This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/d86fc4-175f-423d-984e-859f7face695/1/iNEpp8ePtm0Hc7yZAINX5QfB574.mft File: iNEpp8ePtm0Hc7yZAINX5QfB574.mft (raw, json) Hash identifier: RJ2ADsSJdFL/Ti9ziSs5HYjw4KXtZgSVi9LVFjFGtY4= Subject key identifier: 07:9D:DC:5B:92:4C:AA:84:1E:E6:2B:DA:73:3A:29:70:7A:98:BC:A2 Authority key identifier: 88:D1:29:A7:C7:8F:B6:6D:07:73:BC:99:00:83:57:E5:07:C1:E7:BE Certificate issuer: /CN=88d129a7c78fb66d0773bc99008357e507c1e7be Certificate serial: 019AF12D5CC1515A30A13F96459A623CC5F4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iNEpp8ePtm0Hc7yZAINX5QfB574.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/d86fc4-175f-423d-984e-859f7face695/1/iNEpp8ePtm0Hc7yZAINX5QfB574.mft Manifest number: 0892 Signing time: Sat 06 Dec 2025 01:01:13 +0000 Manifest this update: Sat 06 Dec 2025 01:01:13 +0000 Manifest next update: Sun 07 Dec 2025 01:01:13 +0000 Files and hashes: 1: 76xLkfM6kYxOK1NXh9OOS2MHsHA.roa (hash: 6Sbux0XZ8H/iAJjFbORSyS+kiaCneStSNPq6dnkA+DU=) 2: iNEpp8ePtm0Hc7yZAINX5QfB574.crl (hash: zE8tYTUOe+smQzwu/MJNtxrmS9OeW2iyQBHwmdaBwPk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/d86fc4-175f-423d-984e-859f7face695/1/iNEpp8ePtm0Hc7yZAINX5QfB574.crl rsync://rpki.ripe.net/repository/DEFAULT/67/d86fc4-175f-423d-984e-859f7face695/1/iNEpp8ePtm0Hc7yZAINX5QfB574.mft rsync://rpki.ripe.net/repository/DEFAULT/iNEpp8ePtm0Hc7yZAINX5QfB574.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:01:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2d:5c:c1:51:5a:30:a1:3f:96:45:9a:62:3c:c5:f4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=88d129a7c78fb66d0773bc99008357e507c1e7be Validity Not Before: Dec 6 01:01:13 2025 GMT Not After : Dec 7 01:01:13 2025 GMT Subject: CN=079ddc5b924caa841ee62bda733a29707a98bca2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:f1:b9:78:2c:78:da:93:53:2e:16:40:33:91: c0:67:5b:bb:f0:39:22:a1:c7:24:77:03:93:45:63: 23:80:ac:75:f3:98:b2:7e:b9:46:8e:8d:c7:76:ca: cc:cc:ef:e8:e4:14:59:d7:6b:4e:7e:f6:a9:fe:da: d3:9e:1b:31:65:b1:6f:9f:18:54:fa:16:a0:50:9c: f4:c6:8e:82:ab:f0:91:7b:cd:fa:1b:34:b9:96:74: 4e:db:c2:c3:d0:96:c2:fe:a4:d3:4f:1a:73:d3:4e: 08:ec:df:8e:59:29:bd:6f:58:0e:af:d3:5c:f6:01: 12:00:ca:1b:3a:83:b0:e4:3e:96:95:fb:87:e4:c0: be:5b:59:b7:7f:a3:18:8d:98:0e:7a:6c:dc:b2:5c: 52:b5:d2:d9:ce:b3:b8:50:e0:94:fd:2c:9f:34:84: 94:2b:15:88:cb:a1:d7:49:4f:8f:3a:6c:08:76:4c: 7b:72:71:b0:ee:73:f1:d9:45:87:81:cd:e2:6e:d9: 5d:21:c2:55:f1:f0:f2:bf:bd:5e:51:f5:69:48:98: 7b:46:56:b7:f7:b1:b6:e5:fc:ef:0c:ab:b7:34:4f: 92:c2:17:cd:c2:28:79:38:c0:f0:e8:31:bc:96:d0: 4b:e8:1a:82:dd:95:7e:c7:8c:a0:c3:4c:f2:c2:a7: 98:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:9D:DC:5B:92:4C:AA:84:1E:E6:2B:DA:73:3A:29:70:7A:98:BC:A2 X509v3 Authority Key Identifier: keyid:88:D1:29:A7:C7:8F:B6:6D:07:73:BC:99:00:83:57:E5:07:C1:E7:BE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iNEpp8ePtm0Hc7yZAINX5QfB574.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/d86fc4-175f-423d-984e-859f7face695/1/iNEpp8ePtm0Hc7yZAINX5QfB574.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/67/d86fc4-175f-423d-984e-859f7face695/1/iNEpp8ePtm0Hc7yZAINX5QfB574.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3d:7b:c1:62:33:ed:f0:89:f8:42:3f:59:d5:ed:4b:02:e6:d5: 33:29:27:3c:aa:dd:d3:69:d2:27:5b:df:26:5c:a6:df:ba:ea: 1a:a1:92:51:a5:cb:87:0e:ba:d2:c3:c8:4c:7b:6e:89:cd:39: bf:64:96:28:90:b6:bc:10:71:76:f3:0c:95:e8:d1:a2:72:e3: dc:98:e3:e5:a1:fe:5a:e0:ff:e2:fb:f8:c0:79:c1:14:6e:4d: 5c:fe:b2:be:96:fa:07:64:e0:1c:bc:74:17:2d:66:b2:f9:ac: e5:f6:9a:94:0f:8b:a8:f4:58:a7:04:2c:78:5a:00:53:f5:48: 74:bc:c6:0d:46:7c:ad:f6:8f:59:73:d0:29:c8:8f:68:97:03: 5e:77:c6:ee:86:45:3e:06:28:26:74:40:b2:12:37:f7:4d:38: 58:d3:25:f3:fd:9e:e4:2f:f5:4c:23:38:b7:77:58:49:9d:d0: 67:a5:55:5c:14:8e:41:27:86:15:48:e9:d8:bb:d1:da:cf:93: f3:58:07:d3:f5:66:52:62:09:91:d6:88:21:19:d2:5b:2b:ff: 16:24:d9:f8:5a:c3:e8:b6:b0:68:8d:0b:9a:b9:99:83:8c:3a: 52:18:d4:eb:85:dd:53:9e:a5:35:65:29:21:ca:35:5c:1c:38: 69:73:f2:c5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLVzBUVowoT+WRZpiPMX0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg4ZDEyOWE3Yzc4ZmI2NmQwNzczYmM5OTAwODM1N2U1MDdj MWU3YmUwHhcNMjUxMjA2MDEwMTEzWhcNMjUxMjA3MDEwMTEzWjAzMTEwLwYDVQQD EygwNzlkZGM1YjkyNGNhYTg0MWVlNjJiZGE3MzNhMjk3MDdhOThiY2EyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArfG5eCx42pNTLhZAM5HAZ1u78Dki occkdwOTRWMjgKx185iyfrlGjo3HdsrMzO/o5BRZ12tOfvap/trTnhsxZbFvnxhU +hagUJz0xo6Cq/CRe836GzS5lnRO28LD0JbC/qTTTxpz004I7N+OWSm9b1gOr9Nc 9gESAMobOoOw5D6WlfuH5MC+W1m3f6MYjZgOemzcslxStdLZzrO4UOCU/SyfNISU KxWIy6HXSU+POmwIdkx7cnGw7nPx2UWHgc3ibtldIcJV8fDyv71eUfVpSJh7Rla3 97G25fzvDKu3NE+SwhfNwih5OMDw6DG8ltBL6BqC3ZV+x4ygw0zywqeYcQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAed3FuSTKqEHuYr2nM6KXB6mLyiMB8GA1UdIwQY MBaAFIjRKafHj7ZtB3O8mQCDV+UHwee+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaU5FcHA4ZVB0bTBIYzd5WkFJTlg1UWZCNTc0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ny9kODZmYzQtMTc1Zi00MjNkLTk4NGUt ODU5ZjdmYWNlNjk1LzEvaU5FcHA4ZVB0bTBIYzd5WkFJTlg1UWZCNTc0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Ny9kODZmYzQtMTc1Zi00MjNkLTk4NGUtODU5ZjdmYWNlNjk1 LzEvaU5FcHA4ZVB0bTBIYzd5WkFJTlg1UWZCNTc0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPXvBYjPt 8In4Qj9Z1e1LAubVMyknPKrd02nSJ1vfJlym37rqGqGSUaXLhw660sPITHtuic05 v2SWKJC2vBBxdvMMlejRonLj3Jjj5aH+WuD/4vv4wHnBFG5NXP6yvpb6B2TgHLx0 Fy1msvms5faalA+LqPRYpwQseFoAU/VIdLzGDUZ8rfaPWXPQKciPaJcDXnfG7oZF PgYoJnRAshI39004WNMl8/2e5C/1TCM4t3dYSZ3QZ6VVXBSOQSeGFUjp2LvR2s+T 81gH0/VmUmIJkdaIIRnSWyv/FiTZ+FrD6LawaI0LmrmZg4w6UhjU64XdU56lNWUp Ico1XBw4aXPyxQ== -----END CERTIFICATE-----Generated at Sat Dec 6 07:16:03 2025 by rpki-client