This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/6cac50-3f13-4ef9-8b6d-decec41a71d1/1/20ifvpiZTLwJjIdrpj5WCsF-Wy8.mft File: 20ifvpiZTLwJjIdrpj5WCsF-Wy8.mft (raw, json) Hash identifier: vm+zi6GiYZdOurETxquPcMk3Pf31z7mXJtbrrxSDNGU= Subject key identifier: ED:16:5C:35:2F:5E:84:86:54:6C:F3:35:14:6B:98:07:89:B5:21:8C Authority key identifier: DB:48:9F:BE:98:99:4C:BC:09:8C:87:6B:A6:3E:56:0A:C1:7E:5B:2F Certificate issuer: /CN=db489fbe98994cbc098c876ba63e560ac17e5b2f Certificate serial: 019B3757BAC29AD545973F908DF82BECD9CA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/20ifvpiZTLwJjIdrpj5WCsF-Wy8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/6cac50-3f13-4ef9-8b6d-decec41a71d1/1/20ifvpiZTLwJjIdrpj5WCsF-Wy8.mft Manifest number: 133B Signing time: Fri 19 Dec 2025 16:00:54 +0000 Manifest this update: Fri 19 Dec 2025 16:00:54 +0000 Manifest next update: Sat 20 Dec 2025 16:00:54 +0000 Files and hashes: 1: 20ifvpiZTLwJjIdrpj5WCsF-Wy8.crl (hash: pO9B6iaG3LoWIy6w6NVdHdh22jiPj4MGppD+v1jb+P8=) 2: O7dVmdulXoSGFdWUdpvv3bkJxU8.roa (hash: hmlWALQMbQbIcNvaSImT+aYBz0m3Sm9TMeYp/ubqBkw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/6cac50-3f13-4ef9-8b6d-decec41a71d1/1/20ifvpiZTLwJjIdrpj5WCsF-Wy8.crl rsync://rpki.ripe.net/repository/DEFAULT/d1/6cac50-3f13-4ef9-8b6d-decec41a71d1/1/20ifvpiZTLwJjIdrpj5WCsF-Wy8.mft rsync://rpki.ripe.net/repository/DEFAULT/20ifvpiZTLwJjIdrpj5WCsF-Wy8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 16:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:37:57:ba:c2:9a:d5:45:97:3f:90:8d:f8:2b:ec:d9:ca Signature Algorithm: sha256WithRSAEncryption Issuer: CN=db489fbe98994cbc098c876ba63e560ac17e5b2f Validity Not Before: Dec 19 16:00:54 2025 GMT Not After : Dec 20 16:00:54 2025 GMT Subject: CN=ed165c352f5e8486546cf335146b980789b5218c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:80:4f:38:2b:d6:c3:5e:8e:4e:ad:81:50:7d: 35:16:74:a2:ff:d8:99:66:4b:fb:5f:d1:bb:a5:ce: d5:e8:8d:90:2d:cc:6d:9b:ab:62:dd:04:25:46:c5: 19:aa:39:e4:c5:83:13:29:8e:2d:52:e3:fb:d6:9b: c5:9d:c5:ed:1e:db:aa:a7:21:33:65:0d:4d:2a:c2: d0:ac:28:d4:c3:57:ff:bf:43:17:48:57:2e:44:28: f9:2f:55:be:de:b7:df:dc:56:68:70:b1:2c:0c:49: d6:b6:5c:22:8b:a7:b2:d4:9b:cc:fb:47:d4:f0:3e: 41:02:c0:02:ac:8f:2c:9a:1b:96:9a:b6:1b:c8:b4: e1:02:1d:da:cd:65:eb:02:bb:cc:e8:8a:33:bd:45: 1f:d6:81:6f:95:14:0a:9f:a9:23:b9:4b:fa:cc:2d: c2:cd:6c:0c:ae:db:ed:19:47:8e:27:e2:2e:45:1d: b3:5f:44:f2:28:98:9b:23:b3:57:f4:6c:3d:98:0f: 11:67:b4:41:23:6c:91:8c:ce:e5:8f:41:ec:f2:cc: 25:90:8a:03:6c:ca:68:7b:24:6c:93:d3:00:93:52: 40:44:94:a8:85:3d:25:8a:43:e8:9a:5a:c5:e9:3b: 50:7d:05:fa:3b:85:23:c8:f8:5f:85:4f:dd:32:ba: c7:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:16:5C:35:2F:5E:84:86:54:6C:F3:35:14:6B:98:07:89:B5:21:8C X509v3 Authority Key Identifier: keyid:DB:48:9F:BE:98:99:4C:BC:09:8C:87:6B:A6:3E:56:0A:C1:7E:5B:2F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/20ifvpiZTLwJjIdrpj5WCsF-Wy8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/6cac50-3f13-4ef9-8b6d-decec41a71d1/1/20ifvpiZTLwJjIdrpj5WCsF-Wy8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/6cac50-3f13-4ef9-8b6d-decec41a71d1/1/20ifvpiZTLwJjIdrpj5WCsF-Wy8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4e:ab:ce:4c:eb:29:00:e4:34:d8:53:19:ff:81:b2:0b:3e:de: 4a:08:48:8e:10:79:00:a4:bd:d5:97:a2:46:42:ff:fe:a7:be: 2c:1b:22:0e:04:e1:1e:f4:0e:ac:8a:6c:67:58:d3:ff:8c:17: e1:f3:1e:d1:af:9a:62:8f:b8:c5:97:c6:20:68:46:e5:9f:fb: e7:75:81:55:b4:5e:3b:e6:7f:b6:74:92:a0:aa:00:31:79:25: fa:17:f8:c5:ad:d0:69:bf:b3:d7:84:81:a1:81:6f:e1:a0:a8: 0a:ad:16:a4:b7:61:a4:cb:b7:9d:27:6f:ad:68:08:ed:c0:98: eb:cb:15:c3:33:07:60:96:bd:e5:e1:b8:ea:0e:eb:66:d9:33: d6:2a:22:b6:01:a6:a4:c8:c6:00:b3:4b:5c:3f:b1:79:36:0d: 07:53:31:71:28:2f:51:1c:5f:23:13:3a:b3:39:ac:3b:2c:69: 17:c8:92:6a:a3:1d:13:ba:c3:cd:9c:53:f8:a3:28:92:1f:a3: 55:94:98:b4:c5:a0:66:e4:c9:31:84:22:22:dc:7d:4d:f7:fd: f7:b9:a1:72:b7:14:a9:ef:2a:af:02:fb:64:12:c4:f6:36:e0: 71:f2:fe:7f:dc:ba:92:8f:49:1b:1f:29:0b:cd:4a:fa:ee:30: 94:2a:28:60 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs3V7rCmtVFlz+Qjfgr7NnKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRiNDg5ZmJlOTg5OTRjYmMwOThjODc2YmE2M2U1NjBhYzE3 ZTViMmYwHhcNMjUxMjE5MTYwMDU0WhcNMjUxMjIwMTYwMDU0WjAzMTEwLwYDVQQD EyhlZDE2NWMzNTJmNWU4NDg2NTQ2Y2YzMzUxNDZiOTgwNzg5YjUyMThjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlYBPOCvWw16OTq2BUH01FnSi/9iZ Zkv7X9G7pc7V6I2QLcxtm6ti3QQlRsUZqjnkxYMTKY4tUuP71pvFncXtHtuqpyEz ZQ1NKsLQrCjUw1f/v0MXSFcuRCj5L1W+3rff3FZocLEsDEnWtlwii6ey1JvM+0fU 8D5BAsACrI8smhuWmrYbyLThAh3azWXrArvM6IozvUUf1oFvlRQKn6kjuUv6zC3C zWwMrtvtGUeOJ+IuRR2zX0TyKJibI7NX9Gw9mA8RZ7RBI2yRjM7lj0Hs8swlkIoD bMpoeyRsk9MAk1JARJSohT0likPomlrF6TtQfQX6O4UjyPhfhU/dMrrHTQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFO0WXDUvXoSGVGzzNRRrmAeJtSGMMB8GA1UdIwQY MBaAFNtIn76YmUy8CYyHa6Y+VgrBflsvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMjBpZnZwaVpUTHdKaklkcnBqNVdDc0YtV3k4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMS82Y2FjNTAtM2YxMy00ZWY5LThiNmQt ZGVjZWM0MWE3MWQxLzEvMjBpZnZwaVpUTHdKaklkcnBqNVdDc0YtV3k4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMS82Y2FjNTAtM2YxMy00ZWY5LThiNmQtZGVjZWM0MWE3MWQx LzEvMjBpZnZwaVpUTHdKaklkcnBqNVdDc0YtV3k4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATqvOTOsp AOQ02FMZ/4GyCz7eSghIjhB5AKS91ZeiRkL//qe+LBsiDgThHvQOrIpsZ1jT/4wX 4fMe0a+aYo+4xZfGIGhG5Z/753WBVbReO+Z/tnSSoKoAMXkl+hf4xa3Qab+z14SB oYFv4aCoCq0WpLdhpMu3nSdvrWgI7cCY68sVwzMHYJa95eG46g7rZtkz1ioitgGm pMjGALNLXD+xeTYNB1MxcSgvURxfIxM6szmsOyxpF8iSaqMdE7rDzZxT+KMokh+j VZSYtMWgZuTJMYQiItx9Tff997mhcrcUqe8qrwL7ZBLE9jbgcfL+f9y6ko9JGx8p C81K+u4wlCooYA== -----END CERTIFICATE-----Generated at Fri Dec 19 23:53:23 2025 by rpki-client