This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/78c414-9b09-4775-a558-e3defb7e2518/1/IQH0Od66_1iAOV148Lv62Mp2CL8.mft File: IQH0Od66_1iAOV148Lv62Mp2CL8.mft (raw, json) Hash identifier: CGNNH9HE0Plt8PPIWYTNzZb4IUhbzfng7mCTTQu7oYM= Subject key identifier: B1:E3:05:31:7C:A8:26:27:36:91:38:21:DC:86:95:2E:41:BD:7D:EB Authority key identifier: 21:01:F4:39:DE:BA:FF:58:80:39:5D:78:F0:BB:FA:D8:CA:76:08:BF Certificate issuer: /CN=2101f439debaff5880395d78f0bbfad8ca7608bf Certificate serial: 019AF3F7F88CD6764237399D73073318835B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IQH0Od66_1iAOV148Lv62Mp2CL8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/78c414-9b09-4775-a558-e3defb7e2518/1/IQH0Od66_1iAOV148Lv62Mp2CL8.mft Manifest number: 0E1F Signing time: Sat 06 Dec 2025 14:01:45 +0000 Manifest this update: Sat 06 Dec 2025 14:01:45 +0000 Manifest next update: Sun 07 Dec 2025 14:01:45 +0000 Files and hashes: 1: IQH0Od66_1iAOV148Lv62Mp2CL8.crl (hash: 2QXLoV/KkOMXCRvFz3GTo1Q0irCV8/paNDkFzDquYcI=) 2: maYu8dN9neYyc8DtbRu2KTpDdQk.roa (hash: H5U+8VR9PAI4QlkVpTR8DC6LqpMXq6tJVvxgrK/vIPo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/78c414-9b09-4775-a558-e3defb7e2518/1/IQH0Od66_1iAOV148Lv62Mp2CL8.crl rsync://rpki.ripe.net/repository/DEFAULT/2f/78c414-9b09-4775-a558-e3defb7e2518/1/IQH0Od66_1iAOV148Lv62Mp2CL8.mft rsync://rpki.ripe.net/repository/DEFAULT/IQH0Od66_1iAOV148Lv62Mp2CL8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:f7:f8:8c:d6:76:42:37:39:9d:73:07:33:18:83:5b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2101f439debaff5880395d78f0bbfad8ca7608bf Validity Not Before: Dec 6 14:01:45 2025 GMT Not After : Dec 7 14:01:45 2025 GMT Subject: CN=b1e305317ca8262736913821dc86952e41bd7deb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:d9:b0:ae:1d:12:3d:d0:d6:c7:ac:5f:94:c9: 82:da:0e:e3:f8:54:86:66:3c:74:e7:90:e2:36:39: e6:6f:ba:ff:03:5d:a0:18:2f:8c:db:63:ad:6d:8f: 31:cc:af:7a:4c:73:de:5a:cc:f6:7d:6d:cf:a9:72: 9f:9d:27:04:a7:81:96:81:ca:dd:b2:b6:3e:99:73: 47:da:ec:51:f0:97:87:34:1e:00:a3:c4:b9:fc:91: b2:4e:27:e2:d7:15:e2:62:97:e6:1c:e8:a7:f1:83: de:0d:c5:f9:b6:1f:b8:7b:1c:7c:2f:8a:31:de:e5: 6c:33:00:e5:99:33:56:98:34:2e:7f:c9:8d:d9:36: 42:f6:2e:36:1c:5d:01:73:81:d8:86:31:13:55:69: e1:93:d7:d5:b5:26:ae:1e:d7:a3:97:44:fe:b1:e4: 66:96:b0:df:80:e2:ac:18:72:d9:58:f2:bb:7d:af: f3:35:9c:0f:9e:82:82:4e:cc:c7:b2:e5:4f:a2:3c: fb:26:02:21:de:a8:b2:96:37:7c:0e:2d:b9:64:46: b9:60:3d:1a:b3:43:42:01:66:4a:84:1e:85:47:f7: da:06:0e:ff:74:c1:d8:23:fe:ba:85:ff:d7:18:0d: e5:25:bc:34:b1:bd:19:c3:8e:2a:e6:8e:f9:17:93: 32:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:E3:05:31:7C:A8:26:27:36:91:38:21:DC:86:95:2E:41:BD:7D:EB X509v3 Authority Key Identifier: keyid:21:01:F4:39:DE:BA:FF:58:80:39:5D:78:F0:BB:FA:D8:CA:76:08:BF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IQH0Od66_1iAOV148Lv62Mp2CL8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/78c414-9b09-4775-a558-e3defb7e2518/1/IQH0Od66_1iAOV148Lv62Mp2CL8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/78c414-9b09-4775-a558-e3defb7e2518/1/IQH0Od66_1iAOV148Lv62Mp2CL8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 73:94:a8:78:16:e4:7e:3d:d6:a1:03:15:96:44:5d:69:a1:2f: 1e:d7:26:09:20:38:0e:30:3b:b2:2a:a3:60:b7:9f:84:e9:96: 48:68:ad:38:2d:b8:c9:33:ae:d9:34:1a:d9:4f:a0:a0:f4:b6: 33:16:6c:99:bf:c6:86:6f:02:8e:31:6c:dd:73:43:81:c9:e2: a9:92:59:5b:26:c8:87:1f:ee:32:10:a5:a9:a6:52:cc:0f:b0: 6e:17:e8:33:b1:b8:66:22:a1:26:9a:15:e9:1a:fd:88:43:f5: eb:cb:69:63:ff:18:cf:3c:66:52:fd:c8:06:c5:3a:46:ea:56: a0:ba:02:fe:70:fc:b1:bd:b4:96:7d:71:78:e3:a6:1b:e4:66: e5:9b:b7:f4:91:c0:52:e9:52:6a:b8:cd:6d:f0:d4:cd:0e:d6: 05:18:9b:ec:96:98:00:50:b1:40:8a:62:f1:87:8a:18:3d:00: 29:ac:eb:80:a6:06:99:e2:66:e0:5e:4e:eb:03:bb:ae:f6:cc: db:ec:a7:a0:82:a8:15:71:11:53:10:85:98:99:50:26:09:b1: 98:ba:f0:6c:b1:7b:49:10:96:74:9e:7a:a6:54:5b:90:71:8a: 92:25:d0:b7:52:89:71:65:9e:ff:d6:bf:b0:07:50:d8:7f:83: e9:05:0a:66 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrz9/iM1nZCNzmdcwczGINbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIxMDFmNDM5ZGViYWZmNTg4MDM5NWQ3OGYwYmJmYWQ4Y2E3 NjA4YmYwHhcNMjUxMjA2MTQwMTQ1WhcNMjUxMjA3MTQwMTQ1WjAzMTEwLwYDVQQD EyhiMWUzMDUzMTdjYTgyNjI3MzY5MTM4MjFkYzg2OTUyZTQxYmQ3ZGViMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAodmwrh0SPdDWx6xflMmC2g7j+FSG Zjx055DiNjnmb7r/A12gGC+M22OtbY8xzK96THPeWsz2fW3PqXKfnScEp4GWgcrd srY+mXNH2uxR8JeHNB4Ao8S5/JGyTifi1xXiYpfmHOin8YPeDcX5th+4exx8L4ox 3uVsMwDlmTNWmDQuf8mN2TZC9i42HF0Bc4HYhjETVWnhk9fVtSauHtejl0T+seRm lrDfgOKsGHLZWPK7fa/zNZwPnoKCTszHsuVPojz7JgIh3qiyljd8Di25ZEa5YD0a s0NCAWZKhB6FR/faBg7/dMHYI/66hf/XGA3lJbw0sb0Zw44q5o75F5MyVQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLHjBTF8qCYnNpE4IdyGlS5BvX3rMB8GA1UdIwQY MBaAFCEB9Dneuv9YgDldePC7+tjKdgi/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSVFIME9kNjZfMWlBT1YxNDhMdjYyTXAyQ0w4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZi83OGM0MTQtOWIwOS00Nzc1LWE1NTgt ZTNkZWZiN2UyNTE4LzEvSVFIME9kNjZfMWlBT1YxNDhMdjYyTXAyQ0w4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZi83OGM0MTQtOWIwOS00Nzc1LWE1NTgtZTNkZWZiN2UyNTE4 LzEvSVFIME9kNjZfMWlBT1YxNDhMdjYyTXAyQ0w4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAc5SoeBbk fj3WoQMVlkRdaaEvHtcmCSA4DjA7siqjYLefhOmWSGitOC24yTOu2TQa2U+goPS2 MxZsmb/Ghm8CjjFs3XNDgcniqZJZWybIhx/uMhClqaZSzA+wbhfoM7G4ZiKhJpoV 6Rr9iEP168tpY/8YzzxmUv3IBsU6RupWoLoC/nD8sb20ln1xeOOmG+Rm5Zu39JHA UulSarjNbfDUzQ7WBRib7JaYAFCxQIpi8YeKGD0AKazrgKYGmeJm4F5O6wO7rvbM 2+ynoIKoFXERUxCFmJlQJgmxmLrwbLF7SRCWdJ56plRbkHGKkiXQt1KJcWWe/9a/ sAdQ2H+D6QUKZg== -----END CERTIFICATE-----Generated at Sat Dec 6 22:41:10 2025 by rpki-client