This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/3ef96e-f8a6-4f9b-9bc7-fe26e899deb8/1/IPgSdPZr3onxLCQ9Cantw-Wx4ik.mft File: IPgSdPZr3onxLCQ9Cantw-Wx4ik.mft (raw, json) Hash identifier: Ibe2Y6o/tjhmN5WnKEl9XiVHCPYS2GMYBDEhrFlCjGU= Subject key identifier: 41:E6:85:CF:EB:46:D3:4F:69:44:B4:7F:B3:5F:74:82:8B:B9:4D:C2 Authority key identifier: 20:F8:12:74:F6:6B:DE:89:F1:2C:24:3D:09:A9:ED:C3:E5:B1:E2:29 Certificate issuer: /CN=20f81274f66bde89f12c243d09a9edc3e5b1e229 Certificate serial: 019B2A09D4DFD1F371F00608EBEEF55BCCC7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IPgSdPZr3onxLCQ9Cantw-Wx4ik.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/3ef96e-f8a6-4f9b-9bc7-fe26e899deb8/1/IPgSdPZr3onxLCQ9Cantw-Wx4ik.mft Manifest number: 0DE4 Signing time: Wed 17 Dec 2025 02:00:45 +0000 Manifest this update: Wed 17 Dec 2025 02:00:45 +0000 Manifest next update: Thu 18 Dec 2025 02:00:45 +0000 Files and hashes: 1: IPgSdPZr3onxLCQ9Cantw-Wx4ik.crl (hash: G10KtbPVHJFXqdY1BBFkBvfBH+ncyn5dcaJWciBG+qk=) 2: yvbz_UH1uJZVqDKchWjC2DbH2u0.roa (hash: A7u8f2W74RMi57K78M26+2R7Yi1xzIaztv6J4Ydr5ug=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/3ef96e-f8a6-4f9b-9bc7-fe26e899deb8/1/IPgSdPZr3onxLCQ9Cantw-Wx4ik.crl rsync://rpki.ripe.net/repository/DEFAULT/9b/3ef96e-f8a6-4f9b-9bc7-fe26e899deb8/1/IPgSdPZr3onxLCQ9Cantw-Wx4ik.mft rsync://rpki.ripe.net/repository/DEFAULT/IPgSdPZr3onxLCQ9Cantw-Wx4ik.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 19:20:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2a:09:d4:df:d1:f3:71:f0:06:08:eb:ee:f5:5b:cc:c7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=20f81274f66bde89f12c243d09a9edc3e5b1e229 Validity Not Before: Dec 17 02:00:45 2025 GMT Not After : Dec 18 02:00:45 2025 GMT Subject: CN=41e685cfeb46d34f6944b47fb35f74828bb94dc2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:eb:22:db:6d:0c:c3:9c:90:64:bf:e0:dc:69: 97:6e:77:52:72:2b:42:20:9a:92:03:47:85:74:08: 3d:04:16:0b:65:b1:37:39:0b:ad:f7:c6:74:69:e1: b6:8e:0d:64:06:40:e8:2b:d8:b5:a1:8a:d1:cf:64: 7e:7d:3e:53:7a:05:b5:5f:76:12:79:03:aa:2b:b2: 62:64:09:2b:09:3e:dd:f8:f6:f7:e9:a4:94:70:5a: 20:f6:40:0d:22:30:64:ed:b3:a4:e5:d8:0e:32:4b: 4f:91:f1:f4:3c:51:81:83:b0:6c:96:ee:e0:e9:06: 61:78:a8:3a:b4:3b:1e:72:6c:69:ac:81:ad:85:99: 74:45:7b:b7:b3:18:d4:97:fe:4a:e9:9f:fa:1a:29: 1c:df:3b:95:49:9b:06:a7:f8:0d:49:6a:2e:13:f3: e2:83:9c:81:2e:ee:67:84:8e:f9:60:07:20:c9:31: de:93:82:6b:a2:ad:7f:ce:7e:f1:e6:f8:64:2c:33: db:32:a1:1f:32:b9:05:ee:de:d3:04:e6:17:97:f5: 12:3b:09:04:93:f5:06:bb:c3:e6:1c:e8:68:7d:77: d6:c2:10:61:94:17:c9:7c:37:03:3b:2b:46:6a:7c: 3d:b2:e2:48:4b:ae:05:1d:58:a4:99:44:fe:c1:32: 43:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:E6:85:CF:EB:46:D3:4F:69:44:B4:7F:B3:5F:74:82:8B:B9:4D:C2 X509v3 Authority Key Identifier: keyid:20:F8:12:74:F6:6B:DE:89:F1:2C:24:3D:09:A9:ED:C3:E5:B1:E2:29 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IPgSdPZr3onxLCQ9Cantw-Wx4ik.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/3ef96e-f8a6-4f9b-9bc7-fe26e899deb8/1/IPgSdPZr3onxLCQ9Cantw-Wx4ik.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/3ef96e-f8a6-4f9b-9bc7-fe26e899deb8/1/IPgSdPZr3onxLCQ9Cantw-Wx4ik.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 16:6f:40:c3:3b:e7:13:7e:58:a8:89:89:22:c7:64:81:1a:3c: 3f:78:a3:66:38:2f:20:7a:d5:28:25:1e:2c:e9:74:00:a8:bd: a3:97:84:42:fb:12:76:d2:6c:90:28:f8:75:8d:72:94:07:32: f3:8a:cb:04:52:d8:a2:c9:cc:01:68:af:af:87:22:0b:18:6b: c5:8f:6e:fc:7f:4d:71:06:be:63:f6:31:4a:5d:f8:48:fd:03: d6:9e:e4:a6:10:4f:d6:f8:6c:4c:ca:2a:12:a8:40:8b:ea:2d: 97:13:3e:c6:29:20:29:ff:8d:e8:45:bb:61:a6:2c:c3:f9:52: 63:89:0d:76:74:ba:79:bc:ae:72:12:11:5f:8f:46:77:12:de: 1c:18:01:b3:49:d5:cb:2c:09:1c:d4:14:f1:2a:6d:11:85:22: 81:d3:05:09:2b:76:33:fe:fa:5d:08:78:6e:ae:d9:9f:7a:2e: ae:5b:0d:78:13:80:9a:d8:5d:0b:1d:94:b0:d1:fc:cb:8f:4c: 2e:fc:d7:8e:6b:37:7b:cd:e1:70:e5:1c:9b:0d:a2:4f:9c:df: ec:01:25:a1:9b:5a:74:ab:7b:cb:e1:39:0b:94:1f:8a:43:89: 64:ff:05:d6:80:7c:45:53:2f:00:23:06:d7:30:60:f7:15:06: 57:ed:e0:27 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsqCdTf0fNx8AYI6+71W8zHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIwZjgxMjc0ZjY2YmRlODlmMTJjMjQzZDA5YTllZGMzZTVi MWUyMjkwHhcNMjUxMjE3MDIwMDQ1WhcNMjUxMjE4MDIwMDQ1WjAzMTEwLwYDVQQD Eyg0MWU2ODVjZmViNDZkMzRmNjk0NGI0N2ZiMzVmNzQ4MjhiYjk0ZGMyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmusi220Mw5yQZL/g3GmXbndScitC IJqSA0eFdAg9BBYLZbE3OQut98Z0aeG2jg1kBkDoK9i1oYrRz2R+fT5TegW1X3YS eQOqK7JiZAkrCT7d+Pb36aSUcFog9kANIjBk7bOk5dgOMktPkfH0PFGBg7Bslu7g 6QZheKg6tDsecmxprIGthZl0RXu3sxjUl/5K6Z/6Gikc3zuVSZsGp/gNSWouE/Pi g5yBLu5nhI75YAcgyTHek4Jroq1/zn7x5vhkLDPbMqEfMrkF7t7TBOYXl/USOwkE k/UGu8PmHOhofXfWwhBhlBfJfDcDOytGanw9suJIS64FHVikmUT+wTJDSQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEHmhc/rRtNPaUS0f7NfdIKLuU3CMB8GA1UdIwQY MBaAFCD4EnT2a96J8SwkPQmp7cPlseIpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSVBnU2RQWnIzb254TENROUNhbnR3LVd4NGlrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yi8zZWY5NmUtZjhhNi00ZjliLTliYzct ZmUyNmU4OTlkZWI4LzEvSVBnU2RQWnIzb254TENROUNhbnR3LVd4NGlrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Yi8zZWY5NmUtZjhhNi00ZjliLTliYzctZmUyNmU4OTlkZWI4 LzEvSVBnU2RQWnIzb254TENROUNhbnR3LVd4NGlrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFm9Awzvn E35YqImJIsdkgRo8P3ijZjgvIHrVKCUeLOl0AKi9o5eEQvsSdtJskCj4dY1ylAcy 84rLBFLYosnMAWivr4ciCxhrxY9u/H9NcQa+Y/YxSl34SP0D1p7kphBP1vhsTMoq EqhAi+otlxM+xikgKf+N6EW7YaYsw/lSY4kNdnS6ebyuchIRX49GdxLeHBgBs0nV yywJHNQU8SptEYUigdMFCSt2M/76XQh4bq7Zn3ourlsNeBOAmthdCx2UsNH8y49M LvzXjms3e83hcOUcmw2iT5zf7AEloZtadKt7y+E5C5QfikOJZP8F1oB8RVMvACMG 1zBg9xUGV+3gJw== -----END CERTIFICATE-----Generated at Wed Dec 17 04:15:46 2025 by rpki-client