This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/39adc9-db28-4b1e-bf6e-a08bf2c43460/1/iKslD4208gR6QBWFwmTzjA4ih_4.mft File: iKslD4208gR6QBWFwmTzjA4ih_4.mft (raw, json) Hash identifier: j4g6GXUyRRDFerx1QsQMK91AJtWU0VqdaFIQL9qUUfc= Subject key identifier: AA:91:E7:72:79:42:CC:FD:6F:2A:23:2B:6F:90:4D:EB:D6:58:0B:0B Authority key identifier: 88:AB:25:0F:8D:B4:F2:04:7A:40:15:85:C2:64:F3:8C:0E:22:87:FE Certificate issuer: /CN=88ab250f8db4f2047a401585c264f38c0e2287fe Certificate serial: 019B3D59DC5D80BC4CCD0989047BBAF383B3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iKslD4208gR6QBWFwmTzjA4ih_4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/39adc9-db28-4b1e-bf6e-a08bf2c43460/1/iKslD4208gR6QBWFwmTzjA4ih_4.mft Manifest number: 15B5 Signing time: Sat 20 Dec 2025 20:00:57 +0000 Manifest this update: Sat 20 Dec 2025 20:00:57 +0000 Manifest next update: Sun 21 Dec 2025 20:00:57 +0000 Files and hashes: 1: iKslD4208gR6QBWFwmTzjA4ih_4.crl (hash: dFFbCs4KoRLVr9uYARz/2crj/RaRXMVDLuwxpy9exAk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/39adc9-db28-4b1e-bf6e-a08bf2c43460/1/iKslD4208gR6QBWFwmTzjA4ih_4.crl rsync://rpki.ripe.net/repository/DEFAULT/dc/39adc9-db28-4b1e-bf6e-a08bf2c43460/1/iKslD4208gR6QBWFwmTzjA4ih_4.mft rsync://rpki.ripe.net/repository/DEFAULT/iKslD4208gR6QBWFwmTzjA4ih_4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:59:dc:5d:80:bc:4c:cd:09:89:04:7b:ba:f3:83:b3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=88ab250f8db4f2047a401585c264f38c0e2287fe Validity Not Before: Dec 20 20:00:57 2025 GMT Not After : Dec 21 20:00:57 2025 GMT Subject: CN=aa91e7727942ccfd6f2a232b6f904debd6580b0b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:02:41:85:23:2c:dc:b6:27:e3:88:22:28:10: 3d:8d:88:8a:f4:2c:c4:9c:94:e2:1a:a4:38:1d:e5: 7f:b5:8d:f2:d0:03:8e:d2:2b:ad:c4:5b:c6:2a:8d: f3:9f:63:e9:80:0c:ef:7e:9d:e9:93:62:6d:51:2e: 2e:d4:d9:a4:ff:7e:f3:27:54:d3:bd:90:46:48:f7: a6:d5:66:da:70:39:f3:d0:2c:f2:d9:9a:b1:5b:96: c9:92:b5:6b:1d:3f:3a:d6:29:e7:17:8b:52:39:50: a2:87:25:c0:59:87:c4:fc:38:69:76:79:ad:72:74: 7a:19:a4:4e:9b:d1:43:ec:86:49:b5:5a:37:90:41: 64:0a:a5:ba:61:45:41:1b:8a:80:59:dc:cc:7d:e7: a5:ed:2c:c3:98:aa:1c:82:c6:30:ff:52:ad:37:59: 0f:10:27:bf:d9:de:d9:a6:b7:ff:b8:3e:60:2f:3b: c1:27:1b:c7:09:ce:ce:f2:5f:f1:20:a2:bc:25:8d: b0:43:78:54:8c:ee:3a:a9:50:15:a4:ad:29:f3:a9: 2f:36:7c:03:08:36:f7:c9:e3:d9:ba:5c:51:62:e6: c3:a3:ce:94:a6:e4:a2:d5:bc:d9:5f:d7:8f:fe:1e: a4:93:c0:35:5b:37:fa:15:26:b5:2c:96:0b:27:7c: be:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:91:E7:72:79:42:CC:FD:6F:2A:23:2B:6F:90:4D:EB:D6:58:0B:0B X509v3 Authority Key Identifier: keyid:88:AB:25:0F:8D:B4:F2:04:7A:40:15:85:C2:64:F3:8C:0E:22:87:FE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iKslD4208gR6QBWFwmTzjA4ih_4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/39adc9-db28-4b1e-bf6e-a08bf2c43460/1/iKslD4208gR6QBWFwmTzjA4ih_4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/39adc9-db28-4b1e-bf6e-a08bf2c43460/1/iKslD4208gR6QBWFwmTzjA4ih_4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7f:f5:74:ed:18:7d:14:cc:e7:06:f1:a2:14:a1:a3:c4:7f:36: ce:d5:ad:a8:a3:21:7d:8b:a3:24:33:f5:27:eb:1b:a6:a8:7a: 1a:78:a0:9c:9a:d6:9f:bc:c7:76:8e:1c:ab:ca:00:90:7a:16: 0a:5e:21:b4:a5:b6:44:a3:e7:b2:88:4f:53:59:ad:09:72:82: 05:e8:d6:af:66:d1:cf:77:6a:b3:38:00:93:ba:9a:70:e0:ad: 0b:86:aa:bd:33:94:f8:df:18:e0:cd:65:76:d5:0c:a0:b0:a5: 3f:a4:b7:ba:88:fe:ea:f3:0a:e4:6f:9a:68:81:97:92:fb:28: 79:fd:13:f1:19:b7:71:39:11:fa:96:73:1a:18:8a:af:06:af: 38:61:8a:df:3a:9e:94:f3:34:37:20:e4:9c:01:8e:83:1a:7a: f7:fb:17:ce:95:f6:0a:e9:60:55:91:56:45:e0:f4:bc:e9:5d: 81:b8:40:6d:6e:4e:6d:79:56:91:c6:46:5a:9c:05:9e:0e:56: 7a:34:6b:d8:38:0c:13:8e:b7:f1:7c:21:0a:c9:69:a7:1d:ee: 7f:0d:ee:7b:63:0c:0d:cc:23:22:f8:a6:52:9f:13:4d:85:32: 69:de:e3:ad:63:28:c7:a3:72:b3:e3:03:67:37:3d:78:ce:7d: 0a:ad:df:6c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9WdxdgLxMzQmJBHu684OzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg4YWIyNTBmOGRiNGYyMDQ3YTQwMTU4NWMyNjRmMzhjMGUy Mjg3ZmUwHhcNMjUxMjIwMjAwMDU3WhcNMjUxMjIxMjAwMDU3WjAzMTEwLwYDVQQD EyhhYTkxZTc3Mjc5NDJjY2ZkNmYyYTIzMmI2ZjkwNGRlYmQ2NTgwYjBiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5AJBhSMs3LYn44giKBA9jYiK9CzE nJTiGqQ4HeV/tY3y0AOO0iutxFvGKo3zn2PpgAzvfp3pk2JtUS4u1Nmk/37zJ1TT vZBGSPem1WbacDnz0Czy2ZqxW5bJkrVrHT861innF4tSOVCihyXAWYfE/Dhpdnmt cnR6GaROm9FD7IZJtVo3kEFkCqW6YUVBG4qAWdzMfeel7SzDmKocgsYw/1KtN1kP ECe/2d7Zprf/uD5gLzvBJxvHCc7O8l/xIKK8JY2wQ3hUjO46qVAVpK0p86kvNnwD CDb3yePZulxRYubDo86UpuSi1bzZX9eP/h6kk8A1Wzf6FSa1LJYLJ3y+owIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKqR53J5Qsz9byojK2+QTevWWAsLMB8GA1UdIwQY MBaAFIirJQ+NtPIEekAVhcJk84wOIof+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaUtzbEQ0MjA4Z1I2UUJXRndtVHpqQTRpaF80LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYy8zOWFkYzktZGIyOC00YjFlLWJmNmUt YTA4YmYyYzQzNDYwLzEvaUtzbEQ0MjA4Z1I2UUJXRndtVHpqQTRpaF80Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYy8zOWFkYzktZGIyOC00YjFlLWJmNmUtYTA4YmYyYzQzNDYw LzEvaUtzbEQ0MjA4Z1I2UUJXRndtVHpqQTRpaF80LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAf/V07Rh9 FMznBvGiFKGjxH82ztWtqKMhfYujJDP1J+sbpqh6GnignJrWn7zHdo4cq8oAkHoW Cl4htKW2RKPnsohPU1mtCXKCBejWr2bRz3dqszgAk7qacOCtC4aqvTOU+N8Y4M1l dtUMoLClP6S3uoj+6vMK5G+aaIGXkvsoef0T8Rm3cTkR+pZzGhiKrwavOGGK3zqe lPM0NyDknAGOgxp69/sXzpX2CulgVZFWReD0vOldgbhAbW5ObXlWkcZGWpwFng5W ejRr2DgME4638XwhCslppx3ufw3ue2MMDcwjIvimUp8TTYUyad7jrWMox6Nys+MD Zzc9eM59Cq3fbA== -----END CERTIFICATE-----Generated at Sat Dec 20 22:03:46 2025 by rpki-client