This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/2eb760-e94a-4ed0-85ff-74bf97c964df/1/IcABb7bLY4np0FbTkmLrRS-ZO9g.mft File: IcABb7bLY4np0FbTkmLrRS-ZO9g.mft (raw, json) Hash identifier: lpf3umgnXl8F953kDtzlil6QJmHwvL2Sp0rvv4+Eym4= Subject key identifier: 84:F3:2F:35:B2:B4:74:83:2C:91:13:64:8A:B4:44:F9:1A:C2:FE:8B Authority key identifier: 21:C0:01:6F:B6:CB:63:89:E9:D0:56:D3:92:62:EB:45:2F:99:3B:D8 Certificate issuer: /CN=21c0016fb6cb6389e9d056d39262eb452f993bd8 Certificate serial: 019B5ABF847204F1B324B0D1B69B71018895 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IcABb7bLY4np0FbTkmLrRS-ZO9g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/2eb760-e94a-4ed0-85ff-74bf97c964df/1/IcABb7bLY4np0FbTkmLrRS-ZO9g.mft Manifest number: 53 Signing time: Fri 26 Dec 2025 13:00:59 +0000 Manifest this update: Fri 26 Dec 2025 13:00:59 +0000 Manifest next update: Sat 27 Dec 2025 13:00:59 +0000 Files and hashes: 1: IcABb7bLY4np0FbTkmLrRS-ZO9g.crl (hash: nqpWfowbtvQcCLzKfoYSjauO2myXi0ceI6DT8nKxtA8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/2eb760-e94a-4ed0-85ff-74bf97c964df/1/IcABb7bLY4np0FbTkmLrRS-ZO9g.crl rsync://rpki.ripe.net/repository/DEFAULT/e1/2eb760-e94a-4ed0-85ff-74bf97c964df/1/IcABb7bLY4np0FbTkmLrRS-ZO9g.mft rsync://rpki.ripe.net/repository/DEFAULT/IcABb7bLY4np0FbTkmLrRS-ZO9g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5a:bf:84:72:04:f1:b3:24:b0:d1:b6:9b:71:01:88:95 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=21c0016fb6cb6389e9d056d39262eb452f993bd8 Validity Not Before: Dec 26 13:00:59 2025 GMT Not After : Dec 27 13:00:59 2025 GMT Subject: CN=84f32f35b2b474832c9113648ab444f91ac2fe8b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:9e:52:9f:ba:eb:d7:97:2a:2a:61:46:cb:87: e5:e1:4d:3e:d0:1f:29:a0:68:cc:54:0e:6d:50:55: f6:26:0f:b1:fa:f8:36:c5:f0:e3:9a:f5:6a:23:ad: 57:21:f4:25:11:24:4c:27:78:42:85:1b:4a:4f:9b: 57:12:88:14:a7:18:33:72:40:85:7a:ae:cb:a8:b5: 58:5d:55:6c:ff:3a:28:96:70:96:ed:ed:eb:41:ee: e6:81:fd:6a:1b:70:3d:22:77:e0:95:41:95:7c:3a: 1c:57:9e:78:7f:b2:2b:36:28:5f:fb:34:21:54:8f: e9:46:5f:41:ff:43:19:dd:88:58:ec:c1:8a:82:4b: ef:2a:2e:ba:4d:b5:4b:f1:33:78:b5:31:6d:16:81: ed:86:c3:15:d6:cf:e3:06:33:0c:42:b7:c3:ba:76: 72:47:8a:3e:02:13:69:b2:5f:f5:c7:d4:44:01:ec: 2d:a4:11:c6:df:c2:4b:7b:84:7a:46:43:e0:d5:3e: c4:66:58:55:7f:18:6c:06:90:82:90:f7:ea:84:93: cd:16:d5:9c:df:c3:39:65:9b:43:d9:33:08:16:28: be:73:63:49:8e:4b:73:0e:a6:81:dd:cd:35:d8:80: 3e:ce:e1:29:67:5e:15:90:da:c3:8a:4b:19:d6:57: 7f:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:F3:2F:35:B2:B4:74:83:2C:91:13:64:8A:B4:44:F9:1A:C2:FE:8B X509v3 Authority Key Identifier: keyid:21:C0:01:6F:B6:CB:63:89:E9:D0:56:D3:92:62:EB:45:2F:99:3B:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IcABb7bLY4np0FbTkmLrRS-ZO9g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/2eb760-e94a-4ed0-85ff-74bf97c964df/1/IcABb7bLY4np0FbTkmLrRS-ZO9g.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/2eb760-e94a-4ed0-85ff-74bf97c964df/1/IcABb7bLY4np0FbTkmLrRS-ZO9g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4e:51:7c:7c:95:64:6e:81:ca:49:96:f7:5c:2a:6b:38:ba:a5: e1:4f:1c:07:a6:fb:2b:44:4a:ea:a9:18:91:1e:32:ae:ca:47: eb:75:cc:e6:ae:81:cc:36:dd:89:4f:b7:84:9a:f8:e2:89:ed: c1:4d:4f:dc:08:e4:cb:08:d4:9e:89:3a:fa:54:3b:70:20:e0: ae:ec:b9:14:a6:01:d3:08:aa:c4:ce:74:d5:d7:31:a4:51:c0: 70:e2:e5:a7:be:18:4b:97:90:ff:23:4f:d9:78:9e:eb:ae:f5: 31:d2:35:2c:9f:22:8f:c6:7e:fe:37:3a:0e:cf:bb:21:64:d3: 76:38:01:45:df:5a:cc:32:1c:61:38:32:8c:cc:dd:30:44:5c: 7d:2b:12:dc:51:56:2f:70:12:d2:e8:d4:7e:79:a6:e6:58:ed: 88:66:60:09:4a:05:46:83:82:d6:61:09:3e:59:73:87:cb:8a: 00:d1:da:a1:17:9d:35:83:47:b4:2f:c3:59:c7:67:63:fc:22: 35:d5:a9:2c:31:00:33:66:63:f9:d5:9a:ff:11:57:68:ae:bc: 6f:72:6a:ee:cf:ab:78:a6:c2:be:78:8c:c8:d3:2f:56:e4:52: 2e:7c:56:9a:e7:df:91:a8:7e:c9:bc:ad:08:2f:2a:f4:e8:4d: 5a:60:93:5a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtav4RyBPGzJLDRtptxAYiVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIxYzAwMTZmYjZjYjYzODllOWQwNTZkMzkyNjJlYjQ1MmY5 OTNiZDgwHhcNMjUxMjI2MTMwMDU5WhcNMjUxMjI3MTMwMDU5WjAzMTEwLwYDVQQD Eyg4NGYzMmYzNWIyYjQ3NDgzMmM5MTEzNjQ4YWI0NDRmOTFhYzJmZThiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArZ5Sn7rr15cqKmFGy4fl4U0+0B8p oGjMVA5tUFX2Jg+x+vg2xfDjmvVqI61XIfQlESRMJ3hChRtKT5tXEogUpxgzckCF eq7LqLVYXVVs/zoolnCW7e3rQe7mgf1qG3A9InfglUGVfDocV554f7IrNihf+zQh VI/pRl9B/0MZ3YhY7MGKgkvvKi66TbVL8TN4tTFtFoHthsMV1s/jBjMMQrfDunZy R4o+AhNpsl/1x9REAewtpBHG38JLe4R6RkPg1T7EZlhVfxhsBpCCkPfqhJPNFtWc 38M5ZZtD2TMIFii+c2NJjktzDqaB3c012IA+zuEpZ14VkNrDiksZ1ld/1QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFITzLzWytHSDLJETZIq0RPkawv6LMB8GA1UdIwQY MBaAFCHAAW+2y2OJ6dBW05Ji60UvmTvYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSWNBQmI3YkxZNG5wMEZiVGttTHJSUy1aTzlnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMS8yZWI3NjAtZTk0YS00ZWQwLTg1ZmYt NzRiZjk3Yzk2NGRmLzEvSWNBQmI3YkxZNG5wMEZiVGttTHJSUy1aTzlnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMS8yZWI3NjAtZTk0YS00ZWQwLTg1ZmYtNzRiZjk3Yzk2NGRm LzEvSWNBQmI3YkxZNG5wMEZiVGttTHJSUy1aTzlnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATlF8fJVk boHKSZb3XCprOLql4U8cB6b7K0RK6qkYkR4yrspH63XM5q6BzDbdiU+3hJr44ont wU1P3AjkywjUnok6+lQ7cCDgruy5FKYB0wiqxM501dcxpFHAcOLlp74YS5eQ/yNP 2Xie6671MdI1LJ8ij8Z+/jc6Ds+7IWTTdjgBRd9azDIcYTgyjMzdMERcfSsS3FFW L3AS0ujUfnmm5ljtiGZgCUoFRoOC1mEJPllzh8uKANHaoRedNYNHtC/DWcdnY/wi NdWpLDEAM2Zj+dWa/xFXaK68b3Jq7s+reKbCvniMyNMvVuRSLnxWmuffkah+ybyt CC8q9OhNWmCTWg== -----END CERTIFICATE-----Generated at Fri Dec 26 15:41:46 2025 by rpki-client