This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/d597b0-6425-425f-b723-4eb8b0b49c4a/1/iS0hVmzPw7sHnsWFSwRKuAmAQVc.mft File: iS0hVmzPw7sHnsWFSwRKuAmAQVc.mft (raw, json) Hash identifier: c+ECm9+1WDVdafHZVulPK4H0OGYLR9EAGySKx9OU7Bs= Subject key identifier: 14:C0:8E:31:13:E1:B1:47:1E:3E:26:29:3A:3E:7D:56:60:DD:C1:50 Authority key identifier: 89:2D:21:56:6C:CF:C3:BB:07:9E:C5:85:4B:04:4A:B8:09:80:41:57 Certificate issuer: /CN=892d21566ccfc3bb079ec5854b044ab809804157 Certificate serial: 019AF464D80C8F56A00C1B3E76BD1E7D4CE4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iS0hVmzPw7sHnsWFSwRKuAmAQVc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/d597b0-6425-425f-b723-4eb8b0b49c4a/1/iS0hVmzPw7sHnsWFSwRKuAmAQVc.mft Manifest number: 1762 Signing time: Sat 06 Dec 2025 16:00:40 +0000 Manifest this update: Sat 06 Dec 2025 16:00:40 +0000 Manifest next update: Sun 07 Dec 2025 16:00:40 +0000 Files and hashes: 1: _xlkfnRMKnsNclJVExLAcIhA2l8.roa (hash: yd6Q3aFKUFt1tUH23Si46a/9sl4TuzKnFUmsDxLLaqw=) 2: iS0hVmzPw7sHnsWFSwRKuAmAQVc.crl (hash: aaypBge1hZR91y4MkH5yNYSEPV3QOYMnJOYKl7fPiQs=) 3: zlNvNdUfJ603zOBB38DPZ-NzG8o.roa (hash: gEXJj7MnEC8VWadeJK9z3p3E0Dv26srWKVnkmAOkpEk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/d597b0-6425-425f-b723-4eb8b0b49c4a/1/iS0hVmzPw7sHnsWFSwRKuAmAQVc.crl rsync://rpki.ripe.net/repository/DEFAULT/74/d597b0-6425-425f-b723-4eb8b0b49c4a/1/iS0hVmzPw7sHnsWFSwRKuAmAQVc.mft rsync://rpki.ripe.net/repository/DEFAULT/iS0hVmzPw7sHnsWFSwRKuAmAQVc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 16:00:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:64:d8:0c:8f:56:a0:0c:1b:3e:76:bd:1e:7d:4c:e4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=892d21566ccfc3bb079ec5854b044ab809804157 Validity Not Before: Dec 6 16:00:40 2025 GMT Not After : Dec 7 16:00:40 2025 GMT Subject: CN=14c08e3113e1b1471e3e26293a3e7d5660ddc150 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:dd:5f:cc:e2:2e:14:15:56:79:2e:97:8a:f7: 4b:18:bd:1b:0d:ce:f4:b3:2a:6a:f9:b3:7c:a5:4a: 26:c4:55:f5:0f:1d:6c:c1:de:53:1b:34:02:43:43: 45:a6:bf:28:6b:1f:78:14:95:04:fc:99:4c:8e:f1: f4:bf:ce:c8:6f:ae:ae:65:a1:bd:55:37:a4:49:1a: f6:41:56:66:d4:b7:64:d1:f1:de:a2:ab:80:75:45: b5:ad:ce:f7:34:36:8f:93:c7:de:d0:8c:43:8e:a9: 65:e7:a2:e2:2b:80:df:a0:ab:82:d0:ff:5b:f0:92: eb:69:ad:08:88:ce:f9:be:30:fc:31:8b:99:7c:25: c2:00:d9:b1:b1:95:ee:85:9f:95:6b:36:49:dd:b2: 39:9d:34:ad:e8:4d:c0:2c:13:3b:90:9f:59:97:ca: 7e:93:7e:eb:e8:c4:3b:c6:d1:29:d0:d9:27:7e:76: c9:6c:db:3f:3c:78:6a:63:57:13:53:49:78:ee:47: be:52:50:de:74:e5:74:f1:85:bf:0b:71:4a:aa:18: f3:30:7f:22:60:9b:8e:f1:01:11:fc:c9:e5:2c:40: 30:6d:34:19:96:53:3e:69:02:4e:71:b7:6f:21:fd: 95:64:b3:2a:80:44:c1:66:cf:e0:61:17:74:7f:79: aa:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:C0:8E:31:13:E1:B1:47:1E:3E:26:29:3A:3E:7D:56:60:DD:C1:50 X509v3 Authority Key Identifier: keyid:89:2D:21:56:6C:CF:C3:BB:07:9E:C5:85:4B:04:4A:B8:09:80:41:57 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iS0hVmzPw7sHnsWFSwRKuAmAQVc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/d597b0-6425-425f-b723-4eb8b0b49c4a/1/iS0hVmzPw7sHnsWFSwRKuAmAQVc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/74/d597b0-6425-425f-b723-4eb8b0b49c4a/1/iS0hVmzPw7sHnsWFSwRKuAmAQVc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption af:01:5b:28:be:a3:f2:77:05:48:98:b6:09:c9:76:d6:84:6e: b5:79:06:42:32:04:1b:df:cb:23:f1:a2:33:e3:3b:38:9c:c4: d8:80:1f:a5:58:56:93:db:60:05:78:72:93:b6:95:47:00:a0: be:b1:3e:35:89:e6:f7:be:48:69:a9:8e:5a:be:e3:8b:81:52: 41:26:dd:d5:e8:1f:cb:f5:c4:a8:79:27:55:66:99:7f:89:a2: 6c:12:c9:6d:e4:4e:6e:32:91:6b:7c:38:0c:ea:4e:6b:30:25: b7:a8:03:a4:47:03:12:3a:ba:e1:99:29:bb:fa:1c:fd:5a:01: 83:a7:a9:fe:de:f1:3b:a6:81:34:15:c6:4f:02:1e:75:ce:2c: 7f:84:b5:e6:c5:2b:85:ca:33:83:f4:b3:03:65:35:c4:6e:a5: 5a:4b:bc:b6:d7:4d:c6:f3:4b:83:59:78:72:96:ff:57:fb:94: 4e:2b:97:ea:4e:0c:cd:a2:0e:dc:ce:d2:1f:a5:11:83:49:70: 18:96:6d:5e:72:88:45:a7:c2:76:ed:6b:70:5f:68:44:bd:cc: ab:bc:1d:2b:56:aa:4c:20:2d:ea:a1:3c:37:f9:19:94:07:50: 28:93:79:7d:80:48:c1:0d:fe:ca:40:97:27:77:7e:84:80:5b: fa:14:26:3d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr0ZNgMj1agDBs+dr0efUzkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg5MmQyMTU2NmNjZmMzYmIwNzllYzU4NTRiMDQ0YWI4MDk4 MDQxNTcwHhcNMjUxMjA2MTYwMDQwWhcNMjUxMjA3MTYwMDQwWjAzMTEwLwYDVQQD EygxNGMwOGUzMTEzZTFiMTQ3MWUzZTI2MjkzYTNlN2Q1NjYwZGRjMTUwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr91fzOIuFBVWeS6XivdLGL0bDc70 sypq+bN8pUomxFX1Dx1swd5TGzQCQ0NFpr8oax94FJUE/JlMjvH0v87Ib66uZaG9 VTekSRr2QVZm1Ldk0fHeoquAdUW1rc73NDaPk8fe0IxDjqll56LiK4DfoKuC0P9b 8JLraa0IiM75vjD8MYuZfCXCANmxsZXuhZ+VazZJ3bI5nTSt6E3ALBM7kJ9Zl8p+ k37r6MQ7xtEp0NknfnbJbNs/PHhqY1cTU0l47ke+UlDedOV08YW/C3FKqhjzMH8i YJuO8QER/MnlLEAwbTQZllM+aQJOcbdvIf2VZLMqgETBZs/gYRd0f3mq+wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBTAjjET4bFHHj4mKTo+fVZg3cFQMB8GA1UdIwQY MBaAFIktIVZsz8O7B57FhUsESrgJgEFXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaVMwaFZtelB3N3NIbnNXRlN3Ukt1QW1BUVZjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NC9kNTk3YjAtNjQyNS00MjVmLWI3MjMt NGViOGIwYjQ5YzRhLzEvaVMwaFZtelB3N3NIbnNXRlN3Ukt1QW1BUVZjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83NC9kNTk3YjAtNjQyNS00MjVmLWI3MjMtNGViOGIwYjQ5YzRh LzEvaVMwaFZtelB3N3NIbnNXRlN3Ukt1QW1BUVZjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArwFbKL6j 8ncFSJi2Ccl21oRutXkGQjIEG9/LI/GiM+M7OJzE2IAfpVhWk9tgBXhyk7aVRwCg vrE+NYnm975IaamOWr7ji4FSQSbd1egfy/XEqHknVWaZf4mibBLJbeRObjKRa3w4 DOpOazAlt6gDpEcDEjq64Zkpu/oc/VoBg6ep/t7xO6aBNBXGTwIedc4sf4S15sUr hcozg/SzA2U1xG6lWku8ttdNxvNLg1l4cpb/V/uUTiuX6k4MzaIO3M7SH6URg0lw GJZtXnKIRafCdu1rcF9oRL3Mq7wdK1aqTCAt6qE8N/kZlAdQKJN5fYBIwQ3+ykCX J3d+hIBb+hQmPQ== -----END CERTIFICATE-----Generated at Sun Dec 7 00:37:39 2025 by rpki-client