This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/247c5d-a272-482b-9c8e-37fe395d42f0/1/i3vnpHYGqzg5H7IVQrX0Bh8CqFI.mft File: i3vnpHYGqzg5H7IVQrX0Bh8CqFI.mft (raw, json) Hash identifier: b9ZO0PPgOW6Nb6FYHWkOIv42s0pJSu1k/g7eqKYIGEY= Subject key identifier: 09:C0:C9:D4:F9:E8:0C:AF:8B:85:1C:14:76:CA:EE:85:15:6F:13:EC Authority key identifier: 8B:7B:E7:A4:76:06:AB:38:39:1F:B2:15:42:B5:F4:06:1F:02:A8:52 Certificate issuer: /CN=8b7be7a47606ab38391fb21542b5f4061f02a852 Certificate serial: 019B32D5F52959A569FEAEA545CC6A9AD665 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i3vnpHYGqzg5H7IVQrX0Bh8CqFI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/247c5d-a272-482b-9c8e-37fe395d42f0/1/i3vnpHYGqzg5H7IVQrX0Bh8CqFI.mft Manifest number: 0DFC Signing time: Thu 18 Dec 2025 19:00:41 +0000 Manifest this update: Thu 18 Dec 2025 19:00:41 +0000 Manifest next update: Fri 19 Dec 2025 19:00:41 +0000 Files and hashes: 1: i3vnpHYGqzg5H7IVQrX0Bh8CqFI.crl (hash: tKg5uT2vbRzLsTc2yOpRytFbwQH2csuabTU5/5aEqwk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/247c5d-a272-482b-9c8e-37fe395d42f0/1/i3vnpHYGqzg5H7IVQrX0Bh8CqFI.crl rsync://rpki.ripe.net/repository/DEFAULT/1e/247c5d-a272-482b-9c8e-37fe395d42f0/1/i3vnpHYGqzg5H7IVQrX0Bh8CqFI.mft rsync://rpki.ripe.net/repository/DEFAULT/i3vnpHYGqzg5H7IVQrX0Bh8CqFI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 19:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:32:d5:f5:29:59:a5:69:fe:ae:a5:45:cc:6a:9a:d6:65 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8b7be7a47606ab38391fb21542b5f4061f02a852 Validity Not Before: Dec 18 19:00:41 2025 GMT Not After : Dec 19 19:00:41 2025 GMT Subject: CN=09c0c9d4f9e80caf8b851c1476caee85156f13ec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:d1:88:ca:91:1b:97:43:ae:eb:a9:1c:bd:a1: d8:71:1e:fb:61:45:e7:60:41:85:7b:99:e2:ba:46: 06:2d:1c:a2:8b:40:f6:26:1c:82:cb:aa:48:ed:73: 19:ab:8b:9e:a7:84:23:3d:eb:f7:cd:fd:af:cc:3c: 5c:6c:e1:bb:20:90:ee:19:d2:a7:b8:f9:93:a7:3b: bb:18:aa:b5:f7:9a:0b:de:6f:1a:17:3c:b1:6c:82: f1:0d:fe:b9:5c:a8:8f:f8:da:fb:a0:e9:14:7f:f4: df:4f:3f:fd:24:b4:5e:d5:3d:b9:85:7e:90:fe:b5: fa:f7:32:12:26:33:70:ac:47:53:c2:b2:a0:96:f9: 8a:d8:cd:d5:7a:de:11:83:29:a8:b4:35:c2:5c:18: ff:d2:a4:be:68:18:05:3d:bc:f0:b4:53:fd:5d:e6: 32:73:f8:5d:8e:00:e6:a3:25:2a:45:00:15:40:a0: aa:9a:32:c8:36:43:cd:13:a2:a5:5c:98:2f:44:35: 31:fd:13:65:5d:70:45:63:a9:4f:74:3e:b7:11:e5: 34:56:b3:e3:c0:1c:7e:5e:f8:3b:a0:e7:e0:a9:33: d9:cb:fd:b8:bb:6c:69:74:7e:a6:a0:3a:38:b0:2d: 82:21:41:66:1a:a0:07:2b:70:53:57:4c:3e:fc:c7: 42:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:C0:C9:D4:F9:E8:0C:AF:8B:85:1C:14:76:CA:EE:85:15:6F:13:EC X509v3 Authority Key Identifier: keyid:8B:7B:E7:A4:76:06:AB:38:39:1F:B2:15:42:B5:F4:06:1F:02:A8:52 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i3vnpHYGqzg5H7IVQrX0Bh8CqFI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/247c5d-a272-482b-9c8e-37fe395d42f0/1/i3vnpHYGqzg5H7IVQrX0Bh8CqFI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/247c5d-a272-482b-9c8e-37fe395d42f0/1/i3vnpHYGqzg5H7IVQrX0Bh8CqFI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 41:d0:46:b2:50:2f:a0:25:46:a6:78:fa:4b:07:af:da:eb:70: 5d:c7:45:ef:04:3e:ef:59:e0:a9:b8:bf:4f:a8:b8:1b:45:40: 89:26:06:d8:06:3f:f0:9a:05:ab:82:45:b5:6b:a2:bd:22:32: 09:1e:c9:f6:eb:82:0a:b4:9e:8d:c7:ab:a6:57:7e:66:72:f1: df:49:a5:6a:b9:96:5c:0c:f4:bb:b3:92:28:53:06:a1:18:f5: 08:2d:27:88:3c:1b:5f:1e:11:ce:ca:45:5f:84:4f:5d:02:fc: f0:1d:62:21:88:56:65:bf:ed:18:c2:b6:39:f9:71:a7:a7:7d: ae:29:9e:5c:38:df:75:ae:39:93:4d:0f:ff:af:72:1e:73:36: 84:13:f1:4a:ec:1e:e2:f7:a3:37:07:30:72:59:97:90:0f:a9: 1c:51:e2:b9:18:9a:1b:8e:f5:df:16:c7:24:0d:46:e6:e3:80: a4:e4:ab:63:c4:15:bd:74:7e:4a:cc:d5:a1:2f:98:7d:59:d9: c9:ab:52:e1:03:19:cd:ec:ae:e4:ec:2d:13:19:05:c8:ed:15: 0b:b8:1d:43:a8:11:6b:ae:e1:21:7d:3b:db:42:44:88:7b:27: 3f:9f:70:d6:94:2b:b0:fb:a8:23:62:06:2a:2f:d2:61:2a:3b: 78:28:2e:54 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsy1fUpWaVp/q6lRcxqmtZlMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhiN2JlN2E0NzYwNmFiMzgzOTFmYjIxNTQyYjVmNDA2MWYw MmE4NTIwHhcNMjUxMjE4MTkwMDQxWhcNMjUxMjE5MTkwMDQxWjAzMTEwLwYDVQQD EygwOWMwYzlkNGY5ZTgwY2FmOGI4NTFjMTQ3NmNhZWU4NTE1NmYxM2VjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvNGIypEbl0Ou66kcvaHYcR77YUXn YEGFe5niukYGLRyii0D2JhyCy6pI7XMZq4uep4QjPev3zf2vzDxcbOG7IJDuGdKn uPmTpzu7GKq195oL3m8aFzyxbILxDf65XKiP+Nr7oOkUf/TfTz/9JLRe1T25hX6Q /rX69zISJjNwrEdTwrKglvmK2M3Vet4RgymotDXCXBj/0qS+aBgFPbzwtFP9XeYy c/hdjgDmoyUqRQAVQKCqmjLINkPNE6KlXJgvRDUx/RNlXXBFY6lPdD63EeU0VrPj wBx+Xvg7oOfgqTPZy/24u2xpdH6moDo4sC2CIUFmGqAHK3BTV0w+/MdC+QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAnAydT56Ayvi4UcFHbK7oUVbxPsMB8GA1UdIwQY MBaAFIt756R2Bqs4OR+yFUK19AYfAqhSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaTN2bnBIWUdxemc1SDdJVlFyWDBCaDhDcUZJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZS8yNDdjNWQtYTI3Mi00ODJiLTljOGUt MzdmZTM5NWQ0MmYwLzEvaTN2bnBIWUdxemc1SDdJVlFyWDBCaDhDcUZJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xZS8yNDdjNWQtYTI3Mi00ODJiLTljOGUtMzdmZTM5NWQ0MmYw LzEvaTN2bnBIWUdxemc1SDdJVlFyWDBCaDhDcUZJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQdBGslAv oCVGpnj6Swev2utwXcdF7wQ+71ngqbi/T6i4G0VAiSYG2AY/8JoFq4JFtWuivSIy CR7J9uuCCrSejcerpld+ZnLx30mlarmWXAz0u7OSKFMGoRj1CC0niDwbXx4RzspF X4RPXQL88B1iIYhWZb/tGMK2Oflxp6d9rimeXDjfda45k00P/69yHnM2hBPxSuwe 4vejNwcwclmXkA+pHFHiuRiaG4713xbHJA1G5uOApOSrY8QVvXR+SszVoS+YfVnZ yatS4QMZzeyu5OwtExkFyO0VC7gdQ6gRa67hIX0720JEiHsnP59w1pQrsPuoI2IG Ki/SYSo7eCguVA== -----END CERTIFICATE-----Generated at Fri Dec 19 02:22:10 2025 by rpki-client