This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/f0a67c-bd4f-4ddc-8c61-3fe7aea9e2e0/1/IAsV4Hg_4A8bile9FP29BpJLiDI.mft File: IAsV4Hg_4A8bile9FP29BpJLiDI.mft (raw, json) Hash identifier: CY5q+YHmZrUTA2dWJL2yKrZRnkDzQL2SGwuXlEuNXPE= Subject key identifier: E2:56:2F:0D:1B:3C:DB:28:19:F1:C0:1C:66:97:F2:64:C8:C5:17:05 Authority key identifier: 20:0B:15:E0:78:3F:E0:0F:1B:8A:57:BD:14:FD:BD:06:92:4B:88:32 Certificate issuer: /CN=200b15e0783fe00f1b8a57bd14fdbd06924b8832 Certificate serial: 019AF1D19B5CE2CB35F1F647A418E9B81842 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IAsV4Hg_4A8bile9FP29BpJLiDI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/f0a67c-bd4f-4ddc-8c61-3fe7aea9e2e0/1/IAsV4Hg_4A8bile9FP29BpJLiDI.mft Manifest number: 1762 Signing time: Sat 06 Dec 2025 04:00:37 +0000 Manifest this update: Sat 06 Dec 2025 04:00:37 +0000 Manifest next update: Sun 07 Dec 2025 04:00:37 +0000 Files and hashes: 1: IAsV4Hg_4A8bile9FP29BpJLiDI.crl (hash: haLyQnZVeAPio7vdufgtjMDsKlE/HxKDD5woAigemz8=) 2: foZeHIwLujdlY8Z9L88C79OdbL4.roa (hash: kBji60S+DjYJ/bgY7+g+22RM5gAKkLkkfayTk1h8AIo=) 3: szEuog0QzjoBQW1CQcU6MA8xPCY.roa (hash: LsMXxa5IeE1fxcnMKQjYIuPdJ91pJvkbpdujugd5olw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/f0a67c-bd4f-4ddc-8c61-3fe7aea9e2e0/1/IAsV4Hg_4A8bile9FP29BpJLiDI.crl rsync://rpki.ripe.net/repository/DEFAULT/79/f0a67c-bd4f-4ddc-8c61-3fe7aea9e2e0/1/IAsV4Hg_4A8bile9FP29BpJLiDI.mft rsync://rpki.ripe.net/repository/DEFAULT/IAsV4Hg_4A8bile9FP29BpJLiDI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 04:00:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d1:9b:5c:e2:cb:35:f1:f6:47:a4:18:e9:b8:18:42 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=200b15e0783fe00f1b8a57bd14fdbd06924b8832 Validity Not Before: Dec 6 04:00:37 2025 GMT Not After : Dec 7 04:00:37 2025 GMT Subject: CN=e2562f0d1b3cdb2819f1c01c6697f264c8c51705 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:2c:b9:d8:1d:91:eb:e2:24:8b:8e:8a:60:9a: 2e:be:f4:6e:33:b1:f9:a2:e6:2c:b3:c6:f9:ac:f6: 58:b8:c3:94:c2:e1:b5:7b:f9:f4:7a:51:d8:b5:76: d4:e8:31:c2:dd:69:64:15:b8:62:d4:89:25:93:40: ef:29:8e:e5:16:71:ea:75:73:3d:fb:fc:04:fa:e6: 61:ed:75:7a:b0:89:9c:4e:7a:67:8e:92:bd:85:6a: 6c:10:ca:0b:21:62:af:26:51:34:72:e5:ba:12:04: ec:88:a6:79:8b:ea:83:31:47:ef:20:75:98:f5:0d: 04:fa:4f:26:52:e8:b7:e7:0e:83:36:30:e9:36:55: d1:37:bd:75:b5:ff:70:c5:8f:be:95:67:25:2a:8e: 58:79:db:f5:5e:03:e2:63:05:77:19:27:25:42:49: 00:79:1f:83:17:c5:a3:99:24:f6:a1:3b:9b:6e:b0: da:58:4a:76:f5:91:6d:ad:72:8a:22:21:76:73:57: 06:76:25:db:89:cb:29:9d:c0:cd:26:25:60:a1:81: f3:fa:89:f5:34:c8:04:ce:2f:5e:8c:b1:a3:c3:85: 3e:50:5c:f0:ee:13:15:5c:e4:95:e4:9d:10:e3:ec: ae:f2:7a:68:e4:c0:02:f8:58:da:32:3f:69:f8:73: 86:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:56:2F:0D:1B:3C:DB:28:19:F1:C0:1C:66:97:F2:64:C8:C5:17:05 X509v3 Authority Key Identifier: keyid:20:0B:15:E0:78:3F:E0:0F:1B:8A:57:BD:14:FD:BD:06:92:4B:88:32 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IAsV4Hg_4A8bile9FP29BpJLiDI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/f0a67c-bd4f-4ddc-8c61-3fe7aea9e2e0/1/IAsV4Hg_4A8bile9FP29BpJLiDI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/79/f0a67c-bd4f-4ddc-8c61-3fe7aea9e2e0/1/IAsV4Hg_4A8bile9FP29BpJLiDI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b6:dd:f8:5c:f5:18:70:eb:43:28:b3:13:bb:bc:b4:2c:a8:a8: 3b:cb:56:b9:aa:4c:fc:69:49:82:01:c8:fd:f9:41:52:4e:50: b8:f0:a9:13:b2:6b:24:35:98:2f:d1:63:3b:5a:5c:4d:df:d4: 54:a3:95:f5:f6:da:d9:8a:d8:e0:fd:bf:cc:7a:cb:e5:0f:a5: 5e:9e:f6:9f:d0:8e:69:99:58:ef:19:3f:0d:f3:a3:30:53:4d: 59:4f:f9:b7:1b:0b:f0:dc:b6:56:94:57:50:8c:97:46:b3:e8: a6:20:a9:f9:3e:82:57:3f:1f:bb:bd:44:68:cb:78:38:29:d1: 16:83:f9:0d:50:fd:c7:8d:4d:02:58:93:b4:e8:21:f9:da:56: 66:82:9c:f7:b9:78:d2:0d:a4:ee:54:27:2a:33:6d:d8:06:91: 22:7d:cb:0e:e2:6e:1d:12:33:d6:45:77:11:d9:05:dc:85:94: 35:6b:db:08:40:2f:a0:e0:80:85:ec:d5:a9:ac:31:69:f4:83: 5d:fe:30:87:9e:8b:08:db:10:bc:9d:f2:07:af:b8:88:f1:79: a2:ca:80:b5:a5:c2:e1:b3:4e:80:7e:16:b8:17:1f:21:24:79: c9:11:0c:19:cd:fa:94:27:df:6e:be:a9:bd:d1:01:4d:4e:1c: c3:90:c6:84 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0Ztc4ss18fZHpBjpuBhCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIwMGIxNWUwNzgzZmUwMGYxYjhhNTdiZDE0ZmRiZDA2OTI0 Yjg4MzIwHhcNMjUxMjA2MDQwMDM3WhcNMjUxMjA3MDQwMDM3WjAzMTEwLwYDVQQD EyhlMjU2MmYwZDFiM2NkYjI4MTlmMWMwMWM2Njk3ZjI2NGM4YzUxNzA1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtCy52B2R6+Iki46KYJouvvRuM7H5 ouYss8b5rPZYuMOUwuG1e/n0elHYtXbU6DHC3WlkFbhi1Iklk0DvKY7lFnHqdXM9 +/wE+uZh7XV6sImcTnpnjpK9hWpsEMoLIWKvJlE0cuW6EgTsiKZ5i+qDMUfvIHWY 9Q0E+k8mUui35w6DNjDpNlXRN711tf9wxY++lWclKo5Yedv1XgPiYwV3GSclQkkA eR+DF8WjmST2oTubbrDaWEp29ZFtrXKKIiF2c1cGdiXbicspncDNJiVgoYHz+on1 NMgEzi9ejLGjw4U+UFzw7hMVXOSV5J0Q4+yu8npo5MAC+FjaMj9p+HOG3wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOJWLw0bPNsoGfHAHGaX8mTIxRcFMB8GA1UdIwQY MBaAFCALFeB4P+APG4pXvRT9vQaSS4gyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSUFzVjRIZ180QThiaWxlOUZQMjlCcEpMaURJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OS9mMGE2N2MtYmQ0Zi00ZGRjLThjNjEt M2ZlN2FlYTllMmUwLzEvSUFzVjRIZ180QThiaWxlOUZQMjlCcEpMaURJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83OS9mMGE2N2MtYmQ0Zi00ZGRjLThjNjEtM2ZlN2FlYTllMmUw LzEvSUFzVjRIZ180QThiaWxlOUZQMjlCcEpMaURJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtt34XPUY cOtDKLMTu7y0LKioO8tWuapM/GlJggHI/flBUk5QuPCpE7JrJDWYL9FjO1pcTd/U VKOV9fba2YrY4P2/zHrL5Q+lXp72n9COaZlY7xk/DfOjMFNNWU/5txsL8Ny2VpRX UIyXRrPopiCp+T6CVz8fu71EaMt4OCnRFoP5DVD9x41NAliTtOgh+dpWZoKc97l4 0g2k7lQnKjNt2AaRIn3LDuJuHRIz1kV3EdkF3IWUNWvbCEAvoOCAhezVqawxafSD Xf4wh56LCNsQvJ3yB6+4iPF5osqAtaXC4bNOgH4WuBcfISR5yREMGc36lCffbr6p vdEBTU4cw5DGhA== -----END CERTIFICATE-----Generated at Sat Dec 6 10:54:17 2025 by rpki-client