This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/2fb486-79a0-4396-833b-6c6f0e319ca1/1/IwUSFfbxvSJ9t_QN90jWTBBvhKM.mft File: IwUSFfbxvSJ9t_QN90jWTBBvhKM.mft (raw, json) Hash identifier: jg4D1jfZVdzhBUddqGFcMl+EiXK5tjqsoSdULeeB/TI= Subject key identifier: 72:CF:40:DD:6E:EF:D5:C3:EB:8E:99:26:08:95:A8:0A:2F:48:E0:1A Authority key identifier: 23:05:12:15:F6:F1:BD:22:7D:B7:F4:0D:F7:48:D6:4C:10:6F:84:A3 Certificate issuer: /CN=23051215f6f1bd227db7f40df748d64c106f84a3 Certificate serial: 019AF3F7F2C92C04E8CF7B28F768B56A31E0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IwUSFfbxvSJ9t_QN90jWTBBvhKM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/2fb486-79a0-4396-833b-6c6f0e319ca1/1/IwUSFfbxvSJ9t_QN90jWTBBvhKM.mft Manifest number: 049F Signing time: Sat 06 Dec 2025 14:01:44 +0000 Manifest this update: Sat 06 Dec 2025 14:01:44 +0000 Manifest next update: Sun 07 Dec 2025 14:01:44 +0000 Files and hashes: 1: EuYflw2vpOToo9K8lFetTYAhWyo.roa (hash: SUT2OfNUp9WFMOp/u/f5+vrQyr/WoDJgwv8+U/p5Afw=) 2: IwUSFfbxvSJ9t_QN90jWTBBvhKM.crl (hash: xxZjjHtH0H2Jl6b9E2oN4lgSiSM4ssUhtJfmvoPxTKM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/2fb486-79a0-4396-833b-6c6f0e319ca1/1/IwUSFfbxvSJ9t_QN90jWTBBvhKM.crl rsync://rpki.ripe.net/repository/DEFAULT/23/2fb486-79a0-4396-833b-6c6f0e319ca1/1/IwUSFfbxvSJ9t_QN90jWTBBvhKM.mft rsync://rpki.ripe.net/repository/DEFAULT/IwUSFfbxvSJ9t_QN90jWTBBvhKM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:f7:f2:c9:2c:04:e8:cf:7b:28:f7:68:b5:6a:31:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=23051215f6f1bd227db7f40df748d64c106f84a3 Validity Not Before: Dec 6 14:01:44 2025 GMT Not After : Dec 7 14:01:44 2025 GMT Subject: CN=72cf40dd6eefd5c3eb8e99260895a80a2f48e01a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:38:76:f3:41:ce:92:2f:24:da:3a:46:60:2a: 9d:9b:3f:d5:ba:30:93:bc:72:ed:b4:92:23:58:a9: 45:76:93:94:40:71:84:6c:c9:e6:23:6f:bd:a7:f6: f0:51:4a:c9:12:9f:1f:20:6d:74:f1:0e:bc:69:df: 05:2e:3a:d4:0a:11:d3:db:80:92:a9:39:44:80:9d: f8:1f:d4:0b:1b:e0:9c:8c:6f:6e:e0:28:9f:dd:93: 63:2f:02:10:fe:9e:af:10:d4:f4:55:be:ef:e6:3b: a7:cc:a0:7e:bd:34:81:3d:64:da:bf:48:b1:9c:b2: cf:2d:a2:10:42:26:c2:85:fd:5c:b4:f7:f0:28:7b: ac:48:43:56:20:32:de:d7:d0:99:e4:48:78:39:39: 02:4c:23:7b:a5:29:5b:fe:a4:ff:06:54:28:69:8e: ba:60:9f:7b:d0:d1:81:ad:e3:77:9f:6d:29:cb:0c: f4:eb:8b:1f:ab:1b:d8:51:1a:25:a7:0d:8f:15:1e: b3:ca:f3:87:f1:fa:ff:8d:77:5b:48:4f:f9:a3:9c: d5:0b:c5:41:84:a8:0b:eb:56:b9:22:c2:4a:a8:4e: fe:5a:fb:e6:c3:72:9e:8a:7f:de:18:76:7c:40:91: 99:88:fe:ce:60:7d:5b:3e:8d:70:56:95:c6:47:c8: 2c:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:CF:40:DD:6E:EF:D5:C3:EB:8E:99:26:08:95:A8:0A:2F:48:E0:1A X509v3 Authority Key Identifier: keyid:23:05:12:15:F6:F1:BD:22:7D:B7:F4:0D:F7:48:D6:4C:10:6F:84:A3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IwUSFfbxvSJ9t_QN90jWTBBvhKM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/2fb486-79a0-4396-833b-6c6f0e319ca1/1/IwUSFfbxvSJ9t_QN90jWTBBvhKM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/23/2fb486-79a0-4396-833b-6c6f0e319ca1/1/IwUSFfbxvSJ9t_QN90jWTBBvhKM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 22:e6:28:26:db:90:76:3c:26:c7:42:96:88:3d:d8:31:ba:ee: 0f:9c:d7:22:76:db:36:03:d8:0b:79:12:2f:4b:8a:64:66:4c: 5b:c2:1b:fe:7b:b4:1c:ea:7f:44:88:f5:b0:a6:a6:6a:c7:df: a6:bd:19:2f:44:e9:dd:47:6e:e1:51:aa:ac:c3:30:3e:d9:aa: f2:06:82:c7:4d:78:2f:43:b7:e9:ba:d6:0e:36:66:96:c4:65: f0:7f:be:ef:ee:95:75:95:94:a0:1a:e1:21:25:bc:af:27:50: 8f:bf:62:e4:7d:b7:d6:89:3b:b1:08:4d:20:58:df:ae:10:ca: ff:df:11:78:b0:9c:90:28:41:7e:e0:c4:da:1f:bc:be:34:de: 1c:22:29:8c:2d:12:09:1a:f9:41:18:6a:2c:51:45:5b:a3:ec: ab:07:18:bf:d3:0c:6c:61:1e:18:b7:ba:9d:e7:03:d1:4f:7a: bc:b7:66:2a:2e:cc:b1:30:cf:fb:fa:91:35:11:c7:d8:ee:34: 76:6b:aa:17:87:04:18:4b:90:f2:a3:fa:db:b6:25:99:27:d1: 16:f3:28:b2:ba:3f:c2:77:bd:62:53:e5:db:91:5f:05:79:81: 3f:f8:03:4e:99:e8:94:7a:40:f4:83:1b:d7:95:19:c0:ad:c0: 99:9e:b2:de -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrz9/LJLAToz3so92i1ajHgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIzMDUxMjE1ZjZmMWJkMjI3ZGI3ZjQwZGY3NDhkNjRjMTA2 Zjg0YTMwHhcNMjUxMjA2MTQwMTQ0WhcNMjUxMjA3MTQwMTQ0WjAzMTEwLwYDVQQD Eyg3MmNmNDBkZDZlZWZkNWMzZWI4ZTk5MjYwODk1YTgwYTJmNDhlMDFhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnzh280HOki8k2jpGYCqdmz/VujCT vHLttJIjWKlFdpOUQHGEbMnmI2+9p/bwUUrJEp8fIG108Q68ad8FLjrUChHT24CS qTlEgJ34H9QLG+CcjG9u4Cif3ZNjLwIQ/p6vENT0Vb7v5junzKB+vTSBPWTav0ix nLLPLaIQQibChf1ctPfwKHusSENWIDLe19CZ5Eh4OTkCTCN7pSlb/qT/BlQoaY66 YJ970NGBreN3n20pywz064sfqxvYURolpw2PFR6zyvOH8fr/jXdbSE/5o5zVC8VB hKgL61a5IsJKqE7+Wvvmw3Kein/eGHZ8QJGZiP7OYH1bPo1wVpXGR8gsGQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHLPQN1u79XD646ZJgiVqAovSOAaMB8GA1UdIwQY MBaAFCMFEhX28b0ifbf0DfdI1kwQb4SjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSXdVU0ZmYnh2U0o5dF9RTjkwaldUQkJ2aEtNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMy8yZmI0ODYtNzlhMC00Mzk2LTgzM2It NmM2ZjBlMzE5Y2ExLzEvSXdVU0ZmYnh2U0o5dF9RTjkwaldUQkJ2aEtNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMy8yZmI0ODYtNzlhMC00Mzk2LTgzM2ItNmM2ZjBlMzE5Y2Ex LzEvSXdVU0ZmYnh2U0o5dF9RTjkwaldUQkJ2aEtNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIuYoJtuQ djwmx0KWiD3YMbruD5zXInbbNgPYC3kSL0uKZGZMW8Ib/nu0HOp/RIj1sKamasff pr0ZL0Tp3Udu4VGqrMMwPtmq8gaCx014L0O36brWDjZmlsRl8H++7+6VdZWUoBrh ISW8rydQj79i5H231ok7sQhNIFjfrhDK/98ReLCckChBfuDE2h+8vjTeHCIpjC0S CRr5QRhqLFFFW6PsqwcYv9MMbGEeGLe6necD0U96vLdmKi7MsTDP+/qRNRHH2O40 dmuqF4cEGEuQ8qP627YlmSfRFvMosro/wne9YlPl25FfBXmBP/gDTpnolHpA9IMb 15UZwK3AmZ6y3g== -----END CERTIFICATE-----Generated at Sat Dec 6 21:40:33 2025 by rpki-client