This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/ac0694-1e22-436d-82c9-17ce620e74f1/1/IE19hlKpn8F__y197MSeVWqg64A.mft File: IE19hlKpn8F__y197MSeVWqg64A.mft (raw, json) Hash identifier: 0r5KcQMK4quZ/Xp9fzaG2/oD3+b+5evHQoPYn4wpt7c= Subject key identifier: 47:B8:51:A7:8D:0E:57:6B:E0:68:96:7E:83:75:F0:7A:63:F6:58:0E Authority key identifier: 20:4D:7D:86:52:A9:9F:C1:7F:FF:2D:7D:EC:C4:9E:55:6A:A0:EB:80 Certificate issuer: /CN=204d7d8652a99fc17fff2d7decc49e556aa0eb80 Certificate serial: 019B3C1040BAB2BBA9C9D32652DBB15EB5B9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IE19hlKpn8F__y197MSeVWqg64A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/ac0694-1e22-436d-82c9-17ce620e74f1/1/IE19hlKpn8F__y197MSeVWqg64A.mft Manifest number: 048C Signing time: Sat 20 Dec 2025 14:00:56 +0000 Manifest this update: Sat 20 Dec 2025 14:00:56 +0000 Manifest next update: Sun 21 Dec 2025 14:00:56 +0000 Files and hashes: 1: IE19hlKpn8F__y197MSeVWqg64A.crl (hash: uptwoXs5TjbYy0BfLyvOsVnvzfNgfh7vwtGQsBtv994=) 2: qVpN4Y8KxLODwpDOgLN11KilqHg.roa (hash: 09hTebOsoFtxumaEhzqwE7uj7IeLGjUIKeNrykM3gp8=) 3: tdhuYGIdy-7BcAqbVeS6RaDWjiM.roa (hash: Sh6aeKnHHbg/58/2+xd9mufW5cUQ13QaLyf7FAUXcc8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/ac0694-1e22-436d-82c9-17ce620e74f1/1/IE19hlKpn8F__y197MSeVWqg64A.crl rsync://rpki.ripe.net/repository/DEFAULT/4d/ac0694-1e22-436d-82c9-17ce620e74f1/1/IE19hlKpn8F__y197MSeVWqg64A.mft rsync://rpki.ripe.net/repository/DEFAULT/IE19hlKpn8F__y197MSeVWqg64A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 14:00:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:10:40:ba:b2:bb:a9:c9:d3:26:52:db:b1:5e:b5:b9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=204d7d8652a99fc17fff2d7decc49e556aa0eb80 Validity Not Before: Dec 20 14:00:56 2025 GMT Not After : Dec 21 14:00:56 2025 GMT Subject: CN=47b851a78d0e576be068967e8375f07a63f6580e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:49:89:bc:72:04:ca:cf:41:d7:09:c4:fb:0b: f8:ec:4c:cf:1c:64:fa:65:92:41:da:ea:27:44:9d: 78:4d:f9:92:95:27:93:28:df:a2:e5:fd:c2:57:62: e0:f5:dd:3c:db:c5:0d:36:a0:6e:b8:b7:4e:61:1d: e6:6d:c6:e6:13:b7:0e:ec:a1:23:45:7a:53:93:36: 28:bf:8c:39:66:29:a7:f0:c1:a4:2a:c0:f8:cb:29: c5:67:e9:6a:cf:ee:74:f2:0f:dc:85:80:e7:cc:7c: 20:75:93:89:11:cc:b4:4e:1e:f4:b6:3e:bb:90:ee: 3d:52:4d:37:56:68:36:3f:8c:20:e3:0d:08:f1:b5: 8c:d7:0a:96:1d:ae:5f:7d:ba:d9:48:ec:f0:3e:f2: 18:51:ee:91:be:4e:90:f5:da:e4:3c:70:a6:5f:40: 81:54:f3:4d:88:04:8d:7f:b7:41:b3:7b:b9:44:a4: 7e:a3:a7:10:77:75:da:26:d3:ab:23:b4:e2:f8:11: 8c:e1:f8:c2:ee:29:79:d8:f1:6c:40:ac:41:75:ba: ff:0b:75:35:21:35:71:2c:c2:a3:4a:0c:9f:f4:3d: a7:82:f0:3c:e4:d1:ea:47:b4:70:11:e5:9a:5b:64: 82:89:90:59:17:e1:0f:14:c1:02:05:e1:d4:7d:80: 48:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:B8:51:A7:8D:0E:57:6B:E0:68:96:7E:83:75:F0:7A:63:F6:58:0E X509v3 Authority Key Identifier: keyid:20:4D:7D:86:52:A9:9F:C1:7F:FF:2D:7D:EC:C4:9E:55:6A:A0:EB:80 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IE19hlKpn8F__y197MSeVWqg64A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/ac0694-1e22-436d-82c9-17ce620e74f1/1/IE19hlKpn8F__y197MSeVWqg64A.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/ac0694-1e22-436d-82c9-17ce620e74f1/1/IE19hlKpn8F__y197MSeVWqg64A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 94:e7:03:0c:4a:22:28:cc:27:8c:e2:f5:5b:6a:a8:07:25:e7: 29:60:46:79:66:3c:46:3f:35:ac:31:25:24:e6:49:37:d3:27: c9:c7:fa:89:80:00:f5:5c:31:20:29:25:f5:39:eb:5a:ed:46: a3:a3:9d:2c:25:82:a1:09:2d:15:d3:8c:13:ae:67:67:94:48: 25:85:7e:c3:ae:ad:82:f0:79:f7:c4:88:9b:b7:78:90:94:f2: 53:d3:18:b1:21:a5:b1:5e:80:c2:f4:99:f4:4d:89:1b:90:b8: 12:f9:45:63:ac:b9:76:bd:73:f8:7e:57:22:1c:39:e3:36:1b: 4e:55:73:68:4d:cc:b1:41:5e:be:67:13:4e:52:be:21:d0:f8: 97:21:0b:4d:98:23:77:a2:df:42:8d:0b:5b:f8:9a:29:92:5e: 26:1b:67:0a:47:8e:0a:77:e2:5e:2f:9f:fa:03:bb:48:b8:fd: 0a:26:75:44:6a:47:9c:d1:5e:dc:1a:bc:c8:11:c0:14:af:3a: 3f:8f:4d:70:67:13:c3:b8:12:bc:f1:44:ec:98:7c:8f:5c:e3: 22:ff:af:14:80:91:3e:00:73:30:a5:77:26:5a:e1:de:9f:0e: 28:65:ac:6c:f3:0e:59:96:d8:35:57:e2:66:83:0a:01:96:e2: 49:a4:ad:e3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs8EEC6srupydMmUtuxXrW5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIwNGQ3ZDg2NTJhOTlmYzE3ZmZmMmQ3ZGVjYzQ5ZTU1NmFh MGViODAwHhcNMjUxMjIwMTQwMDU2WhcNMjUxMjIxMTQwMDU2WjAzMTEwLwYDVQQD Eyg0N2I4NTFhNzhkMGU1NzZiZTA2ODk2N2U4Mzc1ZjA3YTYzZjY1ODBlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqUmJvHIEys9B1wnE+wv47EzPHGT6 ZZJB2uonRJ14TfmSlSeTKN+i5f3CV2Lg9d0828UNNqBuuLdOYR3mbcbmE7cO7KEj RXpTkzYov4w5Zimn8MGkKsD4yynFZ+lqz+508g/chYDnzHwgdZOJEcy0Th70tj67 kO49Uk03Vmg2P4wg4w0I8bWM1wqWHa5ffbrZSOzwPvIYUe6Rvk6Q9drkPHCmX0CB VPNNiASNf7dBs3u5RKR+o6cQd3XaJtOrI7Ti+BGM4fjC7il52PFsQKxBdbr/C3U1 ITVxLMKjSgyf9D2ngvA85NHqR7RwEeWaW2SCiZBZF+EPFMECBeHUfYBIyQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEe4UaeNDldr4GiWfoN18Hpj9lgOMB8GA1UdIwQY MBaAFCBNfYZSqZ/Bf/8tfezEnlVqoOuAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSUUxOWhsS3BuOEZfX3kxOTdNU2VWV3FnNjRBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZC9hYzA2OTQtMWUyMi00MzZkLTgyYzkt MTdjZTYyMGU3NGYxLzEvSUUxOWhsS3BuOEZfX3kxOTdNU2VWV3FnNjRBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80ZC9hYzA2OTQtMWUyMi00MzZkLTgyYzktMTdjZTYyMGU3NGYx LzEvSUUxOWhsS3BuOEZfX3kxOTdNU2VWV3FnNjRBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlOcDDEoi KMwnjOL1W2qoByXnKWBGeWY8Rj81rDElJOZJN9Mnycf6iYAA9VwxICkl9TnrWu1G o6OdLCWCoQktFdOME65nZ5RIJYV+w66tgvB598SIm7d4kJTyU9MYsSGlsV6AwvSZ 9E2JG5C4EvlFY6y5dr1z+H5XIhw54zYbTlVzaE3MsUFevmcTTlK+IdD4lyELTZgj d6LfQo0LW/iaKZJeJhtnCkeOCnfiXi+f+gO7SLj9CiZ1RGpHnNFe3Bq8yBHAFK86 P49NcGcTw7gSvPFE7Jh8j1zjIv+vFICRPgBzMKV3Jlrh3p8OKGWsbPMOWZbYNVfi ZoMKAZbiSaSt4w== -----END CERTIFICATE-----Generated at Sun Dec 21 00:30:01 2025 by rpki-client