This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/4d3d98-51f2-4d95-bc37-2d32426e141d/1/itC83pWbIDJiNJG_MnmtRanKC-g.mft File: itC83pWbIDJiNJG_MnmtRanKC-g.mft (raw, json) Hash identifier: YfHtqPFIjPuhA+8lg+qYII9S2nr1ALK05E/cKXIx0J8= Subject key identifier: 2D:65:0E:C0:4C:B5:85:11:74:31:95:DF:34:7D:C6:BC:F6:1C:90:B1 Authority key identifier: 8A:D0:BC:DE:95:9B:20:32:62:34:91:BF:32:79:AD:45:A9:CA:0B:E8 Certificate issuer: /CN=8ad0bcde959b2032623491bf3279ad45a9ca0be8 Certificate serial: 019B5A8882F6B1E72A234AB666BD5578ECB1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/itC83pWbIDJiNJG_MnmtRanKC-g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/4d3d98-51f2-4d95-bc37-2d32426e141d/1/itC83pWbIDJiNJG_MnmtRanKC-g.mft Manifest number: 0238 Signing time: Fri 26 Dec 2025 12:00:54 +0000 Manifest this update: Fri 26 Dec 2025 12:00:54 +0000 Manifest next update: Sat 27 Dec 2025 12:00:54 +0000 Files and hashes: 1: itC83pWbIDJiNJG_MnmtRanKC-g.crl (hash: 5HZXxXZlL9bo8Veef5j+T5tOvhOgc2oA0H7+y9CnSok=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/4d3d98-51f2-4d95-bc37-2d32426e141d/1/itC83pWbIDJiNJG_MnmtRanKC-g.crl rsync://rpki.ripe.net/repository/DEFAULT/c0/4d3d98-51f2-4d95-bc37-2d32426e141d/1/itC83pWbIDJiNJG_MnmtRanKC-g.mft rsync://rpki.ripe.net/repository/DEFAULT/itC83pWbIDJiNJG_MnmtRanKC-g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5a:88:82:f6:b1:e7:2a:23:4a:b6:66:bd:55:78:ec:b1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8ad0bcde959b2032623491bf3279ad45a9ca0be8 Validity Not Before: Dec 26 12:00:54 2025 GMT Not After : Dec 27 12:00:54 2025 GMT Subject: CN=2d650ec04cb58511743195df347dc6bcf61c90b1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:50:28:e4:5d:bf:84:a9:d0:57:f9:79:46:d3: ae:ef:d6:63:71:87:52:56:2b:52:20:55:c8:db:08: 6e:1c:b2:5f:48:33:e6:5a:d8:b9:b8:70:16:c7:29: 08:21:5c:ae:ee:e6:f1:cf:65:9e:dd:4d:20:14:c0: c7:fe:a0:ed:7a:a0:5c:6e:9d:46:a0:b3:94:73:14: c1:9d:0c:7f:e8:f4:c6:b2:7e:62:76:23:a4:cd:7f: 7b:db:35:53:04:a7:e4:8a:34:a6:5c:04:93:73:89: 2f:fa:29:76:49:d1:1d:67:fe:cf:ab:22:1b:15:34: b3:20:01:9b:5f:21:31:54:0c:89:bb:33:4e:a1:45: c1:97:d8:c7:b1:ce:80:c8:b0:8a:89:79:8e:a3:76: 0b:18:9c:5a:c2:71:5d:d2:07:e7:89:39:c1:4e:26: 5e:0a:5d:bc:eb:13:ce:3b:8f:c8:aa:8d:a5:b6:76: 4f:87:4f:6a:a3:84:9c:db:fa:99:34:d3:d2:1b:34: c9:64:93:02:c4:61:36:cb:65:d1:cd:10:0c:7e:03: cc:c0:8d:89:a2:50:0b:a1:e1:bb:f7:14:63:fa:f8: 0e:7c:bc:c7:09:71:65:0f:50:ba:d9:62:30:56:ee: 47:7a:8c:d7:54:a4:aa:7d:cc:1c:eb:17:45:75:63: 28:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:65:0E:C0:4C:B5:85:11:74:31:95:DF:34:7D:C6:BC:F6:1C:90:B1 X509v3 Authority Key Identifier: keyid:8A:D0:BC:DE:95:9B:20:32:62:34:91:BF:32:79:AD:45:A9:CA:0B:E8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/itC83pWbIDJiNJG_MnmtRanKC-g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/4d3d98-51f2-4d95-bc37-2d32426e141d/1/itC83pWbIDJiNJG_MnmtRanKC-g.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/4d3d98-51f2-4d95-bc37-2d32426e141d/1/itC83pWbIDJiNJG_MnmtRanKC-g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 23:da:99:74:ec:b0:80:59:f4:41:f0:c9:c9:c2:4f:82:7b:c9: 7d:29:2f:40:99:45:30:89:08:88:d3:37:c0:2b:d9:ce:5d:93: 13:63:19:12:50:5c:20:7a:f5:1d:4a:fa:be:db:c6:96:ea:02: b5:d5:8f:07:11:ea:2f:f7:e0:00:7f:82:a4:ce:0c:32:ae:2d: 91:cd:09:00:ff:b6:01:85:3f:e1:ad:c1:4a:5e:ba:90:ca:99: 7d:c0:08:0f:7c:a1:e3:7f:9c:85:56:43:a9:fa:34:5a:6b:0d: ce:a0:12:8c:e7:aa:6c:b8:00:56:f7:fb:e4:2e:a9:8c:0a:53: 5a:6d:4a:69:99:51:84:0b:c8:22:9e:31:8f:16:12:8a:a9:9a: 0b:6a:7e:2a:0a:ce:47:e1:2a:13:6f:b4:5b:37:eb:77:c8:52: b8:40:9f:ae:97:20:61:83:84:b9:15:28:ce:e3:dc:ad:d0:b7: 58:3c:97:15:a4:57:af:e3:45:1b:20:b5:9f:60:c3:06:3d:ca: f1:41:a4:7a:e1:94:ba:f9:43:ca:4f:81:78:cc:6d:66:d3:98: 53:c8:30:c6:9f:3f:99:f2:40:2e:6d:c4:61:3c:34:1d:c7:aa: 3e:76:36:85:3e:a3:41:a6:57:63:60:f9:38:35:d5:f1:d4:0c: c1:65:43:34 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtaiIL2secqI0q2Zr1VeOyxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhhZDBiY2RlOTU5YjIwMzI2MjM0OTFiZjMyNzlhZDQ1YTlj YTBiZTgwHhcNMjUxMjI2MTIwMDU0WhcNMjUxMjI3MTIwMDU0WjAzMTEwLwYDVQQD EygyZDY1MGVjMDRjYjU4NTExNzQzMTk1ZGYzNDdkYzZiY2Y2MWM5MGIxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8VAo5F2/hKnQV/l5RtOu79ZjcYdS VitSIFXI2whuHLJfSDPmWti5uHAWxykIIVyu7ubxz2We3U0gFMDH/qDteqBcbp1G oLOUcxTBnQx/6PTGsn5idiOkzX972zVTBKfkijSmXASTc4kv+il2SdEdZ/7PqyIb FTSzIAGbXyExVAyJuzNOoUXBl9jHsc6AyLCKiXmOo3YLGJxawnFd0gfniTnBTiZe Cl286xPOO4/Iqo2ltnZPh09qo4Sc2/qZNNPSGzTJZJMCxGE2y2XRzRAMfgPMwI2J olALoeG79xRj+vgOfLzHCXFlD1C62WIwVu5HeozXVKSqfcwc6xdFdWMo/wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFC1lDsBMtYURdDGV3zR9xrz2HJCxMB8GA1UdIwQY MBaAFIrQvN6VmyAyYjSRvzJ5rUWpygvoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaXRDODNwV2JJREppTkpHX01ubXRSYW5LQy1nLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC80ZDNkOTgtNTFmMi00ZDk1LWJjMzct MmQzMjQyNmUxNDFkLzEvaXRDODNwV2JJREppTkpHX01ubXRSYW5LQy1nLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMC80ZDNkOTgtNTFmMi00ZDk1LWJjMzctMmQzMjQyNmUxNDFk LzEvaXRDODNwV2JJREppTkpHX01ubXRSYW5LQy1nLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAI9qZdOyw gFn0QfDJycJPgnvJfSkvQJlFMIkIiNM3wCvZzl2TE2MZElBcIHr1HUr6vtvGluoC tdWPBxHqL/fgAH+CpM4MMq4tkc0JAP+2AYU/4a3BSl66kMqZfcAID3yh43+chVZD qfo0WmsNzqASjOeqbLgAVvf75C6pjApTWm1KaZlRhAvIIp4xjxYSiqmaC2p+KgrO R+EqE2+0Wzfrd8hSuECfrpcgYYOEuRUozuPcrdC3WDyXFaRXr+NFGyC1n2DDBj3K 8UGkeuGUuvlDyk+BeMxtZtOYU8gwxp8/mfJALm3EYTw0HceqPnY2hT6jQaZXY2D5 ODXV8dQMwWVDNA== -----END CERTIFICATE-----Generated at Fri Dec 26 14:07:22 2025 by rpki-client