This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/fd22ad-f792-475c-8bae-26024e2a5f3e/1/ije4wOFZfNHaZcmgf6wFrNhEzGo.mft File: ije4wOFZfNHaZcmgf6wFrNhEzGo.mft (raw, json) Hash identifier: VZCvYVwiUibyIAdA3geT95/uw/MUxy7A9F7RMWQDDHg= Subject key identifier: A4:A6:1D:29:A8:6C:37:57:8A:D6:2C:20:9E:EA:17:A7:01:C5:0B:30 Authority key identifier: 8A:37:B8:C0:E1:59:7C:D1:DA:65:C9:A0:7F:AC:05:AC:D8:44:CC:6A Certificate issuer: /CN=8a37b8c0e1597cd1da65c9a07fac05acd844cc6a Certificate serial: 019B5D5432AEE47EC3CCDA32358AF418AAFA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ije4wOFZfNHaZcmgf6wFrNhEzGo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/fd22ad-f792-475c-8bae-26024e2a5f3e/1/ije4wOFZfNHaZcmgf6wFrNhEzGo.mft Manifest number: 1285 Signing time: Sat 27 Dec 2025 01:02:37 +0000 Manifest this update: Sat 27 Dec 2025 01:02:37 +0000 Manifest next update: Sun 28 Dec 2025 01:02:37 +0000 Files and hashes: 1: ije4wOFZfNHaZcmgf6wFrNhEzGo.crl (hash: OiCoUrwhVnjSyQ8iM4G37LGCdk2Tqg/XZ2y+2wr1X0Y=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/fd22ad-f792-475c-8bae-26024e2a5f3e/1/ije4wOFZfNHaZcmgf6wFrNhEzGo.crl rsync://rpki.ripe.net/repository/DEFAULT/bb/fd22ad-f792-475c-8bae-26024e2a5f3e/1/ije4wOFZfNHaZcmgf6wFrNhEzGo.mft rsync://rpki.ripe.net/repository/DEFAULT/ije4wOFZfNHaZcmgf6wFrNhEzGo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 28 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5d:54:32:ae:e4:7e:c3:cc:da:32:35:8a:f4:18:aa:fa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8a37b8c0e1597cd1da65c9a07fac05acd844cc6a Validity Not Before: Dec 27 01:02:37 2025 GMT Not After : Dec 28 01:02:37 2025 GMT Subject: CN=a4a61d29a86c37578ad62c209eea17a701c50b30 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:cc:e5:8a:db:d7:9b:0a:60:ff:88:fc:24:c3: da:33:3f:ee:07:4b:d4:a5:c7:e1:e3:3b:51:f6:51: e1:34:db:63:a5:8a:cf:e7:63:5f:42:27:12:f4:2f: fa:eb:79:e9:5e:50:0c:01:84:f3:41:25:53:c5:8e: 63:0b:d2:f4:da:90:82:6e:3f:bd:94:53:05:c7:2d: 6f:2b:85:ab:91:66:18:26:11:5b:b2:73:3e:42:43: 3d:da:c5:c9:60:ce:8c:7d:90:00:4d:62:65:a2:58: f9:70:0d:8c:30:de:f4:91:ae:e4:9b:6d:02:99:2f: c9:48:a2:8a:fd:6f:9b:b7:a1:fa:02:6d:45:3e:44: 64:65:30:bc:60:4c:a2:71:fc:c3:7b:d5:ae:bd:2d: 51:61:0e:f3:02:64:e8:58:e7:6a:be:d4:bc:fd:e1: 5a:b1:be:8b:c6:ca:a1:6c:01:2c:c7:2a:3d:9b:b5: a1:b7:f6:4b:b6:4e:76:60:67:2c:57:b5:c5:1d:59: 4d:56:97:69:f1:74:66:c4:2d:5e:d8:45:83:79:d1: 9a:12:e6:92:8d:54:ad:74:1a:5a:52:99:1f:ae:3a: f4:c1:65:32:65:3d:21:57:7a:84:47:95:2c:78:ac: 8c:6d:88:b4:7b:a0:55:f9:5c:77:9b:89:91:ec:7e: c2:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:A6:1D:29:A8:6C:37:57:8A:D6:2C:20:9E:EA:17:A7:01:C5:0B:30 X509v3 Authority Key Identifier: keyid:8A:37:B8:C0:E1:59:7C:D1:DA:65:C9:A0:7F:AC:05:AC:D8:44:CC:6A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ije4wOFZfNHaZcmgf6wFrNhEzGo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/fd22ad-f792-475c-8bae-26024e2a5f3e/1/ije4wOFZfNHaZcmgf6wFrNhEzGo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/fd22ad-f792-475c-8bae-26024e2a5f3e/1/ije4wOFZfNHaZcmgf6wFrNhEzGo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c8:6b:4e:b9:ee:9f:13:9b:dc:1f:70:ed:9e:96:83:5d:d1:7e: 69:a8:7d:fb:db:20:59:94:b9:8a:b1:94:31:f1:8d:d5:85:40: 4e:2c:d1:71:28:60:bb:5a:a8:06:86:06:0a:61:05:2f:67:b1: 39:01:4f:c1:c7:94:9c:89:52:83:fa:a9:b8:12:1f:c5:6d:6e: 9a:dc:3b:4d:16:09:7c:01:36:f9:16:3e:33:2a:07:54:ea:98: 2c:f3:07:09:2c:2d:b5:8c:52:cc:d4:55:02:43:0d:58:80:52: 6d:0c:e2:c4:2d:79:34:1f:99:d5:32:b1:bd:58:de:3f:f8:10: b8:ae:3e:c4:8f:43:be:f9:10:2b:24:cf:19:39:53:5a:ff:18: e9:07:66:3a:79:85:73:b2:87:53:f7:e4:86:aa:b0:32:f4:34: 8f:f7:25:fc:85:15:25:a5:35:af:34:10:af:10:25:40:7d:e2: 22:99:f4:f5:b6:1a:47:0d:96:71:cd:06:17:dc:d0:55:ae:5e: e5:61:30:ed:6e:ca:ef:c0:81:b8:bf:e1:77:48:76:f0:1d:ec: ef:0c:13:d6:9a:ff:4b:a2:57:e1:16:73:f8:9e:cc:56:36:d8: cf:ac:7a:ae:b3:f0:72:2e:84:c9:1a:f9:e5:8c:54:bf:b4:5c: a4:e5:77:1d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtdVDKu5H7DzNoyNYr0GKr6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhhMzdiOGMwZTE1OTdjZDFkYTY1YzlhMDdmYWMwNWFjZDg0 NGNjNmEwHhcNMjUxMjI3MDEwMjM3WhcNMjUxMjI4MDEwMjM3WjAzMTEwLwYDVQQD EyhhNGE2MWQyOWE4NmMzNzU3OGFkNjJjMjA5ZWVhMTdhNzAxYzUwYjMwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7MzlitvXmwpg/4j8JMPaMz/uB0vU pcfh4ztR9lHhNNtjpYrP52NfQicS9C/663npXlAMAYTzQSVTxY5jC9L02pCCbj+9 lFMFxy1vK4WrkWYYJhFbsnM+QkM92sXJYM6MfZAATWJlolj5cA2MMN70ka7km20C mS/JSKKK/W+bt6H6Am1FPkRkZTC8YEyicfzDe9WuvS1RYQ7zAmToWOdqvtS8/eFa sb6LxsqhbAEsxyo9m7Wht/ZLtk52YGcsV7XFHVlNVpdp8XRmxC1e2EWDedGaEuaS jVStdBpaUpkfrjr0wWUyZT0hV3qER5UseKyMbYi0e6BV+Vx3m4mR7H7CowIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKSmHSmobDdXitYsIJ7qF6cBxQswMB8GA1UdIwQY MBaAFIo3uMDhWXzR2mXJoH+sBazYRMxqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaWplNHdPRlpmTkhhWmNtZ2Y2d0ZyTmhFekdvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYi9mZDIyYWQtZjc5Mi00NzVjLThiYWUt MjYwMjRlMmE1ZjNlLzEvaWplNHdPRlpmTkhhWmNtZ2Y2d0ZyTmhFekdvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYi9mZDIyYWQtZjc5Mi00NzVjLThiYWUtMjYwMjRlMmE1ZjNl LzEvaWplNHdPRlpmTkhhWmNtZ2Y2d0ZyTmhFekdvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAyGtOue6f E5vcH3DtnpaDXdF+aah9+9sgWZS5irGUMfGN1YVATizRcShgu1qoBoYGCmEFL2ex OQFPwceUnIlSg/qpuBIfxW1umtw7TRYJfAE2+RY+MyoHVOqYLPMHCSwttYxSzNRV AkMNWIBSbQzixC15NB+Z1TKxvVjeP/gQuK4+xI9DvvkQKyTPGTlTWv8Y6QdmOnmF c7KHU/fkhqqwMvQ0j/cl/IUVJaU1rzQQrxAlQH3iIpn09bYaRw2Wcc0GF9zQVa5e 5WEw7W7K78CBuL/hd0h28B3s7wwT1pr/S6JX4RZz+J7MVjbYz6x6rrPwci6EyRr5 5YxUv7RcpOV3HQ== -----END CERTIFICATE-----Generated at Sat Dec 27 07:03:33 2025 by rpki-client