This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/201763-176c-4e78-9bc0-496f30ac5275/1/iGUv5lKWbXKKUnrubkPEhcaTn0U.mft File: iGUv5lKWbXKKUnrubkPEhcaTn0U.mft (raw, json) Hash identifier: ZXNnvu9pCY9UXivVhUwDxe8a9BJnCDiRFDtEqeCuT70= Subject key identifier: C2:06:4D:1B:EA:9D:C9:20:26:D8:97:EE:20:62:7A:C5:DA:AC:7F:97 Authority key identifier: 88:65:2F:E6:52:96:6D:72:8A:52:7A:EE:6E:43:C4:85:C6:93:9F:45 Certificate issuer: /CN=88652fe652966d728a527aee6e43c485c6939f45 Certificate serial: 019AF276E6FE7E8214709C0385CE23FA48C8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iGUv5lKWbXKKUnrubkPEhcaTn0U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/201763-176c-4e78-9bc0-496f30ac5275/1/iGUv5lKWbXKKUnrubkPEhcaTn0U.mft Manifest number: 1486 Signing time: Sat 06 Dec 2025 07:01:09 +0000 Manifest this update: Sat 06 Dec 2025 07:01:09 +0000 Manifest next update: Sun 07 Dec 2025 07:01:09 +0000 Files and hashes: 1: 1b_wV0k49kuwRrhHplXiK2XiroA.roa (hash: RH2MIMTVkHxoiPuLQAUrE2Rqg6UxaLBroHReV0YDdhs=) 2: iGUv5lKWbXKKUnrubkPEhcaTn0U.crl (hash: VuzpIZrAqOpI5CLBVBD6PeNxrrh8zUm4YB59GmHewPc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/201763-176c-4e78-9bc0-496f30ac5275/1/iGUv5lKWbXKKUnrubkPEhcaTn0U.crl rsync://rpki.ripe.net/repository/DEFAULT/39/201763-176c-4e78-9bc0-496f30ac5275/1/iGUv5lKWbXKKUnrubkPEhcaTn0U.mft rsync://rpki.ripe.net/repository/DEFAULT/iGUv5lKWbXKKUnrubkPEhcaTn0U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:76:e6:fe:7e:82:14:70:9c:03:85:ce:23:fa:48:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=88652fe652966d728a527aee6e43c485c6939f45 Validity Not Before: Dec 6 07:01:09 2025 GMT Not After : Dec 7 07:01:09 2025 GMT Subject: CN=c2064d1bea9dc92026d897ee20627ac5daac7f97 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:8a:e5:08:3d:c2:d0:3d:33:65:0a:0b:59:a8: b6:ed:bb:26:ad:18:f2:b1:5d:33:83:4c:09:50:18: 3e:2f:cc:4f:86:36:13:6b:c5:75:ad:6d:36:f0:0f: 7c:10:6f:5c:cf:56:02:39:29:b8:11:53:04:c4:a8: 7f:9a:14:8c:bb:98:11:ef:d3:29:d2:ce:4c:db:0f: 3a:64:b9:91:7b:60:9b:ce:9e:4e:4c:58:58:1e:5c: 46:42:5b:f0:a5:21:20:f1:7a:21:88:70:49:ea:33: 54:d5:f8:d6:2e:1d:c7:c6:5b:c9:2b:7c:cb:18:07: 30:be:4a:c9:2d:fa:12:37:11:a3:82:71:b1:1a:56: b3:02:7a:84:fb:ca:a6:82:a5:41:f9:fc:23:11:a4: ff:db:62:16:4a:a0:cf:24:bc:9d:91:15:5e:c7:82: e7:f3:c5:b9:71:11:28:66:94:c1:5b:06:fa:d4:11: 3d:13:aa:09:4f:4a:d5:57:96:ce:9c:1e:53:f6:a6: 2e:c7:d8:81:da:1f:b7:e0:e9:cc:ce:9b:f7:c5:3c: f5:84:b9:9c:10:0e:c7:29:3d:a1:ca:2b:cd:38:3e: db:9a:89:7a:2b:4a:6b:f5:cf:24:54:02:fe:d5:45: a3:ac:80:8a:71:3b:8a:02:24:10:af:3f:d2:44:b2: b0:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:06:4D:1B:EA:9D:C9:20:26:D8:97:EE:20:62:7A:C5:DA:AC:7F:97 X509v3 Authority Key Identifier: keyid:88:65:2F:E6:52:96:6D:72:8A:52:7A:EE:6E:43:C4:85:C6:93:9F:45 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iGUv5lKWbXKKUnrubkPEhcaTn0U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/201763-176c-4e78-9bc0-496f30ac5275/1/iGUv5lKWbXKKUnrubkPEhcaTn0U.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/39/201763-176c-4e78-9bc0-496f30ac5275/1/iGUv5lKWbXKKUnrubkPEhcaTn0U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5f:69:9f:6a:12:68:88:6e:a5:4a:11:8c:85:89:89:6c:05:20: 4e:48:89:cd:05:36:c6:f7:3b:fa:c9:bc:c5:22:ee:6c:1c:2a: 18:f3:43:bd:43:95:64:81:9a:22:86:bb:63:87:50:14:3c:72: 71:2a:9e:64:12:17:19:f1:f6:6b:1a:6d:65:a4:8c:15:96:11: 9a:72:c4:4a:1a:06:ae:b4:c9:00:eb:ba:cf:9a:5c:ca:ae:4e: 2f:ac:28:28:d5:b2:0e:38:79:6b:1f:30:67:1d:78:4b:80:b8: 37:7f:a1:d7:1d:87:53:da:c3:00:b5:d7:e0:00:7e:3d:87:73: 13:4a:04:d0:d1:57:e5:0e:b3:d3:42:20:5c:09:2d:54:ef:b9: 79:1b:2b:08:91:33:97:9d:22:db:da:da:fb:51:14:9d:5f:3e: 8d:a2:d2:a9:5b:ec:8a:6c:96:69:e9:c8:b7:d8:78:f4:13:53: 71:3c:fd:f4:ac:b2:19:13:e1:12:0f:7c:0b:2d:ba:de:ca:c2: 26:ea:e1:db:cc:3c:04:e6:50:ae:60:60:8d:a8:0e:b1:d6:90: 9d:0e:0c:d9:ef:09:96:55:a6:3b:0b:f2:4b:a8:67:4a:b8:ce: e0:3f:f1:69:17:42:52:f0:55:d8:9d:49:a0:07:0c:ae:35:c4: 9d:a4:8b:53 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrydub+foIUcJwDhc4j+kjIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg4NjUyZmU2NTI5NjZkNzI4YTUyN2FlZTZlNDNjNDg1YzY5 MzlmNDUwHhcNMjUxMjA2MDcwMTA5WhcNMjUxMjA3MDcwMTA5WjAzMTEwLwYDVQQD EyhjMjA2NGQxYmVhOWRjOTIwMjZkODk3ZWUyMDYyN2FjNWRhYWM3Zjk3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA34rlCD3C0D0zZQoLWai27bsmrRjy sV0zg0wJUBg+L8xPhjYTa8V1rW028A98EG9cz1YCOSm4EVMExKh/mhSMu5gR79Mp 0s5M2w86ZLmRe2Cbzp5OTFhYHlxGQlvwpSEg8XohiHBJ6jNU1fjWLh3HxlvJK3zL GAcwvkrJLfoSNxGjgnGxGlazAnqE+8qmgqVB+fwjEaT/22IWSqDPJLydkRVex4Ln 88W5cREoZpTBWwb61BE9E6oJT0rVV5bOnB5T9qYux9iB2h+34OnMzpv3xTz1hLmc EA7HKT2hyivNOD7bmol6K0pr9c8kVAL+1UWjrICKcTuKAiQQrz/SRLKwewIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMIGTRvqnckgJtiX7iBiesXarH+XMB8GA1UdIwQY MBaAFIhlL+ZSlm1yilJ67m5DxIXGk59FMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaUdVdjVsS1diWEtLVW5ydWJrUEVoY2FUbjBVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOS8yMDE3NjMtMTc2Yy00ZTc4LTliYzAt NDk2ZjMwYWM1Mjc1LzEvaUdVdjVsS1diWEtLVW5ydWJrUEVoY2FUbjBVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zOS8yMDE3NjMtMTc2Yy00ZTc4LTliYzAtNDk2ZjMwYWM1Mjc1 LzEvaUdVdjVsS1diWEtLVW5ydWJrUEVoY2FUbjBVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAX2mfahJo iG6lShGMhYmJbAUgTkiJzQU2xvc7+sm8xSLubBwqGPNDvUOVZIGaIoa7Y4dQFDxy cSqeZBIXGfH2axptZaSMFZYRmnLEShoGrrTJAOu6z5pcyq5OL6woKNWyDjh5ax8w Zx14S4C4N3+h1x2HU9rDALXX4AB+PYdzE0oE0NFX5Q6z00IgXAktVO+5eRsrCJEz l50i29ra+1EUnV8+jaLSqVvsimyWaenIt9h49BNTcTz99KyyGRPhEg98Cy263srC Jurh28w8BOZQrmBgjagOsdaQnQ4M2e8JllWmOwvyS6hnSrjO4D/xaRdCUvBV2J1J oAcMrjXEnaSLUw== -----END CERTIFICATE-----Generated at Sat Dec 6 11:21:57 2025 by rpki-client