This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/981b84-9ff0-48e9-ab21-9b6cbfb43246/1/X-C-IOAv_HNU1bLTPg_ncVGa_R8.mft File: X-C-IOAv_HNU1bLTPg_ncVGa_R8.mft (raw, json) Hash identifier: aw0FtoqUHRa/th9OL7TdyqX+AziwuBregipJ6yz352E= Subject key identifier: 43:03:7D:76:A1:52:12:14:80:32:CE:C7:66:E3:77:0B:CD:16:83:32 Authority key identifier: 5F:E0:BE:20:E0:2F:FC:73:54:D5:B2:D3:3E:0F:E7:71:51:9A:FD:1F Certificate issuer: /CN=5fe0be20e02ffc7354d5b2d33e0fe771519afd1f Certificate serial: 019B2B1CC3CE05416032DE829F289CDFB0A9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X-C-IOAv_HNU1bLTPg_ncVGa_R8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/981b84-9ff0-48e9-ab21-9b6cbfb43246/1/X-C-IOAv_HNU1bLTPg_ncVGa_R8.mft Manifest number: 082B Signing time: Wed 17 Dec 2025 07:01:03 +0000 Manifest this update: Wed 17 Dec 2025 07:01:03 +0000 Manifest next update: Thu 18 Dec 2025 07:01:03 +0000 Files and hashes: 1: X-C-IOAv_HNU1bLTPg_ncVGa_R8.crl (hash: c9vPw78x0tM9Wv+L5f0+Uf8M9DYyT4ugK4bvihBMxAc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/981b84-9ff0-48e9-ab21-9b6cbfb43246/1/X-C-IOAv_HNU1bLTPg_ncVGa_R8.crl rsync://rpki.ripe.net/repository/DEFAULT/41/981b84-9ff0-48e9-ab21-9b6cbfb43246/1/X-C-IOAv_HNU1bLTPg_ncVGa_R8.mft rsync://rpki.ripe.net/repository/DEFAULT/X-C-IOAv_HNU1bLTPg_ncVGa_R8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 07:01:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2b:1c:c3:ce:05:41:60:32:de:82:9f:28:9c:df:b0:a9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5fe0be20e02ffc7354d5b2d33e0fe771519afd1f Validity Not Before: Dec 17 07:01:03 2025 GMT Not After : Dec 18 07:01:03 2025 GMT Subject: CN=43037d76a15212148032cec766e3770bcd168332 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:00:b0:27:43:ad:00:4c:17:70:10:a2:4e:24: e6:cb:fc:be:4d:7b:ca:1b:4c:8c:2f:f9:ca:2d:d3: 36:c3:e7:f7:cb:7d:f4:28:58:86:6a:9b:38:a8:36: 26:6f:2b:f3:3b:42:4f:a4:bc:4d:57:8c:c2:18:ec: de:c8:68:9c:57:d2:fa:33:af:22:3e:b0:af:96:2a: 09:68:e5:e3:2f:1c:25:4c:c7:52:13:ee:76:d8:7a: c4:0d:6c:89:bb:30:d6:f6:a4:d8:f5:5f:83:cc:f4: e6:f6:b6:ec:5d:fc:ce:4b:7d:ec:21:58:57:fe:94: 33:dc:99:ab:52:12:b4:96:00:00:dd:79:56:a6:78: 8d:85:cb:f8:3e:76:33:e4:11:16:e8:76:0d:48:b4: c0:c5:30:f5:d7:20:7d:42:8b:55:14:d0:bc:8e:de: 4f:20:3a:45:65:9b:14:6a:5e:4b:d7:c4:34:7a:96: 06:d5:64:04:a0:03:23:2d:f6:75:b9:e9:9a:29:09: 5a:c3:20:63:db:5f:a4:60:3f:88:77:ee:e1:df:9e: 03:2d:52:62:79:7a:1c:71:5a:68:65:50:67:3d:92: 2b:75:36:44:49:0d:97:70:85:b5:a6:b7:75:5d:68: ba:eb:22:22:4a:41:97:52:c6:6b:be:8b:ac:21:fc: c9:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:03:7D:76:A1:52:12:14:80:32:CE:C7:66:E3:77:0B:CD:16:83:32 X509v3 Authority Key Identifier: keyid:5F:E0:BE:20:E0:2F:FC:73:54:D5:B2:D3:3E:0F:E7:71:51:9A:FD:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X-C-IOAv_HNU1bLTPg_ncVGa_R8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/981b84-9ff0-48e9-ab21-9b6cbfb43246/1/X-C-IOAv_HNU1bLTPg_ncVGa_R8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/41/981b84-9ff0-48e9-ab21-9b6cbfb43246/1/X-C-IOAv_HNU1bLTPg_ncVGa_R8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2f:65:61:df:a6:57:a4:c8:5c:ea:f0:23:a0:16:ae:7f:d4:fb: 8b:06:d2:b6:54:67:88:1f:96:bd:fa:bc:90:37:26:d5:9d:62: 25:2f:b2:34:ac:68:75:f3:c9:11:b4:19:3b:80:d9:55:f5:2f: f0:05:86:87:0f:a7:52:64:af:89:04:d8:03:f4:4c:20:2d:05: e7:10:a4:42:68:66:e8:5e:64:ab:15:c7:67:fd:3e:c2:54:ce: 1d:d8:88:c1:1b:a1:1d:e0:5f:6b:fa:f7:31:a8:f4:e1:82:84: 12:e7:18:b4:bf:a2:9c:be:65:4a:fd:5c:ef:2a:79:c2:9a:b2: 03:e3:bf:bb:eb:04:86:5e:82:b1:d4:35:4a:bc:9a:62:bf:90: 6f:3b:c0:5b:8f:6a:4e:2e:fb:84:c9:a2:f4:73:a2:fb:08:a6: 3c:61:0f:9b:76:76:90:1b:66:d2:ae:38:a6:71:e2:bb:2b:39: ac:97:6b:03:c5:e9:9f:03:4f:fb:e2:ef:47:66:e8:18:30:0e: 8e:e1:cd:4a:e9:1f:30:3b:41:da:e4:aa:cf:20:4f:ed:0b:03: 7b:6b:f1:91:db:5d:aa:c8:3c:2e:27:01:89:92:83:f7:de:a1: 19:1c:2f:f2:7f:24:02:2a:8c:de:1a:b3:3a:23:f0:13:37:c8: 44:ac:63:53 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsrHMPOBUFgMt6Cnyic37CpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVmZTBiZTIwZTAyZmZjNzM1NGQ1YjJkMzNlMGZlNzcxNTE5 YWZkMWYwHhcNMjUxMjE3MDcwMTAzWhcNMjUxMjE4MDcwMTAzWjAzMTEwLwYDVQQD Eyg0MzAzN2Q3NmExNTIxMjE0ODAzMmNlYzc2NmUzNzcwYmNkMTY4MzMyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqACwJ0OtAEwXcBCiTiTmy/y+TXvK G0yML/nKLdM2w+f3y330KFiGaps4qDYmbyvzO0JPpLxNV4zCGOzeyGicV9L6M68i PrCvlioJaOXjLxwlTMdSE+522HrEDWyJuzDW9qTY9V+DzPTm9rbsXfzOS33sIVhX /pQz3JmrUhK0lgAA3XlWpniNhcv4PnYz5BEW6HYNSLTAxTD11yB9QotVFNC8jt5P IDpFZZsUal5L18Q0epYG1WQEoAMjLfZ1uemaKQlawyBj21+kYD+Id+7h354DLVJi eXoccVpoZVBnPZIrdTZESQ2XcIW1prd1XWi66yIiSkGXUsZrvousIfzJTwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEMDfXahUhIUgDLOx2bjdwvNFoMyMB8GA1UdIwQY MBaAFF/gviDgL/xzVNWy0z4P53FRmv0fMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWC1DLUlPQXZfSE5VMWJMVFBnX25jVkdhX1I4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MS85ODFiODQtOWZmMC00OGU5LWFiMjEt OWI2Y2JmYjQzMjQ2LzEvWC1DLUlPQXZfSE5VMWJMVFBnX25jVkdhX1I4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80MS85ODFiODQtOWZmMC00OGU5LWFiMjEtOWI2Y2JmYjQzMjQ2 LzEvWC1DLUlPQXZfSE5VMWJMVFBnX25jVkdhX1I4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAL2Vh36ZX pMhc6vAjoBauf9T7iwbStlRniB+Wvfq8kDcm1Z1iJS+yNKxodfPJEbQZO4DZVfUv 8AWGhw+nUmSviQTYA/RMIC0F5xCkQmhm6F5kqxXHZ/0+wlTOHdiIwRuhHeBfa/r3 Maj04YKEEucYtL+inL5lSv1c7yp5wpqyA+O/u+sEhl6CsdQ1SryaYr+QbzvAW49q Ti77hMmi9HOi+wimPGEPm3Z2kBtm0q44pnHiuys5rJdrA8XpnwNP++LvR2boGDAO juHNSukfMDtB2uSqzyBP7QsDe2vxkdtdqsg8LicBiZKD996hGRwv8n8kAiqM3hqz OiPwEzfIRKxjUw== -----END CERTIFICATE-----Generated at Wed Dec 17 15:17:00 2025 by rpki-client