This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/68ed98-fe3f-4063-91a9-c6250fb6096e/1/i6gkldaDsIyIGoGM0B-kL_9v9tE.mft File: i6gkldaDsIyIGoGM0B-kL_9v9tE.mft (raw, json) Hash identifier: LpFARmUJ8Lh8zQztj7eilrTw+BS+oji/ec0xuHfNBfI= Subject key identifier: AB:50:F4:8D:0E:F3:C1:DB:0A:64:A5:7D:E2:D9:9E:D1:23:85:15:6F Authority key identifier: 8B:A8:24:95:D6:83:B0:8C:88:1A:81:8C:D0:1F:A4:2F:FF:6F:F6:D1 Certificate issuer: /CN=8ba82495d683b08c881a818cd01fa42fff6ff6d1 Certificate serial: 019B39EB61F6270DE3F4B089B4302A461DAD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i6gkldaDsIyIGoGM0B-kL_9v9tE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/68ed98-fe3f-4063-91a9-c6250fb6096e/1/i6gkldaDsIyIGoGM0B-kL_9v9tE.mft Manifest number: 037C Signing time: Sat 20 Dec 2025 04:01:25 +0000 Manifest this update: Sat 20 Dec 2025 04:01:25 +0000 Manifest next update: Sun 21 Dec 2025 04:01:25 +0000 Files and hashes: 1: i6gkldaDsIyIGoGM0B-kL_9v9tE.crl (hash: xwE/Nsvp18QO+86DgbW9IVHpnrvc7j91mR1GArzOUow=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/68ed98-fe3f-4063-91a9-c6250fb6096e/1/i6gkldaDsIyIGoGM0B-kL_9v9tE.crl rsync://rpki.ripe.net/repository/DEFAULT/f3/68ed98-fe3f-4063-91a9-c6250fb6096e/1/i6gkldaDsIyIGoGM0B-kL_9v9tE.mft rsync://rpki.ripe.net/repository/DEFAULT/i6gkldaDsIyIGoGM0B-kL_9v9tE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:39:eb:61:f6:27:0d:e3:f4:b0:89:b4:30:2a:46:1d:ad Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8ba82495d683b08c881a818cd01fa42fff6ff6d1 Validity Not Before: Dec 20 04:01:25 2025 GMT Not After : Dec 21 04:01:25 2025 GMT Subject: CN=ab50f48d0ef3c1db0a64a57de2d99ed12385156f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:86:bb:c9:a0:d6:16:7c:ed:0f:98:04:71:95: 40:ab:0f:2f:5e:e9:31:bb:6f:b3:d7:71:a3:f2:3f: 50:1b:ef:f7:1f:5e:0c:c2:77:b9:c9:d9:56:c0:63: 19:e1:17:cf:b0:12:fa:05:e8:e1:b1:48:5b:a7:36: f6:1a:ac:0d:55:b0:e8:d5:fd:d4:25:38:59:1a:e0: c8:c3:35:b7:d6:e1:79:a0:e1:bf:d7:47:7e:e4:f8: 1a:e2:3f:4e:64:80:e6:5c:ac:60:3f:bd:af:e9:0c: b8:4d:c1:3f:a3:e9:bf:85:41:a5:08:12:4f:5b:ef: ca:63:79:99:b3:07:22:00:c9:9b:d9:97:78:9a:37: c0:32:26:6c:03:d8:5e:79:96:9c:98:cf:3d:ef:9f: 43:a1:8a:ba:8f:36:8d:01:6a:15:ce:7f:33:9a:9a: 7e:36:67:fa:f2:b7:93:5c:bc:23:31:47:78:d4:3a: cb:8f:8a:9d:69:6b:ef:92:b0:0a:03:68:b1:92:da: ca:66:42:e7:fa:b9:c6:82:9c:04:b0:b6:b7:8b:f5: a8:cb:2b:75:7b:fa:98:50:04:0c:e7:56:77:45:d9: 0e:2e:36:18:bf:1a:77:56:c3:d3:d4:37:28:d9:82: 17:ff:69:91:82:b4:f0:fd:67:7f:db:36:07:e9:e2: 91:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:50:F4:8D:0E:F3:C1:DB:0A:64:A5:7D:E2:D9:9E:D1:23:85:15:6F X509v3 Authority Key Identifier: keyid:8B:A8:24:95:D6:83:B0:8C:88:1A:81:8C:D0:1F:A4:2F:FF:6F:F6:D1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i6gkldaDsIyIGoGM0B-kL_9v9tE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/68ed98-fe3f-4063-91a9-c6250fb6096e/1/i6gkldaDsIyIGoGM0B-kL_9v9tE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/68ed98-fe3f-4063-91a9-c6250fb6096e/1/i6gkldaDsIyIGoGM0B-kL_9v9tE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 69:8e:95:b5:e8:3a:82:73:a5:02:01:10:0f:2e:65:8f:c9:db: e9:3d:fb:38:d6:ae:43:9f:82:5c:58:5a:c0:a4:5e:c6:83:23: 1d:e6:bc:cd:d7:99:fb:74:3c:c8:8b:2f:9d:2c:92:e1:f6:61: 81:9b:36:85:6e:9f:05:22:d8:c8:6b:01:c9:73:b3:03:96:0e: c0:fd:9a:3b:38:9a:c4:de:02:b7:cb:71:2e:f4:88:3e:b0:13: c8:ee:96:f6:18:c6:81:b8:3b:13:ce:74:61:82:62:3f:dd:98: 92:2e:0c:ac:8a:37:10:b7:ff:7b:d0:b4:6d:84:41:e3:8c:15: 5f:22:78:e7:38:c0:ca:8b:b1:b5:6b:c0:bc:72:42:08:4d:39: d0:d1:b9:67:e5:ce:e8:79:da:5a:9c:4b:88:b1:c8:6e:1e:09: 36:47:7d:90:05:a4:0b:71:95:9a:ca:8f:62:c6:61:9c:5d:c3: 83:a1:4e:ce:20:c2:16:c3:26:91:28:a1:dc:e0:94:fd:0d:c8: 1e:73:13:41:af:db:ef:75:28:5a:7b:82:a4:aa:b7:81:49:ec: 2f:0d:1a:a5:f0:47:ac:71:a1:8c:b5:2a:78:1a:bd:93:c0:0e: 5b:f1:45:ec:79:fe:1b:77:43:6d:1b:18:aa:d1:05:48:2d:3c: 6a:74:91:f1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs562H2Jw3j9LCJtDAqRh2tMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhiYTgyNDk1ZDY4M2IwOGM4ODFhODE4Y2QwMWZhNDJmZmY2 ZmY2ZDEwHhcNMjUxMjIwMDQwMTI1WhcNMjUxMjIxMDQwMTI1WjAzMTEwLwYDVQQD EyhhYjUwZjQ4ZDBlZjNjMWRiMGE2NGE1N2RlMmQ5OWVkMTIzODUxNTZmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvIa7yaDWFnztD5gEcZVAqw8vXukx u2+z13Gj8j9QG+/3H14Mwne5ydlWwGMZ4RfPsBL6BejhsUhbpzb2GqwNVbDo1f3U JThZGuDIwzW31uF5oOG/10d+5Pga4j9OZIDmXKxgP72v6Qy4TcE/o+m/hUGlCBJP W+/KY3mZswciAMmb2Zd4mjfAMiZsA9heeZacmM89759DoYq6jzaNAWoVzn8zmpp+ Nmf68reTXLwjMUd41DrLj4qdaWvvkrAKA2ixktrKZkLn+rnGgpwEsLa3i/Woyyt1 e/qYUAQM51Z3RdkOLjYYvxp3VsPT1Dco2YIX/2mRgrTw/Wd/2zYH6eKREwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKtQ9I0O88HbCmSlfeLZntEjhRVvMB8GA1UdIwQY MBaAFIuoJJXWg7CMiBqBjNAfpC//b/bRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaTZna2xkYURzSXlJR29HTTBCLWtMXzl2OXRFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMy82OGVkOTgtZmUzZi00MDYzLTkxYTkt YzYyNTBmYjYwOTZlLzEvaTZna2xkYURzSXlJR29HTTBCLWtMXzl2OXRFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMy82OGVkOTgtZmUzZi00MDYzLTkxYTktYzYyNTBmYjYwOTZl LzEvaTZna2xkYURzSXlJR29HTTBCLWtMXzl2OXRFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaY6Vteg6 gnOlAgEQDy5lj8nb6T37ONauQ5+CXFhawKRexoMjHea8zdeZ+3Q8yIsvnSyS4fZh gZs2hW6fBSLYyGsByXOzA5YOwP2aOziaxN4Ct8txLvSIPrATyO6W9hjGgbg7E850 YYJiP92Yki4MrIo3ELf/e9C0bYRB44wVXyJ45zjAyouxtWvAvHJCCE050NG5Z+XO 6HnaWpxLiLHIbh4JNkd9kAWkC3GVmsqPYsZhnF3Dg6FOziDCFsMmkSih3OCU/Q3I HnMTQa/b73UoWnuCpKq3gUnsLw0apfBHrHGhjLUqeBq9k8AOW/FF7Hn+G3dDbRsY qtEFSC08anSR8Q== -----END CERTIFICATE-----Generated at Sat Dec 20 07:39:45 2025 by rpki-client