This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/ccbf7a-ec38-44e6-b2eb-7187977e057e/1/iIx7lGQtLku_uVg62UH1HrjEVkA.mft File: iIx7lGQtLku_uVg62UH1HrjEVkA.mft (raw, json) Hash identifier: 3K1gmaeI7IYyNkWMxZIKYG0J4SJD4DNqdh0qHVVg3KE= Subject key identifier: 17:79:A9:28:B1:DC:66:C3:BD:5E:35:A8:C4:A8:12:A1:F9:A5:86:71 Authority key identifier: 88:8C:7B:94:64:2D:2E:4B:BF:B9:58:3A:D9:41:F5:1E:B8:C4:56:40 Certificate issuer: /CN=888c7b94642d2e4bbfb9583ad941f51eb8c45640 Certificate serial: 019B2F67CA88A9F03C192E9ED353DF9B4A5A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iIx7lGQtLku_uVg62UH1HrjEVkA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/ccbf7a-ec38-44e6-b2eb-7187977e057e/1/iIx7lGQtLku_uVg62UH1HrjEVkA.mft Manifest number: 117C Signing time: Thu 18 Dec 2025 03:01:29 +0000 Manifest this update: Thu 18 Dec 2025 03:01:29 +0000 Manifest next update: Fri 19 Dec 2025 03:01:29 +0000 Files and hashes: 1: cuExqJqxDerCAtylcJmCrVbgef4.roa (hash: 598WR0Sv6MZYZg5mTZECmrWO2D4wIr/fUZ49xt8Yu9Q=) 2: iIx7lGQtLku_uVg62UH1HrjEVkA.crl (hash: H/XVI6eNFMRrnmyBYlcYVQZ/AvutaEvakHO+cqTGGxk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/ccbf7a-ec38-44e6-b2eb-7187977e057e/1/iIx7lGQtLku_uVg62UH1HrjEVkA.crl rsync://rpki.ripe.net/repository/DEFAULT/25/ccbf7a-ec38-44e6-b2eb-7187977e057e/1/iIx7lGQtLku_uVg62UH1HrjEVkA.mft rsync://rpki.ripe.net/repository/DEFAULT/iIx7lGQtLku_uVg62UH1HrjEVkA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 03:01:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2f:67:ca:88:a9:f0:3c:19:2e:9e:d3:53:df:9b:4a:5a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=888c7b94642d2e4bbfb9583ad941f51eb8c45640 Validity Not Before: Dec 18 03:01:29 2025 GMT Not After : Dec 19 03:01:29 2025 GMT Subject: CN=1779a928b1dc66c3bd5e35a8c4a812a1f9a58671 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:93:07:d0:ce:33:dd:2f:14:ff:00:40:43:c4: a7:5a:2d:5a:5d:fe:81:9b:be:d7:d7:0b:66:34:98: 5b:4d:61:41:81:fb:d8:b9:f0:a1:8a:a8:45:e1:6d: a3:a1:18:fa:59:e7:3f:c3:9a:65:58:ba:0c:c4:49: 64:c4:02:6a:fd:d9:19:de:2f:34:0f:5b:3a:d6:40: ba:14:f2:32:c3:7e:66:80:a4:40:31:0d:74:2c:2a: e6:f7:e8:da:88:fd:9f:17:8b:48:52:b5:29:b2:e3: 48:12:66:b5:f7:07:f0:05:d4:97:ce:b2:9d:d9:b6: c7:b4:9b:49:85:3f:d4:e9:ef:77:b5:03:a1:33:57: 6e:b7:31:e3:32:6b:c8:f0:70:4d:f0:58:d0:29:6c: 3b:ff:44:6b:be:28:7f:57:b4:e8:14:fa:a7:54:cf: 85:99:eb:7d:bb:c1:19:2b:f2:5d:b7:bc:6d:96:3c: 30:a6:0a:bf:a0:e1:93:3f:f6:df:90:bd:32:5b:a8: b0:6c:4c:fe:6f:72:1f:ea:07:02:f4:e0:74:93:4f: 3d:1d:a1:cc:3d:a1:8e:2e:98:1e:79:41:a7:7f:7d: 45:48:dc:c2:ad:e2:c5:74:69:04:f2:b8:86:4a:2d: 54:8e:68:05:7a:d9:96:2c:75:2d:a8:96:fd:07:67: 7a:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:79:A9:28:B1:DC:66:C3:BD:5E:35:A8:C4:A8:12:A1:F9:A5:86:71 X509v3 Authority Key Identifier: keyid:88:8C:7B:94:64:2D:2E:4B:BF:B9:58:3A:D9:41:F5:1E:B8:C4:56:40 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iIx7lGQtLku_uVg62UH1HrjEVkA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/ccbf7a-ec38-44e6-b2eb-7187977e057e/1/iIx7lGQtLku_uVg62UH1HrjEVkA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/25/ccbf7a-ec38-44e6-b2eb-7187977e057e/1/iIx7lGQtLku_uVg62UH1HrjEVkA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 44:9c:5d:ee:79:d7:c2:d8:00:46:39:03:cf:92:cb:09:cc:37: 6d:2a:e8:99:1c:1d:c9:99:b6:8a:f8:c5:b6:c2:92:78:7c:85: dd:4b:ed:eb:2b:7f:33:3a:f2:d4:2a:c5:ce:3a:70:39:98:7c: ca:ec:57:eb:53:92:2a:56:78:59:d9:48:5d:65:db:bf:2c:56: 9a:20:29:91:04:55:3c:b7:78:47:d2:10:0d:59:79:b0:86:b5: e9:8e:9f:89:76:1f:f2:d1:20:c4:e4:6d:5c:d9:32:b3:f2:f9: fb:97:37:00:35:8b:02:43:da:8e:14:4d:c2:ca:c7:a1:b6:6f: 17:e3:40:77:38:32:2d:5d:9c:da:a2:b8:4b:94:a9:d6:89:0e: 43:e0:80:c4:18:52:04:dd:a0:db:6f:d2:0c:f8:5a:37:5f:30: e4:e8:7c:2d:9b:52:0c:ee:f0:15:7c:e0:51:2a:db:74:94:b6: fc:3f:1f:79:b3:6a:fc:db:70:8a:47:5c:5f:ff:70:eb:90:d3: 46:c6:bc:81:79:39:63:82:89:17:86:4a:94:b8:cc:ea:31:fa: e2:4d:59:ed:af:e1:3a:d2:8d:a6:33:75:13:b4:ee:2c:2d:c4: 69:0a:b9:f8:52:4b:9a:c0:91:b9:f6:f6:cf:72:d7:66:a2:e1: 65:24:fb:30 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsvZ8qIqfA8GS6e01Pfm0paMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg4OGM3Yjk0NjQyZDJlNGJiZmI5NTgzYWQ5NDFmNTFlYjhj NDU2NDAwHhcNMjUxMjE4MDMwMTI5WhcNMjUxMjE5MDMwMTI5WjAzMTEwLwYDVQQD EygxNzc5YTkyOGIxZGM2NmMzYmQ1ZTM1YThjNGE4MTJhMWY5YTU4NjcxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8JMH0M4z3S8U/wBAQ8SnWi1aXf6B m77X1wtmNJhbTWFBgfvYufChiqhF4W2joRj6Wec/w5plWLoMxElkxAJq/dkZ3i80 D1s61kC6FPIyw35mgKRAMQ10LCrm9+jaiP2fF4tIUrUpsuNIEma19wfwBdSXzrKd 2bbHtJtJhT/U6e93tQOhM1dutzHjMmvI8HBN8FjQKWw7/0Rrvih/V7ToFPqnVM+F met9u8EZK/Jdt7xtljwwpgq/oOGTP/bfkL0yW6iwbEz+b3If6gcC9OB0k089HaHM PaGOLpgeeUGnf31FSNzCreLFdGkE8riGSi1UjmgFetmWLHUtqJb9B2d6xQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBd5qSix3GbDvV41qMSoEqH5pYZxMB8GA1UdIwQY MBaAFIiMe5RkLS5Lv7lYOtlB9R64xFZAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaUl4N2xHUXRMa3VfdVZnNjJVSDFIcmpFVmtBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS9jY2JmN2EtZWMzOC00NGU2LWIyZWIt NzE4Nzk3N2UwNTdlLzEvaUl4N2xHUXRMa3VfdVZnNjJVSDFIcmpFVmtBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNS9jY2JmN2EtZWMzOC00NGU2LWIyZWItNzE4Nzk3N2UwNTdl LzEvaUl4N2xHUXRMa3VfdVZnNjJVSDFIcmpFVmtBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARJxd7nnX wtgARjkDz5LLCcw3bSromRwdyZm2ivjFtsKSeHyF3Uvt6yt/Mzry1CrFzjpwOZh8 yuxX61OSKlZ4WdlIXWXbvyxWmiApkQRVPLd4R9IQDVl5sIa16Y6fiXYf8tEgxORt XNkys/L5+5c3ADWLAkPajhRNwsrHobZvF+NAdzgyLV2c2qK4S5Sp1okOQ+CAxBhS BN2g22/SDPhaN18w5Oh8LZtSDO7wFXzgUSrbdJS2/D8febNq/NtwikdcX/9w65DT Rsa8gXk5Y4KJF4ZKlLjM6jH64k1Z7a/hOtKNpjN1E7TuLC3EaQq5+FJLmsCRufb2 z3LXZqLhZST7MA== -----END CERTIFICATE-----Generated at Thu Dec 18 07:51:24 2025 by rpki-client