This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/9a6cf5-1342-4c3b-87af-160c24c66630/1/iJjbjLhhu73R-3Vi3vTXfYZCwyQ.mft File: iJjbjLhhu73R-3Vi3vTXfYZCwyQ.mft (raw, json) Hash identifier: vgSHoTkWeEOYC6xAqnbKDkIAmToVDVDr/jI98u6pBrc= Subject key identifier: EE:6B:18:44:C4:D8:81:61:43:21:FC:32:06:48:B3:00:A9:14:99:62 Authority key identifier: 88:98:DB:8C:B8:61:BB:BD:D1:FB:75:62:DE:F4:D7:7D:86:42:C3:24 Certificate issuer: /CN=8898db8cb861bbbdd1fb7562def4d77d8642c324 Certificate serial: 019B3F48834496E8D259457B3727A6A88575 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iJjbjLhhu73R-3Vi3vTXfYZCwyQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/9a6cf5-1342-4c3b-87af-160c24c66630/1/iJjbjLhhu73R-3Vi3vTXfYZCwyQ.mft Manifest number: 14AB Signing time: Sun 21 Dec 2025 05:01:15 +0000 Manifest this update: Sun 21 Dec 2025 05:01:15 +0000 Manifest next update: Mon 22 Dec 2025 05:01:15 +0000 Files and hashes: 1: hIJG4JYkLEhwraYEYvL-fraByuk.roa (hash: 5YFKdkA5FRK1IPjfHxOUcAbA5SZ2reBZq68WODkSIGA=) 2: iJjbjLhhu73R-3Vi3vTXfYZCwyQ.crl (hash: 0F0kZJeUxQFAqrB9THBe+HdUAV9j5n4i4RPl9N6JnNA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/9a6cf5-1342-4c3b-87af-160c24c66630/1/iJjbjLhhu73R-3Vi3vTXfYZCwyQ.crl rsync://rpki.ripe.net/repository/DEFAULT/05/9a6cf5-1342-4c3b-87af-160c24c66630/1/iJjbjLhhu73R-3Vi3vTXfYZCwyQ.mft rsync://rpki.ripe.net/repository/DEFAULT/iJjbjLhhu73R-3Vi3vTXfYZCwyQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 04:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3f:48:83:44:96:e8:d2:59:45:7b:37:27:a6:a8:85:75 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8898db8cb861bbbdd1fb7562def4d77d8642c324 Validity Not Before: Dec 21 05:01:15 2025 GMT Not After : Dec 22 05:01:15 2025 GMT Subject: CN=ee6b1844c4d881614321fc320648b300a9149962 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:61:0a:c0:c9:8f:23:63:87:98:ec:12:fb:c4: ec:bf:79:12:ac:13:8e:b4:0a:60:67:09:d8:38:e7: ba:28:6d:11:9a:d1:4f:cc:03:00:a8:b4:7d:51:62: 86:91:9b:1b:e9:d0:90:bb:20:48:1b:ac:28:45:3d: ec:00:a4:96:bd:f8:78:af:a1:f0:28:8a:46:b9:c7: fe:ac:81:08:5f:5d:dd:9e:6b:d2:49:9c:36:b5:69: 38:af:97:47:2e:26:6a:cb:2a:18:11:06:e7:d6:83: 0c:bc:57:69:55:52:15:b4:38:31:bc:59:a3:45:94: 4d:23:b5:de:67:91:73:15:e5:02:85:27:ac:ae:d5: 14:46:39:82:98:00:95:c9:f0:7e:05:66:89:e8:0c: 70:2e:c3:2b:21:02:e3:85:18:3b:35:9a:96:f6:20: 93:59:38:eb:f8:94:48:1b:cb:d5:41:60:c1:a1:54: 63:8c:61:1b:6d:83:2d:45:b6:01:62:72:13:23:6f: ce:1f:bb:42:75:89:f5:6c:ac:6c:c3:8e:a6:16:d7: 60:02:9b:51:33:ad:64:7c:32:3e:e5:43:e8:ea:d9: 1a:7a:77:c5:8b:08:d1:2a:fb:96:36:06:89:3f:ab: 2a:ed:a2:81:ca:dc:2c:04:ce:91:54:62:0c:d0:d9: 25:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:6B:18:44:C4:D8:81:61:43:21:FC:32:06:48:B3:00:A9:14:99:62 X509v3 Authority Key Identifier: keyid:88:98:DB:8C:B8:61:BB:BD:D1:FB:75:62:DE:F4:D7:7D:86:42:C3:24 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iJjbjLhhu73R-3Vi3vTXfYZCwyQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/9a6cf5-1342-4c3b-87af-160c24c66630/1/iJjbjLhhu73R-3Vi3vTXfYZCwyQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/05/9a6cf5-1342-4c3b-87af-160c24c66630/1/iJjbjLhhu73R-3Vi3vTXfYZCwyQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 65:63:de:27:e3:52:fe:5f:4c:5b:77:e3:c2:42:db:2b:98:0d: fe:25:64:76:b2:e7:5f:6c:12:c9:c2:95:b7:97:87:2d:45:90: 2c:67:7d:ab:ac:ed:49:1e:bd:09:62:f6:d5:2c:3a:ac:78:98: 9b:7e:b9:eb:c5:28:42:67:ca:ec:55:fa:cc:45:d3:9f:1c:31: bc:13:c5:d1:de:0d:c0:15:10:35:7b:ab:7c:17:f9:83:21:db: 31:7d:28:28:e3:0f:c3:3f:e1:eb:0b:09:a3:87:da:92:bd:4f: 85:57:37:4c:64:a3:bc:b0:96:ea:e8:f3:76:0b:13:6a:6e:a8: 44:1d:42:d9:36:e7:27:05:cb:99:6d:af:cb:f6:ba:aa:a4:37: 44:6f:47:86:b7:84:5e:c7:31:1c:2f:11:d4:1d:99:03:ed:0f: ee:e5:1f:73:09:86:dc:de:39:87:d0:13:83:8c:49:b3:25:62: ef:80:56:5d:97:1a:af:f5:d2:15:74:4e:78:74:aa:84:a2:44: fe:af:78:f2:5e:a1:1d:46:98:7f:49:c7:52:6f:62:ba:08:2a: f1:4f:70:b1:e9:b1:bc:42:be:18:ad:ee:d9:cc:27:02:45:81: 58:9c:8d:40:23:a5:dc:b6:67:fc:fc:f4:1c:e0:68:a9:71:86: db:48:81:2f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs/SINElujSWUV7NyemqIV1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg4OThkYjhjYjg2MWJiYmRkMWZiNzU2MmRlZjRkNzdkODY0 MmMzMjQwHhcNMjUxMjIxMDUwMTE1WhcNMjUxMjIyMDUwMTE1WjAzMTEwLwYDVQQD EyhlZTZiMTg0NGM0ZDg4MTYxNDMyMWZjMzIwNjQ4YjMwMGE5MTQ5OTYyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArWEKwMmPI2OHmOwS+8Tsv3kSrBOO tApgZwnYOOe6KG0RmtFPzAMAqLR9UWKGkZsb6dCQuyBIG6woRT3sAKSWvfh4r6Hw KIpGucf+rIEIX13dnmvSSZw2tWk4r5dHLiZqyyoYEQbn1oMMvFdpVVIVtDgxvFmj RZRNI7XeZ5FzFeUChSesrtUURjmCmACVyfB+BWaJ6AxwLsMrIQLjhRg7NZqW9iCT WTjr+JRIG8vVQWDBoVRjjGEbbYMtRbYBYnITI2/OH7tCdYn1bKxsw46mFtdgAptR M61kfDI+5UPo6tkaenfFiwjRKvuWNgaJP6sq7aKBytwsBM6RVGIM0NklWQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFO5rGETE2IFhQyH8MgZIswCpFJliMB8GA1UdIwQY MBaAFIiY24y4Ybu90ft1Yt70132GQsMkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaUpqYmpMaGh1NzNSLTNWaTN2VFhmWVpDd3lRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNS85YTZjZjUtMTM0Mi00YzNiLTg3YWYt MTYwYzI0YzY2NjMwLzEvaUpqYmpMaGh1NzNSLTNWaTN2VFhmWVpDd3lRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNS85YTZjZjUtMTM0Mi00YzNiLTg3YWYtMTYwYzI0YzY2NjMw LzEvaUpqYmpMaGh1NzNSLTNWaTN2VFhmWVpDd3lRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZWPeJ+NS /l9MW3fjwkLbK5gN/iVkdrLnX2wSycKVt5eHLUWQLGd9q6ztSR69CWL21Sw6rHiY m36568UoQmfK7FX6zEXTnxwxvBPF0d4NwBUQNXurfBf5gyHbMX0oKOMPwz/h6wsJ o4fakr1PhVc3TGSjvLCW6ujzdgsTam6oRB1C2TbnJwXLmW2vy/a6qqQ3RG9HhreE XscxHC8R1B2ZA+0P7uUfcwmG3N45h9ATg4xJsyVi74BWXZcar/XSFXROeHSqhKJE /q948l6hHUaYf0nHUm9iuggq8U9wsemxvEK+GK3u2cwnAkWBWJyNQCOl3LZn/Pz0 HOBoqXGG20iBLw== -----END CERTIFICATE-----Generated at Sun Dec 21 11:59:02 2025 by rpki-client