This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/7895f8-ac31-4798-8404-4e278dd48a3f/1/iTbfSsL0Z-pmwRl6hinT9ku1Y_A.mft File: iTbfSsL0Z-pmwRl6hinT9ku1Y_A.mft (raw, json) Hash identifier: vqCUT7lhkObA+F6TEzFUKRRUyAKV948vODikaBv9stM= Subject key identifier: 65:E8:82:55:5D:AD:E3:2E:A9:58:F1:8F:08:68:B8:B2:39:3A:54:8E Authority key identifier: 89:36:DF:4A:C2:F4:67:EA:66:C1:19:7A:86:29:D3:F6:4B:B5:63:F0 Certificate issuer: /CN=8936df4ac2f467ea66c1197a8629d3f64bb563f0 Certificate serial: 019B481412603DE6D812E1231F5854B720B9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iTbfSsL0Z-pmwRl6hinT9ku1Y_A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/7895f8-ac31-4798-8404-4e278dd48a3f/1/iTbfSsL0Z-pmwRl6hinT9ku1Y_A.mft Manifest number: 13D3 Signing time: Mon 22 Dec 2025 22:00:33 +0000 Manifest this update: Mon 22 Dec 2025 22:00:33 +0000 Manifest next update: Tue 23 Dec 2025 22:00:33 +0000 Files and hashes: 1: iTbfSsL0Z-pmwRl6hinT9ku1Y_A.crl (hash: Jkk07kzZ4UfnyYKTShdZadDGLQKcFTD7wJ7Aoxvt5FM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/7895f8-ac31-4798-8404-4e278dd48a3f/1/iTbfSsL0Z-pmwRl6hinT9ku1Y_A.crl rsync://rpki.ripe.net/repository/DEFAULT/bb/7895f8-ac31-4798-8404-4e278dd48a3f/1/iTbfSsL0Z-pmwRl6hinT9ku1Y_A.mft rsync://rpki.ripe.net/repository/DEFAULT/iTbfSsL0Z-pmwRl6hinT9ku1Y_A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 22:00:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:48:14:12:60:3d:e6:d8:12:e1:23:1f:58:54:b7:20:b9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8936df4ac2f467ea66c1197a8629d3f64bb563f0 Validity Not Before: Dec 22 22:00:33 2025 GMT Not After : Dec 23 22:00:33 2025 GMT Subject: CN=65e882555dade32ea958f18f0868b8b2393a548e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:8c:77:03:4e:92:bd:f1:15:72:27:a8:2c:7f: d8:49:83:c4:77:ad:76:d6:09:89:ff:ca:08:38:0e: 46:8f:60:7e:57:ac:57:fc:e3:f7:7e:14:85:74:c2: 09:ed:0d:a3:0b:f2:c9:a7:27:b0:2f:60:c2:af:8a: 80:38:b3:33:ed:23:70:fc:a5:86:00:bf:0a:5c:fa: e6:6b:b7:d3:c1:43:4a:7d:6f:4a:04:cc:77:b8:8d: 0c:fb:2e:43:86:18:e0:51:67:88:78:00:cb:8a:54: a3:0d:4e:60:a8:46:9a:77:bf:9e:e9:19:da:73:78: 48:07:34:a2:72:03:f8:e3:68:e1:64:49:03:4a:89: 24:db:a2:f1:df:18:e0:51:04:cd:9e:9b:a9:3e:8c: 22:2a:15:a7:68:2e:fb:77:eb:06:a7:12:36:02:34: 09:68:fb:4b:0b:89:27:c3:0e:18:d3:e8:e7:13:c9: d3:0b:de:f1:df:fc:c5:b9:f6:2c:18:a1:9c:06:55: a9:68:91:51:68:ca:8e:08:d4:68:fc:2a:33:90:a7: 00:a2:21:f0:0e:01:97:38:2e:2c:da:4d:ce:2c:21: 8b:8c:25:e3:7a:43:27:91:ee:24:07:ac:0e:4e:07: b2:d8:56:58:fb:a1:2e:3c:33:cb:a1:df:39:f9:7d: 50:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:E8:82:55:5D:AD:E3:2E:A9:58:F1:8F:08:68:B8:B2:39:3A:54:8E X509v3 Authority Key Identifier: keyid:89:36:DF:4A:C2:F4:67:EA:66:C1:19:7A:86:29:D3:F6:4B:B5:63:F0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iTbfSsL0Z-pmwRl6hinT9ku1Y_A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/7895f8-ac31-4798-8404-4e278dd48a3f/1/iTbfSsL0Z-pmwRl6hinT9ku1Y_A.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/7895f8-ac31-4798-8404-4e278dd48a3f/1/iTbfSsL0Z-pmwRl6hinT9ku1Y_A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7f:51:39:7b:02:23:36:db:8c:0f:63:94:68:20:74:27:a1:e0: 3f:7f:1c:d2:58:f0:39:2a:b4:1a:6b:65:92:ea:ba:21:16:9e: ab:0d:ae:5a:7f:0a:95:8f:22:5a:ab:15:37:84:70:b8:99:16: d4:64:0d:fb:70:1a:e5:60:c7:fb:b5:df:28:c5:53:42:3b:db: f6:02:8c:0e:72:a9:5f:3c:2f:db:c2:6f:22:81:15:85:9c:fc: 4b:2e:4b:ff:1d:3a:ab:64:df:64:78:a5:a6:05:9c:26:dc:c6: 45:9b:ad:25:b2:d7:f3:2b:4e:c0:e9:02:fa:22:0a:32:4d:ca: 59:5b:a5:a3:0b:9a:c5:39:8b:a8:51:ef:27:39:7a:15:c0:95: ef:1a:73:f9:f8:b3:32:f7:e2:5e:50:21:6d:31:ab:d6:32:8d: 4b:2a:ee:45:aa:73:e4:f6:ab:d4:3b:71:64:c9:d2:47:64:99: ce:49:b2:67:ea:ff:c8:ee:aa:bb:1b:88:06:97:a7:49:ff:7f: 4b:be:85:32:fc:be:e4:47:40:a4:20:d9:af:6d:11:1a:c4:af: e6:77:6f:e5:79:ad:fa:99:d8:1e:b6:11:75:99:85:ac:9f:05: c9:e9:35:7a:0d:75:bc:76:93:57:6d:8b:46:4c:f3:a9:f7:2f: 0a:b0:f6:c9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtIFBJgPebYEuEjH1hUtyC5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg5MzZkZjRhYzJmNDY3ZWE2NmMxMTk3YTg2MjlkM2Y2NGJi NTYzZjAwHhcNMjUxMjIyMjIwMDMzWhcNMjUxMjIzMjIwMDMzWjAzMTEwLwYDVQQD Eyg2NWU4ODI1NTVkYWRlMzJlYTk1OGYxOGYwODY4YjhiMjM5M2E1NDhlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1Ix3A06SvfEVcieoLH/YSYPEd612 1gmJ/8oIOA5Gj2B+V6xX/OP3fhSFdMIJ7Q2jC/LJpyewL2DCr4qAOLMz7SNw/KWG AL8KXPrma7fTwUNKfW9KBMx3uI0M+y5DhhjgUWeIeADLilSjDU5gqEaad7+e6Rna c3hIBzSicgP442jhZEkDSokk26Lx3xjgUQTNnpupPowiKhWnaC77d+sGpxI2AjQJ aPtLC4knww4Y0+jnE8nTC97x3/zFufYsGKGcBlWpaJFRaMqOCNRo/CozkKcAoiHw DgGXOC4s2k3OLCGLjCXjekMnke4kB6wOTgey2FZY+6EuPDPLod85+X1QZQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGXoglVdreMuqVjxjwhouLI5OlSOMB8GA1UdIwQY MBaAFIk230rC9GfqZsEZeoYp0/ZLtWPwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaVRiZlNzTDBaLXBtd1JsNmhpblQ5a3UxWV9BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYi83ODk1ZjgtYWMzMS00Nzk4LTg0MDQt NGUyNzhkZDQ4YTNmLzEvaVRiZlNzTDBaLXBtd1JsNmhpblQ5a3UxWV9BLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYi83ODk1ZjgtYWMzMS00Nzk4LTg0MDQtNGUyNzhkZDQ4YTNm LzEvaVRiZlNzTDBaLXBtd1JsNmhpblQ5a3UxWV9BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAf1E5ewIj NtuMD2OUaCB0J6HgP38c0ljwOSq0Gmtlkuq6IRaeqw2uWn8KlY8iWqsVN4RwuJkW 1GQN+3Aa5WDH+7XfKMVTQjvb9gKMDnKpXzwv28JvIoEVhZz8Sy5L/x06q2TfZHil pgWcJtzGRZutJbLX8ytOwOkC+iIKMk3KWVulowuaxTmLqFHvJzl6FcCV7xpz+fiz MvfiXlAhbTGr1jKNSyruRapz5Par1DtxZMnSR2SZzkmyZ+r/yO6quxuIBpenSf9/ S76FMvy+5EdApCDZr20RGsSv5ndv5Xmt+pnYHrYRdZmFrJ8Fyek1eg11vHaTV22L RkzzqfcvCrD2yQ== -----END CERTIFICATE-----Generated at Tue Dec 23 05:34:05 2025 by rpki-client