This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/fd22ad-f792-475c-8bae-26024e2a5f3e/1/ije4wOFZfNHaZcmgf6wFrNhEzGo.mft File: ije4wOFZfNHaZcmgf6wFrNhEzGo.mft (raw, json) Hash identifier: I7i6y96+7g/Clxk4XmwAGZ4Qi56u91AlwlwtVhJikfM= Subject key identifier: CF:3E:DE:FC:24:40:C2:DD:E2:1C:AB:D0:20:FC:1A:D6:EF:76:5C:C0 Authority key identifier: 8A:37:B8:C0:E1:59:7C:D1:DA:65:C9:A0:7F:AC:05:AC:D8:44:CC:6A Certificate issuer: /CN=8a37b8c0e1597cd1da65c9a07fac05acd844cc6a Certificate serial: 019B5976603B2952FAB5A3563F12056B3BCC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ije4wOFZfNHaZcmgf6wFrNhEzGo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/fd22ad-f792-475c-8bae-26024e2a5f3e/1/ije4wOFZfNHaZcmgf6wFrNhEzGo.mft Manifest number: 1283 Signing time: Fri 26 Dec 2025 07:01:28 +0000 Manifest this update: Fri 26 Dec 2025 07:01:28 +0000 Manifest next update: Sat 27 Dec 2025 07:01:28 +0000 Files and hashes: 1: ije4wOFZfNHaZcmgf6wFrNhEzGo.crl (hash: ATZ4xPsRBe8AwfpuwrDFchatX5C1jSXsfvBhF8v81tg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/fd22ad-f792-475c-8bae-26024e2a5f3e/1/ije4wOFZfNHaZcmgf6wFrNhEzGo.crl rsync://rpki.ripe.net/repository/DEFAULT/bb/fd22ad-f792-475c-8bae-26024e2a5f3e/1/ije4wOFZfNHaZcmgf6wFrNhEzGo.mft rsync://rpki.ripe.net/repository/DEFAULT/ije4wOFZfNHaZcmgf6wFrNhEzGo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:76:60:3b:29:52:fa:b5:a3:56:3f:12:05:6b:3b:cc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8a37b8c0e1597cd1da65c9a07fac05acd844cc6a Validity Not Before: Dec 26 07:01:28 2025 GMT Not After : Dec 27 07:01:28 2025 GMT Subject: CN=cf3edefc2440c2dde21cabd020fc1ad6ef765cc0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:1f:72:71:45:d2:4f:9d:0b:26:55:92:b4:fc: 85:81:08:c7:d1:77:d0:eb:e5:0d:68:73:48:31:64: 55:cf:de:4a:fb:33:fb:2b:c4:c0:f4:5c:cb:54:3b: d4:96:3e:29:a8:db:7c:6a:a4:9f:dd:eb:2c:50:96: 40:91:5d:2b:ed:34:15:58:d3:11:8a:f9:aa:fd:3d: 5e:25:71:6f:98:80:66:4b:0b:54:c1:bf:2a:5d:3b: e2:12:5b:44:ef:f3:70:a1:d4:fd:cf:c3:23:c7:6f: 16:b9:7e:5f:ed:91:43:58:d1:e5:21:c5:b9:82:f8: b6:3e:05:e5:c4:3f:24:62:85:81:4c:6e:d1:51:dd: be:62:83:6a:e6:db:8c:eb:73:4f:0c:f5:51:c9:37: 93:e8:66:d6:c0:e6:bd:00:55:76:61:53:ef:43:c9: e5:7b:55:36:f0:7b:02:a0:e7:72:d5:e9:e1:58:ed: bf:7a:c6:49:8e:6e:38:5e:44:34:c8:23:fd:7e:96: 9e:7c:19:21:3c:54:31:d8:84:0e:d7:be:c4:75:bf: 7c:48:92:b2:34:5d:39:95:7c:ff:e2:2f:41:61:41: eb:68:ce:99:3c:c3:56:4a:a4:93:16:95:2a:1e:1f: c7:c9:1f:4f:cf:70:df:92:96:61:27:a2:f6:f8:0f: 91:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:3E:DE:FC:24:40:C2:DD:E2:1C:AB:D0:20:FC:1A:D6:EF:76:5C:C0 X509v3 Authority Key Identifier: keyid:8A:37:B8:C0:E1:59:7C:D1:DA:65:C9:A0:7F:AC:05:AC:D8:44:CC:6A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ije4wOFZfNHaZcmgf6wFrNhEzGo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/fd22ad-f792-475c-8bae-26024e2a5f3e/1/ije4wOFZfNHaZcmgf6wFrNhEzGo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/fd22ad-f792-475c-8bae-26024e2a5f3e/1/ije4wOFZfNHaZcmgf6wFrNhEzGo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 28:ad:4d:83:83:3d:31:01:d4:41:d0:11:21:d9:70:a0:22:50: 4c:b7:4a:b3:9a:11:5a:66:43:cd:e0:df:07:b8:7a:02:30:c5: 33:e3:99:d4:ad:2c:f2:45:3e:90:71:12:47:ef:0f:70:04:ae: 05:1b:11:0d:ff:6e:97:b2:c5:66:a6:52:39:81:b5:cd:c4:9f: a3:15:fc:92:25:ac:c4:dd:c4:9e:c6:13:e4:70:6c:b6:fb:f0: 4c:e6:2b:76:3b:ec:ff:33:1b:df:b6:c8:5b:a4:6a:b3:07:7d: 12:e3:2b:6b:12:85:b9:9c:9c:d3:32:f6:3e:41:0a:9e:65:8a: f9:64:9d:68:98:88:3e:34:ca:3c:bb:b5:ba:88:85:7d:65:d2: 1e:b9:70:12:87:c8:46:2b:d9:91:5d:f1:e8:29:38:85:06:4c: 70:9a:e3:88:11:18:c6:af:be:ea:b3:3a:58:ed:4c:ab:e4:f5: d1:78:ca:eb:74:f4:41:dd:8a:59:2e:fe:4f:16:ba:84:70:50: 0e:ab:81:67:35:30:0c:c9:a5:cd:46:5a:a2:7b:2a:94:42:a0: 29:2c:f2:2c:13:48:60:a5:95:44:f8:78:39:dc:b9:19:df:f6: 47:46:b0:de:51:40:64:a0:a5:ee:0f:b5:89:7c:4c:7e:38:b9: da:c8:be:18 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtZdmA7KVL6taNWPxIFazvMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhhMzdiOGMwZTE1OTdjZDFkYTY1YzlhMDdmYWMwNWFjZDg0 NGNjNmEwHhcNMjUxMjI2MDcwMTI4WhcNMjUxMjI3MDcwMTI4WjAzMTEwLwYDVQQD EyhjZjNlZGVmYzI0NDBjMmRkZTIxY2FiZDAyMGZjMWFkNmVmNzY1Y2MwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtx9ycUXST50LJlWStPyFgQjH0XfQ 6+UNaHNIMWRVz95K+zP7K8TA9FzLVDvUlj4pqNt8aqSf3essUJZAkV0r7TQVWNMR ivmq/T1eJXFvmIBmSwtUwb8qXTviEltE7/NwodT9z8Mjx28WuX5f7ZFDWNHlIcW5 gvi2PgXlxD8kYoWBTG7RUd2+YoNq5tuM63NPDPVRyTeT6GbWwOa9AFV2YVPvQ8nl e1U28HsCoOdy1enhWO2/esZJjm44XkQ0yCP9fpaefBkhPFQx2IQO177Edb98SJKy NF05lXz/4i9BYUHraM6ZPMNWSqSTFpUqHh/HyR9Pz3DfkpZhJ6L2+A+RPwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFM8+3vwkQMLd4hyr0CD8GtbvdlzAMB8GA1UdIwQY MBaAFIo3uMDhWXzR2mXJoH+sBazYRMxqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaWplNHdPRlpmTkhhWmNtZ2Y2d0ZyTmhFekdvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYi9mZDIyYWQtZjc5Mi00NzVjLThiYWUt MjYwMjRlMmE1ZjNlLzEvaWplNHdPRlpmTkhhWmNtZ2Y2d0ZyTmhFekdvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYi9mZDIyYWQtZjc5Mi00NzVjLThiYWUtMjYwMjRlMmE1ZjNl LzEvaWplNHdPRlpmTkhhWmNtZ2Y2d0ZyTmhFekdvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKK1Ng4M9 MQHUQdARIdlwoCJQTLdKs5oRWmZDzeDfB7h6AjDFM+OZ1K0s8kU+kHESR+8PcASu BRsRDf9ul7LFZqZSOYG1zcSfoxX8kiWsxN3EnsYT5HBstvvwTOYrdjvs/zMb37bI W6Rqswd9EuMraxKFuZyc0zL2PkEKnmWK+WSdaJiIPjTKPLu1uoiFfWXSHrlwEofI RivZkV3x6Ck4hQZMcJrjiBEYxq++6rM6WO1Mq+T10XjK63T0Qd2KWS7+Txa6hHBQ DquBZzUwDMmlzUZaonsqlEKgKSzyLBNIYKWVRPh4Ody5Gd/2R0aw3lFAZKCl7g+1 iXxMfji52si+GA== -----END CERTIFICATE-----Generated at Fri Dec 26 14:07:12 2025 by rpki-client