This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/99d177-8c03-498f-b202-7a78ae054b4c/1/IwdlIUTJEn3WJnlgVsnsKTKk8gU.mft File: IwdlIUTJEn3WJnlgVsnsKTKk8gU.mft (raw, json) Hash identifier: RB6evQfgLRYemipVcSBA3JeAmFnEGpU1eIFD/mU93hQ= Subject key identifier: 6B:AD:A0:DA:BD:C4:2E:A1:29:1F:CD:F1:4A:94:8A:00:85:D0:16:D3 Authority key identifier: 23:07:65:21:44:C9:12:7D:D6:26:79:60:56:C9:EC:29:32:A4:F2:05 Certificate issuer: /CN=2307652144c9127dd626796056c9ec2932a4f205 Certificate serial: 019B631E41D598FF72556DAA1927978BC470 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IwdlIUTJEn3WJnlgVsnsKTKk8gU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/99d177-8c03-498f-b202-7a78ae054b4c/1/IwdlIUTJEn3WJnlgVsnsKTKk8gU.mft Manifest number: 027B Signing time: Sun 28 Dec 2025 04:01:25 +0000 Manifest this update: Sun 28 Dec 2025 04:01:25 +0000 Manifest next update: Mon 29 Dec 2025 04:01:25 +0000 Files and hashes: 1: IwdlIUTJEn3WJnlgVsnsKTKk8gU.crl (hash: 7tAmPUnvoBIbf1x8w+ifzpDt5a1KIXOgcbiQSZf7/zc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/99d177-8c03-498f-b202-7a78ae054b4c/1/IwdlIUTJEn3WJnlgVsnsKTKk8gU.crl rsync://rpki.ripe.net/repository/DEFAULT/68/99d177-8c03-498f-b202-7a78ae054b4c/1/IwdlIUTJEn3WJnlgVsnsKTKk8gU.mft rsync://rpki.ripe.net/repository/DEFAULT/IwdlIUTJEn3WJnlgVsnsKTKk8gU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 29 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:63:1e:41:d5:98:ff:72:55:6d:aa:19:27:97:8b:c4:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2307652144c9127dd626796056c9ec2932a4f205 Validity Not Before: Dec 28 04:01:25 2025 GMT Not After : Dec 29 04:01:25 2025 GMT Subject: CN=6bada0dabdc42ea1291fcdf14a948a0085d016d3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:4b:dd:61:b2:94:70:85:6c:14:a9:61:47:23: 3d:41:5f:73:54:40:c5:2b:a6:d8:a7:c4:86:e5:78: 06:64:b6:48:25:a5:d3:33:b4:3e:9d:2d:e3:4a:8b: 0e:57:25:81:df:25:4a:b0:b7:1b:9f:2c:fc:3f:9d: 61:73:a3:78:ea:87:4f:82:bf:53:19:35:eb:c1:9c: 0b:fe:4e:02:e2:1e:ba:4b:f7:f2:51:7d:0e:44:e9: 56:bd:e1:3a:48:d0:a1:b8:fe:cd:cd:de:d6:df:e1: 11:c5:3f:a3:3e:f2:c9:31:55:09:e2:04:92:ee:d3: da:9c:96:f4:43:70:38:ea:ab:62:ce:62:d7:1d:43: f9:d4:78:8b:e2:62:da:b7:78:ce:36:05:73:bc:7a: e6:75:44:2d:ee:34:c1:63:d2:3d:c3:86:9e:ab:2f: 20:25:01:91:6c:e7:80:53:44:0e:06:32:23:d9:45: 39:3c:3d:82:44:c0:da:1c:a3:96:61:b9:91:e9:26: 47:de:92:f9:04:a6:4e:f6:3e:33:c7:7a:44:2a:65: cf:1e:66:7f:03:13:1d:df:4b:a3:df:db:09:8a:30: c0:4c:08:a1:de:81:5c:30:8a:68:a8:95:ed:e7:6b: 64:5f:5f:a5:94:1d:ec:9e:12:69:6b:72:52:5b:0b: 80:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:AD:A0:DA:BD:C4:2E:A1:29:1F:CD:F1:4A:94:8A:00:85:D0:16:D3 X509v3 Authority Key Identifier: keyid:23:07:65:21:44:C9:12:7D:D6:26:79:60:56:C9:EC:29:32:A4:F2:05 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IwdlIUTJEn3WJnlgVsnsKTKk8gU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/99d177-8c03-498f-b202-7a78ae054b4c/1/IwdlIUTJEn3WJnlgVsnsKTKk8gU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/68/99d177-8c03-498f-b202-7a78ae054b4c/1/IwdlIUTJEn3WJnlgVsnsKTKk8gU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 39:7d:f6:9d:27:21:f8:84:88:90:3f:c9:75:e6:3f:44:b3:4c: f4:7a:eb:d2:ea:d6:b7:00:46:3b:1f:2c:9e:f9:3f:be:f1:c1: cf:d6:26:e9:f4:d4:07:05:0f:d1:60:83:de:74:9b:aa:1d:cd: d8:92:a4:ba:5a:e2:cf:0b:b8:24:6c:88:fa:46:9a:1a:b2:2b: 0b:a7:00:a1:50:cf:82:8b:8e:bb:86:8c:51:fe:80:bb:25:06: 7a:67:65:72:96:59:87:0d:fe:0b:c2:71:ad:a8:35:5c:65:1b: fe:ce:8c:3a:ba:0e:33:97:7c:4c:35:71:27:85:ac:12:58:63: d8:99:a5:57:bb:b2:38:e5:af:92:57:ae:02:80:0f:18:ec:3d: 96:a2:89:71:ae:c2:45:fe:a7:05:d9:7c:e2:8a:0b:64:aa:c2: f6:85:0e:c3:29:05:00:03:be:e7:e4:86:37:3e:4f:18:99:e0: 50:05:9f:9a:46:19:c0:e4:f3:87:d0:4e:04:24:fe:af:79:cc: 86:13:66:b2:f5:af:7d:9c:0b:7d:d2:04:e1:56:1c:c8:50:73: 26:e8:59:bb:fb:10:c8:39:f8:fa:ab:48:91:8c:3a:cc:7f:05: ab:4d:55:40:93:d8:c6:c4:56:83:82:58:e5:8a:a3:e9:20:ff: d6:02:59:98 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtjHkHVmP9yVW2qGSeXi8RwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIzMDc2NTIxNDRjOTEyN2RkNjI2Nzk2MDU2YzllYzI5MzJh NGYyMDUwHhcNMjUxMjI4MDQwMTI1WhcNMjUxMjI5MDQwMTI1WjAzMTEwLwYDVQQD Eyg2YmFkYTBkYWJkYzQyZWExMjkxZmNkZjE0YTk0OGEwMDg1ZDAxNmQzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv0vdYbKUcIVsFKlhRyM9QV9zVEDF K6bYp8SG5XgGZLZIJaXTM7Q+nS3jSosOVyWB3yVKsLcbnyz8P51hc6N46odPgr9T GTXrwZwL/k4C4h66S/fyUX0OROlWveE6SNChuP7Nzd7W3+ERxT+jPvLJMVUJ4gSS 7tPanJb0Q3A46qtizmLXHUP51HiL4mLat3jONgVzvHrmdUQt7jTBY9I9w4aeqy8g JQGRbOeAU0QOBjIj2UU5PD2CRMDaHKOWYbmR6SZH3pL5BKZO9j4zx3pEKmXPHmZ/ AxMd30uj39sJijDATAih3oFcMIpoqJXt52tkX1+llB3snhJpa3JSWwuAkQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGutoNq9xC6hKR/N8UqUigCF0BbTMB8GA1UdIwQY MBaAFCMHZSFEyRJ91iZ5YFbJ7CkypPIFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSXdkbElVVEpFbjNXSm5sZ1ZzbnNLVEtrOGdVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OC85OWQxNzctOGMwMy00OThmLWIyMDIt N2E3OGFlMDU0YjRjLzEvSXdkbElVVEpFbjNXSm5sZ1ZzbnNLVEtrOGdVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82OC85OWQxNzctOGMwMy00OThmLWIyMDItN2E3OGFlMDU0YjRj LzEvSXdkbElVVEpFbjNXSm5sZ1ZzbnNLVEtrOGdVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOX32nSch +ISIkD/JdeY/RLNM9Hrr0urWtwBGOx8snvk/vvHBz9Ym6fTUBwUP0WCD3nSbqh3N 2JKkulrizwu4JGyI+kaaGrIrC6cAoVDPgouOu4aMUf6AuyUGemdlcpZZhw3+C8Jx rag1XGUb/s6MOroOM5d8TDVxJ4WsElhj2JmlV7uyOOWvkleuAoAPGOw9lqKJca7C Rf6nBdl84ooLZKrC9oUOwykFAAO+5+SGNz5PGJngUAWfmkYZwOTzh9BOBCT+r3nM hhNmsvWvfZwLfdIE4VYcyFBzJuhZu/sQyDn4+qtIkYw6zH8Fq01VQJPYxsRWg4JY 5Yqj6SD/1gJZmA== -----END CERTIFICATE-----Generated at Sun Dec 28 08:09:08 2025 by rpki-client