This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/68cd10-e5cc-4f47-84a9-15a0207d4609/1/iKWrZp-r5y3sLoN4R2p-kVwk7c8.mft File: iKWrZp-r5y3sLoN4R2p-kVwk7c8.mft (raw, json) Hash identifier: AMJb0v6X3O2uCcYRSkm2zS2PwufvWb6EtDFjGNkAs8s= Subject key identifier: 8C:89:2C:75:9C:39:7F:9D:6B:70:13:1A:53:57:AB:27:4F:64:22:B3 Authority key identifier: 88:A5:AB:66:9F:AB:E7:2D:EC:2E:83:78:47:6A:7E:91:5C:24:ED:CF Certificate issuer: /CN=88a5ab669fabe72dec2e8378476a7e915c24edcf Certificate serial: 019AF12D5D3720A6D19B2AB6B687616FED9F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iKWrZp-r5y3sLoN4R2p-kVwk7c8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/68cd10-e5cc-4f47-84a9-15a0207d4609/1/iKWrZp-r5y3sLoN4R2p-kVwk7c8.mft Manifest number: 0DCE Signing time: Sat 06 Dec 2025 01:01:13 +0000 Manifest this update: Sat 06 Dec 2025 01:01:13 +0000 Manifest next update: Sun 07 Dec 2025 01:01:13 +0000 Files and hashes: 1: 8l1JGPKaxK0LdzidLYE5O7KO7uc.roa (hash: iLVJNEHjRSQZgufW9Xco39laNybFCSoPb4TytjD2nas=) 2: ZaUvqR58Anq8vLQipN0wr5eky28.roa (hash: SPNO6fIwJVYF/onFgsSackS0wfwUe38bLzIxAklnkrs=) 3: dXGr5BqS128mRLd0J3At49a2qzg.roa (hash: wuoQDj1SJzE/S7y91rkdzuUmyIzNX+hGJtJoYwKPBvU=) 4: iKWrZp-r5y3sLoN4R2p-kVwk7c8.crl (hash: GQMUsMDxnVXT878HRVajzEWh+8ULo1ogk6IvSwEBmi4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/68cd10-e5cc-4f47-84a9-15a0207d4609/1/iKWrZp-r5y3sLoN4R2p-kVwk7c8.crl rsync://rpki.ripe.net/repository/DEFAULT/3c/68cd10-e5cc-4f47-84a9-15a0207d4609/1/iKWrZp-r5y3sLoN4R2p-kVwk7c8.mft rsync://rpki.ripe.net/repository/DEFAULT/iKWrZp-r5y3sLoN4R2p-kVwk7c8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:01:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2d:5d:37:20:a6:d1:9b:2a:b6:b6:87:61:6f:ed:9f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=88a5ab669fabe72dec2e8378476a7e915c24edcf Validity Not Before: Dec 6 01:01:13 2025 GMT Not After : Dec 7 01:01:13 2025 GMT Subject: CN=8c892c759c397f9d6b70131a5357ab274f6422b3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:76:a1:7c:53:be:f1:ec:db:95:09:e5:5f:cc: a4:4b:dc:5a:a3:a0:73:e5:78:be:b7:38:78:5c:d9: 56:5f:df:1e:3a:a3:67:75:21:08:bc:a8:be:42:88: 3b:30:bd:45:fb:8f:4b:d7:fa:12:72:c1:37:45:83: ad:5b:2f:61:7d:4f:cf:fc:7a:42:5e:c1:70:b5:99: cc:44:a4:88:15:20:f6:60:e6:9f:28:ae:1c:93:18: 11:22:65:de:83:20:b3:82:3e:c1:8e:cf:78:d8:92: 99:82:a9:91:ce:16:62:c4:4a:1f:3e:8b:7e:07:b2: 9c:a3:07:e6:71:5f:ee:4f:11:26:25:78:72:bf:68: 78:da:d2:9d:9c:4f:e7:de:32:4e:b9:d9:0a:ea:95: 32:54:22:ed:74:10:28:3b:5e:b4:c0:8d:29:5f:10: 44:31:b3:ab:de:44:41:fd:83:f2:ca:2b:52:61:16: 72:29:b4:c4:f5:59:73:0a:86:12:4b:cd:db:6d:d3: 95:26:6f:eb:9f:f8:a2:35:88:31:62:22:ac:76:16: db:9b:ae:ed:7b:c8:bd:55:59:1c:43:3e:62:bd:fc: db:03:19:c2:ba:49:12:df:5d:c8:d2:24:9c:3b:bf: 80:ab:80:d8:fa:70:7a:70:b7:92:cf:01:e9:e6:f7: 48:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:89:2C:75:9C:39:7F:9D:6B:70:13:1A:53:57:AB:27:4F:64:22:B3 X509v3 Authority Key Identifier: keyid:88:A5:AB:66:9F:AB:E7:2D:EC:2E:83:78:47:6A:7E:91:5C:24:ED:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iKWrZp-r5y3sLoN4R2p-kVwk7c8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/68cd10-e5cc-4f47-84a9-15a0207d4609/1/iKWrZp-r5y3sLoN4R2p-kVwk7c8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/68cd10-e5cc-4f47-84a9-15a0207d4609/1/iKWrZp-r5y3sLoN4R2p-kVwk7c8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3c:de:73:bc:d2:1e:2c:cd:a6:ee:7b:1e:df:ec:e1:d2:d0:7a: b9:25:5a:20:e5:4c:90:75:5b:4a:4f:7a:05:0f:b8:7a:be:22: 66:75:8a:c7:6e:94:44:e1:70:d7:46:2c:61:11:08:57:d3:d0: 7c:d4:de:98:ef:98:2c:d2:4b:0c:f5:9e:be:42:34:a4:2b:d7: e7:70:15:05:c4:e4:ba:54:d2:09:51:7a:a9:ea:c1:62:77:36: 8e:93:dc:39:8b:1a:db:69:53:41:42:97:14:59:0f:4c:fc:0a: 01:0c:a5:2b:97:5e:d6:53:24:d5:5a:3f:c5:f5:e9:2b:c5:9e: e5:7b:f6:c1:7b:6c:bd:3c:6d:ef:55:7d:e8:01:cb:bd:fa:dd: 4a:5a:28:bd:84:14:fa:70:26:d6:ef:e5:92:d6:1f:90:7c:8e: 55:aa:0a:4a:ac:e9:43:14:3c:3a:8f:80:1d:be:dc:31:48:9f: 01:a1:70:66:7d:9b:12:d5:2b:3f:4c:8f:b6:89:40:0d:da:c5: 17:bd:40:83:2b:74:83:49:91:89:8a:93:f9:0d:bb:0b:d2:e7: 6d:a9:f3:a3:23:4e:f3:b2:70:3a:be:e7:10:b7:b4:06:e8:fc: 69:ff:1b:30:87:19:a3:e7:80:c4:52:fe:8c:5e:58:a1:11:9f: 7a:21:62:4c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLV03IKbRmyq2todhb+2fMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg4YTVhYjY2OWZhYmU3MmRlYzJlODM3ODQ3NmE3ZTkxNWMy NGVkY2YwHhcNMjUxMjA2MDEwMTEzWhcNMjUxMjA3MDEwMTEzWjAzMTEwLwYDVQQD Eyg4Yzg5MmM3NTljMzk3ZjlkNmI3MDEzMWE1MzU3YWIyNzRmNjQyMmIzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA13ahfFO+8ezblQnlX8ykS9xao6Bz 5Xi+tzh4XNlWX98eOqNndSEIvKi+Qog7ML1F+49L1/oScsE3RYOtWy9hfU/P/HpC XsFwtZnMRKSIFSD2YOafKK4ckxgRImXegyCzgj7Bjs942JKZgqmRzhZixEofPot+ B7KcowfmcV/uTxEmJXhyv2h42tKdnE/n3jJOudkK6pUyVCLtdBAoO160wI0pXxBE MbOr3kRB/YPyyitSYRZyKbTE9VlzCoYSS83bbdOVJm/rn/iiNYgxYiKsdhbbm67t e8i9VVkcQz5ivfzbAxnCukkS313I0iScO7+Aq4DY+nB6cLeSzwHp5vdIBQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIyJLHWcOX+da3ATGlNXqydPZCKzMB8GA1UdIwQY MBaAFIilq2afq+ct7C6DeEdqfpFcJO3PMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaUtXclpwLXI1eTNzTG9ONFIycC1rVndrN2M4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYy82OGNkMTAtZTVjYy00ZjQ3LTg0YTkt MTVhMDIwN2Q0NjA5LzEvaUtXclpwLXI1eTNzTG9ONFIycC1rVndrN2M4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYy82OGNkMTAtZTVjYy00ZjQ3LTg0YTktMTVhMDIwN2Q0NjA5 LzEvaUtXclpwLXI1eTNzTG9ONFIycC1rVndrN2M4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPN5zvNIe LM2m7nse3+zh0tB6uSVaIOVMkHVbSk96BQ+4er4iZnWKx26UROFw10YsYREIV9PQ fNTemO+YLNJLDPWevkI0pCvX53AVBcTkulTSCVF6qerBYnc2jpPcOYsa22lTQUKX FFkPTPwKAQylK5de1lMk1Vo/xfXpK8We5Xv2wXtsvTxt71V96AHLvfrdSloovYQU +nAm1u/lktYfkHyOVaoKSqzpQxQ8Oo+AHb7cMUifAaFwZn2bEtUrP0yPtolADdrF F71Agyt0g0mRiYqT+Q27C9LnbanzoyNO87JwOr7nELe0Buj8af8bMIcZo+eAxFL+ jF5YoRGfeiFiTA== -----END CERTIFICATE-----Generated at Sat Dec 6 08:06:09 2025 by rpki-client