This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/2574cb-b5fd-47d5-9a3b-910ae3bec631/1/i1_lDykN2eQeX0pl2rsjlyqCytM.mft File: i1_lDykN2eQeX0pl2rsjlyqCytM.mft (raw, json) Hash identifier: uAGJEBIF8xV/nlQLfiqireoFEwfCvRfA6Y2yjrl5q+s= Subject key identifier: 31:B3:FB:D1:87:49:0C:EC:9C:D6:72:B2:D9:B2:90:34:58:74:12:FB Authority key identifier: 8B:5F:E5:0F:29:0D:D9:E4:1E:5F:4A:65:DA:BB:23:97:2A:82:CA:D3 Certificate issuer: /CN=8b5fe50f290dd9e41e5f4a65dabb23972a82cad3 Certificate serial: 019AF1D2453C4DD052AC09D5B10271235513 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i1_lDykN2eQeX0pl2rsjlyqCytM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/2574cb-b5fd-47d5-9a3b-910ae3bec631/1/i1_lDykN2eQeX0pl2rsjlyqCytM.mft Manifest number: 0B6F Signing time: Sat 06 Dec 2025 04:01:20 +0000 Manifest this update: Sat 06 Dec 2025 04:01:20 +0000 Manifest next update: Sun 07 Dec 2025 04:01:20 +0000 Files and hashes: 1: VyXgHHFFQ2oH5mDTe8acLrMgUes.roa (hash: LW13jFriZ57WfbtFccojs/LokeY+i7PgigFeLOhpQuY=) 2: i1_lDykN2eQeX0pl2rsjlyqCytM.crl (hash: z3Z1Ggoyw/530C9OAhjwsTpjxCLNItIvp+xTOtKbL7E=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/2574cb-b5fd-47d5-9a3b-910ae3bec631/1/i1_lDykN2eQeX0pl2rsjlyqCytM.crl rsync://rpki.ripe.net/repository/DEFAULT/19/2574cb-b5fd-47d5-9a3b-910ae3bec631/1/i1_lDykN2eQeX0pl2rsjlyqCytM.mft rsync://rpki.ripe.net/repository/DEFAULT/i1_lDykN2eQeX0pl2rsjlyqCytM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 04:01:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d2:45:3c:4d:d0:52:ac:09:d5:b1:02:71:23:55:13 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8b5fe50f290dd9e41e5f4a65dabb23972a82cad3 Validity Not Before: Dec 6 04:01:20 2025 GMT Not After : Dec 7 04:01:20 2025 GMT Subject: CN=31b3fbd187490cec9cd672b2d9b29034587412fb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:9d:8d:2f:44:65:9e:3c:dd:be:e1:1b:98:5e: d6:a4:17:d3:72:7f:dd:87:24:5a:ea:f6:63:22:56: 6a:0d:17:e6:a0:ab:b3:e0:34:de:93:ef:2b:41:31: 0e:09:10:99:55:e4:e3:07:bd:f9:11:03:d6:4d:21: 57:bf:e8:ff:53:bb:72:4f:e1:20:c9:d6:3d:51:cd: df:91:a9:da:9a:fc:c3:0b:70:de:76:2b:8c:6d:61: aa:58:9f:2b:60:9f:91:27:78:e2:d0:92:59:49:89: 82:12:97:0a:50:54:8c:d7:89:8b:7a:47:4c:ef:e9: 8e:be:cf:2f:7e:62:56:33:1a:14:03:29:2e:ba:38: 4d:97:de:c2:d2:e6:12:30:17:37:05:a9:99:04:db: 49:0e:7a:6d:29:a0:e0:e5:a4:2a:a0:65:e2:a6:f8: d9:5a:13:3c:02:2b:69:21:62:32:1c:b3:ec:cb:9a: b1:44:06:fd:77:bb:48:32:ff:52:d7:84:5c:c0:a0: 95:c8:c8:99:68:21:fb:c8:9c:9d:80:b4:3b:98:3a: e1:78:33:54:af:4c:79:ba:dd:ed:56:d9:8f:6c:52: c2:60:23:55:d0:cb:c0:57:cb:f6:54:8e:66:ef:d0: b1:8f:ff:45:04:87:8c:70:3e:ea:08:1a:22:b0:44: 50:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:B3:FB:D1:87:49:0C:EC:9C:D6:72:B2:D9:B2:90:34:58:74:12:FB X509v3 Authority Key Identifier: keyid:8B:5F:E5:0F:29:0D:D9:E4:1E:5F:4A:65:DA:BB:23:97:2A:82:CA:D3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i1_lDykN2eQeX0pl2rsjlyqCytM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/2574cb-b5fd-47d5-9a3b-910ae3bec631/1/i1_lDykN2eQeX0pl2rsjlyqCytM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/19/2574cb-b5fd-47d5-9a3b-910ae3bec631/1/i1_lDykN2eQeX0pl2rsjlyqCytM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 93:32:02:f0:f0:83:c4:6c:01:44:e0:2e:84:8a:1b:51:38:32: 5a:e8:0d:77:b9:6a:a0:66:8f:bd:30:c5:dc:6a:7b:09:79:67: 4d:c1:3e:d4:32:fb:74:64:2f:5a:c1:be:09:ce:51:e3:41:dc: d2:0c:d2:f0:da:60:35:1e:44:6c:df:52:ea:fe:7e:f7:34:5c: 12:45:b1:22:e7:19:4c:9d:41:9d:e2:e1:d7:c3:f9:1a:b6:18: f8:b9:bf:49:f0:15:54:d9:f9:ad:a5:2c:d4:40:1f:a6:08:75: 39:a9:c0:97:3b:8a:3d:58:76:a9:f0:38:02:5f:46:5b:ba:d3: 2b:88:a8:b2:8a:bb:db:62:e3:1b:4f:8e:26:64:fd:b0:cf:fd: a4:62:06:0c:5e:e8:e3:b9:a4:37:9e:6d:7e:13:51:69:ac:53: d6:93:d7:0e:70:b7:85:dc:3e:95:4b:a3:28:08:87:41:59:c6: 51:7c:a9:0a:e5:a7:a0:ff:d4:97:6e:e1:b8:16:ff:76:5d:17: ba:b9:75:6e:24:43:fd:c1:76:36:b3:1b:ed:c2:2d:89:19:99: c5:4c:12:b0:40:31:f6:9a:f3:6d:4c:f8:e6:ff:a7:19:b3:da: f3:46:d9:21:ee:b2:bf:a0:e9:7e:f2:5d:26:25:9c:9b:a4:74: 5e:63:a7:0c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0kU8TdBSrAnVsQJxI1UTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhiNWZlNTBmMjkwZGQ5ZTQxZTVmNGE2NWRhYmIyMzk3MmE4 MmNhZDMwHhcNMjUxMjA2MDQwMTIwWhcNMjUxMjA3MDQwMTIwWjAzMTEwLwYDVQQD EygzMWIzZmJkMTg3NDkwY2VjOWNkNjcyYjJkOWIyOTAzNDU4NzQxMmZiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv52NL0RlnjzdvuEbmF7WpBfTcn/d hyRa6vZjIlZqDRfmoKuz4DTek+8rQTEOCRCZVeTjB735EQPWTSFXv+j/U7tyT+Eg ydY9Uc3fkanamvzDC3DediuMbWGqWJ8rYJ+RJ3ji0JJZSYmCEpcKUFSM14mLekdM 7+mOvs8vfmJWMxoUAykuujhNl97C0uYSMBc3BamZBNtJDnptKaDg5aQqoGXipvjZ WhM8AitpIWIyHLPsy5qxRAb9d7tIMv9S14RcwKCVyMiZaCH7yJydgLQ7mDrheDNU r0x5ut3tVtmPbFLCYCNV0MvAV8v2VI5m79Cxj/9FBIeMcD7qCBoisERQfwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDGz+9GHSQzsnNZystmykDRYdBL7MB8GA1UdIwQY MBaAFItf5Q8pDdnkHl9KZdq7I5cqgsrTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaTFfbER5a04yZVFlWDBwbDJyc2pseXFDeXRNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS8yNTc0Y2ItYjVmZC00N2Q1LTlhM2It OTEwYWUzYmVjNjMxLzEvaTFfbER5a04yZVFlWDBwbDJyc2pseXFDeXRNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xOS8yNTc0Y2ItYjVmZC00N2Q1LTlhM2ItOTEwYWUzYmVjNjMx LzEvaTFfbER5a04yZVFlWDBwbDJyc2pseXFDeXRNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkzIC8PCD xGwBROAuhIobUTgyWugNd7lqoGaPvTDF3Gp7CXlnTcE+1DL7dGQvWsG+Cc5R40Hc 0gzS8NpgNR5EbN9S6v5+9zRcEkWxIucZTJ1BneLh18P5GrYY+Lm/SfAVVNn5raUs 1EAfpgh1OanAlzuKPVh2qfA4Al9GW7rTK4iosoq722LjG0+OJmT9sM/9pGIGDF7o 47mkN55tfhNRaaxT1pPXDnC3hdw+lUujKAiHQVnGUXypCuWnoP/Ul27huBb/dl0X url1biRD/cF2NrMb7cItiRmZxUwSsEAx9przbUz45v+nGbPa80bZIe6yv6DpfvJd JiWcm6R0XmOnDA== -----END CERTIFICATE-----Generated at Sat Dec 6 12:20:33 2025 by rpki-client