This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/9246cb-d46b-4062-987b-5b34bc378436/1/Ix4oNZwYDqbEiKmMo693tbt5Pe4.mft File: Ix4oNZwYDqbEiKmMo693tbt5Pe4.mft (raw, json) Hash identifier: kUt3I4CuHOcXe09Ww/qtzkacN7zZ1dJdKtFm4bmBFfc= Subject key identifier: A7:F4:17:E5:69:4A:27:F9:16:8B:9C:2A:24:33:47:27:BA:9D:07:DE Authority key identifier: 23:1E:28:35:9C:18:0E:A6:C4:88:A9:8C:A3:AF:77:B5:BB:79:3D:EE Certificate issuer: /CN=231e28359c180ea6c488a98ca3af77b5bb793dee Certificate serial: 019AF50B9CBBD30AB2F6DA7CD237B9DBD415 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ix4oNZwYDqbEiKmMo693tbt5Pe4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/9246cb-d46b-4062-987b-5b34bc378436/1/Ix4oNZwYDqbEiKmMo693tbt5Pe4.mft Manifest number: 1763 Signing time: Sat 06 Dec 2025 19:02:50 +0000 Manifest this update: Sat 06 Dec 2025 19:02:50 +0000 Manifest next update: Sun 07 Dec 2025 19:02:50 +0000 Files and hashes: 1: 1--lfY911D4o-n0x13kTzxgPAa1c.roa (hash: 7jYLrsmco67v6YLtE1rUNiJwEOZGyK+AZuLqYtKHcu0=) 2: 1-PLlhObhI2KvU31PH_oGB4eDG5U.roa (hash: h2JQLRGR8RDG0rSKaLT0jUCHodG0PW/TX0LlgI0i4Qc=) 3: Ix4oNZwYDqbEiKmMo693tbt5Pe4.crl (hash: LhFQAoi+sxI5H126NStkut4QgdkBiybol3CygQPeynI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/9246cb-d46b-4062-987b-5b34bc378436/1/Ix4oNZwYDqbEiKmMo693tbt5Pe4.crl rsync://rpki.ripe.net/repository/DEFAULT/59/9246cb-d46b-4062-987b-5b34bc378436/1/Ix4oNZwYDqbEiKmMo693tbt5Pe4.mft rsync://rpki.ripe.net/repository/DEFAULT/Ix4oNZwYDqbEiKmMo693tbt5Pe4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 14:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:0b:9c:bb:d3:0a:b2:f6:da:7c:d2:37:b9:db:d4:15 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=231e28359c180ea6c488a98ca3af77b5bb793dee Validity Not Before: Dec 6 19:02:50 2025 GMT Not After : Dec 7 19:02:50 2025 GMT Subject: CN=a7f417e5694a27f9168b9c2a24334727ba9d07de Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:53:1f:73:f4:83:4e:0e:25:a0:b1:19:65:73: c1:9f:20:cd:3e:be:39:81:38:d0:ba:f4:7f:e2:c1: 8d:bd:15:d3:29:03:11:e3:fd:00:11:87:84:c2:d1: 01:c1:66:9c:2e:ab:5f:6d:c0:2d:a2:b3:15:26:bd: f4:4b:be:bb:7d:28:7b:2e:59:c5:6c:12:f2:63:f4: cf:f1:97:5a:8b:ea:0c:4f:3d:80:e6:33:70:3e:49: 10:48:83:2c:54:86:f6:81:58:58:76:a2:8b:40:c2: 25:1c:8a:65:66:8b:76:c0:f6:8f:4e:80:07:b3:13: 02:15:b4:c1:0c:c3:15:33:0a:2f:53:f6:01:5c:b3: c3:8b:70:6c:0f:b3:e6:8d:d8:6d:cc:17:08:ff:1b: d3:bb:83:f8:49:ab:e8:86:52:be:6b:79:9f:b3:06: 9b:59:70:3e:e1:f0:7e:a8:83:b1:9d:41:ed:69:da: 30:f3:06:1b:3b:85:ee:f8:e5:b6:d2:f8:37:0b:e6: e2:eb:90:46:dd:c7:53:e8:a7:2f:ca:dd:ba:07:11: 1d:6e:bc:3f:aa:02:fe:39:c0:ac:7f:ca:2c:71:1d: 61:58:08:89:aa:2e:55:00:0e:c0:a5:e2:e2:60:a7: 3e:e7:ef:94:25:61:54:95:77:17:36:0a:d7:d9:ba: 6e:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:F4:17:E5:69:4A:27:F9:16:8B:9C:2A:24:33:47:27:BA:9D:07:DE X509v3 Authority Key Identifier: keyid:23:1E:28:35:9C:18:0E:A6:C4:88:A9:8C:A3:AF:77:B5:BB:79:3D:EE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ix4oNZwYDqbEiKmMo693tbt5Pe4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/9246cb-d46b-4062-987b-5b34bc378436/1/Ix4oNZwYDqbEiKmMo693tbt5Pe4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/59/9246cb-d46b-4062-987b-5b34bc378436/1/Ix4oNZwYDqbEiKmMo693tbt5Pe4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 34:01:e3:d5:bd:c1:67:3a:db:2e:1c:ea:7e:45:10:af:a3:9d: 93:4a:3e:3a:3e:68:9c:2e:70:c8:c5:e7:3e:07:c0:1f:7d:c5: 93:6b:a6:b4:68:90:fe:37:e2:a3:16:cb:34:6b:a5:da:d0:2a: bd:4b:1c:b3:8a:29:93:c9:dc:1f:ca:b7:61:a9:f7:63:f5:a3: a0:88:87:9d:96:2a:59:0b:e6:c4:f2:bf:9c:86:3d:0b:f7:c7: c2:a9:86:b6:5f:20:2d:18:76:53:c5:c4:88:91:e3:f6:ee:5d: fa:73:a8:9c:95:6a:1e:ec:65:11:65:0a:18:f7:af:ee:a5:48: c3:aa:36:d9:66:62:c6:59:d7:d8:e2:7a:37:7d:cf:4c:38:1d: 5d:f8:91:e4:1e:a5:0a:ba:6f:34:b4:dd:7c:55:73:63:a5:15: 69:ef:67:e7:61:5f:a1:dc:69:7f:1f:8e:ed:b5:a6:4c:25:2a: ce:17:04:c7:f7:5c:a6:3b:4d:3d:88:f7:31:fe:56:ce:7b:15: c2:30:46:6a:95:be:99:db:40:e9:a1:2d:28:55:40:d8:76:67: d2:7a:a0:1d:4e:57:52:bb:40:5a:17:69:38:bc:6d:86:b8:3d: 98:6d:67:17:f4:35:39:20:9f:9a:90:26:ba:27:b5:e2:59:55: 34:f5:35:02 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1C5y70wqy9tp80je529QVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIzMWUyODM1OWMxODBlYTZjNDg4YTk4Y2EzYWY3N2I1YmI3 OTNkZWUwHhcNMjUxMjA2MTkwMjUwWhcNMjUxMjA3MTkwMjUwWjAzMTEwLwYDVQQD EyhhN2Y0MTdlNTY5NGEyN2Y5MTY4YjljMmEyNDMzNDcyN2JhOWQwN2RlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsVMfc/SDTg4loLEZZXPBnyDNPr45 gTjQuvR/4sGNvRXTKQMR4/0AEYeEwtEBwWacLqtfbcAtorMVJr30S767fSh7LlnF bBLyY/TP8Zdai+oMTz2A5jNwPkkQSIMsVIb2gVhYdqKLQMIlHIplZot2wPaPToAH sxMCFbTBDMMVMwovU/YBXLPDi3BsD7PmjdhtzBcI/xvTu4P4SavohlK+a3mfswab WXA+4fB+qIOxnUHtadow8wYbO4Xu+OW20vg3C+bi65BG3cdT6Kcvyt26BxEdbrw/ qgL+OcCsf8oscR1hWAiJqi5VAA7ApeLiYKc+5++UJWFUlXcXNgrX2bpuXQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKf0F+VpSif5FoucKiQzRye6nQfeMB8GA1UdIwQY MBaAFCMeKDWcGA6mxIipjKOvd7W7eT3uMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSXg0b05ad1lEcWJFaUttTW82OTN0YnQ1UGU0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OS85MjQ2Y2ItZDQ2Yi00MDYyLTk4N2It NWIzNGJjMzc4NDM2LzEvSXg0b05ad1lEcWJFaUttTW82OTN0YnQ1UGU0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81OS85MjQ2Y2ItZDQ2Yi00MDYyLTk4N2ItNWIzNGJjMzc4NDM2 LzEvSXg0b05ad1lEcWJFaUttTW82OTN0YnQ1UGU0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANAHj1b3B ZzrbLhzqfkUQr6Odk0o+Oj5onC5wyMXnPgfAH33Fk2umtGiQ/jfioxbLNGul2tAq vUscs4opk8ncH8q3Yan3Y/WjoIiHnZYqWQvmxPK/nIY9C/fHwqmGtl8gLRh2U8XE iJHj9u5d+nOonJVqHuxlEWUKGPev7qVIw6o22WZixlnX2OJ6N33PTDgdXfiR5B6l CrpvNLTdfFVzY6UVae9n52Ffodxpfx+O7bWmTCUqzhcEx/dcpjtNPYj3Mf5WznsV wjBGapW+mdtA6aEtKFVA2HZn0nqgHU5XUrtAWhdpOLxthrg9mG1nF/Q1OSCfmpAm uie14llVNPU1Ag== -----END CERTIFICATE-----Generated at Sun Dec 7 00:03:14 2025 by rpki-client