This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/b3c193-ced3-4362-bb6f-59d649c0db5d/1/_iFRDnSlthGog2amTtL7jmAVQpM.mft File: _iFRDnSlthGog2amTtL7jmAVQpM.mft (raw, json) Hash identifier: DY9azs+rET4IoSBAhaFvQcKVvoopxSwz+P3myEGsrLc= Subject key identifier: 95:04:99:6B:F5:62:F3:40:0E:97:22:BA:0F:00:8D:C4:44:A0:06:5A Authority key identifier: FE:21:51:0E:74:A5:B6:11:A8:83:66:A6:4E:D2:FB:8E:60:15:42:93 Certificate issuer: /CN=fe21510e74a5b611a88366a64ed2fb8e60154293 Certificate serial: 019B3BD9B5A0934EEADD6F4425684B4DD9BC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_iFRDnSlthGog2amTtL7jmAVQpM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/b3c193-ced3-4362-bb6f-59d649c0db5d/1/_iFRDnSlthGog2amTtL7jmAVQpM.mft Manifest number: 1786 Signing time: Sat 20 Dec 2025 13:01:21 +0000 Manifest this update: Sat 20 Dec 2025 13:01:21 +0000 Manifest next update: Sun 21 Dec 2025 13:01:21 +0000 Files and hashes: 1: _iFRDnSlthGog2amTtL7jmAVQpM.crl (hash: 6cl7Y+1pGo2XYV48mlG+93HF7Na0hDpnmHFC4EUrSbY=) 2: pA-X0SaB0DP88NQK6S16CRpbIws.roa (hash: /lnCuMiAMJ5HoCTByF87eDA744xmzbWJMwOSkdeAHzQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/b3c193-ced3-4362-bb6f-59d649c0db5d/1/_iFRDnSlthGog2amTtL7jmAVQpM.crl rsync://rpki.ripe.net/repository/DEFAULT/47/b3c193-ced3-4362-bb6f-59d649c0db5d/1/_iFRDnSlthGog2amTtL7jmAVQpM.mft rsync://rpki.ripe.net/repository/DEFAULT/_iFRDnSlthGog2amTtL7jmAVQpM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 09:56:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3b:d9:b5:a0:93:4e:ea:dd:6f:44:25:68:4b:4d:d9:bc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fe21510e74a5b611a88366a64ed2fb8e60154293 Validity Not Before: Dec 20 13:01:21 2025 GMT Not After : Dec 21 13:01:21 2025 GMT Subject: CN=9504996bf562f3400e9722ba0f008dc444a0065a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:b9:c8:56:41:db:82:65:e7:d7:50:7b:87:04: b1:db:6e:01:7b:3b:53:ee:89:b0:77:44:15:9d:11: 0a:e0:7f:31:d3:84:7b:6c:db:69:70:51:f6:5e:22: db:e7:30:53:68:11:cb:e1:de:70:d1:39:9c:d7:a5: 2b:91:19:44:be:43:14:59:a7:da:31:1c:86:60:39: e2:fa:6e:c9:7c:e6:6a:15:b5:10:93:ee:8b:1f:30: df:92:ec:be:06:36:84:6d:00:f3:be:81:e4:f0:1e: 2c:5d:f0:b3:52:c1:a7:80:e2:a7:47:94:61:ac:bd: c3:a2:db:28:56:35:03:03:de:3b:04:ef:11:cf:79: fa:bf:f4:af:41:70:52:42:82:a9:8c:c6:67:e3:c5: 6b:a5:72:80:78:2d:96:cf:ec:64:21:5d:4c:74:f5: e0:4a:a3:20:7b:6e:78:9b:d8:ac:38:0b:b2:fe:46: ec:cb:88:0c:4d:94:12:f2:47:b5:ad:4c:a9:3e:77: de:63:56:f7:1b:64:d9:4c:4e:91:a3:c3:b6:02:56: a2:b0:d4:59:92:e1:fc:3b:dd:f8:6d:1d:7d:66:68: d9:df:0d:3a:44:eb:b9:4b:fd:67:06:79:35:9d:78: bc:cd:59:14:3f:d5:79:99:78:f3:c4:ce:f9:fd:b1: 33:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:04:99:6B:F5:62:F3:40:0E:97:22:BA:0F:00:8D:C4:44:A0:06:5A X509v3 Authority Key Identifier: keyid:FE:21:51:0E:74:A5:B6:11:A8:83:66:A6:4E:D2:FB:8E:60:15:42:93 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_iFRDnSlthGog2amTtL7jmAVQpM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/b3c193-ced3-4362-bb6f-59d649c0db5d/1/_iFRDnSlthGog2amTtL7jmAVQpM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/47/b3c193-ced3-4362-bb6f-59d649c0db5d/1/_iFRDnSlthGog2amTtL7jmAVQpM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 05:e4:9f:0a:ef:a7:b2:2d:7e:7a:07:8c:7f:40:aa:90:d9:aa: 00:51:82:7b:f2:f3:e6:2b:94:06:5c:ea:a2:44:d0:f5:46:ce: 9e:24:6e:ab:d0:23:ae:f9:62:44:1e:d0:a3:66:72:16:cc:3d: 32:ce:bf:ae:5a:55:8f:bd:b9:4d:e8:23:f6:cb:1e:49:76:74: df:78:2b:4f:ec:f1:9a:f0:fb:66:cf:8a:42:ad:16:5d:35:65: 3f:e7:34:ec:cd:2a:2a:61:50:61:78:2f:9f:55:ab:8c:68:39: 46:9f:26:94:26:43:27:b9:d0:39:40:d6:76:de:45:27:70:55: 24:e6:58:fd:eb:f5:b9:45:95:23:ec:d2:3e:29:88:72:3d:6d: 4c:68:23:90:9c:e0:99:e0:6c:f8:ea:fc:a9:d3:23:9b:67:b9: 74:b7:aa:6d:28:13:76:2d:97:fc:b3:a4:5a:81:78:0a:2b:4a: 09:d8:c9:ce:82:7b:8b:e6:da:b3:5f:0d:f1:68:62:a2:76:42: ae:88:f5:5d:6a:e2:39:1b:84:f7:37:b8:f0:34:f2:0c:44:e5: ac:3a:1d:99:1f:49:22:b1:74:79:fc:d3:37:68:9c:58:f1:b2: 73:c8:8b:1c:b5:e1:96:58:d4:ec:7d:c2:12:7d:9a:1a:d7:a9: bf:b9:2d:67 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs72bWgk07q3W9EJWhLTdm8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZlMjE1MTBlNzRhNWI2MTFhODgzNjZhNjRlZDJmYjhlNjAx NTQyOTMwHhcNMjUxMjIwMTMwMTIxWhcNMjUxMjIxMTMwMTIxWjAzMTEwLwYDVQQD Eyg5NTA0OTk2YmY1NjJmMzQwMGU5NzIyYmEwZjAwOGRjNDQ0YTAwNjVhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkLnIVkHbgmXn11B7hwSx224BeztT 7omwd0QVnREK4H8x04R7bNtpcFH2XiLb5zBTaBHL4d5w0Tmc16UrkRlEvkMUWafa MRyGYDni+m7JfOZqFbUQk+6LHzDfkuy+BjaEbQDzvoHk8B4sXfCzUsGngOKnR5Rh rL3DotsoVjUDA947BO8Rz3n6v/SvQXBSQoKpjMZn48VrpXKAeC2Wz+xkIV1MdPXg SqMge254m9isOAuy/kbsy4gMTZQS8ke1rUypPnfeY1b3G2TZTE6Ro8O2AlaisNRZ kuH8O934bR19ZmjZ3w06ROu5S/1nBnk1nXi8zVkUP9V5mXjzxM75/bEzcQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJUEmWv1YvNADpciug8AjcREoAZaMB8GA1UdIwQY MBaAFP4hUQ50pbYRqINmpk7S+45gFUKTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX2lGUkRuU2x0aEdvZzJhbVR0TDdqbUFWUXBNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ny9iM2MxOTMtY2VkMy00MzYyLWJiNmYt NTlkNjQ5YzBkYjVkLzEvX2lGUkRuU2x0aEdvZzJhbVR0TDdqbUFWUXBNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Ny9iM2MxOTMtY2VkMy00MzYyLWJiNmYtNTlkNjQ5YzBkYjVk LzEvX2lGUkRuU2x0aEdvZzJhbVR0TDdqbUFWUXBNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABeSfCu+n si1+egeMf0CqkNmqAFGCe/Lz5iuUBlzqokTQ9UbOniRuq9AjrvliRB7Qo2ZyFsw9 Ms6/rlpVj725Tegj9sseSXZ033grT+zxmvD7Zs+KQq0WXTVlP+c07M0qKmFQYXgv n1WrjGg5Rp8mlCZDJ7nQOUDWdt5FJ3BVJOZY/ev1uUWVI+zSPimIcj1tTGgjkJzg meBs+Or8qdMjm2e5dLeqbSgTdi2X/LOkWoF4CitKCdjJzoJ7i+bas18N8WhionZC roj1XWriORuE9ze48DTyDETlrDodmR9JIrF0efzTN2icWPGyc8iLHLXhlljU7H3C En2aGtepv7ktZw== -----END CERTIFICATE-----Generated at Sat Dec 20 17:01:31 2025 by rpki-client