This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/c66ff9-10ea-4b44-9169-c5f670239718/1/_iT7KBKuLz1Nm7RYndcx5UaXkQk.mft File: _iT7KBKuLz1Nm7RYndcx5UaXkQk.mft (raw, json) Hash identifier: vJnFIE1w+iiFME6/b07SeEWqBmEX+r/Zq/h+6Gtke48= Subject key identifier: A4:53:FE:0C:B4:83:18:DC:44:E6:AE:23:40:AB:D2:59:1F:DA:5D:D0 Authority key identifier: FE:24:FB:28:12:AE:2F:3D:4D:9B:B4:58:9D:D7:31:E5:46:97:91:09 Certificate issuer: /CN=fe24fb2812ae2f3d4d9bb4589dd731e546979109 Certificate serial: 019AF49C2FF7D1C078D0F589CD9A18297209 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_iT7KBKuLz1Nm7RYndcx5UaXkQk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/c66ff9-10ea-4b44-9169-c5f670239718/1/_iT7KBKuLz1Nm7RYndcx5UaXkQk.mft Manifest number: 1340 Signing time: Sat 06 Dec 2025 17:01:07 +0000 Manifest this update: Sat 06 Dec 2025 17:01:07 +0000 Manifest next update: Sun 07 Dec 2025 17:01:07 +0000 Files and hashes: 1: 7ivcRbHUq4tA4Hz9Wb386VjaBS0.roa (hash: CGbH34TXJ114G1ywTRowOQ13NrG2LKX6vQJmgAwZZz4=) 2: _iT7KBKuLz1Nm7RYndcx5UaXkQk.crl (hash: s1RUGSh+QbJrg9P1tmVqfyf8xi63NE66mNM5jMPjli0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/c66ff9-10ea-4b44-9169-c5f670239718/1/_iT7KBKuLz1Nm7RYndcx5UaXkQk.crl rsync://rpki.ripe.net/repository/DEFAULT/77/c66ff9-10ea-4b44-9169-c5f670239718/1/_iT7KBKuLz1Nm7RYndcx5UaXkQk.mft rsync://rpki.ripe.net/repository/DEFAULT/_iT7KBKuLz1Nm7RYndcx5UaXkQk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 17:01:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:9c:2f:f7:d1:c0:78:d0:f5:89:cd:9a:18:29:72:09 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fe24fb2812ae2f3d4d9bb4589dd731e546979109 Validity Not Before: Dec 6 17:01:07 2025 GMT Not After : Dec 7 17:01:07 2025 GMT Subject: CN=a453fe0cb48318dc44e6ae2340abd2591fda5dd0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:04:c3:c9:dd:9b:5c:8a:08:49:b8:0d:10:8e: ef:dd:25:84:80:07:02:8f:8b:92:d4:37:e0:f4:73: cc:2a:60:a6:ce:2d:a6:60:b8:d5:b3:16:d0:e3:21: e9:7c:30:09:33:78:4d:80:7c:dd:31:e5:67:a3:8b: 43:81:1a:bf:96:d3:d2:8a:57:44:a4:f9:f4:44:f5: 10:53:89:18:8b:b9:6f:bc:3a:2a:85:cd:40:51:04: 98:d4:4d:99:09:f1:b3:e5:4c:9f:1f:20:16:7e:cb: 9b:c3:21:97:45:24:e6:2c:54:5e:c6:56:0a:ce:cc: d4:d2:db:7b:1e:e3:44:d7:9b:4d:81:7e:21:04:ba: 9a:8a:79:1d:26:99:a5:a5:d0:c1:00:00:19:08:19: ad:2b:db:a6:a6:32:b0:15:27:fe:f9:ec:73:d1:03: aa:1d:eb:24:92:8d:58:c6:e6:65:b1:9d:49:c9:c1: c0:55:1b:19:69:47:0f:b6:0f:8f:d6:58:ce:d6:90: 8e:b9:a5:13:9e:e1:57:77:14:73:51:9b:41:79:21: d1:28:11:ef:01:9b:37:b3:e8:85:e8:9d:b0:4a:5a: 34:4e:8a:c9:66:e9:42:0d:ff:23:a7:bd:83:94:45: 26:c9:15:98:61:10:bc:0c:27:26:11:49:f6:34:d3: 5b:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:53:FE:0C:B4:83:18:DC:44:E6:AE:23:40:AB:D2:59:1F:DA:5D:D0 X509v3 Authority Key Identifier: keyid:FE:24:FB:28:12:AE:2F:3D:4D:9B:B4:58:9D:D7:31:E5:46:97:91:09 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_iT7KBKuLz1Nm7RYndcx5UaXkQk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/c66ff9-10ea-4b44-9169-c5f670239718/1/_iT7KBKuLz1Nm7RYndcx5UaXkQk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/77/c66ff9-10ea-4b44-9169-c5f670239718/1/_iT7KBKuLz1Nm7RYndcx5UaXkQk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8e:10:ec:a2:b0:ae:7b:a9:25:12:a1:65:24:60:aa:b4:fd:0e: 5a:98:5d:41:8b:df:22:c5:96:f6:b1:e0:a8:ad:52:33:eb:ae: d5:d1:18:c2:ac:ab:39:d6:94:3f:0e:6c:79:b0:3b:7d:49:db: d1:37:f4:ae:ae:ee:9c:f7:e9:50:ce:f9:28:61:7f:60:9d:ef: cb:c9:dc:ad:75:e0:81:81:31:13:71:c0:d2:57:40:49:5c:ed: 32:63:bb:1d:e7:8f:36:a5:d3:a4:25:d9:b7:19:cc:d7:23:8f: 55:48:57:bc:8c:d2:22:d7:9e:c3:2d:f3:5e:a5:f5:4d:ff:17: c8:b7:66:67:10:e0:4e:1f:02:b4:36:1a:ce:6f:1e:6c:08:8d: 7f:00:c2:37:36:49:f6:b7:ab:e8:97:45:21:c7:08:63:a7:6b: 99:4f:f4:76:44:b0:4d:02:21:13:90:4f:6e:b1:84:f9:cf:88: b9:37:e8:f6:d7:4f:e4:b8:8f:3b:dc:0c:fa:9b:49:e9:bd:a8: af:ee:ae:9b:36:90:6b:2a:c1:24:61:11:72:7b:1e:39:d4:21: 83:bc:8a:3a:4a:43:13:2b:9e:2d:4e:f2:6f:9d:0a:5f:3a:93: ce:bb:c0:72:29:e2:4b:11:18:25:90:d3:03:83:28:67:f6:a9: 1c:37:5f:06 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr0nC/30cB40PWJzZoYKXIJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZlMjRmYjI4MTJhZTJmM2Q0ZDliYjQ1ODlkZDczMWU1NDY5 NzkxMDkwHhcNMjUxMjA2MTcwMTA3WhcNMjUxMjA3MTcwMTA3WjAzMTEwLwYDVQQD EyhhNDUzZmUwY2I0ODMxOGRjNDRlNmFlMjM0MGFiZDI1OTFmZGE1ZGQwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxATDyd2bXIoISbgNEI7v3SWEgAcC j4uS1Dfg9HPMKmCmzi2mYLjVsxbQ4yHpfDAJM3hNgHzdMeVno4tDgRq/ltPSildE pPn0RPUQU4kYi7lvvDoqhc1AUQSY1E2ZCfGz5UyfHyAWfsubwyGXRSTmLFRexlYK zszU0tt7HuNE15tNgX4hBLqainkdJpmlpdDBAAAZCBmtK9umpjKwFSf++exz0QOq Heskko1YxuZlsZ1JycHAVRsZaUcPtg+P1ljO1pCOuaUTnuFXdxRzUZtBeSHRKBHv AZs3s+iF6J2wSlo0TorJZulCDf8jp72DlEUmyRWYYRC8DCcmEUn2NNNbAwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKRT/gy0gxjcROauI0Cr0lkf2l3QMB8GA1UdIwQY MBaAFP4k+ygSri89TZu0WJ3XMeVGl5EJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX2lUN0tCS3VMejFObTdSWW5kY3g1VWFYa1FrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ny9jNjZmZjktMTBlYS00YjQ0LTkxNjkt YzVmNjcwMjM5NzE4LzEvX2lUN0tCS3VMejFObTdSWW5kY3g1VWFYa1FrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Ny9jNjZmZjktMTBlYS00YjQ0LTkxNjktYzVmNjcwMjM5NzE4 LzEvX2lUN0tCS3VMejFObTdSWW5kY3g1VWFYa1FrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjhDsorCu e6klEqFlJGCqtP0OWphdQYvfIsWW9rHgqK1SM+uu1dEYwqyrOdaUPw5sebA7fUnb 0Tf0rq7unPfpUM75KGF/YJ3vy8ncrXXggYExE3HA0ldASVztMmO7HeePNqXTpCXZ txnM1yOPVUhXvIzSIteewy3zXqX1Tf8XyLdmZxDgTh8CtDYazm8ebAiNfwDCNzZJ 9rer6JdFIccIY6drmU/0dkSwTQIhE5BPbrGE+c+IuTfo9tdP5LiPO9wM+ptJ6b2o r+6umzaQayrBJGERcnseOdQhg7yKOkpDEyueLU7yb50KXzqTzrvAciniSxEYJZDT A4MoZ/apHDdfBg== -----END CERTIFICATE-----Generated at Sun Dec 7 01:53:30 2025 by rpki-client