This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/383b70-dbf3-4ff3-b153-3fe4f7cbadab/1/ifGFjNN_s4sqz6XLTvQ-PDCNPWE.mft File: ifGFjNN_s4sqz6XLTvQ-PDCNPWE.mft (raw, json) Hash identifier: E2uh6ptTBR8kqKQKil+n+cZqolu96SLFA+04/8VmJ3o= Subject key identifier: DE:7B:A0:0A:6C:9F:CA:6E:8C:FC:75:E8:AE:13:54:D8:42:00:59:7D Authority key identifier: 89:F1:85:8C:D3:7F:B3:8B:2A:CF:A5:CB:4E:F4:3E:3C:30:8D:3D:61 Certificate issuer: /CN=89f1858cd37fb38b2acfa5cb4ef43e3c308d3d61 Certificate serial: 019B3BD956E5B567678065A0C4C537B5A506 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ifGFjNN_s4sqz6XLTvQ-PDCNPWE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/383b70-dbf3-4ff3-b153-3fe4f7cbadab/1/ifGFjNN_s4sqz6XLTvQ-PDCNPWE.mft Manifest number: 1785 Signing time: Sat 20 Dec 2025 13:00:57 +0000 Manifest this update: Sat 20 Dec 2025 13:00:57 +0000 Manifest next update: Sun 21 Dec 2025 13:00:57 +0000 Files and hashes: 1: ifGFjNN_s4sqz6XLTvQ-PDCNPWE.crl (hash: QJtuK1n2NblRm43sZ2DFbSEs2VOCABu+BfrTuQbwiXU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/383b70-dbf3-4ff3-b153-3fe4f7cbadab/1/ifGFjNN_s4sqz6XLTvQ-PDCNPWE.crl rsync://rpki.ripe.net/repository/DEFAULT/ac/383b70-dbf3-4ff3-b153-3fe4f7cbadab/1/ifGFjNN_s4sqz6XLTvQ-PDCNPWE.mft rsync://rpki.ripe.net/repository/DEFAULT/ifGFjNN_s4sqz6XLTvQ-PDCNPWE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 13:00:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3b:d9:56:e5:b5:67:67:80:65:a0:c4:c5:37:b5:a5:06 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89f1858cd37fb38b2acfa5cb4ef43e3c308d3d61 Validity Not Before: Dec 20 13:00:57 2025 GMT Not After : Dec 21 13:00:57 2025 GMT Subject: CN=de7ba00a6c9fca6e8cfc75e8ae1354d84200597d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:22:a2:f3:94:6c:00:ec:18:80:39:4b:81:b1: e3:68:90:c4:45:b2:4d:7d:c8:e1:70:fc:50:5f:9e: cb:4e:71:2a:6c:92:fa:77:d9:02:45:fa:5c:f9:10: 29:bd:64:1a:28:58:dc:39:da:0f:22:98:c4:75:39: b9:7b:ba:33:2e:b4:48:3c:94:74:82:08:3c:e0:bb: 24:e4:1e:9c:bf:d7:fe:da:c5:16:8d:62:8e:53:a4: 00:4e:99:80:7a:19:22:0b:75:25:c5:0a:70:67:a6: 9b:28:f2:35:65:0a:b1:b7:ba:6c:c7:18:00:12:70: c6:4a:e6:a6:93:07:f7:d5:c0:cf:f0:ad:58:b4:02: b1:ef:f8:3c:ef:3e:fd:36:b0:8e:bf:df:f7:20:2a: 91:3c:4e:3d:ff:72:e2:0e:a5:fa:4a:2d:54:d2:91: d1:b9:ce:2b:fe:4f:f9:dd:f7:e5:35:b3:6b:97:44: 32:da:0d:29:c9:50:35:81:1d:c6:a7:e8:1f:a5:7f: ba:54:c8:02:30:93:dd:d0:e4:4a:c3:5d:08:94:ef: 6d:62:a2:ad:73:13:d9:be:a3:aa:4e:97:c8:b0:e2: 66:47:99:18:4d:61:c2:cb:27:fc:5c:d4:66:4b:0b: 1a:3a:22:d2:18:56:02:3b:34:6b:44:51:59:7d:93: 26:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:7B:A0:0A:6C:9F:CA:6E:8C:FC:75:E8:AE:13:54:D8:42:00:59:7D X509v3 Authority Key Identifier: keyid:89:F1:85:8C:D3:7F:B3:8B:2A:CF:A5:CB:4E:F4:3E:3C:30:8D:3D:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ifGFjNN_s4sqz6XLTvQ-PDCNPWE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/383b70-dbf3-4ff3-b153-3fe4f7cbadab/1/ifGFjNN_s4sqz6XLTvQ-PDCNPWE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/383b70-dbf3-4ff3-b153-3fe4f7cbadab/1/ifGFjNN_s4sqz6XLTvQ-PDCNPWE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 35:40:b1:93:7b:55:6e:85:20:d4:e7:81:e2:41:18:28:68:47: ec:b3:b1:29:f0:15:c1:dc:4f:89:38:7f:bd:f6:c0:59:32:2e: b4:fc:13:53:6a:7e:72:69:0a:53:4a:80:79:5d:f2:01:d7:a2: 4f:c0:d6:77:9d:f0:c1:1c:a7:f3:1f:ca:32:3f:c2:71:bf:2f: ee:f4:ff:b2:3e:6d:4e:24:91:6e:e5:b7:f0:7a:f6:20:a6:e2: 36:6e:1f:9c:25:40:c1:ad:92:5d:3b:ad:e8:8e:fc:69:67:2c: d7:a3:cb:8b:f4:e0:45:ac:84:e6:2f:c8:cd:7d:66:e8:7c:75: ce:1a:e5:1a:48:72:86:a4:27:69:f4:4b:5a:4a:5f:2a:1b:a4: 87:5c:e2:da:9e:bc:9f:7a:0a:f1:4e:11:3f:e1:6a:75:47:73: 4b:34:b6:20:d4:4b:9d:4d:2c:e7:02:1d:5b:44:3c:07:04:a5: e4:54:86:c0:5f:07:97:da:61:a8:bc:c1:ea:d7:51:85:14:c4: 81:ae:29:8b:0f:1b:56:f1:76:7e:81:5e:45:c3:34:95:45:ae: 41:ba:aa:c3:c7:e1:99:61:26:8e:c3:04:c9:4f:7f:c9:19:23: ed:f0:04:fa:62:27:37:c6:dc:37:ee:dd:ad:50:67:bf:49:02: e2:0a:5a:a7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs72VbltWdngGWgxMU3taUGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg5ZjE4NThjZDM3ZmIzOGIyYWNmYTVjYjRlZjQzZTNjMzA4 ZDNkNjEwHhcNMjUxMjIwMTMwMDU3WhcNMjUxMjIxMTMwMDU3WjAzMTEwLwYDVQQD EyhkZTdiYTAwYTZjOWZjYTZlOGNmYzc1ZThhZTEzNTRkODQyMDA1OTdkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwSKi85RsAOwYgDlLgbHjaJDERbJN fcjhcPxQX57LTnEqbJL6d9kCRfpc+RApvWQaKFjcOdoPIpjEdTm5e7ozLrRIPJR0 ggg84Lsk5B6cv9f+2sUWjWKOU6QATpmAehkiC3UlxQpwZ6abKPI1ZQqxt7psxxgA EnDGSuamkwf31cDP8K1YtAKx7/g87z79NrCOv9/3ICqRPE49/3LiDqX6Si1U0pHR uc4r/k/53fflNbNrl0Qy2g0pyVA1gR3Gp+gfpX+6VMgCMJPd0ORKw10IlO9tYqKt cxPZvqOqTpfIsOJmR5kYTWHCyyf8XNRmSwsaOiLSGFYCOzRrRFFZfZMmDQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFN57oApsn8pujPx16K4TVNhCAFl9MB8GA1UdIwQY MBaAFInxhYzTf7OLKs+ly070PjwwjT1hMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaWZHRmpOTl9zNHNxejZYTFR2US1QRENOUFdFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYy8zODNiNzAtZGJmMy00ZmYzLWIxNTMt M2ZlNGY3Y2JhZGFiLzEvaWZHRmpOTl9zNHNxejZYTFR2US1QRENOUFdFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYy8zODNiNzAtZGJmMy00ZmYzLWIxNTMtM2ZlNGY3Y2JhZGFi LzEvaWZHRmpOTl9zNHNxejZYTFR2US1QRENOUFdFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANUCxk3tV boUg1OeB4kEYKGhH7LOxKfAVwdxPiTh/vfbAWTIutPwTU2p+cmkKU0qAeV3yAdei T8DWd53wwRyn8x/KMj/Ccb8v7vT/sj5tTiSRbuW38Hr2IKbiNm4fnCVAwa2SXTut 6I78aWcs16PLi/TgRayE5i/IzX1m6Hx1zhrlGkhyhqQnafRLWkpfKhukh1zi2p68 n3oK8U4RP+FqdUdzSzS2INRLnU0s5wIdW0Q8BwSl5FSGwF8Hl9phqLzB6tdRhRTE ga4piw8bVvF2foFeRcM0lUWuQbqqw8fhmWEmjsMEyU9/yRkj7fAE+mInN8bcN+7d rVBnv0kC4gpapw== -----END CERTIFICATE-----Generated at Sat Dec 20 20:45:08 2025 by rpki-client