This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/7fb381-fc44-44f6-a385-f8a469d4e2b2/1/IacXNhMJ0pOTUcnYuiFz24MZqI8.mft File: IacXNhMJ0pOTUcnYuiFz24MZqI8.mft (raw, json) Hash identifier: fykMCozi8hjYEeZMuvtTblPJUNRH3I5Gz26ywWzZrd0= Subject key identifier: 7C:51:F6:36:E9:32:B2:9D:E5:96:7E:D0:E3:4B:2F:F5:24:9C:8C:2E Authority key identifier: 21:A7:17:36:13:09:D2:93:93:51:C9:D8:BA:21:73:DB:83:19:A8:8F Certificate issuer: /CN=21a717361309d2939351c9d8ba2173db8319a88f Certificate serial: 019AF1D1DBCED3644CF9D7D8E974EC5B812F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IacXNhMJ0pOTUcnYuiFz24MZqI8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/7fb381-fc44-44f6-a385-f8a469d4e2b2/1/IacXNhMJ0pOTUcnYuiFz24MZqI8.mft Manifest number: 0F7E Signing time: Sat 06 Dec 2025 04:00:53 +0000 Manifest this update: Sat 06 Dec 2025 04:00:53 +0000 Manifest next update: Sun 07 Dec 2025 04:00:53 +0000 Files and hashes: 1: IacXNhMJ0pOTUcnYuiFz24MZqI8.crl (hash: k7Qf3OrAdLvuBfTFi3GBlDEM8oVs+/fd83ClquB3Xlw=) 2: PeD0qOPxUYxeVA81pP9--xNVIzU.roa (hash: fJvgODfg2m2y6FUhDf+GL6D88mfLwM4rg59sQSq2L84=) 3: qwmmpmJft8mwuiEXYTlzhJQuep0.roa (hash: Q0Z/E8v8Q7W2fm0rXhwdPc4pFVbeDlufQTIsqxx5ZeE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/7fb381-fc44-44f6-a385-f8a469d4e2b2/1/IacXNhMJ0pOTUcnYuiFz24MZqI8.crl rsync://rpki.ripe.net/repository/DEFAULT/67/7fb381-fc44-44f6-a385-f8a469d4e2b2/1/IacXNhMJ0pOTUcnYuiFz24MZqI8.mft rsync://rpki.ripe.net/repository/DEFAULT/IacXNhMJ0pOTUcnYuiFz24MZqI8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d1:db:ce:d3:64:4c:f9:d7:d8:e9:74:ec:5b:81:2f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=21a717361309d2939351c9d8ba2173db8319a88f Validity Not Before: Dec 6 04:00:53 2025 GMT Not After : Dec 7 04:00:53 2025 GMT Subject: CN=7c51f636e932b29de5967ed0e34b2ff5249c8c2e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:b1:8d:30:3f:38:6d:85:44:3d:7c:94:58:3b: 16:47:31:e2:89:14:44:91:0b:2d:cc:d5:e1:a7:b6: 3a:de:2e:ab:17:99:2f:c9:03:66:40:0c:e5:9c:16: 34:88:19:bc:31:26:6d:ff:a9:94:9a:1f:8a:bb:0a: 00:1b:ca:98:61:f9:8f:40:a3:ba:bc:72:0e:dc:09: 9d:dc:6e:97:41:ca:34:69:81:3b:fe:f6:f3:94:fc: 07:94:63:fe:a9:62:53:f0:b4:aa:f6:1f:42:90:67: f3:69:0a:38:0f:09:3a:31:7d:a9:dd:09:80:a3:8e: ce:22:ac:ad:82:a5:58:92:af:8e:cd:19:83:7a:ec: a6:4e:84:81:36:6c:f0:96:c8:c8:bd:9e:a7:3d:de: bb:87:db:bb:c0:a5:9c:59:71:ae:88:11:71:8c:f7: 06:77:73:14:03:ea:61:b6:87:dc:9f:99:6e:fd:1e: 61:ed:90:c3:d8:81:65:f7:f3:fb:9b:66:1a:46:66: 0f:1c:c8:74:39:a6:1f:0d:da:ac:7f:41:f5:ec:3e: aa:04:66:14:cc:e6:22:af:53:24:5a:61:73:20:69: 25:05:3c:b7:59:72:23:60:50:2b:61:46:52:d1:70: f6:63:bb:51:20:41:dc:14:aa:c3:71:98:1a:e1:29: da:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:51:F6:36:E9:32:B2:9D:E5:96:7E:D0:E3:4B:2F:F5:24:9C:8C:2E X509v3 Authority Key Identifier: keyid:21:A7:17:36:13:09:D2:93:93:51:C9:D8:BA:21:73:DB:83:19:A8:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IacXNhMJ0pOTUcnYuiFz24MZqI8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/7fb381-fc44-44f6-a385-f8a469d4e2b2/1/IacXNhMJ0pOTUcnYuiFz24MZqI8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/67/7fb381-fc44-44f6-a385-f8a469d4e2b2/1/IacXNhMJ0pOTUcnYuiFz24MZqI8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 14:9b:77:d2:93:4b:d4:4a:57:17:32:5c:2f:5d:c7:42:c1:45: 9b:f7:f9:e6:cd:4f:0a:bb:e5:93:b2:59:f8:b9:0d:f9:1b:9e: ad:0a:b2:1e:b0:6a:87:ff:5b:94:02:22:29:bf:25:c2:09:02: 66:41:48:d7:cd:48:65:a9:65:cc:7e:53:77:8b:57:08:ff:f0: c1:3d:62:94:42:50:a8:d8:bd:c7:07:fd:65:30:71:54:bd:ab: 72:41:fc:2b:dd:21:6c:59:52:15:01:58:45:ea:9f:6f:09:79: 47:41:ba:c5:44:73:a7:fc:ec:7b:ab:b4:16:ee:aa:a0:f7:fe: 39:e8:f5:c6:1d:60:03:9c:ab:f3:8b:10:9d:35:b2:bd:44:48: c2:d5:65:d2:74:ef:12:b8:c1:f7:e9:e7:93:8d:a7:f2:57:0a: 52:6c:03:c2:5f:fa:ab:ce:6b:5d:a7:29:40:e1:2d:09:7b:97: 94:61:2a:88:59:e3:88:70:df:3b:7f:b3:c2:99:cd:35:5e:55: 25:34:84:97:4a:5c:60:74:60:ce:c0:13:99:4d:2c:6c:9d:fc: 1c:e9:04:82:5d:c1:73:8b:ad:ce:22:f1:2e:ed:38:a5:03:ab: 1c:df:17:31:04:dd:77:b7:78:a9:c7:fb:24:8e:25:0c:82:62: 01:9a:6f:f9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0dvO02RM+dfY6XTsW4EvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIxYTcxNzM2MTMwOWQyOTM5MzUxYzlkOGJhMjE3M2RiODMx OWE4OGYwHhcNMjUxMjA2MDQwMDUzWhcNMjUxMjA3MDQwMDUzWjAzMTEwLwYDVQQD Eyg3YzUxZjYzNmU5MzJiMjlkZTU5NjdlZDBlMzRiMmZmNTI0OWM4YzJlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0LGNMD84bYVEPXyUWDsWRzHiiRRE kQstzNXhp7Y63i6rF5kvyQNmQAzlnBY0iBm8MSZt/6mUmh+KuwoAG8qYYfmPQKO6 vHIO3Amd3G6XQco0aYE7/vbzlPwHlGP+qWJT8LSq9h9CkGfzaQo4Dwk6MX2p3QmA o47OIqytgqVYkq+OzRmDeuymToSBNmzwlsjIvZ6nPd67h9u7wKWcWXGuiBFxjPcG d3MUA+phtofcn5lu/R5h7ZDD2IFl9/P7m2YaRmYPHMh0OaYfDdqsf0H17D6qBGYU zOYir1MkWmFzIGklBTy3WXIjYFArYUZS0XD2Y7tRIEHcFKrDcZga4SnagQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHxR9jbpMrKd5ZZ+0ONLL/UknIwuMB8GA1UdIwQY MBaAFCGnFzYTCdKTk1HJ2Lohc9uDGaiPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSWFjWE5oTUowcE9UVWNuWXVpRnoyNE1acUk4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ny83ZmIzODEtZmM0NC00NGY2LWEzODUt ZjhhNDY5ZDRlMmIyLzEvSWFjWE5oTUowcE9UVWNuWXVpRnoyNE1acUk4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Ny83ZmIzODEtZmM0NC00NGY2LWEzODUtZjhhNDY5ZDRlMmIy LzEvSWFjWE5oTUowcE9UVWNuWXVpRnoyNE1acUk4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFJt30pNL 1EpXFzJcL13HQsFFm/f55s1PCrvlk7JZ+LkN+RuerQqyHrBqh/9blAIiKb8lwgkC ZkFI181IZallzH5Td4tXCP/wwT1ilEJQqNi9xwf9ZTBxVL2rckH8K90hbFlSFQFY Reqfbwl5R0G6xURzp/zse6u0Fu6qoPf+Oej1xh1gA5yr84sQnTWyvURIwtVl0nTv ErjB9+nnk42n8lcKUmwDwl/6q85rXacpQOEtCXuXlGEqiFnjiHDfO3+zwpnNNV5V JTSEl0pcYHRgzsATmU0sbJ38HOkEgl3Bc4utziLxLu04pQOrHN8XMQTdd7d4qcf7 JI4lDIJiAZpv+Q== -----END CERTIFICATE-----Generated at Sat Dec 6 07:23:57 2025 by rpki-client