This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/b66986-8f6b-46b9-bccd-f7369f9dcc9c/1/in1zAecVR30mgJu6u0zQMr07Vhg.mft File: in1zAecVR30mgJu6u0zQMr07Vhg.mft (raw, json) Hash identifier: illxEPxaukjGSV8TsbcIcWTsXznaL12F1JFeKXNzhrw= Subject key identifier: 18:91:60:AC:B2:20:A6:B4:F6:05:C0:2E:6E:AB:D1:81:A1:13:09:2C Authority key identifier: 8A:7D:73:01:E7:15:47:7D:26:80:9B:BA:BB:4C:D0:32:BD:3B:56:18 Certificate issuer: /CN=8a7d7301e715477d26809bbabb4cd032bd3b5618 Certificate serial: 019B35A07CE13DF8695ABDF227AA01E915BF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/in1zAecVR30mgJu6u0zQMr07Vhg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/b66986-8f6b-46b9-bccd-f7369f9dcc9c/1/in1zAecVR30mgJu6u0zQMr07Vhg.mft Manifest number: 0433 Signing time: Fri 19 Dec 2025 08:01:08 +0000 Manifest this update: Fri 19 Dec 2025 08:01:08 +0000 Manifest next update: Sat 20 Dec 2025 08:01:08 +0000 Files and hashes: 1: in1zAecVR30mgJu6u0zQMr07Vhg.crl (hash: wg6WkZa//0lDhaXXRLW5S7H+rP8PVBxeVFE9i5Hgp1I=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/b66986-8f6b-46b9-bccd-f7369f9dcc9c/1/in1zAecVR30mgJu6u0zQMr07Vhg.crl rsync://rpki.ripe.net/repository/DEFAULT/db/b66986-8f6b-46b9-bccd-f7369f9dcc9c/1/in1zAecVR30mgJu6u0zQMr07Vhg.mft rsync://rpki.ripe.net/repository/DEFAULT/in1zAecVR30mgJu6u0zQMr07Vhg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 07:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:35:a0:7c:e1:3d:f8:69:5a:bd:f2:27:aa:01:e9:15:bf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8a7d7301e715477d26809bbabb4cd032bd3b5618 Validity Not Before: Dec 19 08:01:08 2025 GMT Not After : Dec 20 08:01:08 2025 GMT Subject: CN=189160acb220a6b4f605c02e6eabd181a113092c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:17:6d:35:94:80:53:e7:89:71:20:3e:c3:ee: 82:f7:f9:64:e0:de:61:54:6c:7e:dd:db:08:3c:db: 47:4a:f9:cf:83:45:79:d5:99:1e:b0:81:7e:6d:f3: ee:e6:aa:4b:c3:34:cc:46:ce:94:f1:1a:17:98:47: 01:d2:da:10:9c:c2:9d:f3:56:76:f8:40:e7:f5:de: 6d:67:5d:4a:dc:b1:85:43:84:f5:40:2d:0c:33:f9: 6d:de:5f:c0:31:c3:b5:18:80:2f:4d:44:86:a3:0c: 05:35:3e:bf:ec:53:36:cc:c0:dc:6e:cd:74:fc:70: 38:1b:b9:ba:ee:1c:cc:35:f9:fd:33:61:64:92:46: 52:ba:93:d1:41:bd:b6:17:dd:51:da:bd:e0:b8:c3: 7c:7d:03:ee:dc:7f:cd:8e:53:75:ae:e7:04:09:9e: 47:4f:bb:33:ec:4b:ad:69:9c:83:0f:45:2f:43:7b: 44:c1:04:ef:71:4c:38:03:de:ba:bd:0e:c1:af:b9: 1a:7c:d3:3a:45:05:55:96:f2:4f:01:d2:2f:65:ba: e3:7d:01:01:c2:26:d2:54:69:e9:71:f3:63:ea:eb: 2c:dd:1e:3d:d9:25:c5:e1:7b:58:1e:56:72:91:29: f8:71:84:73:d9:d3:f2:3a:1f:e9:05:58:d9:ad:5b: 16:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:91:60:AC:B2:20:A6:B4:F6:05:C0:2E:6E:AB:D1:81:A1:13:09:2C X509v3 Authority Key Identifier: keyid:8A:7D:73:01:E7:15:47:7D:26:80:9B:BA:BB:4C:D0:32:BD:3B:56:18 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/in1zAecVR30mgJu6u0zQMr07Vhg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/b66986-8f6b-46b9-bccd-f7369f9dcc9c/1/in1zAecVR30mgJu6u0zQMr07Vhg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/db/b66986-8f6b-46b9-bccd-f7369f9dcc9c/1/in1zAecVR30mgJu6u0zQMr07Vhg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6b:68:91:f7:04:f5:6d:d9:f1:1d:40:6c:e1:90:16:84:33:fc: ef:8c:6f:3f:29:48:5f:7f:ea:45:6a:7a:24:b4:7d:f7:61:fd: eb:95:9a:ed:7d:4e:c0:b9:3b:1a:02:68:84:17:76:35:6b:f6: 21:ba:4d:f1:ea:d9:f4:f9:79:df:ea:6e:36:a8:a9:44:f2:1b: ee:85:d4:94:c2:d5:27:7c:b6:8d:4d:9c:69:e3:a2:6c:cb:79: 50:11:7d:bd:bb:50:bc:16:c6:05:6c:f0:7c:4d:77:bd:10:d3: 33:8f:f8:95:8c:83:37:68:8a:c2:ca:18:57:40:71:4a:77:41: 01:a7:d2:10:bb:98:6c:5f:8a:80:c4:fd:c2:dc:88:ac:12:12: c9:75:37:c7:26:14:ab:16:3b:b5:b9:33:50:51:a4:19:da:74: e1:a9:0b:a3:db:13:08:56:96:40:d7:0f:91:87:bd:19:b5:22: 33:09:b5:0b:0a:1d:c7:5a:f5:df:92:ba:8c:8d:cc:05:c7:53: 73:a5:9e:66:48:88:9b:77:e1:3b:0f:8b:d1:27:e0:8f:ad:ac: 09:8e:00:c9:06:ba:e8:75:d3:3c:7e:78:b1:b6:5a:94:0f:f3: 1b:52:28:a1:09:2f:e3:f6:a2:68:13:44:66:32:4f:00:e2:e1: 44:68:ef:dd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs1oHzhPfhpWr3yJ6oB6RW/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhhN2Q3MzAxZTcxNTQ3N2QyNjgwOWJiYWJiNGNkMDMyYmQz YjU2MTgwHhcNMjUxMjE5MDgwMTA4WhcNMjUxMjIwMDgwMTA4WjAzMTEwLwYDVQQD EygxODkxNjBhY2IyMjBhNmI0ZjYwNWMwMmU2ZWFiZDE4MWExMTMwOTJjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArBdtNZSAU+eJcSA+w+6C9/lk4N5h VGx+3dsIPNtHSvnPg0V51ZkesIF+bfPu5qpLwzTMRs6U8RoXmEcB0toQnMKd81Z2 +EDn9d5tZ11K3LGFQ4T1QC0MM/lt3l/AMcO1GIAvTUSGowwFNT6/7FM2zMDcbs10 /HA4G7m67hzMNfn9M2FkkkZSupPRQb22F91R2r3guMN8fQPu3H/NjlN1rucECZ5H T7sz7EutaZyDD0UvQ3tEwQTvcUw4A966vQ7Br7kafNM6RQVVlvJPAdIvZbrjfQEB wibSVGnpcfNj6uss3R492SXF4XtYHlZykSn4cYRz2dPyOh/pBVjZrVsWYQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBiRYKyyIKa09gXALm6r0YGhEwksMB8GA1UdIwQY MBaAFIp9cwHnFUd9JoCburtM0DK9O1YYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaW4xekFlY1ZSMzBtZ0p1NnUwelFNcjA3VmhnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi9iNjY5ODYtOGY2Yi00NmI5LWJjY2Qt ZjczNjlmOWRjYzljLzEvaW4xekFlY1ZSMzBtZ0p1NnUwelFNcjA3VmhnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYi9iNjY5ODYtOGY2Yi00NmI5LWJjY2QtZjczNjlmOWRjYzlj LzEvaW4xekFlY1ZSMzBtZ0p1NnUwelFNcjA3VmhnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAa2iR9wT1 bdnxHUBs4ZAWhDP874xvPylIX3/qRWp6JLR992H965Wa7X1OwLk7GgJohBd2NWv2 IbpN8erZ9Pl53+puNqipRPIb7oXUlMLVJ3y2jU2caeOibMt5UBF9vbtQvBbGBWzw fE13vRDTM4/4lYyDN2iKwsoYV0BxSndBAafSELuYbF+KgMT9wtyIrBISyXU3xyYU qxY7tbkzUFGkGdp04akLo9sTCFaWQNcPkYe9GbUiMwm1Cwodx1r135K6jI3MBcdT c6WeZkiIm3fhOw+L0Sfgj62sCY4AyQa66HXTPH54sbZalA/zG1IooQkv4/aiaBNE ZjJPAOLhRGjv3Q== -----END CERTIFICATE-----Generated at Fri Dec 19 09:58:27 2025 by rpki-client