This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/e84e8f-8bb2-4054-b495-125eedf8d9f1/1/IOagEH1ompNwtiKVGkSWRsw4tZA.mft File: IOagEH1ompNwtiKVGkSWRsw4tZA.mft (raw, json) Hash identifier: 1f/EX1721jAoZqpGNarYJyu7LJormSKltTXvUPPRukA= Subject key identifier: DE:BC:CC:28:14:B6:0D:3D:6F:74:FD:E8:F9:15:A4:E0:31:5D:7F:7D Authority key identifier: 20:E6:A0:10:7D:68:9A:93:70:B6:22:95:1A:44:96:46:CC:38:B5:90 Certificate issuer: /CN=20e6a0107d689a9370b622951a449646cc38b590 Certificate serial: 019AF12EE64404C6A9C5CCE589BF268A05B2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IOagEH1ompNwtiKVGkSWRsw4tZA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/e84e8f-8bb2-4054-b495-125eedf8d9f1/1/IOagEH1ompNwtiKVGkSWRsw4tZA.mft Manifest number: 12E1 Signing time: Sat 06 Dec 2025 01:02:53 +0000 Manifest this update: Sat 06 Dec 2025 01:02:53 +0000 Manifest next update: Sun 07 Dec 2025 01:02:53 +0000 Files and hashes: 1: IOagEH1ompNwtiKVGkSWRsw4tZA.crl (hash: AfYwK/OoVlA0wfmSKzoQ9nqk352/+n8IR4brZZbNlt0=) 2: g2AkX7o9HPLfXDUc9lLxF0hd7Tw.roa (hash: GtbK3C6ImbkCxUfm64Bkm+DP0kf7OaLjUPRMxP6pI/0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/e84e8f-8bb2-4054-b495-125eedf8d9f1/1/IOagEH1ompNwtiKVGkSWRsw4tZA.crl rsync://rpki.ripe.net/repository/DEFAULT/73/e84e8f-8bb2-4054-b495-125eedf8d9f1/1/IOagEH1ompNwtiKVGkSWRsw4tZA.mft rsync://rpki.ripe.net/repository/DEFAULT/IOagEH1ompNwtiKVGkSWRsw4tZA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:02:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2e:e6:44:04:c6:a9:c5:cc:e5:89:bf:26:8a:05:b2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=20e6a0107d689a9370b622951a449646cc38b590 Validity Not Before: Dec 6 01:02:53 2025 GMT Not After : Dec 7 01:02:53 2025 GMT Subject: CN=debccc2814b60d3d6f74fde8f915a4e0315d7f7d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:02:fd:b8:63:06:70:41:d7:95:43:3c:9f:4b: 90:85:7e:37:05:5e:0f:fc:88:9b:6a:65:19:b0:c7: a2:8f:bd:c5:8b:e9:f4:25:41:b2:fe:4e:6f:ac:ba: 22:5d:6f:d7:a1:f7:8e:e7:84:24:f5:da:66:60:8f: 58:12:1f:00:64:21:a9:6b:5b:04:73:bb:53:4d:76: 22:3d:0f:dc:7b:3a:6c:2e:b0:3d:bf:56:34:cc:23: f8:18:39:5c:92:91:a8:a9:70:ee:e1:49:f6:14:98: 8f:b6:ee:0d:5f:5e:c5:b2:80:1f:2a:11:bc:cf:b7: 73:b8:7a:b7:6b:d0:30:63:b3:93:57:01:61:24:9e: 1f:4f:b3:e7:95:9f:55:92:5b:54:1e:7d:68:94:c4: 1d:59:4b:ba:08:54:d8:f9:41:51:b5:67:7e:89:ec: d4:60:7b:53:04:c8:7c:51:b7:af:30:26:88:7a:0e: be:9c:04:6b:9c:b8:79:21:cf:e2:f6:e2:ab:74:de: 41:6d:26:f8:69:69:6d:b1:b6:0d:2b:fb:5c:c3:49: fd:0a:8b:ef:89:7e:91:c0:ae:0b:f8:6e:8d:25:14: f5:6a:8b:9d:d3:01:41:24:fd:0c:37:f0:63:b2:fa: 01:8e:13:dd:1e:f0:de:ea:6c:c2:93:2e:76:14:49: 24:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:BC:CC:28:14:B6:0D:3D:6F:74:FD:E8:F9:15:A4:E0:31:5D:7F:7D X509v3 Authority Key Identifier: keyid:20:E6:A0:10:7D:68:9A:93:70:B6:22:95:1A:44:96:46:CC:38:B5:90 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IOagEH1ompNwtiKVGkSWRsw4tZA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/e84e8f-8bb2-4054-b495-125eedf8d9f1/1/IOagEH1ompNwtiKVGkSWRsw4tZA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/73/e84e8f-8bb2-4054-b495-125eedf8d9f1/1/IOagEH1ompNwtiKVGkSWRsw4tZA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4b:c0:b9:99:16:87:60:bc:e8:96:a4:7b:7a:cd:c1:96:ba:c9: bb:de:a8:19:f3:0c:a4:3e:7e:83:7a:0d:47:bf:34:ba:5d:36: 2e:aa:ca:ba:dd:f0:2c:ab:5f:8d:31:e7:71:23:ac:c7:50:e1: 7a:6e:f6:1c:4c:46:a2:04:c0:3d:36:39:34:63:57:67:aa:8e: db:c0:6d:42:d1:4f:02:fc:2c:a3:1f:2e:1f:80:08:51:6d:5b: e3:03:30:77:35:b5:57:66:2d:02:48:57:e7:09:1b:ab:70:c1: d4:88:d3:52:ca:74:a3:41:08:a8:c4:75:9a:9b:89:68:85:10: 32:81:88:81:60:cd:f0:42:18:ea:80:fb:7e:90:8b:e8:8e:fa: 7c:99:8b:79:4c:7f:24:29:46:5f:15:87:b6:d6:5b:03:21:04: 9b:42:ba:90:b7:50:c9:2a:60:c4:54:81:f1:14:73:4f:a8:c4: 48:dd:d4:62:bd:43:94:2e:00:90:b5:fe:d5:8c:2b:42:53:67: 77:5d:e0:cf:73:a3:66:93:cb:48:0b:08:1b:dd:73:ef:22:ec: 29:e8:b2:4e:74:39:9c:27:74:54:4f:50:5e:ce:91:32:12:8d: 19:d7:ce:5e:45:2d:c2:7c:a3:dd:c0:21:1d:f0:97:98:04:e3: 4d:53:da:7b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLuZEBMapxczlib8migWyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIwZTZhMDEwN2Q2ODlhOTM3MGI2MjI5NTFhNDQ5NjQ2Y2Mz OGI1OTAwHhcNMjUxMjA2MDEwMjUzWhcNMjUxMjA3MDEwMjUzWjAzMTEwLwYDVQQD EyhkZWJjY2MyODE0YjYwZDNkNmY3NGZkZThmOTE1YTRlMDMxNWQ3ZjdkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlQL9uGMGcEHXlUM8n0uQhX43BV4P /IibamUZsMeij73Fi+n0JUGy/k5vrLoiXW/XofeO54Qk9dpmYI9YEh8AZCGpa1sE c7tTTXYiPQ/cezpsLrA9v1Y0zCP4GDlckpGoqXDu4Un2FJiPtu4NX17FsoAfKhG8 z7dzuHq3a9AwY7OTVwFhJJ4fT7PnlZ9VkltUHn1olMQdWUu6CFTY+UFRtWd+iezU YHtTBMh8UbevMCaIeg6+nARrnLh5Ic/i9uKrdN5BbSb4aWltsbYNK/tcw0n9Covv iX6RwK4L+G6NJRT1aoud0wFBJP0MN/BjsvoBjhPdHvDe6mzCky52FEkkuwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFN68zCgUtg09b3T96PkVpOAxXX99MB8GA1UdIwQY MBaAFCDmoBB9aJqTcLYilRpElkbMOLWQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSU9hZ0VIMW9tcE53dGlLVkdrU1dSc3c0dFpBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83My9lODRlOGYtOGJiMi00MDU0LWI0OTUt MTI1ZWVkZjhkOWYxLzEvSU9hZ0VIMW9tcE53dGlLVkdrU1dSc3c0dFpBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83My9lODRlOGYtOGJiMi00MDU0LWI0OTUtMTI1ZWVkZjhkOWYx LzEvSU9hZ0VIMW9tcE53dGlLVkdrU1dSc3c0dFpBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAS8C5mRaH YLzolqR7es3BlrrJu96oGfMMpD5+g3oNR780ul02LqrKut3wLKtfjTHncSOsx1Dh em72HExGogTAPTY5NGNXZ6qO28BtQtFPAvwsox8uH4AIUW1b4wMwdzW1V2YtAkhX 5wkbq3DB1IjTUsp0o0EIqMR1mpuJaIUQMoGIgWDN8EIY6oD7fpCL6I76fJmLeUx/ JClGXxWHttZbAyEEm0K6kLdQySpgxFSB8RRzT6jESN3UYr1DlC4AkLX+1YwrQlNn d13gz3OjZpPLSAsIG91z7yLsKeiyTnQ5nCd0VE9QXs6RMhKNGdfOXkUtwnyj3cAh HfCXmATjTVPaew== -----END CERTIFICATE-----Generated at Sat Dec 6 11:12:56 2025 by rpki-client