This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/28d7cf-22f8-4363-ad02-a0ac49ad343f/1/IBjvCLVd2yDIgWpiGkWc25J7MgE.mft File: IBjvCLVd2yDIgWpiGkWc25J7MgE.mft (raw, json) Hash identifier: 5dyX4/N1OJvzdRS3dcQXHvRhZOFOLuMRNb+qRiH77Ek= Subject key identifier: A4:5E:E1:E3:E5:58:A6:47:83:26:94:AA:C8:BC:7A:B6:ED:78:7A:21 Authority key identifier: 20:18:EF:08:B5:5D:DB:20:C8:81:6A:62:1A:45:9C:DB:92:7B:32:01 Certificate issuer: /CN=2018ef08b55ddb20c8816a621a459cdb927b3201 Certificate serial: 019B462646E3B58FAC45D3C42CE67FCB2A01 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IBjvCLVd2yDIgWpiGkWc25J7MgE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/28d7cf-22f8-4363-ad02-a0ac49ad343f/1/IBjvCLVd2yDIgWpiGkWc25J7MgE.mft Manifest number: 1720 Signing time: Mon 22 Dec 2025 13:01:12 +0000 Manifest this update: Mon 22 Dec 2025 13:01:12 +0000 Manifest next update: Tue 23 Dec 2025 13:01:12 +0000 Files and hashes: 1: IBjvCLVd2yDIgWpiGkWc25J7MgE.crl (hash: 3xF3KzAywri1t0l4goAql3pEQEdC3J3c/eEpw7kvBWs=) 2: sg6Ke3Csa6eOc_sincTW9jDFk9g.roa (hash: JJ9uMfjWarSgHm6HNb7BDGcOt4jlyu+d939+XIEHnuI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/28d7cf-22f8-4363-ad02-a0ac49ad343f/1/IBjvCLVd2yDIgWpiGkWc25J7MgE.crl rsync://rpki.ripe.net/repository/DEFAULT/3a/28d7cf-22f8-4363-ad02-a0ac49ad343f/1/IBjvCLVd2yDIgWpiGkWc25J7MgE.mft rsync://rpki.ripe.net/repository/DEFAULT/IBjvCLVd2yDIgWpiGkWc25J7MgE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 10:00:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:46:26:46:e3:b5:8f:ac:45:d3:c4:2c:e6:7f:cb:2a:01 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2018ef08b55ddb20c8816a621a459cdb927b3201 Validity Not Before: Dec 22 13:01:12 2025 GMT Not After : Dec 23 13:01:12 2025 GMT Subject: CN=a45ee1e3e558a647832694aac8bc7ab6ed787a21 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:92:55:be:9a:5c:0f:6d:bb:c6:ca:7c:b5:fe: 03:b0:b9:de:b1:21:7d:23:bb:f5:d9:6c:ec:e5:49: f2:c2:b0:86:46:f4:50:5d:9f:aa:9a:57:52:b1:d3: f8:65:57:8e:88:8c:05:6b:b5:d8:f8:0f:0b:92:ef: 9f:a5:41:92:92:ad:e2:9d:bd:eb:13:b0:9e:74:a4: cc:c4:19:86:c0:4e:32:b2:cd:b6:e7:1b:42:6e:1b: d5:b0:44:dc:fe:f5:27:34:ab:1b:36:9f:07:61:e8: b4:bb:03:6b:90:e7:d0:ab:5f:22:80:94:27:31:65: e3:90:51:ab:93:29:cd:16:2b:f0:fc:f2:33:1f:5e: 3d:29:b3:53:7b:93:14:b9:1a:a6:c0:e3:13:cd:58: 3f:f3:11:92:5e:6b:9b:f9:46:43:76:31:36:c0:c2: 5c:49:a8:bc:24:a9:97:54:a2:b3:b6:f1:b2:93:52: 7a:f4:32:35:91:ce:84:e4:86:6c:de:a4:4c:39:5d: 88:6c:bf:b9:b7:0a:38:23:72:8e:86:4b:58:3a:27: 34:c2:a4:fe:81:38:9d:4c:2d:40:ae:8d:b7:7f:8d: 2b:b5:a4:ec:48:bb:1d:37:4c:29:a8:a5:21:24:9a: cc:b5:69:2c:89:d8:da:d2:99:3c:37:98:99:a9:76: 82:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:5E:E1:E3:E5:58:A6:47:83:26:94:AA:C8:BC:7A:B6:ED:78:7A:21 X509v3 Authority Key Identifier: keyid:20:18:EF:08:B5:5D:DB:20:C8:81:6A:62:1A:45:9C:DB:92:7B:32:01 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IBjvCLVd2yDIgWpiGkWc25J7MgE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/28d7cf-22f8-4363-ad02-a0ac49ad343f/1/IBjvCLVd2yDIgWpiGkWc25J7MgE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/28d7cf-22f8-4363-ad02-a0ac49ad343f/1/IBjvCLVd2yDIgWpiGkWc25J7MgE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4e:7f:95:21:6b:36:eb:98:a0:cd:d6:b6:23:00:54:e8:6d:8d: 8e:1e:ba:cd:5b:b0:ed:40:c9:b0:c9:da:75:6e:88:af:fe:fb: e5:6a:bd:b3:7f:bd:dd:15:a2:e1:8c:aa:2d:3d:3f:a4:52:cd: 35:68:e1:03:5a:bb:92:43:4f:88:49:f9:ac:ff:01:d5:11:d5: 5a:64:01:3a:a5:69:5c:81:5b:07:3f:25:5d:15:c8:1d:0a:49: 08:1d:8a:d1:d8:99:88:2a:17:04:e0:a8:5f:13:c0:7b:92:54: 0a:6c:7f:27:21:1e:a1:c9:d9:b9:38:42:5c:d8:8b:41:ec:ff: de:2f:a2:b6:96:78:b6:d3:0c:21:43:f1:e9:bf:fa:68:e6:d4: 80:85:2e:01:31:0d:88:2f:cd:db:7c:be:17:72:f2:3b:bd:8f: 3e:3b:f2:fa:b9:e8:9d:49:6f:1e:c4:45:c8:49:40:a8:bb:79: 8f:26:7f:ad:2e:88:cc:ed:e5:39:80:a6:e2:89:41:07:83:23: 91:04:8e:6f:48:8a:5c:18:e6:d1:7d:f6:cd:ab:f5:c7:33:b3: 35:59:69:49:a3:92:4d:f2:eb:7d:7d:6d:a9:0f:1a:24:3e:1b: 0a:76:fd:a6:d0:ca:fa:b1:76:c8:3a:98:a8:8c:4d:55:da:32: a7:8e:39:67 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtGJkbjtY+sRdPELOZ/yyoBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIwMThlZjA4YjU1ZGRiMjBjODgxNmE2MjFhNDU5Y2RiOTI3 YjMyMDEwHhcNMjUxMjIyMTMwMTEyWhcNMjUxMjIzMTMwMTEyWjAzMTEwLwYDVQQD EyhhNDVlZTFlM2U1NThhNjQ3ODMyNjk0YWFjOGJjN2FiNmVkNzg3YTIxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4JJVvppcD227xsp8tf4DsLnesSF9 I7v12Wzs5UnywrCGRvRQXZ+qmldSsdP4ZVeOiIwFa7XY+A8Lku+fpUGSkq3inb3r E7CedKTMxBmGwE4yss225xtCbhvVsETc/vUnNKsbNp8HYei0uwNrkOfQq18igJQn MWXjkFGrkynNFivw/PIzH149KbNTe5MUuRqmwOMTzVg/8xGSXmub+UZDdjE2wMJc Sai8JKmXVKKztvGyk1J69DI1kc6E5IZs3qRMOV2IbL+5two4I3KOhktYOic0wqT+ gTidTC1Aro23f40rtaTsSLsdN0wpqKUhJJrMtWksidja0pk8N5iZqXaC5wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKRe4ePlWKZHgyaUqsi8erbteHohMB8GA1UdIwQY MBaAFCAY7wi1XdsgyIFqYhpFnNuSezIBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSUJqdkNMVmQyeURJZ1dwaUdrV2MyNUo3TWdFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYS8yOGQ3Y2YtMjJmOC00MzYzLWFkMDIt YTBhYzQ5YWQzNDNmLzEvSUJqdkNMVmQyeURJZ1dwaUdrV2MyNUo3TWdFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYS8yOGQ3Y2YtMjJmOC00MzYzLWFkMDItYTBhYzQ5YWQzNDNm LzEvSUJqdkNMVmQyeURJZ1dwaUdrV2MyNUo3TWdFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATn+VIWs2 65igzda2IwBU6G2Njh66zVuw7UDJsMnadW6Ir/775Wq9s3+93RWi4YyqLT0/pFLN NWjhA1q7kkNPiEn5rP8B1RHVWmQBOqVpXIFbBz8lXRXIHQpJCB2K0diZiCoXBOCo XxPAe5JUCmx/JyEeocnZuThCXNiLQez/3i+itpZ4ttMMIUPx6b/6aObUgIUuATEN iC/N23y+F3LyO72PPjvy+rnonUlvHsRFyElAqLt5jyZ/rS6IzO3lOYCm4olBB4Mj kQSOb0iKXBjm0X32zav1xzOzNVlpSaOSTfLrfX1tqQ8aJD4bCnb9ptDK+rF2yDqY qIxNVdoyp445Zw== -----END CERTIFICATE-----Generated at Mon Dec 22 16:01:33 2025 by rpki-client