This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/85b40d-e900-4d9f-af05-316c7a9cd6b6/1/IhHwQD6XRloB3RRbwVB75WVxDU4.mft File: IhHwQD6XRloB3RRbwVB75WVxDU4.mft (raw, json) Hash identifier: +OmJYIWAMhCNkPb7bwIhwx7W1SjuPUKcSh87ZkNg2Yc= Subject key identifier: 10:D6:75:65:18:DA:FE:67:57:D4:50:19:8A:07:96:55:74:83:4E:B2 Authority key identifier: 22:11:F0:40:3E:97:46:5A:01:DD:14:5B:C1:50:7B:E5:65:71:0D:4E Certificate issuer: /CN=2211f0403e97465a01dd145bc1507be565710d4e Certificate serial: 019B318C6DC77E9E6FA30D527A58D1A5F35B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IhHwQD6XRloB3RRbwVB75WVxDU4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/85b40d-e900-4d9f-af05-316c7a9cd6b6/1/IhHwQD6XRloB3RRbwVB75WVxDU4.mft Manifest number: 0835 Signing time: Thu 18 Dec 2025 13:00:45 +0000 Manifest this update: Thu 18 Dec 2025 13:00:45 +0000 Manifest next update: Fri 19 Dec 2025 13:00:45 +0000 Files and hashes: 1: 0Td-ytKd7IQkV6ppvSRDV5Vu3uc.roa (hash: vadykyjqf/87L2UrE0dzG3fnpUitaYJ3rncrWvmznpA=) 2: IhHwQD6XRloB3RRbwVB75WVxDU4.crl (hash: UOn2lp2EtlA9xcdYdaqA4/4EtNKhMTfl8j8ACd0qbpc=) 3: klqt66FL_fbr6-S9maCaJ71u_2M.roa (hash: veL+ZGa8+a7DgdnASURYCHEXm47JFKP1LXkF9cJkBfQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/85b40d-e900-4d9f-af05-316c7a9cd6b6/1/IhHwQD6XRloB3RRbwVB75WVxDU4.crl rsync://rpki.ripe.net/repository/DEFAULT/79/85b40d-e900-4d9f-af05-316c7a9cd6b6/1/IhHwQD6XRloB3RRbwVB75WVxDU4.mft rsync://rpki.ripe.net/repository/DEFAULT/IhHwQD6XRloB3RRbwVB75WVxDU4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 13:00:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:31:8c:6d:c7:7e:9e:6f:a3:0d:52:7a:58:d1:a5:f3:5b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2211f0403e97465a01dd145bc1507be565710d4e Validity Not Before: Dec 18 13:00:45 2025 GMT Not After : Dec 19 13:00:45 2025 GMT Subject: CN=10d6756518dafe6757d450198a07965574834eb2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:52:94:f2:4a:e8:89:21:82:15:c5:ba:80:e3: f0:13:16:91:5a:f7:9d:37:4c:fd:05:ad:6f:d7:21: ac:db:ee:c6:98:7b:e8:1f:74:a5:62:3c:e7:64:d5: 64:23:7a:28:50:43:1f:64:81:be:d3:f7:ad:d3:e7: e4:89:f9:51:3e:9c:aa:10:3b:20:b5:09:ee:53:d4: 8f:6b:ee:2b:6d:97:d2:39:50:b7:01:3a:6f:bd:d8: 62:bb:c9:fb:59:c7:36:86:ce:c4:b6:1f:90:c2:4a: 1a:77:b3:3c:d3:42:68:7d:16:a8:4e:7e:04:c5:60: 64:d4:fa:72:4e:2c:d1:4a:36:85:9e:2b:73:8c:bc: 0a:bc:a9:22:f0:30:07:51:20:01:ba:56:45:12:45: c3:fd:e3:5d:36:86:e6:0b:7e:e0:08:4b:d2:97:57: 1d:42:d1:d7:e9:50:1d:0d:42:8d:77:31:f6:31:0a: a9:11:37:4a:c5:39:6f:ba:6e:d4:9d:bd:a0:91:8f: 65:19:53:ca:7b:1c:4f:50:66:c8:ab:8d:88:7d:d3: e6:bd:21:83:ac:d0:4e:4e:1c:c8:06:a9:be:71:c6: 36:2f:bd:a7:03:24:5d:fb:c7:7a:5f:ec:fa:02:ae: 21:e8:1b:9f:24:2c:4d:fa:fb:35:e1:59:2b:e0:4f: e7:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:D6:75:65:18:DA:FE:67:57:D4:50:19:8A:07:96:55:74:83:4E:B2 X509v3 Authority Key Identifier: keyid:22:11:F0:40:3E:97:46:5A:01:DD:14:5B:C1:50:7B:E5:65:71:0D:4E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IhHwQD6XRloB3RRbwVB75WVxDU4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/85b40d-e900-4d9f-af05-316c7a9cd6b6/1/IhHwQD6XRloB3RRbwVB75WVxDU4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/79/85b40d-e900-4d9f-af05-316c7a9cd6b6/1/IhHwQD6XRloB3RRbwVB75WVxDU4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0e:a0:7d:94:09:22:c0:75:fc:95:82:7d:f2:f9:49:59:96:11: 8a:0c:c0:c3:72:36:39:fb:61:4e:27:77:09:e1:22:78:4e:b6: ca:51:c1:7f:3b:3c:69:65:66:d4:13:1f:9a:f2:99:55:69:c8: 17:ba:b2:7d:c3:45:8c:4a:60:af:47:b5:d2:e0:37:fd:95:18: 50:c0:c1:8c:04:40:b3:10:05:06:2f:99:31:52:08:62:c1:46: a8:0b:f6:1b:4b:76:ec:db:6f:04:92:fa:6e:ba:4b:17:3b:da: de:42:f5:b4:94:b1:1c:ae:8e:7e:27:78:65:b2:aa:41:d2:c8: 74:1d:00:07:4f:28:bd:4d:e7:4e:c3:3e:49:c5:f9:6d:5b:21: 58:ac:d4:bd:cd:c6:8d:cf:76:31:33:51:f2:48:5e:51:77:c6: 0b:44:ef:ac:85:5b:aa:a1:9c:6d:aa:21:97:c2:ff:07:b3:ae: 3b:3a:b7:88:b5:44:ef:96:61:49:72:30:44:e7:72:b5:11:37: 0f:82:09:14:3e:4d:8a:b4:37:a2:42:47:20:f9:55:85:87:93: 9f:1a:d8:12:67:4c:a5:16:34:c0:b3:10:66:a3:6c:2f:f6:ff: ce:87:69:69:02:b1:e1:0d:97:f4:16:6a:5b:72:9d:ca:70:eb: 5c:4b:3a:fc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsxjG3Hfp5vow1SeljRpfNbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIyMTFmMDQwM2U5NzQ2NWEwMWRkMTQ1YmMxNTA3YmU1NjU3 MTBkNGUwHhcNMjUxMjE4MTMwMDQ1WhcNMjUxMjE5MTMwMDQ1WjAzMTEwLwYDVQQD EygxMGQ2NzU2NTE4ZGFmZTY3NTdkNDUwMTk4YTA3OTY1NTc0ODM0ZWIyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA41KU8kroiSGCFcW6gOPwExaRWved N0z9Ba1v1yGs2+7GmHvoH3SlYjznZNVkI3ooUEMfZIG+0/et0+fkiflRPpyqEDsg tQnuU9SPa+4rbZfSOVC3ATpvvdhiu8n7Wcc2hs7Eth+Qwkoad7M800JofRaoTn4E xWBk1PpyTizRSjaFnitzjLwKvKki8DAHUSABulZFEkXD/eNdNobmC37gCEvSl1cd QtHX6VAdDUKNdzH2MQqpETdKxTlvum7Unb2gkY9lGVPKexxPUGbIq42IfdPmvSGD rNBOThzIBqm+ccY2L72nAyRd+8d6X+z6Aq4h6BufJCxN+vs14Vkr4E/n/QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBDWdWUY2v5nV9RQGYoHllV0g06yMB8GA1UdIwQY MBaAFCIR8EA+l0ZaAd0UW8FQe+VlcQ1OMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSWhId1FENlhSbG9CM1JSYndWQjc1V1Z4RFU0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OS84NWI0MGQtZTkwMC00ZDlmLWFmMDUt MzE2YzdhOWNkNmI2LzEvSWhId1FENlhSbG9CM1JSYndWQjc1V1Z4RFU0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83OS84NWI0MGQtZTkwMC00ZDlmLWFmMDUtMzE2YzdhOWNkNmI2 LzEvSWhId1FENlhSbG9CM1JSYndWQjc1V1Z4RFU0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADqB9lAki wHX8lYJ98vlJWZYRigzAw3I2OfthTid3CeEieE62ylHBfzs8aWVm1BMfmvKZVWnI F7qyfcNFjEpgr0e10uA3/ZUYUMDBjARAsxAFBi+ZMVIIYsFGqAv2G0t27NtvBJL6 brpLFzva3kL1tJSxHK6Ofid4ZbKqQdLIdB0AB08ovU3nTsM+ScX5bVshWKzUvc3G jc92MTNR8kheUXfGC0TvrIVbqqGcbaohl8L/B7OuOzq3iLVE75ZhSXIwROdytRE3 D4IJFD5NirQ3okJHIPlVhYeTnxrYEmdMpRY0wLMQZqNsL/b/zodpaQKx4Q2X9BZq W3KdynDrXEs6/A== -----END CERTIFICATE-----Generated at Thu Dec 18 23:08:24 2025 by rpki-client