This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/6efd9c-64c3-42b6-92fd-ab7881b0df2b/1/INaBg9YBj1BMXm-uIo4bNQxvD-8.mft File: INaBg9YBj1BMXm-uIo4bNQxvD-8.mft (raw, json) Hash identifier: BpvNpSVo5OaAKRkqikhHTYMXwimglVX9ghPLqYXjC3Y= Subject key identifier: 79:01:D6:AC:6C:9B:F4:BE:92:F3:5E:F6:3A:6C:3B:04:A7:9F:27:BA Authority key identifier: 20:D6:81:83:D6:01:8F:50:4C:5E:6F:AE:22:8E:1B:35:0C:6F:0F:EF Certificate issuer: /CN=20d68183d6018f504c5e6fae228e1b350c6f0fef Certificate serial: 019B465D388EE819714D07F9911E53C8579C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/INaBg9YBj1BMXm-uIo4bNQxvD-8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/6efd9c-64c3-42b6-92fd-ab7881b0df2b/1/INaBg9YBj1BMXm-uIo4bNQxvD-8.mft Manifest number: 0581 Signing time: Mon 22 Dec 2025 14:01:12 +0000 Manifest this update: Mon 22 Dec 2025 14:01:12 +0000 Manifest next update: Tue 23 Dec 2025 14:01:12 +0000 Files and hashes: 1: INaBg9YBj1BMXm-uIo4bNQxvD-8.crl (hash: DVbr5awL0Hmr2Zkn6zcRBZA+z5cT6AK6TBE9W3NSw6M=) 2: yC5k-Siz_Em1vt4gM_Mo1jSfCLs.roa (hash: 9BuY83r6+/eNP6qGt+jO2lNpKgIDr+s3/OtIQYi8bMU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/6efd9c-64c3-42b6-92fd-ab7881b0df2b/1/INaBg9YBj1BMXm-uIo4bNQxvD-8.crl rsync://rpki.ripe.net/repository/DEFAULT/e0/6efd9c-64c3-42b6-92fd-ab7881b0df2b/1/INaBg9YBj1BMXm-uIo4bNQxvD-8.mft rsync://rpki.ripe.net/repository/DEFAULT/INaBg9YBj1BMXm-uIo4bNQxvD-8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 14:01:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:46:5d:38:8e:e8:19:71:4d:07:f9:91:1e:53:c8:57:9c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=20d68183d6018f504c5e6fae228e1b350c6f0fef Validity Not Before: Dec 22 14:01:12 2025 GMT Not After : Dec 23 14:01:12 2025 GMT Subject: CN=7901d6ac6c9bf4be92f35ef63a6c3b04a79f27ba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:09:a6:18:4d:ee:57:9e:d9:95:9c:09:55:ce: 4b:e6:e6:45:b6:f1:08:14:8f:0c:93:1f:0a:4c:4c: b6:00:ed:a2:42:09:7c:5c:85:f0:77:c7:20:60:7f: a5:14:6c:01:c8:8d:f8:24:80:f1:2f:55:80:1a:3d: 95:e3:54:e6:9b:12:ca:38:f6:62:d2:2a:c4:de:f7: 0e:0d:a6:99:ca:e2:d8:35:50:fe:05:31:8f:22:b3: 74:cc:51:49:3f:01:65:35:07:a0:6e:63:01:28:a7: 45:ce:b3:73:a8:de:83:c8:3d:7a:c3:6b:3c:8f:1f: 49:4a:46:f4:81:4c:7e:c5:ef:13:cb:63:6b:67:e2: 14:54:9f:cf:98:20:87:48:63:59:c8:7e:c9:5c:d0: f6:80:68:e2:70:de:73:87:b6:2d:e1:4a:33:1c:f0: 30:b6:03:5c:6e:f3:39:c6:3d:a1:33:52:78:a5:3c: ae:50:3d:d7:ef:36:ee:8f:8e:22:f9:ee:6c:a0:be: 1a:70:55:f7:6b:0e:c6:39:52:20:f8:8f:69:7d:ea: 42:b2:39:0b:95:ec:77:dd:29:12:42:05:a1:ee:2b: 3a:2f:46:89:52:01:f6:64:35:28:b1:29:ec:f6:0a: 0d:c1:d8:0d:2d:bc:e3:62:65:f3:a5:ee:a9:21:8f: 1a:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:01:D6:AC:6C:9B:F4:BE:92:F3:5E:F6:3A:6C:3B:04:A7:9F:27:BA X509v3 Authority Key Identifier: keyid:20:D6:81:83:D6:01:8F:50:4C:5E:6F:AE:22:8E:1B:35:0C:6F:0F:EF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/INaBg9YBj1BMXm-uIo4bNQxvD-8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/6efd9c-64c3-42b6-92fd-ab7881b0df2b/1/INaBg9YBj1BMXm-uIo4bNQxvD-8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/6efd9c-64c3-42b6-92fd-ab7881b0df2b/1/INaBg9YBj1BMXm-uIo4bNQxvD-8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 08:1c:63:3a:29:29:15:c0:b1:27:12:cb:08:30:dd:cc:b6:dc: fa:35:b8:d9:40:89:22:36:9a:41:3c:8e:0b:92:bb:da:ab:07: 30:ed:24:78:cb:eb:6b:4b:f8:55:e3:54:3f:33:b1:52:2c:17: c5:3f:b0:91:98:07:1b:65:57:d7:1b:cc:cd:ce:3b:cd:0b:95: 2b:2f:da:1a:bb:17:09:0c:98:cd:1d:08:6e:dc:32:d2:e6:6e: 8b:ab:37:3e:b6:57:8b:e0:01:c9:f0:93:b8:e3:89:b5:ba:42: be:55:81:19:cf:8a:76:39:9e:b1:6b:2f:ea:ad:fb:d1:02:4d: e7:ce:10:8a:e3:a9:45:c4:76:ad:7f:d7:12:82:5e:44:a8:37: a6:11:72:a1:9e:35:e0:a9:e1:12:2d:d9:f2:7e:23:c6:44:22: 4f:82:18:65:fc:23:a2:68:89:ba:e8:c8:8a:f9:60:7e:31:19: 3f:f7:72:6f:d0:7c:36:56:49:88:e4:62:c0:a7:87:b9:6e:66: 71:29:a6:b6:57:d4:ce:7c:f1:9c:b8:aa:67:ae:eb:be:d9:e4: e4:7c:5d:3d:d7:5f:46:86:05:a7:f0:97:09:d4:b1:60:c2:c5: 02:19:37:d7:90:c8:af:59:b0:b7:a6:9b:a8:6e:64:12:06:04: c3:ed:74:92 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtGXTiO6BlxTQf5kR5TyFecMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIwZDY4MTgzZDYwMThmNTA0YzVlNmZhZTIyOGUxYjM1MGM2 ZjBmZWYwHhcNMjUxMjIyMTQwMTEyWhcNMjUxMjIzMTQwMTEyWjAzMTEwLwYDVQQD Eyg3OTAxZDZhYzZjOWJmNGJlOTJmMzVlZjYzYTZjM2IwNGE3OWYyN2JhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmwmmGE3uV57ZlZwJVc5L5uZFtvEI FI8Mkx8KTEy2AO2iQgl8XIXwd8cgYH+lFGwByI34JIDxL1WAGj2V41TmmxLKOPZi 0irE3vcODaaZyuLYNVD+BTGPIrN0zFFJPwFlNQegbmMBKKdFzrNzqN6DyD16w2s8 jx9JSkb0gUx+xe8Ty2NrZ+IUVJ/PmCCHSGNZyH7JXND2gGjicN5zh7Yt4UozHPAw tgNcbvM5xj2hM1J4pTyuUD3X7zbuj44i+e5soL4acFX3aw7GOVIg+I9pfepCsjkL lex33SkSQgWh7is6L0aJUgH2ZDUosSns9goNwdgNLbzjYmXzpe6pIY8aYQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHkB1qxsm/S+kvNe9jpsOwSnnye6MB8GA1UdIwQY MBaAFCDWgYPWAY9QTF5vriKOGzUMbw/vMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSU5hQmc5WUJqMUJNWG0tdUlvNGJOUXh2RC04LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMC82ZWZkOWMtNjRjMy00MmI2LTkyZmQt YWI3ODgxYjBkZjJiLzEvSU5hQmc5WUJqMUJNWG0tdUlvNGJOUXh2RC04Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMC82ZWZkOWMtNjRjMy00MmI2LTkyZmQtYWI3ODgxYjBkZjJi LzEvSU5hQmc5WUJqMUJNWG0tdUlvNGJOUXh2RC04LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACBxjOikp FcCxJxLLCDDdzLbc+jW42UCJIjaaQTyOC5K72qsHMO0keMvra0v4VeNUPzOxUiwX xT+wkZgHG2VX1xvMzc47zQuVKy/aGrsXCQyYzR0Ibtwy0uZui6s3PrZXi+AByfCT uOOJtbpCvlWBGc+KdjmesWsv6q370QJN584QiuOpRcR2rX/XEoJeRKg3phFyoZ41 4KnhEi3Z8n4jxkQiT4IYZfwjomiJuujIivlgfjEZP/dyb9B8NlZJiORiwKeHuW5m cSmmtlfUznzxnLiqZ67rvtnk5HxdPddfRoYFp/CXCdSxYMLFAhk315DIr1mwt6ab qG5kEgYEw+10kg== -----END CERTIFICATE-----Generated at Mon Dec 22 22:57:33 2025 by rpki-client