This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/607766-8e57-451a-8b3f-5138f342e9f5/1/iB4xmT-oWHVos_zeW3_ulttDqbc.mft File: iB4xmT-oWHVos_zeW3_ulttDqbc.mft (raw, json) Hash identifier: dNODHe7YRby2cWE7RvCoaz2ozJ0AIa1Zy3jAetWuMWk= Subject key identifier: 7F:7C:ED:68:7D:5E:C7:40:B8:9A:AE:67:B4:C8:A7:9B:ED:DF:CA:E0 Authority key identifier: 88:1E:31:99:3F:A8:58:75:68:B3:FC:DE:5B:7F:EE:96:DB:43:A9:B7 Certificate issuer: /CN=881e31993fa8587568b3fcde5b7fee96db43a9b7 Certificate serial: 019B35692AAD77DC5E81B4ADD0025B51FF2D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iB4xmT-oWHVos_zeW3_ulttDqbc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/607766-8e57-451a-8b3f-5138f342e9f5/1/iB4xmT-oWHVos_zeW3_ulttDqbc.mft Manifest number: 0275 Signing time: Fri 19 Dec 2025 07:00:43 +0000 Manifest this update: Fri 19 Dec 2025 07:00:43 +0000 Manifest next update: Sat 20 Dec 2025 07:00:43 +0000 Files and hashes: 1: iB4xmT-oWHVos_zeW3_ulttDqbc.crl (hash: I8JUqJrIv3GcjhvX9Unf56qsOXJAaT4/0z0dgNKHy4k=) 2: qZNiFnxeUzz5XEPun42Fz9FodnU.roa (hash: utLDo2wO1yHKyt0UAzXgcGw7rn24hRMAbyeC1uhL2cQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/607766-8e57-451a-8b3f-5138f342e9f5/1/iB4xmT-oWHVos_zeW3_ulttDqbc.crl rsync://rpki.ripe.net/repository/DEFAULT/71/607766-8e57-451a-8b3f-5138f342e9f5/1/iB4xmT-oWHVos_zeW3_ulttDqbc.mft rsync://rpki.ripe.net/repository/DEFAULT/iB4xmT-oWHVos_zeW3_ulttDqbc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 01:23:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:35:69:2a:ad:77:dc:5e:81:b4:ad:d0:02:5b:51:ff:2d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=881e31993fa8587568b3fcde5b7fee96db43a9b7 Validity Not Before: Dec 19 07:00:43 2025 GMT Not After : Dec 20 07:00:43 2025 GMT Subject: CN=7f7ced687d5ec740b89aae67b4c8a79beddfcae0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:00:69:61:71:9f:19:b8:97:ea:5e:8d:f5:01: 98:0b:f1:b8:2e:2e:c5:9b:12:33:9a:8d:36:67:70: 91:fa:58:cc:30:bc:24:eb:bc:fe:e3:d8:36:4b:26: 75:34:08:cd:94:bb:07:07:58:90:0c:2f:07:67:c2: 93:8b:39:92:f6:64:ee:c1:75:03:c5:3c:95:fc:e9: 9a:a0:16:f5:2b:1c:0d:e1:eb:65:a7:58:ab:bd:a8: bb:41:de:88:0b:b0:2e:43:2a:80:6d:c5:e6:5b:f3: 81:52:80:cb:5b:10:51:ce:66:d9:af:5d:11:d9:38: 50:cc:b6:59:5b:97:2a:9c:d4:b9:9f:8a:5b:89:28: a3:49:d9:bf:37:05:50:f0:b1:f5:4b:b1:76:ef:e5: 86:22:fd:39:9d:4b:48:5b:86:c2:10:03:dc:18:66: 6b:6b:3d:02:73:2f:00:a9:e1:07:45:29:71:ca:22: 13:4f:34:f8:20:73:93:d6:6d:f3:b4:18:07:c9:07: 72:07:9e:31:82:e9:0b:41:c0:f5:b9:f3:68:d3:bd: a5:3c:90:ab:ea:18:4d:ff:ab:2c:ee:30:59:48:3c: 9e:17:6f:bd:9b:2d:67:ac:a0:f0:16:06:4f:22:01: ac:b1:cf:3a:84:00:2d:d9:75:59:6b:47:ba:03:8d: c8:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:7C:ED:68:7D:5E:C7:40:B8:9A:AE:67:B4:C8:A7:9B:ED:DF:CA:E0 X509v3 Authority Key Identifier: keyid:88:1E:31:99:3F:A8:58:75:68:B3:FC:DE:5B:7F:EE:96:DB:43:A9:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iB4xmT-oWHVos_zeW3_ulttDqbc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/607766-8e57-451a-8b3f-5138f342e9f5/1/iB4xmT-oWHVos_zeW3_ulttDqbc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/71/607766-8e57-451a-8b3f-5138f342e9f5/1/iB4xmT-oWHVos_zeW3_ulttDqbc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8f:ae:b3:ad:20:e0:9c:ae:1e:b1:97:ed:7a:17:9b:d6:16:41: f7:b0:94:9b:6e:d4:f0:53:15:a0:91:ff:01:89:d2:ee:63:01: 17:66:a9:a9:87:fb:b9:5a:57:2b:9a:d7:4d:8d:7d:c0:a9:8b: 37:17:b0:da:c5:85:ee:e9:9c:07:37:59:2f:4f:15:75:f8:5f: ac:ad:8d:da:3b:e5:6d:6b:32:de:0c:50:cc:96:ca:b3:17:bd: d6:51:6f:2c:ea:11:b5:71:96:d2:2c:0c:c5:6a:7d:ad:4f:ac: 15:f2:26:5a:53:28:74:4f:34:1d:6f:66:46:99:10:e1:4b:a4: 93:a9:16:24:f4:b0:9a:3b:32:d9:c3:65:e9:2f:12:98:fd:7a: 07:3c:1d:0a:81:33:3f:5c:6e:55:41:3d:08:62:59:7d:1c:c0: cd:9c:e3:d9:44:0d:ca:eb:bf:03:f5:02:d7:34:c2:6a:c3:ee: e1:b2:f8:53:f2:1b:a8:cb:bf:0e:0a:7f:46:b8:f8:3e:c0:11: 1c:5c:49:de:73:c4:8d:e1:03:d6:c8:dd:f1:42:28:31:48:0e: b9:90:13:68:eb:c8:b1:b2:b8:17:09:43:f3:24:6c:d3:fe:cd: cb:7d:3d:1f:dd:96:db:4f:65:32:db:04:d9:ae:07:70:10:42: 8c:27:db:2c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs1aSqtd9xegbSt0AJbUf8tMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg4MWUzMTk5M2ZhODU4NzU2OGIzZmNkZTViN2ZlZTk2ZGI0 M2E5YjcwHhcNMjUxMjE5MDcwMDQzWhcNMjUxMjIwMDcwMDQzWjAzMTEwLwYDVQQD Eyg3ZjdjZWQ2ODdkNWVjNzQwYjg5YWFlNjdiNGM4YTc5YmVkZGZjYWUwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsQBpYXGfGbiX6l6N9QGYC/G4Li7F mxIzmo02Z3CR+ljMMLwk67z+49g2SyZ1NAjNlLsHB1iQDC8HZ8KTizmS9mTuwXUD xTyV/OmaoBb1KxwN4etlp1irvai7Qd6IC7AuQyqAbcXmW/OBUoDLWxBRzmbZr10R 2ThQzLZZW5cqnNS5n4pbiSijSdm/NwVQ8LH1S7F27+WGIv05nUtIW4bCEAPcGGZr az0Ccy8AqeEHRSlxyiITTzT4IHOT1m3ztBgHyQdyB54xgukLQcD1ufNo072lPJCr 6hhN/6ss7jBZSDyeF2+9my1nrKDwFgZPIgGssc86hAAt2XVZa0e6A43IPQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFH987Wh9XsdAuJquZ7TIp5vt38rgMB8GA1UdIwQY MBaAFIgeMZk/qFh1aLP83lt/7pbbQ6m3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaUI0eG1ULW9XSFZvc196ZVczX3VsdHREcWJjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MS82MDc3NjYtOGU1Ny00NTFhLThiM2Yt NTEzOGYzNDJlOWY1LzEvaUI0eG1ULW9XSFZvc196ZVczX3VsdHREcWJjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83MS82MDc3NjYtOGU1Ny00NTFhLThiM2YtNTEzOGYzNDJlOWY1 LzEvaUI0eG1ULW9XSFZvc196ZVczX3VsdHREcWJjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAj66zrSDg nK4esZfteheb1hZB97CUm27U8FMVoJH/AYnS7mMBF2apqYf7uVpXK5rXTY19wKmL Nxew2sWF7umcBzdZL08VdfhfrK2N2jvlbWsy3gxQzJbKsxe91lFvLOoRtXGW0iwM xWp9rU+sFfImWlModE80HW9mRpkQ4Uukk6kWJPSwmjsy2cNl6S8SmP16BzwdCoEz P1xuVUE9CGJZfRzAzZzj2UQNyuu/A/UC1zTCasPu4bL4U/IbqMu/Dgp/Rrj4PsAR HFxJ3nPEjeED1sjd8UIoMUgOuZATaOvIsbK4FwlD8yRs0/7Ny309H92W209lMtsE 2a4HcBBCjCfbLA== -----END CERTIFICATE-----Generated at Fri Dec 19 08:52:56 2025 by rpki-client