This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/4e5c10-71ed-4deb-b4e0-19d57ff1fbd9/1/20iBY9r1DbZG3k3yTTTLrJk_RX8.mft File: 20iBY9r1DbZG3k3yTTTLrJk_RX8.mft (raw, json) Hash identifier: tM+xrTvjo6Z4BKGkHrgz+cwb1hCawsnjd7yDO3jB/MM= Subject key identifier: 77:F6:2B:7B:B8:8F:5B:B9:74:DB:56:F8:3C:56:7F:99:07:9D:6D:E9 Authority key identifier: DB:48:81:63:DA:F5:0D:B6:46:DE:4D:F2:4D:34:CB:AC:99:3F:45:7F Certificate issuer: /CN=db488163daf50db646de4df24d34cbac993f457f Certificate serial: 019B2E54F1C09F5CA87638C1619B8E050E79 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/20iBY9r1DbZG3k3yTTTLrJk_RX8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/4e5c10-71ed-4deb-b4e0-19d57ff1fbd9/1/20iBY9r1DbZG3k3yTTTLrJk_RX8.mft Manifest number: 177F Signing time: Wed 17 Dec 2025 22:01:17 +0000 Manifest this update: Wed 17 Dec 2025 22:01:17 +0000 Manifest next update: Thu 18 Dec 2025 22:01:17 +0000 Files and hashes: 1: 20iBY9r1DbZG3k3yTTTLrJk_RX8.crl (hash: 2mRXsqjBCykh+L2t3pwbMxhS2Co4WL3knSip0WD7HsY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/4e5c10-71ed-4deb-b4e0-19d57ff1fbd9/1/20iBY9r1DbZG3k3yTTTLrJk_RX8.crl rsync://rpki.ripe.net/repository/DEFAULT/b7/4e5c10-71ed-4deb-b4e0-19d57ff1fbd9/1/20iBY9r1DbZG3k3yTTTLrJk_RX8.mft rsync://rpki.ripe.net/repository/DEFAULT/20iBY9r1DbZG3k3yTTTLrJk_RX8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 22:01:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2e:54:f1:c0:9f:5c:a8:76:38:c1:61:9b:8e:05:0e:79 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=db488163daf50db646de4df24d34cbac993f457f Validity Not Before: Dec 17 22:01:17 2025 GMT Not After : Dec 18 22:01:17 2025 GMT Subject: CN=77f62b7bb88f5bb974db56f83c567f99079d6de9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:8f:10:ef:3d:58:37:ab:bc:65:d5:a5:86:a0: e0:ca:6d:84:d5:74:23:74:c9:ba:48:85:1a:3f:0a: 19:29:43:7c:28:c8:65:06:58:c8:b7:d4:96:28:6d: a7:e4:b2:af:7a:d5:69:08:97:59:09:a8:50:13:80: c4:f1:32:05:67:d3:a0:77:5d:4d:d1:5d:fb:15:b6: 80:2c:62:5e:bb:86:80:69:e5:73:12:4e:56:b5:a7: f5:ba:d5:0b:40:35:39:34:9d:24:0d:25:d1:60:46: 6a:bf:ef:b2:64:03:84:86:92:f9:13:1c:c2:51:e1: 78:9c:1b:14:09:63:bb:6a:94:42:60:60:eb:e9:63: 89:a3:dd:11:92:79:d1:9a:c9:2e:d4:34:28:9b:0d: 0e:9f:5a:e3:58:94:99:f4:96:16:28:e0:bb:b4:bb: 8b:cf:96:94:4b:a2:0b:b5:7f:c6:53:2b:fe:97:6f: e4:9c:6f:e5:f2:78:c6:92:25:3c:92:e2:91:06:cf: 8f:c0:0d:4a:02:4d:a4:fe:88:af:90:21:d2:4c:47: 5a:1b:4d:7a:bc:0f:d4:15:76:ad:d9:fd:fd:f7:22: 98:bf:13:27:f8:16:29:d1:33:9b:23:b7:01:82:45: 47:1f:59:ba:ab:e7:4c:41:5d:00:e1:a0:0a:6d:7a: ab:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:F6:2B:7B:B8:8F:5B:B9:74:DB:56:F8:3C:56:7F:99:07:9D:6D:E9 X509v3 Authority Key Identifier: keyid:DB:48:81:63:DA:F5:0D:B6:46:DE:4D:F2:4D:34:CB:AC:99:3F:45:7F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/20iBY9r1DbZG3k3yTTTLrJk_RX8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/4e5c10-71ed-4deb-b4e0-19d57ff1fbd9/1/20iBY9r1DbZG3k3yTTTLrJk_RX8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/4e5c10-71ed-4deb-b4e0-19d57ff1fbd9/1/20iBY9r1DbZG3k3yTTTLrJk_RX8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 85:b7:c8:ec:af:a1:5b:1d:8e:1d:a1:d9:d6:0f:13:46:76:f6: 6f:18:b6:60:a3:14:8a:67:93:f5:64:17:3c:70:0c:35:46:24: 00:40:fd:1f:8a:8c:71:91:07:04:26:71:f5:59:cd:e6:f6:93: 32:40:f4:71:f2:89:e0:0d:13:72:08:3f:ac:b7:fc:06:1b:6e: 8e:8a:40:90:41:00:18:e8:9c:a0:10:e3:55:aa:84:74:3f:62: 6c:bd:c3:db:a1:a5:04:65:22:0f:87:a6:7c:a5:6d:25:6c:7a: 27:28:4a:fa:c1:7d:97:3e:dd:69:b6:c3:67:ea:ac:c3:9f:9d: 2f:d7:aa:74:9e:48:71:67:c1:56:d5:d9:36:76:e2:85:42:e1: 78:af:ba:de:24:58:4a:2a:9e:c3:e1:32:fc:f5:6f:73:93:ed: 90:4b:59:2d:5d:2f:1b:d5:9a:d2:ac:3b:3b:fc:d7:fd:ca:f9: db:60:1a:f3:db:18:ac:eb:b3:bb:93:2a:e6:f5:52:75:4b:0f: 4d:8f:1a:8e:ad:1a:ca:3f:be:6e:84:dd:df:3c:c2:1d:54:af: ba:07:e7:58:eb:91:90:3f:72:16:41:62:44:fb:72:d3:16:f1: b8:63:b2:51:f4:51:63:2b:09:c8:8b:19:29:a3:dd:94:10:07: fa:d1:e5:ed -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsuVPHAn1yodjjBYZuOBQ55MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRiNDg4MTYzZGFmNTBkYjY0NmRlNGRmMjRkMzRjYmFjOTkz ZjQ1N2YwHhcNMjUxMjE3MjIwMTE3WhcNMjUxMjE4MjIwMTE3WjAzMTEwLwYDVQQD Eyg3N2Y2MmI3YmI4OGY1YmI5NzRkYjU2ZjgzYzU2N2Y5OTA3OWQ2ZGU5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0I8Q7z1YN6u8ZdWlhqDgym2E1XQj dMm6SIUaPwoZKUN8KMhlBljIt9SWKG2n5LKvetVpCJdZCahQE4DE8TIFZ9Ogd11N 0V37FbaALGJeu4aAaeVzEk5Wtaf1utULQDU5NJ0kDSXRYEZqv++yZAOEhpL5ExzC UeF4nBsUCWO7apRCYGDr6WOJo90RknnRmsku1DQomw0On1rjWJSZ9JYWKOC7tLuL z5aUS6ILtX/GUyv+l2/knG/l8njGkiU8kuKRBs+PwA1KAk2k/oivkCHSTEdaG016 vA/UFXat2f399yKYvxMn+BYp0TObI7cBgkVHH1m6q+dMQV0A4aAKbXqrMQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHf2K3u4j1u5dNtW+DxWf5kHnW3pMB8GA1UdIwQY MBaAFNtIgWPa9Q22Rt5N8k00y6yZP0V/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMjBpQlk5cjFEYlpHM2szeVRUVExySmtfUlg4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNy80ZTVjMTAtNzFlZC00ZGViLWI0ZTAt MTlkNTdmZjFmYmQ5LzEvMjBpQlk5cjFEYlpHM2szeVRUVExySmtfUlg4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNy80ZTVjMTAtNzFlZC00ZGViLWI0ZTAtMTlkNTdmZjFmYmQ5 LzEvMjBpQlk5cjFEYlpHM2szeVRUVExySmtfUlg4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhbfI7K+h Wx2OHaHZ1g8TRnb2bxi2YKMUimeT9WQXPHAMNUYkAED9H4qMcZEHBCZx9VnN5vaT MkD0cfKJ4A0Tcgg/rLf8BhtujopAkEEAGOicoBDjVaqEdD9ibL3D26GlBGUiD4em fKVtJWx6JyhK+sF9lz7dabbDZ+qsw5+dL9eqdJ5IcWfBVtXZNnbihULheK+63iRY Siqew+Ey/PVvc5PtkEtZLV0vG9Wa0qw7O/zX/cr522Aa89sYrOuzu5Mq5vVSdUsP TY8ajq0ayj++boTd3zzCHVSvugfnWOuRkD9yFkFiRPty0xbxuGOyUfRRYysJyIsZ KaPdlBAH+tHl7Q== -----END CERTIFICATE-----Generated at Thu Dec 18 06:52:38 2025 by rpki-client