This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/6bac55-9aaa-4530-8ff4-6027a6839ae4/1/Ic4xHI7WC-8bXk99O4ZBB4FEGKM.mft File: Ic4xHI7WC-8bXk99O4ZBB4FEGKM.mft (raw, json) Hash identifier: V940E0uEITwc4vVqDFMCtmk/wYzAfCl5NeQouuikikI= Subject key identifier: F0:CB:BD:DE:58:57:8C:DC:FD:22:3C:29:F3:17:51:C4:5D:E7:29:10 Authority key identifier: 21:CE:31:1C:8E:D6:0B:EF:1B:5E:4F:7D:3B:86:41:07:81:44:18:A3 Certificate issuer: /CN=21ce311c8ed60bef1b5e4f7d3b864107814418a3 Certificate serial: 019B495E04AEBD2B607F461E8220AAEE604A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ic4xHI7WC-8bXk99O4ZBB4FEGKM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/6bac55-9aaa-4530-8ff4-6027a6839ae4/1/Ic4xHI7WC-8bXk99O4ZBB4FEGKM.mft Manifest number: 0B2F Signing time: Tue 23 Dec 2025 04:00:56 +0000 Manifest this update: Tue 23 Dec 2025 04:00:56 +0000 Manifest next update: Wed 24 Dec 2025 04:00:56 +0000 Files and hashes: 1: Ic4xHI7WC-8bXk99O4ZBB4FEGKM.crl (hash: qUIvNRUOhFdyduwDpPhY6LQ1erngygFInVKqcNJAJeo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/6bac55-9aaa-4530-8ff4-6027a6839ae4/1/Ic4xHI7WC-8bXk99O4ZBB4FEGKM.crl rsync://rpki.ripe.net/repository/DEFAULT/fb/6bac55-9aaa-4530-8ff4-6027a6839ae4/1/Ic4xHI7WC-8bXk99O4ZBB4FEGKM.mft rsync://rpki.ripe.net/repository/DEFAULT/Ic4xHI7WC-8bXk99O4ZBB4FEGKM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 24 Dec 2025 04:00:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:49:5e:04:ae:bd:2b:60:7f:46:1e:82:20:aa:ee:60:4a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=21ce311c8ed60bef1b5e4f7d3b864107814418a3 Validity Not Before: Dec 23 04:00:56 2025 GMT Not After : Dec 24 04:00:56 2025 GMT Subject: CN=f0cbbdde58578cdcfd223c29f31751c45de72910 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:c3:54:42:fe:92:cd:24:00:f1:3a:90:d7:d8: 27:87:28:8c:85:21:4e:eb:8a:d2:cf:29:d2:ba:f4: 84:15:26:2b:c2:d2:51:ff:93:7d:fc:82:2f:dd:9d: 42:da:51:f2:3e:ea:79:42:21:12:52:1e:39:bb:14: 9e:68:e3:78:7d:8e:f4:09:64:20:77:40:03:16:0e: ef:4d:b6:37:75:96:0d:71:56:b0:d0:f3:c2:c6:1e: 5e:6d:c8:58:64:ab:ae:42:51:71:28:66:c5:fc:4d: 0f:c5:20:03:f5:ed:57:b7:53:56:13:48:4a:2e:52: c8:11:2e:d9:42:b6:ff:31:ef:70:c1:92:71:61:a4: 7b:17:11:ad:e3:0e:83:fb:70:42:0d:34:b6:14:b8: b5:fd:96:cc:b7:33:65:7e:83:88:51:4c:f4:99:62: 81:4c:14:2d:c1:72:99:31:45:09:d3:3b:2f:a2:84: 23:08:0d:d6:7c:64:23:8e:18:7f:c9:97:3f:2c:10: 83:a5:5a:87:fe:0b:39:1c:5f:c9:cd:fd:56:ec:35: 92:b5:f4:48:91:1f:95:65:ee:57:34:e5:8f:11:79: 1b:8e:7b:08:90:c6:89:ad:1e:0c:a9:3e:1d:88:cb: 78:c4:48:49:05:99:9d:b0:7b:72:1f:09:bf:68:0b: 52:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:CB:BD:DE:58:57:8C:DC:FD:22:3C:29:F3:17:51:C4:5D:E7:29:10 X509v3 Authority Key Identifier: keyid:21:CE:31:1C:8E:D6:0B:EF:1B:5E:4F:7D:3B:86:41:07:81:44:18:A3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ic4xHI7WC-8bXk99O4ZBB4FEGKM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/6bac55-9aaa-4530-8ff4-6027a6839ae4/1/Ic4xHI7WC-8bXk99O4ZBB4FEGKM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/6bac55-9aaa-4530-8ff4-6027a6839ae4/1/Ic4xHI7WC-8bXk99O4ZBB4FEGKM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 51:0c:4d:e6:db:a9:46:a4:f3:0d:8f:1a:c6:71:8a:d0:6a:b3: ab:f3:7c:bb:4d:b8:25:70:8e:6f:40:83:96:2a:2b:6e:cf:e9: 53:41:bb:1a:80:c6:e9:1d:22:b0:45:04:39:ad:4b:c3:8a:2a: 92:b3:a6:f3:17:c6:76:3f:f3:83:74:e3:86:94:7c:15:53:56: 9a:16:9f:e5:ea:d5:83:7c:d9:97:40:78:cf:00:cf:1a:09:c7: 32:ca:5f:b5:91:1f:e3:3a:17:35:d9:0f:c2:9c:e3:27:1f:cc: 1e:ee:98:e9:86:7e:a0:2d:ed:1c:8c:dd:84:de:9c:93:ed:d9: 06:4b:e8:d3:09:1d:bb:49:db:bb:7e:5a:6b:10:f5:bd:2d:e0: be:f2:29:84:5a:6a:d5:4b:b8:02:13:dc:a2:31:f6:4b:fc:98: af:10:79:5a:96:cd:38:ab:92:91:15:0c:a9:d0:d7:82:05:d4: 62:ac:db:85:1b:d9:93:80:30:38:43:c0:88:59:6f:7b:b2:bd: 2f:f6:67:f7:81:00:ca:50:90:49:74:a6:4d:dd:2f:b4:c2:49: e7:e3:32:ac:fa:bc:2c:41:37:6f:23:79:41:49:f6:86:d2:47: 4e:89:f9:55:d5:88:79:8a:9b:99:b2:38:86:e9:ee:15:66:ca: 53:ec:b3:eb -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtJXgSuvStgf0YegiCq7mBKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIxY2UzMTFjOGVkNjBiZWYxYjVlNGY3ZDNiODY0MTA3ODE0 NDE4YTMwHhcNMjUxMjIzMDQwMDU2WhcNMjUxMjI0MDQwMDU2WjAzMTEwLwYDVQQD EyhmMGNiYmRkZTU4NTc4Y2RjZmQyMjNjMjlmMzE3NTFjNDVkZTcyOTEwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3sNUQv6SzSQA8TqQ19gnhyiMhSFO 64rSzynSuvSEFSYrwtJR/5N9/IIv3Z1C2lHyPup5QiESUh45uxSeaON4fY70CWQg d0ADFg7vTbY3dZYNcVaw0PPCxh5ebchYZKuuQlFxKGbF/E0PxSAD9e1Xt1NWE0hK LlLIES7ZQrb/Me9wwZJxYaR7FxGt4w6D+3BCDTS2FLi1/ZbMtzNlfoOIUUz0mWKB TBQtwXKZMUUJ0zsvooQjCA3WfGQjjhh/yZc/LBCDpVqH/gs5HF/Jzf1W7DWStfRI kR+VZe5XNOWPEXkbjnsIkMaJrR4MqT4diMt4xEhJBZmdsHtyHwm/aAtSKQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPDLvd5YV4zc/SI8KfMXUcRd5ykQMB8GA1UdIwQY MBaAFCHOMRyO1gvvG15PfTuGQQeBRBijMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSWM0eEhJN1dDLThiWGs5OU80WkJCNEZFR0tNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYi82YmFjNTUtOWFhYS00NTMwLThmZjQt NjAyN2E2ODM5YWU0LzEvSWM0eEhJN1dDLThiWGs5OU80WkJCNEZFR0tNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYi82YmFjNTUtOWFhYS00NTMwLThmZjQtNjAyN2E2ODM5YWU0 LzEvSWM0eEhJN1dDLThiWGs5OU80WkJCNEZFR0tNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUQxN5tup RqTzDY8axnGK0Gqzq/N8u024JXCOb0CDliorbs/pU0G7GoDG6R0isEUEOa1Lw4oq krOm8xfGdj/zg3TjhpR8FVNWmhaf5erVg3zZl0B4zwDPGgnHMspftZEf4zoXNdkP wpzjJx/MHu6Y6YZ+oC3tHIzdhN6ck+3ZBkvo0wkdu0nbu35aaxD1vS3gvvIphFpq 1Uu4AhPcojH2S/yYrxB5WpbNOKuSkRUMqdDXggXUYqzbhRvZk4AwOEPAiFlve7K9 L/Zn94EAylCQSXSmTd0vtMJJ5+MyrPq8LEE3byN5QUn2htJHTon5VdWIeYqbmbI4 hunuFWbKU+yz6w== -----END CERTIFICATE-----Generated at Tue Dec 23 10:59:58 2025 by rpki-client