This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/b98b9f-b581-4e3e-ae8a-987d869566f6/1/IIIPeWSBrA6WN8liQUWXsf4ifCQ.mft File: IIIPeWSBrA6WN8liQUWXsf4ifCQ.mft (raw, json) Hash identifier: 4HzVnKX7gyHRQVAGXvyuDyToiCYkh8P4muf3betIAbQ= Subject key identifier: 2D:DC:21:E1:C5:BD:63:3D:68:9D:74:C1:81:26:0E:C0:95:5E:61:89 Authority key identifier: 20:82:0F:79:64:81:AC:0E:96:37:C9:62:41:45:97:B1:FE:22:7C:24 Certificate issuer: /CN=20820f796481ac0e9637c962414597b1fe227c24 Certificate serial: 019B416D417EB9DB0E270D42CB9A2183B205 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IIIPeWSBrA6WN8liQUWXsf4ifCQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/b98b9f-b581-4e3e-ae8a-987d869566f6/1/IIIPeWSBrA6WN8liQUWXsf4ifCQ.mft Manifest number: 029E Signing time: Sun 21 Dec 2025 15:00:37 +0000 Manifest this update: Sun 21 Dec 2025 15:00:37 +0000 Manifest next update: Mon 22 Dec 2025 15:00:37 +0000 Files and hashes: 1: IIIPeWSBrA6WN8liQUWXsf4ifCQ.crl (hash: KnZaJxPlwnQq/OU9+w3QQRr9gX7hqHJefVB1+Plvd1U=) 2: _KyJrgx1hGK_hXMTclXxlPIPZn8.roa (hash: I4QZAN/FDUNiksKSSMZ5KyrS7bRdtRCczdlGK9iHX0c=) 3: iLANhbyVV3zbKcRa5e1j5ys5bQ8.roa (hash: HvIZEmUJodoCUOQJmSLlhYyGWehRd8s2eUB4GrSGatI=) 4: vXv88BHimThnafaryEHozjYrlDI.roa (hash: DV1U9+gs3m5mNc5xoVIc27oNoGuDOyBahRAnw8thlug=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/b98b9f-b581-4e3e-ae8a-987d869566f6/1/IIIPeWSBrA6WN8liQUWXsf4ifCQ.crl rsync://rpki.ripe.net/repository/DEFAULT/ef/b98b9f-b581-4e3e-ae8a-987d869566f6/1/IIIPeWSBrA6WN8liQUWXsf4ifCQ.mft rsync://rpki.ripe.net/repository/DEFAULT/IIIPeWSBrA6WN8liQUWXsf4ifCQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 13:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:41:6d:41:7e:b9:db:0e:27:0d:42:cb:9a:21:83:b2:05 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=20820f796481ac0e9637c962414597b1fe227c24 Validity Not Before: Dec 21 15:00:37 2025 GMT Not After : Dec 22 15:00:37 2025 GMT Subject: CN=2ddc21e1c5bd633d689d74c181260ec0955e6189 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:08:d2:3a:b1:77:d9:af:f4:9c:e3:07:95:a8: 08:e1:43:8b:65:78:9a:9e:7e:f6:97:05:a6:4e:b7: 17:c8:d9:11:f1:a6:f8:bc:f8:ed:14:97:5c:7d:7f: 54:72:9e:f8:3c:4c:0e:d9:e3:ef:bd:04:b5:be:0f: 7a:c1:9e:a4:2b:bc:ea:0a:cd:46:30:03:43:a5:45: aa:99:17:d1:40:4a:d9:51:bd:87:11:3a:6e:75:b1: f7:9e:92:45:b4:4f:ac:d0:43:76:d5:6f:69:0e:c0: 95:c1:2a:81:0d:dc:d8:8c:57:22:b1:1f:ac:4d:dd: d3:c0:d2:92:51:b9:0e:01:a8:18:4d:ec:9d:2c:bb: 7f:65:50:4d:ef:74:72:8a:84:a5:d1:d5:49:c7:da: e2:4d:41:ed:44:7a:69:e5:36:67:97:cf:2b:43:54: 80:8d:ed:a1:36:29:ef:e3:8e:64:68:ec:df:9e:dc: 37:25:88:3c:e8:29:4f:34:d0:29:9d:74:12:77:e4: 45:89:85:2e:3f:a2:57:02:92:3b:f6:f6:c2:b3:bf: 43:ee:06:aa:c9:4e:e5:f6:60:5c:e9:6a:fd:38:e7: 6b:72:20:93:74:cb:68:39:ed:ce:3f:a4:80:2b:62: 57:a2:fd:a0:d6:e3:79:9f:16:bc:c8:7b:4c:49:80: 2d:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:DC:21:E1:C5:BD:63:3D:68:9D:74:C1:81:26:0E:C0:95:5E:61:89 X509v3 Authority Key Identifier: keyid:20:82:0F:79:64:81:AC:0E:96:37:C9:62:41:45:97:B1:FE:22:7C:24 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IIIPeWSBrA6WN8liQUWXsf4ifCQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/b98b9f-b581-4e3e-ae8a-987d869566f6/1/IIIPeWSBrA6WN8liQUWXsf4ifCQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/b98b9f-b581-4e3e-ae8a-987d869566f6/1/IIIPeWSBrA6WN8liQUWXsf4ifCQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 19:7c:9a:28:b1:77:31:83:c3:b5:13:cd:42:4e:fd:4a:dc:dc: 2e:70:96:54:cb:46:35:7d:01:7d:f8:44:28:c6:26:64:4f:ac: 78:f9:11:05:56:a2:4e:4c:e6:23:68:77:17:61:eb:24:64:e3: e7:82:12:f2:ac:dc:4e:02:59:0f:66:82:fb:b5:eb:b4:e8:c1: 39:59:92:ad:58:30:7a:9a:23:3f:22:b1:36:51:d7:60:c1:06: b4:42:58:87:44:f1:d2:bd:af:ee:6f:7f:da:36:1e:98:02:cc: 31:1c:ca:d9:69:a8:db:a1:cc:93:02:86:a8:f9:65:0d:df:61: c2:34:dc:95:46:e1:12:59:2c:e0:77:ac:46:10:74:3d:2e:80: 62:f7:06:2b:b3:a4:5f:0a:0c:18:0b:57:7c:66:e2:f2:5e:7c: 51:9f:38:8e:a5:90:04:72:9a:03:05:36:69:be:b5:97:11:ad: eb:d0:cc:7d:a4:c0:5c:ed:e4:81:70:18:07:31:cc:09:22:95: 19:b2:cd:90:4a:44:9b:d3:e0:1c:1e:45:1d:fd:ba:ee:4c:4e: e4:42:e6:ce:98:f7:1c:ae:1b:9a:70:fc:b0:0a:6a:90:ba:97: 14:50:a8:40:b3:cc:80:86:67:3b:8b:4a:33:e2:a6:21:82:ef: 4a:58:2a:f8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtBbUF+udsOJw1Cy5ohg7IFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIwODIwZjc5NjQ4MWFjMGU5NjM3Yzk2MjQxNDU5N2IxZmUy MjdjMjQwHhcNMjUxMjIxMTUwMDM3WhcNMjUxMjIyMTUwMDM3WjAzMTEwLwYDVQQD EygyZGRjMjFlMWM1YmQ2MzNkNjg5ZDc0YzE4MTI2MGVjMDk1NWU2MTg5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoAjSOrF32a/0nOMHlagI4UOLZXia nn72lwWmTrcXyNkR8ab4vPjtFJdcfX9Ucp74PEwO2ePvvQS1vg96wZ6kK7zqCs1G MANDpUWqmRfRQErZUb2HETpudbH3npJFtE+s0EN21W9pDsCVwSqBDdzYjFcisR+s Td3TwNKSUbkOAagYTeydLLt/ZVBN73RyioSl0dVJx9riTUHtRHpp5TZnl88rQ1SA je2hNinv445kaOzfntw3JYg86ClPNNApnXQSd+RFiYUuP6JXApI79vbCs79D7gaq yU7l9mBc6Wr9OOdrciCTdMtoOe3OP6SAK2JXov2g1uN5nxa8yHtMSYAt7QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFC3cIeHFvWM9aJ10wYEmDsCVXmGJMB8GA1UdIwQY MBaAFCCCD3lkgawOljfJYkFFl7H+InwkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSUlJUGVXU0JyQTZXTjhsaVFVV1hzZjRpZkNRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZi9iOThiOWYtYjU4MS00ZTNlLWFlOGEt OTg3ZDg2OTU2NmY2LzEvSUlJUGVXU0JyQTZXTjhsaVFVV1hzZjRpZkNRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZi9iOThiOWYtYjU4MS00ZTNlLWFlOGEtOTg3ZDg2OTU2NmY2 LzEvSUlJUGVXU0JyQTZXTjhsaVFVV1hzZjRpZkNRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGXyaKLF3 MYPDtRPNQk79StzcLnCWVMtGNX0BffhEKMYmZE+sePkRBVaiTkzmI2h3F2HrJGTj 54IS8qzcTgJZD2aC+7XrtOjBOVmSrVgwepojPyKxNlHXYMEGtEJYh0Tx0r2v7m9/ 2jYemALMMRzK2Wmo26HMkwKGqPllDd9hwjTclUbhElks4HesRhB0PS6AYvcGK7Ok XwoMGAtXfGbi8l58UZ84jqWQBHKaAwU2ab61lxGt69DMfaTAXO3kgXAYBzHMCSKV GbLNkEpEm9PgHB5FHf267kxO5ELmzpj3HK4bmnD8sApqkLqXFFCoQLPMgIZnO4tK M+KmIYLvSlgq+A== -----END CERTIFICATE-----Generated at Sun Dec 21 16:43:11 2025 by rpki-client