This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/e13b32-1ba9-4db9-a569-4aca09564fa8/1/ieXrHhIJiXh0XVQNypbP8N5HBNo.mft File: ieXrHhIJiXh0XVQNypbP8N5HBNo.mft (raw, json) Hash identifier: xrOvFcPkqTr+FtegQQ2c0k5++W37MpWWmEmI56Ixje4= Subject key identifier: 18:C4:C6:4C:F7:1B:11:85:4B:D4:DC:2C:62:22:03:6A:9D:A7:B8:0F Authority key identifier: 89:E5:EB:1E:12:09:89:78:74:5D:54:0D:CA:96:CF:F0:DE:47:04:DA Certificate issuer: /CN=89e5eb1e12098978745d540dca96cff0de4704da Certificate serial: 019AF163E159CE105D6F6A01BC8A7986E3FF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ieXrHhIJiXh0XVQNypbP8N5HBNo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/e13b32-1ba9-4db9-a569-4aca09564fa8/1/ieXrHhIJiXh0XVQNypbP8N5HBNo.mft Manifest number: 0BD6 Signing time: Sat 06 Dec 2025 02:00:46 +0000 Manifest this update: Sat 06 Dec 2025 02:00:46 +0000 Manifest next update: Sun 07 Dec 2025 02:00:46 +0000 Files and hashes: 1: ieXrHhIJiXh0XVQNypbP8N5HBNo.crl (hash: cH9U/JGPKSRj5OsVOMJjgfTG9K+UcUkfOMzmhHw6VSE=) 2: l-HFEGYP57VmF8aDDh7--ZbJBDw.roa (hash: z6foBKVqU7T5Yu/Dwks8ZalWU/MYlRsXoQCU7GPCUOE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/e13b32-1ba9-4db9-a569-4aca09564fa8/1/ieXrHhIJiXh0XVQNypbP8N5HBNo.crl rsync://rpki.ripe.net/repository/DEFAULT/48/e13b32-1ba9-4db9-a569-4aca09564fa8/1/ieXrHhIJiXh0XVQNypbP8N5HBNo.mft rsync://rpki.ripe.net/repository/DEFAULT/ieXrHhIJiXh0XVQNypbP8N5HBNo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:63:e1:59:ce:10:5d:6f:6a:01:bc:8a:79:86:e3:ff Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89e5eb1e12098978745d540dca96cff0de4704da Validity Not Before: Dec 6 02:00:46 2025 GMT Not After : Dec 7 02:00:46 2025 GMT Subject: CN=18c4c64cf71b11854bd4dc2c6222036a9da7b80f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:58:8c:06:8c:eb:c1:c1:f9:35:9d:ad:6a:62: 6c:f9:e6:89:d3:68:5a:08:d6:69:11:2d:79:ad:28: 1c:6f:2a:b2:b9:47:3a:dd:ed:e1:10:b9:35:82:ee: 6c:cf:4f:5e:fd:9a:e5:3c:47:08:ae:66:fa:db:93: a0:6c:81:41:f6:70:c3:9d:09:c7:42:b0:46:5c:69: 46:38:9a:05:cd:63:7a:16:90:a1:c7:ae:46:ad:a9: 58:ae:07:00:33:40:d0:92:d2:36:2d:b4:0c:ef:0a: 7a:ef:8c:ad:f0:bc:99:89:74:a4:31:72:3f:71:8a: fc:7a:ba:3d:2a:73:a2:16:44:34:8a:78:5a:c6:bc: 57:15:f4:48:9b:5d:f1:72:0d:30:42:31:89:9e:d8: 92:d8:c8:2d:92:78:62:70:95:bd:15:ea:21:e0:43: fc:8e:60:13:26:ec:c9:a0:1c:2d:77:d7:b4:5f:dc: 87:f8:c0:8c:0a:cd:32:1a:be:49:00:c8:82:ba:28: 65:c0:b9:9b:19:35:2c:f6:9f:13:e2:09:12:1d:ab: 95:58:dc:00:ad:41:be:dc:51:99:8c:c7:cc:c6:5a: 50:b6:36:20:c6:89:95:a5:fb:41:0c:75:77:dd:11: 26:2f:a2:28:45:91:49:88:f2:50:1c:6d:af:09:30: c0:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:C4:C6:4C:F7:1B:11:85:4B:D4:DC:2C:62:22:03:6A:9D:A7:B8:0F X509v3 Authority Key Identifier: keyid:89:E5:EB:1E:12:09:89:78:74:5D:54:0D:CA:96:CF:F0:DE:47:04:DA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ieXrHhIJiXh0XVQNypbP8N5HBNo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/e13b32-1ba9-4db9-a569-4aca09564fa8/1/ieXrHhIJiXh0XVQNypbP8N5HBNo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/48/e13b32-1ba9-4db9-a569-4aca09564fa8/1/ieXrHhIJiXh0XVQNypbP8N5HBNo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 66:6c:6d:3b:8e:d5:90:88:cb:b9:27:5a:76:48:dc:cf:66:3b: bc:1a:30:51:41:6a:7b:03:dc:cf:fb:82:25:ed:06:6c:4d:c4: a3:bf:c7:6f:db:e3:3d:a0:2a:ef:60:03:24:13:16:a3:df:25: f7:1f:4a:80:9c:22:3c:0d:90:ef:2f:e2:4e:dc:2f:7a:48:7e: 66:c2:bc:3f:68:4a:89:c3:d2:6b:17:63:fe:5c:1c:94:9c:10: 01:af:99:81:db:ab:bd:10:47:41:99:d2:39:de:cd:7f:77:ae: 38:3f:cf:c4:51:63:31:5a:9d:cb:f7:bb:6f:9a:84:c3:f5:48: f7:83:09:35:3f:41:f9:8d:6f:ae:03:10:9a:28:26:3c:be:71: 3c:07:55:39:d5:23:78:96:72:cf:35:24:ad:5f:67:57:b4:c8: c8:06:b2:32:d9:f5:5f:68:76:f4:74:0b:6e:2a:24:82:2a:d6: fe:8b:5a:2a:59:98:2e:ac:6a:e4:79:e5:33:da:53:ff:58:ad: 85:c1:b5:10:94:55:db:b0:86:b2:59:6a:29:c5:20:cc:e5:18: fa:32:b1:48:ad:0f:ef:0e:0b:e9:a7:7e:32:26:69:bc:3f:81: a1:ad:ea:a7:91:7f:be:9a:a9:6e:91:09:7c:f5:6c:23:51:0a: ba:d5:cd:83 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxY+FZzhBdb2oBvIp5huP/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg5ZTVlYjFlMTIwOTg5Nzg3NDVkNTQwZGNhOTZjZmYwZGU0 NzA0ZGEwHhcNMjUxMjA2MDIwMDQ2WhcNMjUxMjA3MDIwMDQ2WjAzMTEwLwYDVQQD EygxOGM0YzY0Y2Y3MWIxMTg1NGJkNGRjMmM2MjIyMDM2YTlkYTdiODBmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA11iMBozrwcH5NZ2tamJs+eaJ02ha CNZpES15rSgcbyqyuUc63e3hELk1gu5sz09e/ZrlPEcIrmb625OgbIFB9nDDnQnH QrBGXGlGOJoFzWN6FpChx65GralYrgcAM0DQktI2LbQM7wp674yt8LyZiXSkMXI/ cYr8ero9KnOiFkQ0inhaxrxXFfRIm13xcg0wQjGJntiS2MgtknhicJW9Feoh4EP8 jmATJuzJoBwtd9e0X9yH+MCMCs0yGr5JAMiCuihlwLmbGTUs9p8T4gkSHauVWNwA rUG+3FGZjMfMxlpQtjYgxomVpftBDHV33REmL6IoRZFJiPJQHG2vCTDA+QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBjExkz3GxGFS9TcLGIiA2qdp7gPMB8GA1UdIwQY MBaAFInl6x4SCYl4dF1UDcqWz/DeRwTaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaWVYckhoSUppWGgwWFZRTnlwYlA4TjVIQk5vLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OC9lMTNiMzItMWJhOS00ZGI5LWE1Njkt NGFjYTA5NTY0ZmE4LzEvaWVYckhoSUppWGgwWFZRTnlwYlA4TjVIQk5vLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80OC9lMTNiMzItMWJhOS00ZGI5LWE1NjktNGFjYTA5NTY0ZmE4 LzEvaWVYckhoSUppWGgwWFZRTnlwYlA4TjVIQk5vLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZmxtO47V kIjLuSdadkjcz2Y7vBowUUFqewPcz/uCJe0GbE3Eo7/Hb9vjPaAq72ADJBMWo98l 9x9KgJwiPA2Q7y/iTtwvekh+ZsK8P2hKicPSaxdj/lwclJwQAa+ZgdurvRBHQZnS Od7Nf3euOD/PxFFjMVqdy/e7b5qEw/VI94MJNT9B+Y1vrgMQmigmPL5xPAdVOdUj eJZyzzUkrV9nV7TIyAayMtn1X2h29HQLbiokgirW/otaKlmYLqxq5HnlM9pT/1it hcG1EJRV27CGsllqKcUgzOUY+jKxSK0P7w4L6ad+MiZpvD+Boa3qp5F/vpqpbpEJ fPVsI1EKutXNgw== -----END CERTIFICATE-----Generated at Sat Dec 6 07:11:27 2025 by rpki-client