:67:d7:31:68:bb:06:d8:e8:7b:e0:0e:ed:0c:bd:0c: 68:26:ba:46:ae:ee:b0:68:0f:64:ab:af:d5:a1:8c:a6:47:74: 34:9c:c5:f5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsy1noEguQB5+HFEGpBA6bcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg5ZDJjZDVkZDhkNTEzZDRhZTg3ZWNmZGM1NTdlYmY1ZjYy M2VjMzQwHhcNMjUxMjE4MTkwMTE1WhcNMjUxMjE5MTkwMTE1WjAzMTEwLwYDVQQD EygzYTkwZDQ3MTAxMzRhNmVmYzA2ZGM5YjYyMmViZWMzMjVmZTBjYzgwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsWjjnBIctD+aqss53CtmLRKAuFyj CvfAzCymAoQDgu15jrg/DQKwm0GPTmhDR924AXHEeI+aljzRp4wjqYmDJTdC2fQy jKXlPAOAEQsXvMMXrBOFbrZVJSXcz1juKXtDcydkKNj/5NuAgAsAWjLIujY1TPqC FlkBEMsPin76V11xT6sMs+YA6FCqR2g05yL/UOhMRL6np3eLk2vlBbMRmhkvC0zc xHixn274RE+c5V9JCGoWLOvZ36g062vR20p0uwm8v2hgFdX8wwj0qXtOniz9RrDZ +Hc/dSwcz/zynuIlEkiYaHnDNKNV/HR3EubzMt767QjtJF1Kr7WoKTh0QwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDqQ1HEBNKbvwG3JtiLr7DJf4MyAMB8GA1UdIwQY MBaAFInSzV3Y1RPUrofs/cVX6/X2I+w0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaWRMTlhkalZFOVN1aC16OXhWZnI5ZllqN0RRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNS81YjI5NjAtZDNjNC00MjZkLWJhYjAt NWFlMzVjMDMwNjg2LzEvaWRMTlhkalZFOVN1aC16OXhWZnI5ZllqN0RRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNS81YjI5NjAtZDNjNC00MjZkLWJhYjAtNWFlMzVjMDMwNjg2 LzEvaWRMTlhkalZFOVN1aC16OXhWZnI5ZllqN0RRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARe9O1R5l 66pG/gcOHFKUu6vC+UNFSA5/s8qnzF8PWZ6XgkAaQ1lKoUmzgoisWQxKxO9t57cU Vecufcx36OJQi+u0Zygbne0wQZqE7a5i1XkKtgL08QT+ZPIKB33Gmm3mQ6PZXVyy sPfn73B7kztBPZPZzRiPQ1NXyqWYwE2mFZ/5voq6/786UeQY/GRdqixvqFrEY/Cj d1TjYEX2RlhCeSBAcZ+jj/OYvs42vnckWsbprDGHHuJxGi1wqfw5y44zoprYabiB aUHHHCuAZNja/X00l1PA3g2MAQ9BZ9cxaLsG2Oh74A7tDL0MaCa6Rq7usGgPZKuv 1aGMpkd0NJzF9Q== -----END CERTIFICATE-----Generated at Fri Dec 19 03:10:36 2025 by rpki-client