This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/94927f-7e08-4f21-9bba-0f876abd1e30/1/I4hXZg3H-mCEb3ZblMtpV2JVrbY.mft File: I4hXZg3H-mCEb3ZblMtpV2JVrbY.mft (raw, json) Hash identifier: PQokMS46MHraH/nWnnmG5bD4sc43Z65Pk6aqbCjSZd4= Subject key identifier: 70:4D:E9:1E:AB:7A:89:F1:B1:D5:52:97:A7:F2:75:2D:B4:55:61:D8 Authority key identifier: 23:88:57:66:0D:C7:FA:60:84:6F:76:5B:94:CB:69:57:62:55:AD:B6 Certificate issuer: /CN=238857660dc7fa60846f765b94cb69576255adb6 Certificate serial: 019AF38938E33BBF87F1A6793BAD29B88B98 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I4hXZg3H-mCEb3ZblMtpV2JVrbY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/94927f-7e08-4f21-9bba-0f876abd1e30/1/I4hXZg3H-mCEb3ZblMtpV2JVrbY.mft Manifest number: 1766 Signing time: Sat 06 Dec 2025 12:00:47 +0000 Manifest this update: Sat 06 Dec 2025 12:00:47 +0000 Manifest next update: Sun 07 Dec 2025 12:00:47 +0000 Files and hashes: 1: I4hXZg3H-mCEb3ZblMtpV2JVrbY.crl (hash: F/VlMWY1+J1oTcGCiWy9ImNBIVTbPsdJYFiiyQ4ZMSg=) 2: XHfhEGwfsHA5Cy6rVzKyCX0VS7I.roa (hash: r0CY6B9tn8PTb3kJeN+vQ/cBCfQUrTHL37aoDlJepRA=) 3: tcPEvHuX8bqS2YKyM4C5K4tHwxk.roa (hash: rKNoYxngd5L4bRt06ua2/XaA1SqXHMSPI/cKc0JvWoY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/94927f-7e08-4f21-9bba-0f876abd1e30/1/I4hXZg3H-mCEb3ZblMtpV2JVrbY.crl rsync://rpki.ripe.net/repository/DEFAULT/32/94927f-7e08-4f21-9bba-0f876abd1e30/1/I4hXZg3H-mCEb3ZblMtpV2JVrbY.mft rsync://rpki.ripe.net/repository/DEFAULT/I4hXZg3H-mCEb3ZblMtpV2JVrbY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 12:00:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:89:38:e3:3b:bf:87:f1:a6:79:3b:ad:29:b8:8b:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=238857660dc7fa60846f765b94cb69576255adb6 Validity Not Before: Dec 6 12:00:47 2025 GMT Not After : Dec 7 12:00:47 2025 GMT Subject: CN=704de91eab7a89f1b1d55297a7f2752db45561d8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:1b:8a:6a:c9:8b:43:10:73:2c:de:a8:45:57: 99:fb:bd:c5:f2:e8:51:ef:8d:13:f7:5e:64:b9:d0: b5:46:bb:f2:06:4c:d1:1e:98:0f:39:83:d3:71:88: d1:f5:a2:97:5b:f7:3c:42:9b:f9:4d:cc:46:30:07: 2c:a5:94:c1:ac:b5:3c:b0:81:e3:3f:5a:2a:c3:bb: 56:5b:d5:50:0e:b6:7e:51:45:03:d5:69:60:be:b1: ef:e2:ad:85:4e:a1:94:c3:2a:21:b0:4c:a5:16:6d: cb:b1:65:7d:9a:46:cc:b7:81:bb:f7:a3:be:e8:42: 05:cd:be:f8:19:5a:da:42:1d:40:d8:1b:a4:5d:49: ed:a1:f4:a0:eb:b6:79:fa:2f:cb:28:57:10:98:f3: 8d:72:2f:5b:f7:8c:c5:d8:e4:6f:29:79:70:f7:6f: e6:14:ec:89:7a:46:23:f2:a4:2f:b6:f6:b4:2e:28: 5c:1c:68:f4:6d:1e:fc:72:6c:b2:a9:b8:1a:55:bb: 20:8b:2b:e4:26:30:3d:88:6f:28:7a:a1:9a:ba:b4: 78:01:71:35:e3:3e:5c:b9:d7:b8:1d:28:75:a7:16: b2:e7:25:7d:be:d5:95:be:66:3c:2e:7f:8d:56:2e: 77:14:01:f2:df:81:4a:16:b3:49:7e:6e:49:3a:2d: 5b:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:4D:E9:1E:AB:7A:89:F1:B1:D5:52:97:A7:F2:75:2D:B4:55:61:D8 X509v3 Authority Key Identifier: keyid:23:88:57:66:0D:C7:FA:60:84:6F:76:5B:94:CB:69:57:62:55:AD:B6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I4hXZg3H-mCEb3ZblMtpV2JVrbY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/94927f-7e08-4f21-9bba-0f876abd1e30/1/I4hXZg3H-mCEb3ZblMtpV2JVrbY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/32/94927f-7e08-4f21-9bba-0f876abd1e30/1/I4hXZg3H-mCEb3ZblMtpV2JVrbY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6d:d8:52:4b:38:3d:2b:20:fa:a7:23:2c:f4:6b:fa:53:cd:1b: a5:d6:bf:15:4b:3d:1a:8c:5b:d7:d3:f7:92:4a:73:27:9e:9d: 4c:ff:30:eb:21:bf:7d:71:44:5f:e0:24:ce:38:11:5a:f2:ed: 54:2e:28:12:71:ad:4f:9c:5c:0e:89:cd:d7:de:83:af:7f:5c: c2:7b:0c:34:4f:09:42:8e:ca:da:54:30:e8:88:98:88:7f:49: 96:27:60:ba:07:5f:19:5c:dd:81:3d:b8:d7:a6:96:b1:b9:8a: 26:1e:22:e1:c5:14:92:2f:2d:a1:a8:d6:4e:36:ae:d9:01:09: a5:45:86:fd:6a:39:1a:ce:9a:4c:f8:04:b7:77:6c:dd:b0:02: 34:81:5b:6e:cf:9c:a0:ad:d5:f8:b9:4c:a1:6c:3b:99:02:f9: 53:00:a5:be:f0:89:08:91:85:ce:31:da:6d:b5:ee:6b:16:34: 9f:99:d1:72:91:6e:0e:fb:77:d0:42:c0:af:3d:d7:d5:db:da: ad:74:92:81:cf:3a:f9:37:63:dc:5c:4e:07:54:ad:28:49:0f: 9f:1e:5c:99:4f:bd:49:80:7c:6b:66:1e:f3:43:36:71:e8:6e: ce:51:d2:7a:5c:0a:10:48:c2:e3:b4:c4:6b:80:b6:80:47:56: e0:63:b2:b5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrziTjjO7+H8aZ5O60puIuYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIzODg1NzY2MGRjN2ZhNjA4NDZmNzY1Yjk0Y2I2OTU3NjI1 NWFkYjYwHhcNMjUxMjA2MTIwMDQ3WhcNMjUxMjA3MTIwMDQ3WjAzMTEwLwYDVQQD Eyg3MDRkZTkxZWFiN2E4OWYxYjFkNTUyOTdhN2YyNzUyZGI0NTU2MWQ4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmxuKasmLQxBzLN6oRVeZ+73F8uhR 740T915kudC1RrvyBkzRHpgPOYPTcYjR9aKXW/c8Qpv5TcxGMAcspZTBrLU8sIHj P1oqw7tWW9VQDrZ+UUUD1WlgvrHv4q2FTqGUwyohsEylFm3LsWV9mkbMt4G796O+ 6EIFzb74GVraQh1A2BukXUntofSg67Z5+i/LKFcQmPONci9b94zF2ORvKXlw92/m FOyJekYj8qQvtva0LihcHGj0bR78cmyyqbgaVbsgiyvkJjA9iG8oeqGaurR4AXE1 4z5cude4HSh1pxay5yV9vtWVvmY8Ln+NVi53FAHy34FKFrNJfm5JOi1bXwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHBN6R6reonxsdVSl6fydS20VWHYMB8GA1UdIwQY MBaAFCOIV2YNx/pghG92W5TLaVdiVa22MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSTRoWFpnM0gtbUNFYjNaYmxNdHBWMkpWcmJZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMi85NDkyN2YtN2UwOC00ZjIxLTliYmEt MGY4NzZhYmQxZTMwLzEvSTRoWFpnM0gtbUNFYjNaYmxNdHBWMkpWcmJZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMi85NDkyN2YtN2UwOC00ZjIxLTliYmEtMGY4NzZhYmQxZTMw LzEvSTRoWFpnM0gtbUNFYjNaYmxNdHBWMkpWcmJZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbdhSSzg9 KyD6pyMs9Gv6U80bpda/FUs9Goxb19P3kkpzJ56dTP8w6yG/fXFEX+AkzjgRWvLt VC4oEnGtT5xcDonN196Dr39cwnsMNE8JQo7K2lQw6IiYiH9JlidgugdfGVzdgT24 16aWsbmKJh4i4cUUki8toajWTjau2QEJpUWG/Wo5Gs6aTPgEt3ds3bACNIFbbs+c oK3V+LlMoWw7mQL5UwClvvCJCJGFzjHabbXuaxY0n5nRcpFuDvt30ELArz3X1dva rXSSgc86+Tdj3FxOB1StKEkPnx5cmU+9SYB8a2Ye80M2cehuzlHSelwKEEjC47TE a4C2gEdW4GOytQ== -----END CERTIFICATE-----Generated at Sat Dec 6 21:57:08 2025 by rpki-client