This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/4e5c10-71ed-4deb-b4e0-19d57ff1fbd9/1/20iBY9r1DbZG3k3yTTTLrJk_RX8.mft File: 20iBY9r1DbZG3k3yTTTLrJk_RX8.mft (raw, json) Hash identifier: d3QvKWQB5GyUa//eoxdxCU4Ar0DzDQmMn7ZMSwuo3OI= Subject key identifier: 1D:8E:19:4C:91:72:22:5F:C2:D6:5B:B4:05:0A:D5:72:92:9B:63:36 Authority key identifier: DB:48:81:63:DA:F5:0D:B6:46:DE:4D:F2:4D:34:CB:AC:99:3F:45:7F Certificate issuer: /CN=db488163daf50db646de4df24d34cbac993f457f Certificate serial: 019B2C6650A94B9BFEBB06FDD41D4BA7918F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/20iBY9r1DbZG3k3yTTTLrJk_RX8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/4e5c10-71ed-4deb-b4e0-19d57ff1fbd9/1/20iBY9r1DbZG3k3yTTTLrJk_RX8.mft Manifest number: 177E Signing time: Wed 17 Dec 2025 13:01:00 +0000 Manifest this update: Wed 17 Dec 2025 13:01:00 +0000 Manifest next update: Thu 18 Dec 2025 13:01:00 +0000 Files and hashes: 1: 20iBY9r1DbZG3k3yTTTLrJk_RX8.crl (hash: emOMXJMow4W36x/cBX5OYnryQSvty3N9/pyUvYlF6CQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/4e5c10-71ed-4deb-b4e0-19d57ff1fbd9/1/20iBY9r1DbZG3k3yTTTLrJk_RX8.crl rsync://rpki.ripe.net/repository/DEFAULT/b7/4e5c10-71ed-4deb-b4e0-19d57ff1fbd9/1/20iBY9r1DbZG3k3yTTTLrJk_RX8.mft rsync://rpki.ripe.net/repository/DEFAULT/20iBY9r1DbZG3k3yTTTLrJk_RX8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 10:00:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2c:66:50:a9:4b:9b:fe:bb:06:fd:d4:1d:4b:a7:91:8f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=db488163daf50db646de4df24d34cbac993f457f Validity Not Before: Dec 17 13:01:00 2025 GMT Not After : Dec 18 13:01:00 2025 GMT Subject: CN=1d8e194c9172225fc2d65bb4050ad572929b6336 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:a9:e0:9c:df:e4:30:0b:ef:2d:08:9d:76:d6: c8:25:ab:a2:73:f9:30:0e:24:ff:4b:0e:6c:79:a0: 65:22:89:ca:5c:53:2c:54:fa:47:21:b2:b4:58:bb: 7f:3e:3a:5b:69:0b:53:d4:10:17:a1:96:20:f6:ab: ec:5c:d1:37:eb:51:5b:33:8f:a5:ce:0d:6b:d9:eb: bc:c8:b1:39:55:cb:90:85:48:30:fa:ab:02:32:50: ed:e6:5d:6e:ea:9b:a0:bb:36:2a:a7:93:5f:da:c4: 23:2a:47:21:f7:69:a0:93:31:c8:f9:2e:60:76:9a: ed:af:03:87:27:80:f7:80:5b:35:15:ac:d5:87:74: 7b:e7:86:26:24:db:f0:87:42:d5:b7:91:0a:d9:70: 4b:f3:eb:4a:8f:62:89:f0:82:cf:48:ca:5b:e7:db: 81:6c:72:db:80:4b:c3:2e:8c:3f:8c:84:f6:3e:6f: 60:d9:20:ab:30:6a:f9:8a:c8:e7:4d:50:ba:e4:05: c1:3b:74:4e:e9:bf:a3:eb:31:d3:1a:ea:f7:d2:42: b6:c4:2f:94:fe:12:ea:e3:11:d5:0e:46:c3:5e:7c: f0:27:63:71:f9:6e:5f:a1:e9:77:93:ee:14:4d:a1: bd:f7:5f:87:1e:29:d2:1b:70:4e:1a:c4:4b:e8:4f: fd:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:8E:19:4C:91:72:22:5F:C2:D6:5B:B4:05:0A:D5:72:92:9B:63:36 X509v3 Authority Key Identifier: keyid:DB:48:81:63:DA:F5:0D:B6:46:DE:4D:F2:4D:34:CB:AC:99:3F:45:7F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/20iBY9r1DbZG3k3yTTTLrJk_RX8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/4e5c10-71ed-4deb-b4e0-19d57ff1fbd9/1/20iBY9r1DbZG3k3yTTTLrJk_RX8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/4e5c10-71ed-4deb-b4e0-19d57ff1fbd9/1/20iBY9r1DbZG3k3yTTTLrJk_RX8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 65:21:ff:6a:7c:df:71:62:20:3e:40:c7:c4:1d:b5:ab:eb:6a: 1a:02:7b:ed:29:74:cd:9d:07:8e:2f:4a:21:c3:8c:40:2f:79: 28:b3:19:d6:65:6f:80:33:30:66:62:7b:f7:99:4b:a0:f0:67: ef:7a:13:ca:f9:ac:3b:ef:41:81:22:63:a3:ea:de:fc:02:a1: b9:2c:c2:fd:10:de:77:22:0d:a9:d9:ff:fc:46:60:c6:43:62: 30:6a:da:5e:c3:af:57:de:6f:c3:91:d5:57:13:db:67:dd:89: 58:c8:2f:b5:42:0d:95:74:c8:aa:8d:25:79:ed:98:71:63:d9: 2f:c9:ad:71:87:46:80:90:9c:af:eb:f3:c7:45:56:7e:78:f2: fb:38:c5:e2:7e:be:d6:a7:a2:12:43:49:c6:57:17:10:00:b8: 88:14:ef:9c:86:68:24:2b:8d:5f:e7:b9:5a:3b:61:c6:7c:22: e4:a7:d5:2d:e8:19:3f:5c:35:d7:0f:42:fc:4d:7c:08:a4:dd: 06:93:ce:d6:ff:80:33:cc:59:f0:14:10:22:5c:1d:41:04:d0: 33:4d:77:c5:f6:13:93:6c:a3:11:fd:1b:21:90:64:3b:58:05: de:c5:5d:ac:3e:b0:75:b4:a3:2a:a5:42:06:7f:38:3a:51:2c: 71:22:6c:ef -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZssZlCpS5v+uwb91B1Lp5GPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRiNDg4MTYzZGFmNTBkYjY0NmRlNGRmMjRkMzRjYmFjOTkz ZjQ1N2YwHhcNMjUxMjE3MTMwMTAwWhcNMjUxMjE4MTMwMTAwWjAzMTEwLwYDVQQD EygxZDhlMTk0YzkxNzIyMjVmYzJkNjViYjQwNTBhZDU3MjkyOWI2MzM2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5qngnN/kMAvvLQiddtbIJauic/kw DiT/Sw5seaBlIonKXFMsVPpHIbK0WLt/PjpbaQtT1BAXoZYg9qvsXNE361FbM4+l zg1r2eu8yLE5VcuQhUgw+qsCMlDt5l1u6puguzYqp5Nf2sQjKkch92mgkzHI+S5g dprtrwOHJ4D3gFs1FazVh3R754YmJNvwh0LVt5EK2XBL8+tKj2KJ8ILPSMpb59uB bHLbgEvDLow/jIT2Pm9g2SCrMGr5isjnTVC65AXBO3RO6b+j6zHTGur30kK2xC+U /hLq4xHVDkbDXnzwJ2Nx+W5foel3k+4UTaG991+HHinSG3BOGsRL6E/9GwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFB2OGUyRciJfwtZbtAUK1XKSm2M2MB8GA1UdIwQY MBaAFNtIgWPa9Q22Rt5N8k00y6yZP0V/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMjBpQlk5cjFEYlpHM2szeVRUVExySmtfUlg4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNy80ZTVjMTAtNzFlZC00ZGViLWI0ZTAt MTlkNTdmZjFmYmQ5LzEvMjBpQlk5cjFEYlpHM2szeVRUVExySmtfUlg4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNy80ZTVjMTAtNzFlZC00ZGViLWI0ZTAtMTlkNTdmZjFmYmQ5 LzEvMjBpQlk5cjFEYlpHM2szeVRUVExySmtfUlg4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZSH/anzf cWIgPkDHxB21q+tqGgJ77Sl0zZ0Hji9KIcOMQC95KLMZ1mVvgDMwZmJ795lLoPBn 73oTyvmsO+9BgSJjo+re/AKhuSzC/RDedyINqdn//EZgxkNiMGraXsOvV95vw5HV VxPbZ92JWMgvtUINlXTIqo0lee2YcWPZL8mtcYdGgJCcr+vzx0VWfnjy+zjF4n6+ 1qeiEkNJxlcXEAC4iBTvnIZoJCuNX+e5Wjthxnwi5KfVLegZP1w11w9C/E18CKTd BpPO1v+AM8xZ8BQQIlwdQQTQM013xfYTk2yjEf0bIZBkO1gF3sVdrD6wdbSjKqVC Bn84OlEscSJs7w== -----END CERTIFICATE-----Generated at Wed Dec 17 18:13:13 2025 by rpki-client