This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/96dec8-7720-4efc-bd39-84faaf105a97/1/iX2mABsSODBo_nGjD4zyhcZoMP4.mft File: iX2mABsSODBo_nGjD4zyhcZoMP4.mft (raw, json) Hash identifier: 6S+OAoDJVHoZsPrM3RPIB9moonO+y8oBOjBlpjqXaoE= Subject key identifier: 5D:02:82:95:92:D8:4D:A3:98:CD:81:2A:B0:4B:DC:3C:E7:19:C1:3D Authority key identifier: 89:7D:A6:00:1B:12:38:30:68:FE:71:A3:0F:8C:F2:85:C6:68:30:FE Certificate issuer: /CN=897da6001b12383068fe71a30f8cf285c66830fe Certificate serial: 019B33443D71616B0E7E53CC00B50431B77E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iX2mABsSODBo_nGjD4zyhcZoMP4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/96dec8-7720-4efc-bd39-84faaf105a97/1/iX2mABsSODBo_nGjD4zyhcZoMP4.mft Manifest number: 1784 Signing time: Thu 18 Dec 2025 21:01:08 +0000 Manifest this update: Thu 18 Dec 2025 21:01:08 +0000 Manifest next update: Fri 19 Dec 2025 21:01:08 +0000 Files and hashes: 1: 9Xk925SUUXfLnbw9FBp9N3qLdfo.roa (hash: Ly02I9+k8vuMGWxnQ136VFvx8sd3hejXT82bKGKV7BM=) 2: PHa1bwg0jlW9wU-ZxMrg4KmG4Zc.roa (hash: sT+3KqlrpBwNw2te0UajmvKsMUapvIEs9YfpHeq4XGU=) 3: iX2mABsSODBo_nGjD4zyhcZoMP4.crl (hash: EmlaUnkWrBfUc1xUze5Yfwjc3SCTh+YLHAq1rDJBWBI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/96dec8-7720-4efc-bd39-84faaf105a97/1/iX2mABsSODBo_nGjD4zyhcZoMP4.crl rsync://rpki.ripe.net/repository/DEFAULT/76/96dec8-7720-4efc-bd39-84faaf105a97/1/iX2mABsSODBo_nGjD4zyhcZoMP4.mft rsync://rpki.ripe.net/repository/DEFAULT/iX2mABsSODBo_nGjD4zyhcZoMP4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 21:01:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:33:44:3d:71:61:6b:0e:7e:53:cc:00:b5:04:31:b7:7e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=897da6001b12383068fe71a30f8cf285c66830fe Validity Not Before: Dec 18 21:01:08 2025 GMT Not After : Dec 19 21:01:08 2025 GMT Subject: CN=5d02829592d84da398cd812ab04bdc3ce719c13d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:bc:f1:14:ad:64:e1:f1:22:69:6f:b4:87:37: 4d:8c:cb:d5:11:ad:45:4d:13:4b:be:6b:0e:53:09: 7c:da:3e:e2:eb:4d:e4:76:32:70:75:36:b5:41:38: f7:b5:5d:7d:b0:6a:15:9f:49:ce:17:58:df:1e:86: 83:a3:06:74:79:3e:ba:ed:df:83:8b:e9:54:4d:a8: 0e:05:a9:f7:0b:b4:de:01:4f:c3:a1:d4:46:7f:a5: b4:50:8d:c0:3b:d6:f9:7b:56:9f:b6:6b:0c:5b:54: ae:0a:8c:fc:79:cd:35:d4:28:f8:df:20:37:c4:87: 67:54:6f:91:79:30:5b:35:78:d9:93:3e:98:6d:75: b4:1f:7a:f4:90:f6:f0:53:03:14:8a:5d:94:fa:3c: 8e:86:f6:fe:3d:63:d3:b2:46:02:f1:d2:f3:98:d9: 2d:2e:0d:62:03:a3:3e:3d:b8:6c:68:64:8d:71:76: 6b:01:0a:86:a1:7d:01:30:1e:9a:d2:de:71:3c:f5: d8:7c:5b:ab:95:3f:37:7c:d0:97:29:05:26:92:98: 9a:06:94:2a:9a:11:75:c0:c0:de:16:32:8f:55:f2: 1e:be:3f:ee:55:51:2b:b1:07:b8:16:e0:91:ac:de: d1:28:a7:de:19:ad:cf:1b:e0:32:59:74:17:11:9f: f4:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:02:82:95:92:D8:4D:A3:98:CD:81:2A:B0:4B:DC:3C:E7:19:C1:3D X509v3 Authority Key Identifier: keyid:89:7D:A6:00:1B:12:38:30:68:FE:71:A3:0F:8C:F2:85:C6:68:30:FE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iX2mABsSODBo_nGjD4zyhcZoMP4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/96dec8-7720-4efc-bd39-84faaf105a97/1/iX2mABsSODBo_nGjD4zyhcZoMP4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/76/96dec8-7720-4efc-bd39-84faaf105a97/1/iX2mABsSODBo_nGjD4zyhcZoMP4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 11:65:60:02:d4:b6:61:a6:04:e0:8a:d8:e0:38:3b:d0:9d:aa: ad:a1:da:0f:5d:14:a5:2b:72:6e:64:e1:69:b9:20:ec:24:bc: 58:0b:01:e7:11:ac:80:21:97:13:bf:6f:6e:b7:45:19:9e:2a: 48:2d:54:48:8b:44:cc:d4:06:f2:52:5a:ae:7c:7e:a6:a2:68: 1a:97:b1:08:df:eb:86:b8:5b:2b:20:7d:2c:5e:95:de:16:b0: c0:89:d3:4e:62:1f:2f:47:04:8d:dc:69:79:0c:52:8b:d9:f5: 12:80:4a:a3:50:93:70:cf:30:d4:e3:64:59:2c:02:91:ed:e5: 5e:15:05:77:3d:62:f0:81:22:63:4a:61:24:25:18:ce:45:c8: a2:ce:c6:08:5b:72:24:d8:5a:fd:57:49:99:e7:b0:a8:3b:e3: d8:f0:4d:33:6a:26:5b:ad:d3:48:0d:98:ad:a7:b6:55:d6:56: 6f:f2:7a:54:cb:88:b4:6f:61:a3:b7:03:40:45:8e:b7:fe:54: 56:75:32:5f:30:83:82:60:74:63:3b:16:92:c4:ed:0e:f5:df: fe:c7:8f:61:2c:b5:80:54:42:af:86:4e:b5:de:b9:69:f9:a5: f3:7b:1e:3c:9a:ed:0b:6c:e6:5b:10:f0:1a:c6:1c:3d:2d:cb: bf:ba:15:47 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZszRD1xYWsOflPMALUEMbd+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg5N2RhNjAwMWIxMjM4MzA2OGZlNzFhMzBmOGNmMjg1YzY2 ODMwZmUwHhcNMjUxMjE4MjEwMTA4WhcNMjUxMjE5MjEwMTA4WjAzMTEwLwYDVQQD Eyg1ZDAyODI5NTkyZDg0ZGEzOThjZDgxMmFiMDRiZGMzY2U3MTljMTNkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjLzxFK1k4fEiaW+0hzdNjMvVEa1F TRNLvmsOUwl82j7i603kdjJwdTa1QTj3tV19sGoVn0nOF1jfHoaDowZ0eT667d+D i+lUTagOBan3C7TeAU/DodRGf6W0UI3AO9b5e1aftmsMW1SuCoz8ec011Cj43yA3 xIdnVG+ReTBbNXjZkz6YbXW0H3r0kPbwUwMUil2U+jyOhvb+PWPTskYC8dLzmNkt Lg1iA6M+PbhsaGSNcXZrAQqGoX0BMB6a0t5xPPXYfFurlT83fNCXKQUmkpiaBpQq mhF1wMDeFjKPVfIevj/uVVErsQe4FuCRrN7RKKfeGa3PG+AyWXQXEZ/0SQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFF0CgpWS2E2jmM2BKrBL3DznGcE9MB8GA1UdIwQY MBaAFIl9pgAbEjgwaP5xow+M8oXGaDD+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaVgybUFCc1NPREJvX25HakQ0enloY1pvTVA0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ni85NmRlYzgtNzcyMC00ZWZjLWJkMzkt ODRmYWFmMTA1YTk3LzEvaVgybUFCc1NPREJvX25HakQ0enloY1pvTVA0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Ni85NmRlYzgtNzcyMC00ZWZjLWJkMzktODRmYWFmMTA1YTk3 LzEvaVgybUFCc1NPREJvX25HakQ0enloY1pvTVA0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEWVgAtS2 YaYE4IrY4Dg70J2qraHaD10UpStybmThabkg7CS8WAsB5xGsgCGXE79vbrdFGZ4q SC1USItEzNQG8lJarnx+pqJoGpexCN/rhrhbKyB9LF6V3hawwInTTmIfL0cEjdxp eQxSi9n1EoBKo1CTcM8w1ONkWSwCke3lXhUFdz1i8IEiY0phJCUYzkXIos7GCFty JNha/VdJmeewqDvj2PBNM2omW63TSA2Yrae2VdZWb/J6VMuItG9ho7cDQEWOt/5U VnUyXzCDgmB0YzsWksTtDvXf/sePYSy1gFRCr4ZOtd65afml83sePJrtC2zmWxDw GsYcPS3Lv7oVRw== -----END CERTIFICATE-----Generated at Fri Dec 19 05:43:34 2025 by rpki-client