This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/496442-aab7-409c-9eff-d46ed568f871/1/i_iimBQfwvRcBy0noL8mJlXLb1o.mft File: i_iimBQfwvRcBy0noL8mJlXLb1o.mft (raw, json) Hash identifier: lzVj6xF382Tbq8xqttGOQ6y5B4nrnFm824V7OyiODkM= Subject key identifier: 43:D4:D8:FD:3C:1F:A0:FD:9B:DA:C7:D0:22:35:4D:AB:20:85:C6:C0 Authority key identifier: 8B:F8:A2:98:14:1F:C2:F4:5C:07:2D:27:A0:BF:26:26:55:CB:6F:5A Certificate issuer: /CN=8bf8a298141fc2f45c072d27a0bf262655cb6f5a Certificate serial: 019AF2AD86A8830F21A8CD004F71ACA37884 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i_iimBQfwvRcBy0noL8mJlXLb1o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/496442-aab7-409c-9eff-d46ed568f871/1/i_iimBQfwvRcBy0noL8mJlXLb1o.mft Manifest number: 0267 Signing time: Sat 06 Dec 2025 08:00:49 +0000 Manifest this update: Sat 06 Dec 2025 08:00:49 +0000 Manifest next update: Sun 07 Dec 2025 08:00:49 +0000 Files and hashes: 1: i_iimBQfwvRcBy0noL8mJlXLb1o.crl (hash: +MKg2UQmuhzk4FC93mxBNZ4s1zOVsiww3u8GCULT+FU=) 2: w8pMwx-vyyole256lyQ0C_5-WOI.roa (hash: K+srURRGs/DsNg/JW4KWXf2QN5EAfkcbY2aU8MAMJS8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/496442-aab7-409c-9eff-d46ed568f871/1/i_iimBQfwvRcBy0noL8mJlXLb1o.crl rsync://rpki.ripe.net/repository/DEFAULT/73/496442-aab7-409c-9eff-d46ed568f871/1/i_iimBQfwvRcBy0noL8mJlXLb1o.mft rsync://rpki.ripe.net/repository/DEFAULT/i_iimBQfwvRcBy0noL8mJlXLb1o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:ad:86:a8:83:0f:21:a8:cd:00:4f:71:ac:a3:78:84 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8bf8a298141fc2f45c072d27a0bf262655cb6f5a Validity Not Before: Dec 6 08:00:49 2025 GMT Not After : Dec 7 08:00:49 2025 GMT Subject: CN=43d4d8fd3c1fa0fd9bdac7d022354dab2085c6c0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:8a:29:11:da:6e:9c:11:16:92:3e:fa:db:a9: e1:74:e2:3a:3d:74:c3:b0:60:f7:98:ae:88:63:9c: bb:1c:90:6e:f3:ef:80:e6:f7:4b:e8:f0:c4:05:55: 9e:51:fc:94:cc:55:94:63:e0:8f:c0:1a:d4:13:26: ab:3f:21:f1:44:15:4e:3b:3a:e7:6e:ee:88:e9:32: 85:fa:1f:1d:9e:19:b7:8e:71:fc:2f:44:e1:d0:e4: 36:f4:96:d9:a7:2e:65:06:66:eb:33:28:a7:f6:f5: 11:6d:9e:67:53:ca:23:dd:78:14:3e:ac:f7:64:4f: cc:3a:71:5c:23:da:3c:cb:4c:fa:fc:7f:ac:ba:f2: 3f:ce:03:56:c2:20:21:56:b0:4b:0f:c8:72:47:2e: 1f:7f:bf:86:8f:e0:ce:82:dc:38:99:95:4a:f9:78: 29:fa:44:ad:76:3b:3e:26:7f:cb:4a:a5:3b:aa:3d: 0c:d8:a0:7d:e2:7d:38:f3:61:de:66:55:18:a9:03: d3:63:ba:58:90:0e:6c:0c:73:3b:82:2b:df:79:ed: 0f:2b:7c:13:eb:3d:05:00:17:36:21:3b:bd:9b:2c: 73:d4:9f:a5:a8:d3:50:0e:ec:d7:2f:8f:30:e5:db: 73:be:70:21:14:fb:ac:04:8e:75:05:95:e8:af:08: aa:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:D4:D8:FD:3C:1F:A0:FD:9B:DA:C7:D0:22:35:4D:AB:20:85:C6:C0 X509v3 Authority Key Identifier: keyid:8B:F8:A2:98:14:1F:C2:F4:5C:07:2D:27:A0:BF:26:26:55:CB:6F:5A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i_iimBQfwvRcBy0noL8mJlXLb1o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/496442-aab7-409c-9eff-d46ed568f871/1/i_iimBQfwvRcBy0noL8mJlXLb1o.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/73/496442-aab7-409c-9eff-d46ed568f871/1/i_iimBQfwvRcBy0noL8mJlXLb1o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0f:b6:35:a7:80:97:7f:5a:f0:13:fc:96:a2:c1:4a:80:e1:6f: 7b:33:80:f9:42:51:8e:b6:7c:d0:d0:b8:d0:65:15:f6:38:04: c8:69:3f:e8:14:ec:a9:a1:fc:96:74:90:50:84:ac:11:f5:ee: 8c:f5:1c:e8:2e:64:01:72:5d:94:f6:e9:57:e8:72:20:88:e9: fa:cd:a7:bf:e1:da:f7:83:f2:8a:f9:5e:fa:98:82:ba:b9:66: b1:82:25:2f:71:68:de:ed:ea:43:91:04:dd:bb:22:ae:c6:44: 69:9d:e0:e7:83:fe:e0:f0:b9:2d:fd:b6:65:dd:c3:0b:c5:ee: 88:28:f1:ee:1f:d7:e6:b1:47:3f:83:01:47:dc:5b:d8:10:06: af:0d:87:21:8f:64:64:d4:40:8e:98:d9:e3:62:21:e0:ea:d2: e6:c1:bb:d9:94:a3:96:df:a1:b0:9e:87:05:96:a6:d9:32:df: d0:37:37:bf:be:b8:21:c2:11:2e:6b:a9:5f:cb:17:e5:8d:5a: 72:33:31:fb:64:df:7e:14:84:f1:73:47:c9:c8:dc:f4:3b:b2: df:67:56:63:bb:46:da:e2:3a:d3:2f:49:ce:b5:56:1a:5b:b0: 1f:d1:74:17:5c:6d:21:d0:8e:e3:27:3f:a0:60:b3:fe:32:ea: 6c:23:cf:aa -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryrYaogw8hqM0AT3Gso3iEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhiZjhhMjk4MTQxZmMyZjQ1YzA3MmQyN2EwYmYyNjI2NTVj YjZmNWEwHhcNMjUxMjA2MDgwMDQ5WhcNMjUxMjA3MDgwMDQ5WjAzMTEwLwYDVQQD Eyg0M2Q0ZDhmZDNjMWZhMGZkOWJkYWM3ZDAyMjM1NGRhYjIwODVjNmMwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArYopEdpunBEWkj7626nhdOI6PXTD sGD3mK6IY5y7HJBu8++A5vdL6PDEBVWeUfyUzFWUY+CPwBrUEyarPyHxRBVOOzrn bu6I6TKF+h8dnhm3jnH8L0Th0OQ29JbZpy5lBmbrMyin9vURbZ5nU8oj3XgUPqz3 ZE/MOnFcI9o8y0z6/H+suvI/zgNWwiAhVrBLD8hyRy4ff7+Gj+DOgtw4mZVK+Xgp +kStdjs+Jn/LSqU7qj0M2KB94n0482HeZlUYqQPTY7pYkA5sDHM7givfee0PK3wT 6z0FABc2ITu9myxz1J+lqNNQDuzXL48w5dtzvnAhFPusBI51BZXorwiqTwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEPU2P08H6D9m9rH0CI1TasghcbAMB8GA1UdIwQY MBaAFIv4opgUH8L0XActJ6C/JiZVy29aMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaV9paW1CUWZ3dlJjQnkwbm9MOG1KbFhMYjFvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83My80OTY0NDItYWFiNy00MDljLTllZmYt ZDQ2ZWQ1NjhmODcxLzEvaV9paW1CUWZ3dlJjQnkwbm9MOG1KbFhMYjFvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83My80OTY0NDItYWFiNy00MDljLTllZmYtZDQ2ZWQ1NjhmODcx LzEvaV9paW1CUWZ3dlJjQnkwbm9MOG1KbFhMYjFvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAD7Y1p4CX f1rwE/yWosFKgOFvezOA+UJRjrZ80NC40GUV9jgEyGk/6BTsqaH8lnSQUISsEfXu jPUc6C5kAXJdlPbpV+hyIIjp+s2nv+Ha94Pyivle+piCurlmsYIlL3Fo3u3qQ5EE 3bsirsZEaZ3g54P+4PC5Lf22Zd3DC8XuiCjx7h/X5rFHP4MBR9xb2BAGrw2HIY9k ZNRAjpjZ42Ih4OrS5sG72ZSjlt+hsJ6HBZam2TLf0Dc3v764IcIRLmupX8sX5Y1a cjMx+2TffhSE8XNHycjc9Duy32dWY7tG2uI60y9JzrVWGluwH9F0F1xtIdCO4yc/ oGCz/jLqbCPPqg== -----END CERTIFICATE-----Generated at Sat Dec 6 10:38:47 2025 by rpki-client