This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/1197f2-7f8e-48e4-bda9-f5bb2b2d63be/1/ii4u4759dSXtdLeq4H6Srsr4STY.mft File: ii4u4759dSXtdLeq4H6Srsr4STY.mft (raw, json) Hash identifier: xLRqqvkRecSMocljP63Z5VfFgims2JXWlYOA6qgsCcI= Subject key identifier: C6:9D:CB:80:CF:5B:28:78:B7:18:EC:36:4C:0F:A7:9B:45:D7:3C:CA Authority key identifier: 8A:2E:2E:E3:BE:7D:75:25:ED:74:B7:AA:E0:7E:92:AE:CA:F8:49:36 Certificate issuer: /CN=8a2e2ee3be7d7525ed74b7aae07e92aecaf84936 Certificate serial: 019AF389F943B0BDD0C53655DD2B6CE0A861 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ii4u4759dSXtdLeq4H6Srsr4STY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/1197f2-7f8e-48e4-bda9-f5bb2b2d63be/1/ii4u4759dSXtdLeq4H6Srsr4STY.mft Manifest number: 05F0 Signing time: Sat 06 Dec 2025 12:01:36 +0000 Manifest this update: Sat 06 Dec 2025 12:01:36 +0000 Manifest next update: Sun 07 Dec 2025 12:01:36 +0000 Files and hashes: 1: ETp4ram_5wDX-QYsHkSwfey16LY.roa (hash: fc9E3PvcS1jfb9J0ZMzkrwdWGh4l1nHW4cyDiTGJbiU=) 2: ii4u4759dSXtdLeq4H6Srsr4STY.crl (hash: iBSWUZr1N3GIJtUKg3aq9etDngKHpbVGd+NwfekOA48=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/1197f2-7f8e-48e4-bda9-f5bb2b2d63be/1/ii4u4759dSXtdLeq4H6Srsr4STY.crl rsync://rpki.ripe.net/repository/DEFAULT/37/1197f2-7f8e-48e4-bda9-f5bb2b2d63be/1/ii4u4759dSXtdLeq4H6Srsr4STY.mft rsync://rpki.ripe.net/repository/DEFAULT/ii4u4759dSXtdLeq4H6Srsr4STY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:89:f9:43:b0:bd:d0:c5:36:55:dd:2b:6c:e0:a8:61 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8a2e2ee3be7d7525ed74b7aae07e92aecaf84936 Validity Not Before: Dec 6 12:01:36 2025 GMT Not After : Dec 7 12:01:36 2025 GMT Subject: CN=c69dcb80cf5b2878b718ec364c0fa79b45d73cca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:b1:01:c1:2b:e2:f2:0c:91:f0:40:4e:9d:72: 12:4a:1f:db:17:64:de:9c:c1:17:15:11:bf:0e:de: 29:a8:f2:7f:e3:94:c3:e8:31:04:b5:87:d9:24:da: 97:5f:68:fc:38:fa:34:73:df:a6:ed:4e:d3:1a:39: fc:24:5c:a3:f4:6a:82:58:fc:8f:cd:da:87:45:7f: b4:37:54:8d:10:37:a0:56:15:da:ed:cd:fd:05:a4: d1:2d:72:83:ce:f3:65:d7:f7:02:71:c1:77:36:aa: 5e:88:fb:6c:5a:58:a7:b9:13:dd:f5:20:ab:f4:73: cf:43:af:de:59:dd:6e:e6:ae:e0:7b:f5:91:1d:ae: 10:d9:2e:64:ef:49:fd:65:c3:35:aa:55:b1:3d:91: 65:2b:e0:16:35:5b:f6:d2:05:0a:df:80:44:ef:e2: 08:0f:9e:68:ee:38:72:2f:34:87:cc:fb:7e:6e:d6: d5:bd:92:d5:13:e6:66:72:34:0a:6a:e6:88:3e:73: e4:55:06:dd:57:3f:59:96:65:c1:e2:f2:be:e9:c2: 8b:c3:96:4a:d1:f9:2f:b8:df:bd:b0:88:1d:b4:41: 1c:7b:3e:f8:69:f6:c6:8e:f6:3d:a2:e7:19:2f:dd: ab:21:ec:3a:4f:72:44:42:c2:d2:57:44:8c:c6:29: dd:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:9D:CB:80:CF:5B:28:78:B7:18:EC:36:4C:0F:A7:9B:45:D7:3C:CA X509v3 Authority Key Identifier: keyid:8A:2E:2E:E3:BE:7D:75:25:ED:74:B7:AA:E0:7E:92:AE:CA:F8:49:36 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ii4u4759dSXtdLeq4H6Srsr4STY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/1197f2-7f8e-48e4-bda9-f5bb2b2d63be/1/ii4u4759dSXtdLeq4H6Srsr4STY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/37/1197f2-7f8e-48e4-bda9-f5bb2b2d63be/1/ii4u4759dSXtdLeq4H6Srsr4STY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3b:16:c1:d7:83:00:b5:9d:e9:2a:fe:57:1f:00:53:0d:f4:af: 55:31:c8:49:4c:84:d0:08:0c:79:15:be:0c:b6:be:73:5e:bd: f4:a5:d6:43:f4:c2:96:e2:2e:c4:6b:66:5a:a3:a2:3a:4d:76: 79:7f:8a:8e:c4:03:cc:fb:63:74:4c:03:f6:15:57:e7:b1:48: 55:71:1f:14:d3:8d:dc:0d:b3:d9:58:5b:ea:ee:b3:bd:67:4f: 7e:01:79:97:40:10:b7:8a:e4:6b:71:3f:92:43:2f:02:2a:a0: ff:bf:51:64:df:e1:04:d4:67:c5:28:d2:47:05:7d:4a:3e:6d: 59:b1:c4:05:0f:e8:e6:b8:18:60:07:7b:d0:69:92:0b:2f:27: 06:b2:17:3d:9c:ba:bd:c1:65:97:e4:a5:d2:ac:9e:23:71:b7: ed:ab:9b:4c:ba:24:f2:dd:6b:87:6e:d1:9b:52:a0:51:f4:6a: a6:b8:88:a1:01:8a:b1:52:85:b1:94:c8:2d:dc:12:be:9b:29: 08:93:d1:bf:f3:21:f0:fd:b5:8d:66:0e:c3:9e:27:43:f2:f1: 74:ef:23:0a:2b:64:a7:b1:55:fa:b0:9a:5e:4e:c5:8f:a5:17: 4c:17:8c:59:fb:bd:7f:84:38:24:85:ee:a3:4f:eb:16:9e:63: a3:f9:f9:2e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrziflDsL3QxTZV3Sts4KhhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhhMmUyZWUzYmU3ZDc1MjVlZDc0YjdhYWUwN2U5MmFlY2Fm ODQ5MzYwHhcNMjUxMjA2MTIwMTM2WhcNMjUxMjA3MTIwMTM2WjAzMTEwLwYDVQQD EyhjNjlkY2I4MGNmNWIyODc4YjcxOGVjMzY0YzBmYTc5YjQ1ZDczY2NhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA17EBwSvi8gyR8EBOnXISSh/bF2Te nMEXFRG/Dt4pqPJ/45TD6DEEtYfZJNqXX2j8OPo0c9+m7U7TGjn8JFyj9GqCWPyP zdqHRX+0N1SNEDegVhXa7c39BaTRLXKDzvNl1/cCccF3NqpeiPtsWlinuRPd9SCr 9HPPQ6/eWd1u5q7ge/WRHa4Q2S5k70n9ZcM1qlWxPZFlK+AWNVv20gUK34BE7+II D55o7jhyLzSHzPt+btbVvZLVE+ZmcjQKauaIPnPkVQbdVz9ZlmXB4vK+6cKLw5ZK 0fkvuN+9sIgdtEEcez74afbGjvY9oucZL92rIew6T3JEQsLSV0SMxindoQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMady4DPWyh4txjsNkwPp5tF1zzKMB8GA1UdIwQY MBaAFIouLuO+fXUl7XS3quB+kq7K+Ek2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaWk0dTQ3NTlkU1h0ZExlcTRINlNyc3I0U1RZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNy8xMTk3ZjItN2Y4ZS00OGU0LWJkYTkt ZjViYjJiMmQ2M2JlLzEvaWk0dTQ3NTlkU1h0ZExlcTRINlNyc3I0U1RZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNy8xMTk3ZjItN2Y4ZS00OGU0LWJkYTktZjViYjJiMmQ2M2Jl LzEvaWk0dTQ3NTlkU1h0ZExlcTRINlNyc3I0U1RZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOxbB14MA tZ3pKv5XHwBTDfSvVTHISUyE0AgMeRW+DLa+c1699KXWQ/TCluIuxGtmWqOiOk12 eX+KjsQDzPtjdEwD9hVX57FIVXEfFNON3A2z2Vhb6u6zvWdPfgF5l0AQt4rka3E/ kkMvAiqg/79RZN/hBNRnxSjSRwV9Sj5tWbHEBQ/o5rgYYAd70GmSCy8nBrIXPZy6 vcFll+Sl0qyeI3G37aubTLok8t1rh27Rm1KgUfRqpriIoQGKsVKFsZTILdwSvpsp CJPRv/Mh8P21jWYOw54nQ/LxdO8jCitkp7FV+rCaXk7Fj6UXTBeMWfu9f4Q4JIXu o0/rFp5jo/n5Lg== -----END CERTIFICATE-----Generated at Sat Dec 6 14:20:20 2025 by rpki-client