This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/a2df79-d4ff-40c7-b4a4-7aec558eb40d/1/iPxYh1YIlw2acoNH0F7wDQ8dVhE.mft File: iPxYh1YIlw2acoNH0F7wDQ8dVhE.mft (raw, json) Hash identifier: FUqKSkbhhBnlK6TeZy+WjroIkgz5X9fjkrd1zZlreKU= Subject key identifier: 3E:F4:73:01:3E:5F:38:40:83:93:89:8E:C6:8D:39:C6:06:E2:12:47 Authority key identifier: 88:FC:58:87:56:08:97:0D:9A:72:83:47:D0:5E:F0:0D:0F:1D:56:11 Certificate issuer: /CN=88fc58875608970d9a728347d05ef00d0f1d5611 Certificate serial: 019AF087F644608DF7874A19C3A2EEBE4141 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iPxYh1YIlw2acoNH0F7wDQ8dVhE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/a2df79-d4ff-40c7-b4a4-7aec558eb40d/1/iPxYh1YIlw2acoNH0F7wDQ8dVhE.mft Manifest number: 10CC Signing time: Fri 05 Dec 2025 22:00:33 +0000 Manifest this update: Fri 05 Dec 2025 22:00:33 +0000 Manifest next update: Sat 06 Dec 2025 22:00:33 +0000 Files and hashes: 1: glHtLecTNUxeR4oxupaJRTlQLos.roa (hash: tjH899kftJHgu4JmkbHHTA84WKPpmWW00cLzLNo7wBg=) 2: iPxYh1YIlw2acoNH0F7wDQ8dVhE.crl (hash: i7sjzgqJswqxhhLrkTkVUogI13toQZmSd7Ak8XNz/TM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/a2df79-d4ff-40c7-b4a4-7aec558eb40d/1/iPxYh1YIlw2acoNH0F7wDQ8dVhE.crl rsync://rpki.ripe.net/repository/DEFAULT/76/a2df79-d4ff-40c7-b4a4-7aec558eb40d/1/iPxYh1YIlw2acoNH0F7wDQ8dVhE.mft rsync://rpki.ripe.net/repository/DEFAULT/iPxYh1YIlw2acoNH0F7wDQ8dVhE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 22:00:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:87:f6:44:60:8d:f7:87:4a:19:c3:a2:ee:be:41:41 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=88fc58875608970d9a728347d05ef00d0f1d5611 Validity Not Before: Dec 5 22:00:33 2025 GMT Not After : Dec 6 22:00:33 2025 GMT Subject: CN=3ef473013e5f38408393898ec68d39c606e21247 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:88:cc:1b:68:d5:e1:30:14:73:50:6d:a8:6d: 59:eb:d1:23:19:2d:77:c2:f8:c2:68:c3:f0:b3:57: bb:d0:a2:d1:a7:30:95:fd:bc:46:ef:e0:aa:c5:b4: f7:13:9c:fd:6b:ca:f7:70:64:40:8b:cb:34:15:5a: eb:59:32:6d:98:0c:b6:63:62:aa:21:64:2f:39:d8: 90:b3:70:ae:dd:df:fc:9d:12:dd:53:45:10:97:49: f7:2e:b9:81:ad:99:3c:37:5a:fd:9a:bf:bc:00:3e: 7d:ec:10:62:5d:1d:ad:14:88:ee:e7:c9:56:1e:08: db:db:d2:c3:5e:31:62:15:96:45:de:5b:b9:29:e4: 2f:7d:48:6e:d8:c4:05:d3:aa:42:52:32:1e:35:e8: cd:38:c7:25:31:2e:e4:c2:85:f5:56:bf:ee:0f:61: c9:a4:f7:73:89:2c:7e:ca:35:11:51:b4:a0:a0:f8: 42:57:ac:f0:e0:bb:75:92:56:5f:e5:12:91:eb:2b: bd:cf:9f:36:92:d9:18:00:14:c3:56:94:b7:10:24: b0:f5:cf:b3:93:f3:9d:01:b7:87:66:8a:bd:3c:3b: 99:15:9e:0a:2b:e6:d4:a7:42:e9:8e:83:7b:06:7c: 28:53:67:ba:d3:6d:3d:ff:91:09:b2:09:23:6a:8f: b1:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:F4:73:01:3E:5F:38:40:83:93:89:8E:C6:8D:39:C6:06:E2:12:47 X509v3 Authority Key Identifier: keyid:88:FC:58:87:56:08:97:0D:9A:72:83:47:D0:5E:F0:0D:0F:1D:56:11 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iPxYh1YIlw2acoNH0F7wDQ8dVhE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/a2df79-d4ff-40c7-b4a4-7aec558eb40d/1/iPxYh1YIlw2acoNH0F7wDQ8dVhE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/76/a2df79-d4ff-40c7-b4a4-7aec558eb40d/1/iPxYh1YIlw2acoNH0F7wDQ8dVhE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 83:cc:59:70:9c:8e:26:2d:17:9a:5d:51:00:64:8b:4d:1a:12: 6a:ed:e3:a6:48:20:b5:49:fa:4a:6f:ec:74:47:ff:43:18:b2: 78:49:e1:7b:11:d3:f0:81:b0:e6:77:a0:da:55:b1:d0:89:55: ff:27:e0:fb:a0:e6:cf:35:6b:56:58:ea:2e:82:48:8b:3b:99: 93:38:7c:db:75:86:e7:a0:86:f6:0d:02:3a:67:6f:4f:67:3c: 37:b9:d5:d9:1b:ea:79:86:e8:21:7e:b1:46:c3:16:59:b3:99: b8:e9:90:d9:33:07:d6:09:c8:a4:9b:d1:28:9b:49:e9:ac:bc: 88:0f:1d:56:65:da:99:16:43:07:ec:2d:09:d3:a1:f3:e0:00: 52:15:b6:e7:c6:88:df:58:16:e6:2b:39:61:36:40:78:9b:a6: e5:95:a1:2b:48:3b:62:98:26:94:ee:f7:eb:74:79:aa:d9:b4: 40:3e:91:82:9a:6e:1d:91:da:70:ee:60:cd:f3:a9:85:1a:fe: 17:63:14:2b:a0:75:b9:5e:54:bc:8e:80:49:c4:f1:e5:aa:2c: b1:6e:16:3f:0a:70:df:aa:7c:fb:34:05:46:7a:d6:60:7d:3b: 6a:3f:fe:24:d6:32:4a:27:0a:b1:6b:45:98:23:0d:0a:56:54: a2:14:82:0d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrwh/ZEYI33h0oZw6LuvkFBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg4ZmM1ODg3NTYwODk3MGQ5YTcyODM0N2QwNWVmMDBkMGYx ZDU2MTEwHhcNMjUxMjA1MjIwMDMzWhcNMjUxMjA2MjIwMDMzWjAzMTEwLwYDVQQD EygzZWY0NzMwMTNlNWYzODQwODM5Mzg5OGVjNjhkMzljNjA2ZTIxMjQ3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtIjMG2jV4TAUc1BtqG1Z69EjGS13 wvjCaMPws1e70KLRpzCV/bxG7+CqxbT3E5z9a8r3cGRAi8s0FVrrWTJtmAy2Y2Kq IWQvOdiQs3Cu3d/8nRLdU0UQl0n3LrmBrZk8N1r9mr+8AD597BBiXR2tFIju58lW Hgjb29LDXjFiFZZF3lu5KeQvfUhu2MQF06pCUjIeNejNOMclMS7kwoX1Vr/uD2HJ pPdziSx+yjURUbSgoPhCV6zw4Lt1klZf5RKR6yu9z582ktkYABTDVpS3ECSw9c+z k/OdAbeHZoq9PDuZFZ4KK+bUp0LpjoN7BnwoU2e60209/5EJsgkjao+x/wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFD70cwE+XzhAg5OJjsaNOcYG4hJHMB8GA1UdIwQY MBaAFIj8WIdWCJcNmnKDR9Be8A0PHVYRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaVB4WWgxWUlsdzJhY29OSDBGN3dEUThkVmhFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ni9hMmRmNzktZDRmZi00MGM3LWI0YTQt N2FlYzU1OGViNDBkLzEvaVB4WWgxWUlsdzJhY29OSDBGN3dEUThkVmhFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Ni9hMmRmNzktZDRmZi00MGM3LWI0YTQtN2FlYzU1OGViNDBk LzEvaVB4WWgxWUlsdzJhY29OSDBGN3dEUThkVmhFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAg8xZcJyO Ji0Xml1RAGSLTRoSau3jpkggtUn6Sm/sdEf/QxiyeEnhexHT8IGw5neg2lWx0IlV /yfg+6DmzzVrVljqLoJIizuZkzh823WG56CG9g0COmdvT2c8N7nV2RvqeYboIX6x RsMWWbOZuOmQ2TMH1gnIpJvRKJtJ6ay8iA8dVmXamRZDB+wtCdOh8+AAUhW258aI 31gW5is5YTZAeJum5ZWhK0g7YpgmlO7363R5qtm0QD6RgppuHZHacO5gzfOphRr+ F2MUK6B1uV5UvI6AScTx5aossW4WPwpw36p8+zQFRnrWYH07aj/+JNYySicKsWtF mCMNClZUohSCDQ== -----END CERTIFICATE-----Generated at Sat Dec 6 07:04:32 2025 by rpki-client