This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/1bcb8d-20a4-4347-b8da-bfbd5694a94d/1/a_iOgrNaCtbQ_zFWrxMZ38Fi-Og.mft File: a_iOgrNaCtbQ_zFWrxMZ38Fi-Og.mft (raw, json) Hash identifier: Bxu8UvpZ5vB21nGU2APOTc0/qsrvrG4ul1ZR4JAFC70= Subject key identifier: 41:94:16:E1:01:FC:16:BD:8B:56:43:7F:AD:4D:EC:86:01:CB:A5:4F Authority key identifier: 6B:F8:8E:82:B3:5A:0A:D6:D0:FF:31:56:AF:13:19:DF:C1:62:F8:E8 Certificate issuer: /CN=6bf88e82b35a0ad6d0ff3156af1319dfc162f8e8 Certificate serial: 019B3B6BA4272B50C2BF31CCF9B440AD8D1E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a_iOgrNaCtbQ_zFWrxMZ38Fi-Og.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/1bcb8d-20a4-4347-b8da-bfbd5694a94d/1/a_iOgrNaCtbQ_zFWrxMZ38Fi-Og.mft Manifest number: 05CD Signing time: Sat 20 Dec 2025 11:01:08 +0000 Manifest this update: Sat 20 Dec 2025 11:01:08 +0000 Manifest next update: Sun 21 Dec 2025 11:01:08 +0000 Files and hashes: 1: a_iOgrNaCtbQ_zFWrxMZ38Fi-Og.crl (hash: PlEEN7xM+V6j4tCMOMPbXs09oYCMMFLdr/jyPG8A5hU=) 2: waNULbcRhTUiNsANSLGcB4J4itI.roa (hash: 9dW8NgonrZBc4IChXkCIdxerNGPGCgwx9gaoEJblTYM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/1bcb8d-20a4-4347-b8da-bfbd5694a94d/1/a_iOgrNaCtbQ_zFWrxMZ38Fi-Og.crl rsync://rpki.ripe.net/repository/DEFAULT/c2/1bcb8d-20a4-4347-b8da-bfbd5694a94d/1/a_iOgrNaCtbQ_zFWrxMZ38Fi-Og.mft rsync://rpki.ripe.net/repository/DEFAULT/a_iOgrNaCtbQ_zFWrxMZ38Fi-Og.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 09:56:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3b:6b:a4:27:2b:50:c2:bf:31:cc:f9:b4:40:ad:8d:1e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6bf88e82b35a0ad6d0ff3156af1319dfc162f8e8 Validity Not Before: Dec 20 11:01:08 2025 GMT Not After : Dec 21 11:01:08 2025 GMT Subject: CN=419416e101fc16bd8b56437fad4dec8601cba54f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:59:85:a6:63:e0:cb:20:6f:fe:ce:ac:9f:ac: a8:8c:57:0a:b5:24:03:0b:2a:70:80:b8:5e:a9:3e: 04:10:9a:5c:28:ac:fa:65:d9:d7:ea:cd:94:58:cb: 36:be:57:d2:1d:93:5e:f2:d0:f7:cd:6a:22:bc:34: 4e:95:34:08:5e:9f:db:f9:d6:c0:68:09:4c:1f:a5: 35:c0:0f:9b:1b:5c:35:b6:ea:29:ad:90:c4:36:05: bc:10:bb:32:e7:96:5e:dc:f6:a7:50:0c:a2:da:5b: 05:8d:d7:20:56:89:b2:c5:a4:e8:be:b8:97:96:fb: 2c:79:7d:96:8d:87:d5:7d:84:3d:77:a2:f5:e6:55: f6:89:4f:1e:af:d4:83:7d:81:60:1b:6c:ad:65:ba: 5c:54:6b:f8:63:8d:9b:6f:0d:b5:36:5b:bb:fa:78: c5:3f:d8:1a:fc:4c:67:40:d8:98:1c:18:27:79:3c: da:ce:28:73:f8:0e:ff:69:02:e0:f8:74:92:2d:e9: 3b:ba:ff:a3:5d:ba:a1:b5:48:1d:eb:8a:ef:3e:d3: 18:10:df:1e:b2:8c:72:cd:2d:72:d1:9c:0d:48:a9: ad:70:96:ed:1c:4d:c6:9e:6c:9c:b2:e7:38:7a:f7: 6b:a8:46:02:f9:de:38:43:c2:59:f8:67:e7:80:a4: 70:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:94:16:E1:01:FC:16:BD:8B:56:43:7F:AD:4D:EC:86:01:CB:A5:4F X509v3 Authority Key Identifier: keyid:6B:F8:8E:82:B3:5A:0A:D6:D0:FF:31:56:AF:13:19:DF:C1:62:F8:E8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a_iOgrNaCtbQ_zFWrxMZ38Fi-Og.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/1bcb8d-20a4-4347-b8da-bfbd5694a94d/1/a_iOgrNaCtbQ_zFWrxMZ38Fi-Og.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/1bcb8d-20a4-4347-b8da-bfbd5694a94d/1/a_iOgrNaCtbQ_zFWrxMZ38Fi-Og.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 48:82:8b:02:3c:5a:c6:75:20:84:f3:c5:ef:2f:01:c1:2b:dd: cc:47:cf:22:1e:d6:48:87:7e:63:ec:cf:9c:ef:26:31:37:2b: 82:22:44:47:fa:fd:24:4f:5e:0c:72:e2:0f:55:ce:3a:94:5b: c0:1b:3d:38:b6:9f:11:dc:2c:c4:30:07:5b:d2:a5:c0:09:47: 8d:00:3c:9a:95:6b:08:24:dd:49:40:c3:a6:f3:a9:bb:f7:8f: 44:a1:d5:da:7e:26:10:a6:1c:a4:31:48:d6:52:46:dd:a3:98: 5e:a5:c6:d0:98:0c:72:d3:13:96:c8:b5:5b:91:21:79:a6:ee: 24:81:69:b5:7c:dd:7f:5a:e6:53:b6:d9:79:7e:d5:46:7d:b6: 29:26:be:5b:9e:77:81:7f:3e:ff:12:29:8c:7e:c1:e6:bc:75: c1:5b:e8:7b:5f:90:4f:42:bc:2c:82:4f:ed:3f:63:b8:10:fe: 68:36:67:36:63:00:a3:8d:ca:57:81:ba:73:bd:1f:9b:01:8f: 5d:66:50:3e:88:a3:67:31:05:67:f3:31:be:61:2c:b4:07:bb: da:47:63:94:db:5a:28:37:fd:5d:ce:fe:e4:0b:58:b8:41:cf: 66:4f:02:01:98:e7:e8:25:6f:7a:b3:0a:91:1a:48:93:f6:0f: c4:1d:ab:45 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs7a6QnK1DCvzHM+bRArY0eMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZiZjg4ZTgyYjM1YTBhZDZkMGZmMzE1NmFmMTMxOWRmYzE2 MmY4ZTgwHhcNMjUxMjIwMTEwMTA4WhcNMjUxMjIxMTEwMTA4WjAzMTEwLwYDVQQD Eyg0MTk0MTZlMTAxZmMxNmJkOGI1NjQzN2ZhZDRkZWM4NjAxY2JhNTRmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt1mFpmPgyyBv/s6sn6yojFcKtSQD CypwgLheqT4EEJpcKKz6ZdnX6s2UWMs2vlfSHZNe8tD3zWoivDROlTQIXp/b+dbA aAlMH6U1wA+bG1w1tuoprZDENgW8ELsy55Ze3PanUAyi2lsFjdcgVomyxaTovriX lvsseX2WjYfVfYQ9d6L15lX2iU8er9SDfYFgG2ytZbpcVGv4Y42bbw21Nlu7+njF P9ga/ExnQNiYHBgneTzazihz+A7/aQLg+HSSLek7uv+jXbqhtUgd64rvPtMYEN8e soxyzS1y0ZwNSKmtcJbtHE3Gnmycsuc4evdrqEYC+d44Q8JZ+GfngKRwBwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEGUFuEB/Ba9i1ZDf61N7IYBy6VPMB8GA1UdIwQY MBaAFGv4joKzWgrW0P8xVq8TGd/BYvjoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYV9pT2dyTmFDdGJRX3pGV3J4TVozOEZpLU9nLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMi8xYmNiOGQtMjBhNC00MzQ3LWI4ZGEt YmZiZDU2OTRhOTRkLzEvYV9pT2dyTmFDdGJRX3pGV3J4TVozOEZpLU9nLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMi8xYmNiOGQtMjBhNC00MzQ3LWI4ZGEtYmZiZDU2OTRhOTRk LzEvYV9pT2dyTmFDdGJRX3pGV3J4TVozOEZpLU9nLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASIKLAjxa xnUghPPF7y8BwSvdzEfPIh7WSId+Y+zPnO8mMTcrgiJER/r9JE9eDHLiD1XOOpRb wBs9OLafEdwsxDAHW9KlwAlHjQA8mpVrCCTdSUDDpvOpu/ePRKHV2n4mEKYcpDFI 1lJG3aOYXqXG0JgMctMTlsi1W5EheabuJIFptXzdf1rmU7bZeX7VRn22KSa+W553 gX8+/xIpjH7B5rx1wVvoe1+QT0K8LIJP7T9juBD+aDZnNmMAo43KV4G6c70fmwGP XWZQPoijZzEFZ/MxvmEstAe72kdjlNtaKDf9Xc7+5AtYuEHPZk8CAZjn6CVverMK kRpIk/YPxB2rRQ== -----END CERTIFICATE-----Generated at Sat Dec 20 16:35:32 2025 by rpki-client