This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/681e1e-7f3f-4ea8-af30-522690be548d/1/iXA6mCNRKxjRduNi6gI8qCR4TSI.mft File: iXA6mCNRKxjRduNi6gI8qCR4TSI.mft (raw, json) Hash identifier: zBYGT2/YSNhpSlZGkcr4KSxCmCA1U5LB3cUNRdWhhfk= Subject key identifier: 8E:6B:48:DA:75:BB:69:4B:6C:75:05:D9:6C:EB:A7:76:4C:15:BE:BB Authority key identifier: 89:70:3A:98:23:51:2B:18:D1:76:E3:62:EA:02:3C:A8:24:78:4D:22 Certificate issuer: /CN=89703a9823512b18d176e362ea023ca824784d22 Certificate serial: 019B337B984DE8C2DA044EC1D3DF7CF38BE7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iXA6mCNRKxjRduNi6gI8qCR4TSI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/681e1e-7f3f-4ea8-af30-522690be548d/1/iXA6mCNRKxjRduNi6gI8qCR4TSI.mft Manifest number: 1783 Signing time: Thu 18 Dec 2025 22:01:36 +0000 Manifest this update: Thu 18 Dec 2025 22:01:36 +0000 Manifest next update: Fri 19 Dec 2025 22:01:36 +0000 Files and hashes: 1: iXA6mCNRKxjRduNi6gI8qCR4TSI.crl (hash: 3anzoLm9maVl8tZ4vad71NJER1Lo5zO2cgEntuVl1us=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/681e1e-7f3f-4ea8-af30-522690be548d/1/iXA6mCNRKxjRduNi6gI8qCR4TSI.crl rsync://rpki.ripe.net/repository/DEFAULT/e8/681e1e-7f3f-4ea8-af30-522690be548d/1/iXA6mCNRKxjRduNi6gI8qCR4TSI.mft rsync://rpki.ripe.net/repository/DEFAULT/iXA6mCNRKxjRduNi6gI8qCR4TSI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 20:16:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:33:7b:98:4d:e8:c2:da:04:4e:c1:d3:df:7c:f3:8b:e7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89703a9823512b18d176e362ea023ca824784d22 Validity Not Before: Dec 18 22:01:36 2025 GMT Not After : Dec 19 22:01:36 2025 GMT Subject: CN=8e6b48da75bb694b6c7505d96ceba7764c15bebb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:40:ef:bc:a9:2e:5a:ab:02:cb:ad:c9:34:db: 70:37:f0:74:4b:fe:bd:d7:ff:65:05:00:de:36:f0: bb:81:bb:cc:3f:1b:c1:70:6f:a5:e7:11:77:0d:39: ea:be:a6:1d:e3:26:0b:36:33:35:97:d9:ee:58:c8: c1:24:3d:18:db:a1:b5:e7:68:7c:e1:b1:28:a7:30: 37:c7:7c:bb:f2:9b:00:82:27:f0:0b:a6:ae:db:15: 15:36:b3:1c:60:2e:73:52:af:3b:af:91:14:73:a2: 72:c3:36:69:0a:9b:1f:a8:2c:18:e2:73:8f:8d:71: 9e:79:17:b0:50:25:c1:81:bc:da:35:1d:57:03:ad: 31:76:b1:88:35:cf:d0:d0:14:58:7d:36:f5:e2:f9: 62:83:3b:cf:2d:70:d5:3f:83:bd:5f:ac:3b:2f:fd: 2f:e7:48:85:47:53:b5:de:2d:19:c6:b2:f1:cf:74: 08:c7:db:e9:04:32:1a:5d:0b:77:60:ed:e2:42:9a: 13:2d:96:a0:f3:a8:a8:f6:67:59:dc:28:18:a0:bd: 53:e5:78:f3:86:bf:66:ee:9f:15:d0:3d:76:96:a2: 9b:09:73:4e:1b:59:41:32:3d:37:6d:0c:7f:4b:63: 6e:1d:76:ee:75:06:74:b9:9f:25:fc:ea:72:4b:38: c7:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:6B:48:DA:75:BB:69:4B:6C:75:05:D9:6C:EB:A7:76:4C:15:BE:BB X509v3 Authority Key Identifier: keyid:89:70:3A:98:23:51:2B:18:D1:76:E3:62:EA:02:3C:A8:24:78:4D:22 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iXA6mCNRKxjRduNi6gI8qCR4TSI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/681e1e-7f3f-4ea8-af30-522690be548d/1/iXA6mCNRKxjRduNi6gI8qCR4TSI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/681e1e-7f3f-4ea8-af30-522690be548d/1/iXA6mCNRKxjRduNi6gI8qCR4TSI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 34:4d:52:2f:7d:05:64:38:8d:18:9b:ac:da:68:48:e6:0d:34: 26:e9:99:0a:d3:16:a0:41:41:e3:88:34:46:ee:ab:a7:94:18: 30:84:79:d1:57:d4:e4:51:45:ce:e5:4d:9f:e2:9b:b0:20:f7: 83:d3:5f:5b:82:40:1d:64:96:3f:0e:91:8f:bf:1d:a8:e3:9c: 54:f5:0d:90:59:bc:73:0d:bd:85:ca:50:e9:59:bf:e3:1e:49: 68:97:b3:1d:14:6b:98:fb:ff:7a:5b:e4:a3:e4:27:e8:c0:20: 8c:a6:2d:99:07:ef:7d:99:05:07:c9:21:58:f6:3e:69:20:aa: 90:e4:46:f6:3a:ea:a9:81:db:84:b0:7e:d8:08:ec:9d:a0:70: 52:c1:bb:95:87:33:54:c2:58:13:b3:84:f4:dd:d2:07:ed:89: f6:36:c5:bf:b0:03:2b:96:3c:9f:b1:28:f6:fd:d4:78:f1:30: a9:5e:f8:60:aa:1e:59:97:3d:e5:61:90:50:19:15:e2:01:ea: 1c:a5:b7:ef:c3:1e:f0:f8:d8:ed:f9:2a:a7:bf:a8:14:7b:f8: ef:a1:e9:70:1f:f4:b6:f2:14:d5:86:38:b1:58:6d:54:8c:63: 67:8d:d8:d1:3a:aa:62:a4:90:78:dd:e5:ae:b2:db:23:6c:1b: e1:3a:b5:13 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsze5hN6MLaBE7B099884vnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg5NzAzYTk4MjM1MTJiMThkMTc2ZTM2MmVhMDIzY2E4MjQ3 ODRkMjIwHhcNMjUxMjE4MjIwMTM2WhcNMjUxMjE5MjIwMTM2WjAzMTEwLwYDVQQD Eyg4ZTZiNDhkYTc1YmI2OTRiNmM3NTA1ZDk2Y2ViYTc3NjRjMTViZWJiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApkDvvKkuWqsCy63JNNtwN/B0S/69 1/9lBQDeNvC7gbvMPxvBcG+l5xF3DTnqvqYd4yYLNjM1l9nuWMjBJD0Y26G152h8 4bEopzA3x3y78psAgifwC6au2xUVNrMcYC5zUq87r5EUc6JywzZpCpsfqCwY4nOP jXGeeRewUCXBgbzaNR1XA60xdrGINc/Q0BRYfTb14vligzvPLXDVP4O9X6w7L/0v 50iFR1O13i0ZxrLxz3QIx9vpBDIaXQt3YO3iQpoTLZag86io9mdZ3CgYoL1T5Xjz hr9m7p8V0D12lqKbCXNOG1lBMj03bQx/S2NuHXbudQZ0uZ8l/OpySzjHGQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFI5rSNp1u2lLbHUF2Wzrp3ZMFb67MB8GA1UdIwQY MBaAFIlwOpgjUSsY0XbjYuoCPKgkeE0iMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaVhBNm1DTlJLeGpSZHVOaTZnSThxQ1I0VFNJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOC82ODFlMWUtN2YzZi00ZWE4LWFmMzAt NTIyNjkwYmU1NDhkLzEvaVhBNm1DTlJLeGpSZHVOaTZnSThxQ1I0VFNJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lOC82ODFlMWUtN2YzZi00ZWE4LWFmMzAtNTIyNjkwYmU1NDhk LzEvaVhBNm1DTlJLeGpSZHVOaTZnSThxQ1I0VFNJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANE1SL30F ZDiNGJus2mhI5g00JumZCtMWoEFB44g0Ru6rp5QYMIR50VfU5FFFzuVNn+KbsCD3 g9NfW4JAHWSWPw6Rj78dqOOcVPUNkFm8cw29hcpQ6Vm/4x5JaJezHRRrmPv/elvk o+Qn6MAgjKYtmQfvfZkFB8khWPY+aSCqkORG9jrqqYHbhLB+2AjsnaBwUsG7lYcz VMJYE7OE9N3SB+2J9jbFv7ADK5Y8n7Eo9v3UePEwqV74YKoeWZc95WGQUBkV4gHq HKW378Me8PjY7fkqp7+oFHv476HpcB/0tvIU1YY4sVhtVIxjZ43Y0TqqYqSQeN3l rrLbI2wb4Tq1Ew== -----END CERTIFICATE-----Generated at Fri Dec 19 01:24:22 2025 by rpki-client