This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/6cac50-3f13-4ef9-8b6d-decec41a71d1/1/20ifvpiZTLwJjIdrpj5WCsF-Wy8.mft File: 20ifvpiZTLwJjIdrpj5WCsF-Wy8.mft (raw, json) Hash identifier: TyhdAZbn5qUYBoedcCcAwuSX7IbvdTtj9+YwCO58x4Y= Subject key identifier: 5D:38:B3:F0:F3:1D:AC:05:20:F1:64:6F:A9:03:95:0F:50:EA:AD:F3 Authority key identifier: DB:48:9F:BE:98:99:4C:BC:09:8C:87:6B:A6:3E:56:0A:C1:7E:5B:2F Certificate issuer: /CN=db489fbe98994cbc098c876ba63e560ac17e5b2f Certificate serial: 019B0EC94F0A6DA9D259D23BBEA279FFC6C1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/20ifvpiZTLwJjIdrpj5WCsF-Wy8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/6cac50-3f13-4ef9-8b6d-decec41a71d1/1/20ifvpiZTLwJjIdrpj5WCsF-Wy8.mft Manifest number: 1326 Signing time: Thu 11 Dec 2025 19:00:32 +0000 Manifest this update: Thu 11 Dec 2025 19:00:32 +0000 Manifest next update: Fri 12 Dec 2025 19:00:32 +0000 Files and hashes: 1: 20ifvpiZTLwJjIdrpj5WCsF-Wy8.crl (hash: OuHgpvcpXVJsNffitmzQ9FwUk8N23KrfyQpSnShqYUQ=) 2: O7dVmdulXoSGFdWUdpvv3bkJxU8.roa (hash: hmlWALQMbQbIcNvaSImT+aYBz0m3Sm9TMeYp/ubqBkw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/6cac50-3f13-4ef9-8b6d-decec41a71d1/1/20ifvpiZTLwJjIdrpj5WCsF-Wy8.crl rsync://rpki.ripe.net/repository/DEFAULT/d1/6cac50-3f13-4ef9-8b6d-decec41a71d1/1/20ifvpiZTLwJjIdrpj5WCsF-Wy8.mft rsync://rpki.ripe.net/repository/DEFAULT/20ifvpiZTLwJjIdrpj5WCsF-Wy8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 19:00:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0e:c9:4f:0a:6d:a9:d2:59:d2:3b:be:a2:79:ff:c6:c1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=db489fbe98994cbc098c876ba63e560ac17e5b2f Validity Not Before: Dec 11 19:00:32 2025 GMT Not After : Dec 12 19:00:32 2025 GMT Subject: CN=5d38b3f0f31dac0520f1646fa903950f50eaadf3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:b9:15:08:f8:2e:e9:a5:4a:13:09:31:ed:c1: 4e:e5:06:83:fd:d4:be:b0:e1:e1:44:4d:a7:c2:dc: 1b:74:5e:02:9f:c1:82:eb:bf:90:38:19:3c:41:e0: a9:4d:38:03:87:ae:fd:d4:5a:f9:08:13:3b:ba:eb: 4b:7a:a7:67:74:1e:b6:c2:59:08:44:37:45:05:cd: 5b:1a:82:54:9e:47:b6:e1:5e:c8:aa:95:53:fd:98: cc:9e:09:2a:fe:a6:85:d1:5d:0f:19:79:88:42:e8: 99:5c:02:b9:79:31:3c:4b:74:a6:ac:bd:a4:b6:8d: e1:bf:a8:49:cf:92:49:f5:29:f4:85:df:0f:3f:18: 33:f0:38:0a:d9:12:86:cf:31:40:7b:70:57:57:09: 89:99:dc:8c:46:34:3a:bf:18:10:32:c5:5e:11:91: 50:35:5d:b2:b1:66:91:c2:df:64:1f:1b:1e:45:fc: 90:d6:a6:58:0f:88:f0:9f:30:87:4d:4a:f8:bd:bc: 3f:3c:d2:60:c8:f4:d3:0f:25:4a:86:8a:f2:20:34: a4:1a:12:e6:2d:69:45:d4:28:22:37:34:25:51:8b: 15:30:d5:12:de:48:e2:d9:61:bc:12:cb:57:14:3e: fa:f7:e9:9d:14:f1:ab:bd:a8:b8:6a:4c:fe:28:88: 39:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:38:B3:F0:F3:1D:AC:05:20:F1:64:6F:A9:03:95:0F:50:EA:AD:F3 X509v3 Authority Key Identifier: keyid:DB:48:9F:BE:98:99:4C:BC:09:8C:87:6B:A6:3E:56:0A:C1:7E:5B:2F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/20ifvpiZTLwJjIdrpj5WCsF-Wy8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/6cac50-3f13-4ef9-8b6d-decec41a71d1/1/20ifvpiZTLwJjIdrpj5WCsF-Wy8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/6cac50-3f13-4ef9-8b6d-decec41a71d1/1/20ifvpiZTLwJjIdrpj5WCsF-Wy8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 69:70:b9:35:99:42:bc:bf:9c:48:45:f3:88:fd:03:f1:ba:37: 03:c1:69:28:90:01:6c:6e:d2:68:a8:20:7c:b4:ad:57:fd:73: 32:d6:00:83:ed:a7:13:cb:9c:0f:ac:1e:b2:48:6b:4a:46:62: 5e:53:59:43:93:67:ee:64:c5:45:27:e5:1b:7f:99:2d:3a:7e: 66:b5:d8:7e:2c:05:0b:9f:ee:71:4f:4d:7d:d9:b8:c8:30:e4: ef:56:c7:34:81:12:27:d8:df:a8:c4:0c:a6:61:55:42:55:40: a9:b5:a9:52:2f:87:62:27:ce:c7:7e:43:1b:45:9b:32:89:85: dc:8e:ce:a9:91:ce:06:ee:9d:04:fd:51:33:35:c4:19:bc:15: 38:17:3d:64:f4:57:7c:c6:28:2e:14:c6:03:c0:34:1e:49:de: 1f:a4:89:30:4e:40:13:c7:30:90:37:62:3c:bc:33:d2:48:d9: 10:94:bd:e7:36:37:07:b0:1c:2c:04:e8:9b:ba:75:51:96:9f: d0:37:8b:ae:7a:18:5b:37:4f:87:48:1b:ed:30:1f:a3:96:d8: 47:85:d1:a1:26:2c:23:d5:4d:30:72:5d:47:6b:1f:7c:3a:5b: 68:58:0e:b2:f6:c8:34:89:c4:ba:29:e7:f3:2e:96:34:cc:0f: 50:1d:ac:0c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsOyU8KbanSWdI7vqJ5/8bBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRiNDg5ZmJlOTg5OTRjYmMwOThjODc2YmE2M2U1NjBhYzE3 ZTViMmYwHhcNMjUxMjExMTkwMDMyWhcNMjUxMjEyMTkwMDMyWjAzMTEwLwYDVQQD Eyg1ZDM4YjNmMGYzMWRhYzA1MjBmMTY0NmZhOTAzOTUwZjUwZWFhZGYzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxbkVCPgu6aVKEwkx7cFO5QaD/dS+ sOHhRE2nwtwbdF4Cn8GC67+QOBk8QeCpTTgDh6791Fr5CBM7uutLeqdndB62wlkI RDdFBc1bGoJUnke24V7IqpVT/ZjMngkq/qaF0V0PGXmIQuiZXAK5eTE8S3SmrL2k to3hv6hJz5JJ9Sn0hd8PPxgz8DgK2RKGzzFAe3BXVwmJmdyMRjQ6vxgQMsVeEZFQ NV2ysWaRwt9kHxseRfyQ1qZYD4jwnzCHTUr4vbw/PNJgyPTTDyVKhoryIDSkGhLm LWlF1CgiNzQlUYsVMNUS3kji2WG8EstXFD769+mdFPGrvai4akz+KIg5lQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFF04s/DzHawFIPFkb6kDlQ9Q6q3zMB8GA1UdIwQY MBaAFNtIn76YmUy8CYyHa6Y+VgrBflsvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMjBpZnZwaVpUTHdKaklkcnBqNVdDc0YtV3k4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMS82Y2FjNTAtM2YxMy00ZWY5LThiNmQt ZGVjZWM0MWE3MWQxLzEvMjBpZnZwaVpUTHdKaklkcnBqNVdDc0YtV3k4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMS82Y2FjNTAtM2YxMy00ZWY5LThiNmQtZGVjZWM0MWE3MWQx LzEvMjBpZnZwaVpUTHdKaklkcnBqNVdDc0YtV3k4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaXC5NZlC vL+cSEXziP0D8bo3A8FpKJABbG7SaKggfLStV/1zMtYAg+2nE8ucD6weskhrSkZi XlNZQ5Nn7mTFRSflG3+ZLTp+ZrXYfiwFC5/ucU9Nfdm4yDDk71bHNIESJ9jfqMQM pmFVQlVAqbWpUi+HYifOx35DG0WbMomF3I7OqZHOBu6dBP1RMzXEGbwVOBc9ZPRX fMYoLhTGA8A0HkneH6SJME5AE8cwkDdiPLwz0kjZEJS95zY3B7AcLATom7p1UZaf 0DeLrnoYWzdPh0gb7TAfo5bYR4XRoSYsI9VNMHJdR2sffDpbaFgOsvbINInEuinn 8y6WNMwPUB2sDA== -----END CERTIFICATE-----Generated at Fri Dec 12 02:51:37 2025 by rpki-client