This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/6a6b55-ca02-458d-8b5d-74d77302b184/1/IdhdIxrVS4Q5wqrtkaV3WGrEYAA.mft File: IdhdIxrVS4Q5wqrtkaV3WGrEYAA.mft (raw, json) Hash identifier: gpMvNyfPbeUjT1qSRE0bpVaRrleR0Q5vWv2S+M7grZ8= Subject key identifier: 6B:E1:ED:7F:BD:26:3B:9B:D0:54:63:EB:6F:B2:EA:3C:D5:8A:B8:39 Authority key identifier: 21:D8:5D:23:1A:D5:4B:84:39:C2:AA:ED:91:A5:77:58:6A:C4:60:00 Certificate issuer: /CN=21d85d231ad54b8439c2aaed91a577586ac46000 Certificate serial: 019B6278B42B165512CB876DE6674A007A33 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IdhdIxrVS4Q5wqrtkaV3WGrEYAA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/6a6b55-ca02-458d-8b5d-74d77302b184/1/IdhdIxrVS4Q5wqrtkaV3WGrEYAA.mft Manifest number: 129D Signing time: Sun 28 Dec 2025 01:00:36 +0000 Manifest this update: Sun 28 Dec 2025 01:00:36 +0000 Manifest next update: Mon 29 Dec 2025 01:00:36 +0000 Files and hashes: 1: IdhdIxrVS4Q5wqrtkaV3WGrEYAA.crl (hash: ZZm8UnLAjQA1jhYRpdFhmm/ienwYbDkOlmfNWy6rRms=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/6a6b55-ca02-458d-8b5d-74d77302b184/1/IdhdIxrVS4Q5wqrtkaV3WGrEYAA.crl rsync://rpki.ripe.net/repository/DEFAULT/49/6a6b55-ca02-458d-8b5d-74d77302b184/1/IdhdIxrVS4Q5wqrtkaV3WGrEYAA.mft rsync://rpki.ripe.net/repository/DEFAULT/IdhdIxrVS4Q5wqrtkaV3WGrEYAA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 29 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:62:78:b4:2b:16:55:12:cb:87:6d:e6:67:4a:00:7a:33 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=21d85d231ad54b8439c2aaed91a577586ac46000 Validity Not Before: Dec 28 01:00:36 2025 GMT Not After : Dec 29 01:00:36 2025 GMT Subject: CN=6be1ed7fbd263b9bd05463eb6fb2ea3cd58ab839 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:f0:33:ed:84:b3:08:92:0e:1b:9b:26:4e:71: 5c:1d:5f:a0:00:04:09:ab:e3:0a:04:6f:de:a3:a0: b4:9e:d2:72:bd:23:ee:36:55:70:c5:32:87:a8:50: d7:e2:11:e1:7e:f5:37:36:3a:97:46:87:31:40:ff: e7:55:d7:c4:5c:ff:26:dc:c5:32:7e:14:91:fa:e2: 12:0e:b2:af:06:9a:25:cb:3d:09:23:8e:fd:56:c2: 01:72:70:7a:90:0f:f4:9a:b2:f7:2f:c1:bf:ad:e0: 35:2d:a8:30:3e:8f:05:0e:ab:5a:6f:3c:a2:c0:9d: 01:75:2a:4a:71:00:24:63:06:9a:74:2d:96:ae:88: ee:58:02:c3:78:aa:44:9e:d7:2a:14:34:77:74:8a: b6:3d:c5:2f:3f:74:d9:5f:ed:c6:d7:08:46:90:8e: db:49:ec:38:ff:15:a1:a6:ab:8a:9d:74:84:20:3a: c0:fb:3f:46:fd:5f:84:72:90:ae:a0:73:4f:ca:1d: ae:61:84:17:de:bb:15:ee:f6:07:a9:1a:be:1d:bd: ee:23:48:ac:98:79:dc:1a:9b:10:19:56:c1:e9:2a: 48:72:4b:cc:c9:97:0c:0f:a8:d0:d5:9a:5c:34:3e: d6:cc:3d:d8:ee:b9:57:c9:fa:d0:74:59:aa:86:2d: e8:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:E1:ED:7F:BD:26:3B:9B:D0:54:63:EB:6F:B2:EA:3C:D5:8A:B8:39 X509v3 Authority Key Identifier: keyid:21:D8:5D:23:1A:D5:4B:84:39:C2:AA:ED:91:A5:77:58:6A:C4:60:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IdhdIxrVS4Q5wqrtkaV3WGrEYAA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/6a6b55-ca02-458d-8b5d-74d77302b184/1/IdhdIxrVS4Q5wqrtkaV3WGrEYAA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/49/6a6b55-ca02-458d-8b5d-74d77302b184/1/IdhdIxrVS4Q5wqrtkaV3WGrEYAA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 49:a6:f5:49:39:2f:2b:eb:74:9d:c5:7a:56:b6:15:63:f8:c9: bf:aa:92:96:d5:5c:24:14:53:3b:e1:35:06:ee:60:78:de:22: 77:a2:82:ee:4e:0b:85:33:ae:51:e6:99:f3:2b:90:ee:b3:f2: 6a:48:6f:ec:4a:18:e1:a2:e7:89:c1:c6:2c:1b:e1:f5:44:02: 8b:89:78:6b:44:ce:25:1c:9e:12:f4:bf:a7:e4:72:0f:6f:91: 4f:fe:e0:87:bd:c5:0a:de:b1:ab:bb:85:ed:4e:e3:07:53:ee: 9c:73:58:1b:1a:bf:d6:03:85:34:bd:5b:fb:85:dc:eb:0e:62: 1c:bd:7d:cd:50:88:fa:4f:6d:dd:28:e2:6f:e3:eb:fc:a3:ef: bc:27:36:53:e8:e3:19:87:2d:b7:ac:99:c1:2f:9e:e1:36:d7: 9b:81:2b:eb:98:a2:9e:54:7d:2f:de:9b:71:b9:f6:d1:ec:4a: e7:c8:3d:e2:23:14:33:fa:2a:8b:18:7e:b8:db:59:b3:22:b6: d6:88:6f:e0:34:e8:1e:67:83:78:c3:16:30:4b:2f:c0:b4:98: 2a:1d:1c:0c:87:6a:dc:40:c3:3a:b6:78:c9:d7:2f:18:f4:d4: 8e:07:20:fb:90:76:c0:09:8f:5e:c7:34:eb:a9:eb:4e:0a:dc: 81:6b:ae:67 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtieLQrFlUSy4dt5mdKAHozMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIxZDg1ZDIzMWFkNTRiODQzOWMyYWFlZDkxYTU3NzU4NmFj NDYwMDAwHhcNMjUxMjI4MDEwMDM2WhcNMjUxMjI5MDEwMDM2WjAzMTEwLwYDVQQD Eyg2YmUxZWQ3ZmJkMjYzYjliZDA1NDYzZWI2ZmIyZWEzY2Q1OGFiODM5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsfAz7YSzCJIOG5smTnFcHV+gAAQJ q+MKBG/eo6C0ntJyvSPuNlVwxTKHqFDX4hHhfvU3NjqXRocxQP/nVdfEXP8m3MUy fhSR+uISDrKvBpolyz0JI479VsIBcnB6kA/0mrL3L8G/reA1LagwPo8FDqtabzyi wJ0BdSpKcQAkYwaadC2WrojuWALDeKpEntcqFDR3dIq2PcUvP3TZX+3G1whGkI7b Sew4/xWhpquKnXSEIDrA+z9G/V+EcpCuoHNPyh2uYYQX3rsV7vYHqRq+Hb3uI0is mHncGpsQGVbB6SpIckvMyZcMD6jQ1ZpcND7WzD3Y7rlXyfrQdFmqhi3oRQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGvh7X+9Jjub0FRj62+y6jzVirg5MB8GA1UdIwQY MBaAFCHYXSMa1UuEOcKq7ZGld1hqxGAAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSWRoZEl4clZTNFE1d3FydGthVjNXR3JFWUFBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OS82YTZiNTUtY2EwMi00NThkLThiNWQt NzRkNzczMDJiMTg0LzEvSWRoZEl4clZTNFE1d3FydGthVjNXR3JFWUFBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80OS82YTZiNTUtY2EwMi00NThkLThiNWQtNzRkNzczMDJiMTg0 LzEvSWRoZEl4clZTNFE1d3FydGthVjNXR3JFWUFBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASab1STkv K+t0ncV6VrYVY/jJv6qSltVcJBRTO+E1Bu5geN4id6KC7k4LhTOuUeaZ8yuQ7rPy akhv7EoY4aLnicHGLBvh9UQCi4l4a0TOJRyeEvS/p+RyD2+RT/7gh73FCt6xq7uF 7U7jB1PunHNYGxq/1gOFNL1b+4Xc6w5iHL19zVCI+k9t3Sjib+Pr/KPvvCc2U+jj GYctt6yZwS+e4TbXm4Er65iinlR9L96bcbn20exK58g94iMUM/oqixh+uNtZsyK2 1ohv4DToHmeDeMMWMEsvwLSYKh0cDIdq3EDDOrZ4ydcvGPTUjgcg+5B2wAmPXsc0 66nrTgrcgWuuZw== -----END CERTIFICATE-----Generated at Sun Dec 28 07:31:33 2025 by rpki-client