This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/490c50-6c07-4646-9bd2-8cf115aa2cc3/1/IfwUL311pxS5rMZT0LXO0zfKRJU.mft File: IfwUL311pxS5rMZT0LXO0zfKRJU.mft (raw, json) Hash identifier: kFhYphT+v5qbN5TOMD4UTOCyJ2nBZz/QjZ2X5xrFadk= Subject key identifier: 1A:EF:F7:14:59:A3:B4:78:CD:D0:25:28:E1:87:62:A0:81:AB:04:BC Authority key identifier: 21:FC:14:2F:7D:75:A7:14:B9:AC:C6:53:D0:B5:CE:D3:37:CA:44:95 Certificate issuer: /CN=21fc142f7d75a714b9acc653d0b5ced337ca4495 Certificate serial: 019B5072FDEF9FFEBEC4381ABC358A30B5AF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IfwUL311pxS5rMZT0LXO0zfKRJU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/490c50-6c07-4646-9bd2-8cf115aa2cc3/1/IfwUL311pxS5rMZT0LXO0zfKRJU.mft Manifest number: 1790 Signing time: Wed 24 Dec 2025 13:01:11 +0000 Manifest this update: Wed 24 Dec 2025 13:01:11 +0000 Manifest next update: Thu 25 Dec 2025 13:01:11 +0000 Files and hashes: 1: IfwUL311pxS5rMZT0LXO0zfKRJU.crl (hash: BYk6kLNJrifdUSKpgA+G9IL6WDBbqgbJpFPZssOoOFQ=) 2: UipKreH4zZ-JKObDVFkMEdQTy8E.roa (hash: 2lFb7AbIOkpByp+mzj8V6olwzUC3cjME2INFe+siQFg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/490c50-6c07-4646-9bd2-8cf115aa2cc3/1/IfwUL311pxS5rMZT0LXO0zfKRJU.crl rsync://rpki.ripe.net/repository/DEFAULT/a0/490c50-6c07-4646-9bd2-8cf115aa2cc3/1/IfwUL311pxS5rMZT0LXO0zfKRJU.mft rsync://rpki.ripe.net/repository/DEFAULT/IfwUL311pxS5rMZT0LXO0zfKRJU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 13:01:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:50:72:fd:ef:9f:fe:be:c4:38:1a:bc:35:8a:30:b5:af Signature Algorithm: sha256WithRSAEncryption Issuer: CN=21fc142f7d75a714b9acc653d0b5ced337ca4495 Validity Not Before: Dec 24 13:01:11 2025 GMT Not After : Dec 25 13:01:11 2025 GMT Subject: CN=1aeff71459a3b478cdd02528e18762a081ab04bc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:e4:ac:a7:0e:c7:03:80:b7:04:34:3a:3a:ce: ec:2a:08:e0:c2:d8:13:8e:36:df:fe:da:9f:33:82: 2e:2f:92:59:cf:b8:f8:51:2c:40:3e:87:2f:6f:53: 1e:74:a6:d7:fe:34:b9:fc:98:84:d5:a7:ab:cd:5d: 8e:cb:9b:34:cc:9f:db:ef:7d:8b:d1:85:16:6c:1b: fa:d5:a9:5a:5a:dc:4d:0c:00:d5:7d:8d:d7:28:ca: a4:c5:0c:fa:a1:b8:2b:70:54:66:b5:b3:1b:69:38: 2c:9b:49:f6:61:72:c5:32:4a:e7:97:f5:37:3d:91: 95:9f:e5:83:35:f6:41:87:2f:89:83:3e:42:3f:48: bc:31:c5:b2:4b:50:33:48:ee:36:24:4c:98:09:4b: 36:82:f8:f3:0b:32:d2:7e:bd:6c:1e:22:14:39:20: 25:68:2c:d6:cd:94:a5:29:a2:68:77:07:4d:37:1d: f0:77:57:68:14:73:57:3c:06:d2:ca:09:53:98:d6: 96:1f:ab:df:bd:6f:1d:cf:d1:1f:47:a8:5a:19:cc: 84:f5:e0:f9:50:b1:ea:56:30:10:87:bf:23:e9:72: d1:2c:95:fc:10:ff:b4:57:bc:9b:62:7f:a8:ec:08: d8:4d:ec:ea:b5:dc:e1:02:a8:f9:30:70:1c:98:31: 33:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:EF:F7:14:59:A3:B4:78:CD:D0:25:28:E1:87:62:A0:81:AB:04:BC X509v3 Authority Key Identifier: keyid:21:FC:14:2F:7D:75:A7:14:B9:AC:C6:53:D0:B5:CE:D3:37:CA:44:95 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IfwUL311pxS5rMZT0LXO0zfKRJU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/490c50-6c07-4646-9bd2-8cf115aa2cc3/1/IfwUL311pxS5rMZT0LXO0zfKRJU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/490c50-6c07-4646-9bd2-8cf115aa2cc3/1/IfwUL311pxS5rMZT0LXO0zfKRJU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6b:fc:c1:d8:e3:4f:18:bd:1c:6f:5c:56:59:db:95:14:a7:4f: 4f:3f:ac:e3:75:78:78:ed:5e:28:c6:d9:5f:97:c2:95:9f:19: 73:54:07:ab:63:5e:7d:cf:2f:c0:08:48:f7:b9:5d:79:4e:72: a8:19:ec:00:4c:6b:4f:cd:f2:0a:13:a4:64:01:c4:00:a0:c7: 91:b8:6a:b0:c7:51:f9:11:13:9c:64:4c:90:2d:1e:6f:8b:cc: 15:1c:fd:07:96:13:c0:d9:52:b4:0e:2c:1a:0b:d3:2c:ab:bd: 59:16:db:05:82:56:ac:55:30:10:5d:43:71:fc:fc:29:40:09: cf:1a:75:4d:da:07:7f:23:7d:11:0b:a3:aa:ba:05:e1:3b:a1: 91:e1:29:63:7c:92:58:2d:e9:82:fc:c2:f9:c6:b8:41:36:e5: 0f:cf:3a:3f:03:0e:36:9d:e0:cf:7e:a1:6a:f2:b1:c6:7c:17: be:2d:f7:bb:fa:ec:4f:10:e5:af:b3:47:76:40:cb:46:eb:f8: 23:24:7e:3d:6e:38:fb:ef:fc:c2:cd:c8:47:1d:04:58:34:39: 7e:71:4a:42:6a:f9:bd:77:aa:58:b4:d8:6f:9d:5b:24:48:2f: 44:72:d2:58:41:6a:49:e9:d2:dc:34:b0:56:58:ac:35:47:4a: c1:92:a7:07 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtQcv3vn/6+xDgavDWKMLWvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIxZmMxNDJmN2Q3NWE3MTRiOWFjYzY1M2QwYjVjZWQzMzdj YTQ0OTUwHhcNMjUxMjI0MTMwMTExWhcNMjUxMjI1MTMwMTExWjAzMTEwLwYDVQQD EygxYWVmZjcxNDU5YTNiNDc4Y2RkMDI1MjhlMTg3NjJhMDgxYWIwNGJjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAluSspw7HA4C3BDQ6Os7sKgjgwtgT jjbf/tqfM4IuL5JZz7j4USxAPocvb1MedKbX/jS5/JiE1aerzV2Oy5s0zJ/b732L 0YUWbBv61alaWtxNDADVfY3XKMqkxQz6obgrcFRmtbMbaTgsm0n2YXLFMkrnl/U3 PZGVn+WDNfZBhy+Jgz5CP0i8McWyS1AzSO42JEyYCUs2gvjzCzLSfr1sHiIUOSAl aCzWzZSlKaJodwdNNx3wd1doFHNXPAbSyglTmNaWH6vfvW8dz9EfR6haGcyE9eD5 ULHqVjAQh78j6XLRLJX8EP+0V7ybYn+o7AjYTezqtdzhAqj5MHAcmDEzfwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBrv9xRZo7R4zdAlKOGHYqCBqwS8MB8GA1UdIwQY MBaAFCH8FC99dacUuazGU9C1ztM3ykSVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSWZ3VUwzMTFweFM1ck1aVDBMWE8wemZLUkpVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMC80OTBjNTAtNmMwNy00NjQ2LTliZDIt OGNmMTE1YWEyY2MzLzEvSWZ3VUwzMTFweFM1ck1aVDBMWE8wemZLUkpVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMC80OTBjNTAtNmMwNy00NjQ2LTliZDItOGNmMTE1YWEyY2Mz LzEvSWZ3VUwzMTFweFM1ck1aVDBMWE8wemZLUkpVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAa/zB2ONP GL0cb1xWWduVFKdPTz+s43V4eO1eKMbZX5fClZ8Zc1QHq2Nefc8vwAhI97ldeU5y qBnsAExrT83yChOkZAHEAKDHkbhqsMdR+RETnGRMkC0eb4vMFRz9B5YTwNlStA4s GgvTLKu9WRbbBYJWrFUwEF1Dcfz8KUAJzxp1TdoHfyN9EQujqroF4TuhkeEpY3yS WC3pgvzC+ca4QTblD886PwMONp3gz36havKxxnwXvi33u/rsTxDlr7NHdkDLRuv4 IyR+PW44++/8ws3IRx0EWDQ5fnFKQmr5vXeqWLTYb51bJEgvRHLSWEFqSenS3DSw VlisNUdKwZKnBw== -----END CERTIFICATE-----Generated at Wed Dec 24 22:06:25 2025 by rpki-client