This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/a352ba-c228-4a15-9168-303b8bc28bfa/1/iTpYEkzpzEN4OVUlXn9YOQXNsU4.mft File: iTpYEkzpzEN4OVUlXn9YOQXNsU4.mft (raw, json) Hash identifier: KnFSr45EjLw0APAHUmTOuLBfRmZ5hYRJJj+TTyqEKpE= Subject key identifier: D4:0A:8B:41:37:58:78:9C:25:1D:16:66:82:91:D6:B0:73:97:BF:54 Authority key identifier: 89:3A:58:12:4C:E9:CC:43:78:39:55:25:5E:7F:58:39:05:CD:B1:4E Certificate issuer: /CN=893a58124ce9cc43783955255e7f583905cdb14e Certificate serial: 019AF19AAB5BF535FFD9848E6FEB762D80E9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iTpYEkzpzEN4OVUlXn9YOQXNsU4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/a352ba-c228-4a15-9168-303b8bc28bfa/1/iTpYEkzpzEN4OVUlXn9YOQXNsU4.mft Manifest number: 0FCA Signing time: Sat 06 Dec 2025 03:00:36 +0000 Manifest this update: Sat 06 Dec 2025 03:00:36 +0000 Manifest next update: Sun 07 Dec 2025 03:00:36 +0000 Files and hashes: 1: iTpYEkzpzEN4OVUlXn9YOQXNsU4.crl (hash: hGD9ri9Tholsy8/sGwqNWLVuycLeve7GqD2XZ3jF1aQ=) 2: t9nkji_Xq4DRGMttbRDw-jVfqPI.roa (hash: MJaMfbYXB+V545skyyIWbRiW1FYp9UFjL+ooREdIKpc=) 3: x3UpgxINfYGtKCtOQQ8nTKqnfYQ.roa (hash: bx0oE168u4Tmbz20f8oi8B9aCfZBYtjemV0iReEb4PI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/a352ba-c228-4a15-9168-303b8bc28bfa/1/iTpYEkzpzEN4OVUlXn9YOQXNsU4.crl rsync://rpki.ripe.net/repository/DEFAULT/05/a352ba-c228-4a15-9168-303b8bc28bfa/1/iTpYEkzpzEN4OVUlXn9YOQXNsU4.mft rsync://rpki.ripe.net/repository/DEFAULT/iTpYEkzpzEN4OVUlXn9YOQXNsU4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9a:ab:5b:f5:35:ff:d9:84:8e:6f:eb:76:2d:80:e9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=893a58124ce9cc43783955255e7f583905cdb14e Validity Not Before: Dec 6 03:00:36 2025 GMT Not After : Dec 7 03:00:36 2025 GMT Subject: CN=d40a8b413758789c251d16668291d6b07397bf54 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:bc:53:cf:b1:95:2a:8b:88:12:7d:b5:89:7b: f4:ce:4f:5f:aa:1e:1f:66:84:56:f3:e6:a2:cc:39: d6:47:cb:e9:4d:9a:94:09:74:2b:a7:7a:54:7f:ca: 46:ba:93:cf:a8:65:21:08:42:9f:05:71:0e:6a:f7: b0:57:fd:3a:a1:8e:0d:d9:86:af:19:c2:f5:25:d1: 2d:97:b2:5d:99:31:e7:34:21:f2:fc:28:50:fc:1f: 66:66:fd:ec:a9:43:36:ac:8d:76:fe:53:34:40:09: b9:77:33:a8:cf:2b:ac:07:3e:c0:f7:b6:d8:15:92: 32:a0:e8:41:dd:32:8d:33:93:1a:91:d7:7d:5a:46: be:eb:9e:e5:1b:9d:f0:4c:dd:d3:2d:70:06:c6:df: e0:4b:c5:58:e1:41:8e:6e:76:79:39:b0:04:0f:9e: 51:99:cf:55:9c:d2:a4:a2:08:13:1f:0c:2b:eb:e2: 99:9a:80:9f:d3:ea:6b:0e:7d:8e:18:0c:18:ad:fd: d5:aa:41:4e:60:e2:16:ad:1c:e1:f8:90:dc:15:e2: 95:45:98:8f:fe:3d:0f:b2:0f:70:91:52:2c:37:b5: fc:e7:c5:14:91:d3:93:ec:45:0b:ac:ab:1a:87:85: b1:b9:f1:a9:15:de:06:bd:30:a9:4b:18:4f:96:95: 58:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:0A:8B:41:37:58:78:9C:25:1D:16:66:82:91:D6:B0:73:97:BF:54 X509v3 Authority Key Identifier: keyid:89:3A:58:12:4C:E9:CC:43:78:39:55:25:5E:7F:58:39:05:CD:B1:4E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iTpYEkzpzEN4OVUlXn9YOQXNsU4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/a352ba-c228-4a15-9168-303b8bc28bfa/1/iTpYEkzpzEN4OVUlXn9YOQXNsU4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/05/a352ba-c228-4a15-9168-303b8bc28bfa/1/iTpYEkzpzEN4OVUlXn9YOQXNsU4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 08:bc:44:6e:e5:12:f9:d9:a6:a8:43:26:fd:ff:66:9a:1d:8d: 02:69:a4:a5:3d:cd:df:d4:c3:bc:d3:6d:ea:a3:84:4f:c9:07: c4:aa:72:38:4c:d9:32:00:0e:6d:f1:14:d3:43:a4:50:56:bb: 65:7e:92:7a:4a:5c:a4:2e:ee:b9:86:81:98:89:ca:99:17:95: da:a5:1a:08:c9:5d:44:14:84:7b:43:90:d5:9a:15:5e:33:f1: 2f:22:e7:b0:aa:de:5a:42:b1:75:ca:96:5f:18:e6:07:85:53: 16:da:b7:82:51:ab:ee:f8:00:25:65:c2:38:1e:d3:b2:6b:93: 94:aa:87:6b:24:46:7b:89:38:97:2a:7b:6b:c6:6d:88:13:79: 0b:d6:49:d2:a9:37:27:13:26:ca:c9:9f:27:c5:60:2b:53:ed: 4f:6b:1e:2e:ad:fb:6b:1b:27:e1:96:c6:18:ca:66:f5:b3:4e: c6:98:6c:9b:9d:ce:40:28:9e:71:12:c2:07:62:d5:a6:d0:41: 3d:12:ee:08:b7:df:04:b4:fd:1d:00:29:2b:63:28:13:e8:ac: af:b9:c7:d9:59:a4:0e:c2:99:56:73:44:7b:e4:a9:4a:b8:70: c7:ff:b0:52:4a:eb:cf:75:05:18:6b:61:c9:ef:1b:1c:ac:6c: 83:78:a7:c1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxmqtb9TX/2YSOb+t2LYDpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg5M2E1ODEyNGNlOWNjNDM3ODM5NTUyNTVlN2Y1ODM5MDVj ZGIxNGUwHhcNMjUxMjA2MDMwMDM2WhcNMjUxMjA3MDMwMDM2WjAzMTEwLwYDVQQD EyhkNDBhOGI0MTM3NTg3ODljMjUxZDE2NjY4MjkxZDZiMDczOTdiZjU0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv7xTz7GVKouIEn21iXv0zk9fqh4f ZoRW8+aizDnWR8vpTZqUCXQrp3pUf8pGupPPqGUhCEKfBXEOavewV/06oY4N2Yav GcL1JdEtl7JdmTHnNCHy/ChQ/B9mZv3sqUM2rI12/lM0QAm5dzOozyusBz7A97bY FZIyoOhB3TKNM5Makdd9Wka+657lG53wTN3TLXAGxt/gS8VY4UGObnZ5ObAED55R mc9VnNKkoggTHwwr6+KZmoCf0+prDn2OGAwYrf3VqkFOYOIWrRzh+JDcFeKVRZiP /j0Psg9wkVIsN7X858UUkdOT7EULrKsah4WxufGpFd4GvTCpSxhPlpVYCwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNQKi0E3WHicJR0WZoKR1rBzl79UMB8GA1UdIwQY MBaAFIk6WBJM6cxDeDlVJV5/WDkFzbFOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaVRwWUVrenB6RU40T1ZVbFhuOVlPUVhOc1U0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNS9hMzUyYmEtYzIyOC00YTE1LTkxNjgt MzAzYjhiYzI4YmZhLzEvaVRwWUVrenB6RU40T1ZVbFhuOVlPUVhOc1U0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNS9hMzUyYmEtYzIyOC00YTE1LTkxNjgtMzAzYjhiYzI4YmZh LzEvaVRwWUVrenB6RU40T1ZVbFhuOVlPUVhOc1U0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACLxEbuUS +dmmqEMm/f9mmh2NAmmkpT3N39TDvNNt6qOET8kHxKpyOEzZMgAObfEU00OkUFa7 ZX6SekpcpC7uuYaBmInKmReV2qUaCMldRBSEe0OQ1ZoVXjPxLyLnsKreWkKxdcqW XxjmB4VTFtq3glGr7vgAJWXCOB7TsmuTlKqHayRGe4k4lyp7a8ZtiBN5C9ZJ0qk3 JxMmysmfJ8VgK1PtT2seLq37axsn4ZbGGMpm9bNOxphsm53OQCiecRLCB2LVptBB PRLuCLffBLT9HQApK2MoE+isr7nH2VmkDsKZVnNEe+SpSrhwx/+wUkrrz3UFGGth ye8bHKxsg3inwQ== -----END CERTIFICATE-----Generated at Sat Dec 6 07:24:00 2025 by rpki-client