This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/a40bbb-556a-40c5-b97c-32b2be06222c/1/iFeQ87X0pUUjTzIwv4lmOFbge8c.mft File: iFeQ87X0pUUjTzIwv4lmOFbge8c.mft (raw, json) Hash identifier: ZnrSiGX+F5bHQKAmcpgcWsUdeRBpbIfyJVO464HuQY8= Subject key identifier: D3:AF:79:05:25:75:6B:78:B8:7D:79:7A:A4:A5:59:E5:E5:8B:C8:43 Authority key identifier: 88:57:90:F3:B5:F4:A5:45:23:4F:32:30:BF:89:66:38:56:E0:7B:C7 Certificate issuer: /CN=885790f3b5f4a545234f3230bf89663856e07bc7 Certificate serial: 019B2B1CB2C62F79F4AD6284AAE56A7A43CC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iFeQ87X0pUUjTzIwv4lmOFbge8c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/a40bbb-556a-40c5-b97c-32b2be06222c/1/iFeQ87X0pUUjTzIwv4lmOFbge8c.mft Manifest number: 177B Signing time: Wed 17 Dec 2025 07:00:59 +0000 Manifest this update: Wed 17 Dec 2025 07:00:59 +0000 Manifest next update: Thu 18 Dec 2025 07:00:59 +0000 Files and hashes: 1: iFeQ87X0pUUjTzIwv4lmOFbge8c.crl (hash: 3+dIR7SKwJD+hUTDhMAMUa8QYe1i7F3L6/2ft0y+LME=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/a40bbb-556a-40c5-b97c-32b2be06222c/1/iFeQ87X0pUUjTzIwv4lmOFbge8c.crl rsync://rpki.ripe.net/repository/DEFAULT/e2/a40bbb-556a-40c5-b97c-32b2be06222c/1/iFeQ87X0pUUjTzIwv4lmOFbge8c.mft rsync://rpki.ripe.net/repository/DEFAULT/iFeQ87X0pUUjTzIwv4lmOFbge8c.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 23:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2b:1c:b2:c6:2f:79:f4:ad:62:84:aa:e5:6a:7a:43:cc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=885790f3b5f4a545234f3230bf89663856e07bc7 Validity Not Before: Dec 17 07:00:59 2025 GMT Not After : Dec 18 07:00:59 2025 GMT Subject: CN=d3af790525756b78b87d797aa4a559e5e58bc843 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:88:5f:26:36:1c:8e:93:59:5b:9e:47:d2:9b: 15:c1:4e:88:fb:9b:c7:72:60:0d:6e:f2:a4:40:33: 08:6b:3b:11:67:7d:fa:29:9a:31:11:10:63:65:09: 28:91:43:8f:7d:0b:3d:06:37:3a:e0:31:fa:73:02: ee:c8:4e:ed:ac:23:a5:0b:d1:15:96:76:fb:dc:58: b3:f2:f3:c4:72:7c:bc:db:c1:9a:9a:5d:7f:81:ef: f5:20:b8:6d:bf:b2:fc:f1:20:12:f7:53:1a:12:9d: fb:5e:40:fd:6a:17:b3:46:e7:90:9e:37:c1:08:f4: f6:6f:2e:8d:74:17:e3:1e:6b:92:33:41:14:57:e7: 46:4f:95:46:61:aa:78:dd:3f:7f:85:07:bb:85:4a: f9:45:a7:5d:67:84:d7:b1:d1:1f:b1:3a:ba:f4:ff: c3:f2:e9:e2:18:5c:f7:21:9a:8e:c1:d1:82:11:16: 2a:1e:80:62:24:04:e1:44:fb:8b:92:6e:d1:1e:b8: 1e:be:c0:b0:00:35:81:6e:17:ff:aa:8e:20:68:d3: 2f:77:ee:a3:e9:8b:05:24:09:8c:67:d9:81:26:2e: ba:80:6d:8c:d1:b0:de:14:10:df:15:ee:30:d1:2c: d2:a3:fb:80:b6:96:00:22:ad:56:2c:78:5f:1a:94: 2e:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:AF:79:05:25:75:6B:78:B8:7D:79:7A:A4:A5:59:E5:E5:8B:C8:43 X509v3 Authority Key Identifier: keyid:88:57:90:F3:B5:F4:A5:45:23:4F:32:30:BF:89:66:38:56:E0:7B:C7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iFeQ87X0pUUjTzIwv4lmOFbge8c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/a40bbb-556a-40c5-b97c-32b2be06222c/1/iFeQ87X0pUUjTzIwv4lmOFbge8c.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/a40bbb-556a-40c5-b97c-32b2be06222c/1/iFeQ87X0pUUjTzIwv4lmOFbge8c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 05:0c:85:0e:0e:2c:be:66:23:7e:f7:0c:63:ee:47:c6:6c:42: 1a:37:56:b2:c2:8a:4a:21:1c:d4:01:4d:5e:88:8f:98:d4:c8: 60:2b:ad:2f:20:23:a3:ef:e6:83:66:4e:a6:56:00:fb:b7:6b: 08:06:e5:27:a0:f0:f7:f0:6a:ce:9e:5c:a1:18:d8:a7:2e:39: 83:1b:22:4f:e2:fc:4f:72:1e:e6:5c:b7:a0:bb:86:9c:8f:27: 5b:d6:43:15:22:9a:d4:21:72:d2:97:ee:7b:e5:cf:40:85:e8: d9:e1:fd:d0:ea:70:fe:d1:65:d9:4b:09:19:e1:fa:0f:53:37: 7c:1c:54:6a:90:30:c9:6c:9e:3b:b3:aa:b7:36:be:35:a2:8f: e1:28:bd:21:be:12:60:e7:2c:1f:10:53:4b:f9:ba:ec:e5:f4: b4:09:7b:f4:56:0c:80:64:b7:9b:9b:93:c2:4c:d3:de:8c:62: db:99:f3:75:b7:ed:27:e5:89:a0:de:75:a0:ec:df:9a:db:08: cb:86:3a:59:81:3e:1a:f8:f5:4c:c7:5e:dc:0e:82:6b:19:14: 4d:e5:1e:49:b8:ca:99:d1:47:56:fa:6c:1f:9a:fb:48:d3:22: cf:59:41:09:e6:f3:ac:34:fc:b0:2a:ec:9b:2f:d7:5e:ec:27: 5d:74:a6:d0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsrHLLGL3n0rWKEquVqekPMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg4NTc5MGYzYjVmNGE1NDUyMzRmMzIzMGJmODk2NjM4NTZl MDdiYzcwHhcNMjUxMjE3MDcwMDU5WhcNMjUxMjE4MDcwMDU5WjAzMTEwLwYDVQQD EyhkM2FmNzkwNTI1NzU2Yjc4Yjg3ZDc5N2FhNGE1NTllNWU1OGJjODQzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvohfJjYcjpNZW55H0psVwU6I+5vH cmANbvKkQDMIazsRZ336KZoxERBjZQkokUOPfQs9Bjc64DH6cwLuyE7trCOlC9EV lnb73Fiz8vPEcny828Gaml1/ge/1ILhtv7L88SAS91MaEp37XkD9ahezRueQnjfB CPT2by6NdBfjHmuSM0EUV+dGT5VGYap43T9/hQe7hUr5RaddZ4TXsdEfsTq69P/D 8uniGFz3IZqOwdGCERYqHoBiJAThRPuLkm7RHrgevsCwADWBbhf/qo4gaNMvd+6j 6YsFJAmMZ9mBJi66gG2M0bDeFBDfFe4w0SzSo/uAtpYAIq1WLHhfGpQuSQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNOveQUldWt4uH15eqSlWeXli8hDMB8GA1UdIwQY MBaAFIhXkPO19KVFI08yML+JZjhW4HvHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaUZlUTg3WDBwVVVqVHpJd3Y0bG1PRmJnZThjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMi9hNDBiYmItNTU2YS00MGM1LWI5N2Mt MzJiMmJlMDYyMjJjLzEvaUZlUTg3WDBwVVVqVHpJd3Y0bG1PRmJnZThjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMi9hNDBiYmItNTU2YS00MGM1LWI5N2MtMzJiMmJlMDYyMjJj LzEvaUZlUTg3WDBwVVVqVHpJd3Y0bG1PRmJnZThjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABQyFDg4s vmYjfvcMY+5HxmxCGjdWssKKSiEc1AFNXoiPmNTIYCutLyAjo+/mg2ZOplYA+7dr CAblJ6Dw9/Bqzp5coRjYpy45gxsiT+L8T3Ie5ly3oLuGnI8nW9ZDFSKa1CFy0pfu e+XPQIXo2eH90Opw/tFl2UsJGeH6D1M3fBxUapAwyWyeO7Oqtza+NaKP4Si9Ib4S YOcsHxBTS/m67OX0tAl79FYMgGS3m5uTwkzT3oxi25nzdbftJ+WJoN51oOzfmtsI y4Y6WYE+Gvj1TMde3A6CaxkUTeUeSbjKmdFHVvpsH5r7SNMiz1lBCebzrDT8sCrs my/XXuwnXXSm0A== -----END CERTIFICATE-----Generated at Wed Dec 17 09:43:57 2025 by rpki-client