This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/ce981a-a05b-4527-80af-693454237ee9/1/IDHrupQ_rRxUh1QOAQXhnCMs95w.mft File: IDHrupQ_rRxUh1QOAQXhnCMs95w.mft (raw, json) Hash identifier: Y8sQIO7fwBWKG49gMs2wMQ33vTdaeCshVz3qDerse9s= Subject key identifier: 3D:F7:40:5C:38:3D:F3:E2:00:44:21:46:D0:D0:03:05:A1:E7:11:4C Authority key identifier: 20:31:EB:BA:94:3F:AD:1C:54:87:54:0E:01:05:E1:9C:23:2C:F7:9C Certificate issuer: /CN=2031ebba943fad1c5487540e0105e19c232cf79c Certificate serial: 019B31C419032427BB7CABA02337026B430F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IDHrupQ_rRxUh1QOAQXhnCMs95w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/ce981a-a05b-4527-80af-693454237ee9/1/IDHrupQ_rRxUh1QOAQXhnCMs95w.mft Manifest number: 0940 Signing time: Thu 18 Dec 2025 14:01:33 +0000 Manifest this update: Thu 18 Dec 2025 14:01:33 +0000 Manifest next update: Fri 19 Dec 2025 14:01:33 +0000 Files and hashes: 1: IDHrupQ_rRxUh1QOAQXhnCMs95w.crl (hash: +iJONrQGp3KokGJgd5GSLL6o4gdSPa/YrXrCllYQUXQ=) 2: tKV7ZxqGnJTtEa2_ye8Y1d8JNh0.roa (hash: 8oiml4GgGUwThCKHUcnZfuIG0l8a7ZiiCuW4RZzZ3cA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/ce981a-a05b-4527-80af-693454237ee9/1/IDHrupQ_rRxUh1QOAQXhnCMs95w.crl rsync://rpki.ripe.net/repository/DEFAULT/24/ce981a-a05b-4527-80af-693454237ee9/1/IDHrupQ_rRxUh1QOAQXhnCMs95w.mft rsync://rpki.ripe.net/repository/DEFAULT/IDHrupQ_rRxUh1QOAQXhnCMs95w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 13:00:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:31:c4:19:03:24:27:bb:7c:ab:a0:23:37:02:6b:43:0f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2031ebba943fad1c5487540e0105e19c232cf79c Validity Not Before: Dec 18 14:01:33 2025 GMT Not After : Dec 19 14:01:33 2025 GMT Subject: CN=3df7405c383df3e200442146d0d00305a1e7114c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:34:cb:77:c3:ab:ed:9a:94:25:ea:77:ee:5c: ba:c9:53:6f:da:4d:8f:56:63:95:92:bd:68:cd:1f: 16:5b:41:bf:e5:06:30:56:df:d1:b6:28:6d:58:6f: 10:86:f5:db:3a:b9:6e:e0:47:f7:37:bd:ba:41:ce: c8:77:7c:da:62:c1:98:8c:e0:e2:b5:82:6a:42:08: 3f:45:c2:e5:42:cf:fe:f8:62:d6:e9:3d:b0:25:f7: b4:18:91:54:19:fb:4b:d7:29:63:d6:6d:1b:b0:d2: 7d:cb:3b:c6:4d:62:d9:d8:3f:05:0a:2f:ad:80:66: 0b:09:58:58:57:14:31:48:6f:a1:98:0f:00:f9:1c: ca:1f:a5:9c:1a:f4:92:71:91:56:d5:aa:28:1f:4f: 19:b5:ec:9b:2b:c9:6b:33:12:a0:f7:ed:c8:9b:84: a2:6c:74:8c:f6:d0:2f:01:18:c8:b9:b2:c7:25:58: 58:5b:e5:bb:10:04:1b:74:9a:84:3f:ca:aa:82:b7: 9d:51:7d:64:1c:d9:0f:70:c6:fc:3f:df:92:48:64: b2:ab:78:83:1e:a2:68:48:ab:14:a4:57:77:d3:3a: 16:e7:b7:3d:90:a4:f0:d0:41:d5:9d:01:5c:57:40: 2d:59:38:3d:2e:71:0e:cc:0d:b3:a9:80:08:82:07: 8e:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:F7:40:5C:38:3D:F3:E2:00:44:21:46:D0:D0:03:05:A1:E7:11:4C X509v3 Authority Key Identifier: keyid:20:31:EB:BA:94:3F:AD:1C:54:87:54:0E:01:05:E1:9C:23:2C:F7:9C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IDHrupQ_rRxUh1QOAQXhnCMs95w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/ce981a-a05b-4527-80af-693454237ee9/1/IDHrupQ_rRxUh1QOAQXhnCMs95w.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/24/ce981a-a05b-4527-80af-693454237ee9/1/IDHrupQ_rRxUh1QOAQXhnCMs95w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption af:e7:56:70:19:f6:b7:34:f5:d2:48:eb:0e:46:0f:dd:30:84: 93:05:4d:a4:40:2f:b3:d9:0a:63:3c:c5:a4:f2:e4:14:ef:8e: 65:56:e0:09:c8:d8:6c:55:6c:ee:0e:dd:03:70:d9:d0:eb:49: 43:c0:0e:ac:ea:e9:a3:fd:47:e7:27:09:40:6b:32:30:12:05: 8d:f7:6c:6b:4e:aa:80:f6:6b:03:8f:65:89:11:b7:5b:b9:43: 09:a6:b6:ae:16:0b:cd:77:ec:13:ca:d9:a2:eb:74:12:b9:9e: 88:0f:06:da:1b:77:9d:8e:ac:65:9b:91:05:fb:ca:ca:8c:c3: 4a:bc:e0:ae:9b:59:6a:1e:fc:e1:78:b7:d8:98:46:2b:37:87: 24:c8:38:05:fc:4b:0e:52:c0:01:12:02:87:c7:6b:f3:66:ad: 27:78:dd:bb:a8:e6:e6:bd:0c:6a:60:fc:cc:71:c7:55:3b:52: 77:d1:4f:fc:bb:3e:86:8c:0c:ad:c7:72:f4:61:e2:41:ee:c6: 7c:10:35:05:b3:ec:db:c5:ae:de:27:1a:ec:4e:93:b9:11:ba: 9e:6e:c1:19:66:44:2a:89:c7:e2:99:26:f0:4b:56:74:cd:e5: 4f:bd:c8:49:ff:8a:74:01:c7:17:15:cb:3d:c6:c7:7e:02:cf: ab:4b:30:61 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsxxBkDJCe7fKugIzcCa0MPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIwMzFlYmJhOTQzZmFkMWM1NDg3NTQwZTAxMDVlMTljMjMy Y2Y3OWMwHhcNMjUxMjE4MTQwMTMzWhcNMjUxMjE5MTQwMTMzWjAzMTEwLwYDVQQD EygzZGY3NDA1YzM4M2RmM2UyMDA0NDIxNDZkMGQwMDMwNWExZTcxMTRjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyTTLd8Or7ZqUJep37ly6yVNv2k2P VmOVkr1ozR8WW0G/5QYwVt/RtihtWG8QhvXbOrlu4Ef3N726Qc7Id3zaYsGYjODi tYJqQgg/RcLlQs/++GLW6T2wJfe0GJFUGftL1ylj1m0bsNJ9yzvGTWLZ2D8FCi+t gGYLCVhYVxQxSG+hmA8A+RzKH6WcGvSScZFW1aooH08ZteybK8lrMxKg9+3Im4Si bHSM9tAvARjIubLHJVhYW+W7EAQbdJqEP8qqgredUX1kHNkPcMb8P9+SSGSyq3iD HqJoSKsUpFd30zoW57c9kKTw0EHVnQFcV0AtWTg9LnEOzA2zqYAIggeORQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFD33QFw4PfPiAEQhRtDQAwWh5xFMMB8GA1UdIwQY MBaAFCAx67qUP60cVIdUDgEF4ZwjLPecMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSURIcnVwUV9yUnhVaDFRT0FRWGhuQ01zOTV3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNC9jZTk4MWEtYTA1Yi00NTI3LTgwYWYt NjkzNDU0MjM3ZWU5LzEvSURIcnVwUV9yUnhVaDFRT0FRWGhuQ01zOTV3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNC9jZTk4MWEtYTA1Yi00NTI3LTgwYWYtNjkzNDU0MjM3ZWU5 LzEvSURIcnVwUV9yUnhVaDFRT0FRWGhuQ01zOTV3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAr+dWcBn2 tzT10kjrDkYP3TCEkwVNpEAvs9kKYzzFpPLkFO+OZVbgCcjYbFVs7g7dA3DZ0OtJ Q8AOrOrpo/1H5ycJQGsyMBIFjfdsa06qgPZrA49liRG3W7lDCaa2rhYLzXfsE8rZ out0ErmeiA8G2ht3nY6sZZuRBfvKyozDSrzgrptZah784Xi32JhGKzeHJMg4BfxL DlLAARICh8dr82atJ3jdu6jm5r0MamD8zHHHVTtSd9FP/Ls+howMrcdy9GHiQe7G fBA1BbPs28Wu3ica7E6TuRG6nm7BGWZEKonH4pkm8EtWdM3lT73ISf+KdAHHFxXL PcbHfgLPq0swYQ== -----END CERTIFICATE-----Generated at Thu Dec 18 22:35:57 2025 by rpki-client