This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/ce981a-a05b-4527-80af-693454237ee9/1/IDHrupQ_rRxUh1QOAQXhnCMs95w.mft File: IDHrupQ_rRxUh1QOAQXhnCMs95w.mft (raw, json) Hash identifier: PSkZ3iw31sopgVa90x+ZumIrAcjWwWUEeyHUaZorfpg= Subject key identifier: C2:B2:B2:A5:D5:C2:5E:46:62:22:1E:F6:F1:73:9D:2D:B6:8B:20:91 Authority key identifier: 20:31:EB:BA:94:3F:AD:1C:54:87:54:0E:01:05:E1:9C:23:2C:F7:9C Certificate issuer: /CN=2031ebba943fad1c5487540e0105e19c232cf79c Certificate serial: 019B41370417135BC8B8A01B87CA44858DDE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IDHrupQ_rRxUh1QOAQXhnCMs95w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/ce981a-a05b-4527-80af-693454237ee9/1/IDHrupQ_rRxUh1QOAQXhnCMs95w.mft Manifest number: 0948 Signing time: Sun 21 Dec 2025 14:01:23 +0000 Manifest this update: Sun 21 Dec 2025 14:01:23 +0000 Manifest next update: Mon 22 Dec 2025 14:01:23 +0000 Files and hashes: 1: IDHrupQ_rRxUh1QOAQXhnCMs95w.crl (hash: gEFcITc1gqW3uGvMoPK6qaEqOn3UqEPkuu2w7wJETxY=) 2: tKV7ZxqGnJTtEa2_ye8Y1d8JNh0.roa (hash: 8oiml4GgGUwThCKHUcnZfuIG0l8a7ZiiCuW4RZzZ3cA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/ce981a-a05b-4527-80af-693454237ee9/1/IDHrupQ_rRxUh1QOAQXhnCMs95w.crl rsync://rpki.ripe.net/repository/DEFAULT/24/ce981a-a05b-4527-80af-693454237ee9/1/IDHrupQ_rRxUh1QOAQXhnCMs95w.mft rsync://rpki.ripe.net/repository/DEFAULT/IDHrupQ_rRxUh1QOAQXhnCMs95w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 13:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:41:37:04:17:13:5b:c8:b8:a0:1b:87:ca:44:85:8d:de Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2031ebba943fad1c5487540e0105e19c232cf79c Validity Not Before: Dec 21 14:01:23 2025 GMT Not After : Dec 22 14:01:23 2025 GMT Subject: CN=c2b2b2a5d5c25e4662221ef6f1739d2db68b2091 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:50:8f:03:a5:2e:e5:15:6f:a6:80:60:b0:9a: 09:69:48:55:f7:98:fb:b4:d9:b2:77:98:f6:59:02: 33:08:c9:99:ec:45:d9:a9:5f:3f:1a:91:2d:a8:84: e5:da:ea:98:d6:05:1d:83:99:f7:86:73:46:7b:e1: a0:ff:cf:58:c6:f8:e1:5e:99:f2:04:a1:a2:53:4a: bb:62:2d:d7:25:ae:6d:de:91:69:6d:eb:d7:3b:73: 90:82:ab:55:00:4e:ce:5f:0e:51:5e:a3:21:5c:2a: d9:bc:8b:2f:ea:1e:ee:3e:1f:f9:4a:ca:d0:97:f2: d6:fc:c6:37:7c:c8:a5:15:38:2a:1a:10:b2:70:12: 67:15:58:8b:2d:99:b9:17:35:7e:d5:1e:cd:21:a7: ce:88:54:c6:2a:c2:37:0e:98:63:53:81:c7:20:09: 1c:73:47:35:9d:35:58:89:0f:50:e8:1a:35:48:14: 84:63:9d:df:0d:8b:99:f0:88:83:f7:cd:c9:49:ac: a2:5e:39:a7:93:12:94:dd:89:70:ea:94:7a:a3:81: 47:ec:15:d4:5f:88:05:66:82:b1:de:35:fc:d3:f7: b6:9b:e6:a0:e3:2d:20:aa:b8:6d:6e:c1:a6:5c:65: 8c:08:6c:6f:ba:c1:7f:f5:14:67:ae:39:db:47:51: 20:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:B2:B2:A5:D5:C2:5E:46:62:22:1E:F6:F1:73:9D:2D:B6:8B:20:91 X509v3 Authority Key Identifier: keyid:20:31:EB:BA:94:3F:AD:1C:54:87:54:0E:01:05:E1:9C:23:2C:F7:9C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IDHrupQ_rRxUh1QOAQXhnCMs95w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/ce981a-a05b-4527-80af-693454237ee9/1/IDHrupQ_rRxUh1QOAQXhnCMs95w.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/24/ce981a-a05b-4527-80af-693454237ee9/1/IDHrupQ_rRxUh1QOAQXhnCMs95w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3e:81:61:4d:b6:b5:b6:51:3a:8d:4e:c2:ff:45:ae:45:33:1d: d1:2c:11:02:01:86:de:bc:d3:b9:fe:ff:ce:87:bc:0e:d5:2a: 11:2d:2c:dc:c5:48:ff:c2:95:d4:53:a8:c5:16:09:76:ef:e2: 5c:9c:a2:09:ef:63:69:75:9e:60:64:65:63:4a:f1:8f:89:97: 67:38:28:18:a3:69:06:c8:6f:d5:8d:7d:97:14:d8:0d:7f:d8: ea:fa:ba:d6:cb:b3:b8:d0:e9:10:2d:f3:56:ef:71:e5:52:0d: 76:99:41:ae:40:c3:09:92:e3:c0:b7:64:a8:76:89:ab:2a:a0: cf:59:43:2a:78:92:d0:71:a7:db:2e:9d:3a:10:25:5b:a4:9f: 91:eb:fd:25:3a:13:16:92:0f:ab:36:8d:7a:24:43:5c:7e:21: 8e:ed:92:55:d6:21:05:1c:57:e3:1f:e3:c6:01:82:f6:86:2e: 17:29:dd:83:99:7e:15:a3:ea:25:52:3d:62:b0:e0:c1:ed:31: fe:e5:b8:ba:f7:4a:6d:41:a2:5e:f8:40:0c:67:ba:6a:bd:00: 28:23:fc:ff:b4:7d:aa:e3:c8:d9:1f:71:6c:27:a4:fe:e1:d8: 7c:3c:3a:c8:69:a2:12:e8:e7:4b:e8:c5:08:04:d0:81:4e:56: ab:8c:77:09 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtBNwQXE1vIuKAbh8pEhY3eMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIwMzFlYmJhOTQzZmFkMWM1NDg3NTQwZTAxMDVlMTljMjMy Y2Y3OWMwHhcNMjUxMjIxMTQwMTIzWhcNMjUxMjIyMTQwMTIzWjAzMTEwLwYDVQQD EyhjMmIyYjJhNWQ1YzI1ZTQ2NjIyMjFlZjZmMTczOWQyZGI2OGIyMDkxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvVCPA6Uu5RVvpoBgsJoJaUhV95j7 tNmyd5j2WQIzCMmZ7EXZqV8/GpEtqITl2uqY1gUdg5n3hnNGe+Gg/89YxvjhXpny BKGiU0q7Yi3XJa5t3pFpbevXO3OQgqtVAE7OXw5RXqMhXCrZvIsv6h7uPh/5SsrQ l/LW/MY3fMilFTgqGhCycBJnFViLLZm5FzV+1R7NIafOiFTGKsI3DphjU4HHIAkc c0c1nTVYiQ9Q6Bo1SBSEY53fDYuZ8IiD983JSayiXjmnkxKU3Ylw6pR6o4FH7BXU X4gFZoKx3jX80/e2m+ag4y0gqrhtbsGmXGWMCGxvusF/9RRnrjnbR1Eg2QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMKysqXVwl5GYiIe9vFznS22iyCRMB8GA1UdIwQY MBaAFCAx67qUP60cVIdUDgEF4ZwjLPecMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSURIcnVwUV9yUnhVaDFRT0FRWGhuQ01zOTV3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNC9jZTk4MWEtYTA1Yi00NTI3LTgwYWYt NjkzNDU0MjM3ZWU5LzEvSURIcnVwUV9yUnhVaDFRT0FRWGhuQ01zOTV3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNC9jZTk4MWEtYTA1Yi00NTI3LTgwYWYtNjkzNDU0MjM3ZWU5 LzEvSURIcnVwUV9yUnhVaDFRT0FRWGhuQ01zOTV3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPoFhTba1 tlE6jU7C/0WuRTMd0SwRAgGG3rzTuf7/zoe8DtUqES0s3MVI/8KV1FOoxRYJdu/i XJyiCe9jaXWeYGRlY0rxj4mXZzgoGKNpBshv1Y19lxTYDX/Y6vq61suzuNDpEC3z Vu9x5VINdplBrkDDCZLjwLdkqHaJqyqgz1lDKniS0HGn2y6dOhAlW6Sfkev9JToT FpIPqzaNeiRDXH4hju2SVdYhBRxX4x/jxgGC9oYuFyndg5l+FaPqJVI9YrDgwe0x /uW4uvdKbUGiXvhADGe6ar0AKCP8/7R9quPI2R9xbCek/uHYfDw6yGmiEujnS+jF CATQgU5Wq4x3CQ== -----END CERTIFICATE-----Generated at Sun Dec 21 21:13:11 2025 by rpki-client