This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/a0735a-511c-48c9-a61a-0c2ff7937e6f/1/INW4SDsXErcCNUEFbnMIU2bSk0Y.mft File: INW4SDsXErcCNUEFbnMIU2bSk0Y.mft (raw, json) Hash identifier: OcP2t9jR1sntRWtRWCv96D71xJ81VWQKADGdWwC+eC4= Subject key identifier: 50:79:F9:A6:49:1E:2E:29:85:87:70:E1:40:70:C3:25:6C:07:65:12 Authority key identifier: 20:D5:B8:48:3B:17:12:B7:02:35:41:05:6E:73:08:53:66:D2:93:46 Certificate issuer: /CN=20d5b8483b1712b7023541056e73085366d29346 Certificate serial: 019B2BF8DC268E3CF8C3B407EA6AC8C83EF5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/INW4SDsXErcCNUEFbnMIU2bSk0Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/a0735a-511c-48c9-a61a-0c2ff7937e6f/1/INW4SDsXErcCNUEFbnMIU2bSk0Y.mft Manifest number: 0CC6 Signing time: Wed 17 Dec 2025 11:01:28 +0000 Manifest this update: Wed 17 Dec 2025 11:01:28 +0000 Manifest next update: Thu 18 Dec 2025 11:01:28 +0000 Files and hashes: 1: INW4SDsXErcCNUEFbnMIU2bSk0Y.crl (hash: 3f77n6nDRAjsFWsahyPd1HMDfVMkSpf/+su03/3nT6I=) 2: ttJJaBUZDaYcQDBtp6etg0tHOcw.roa (hash: eyDaETbBTLM6QaTgVh4ZT2/g+b+CTdUyos3+nCYyg/Y=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/a0735a-511c-48c9-a61a-0c2ff7937e6f/1/INW4SDsXErcCNUEFbnMIU2bSk0Y.crl rsync://rpki.ripe.net/repository/DEFAULT/be/a0735a-511c-48c9-a61a-0c2ff7937e6f/1/INW4SDsXErcCNUEFbnMIU2bSk0Y.mft rsync://rpki.ripe.net/repository/DEFAULT/INW4SDsXErcCNUEFbnMIU2bSk0Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 10:00:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2b:f8:dc:26:8e:3c:f8:c3:b4:07:ea:6a:c8:c8:3e:f5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=20d5b8483b1712b7023541056e73085366d29346 Validity Not Before: Dec 17 11:01:28 2025 GMT Not After : Dec 18 11:01:28 2025 GMT Subject: CN=5079f9a6491e2e29858770e14070c3256c076512 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:b6:21:77:3e:96:4a:77:64:1e:9e:08:7a:79: ea:b5:4e:a5:bb:00:fb:b3:5d:c7:15:fa:53:bb:42: 2e:70:11:f5:f0:9b:68:44:2b:c2:12:c0:02:70:ba: 85:ea:92:59:19:ac:07:e2:55:45:ed:2e:86:91:0a: 5b:3d:d2:e6:b4:ca:8a:b8:82:2a:6e:9d:9b:d3:15: 23:98:dd:23:f7:d1:ca:44:c6:28:d2:0c:3e:e9:27: d8:76:28:34:89:23:69:5d:29:fc:99:21:f4:2b:a3: de:fc:71:a3:7d:0d:cb:9f:7a:1b:e3:f1:1c:ab:e4: 3c:ef:ea:3a:12:26:4c:e9:47:cb:fe:64:77:cb:3b: 34:94:69:10:ad:27:4e:cb:96:3c:4d:ac:3c:e9:13: 3c:b7:88:f3:82:e0:71:f2:cd:9a:7d:a4:8d:92:dc: 5b:d5:ec:a4:56:36:04:93:b6:1a:de:01:03:8c:8c: e6:0d:3a:93:ef:4d:42:49:0a:3a:86:89:1e:1c:e5: ef:af:bc:7b:a4:a1:4c:91:17:2f:53:88:94:51:c1: 6d:d0:d4:c7:14:02:cc:bc:28:a3:d4:70:c9:74:cd: 0b:fa:6f:3f:e3:d8:77:ff:d7:bc:a5:00:e7:60:35: b0:1e:0d:1f:6b:b0:6e:00:19:77:08:80:7a:b8:af: 36:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:79:F9:A6:49:1E:2E:29:85:87:70:E1:40:70:C3:25:6C:07:65:12 X509v3 Authority Key Identifier: keyid:20:D5:B8:48:3B:17:12:B7:02:35:41:05:6E:73:08:53:66:D2:93:46 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/INW4SDsXErcCNUEFbnMIU2bSk0Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/a0735a-511c-48c9-a61a-0c2ff7937e6f/1/INW4SDsXErcCNUEFbnMIU2bSk0Y.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/be/a0735a-511c-48c9-a61a-0c2ff7937e6f/1/INW4SDsXErcCNUEFbnMIU2bSk0Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6c:82:b8:af:6b:4b:dc:36:03:3b:23:28:ad:8d:97:14:37:bd: b8:fa:ef:72:be:59:de:c9:2f:96:14:84:db:a6:d7:65:6c:3e: 9c:df:93:37:6a:b0:44:ad:56:32:fe:ab:43:b4:9b:4f:72:c6: f0:f7:12:41:d0:4a:91:2b:6d:69:30:50:40:eb:b8:94:0c:b8: a9:ab:0a:a0:18:d8:92:79:08:71:f7:5f:65:25:f7:21:9d:b9: 47:e5:28:43:f5:03:22:11:83:8a:d2:bd:6c:b7:fa:9a:17:ad: e1:6e:ab:cb:ef:4d:d5:88:10:37:bb:e3:19:50:a5:c7:5f:e0: 9d:fc:58:43:8a:0b:83:4e:9c:3d:ef:53:a2:31:de:83:fa:67: 5e:a5:77:e6:80:50:dc:c0:86:82:d5:45:6a:ae:cb:89:8d:36: e2:08:4c:9f:ad:95:c4:2e:de:61:b7:5d:ce:df:1d:b8:5e:0f: 75:22:b2:ec:47:40:a3:6e:68:f8:89:1a:f5:91:8e:e9:1d:3c: 2b:52:16:df:62:52:46:d0:12:e2:dd:40:8e:c0:9b:7d:73:45: 46:e8:61:dc:d6:c1:c4:7e:34:16:81:f0:fe:cb:4d:7f:ff:05: de:da:7c:24:ef:e6:9f:31:62:b0:50:25:f6:d5:ab:83:ea:04: f5:9c:cf:26 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsr+Nwmjjz4w7QH6mrIyD71MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIwZDViODQ4M2IxNzEyYjcwMjM1NDEwNTZlNzMwODUzNjZk MjkzNDYwHhcNMjUxMjE3MTEwMTI4WhcNMjUxMjE4MTEwMTI4WjAzMTEwLwYDVQQD Eyg1MDc5ZjlhNjQ5MWUyZTI5ODU4NzcwZTE0MDcwYzMyNTZjMDc2NTEyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr7Yhdz6WSndkHp4IennqtU6luwD7 s13HFfpTu0IucBH18JtoRCvCEsACcLqF6pJZGawH4lVF7S6GkQpbPdLmtMqKuIIq bp2b0xUjmN0j99HKRMYo0gw+6SfYdig0iSNpXSn8mSH0K6Pe/HGjfQ3Ln3ob4/Ec q+Q87+o6EiZM6UfL/mR3yzs0lGkQrSdOy5Y8Taw86RM8t4jzguBx8s2afaSNktxb 1eykVjYEk7Ya3gEDjIzmDTqT701CSQo6hokeHOXvr7x7pKFMkRcvU4iUUcFt0NTH FALMvCij1HDJdM0L+m8/49h3/9e8pQDnYDWwHg0fa7BuABl3CIB6uK82KwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFB5+aZJHi4phYdw4UBwwyVsB2USMB8GA1UdIwQY MBaAFCDVuEg7FxK3AjVBBW5zCFNm0pNGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSU5XNFNEc1hFcmNDTlVFRmJuTUlVMmJTazBZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZS9hMDczNWEtNTExYy00OGM5LWE2MWEt MGMyZmY3OTM3ZTZmLzEvSU5XNFNEc1hFcmNDTlVFRmJuTUlVMmJTazBZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZS9hMDczNWEtNTExYy00OGM5LWE2MWEtMGMyZmY3OTM3ZTZm LzEvSU5XNFNEc1hFcmNDTlVFRmJuTUlVMmJTazBZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbIK4r2tL 3DYDOyMorY2XFDe9uPrvcr5Z3skvlhSE26bXZWw+nN+TN2qwRK1WMv6rQ7SbT3LG 8PcSQdBKkSttaTBQQOu4lAy4qasKoBjYknkIcfdfZSX3IZ25R+UoQ/UDIhGDitK9 bLf6mhet4W6ry+9N1YgQN7vjGVClx1/gnfxYQ4oLg06cPe9TojHeg/pnXqV35oBQ 3MCGgtVFaq7LiY024ghMn62VxC7eYbddzt8duF4PdSKy7EdAo25o+Ika9ZGO6R08 K1IW32JSRtAS4t1AjsCbfXNFRuhh3NbBxH40FoHw/stNf/8F3tp8JO/mnzFisFAl 9tWrg+oE9ZzPJg== -----END CERTIFICATE-----Generated at Wed Dec 17 15:12:24 2025 by rpki-client