This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/dd394b-6bc4-4e47-b012-518f2c8f846b/1/IzKcs6vk6UDPxiog4qbiwo_Cgyk.mft File: IzKcs6vk6UDPxiog4qbiwo_Cgyk.mft (raw, json) Hash identifier: vsn/0G1wCs32aSyJrMxbcarMGK2a+K3SWKDDls6aYoA= Subject key identifier: 45:34:9B:CF:E7:24:B0:97:2F:EF:E6:5A:51:1B:35:9B:22:27:D6:55 Authority key identifier: 23:32:9C:B3:AB:E4:E9:40:CF:C6:2A:20:E2:A6:E2:C2:8F:C2:83:29 Certificate issuer: /CN=23329cb3abe4e940cfc62a20e2a6e2c28fc28329 Certificate serial: 019AF4650977BF4040E97539A6E538584682 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IzKcs6vk6UDPxiog4qbiwo_Cgyk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/dd394b-6bc4-4e47-b012-518f2c8f846b/1/IzKcs6vk6UDPxiog4qbiwo_Cgyk.mft Manifest number: 0736 Signing time: Sat 06 Dec 2025 16:00:53 +0000 Manifest this update: Sat 06 Dec 2025 16:00:53 +0000 Manifest next update: Sun 07 Dec 2025 16:00:53 +0000 Files and hashes: 1: 5M71zfuSK_xqpTjKPkO0azEuCEg.roa (hash: EQV/qG+jN/4sv0IUUwoKPerLsgoGZPmCyJNmiQYWTG0=) 2: IzKcs6vk6UDPxiog4qbiwo_Cgyk.crl (hash: /wcKSMYNl4WTcKxpKij3KTObHncHiigoa7Kfr265Luc=) 3: xQirsaiZ-HOMXJs3cfu910IL9Do.roa (hash: l1ex6Iykh1HBp5nbi2qzE8pp6Urs1SdDzWGI7oHWqys=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/dd394b-6bc4-4e47-b012-518f2c8f846b/1/IzKcs6vk6UDPxiog4qbiwo_Cgyk.crl rsync://rpki.ripe.net/repository/DEFAULT/15/dd394b-6bc4-4e47-b012-518f2c8f846b/1/IzKcs6vk6UDPxiog4qbiwo_Cgyk.mft rsync://rpki.ripe.net/repository/DEFAULT/IzKcs6vk6UDPxiog4qbiwo_Cgyk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:65:09:77:bf:40:40:e9:75:39:a6:e5:38:58:46:82 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=23329cb3abe4e940cfc62a20e2a6e2c28fc28329 Validity Not Before: Dec 6 16:00:53 2025 GMT Not After : Dec 7 16:00:53 2025 GMT Subject: CN=45349bcfe724b0972fefe65a511b359b2227d655 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:0f:50:c5:22:4c:85:d8:07:21:50:59:7a:e9: 21:eb:24:52:58:e5:ec:8c:f3:67:f9:b3:46:3e:87: 40:24:3d:e8:ca:a1:65:db:e3:17:10:de:88:4b:a8: 12:11:aa:16:de:9a:f0:89:e7:3e:0e:d8:22:b7:36: 1e:b3:2e:c4:02:2d:a2:36:c0:72:d4:70:14:56:f3: 6c:b4:fb:ce:29:39:de:38:e5:94:99:13:d8:b0:42: 81:b3:ed:7c:0f:67:e5:16:c9:75:ae:35:9f:d1:3d: 41:1d:34:b3:1d:ca:02:af:2c:a2:44:60:94:0e:d6: 8c:f0:e5:4b:aa:53:db:3d:7e:bc:a0:a5:9c:d0:98: b2:04:9b:b5:db:d7:68:61:16:6b:0a:ca:27:df:3f: 10:1e:b5:22:6b:5a:82:39:52:f3:33:0c:f3:8a:da: 85:e7:8b:8e:a2:0d:ba:a1:87:9f:01:d0:47:4e:20: 62:77:b7:83:eb:dc:57:1d:c1:17:e5:d1:34:36:38: 29:50:e9:24:a8:4e:e7:b1:d5:f0:59:d7:e9:7e:6c: ae:10:39:fa:f2:23:2d:13:10:bf:a7:fc:bc:88:fa: 40:84:e7:a0:36:46:31:9c:cb:ec:6b:36:44:33:5d: fc:fc:1a:e4:4e:16:84:59:b2:9b:a5:d4:0f:ce:9e: d3:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:34:9B:CF:E7:24:B0:97:2F:EF:E6:5A:51:1B:35:9B:22:27:D6:55 X509v3 Authority Key Identifier: keyid:23:32:9C:B3:AB:E4:E9:40:CF:C6:2A:20:E2:A6:E2:C2:8F:C2:83:29 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IzKcs6vk6UDPxiog4qbiwo_Cgyk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/dd394b-6bc4-4e47-b012-518f2c8f846b/1/IzKcs6vk6UDPxiog4qbiwo_Cgyk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/15/dd394b-6bc4-4e47-b012-518f2c8f846b/1/IzKcs6vk6UDPxiog4qbiwo_Cgyk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 35:bf:ca:1d:9b:59:1b:b6:55:34:66:b2:73:ad:55:00:1c:50: cb:f6:ea:4e:74:47:b7:e1:95:41:7c:f6:09:2d:44:a6:3b:cf: 19:56:95:9d:9f:23:45:70:db:22:7d:ab:90:c0:b1:d8:46:24: ea:b0:a2:b0:b0:de:64:0a:82:5c:89:2a:45:d3:c8:0b:4b:8b: 0a:82:53:73:1d:25:96:2a:9c:1a:f6:5f:14:7a:de:17:ba:3b: f4:9b:ef:ba:a3:11:39:5e:8f:8e:95:e2:f6:a6:c2:ea:ec:13: 73:e9:37:23:ec:7f:b6:51:47:6e:8c:ee:0f:26:3b:ea:b7:ce: 59:65:49:45:cc:09:14:71:3e:3a:9f:c9:06:a7:00:53:a8:eb: eb:be:c6:a9:89:7a:8e:76:6b:e0:b4:a0:d6:2e:15:94:d2:74: 30:55:3a:c6:38:85:7d:ad:9a:50:50:fe:21:2d:d6:71:62:63: 70:63:0d:d2:4f:a6:05:01:5c:36:c2:ad:e2:88:f6:ae:21:0b: 08:5a:c7:57:c2:82:7b:89:ef:0a:b6:d1:bb:40:3e:36:e7:cd: 11:3b:0f:0c:67:25:6f:47:f2:f7:bb:e8:b4:c2:16:dc:d6:c8: 49:06:9e:14:5c:97:28:ff:92:45:85:6c:9a:d3:c7:07:1b:cb: 3b:66:f2:9f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr0ZQl3v0BA6XU5puU4WEaCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIzMzI5Y2IzYWJlNGU5NDBjZmM2MmEyMGUyYTZlMmMyOGZj MjgzMjkwHhcNMjUxMjA2MTYwMDUzWhcNMjUxMjA3MTYwMDUzWjAzMTEwLwYDVQQD Eyg0NTM0OWJjZmU3MjRiMDk3MmZlZmU2NWE1MTFiMzU5YjIyMjdkNjU1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4g9QxSJMhdgHIVBZeukh6yRSWOXs jPNn+bNGPodAJD3oyqFl2+MXEN6IS6gSEaoW3prwiec+DtgitzYesy7EAi2iNsBy 1HAUVvNstPvOKTneOOWUmRPYsEKBs+18D2flFsl1rjWf0T1BHTSzHcoCryyiRGCU DtaM8OVLqlPbPX68oKWc0JiyBJu129doYRZrCson3z8QHrUia1qCOVLzMwzzitqF 54uOog26oYefAdBHTiBid7eD69xXHcEX5dE0NjgpUOkkqE7nsdXwWdfpfmyuEDn6 8iMtExC/p/y8iPpAhOegNkYxnMvsazZEM138/BrkThaEWbKbpdQPzp7T8wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEU0m8/nJLCXL+/mWlEbNZsiJ9ZVMB8GA1UdIwQY MBaAFCMynLOr5OlAz8YqIOKm4sKPwoMpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSXpLY3M2dms2VURQeGlvZzRxYml3b19DZ3lrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNS9kZDM5NGItNmJjNC00ZTQ3LWIwMTIt NTE4ZjJjOGY4NDZiLzEvSXpLY3M2dms2VURQeGlvZzRxYml3b19DZ3lrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNS9kZDM5NGItNmJjNC00ZTQ3LWIwMTItNTE4ZjJjOGY4NDZi LzEvSXpLY3M2dms2VURQeGlvZzRxYml3b19DZ3lrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANb/KHZtZ G7ZVNGayc61VABxQy/bqTnRHt+GVQXz2CS1EpjvPGVaVnZ8jRXDbIn2rkMCx2EYk 6rCisLDeZAqCXIkqRdPIC0uLCoJTcx0lliqcGvZfFHreF7o79JvvuqMROV6PjpXi 9qbC6uwTc+k3I+x/tlFHbozuDyY76rfOWWVJRcwJFHE+Op/JBqcAU6jr677GqYl6 jnZr4LSg1i4VlNJ0MFU6xjiFfa2aUFD+IS3WcWJjcGMN0k+mBQFcNsKt4oj2riEL CFrHV8KCe4nvCrbRu0A+NufNETsPDGclb0fy97votMIW3NbISQaeFFyXKP+SRYVs mtPHBxvLO2bynw== -----END CERTIFICATE-----Generated at Sat Dec 6 19:06:36 2025 by rpki-client