This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/b46f93-b86f-462c-8d44-8b5ef68b41bd/1/ixWBJ-mH_gNxG3qX1Mqd-gAGUow.mft File: ixWBJ-mH_gNxG3qX1Mqd-gAGUow.mft (raw, json) Hash identifier: R7Kyej4b4sqdONs/6T6B7qtiV/pcaTQh3Fbc+MXxBB0= Subject key identifier: 0A:A7:E9:C0:13:1C:6F:9D:EE:1A:A0:0F:25:C9:1B:31:61:3C:71:DA Authority key identifier: 8B:15:81:27:E9:87:FE:03:71:1B:7A:97:D4:CA:9D:FA:00:06:52:8C Certificate issuer: /CN=8b158127e987fe03711b7a97d4ca9dfa0006528c Certificate serial: 019B4F29069AF995FB9D58A1C993E78DA13F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ixWBJ-mH_gNxG3qX1Mqd-gAGUow.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/b46f93-b86f-462c-8d44-8b5ef68b41bd/1/ixWBJ-mH_gNxG3qX1Mqd-gAGUow.mft Manifest number: 1250 Signing time: Wed 24 Dec 2025 07:00:47 +0000 Manifest this update: Wed 24 Dec 2025 07:00:47 +0000 Manifest next update: Thu 25 Dec 2025 07:00:47 +0000 Files and hashes: 1: ixWBJ-mH_gNxG3qX1Mqd-gAGUow.crl (hash: 3yRe79K0ws9NsO2Q8RUi+hs27r0Cj9q82xWRcSu7PiU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/b46f93-b86f-462c-8d44-8b5ef68b41bd/1/ixWBJ-mH_gNxG3qX1Mqd-gAGUow.crl rsync://rpki.ripe.net/repository/DEFAULT/05/b46f93-b86f-462c-8d44-8b5ef68b41bd/1/ixWBJ-mH_gNxG3qX1Mqd-gAGUow.mft rsync://rpki.ripe.net/repository/DEFAULT/ixWBJ-mH_gNxG3qX1Mqd-gAGUow.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4f:29:06:9a:f9:95:fb:9d:58:a1:c9:93:e7:8d:a1:3f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8b158127e987fe03711b7a97d4ca9dfa0006528c Validity Not Before: Dec 24 07:00:47 2025 GMT Not After : Dec 25 07:00:47 2025 GMT Subject: CN=0aa7e9c0131c6f9dee1aa00f25c91b31613c71da Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:51:07:c7:2a:df:3d:32:f3:b2:eb:2e:40:0a: ea:21:e2:cb:a1:65:f4:a2:82:58:32:6d:10:0e:d9: 2d:97:d4:27:5d:84:85:f7:e6:da:76:99:4b:c0:f4: cc:55:9a:b5:fb:ee:77:f7:3c:e1:36:e5:3f:85:2e: 12:af:93:e3:d3:2a:fd:d5:90:12:66:a9:a8:ed:ca: 77:fe:5e:e6:27:26:63:f2:c4:88:1a:b1:a1:5b:4a: b6:db:2a:01:05:69:f7:64:d8:64:0d:bc:ec:16:6c: 22:f9:a0:6d:ae:6f:14:66:fb:ee:1f:3a:d9:2b:61: f2:db:c2:9e:17:b7:d5:25:8c:d9:2c:5d:22:f8:8e: 69:0a:6f:d4:a1:88:8d:ed:44:1d:32:e5:19:8c:b1: 52:05:25:53:7e:ed:f6:4a:56:06:67:5d:20:9f:15: 4e:a6:0f:cd:5d:52:55:ac:8d:bd:83:e7:84:77:6a: 31:1e:c4:e5:fa:b0:28:bd:ca:1c:9a:71:a9:9c:20: dd:e7:f4:6d:4f:a0:af:41:f8:b8:1e:2d:7d:fc:c1: 02:ac:12:43:33:72:0a:d4:9d:be:49:58:38:50:17: 48:df:6c:36:10:96:67:75:a4:11:6a:de:8a:7e:39: 65:a3:f5:61:0e:cd:71:e3:53:ee:69:63:33:58:10: 88:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:A7:E9:C0:13:1C:6F:9D:EE:1A:A0:0F:25:C9:1B:31:61:3C:71:DA X509v3 Authority Key Identifier: keyid:8B:15:81:27:E9:87:FE:03:71:1B:7A:97:D4:CA:9D:FA:00:06:52:8C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ixWBJ-mH_gNxG3qX1Mqd-gAGUow.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/b46f93-b86f-462c-8d44-8b5ef68b41bd/1/ixWBJ-mH_gNxG3qX1Mqd-gAGUow.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/05/b46f93-b86f-462c-8d44-8b5ef68b41bd/1/ixWBJ-mH_gNxG3qX1Mqd-gAGUow.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9e:28:64:52:99:7b:f1:54:33:c3:1d:d9:3f:a4:15:3b:09:9e: 5e:c2:30:85:ca:e9:0b:f0:3e:df:b7:8e:b3:57:3d:58:72:bb: 29:af:25:80:ad:82:4d:f4:e7:af:f9:7d:2c:ed:8f:5b:52:bc: 55:e9:0a:14:18:0b:0b:69:7a:c9:f4:91:c4:e9:bb:32:93:37: d0:24:ea:3f:36:c8:7b:f0:c0:bc:64:b3:5e:2a:a1:46:6f:0e: d3:db:d7:5d:f0:de:49:94:66:ce:93:8e:fd:f9:d9:e4:59:b3: ce:25:f8:4f:34:10:8d:91:02:34:c6:fa:39:a4:d4:69:72:9a: 27:48:76:9b:fc:b9:ad:e4:6d:f1:5a:2e:56:9d:87:9a:3f:ad: d8:69:d1:e1:b3:0b:c1:0b:3d:99:5e:06:b5:8f:20:54:2e:42: dd:2a:c0:91:16:9b:a3:9a:48:9d:78:a3:40:94:74:a9:f8:f1: 78:6b:5f:08:6a:7d:e6:d3:62:b7:77:7a:8b:fe:2d:cf:08:23: 43:63:61:d3:cd:25:14:82:b8:ab:64:5f:4f:96:d2:60:01:01: 1f:d6:6a:e7:25:bf:e1:74:0b:11:97:4a:1d:d6:89:de:5a:ef: 35:a1:dd:4d:6c:e9:62:97:af:05:a8:94:30:db:60:5b:bd:41: dd:a4:af:d6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtPKQaa+ZX7nVihyZPnjaE/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhiMTU4MTI3ZTk4N2ZlMDM3MTFiN2E5N2Q0Y2E5ZGZhMDAw NjUyOGMwHhcNMjUxMjI0MDcwMDQ3WhcNMjUxMjI1MDcwMDQ3WjAzMTEwLwYDVQQD EygwYWE3ZTljMDEzMWM2ZjlkZWUxYWEwMGYyNWM5MWIzMTYxM2M3MWRhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7FEHxyrfPTLzsusuQArqIeLLoWX0 ooJYMm0QDtktl9QnXYSF9+badplLwPTMVZq1++539zzhNuU/hS4Sr5Pj0yr91ZAS Zqmo7cp3/l7mJyZj8sSIGrGhW0q22yoBBWn3ZNhkDbzsFmwi+aBtrm8UZvvuHzrZ K2Hy28KeF7fVJYzZLF0i+I5pCm/UoYiN7UQdMuUZjLFSBSVTfu32SlYGZ10gnxVO pg/NXVJVrI29g+eEd2oxHsTl+rAovcocmnGpnCDd5/RtT6CvQfi4Hi19/MECrBJD M3IK1J2+SVg4UBdI32w2EJZndaQRat6Kfjllo/VhDs1x41PuaWMzWBCIpQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAqn6cATHG+d7hqgDyXJGzFhPHHaMB8GA1UdIwQY MBaAFIsVgSfph/4DcRt6l9TKnfoABlKMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaXhXQkotbUhfZ054RzNxWDFNcWQtZ0FHVW93LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNS9iNDZmOTMtYjg2Zi00NjJjLThkNDQt OGI1ZWY2OGI0MWJkLzEvaXhXQkotbUhfZ054RzNxWDFNcWQtZ0FHVW93Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNS9iNDZmOTMtYjg2Zi00NjJjLThkNDQtOGI1ZWY2OGI0MWJk LzEvaXhXQkotbUhfZ054RzNxWDFNcWQtZ0FHVW93LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnihkUpl7 8VQzwx3ZP6QVOwmeXsIwhcrpC/A+37eOs1c9WHK7Ka8lgK2CTfTnr/l9LO2PW1K8 VekKFBgLC2l6yfSRxOm7MpM30CTqPzbIe/DAvGSzXiqhRm8O09vXXfDeSZRmzpOO /fnZ5FmzziX4TzQQjZECNMb6OaTUaXKaJ0h2m/y5reRt8VouVp2Hmj+t2GnR4bML wQs9mV4GtY8gVC5C3SrAkRabo5pInXijQJR0qfjxeGtfCGp95tNit3d6i/4tzwgj Q2Nh080lFIK4q2RfT5bSYAEBH9Zq5yW/4XQLEZdKHdaJ3lrvNaHdTWzpYpevBaiU MNtgW71B3aSv1g== -----END CERTIFICATE-----Generated at Wed Dec 24 08:48:27 2025 by rpki-client