This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/ca5e24-6e92-4d3a-9ad5-8935e9079796/1/itpL9fGQ85mLgMYUmhRjJw-77hU.mft File: itpL9fGQ85mLgMYUmhRjJw-77hU.mft (raw, json) Hash identifier: eZ29IDC2OUtP8gf2j3g6rXkPJR4oxMxyPpXuzpVDKRM= Subject key identifier: E1:A9:31:89:6A:AE:EA:FB:4E:83:EF:E2:43:02:0A:B0:CC:DA:DC:98 Authority key identifier: 8A:DA:4B:F5:F1:90:F3:99:8B:80:C6:14:9A:14:63:27:0F:BB:EE:15 Certificate issuer: /CN=8ada4bf5f190f3998b80c6149a1463270fbbee15 Certificate serial: 019AF23F7A25C06788AF76A7E38B2392F4E9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/itpL9fGQ85mLgMYUmhRjJw-77hU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/ca5e24-6e92-4d3a-9ad5-8935e9079796/1/itpL9fGQ85mLgMYUmhRjJw-77hU.mft Manifest number: 0CFB Signing time: Sat 06 Dec 2025 06:00:37 +0000 Manifest this update: Sat 06 Dec 2025 06:00:37 +0000 Manifest next update: Sun 07 Dec 2025 06:00:37 +0000 Files and hashes: 1: LFEIluOUd9L4Q7o8SOFbXnRsR2I.roa (hash: +SCJDgXjfIehW/fnwCbMUZVD5jPniR1EIP/i9wyjTdw=) 2: itpL9fGQ85mLgMYUmhRjJw-77hU.crl (hash: m4PdelWIqrslTaWlsKQLAgXHzFaloYgGHi+NC7s9bgg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/ca5e24-6e92-4d3a-9ad5-8935e9079796/1/itpL9fGQ85mLgMYUmhRjJw-77hU.crl rsync://rpki.ripe.net/repository/DEFAULT/7f/ca5e24-6e92-4d3a-9ad5-8935e9079796/1/itpL9fGQ85mLgMYUmhRjJw-77hU.mft rsync://rpki.ripe.net/repository/DEFAULT/itpL9fGQ85mLgMYUmhRjJw-77hU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:3f:7a:25:c0:67:88:af:76:a7:e3:8b:23:92:f4:e9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8ada4bf5f190f3998b80c6149a1463270fbbee15 Validity Not Before: Dec 6 06:00:37 2025 GMT Not After : Dec 7 06:00:37 2025 GMT Subject: CN=e1a931896aaeeafb4e83efe243020ab0ccdadc98 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:d8:92:84:82:ad:4b:22:05:4a:05:37:00:b0: e0:c3:66:f2:3e:15:28:8a:e1:2a:33:72:93:b4:44: 53:ba:85:f0:d4:43:62:d7:d1:3d:b7:12:d8:19:49: af:3d:9e:31:d6:31:08:94:1b:d3:80:e7:36:f5:e8: 7a:e6:63:a0:61:56:01:98:b1:48:30:a7:24:0c:19: 05:db:7f:4e:42:80:bb:ea:1d:d9:f0:2a:df:12:db: 3e:a2:8b:b4:bf:22:be:9f:28:fd:45:35:79:f2:f8: 2e:c6:f9:74:30:a2:87:6f:2d:18:4c:7b:f9:f9:32: 1a:e2:de:7c:56:98:03:17:2b:d2:f6:a0:08:05:ca: c7:51:28:19:3e:c3:1b:93:3d:7a:e6:e2:36:ec:3b: 92:40:8f:a3:62:d7:a6:a3:1c:c7:7f:77:12:df:8d: a2:7e:9a:fb:88:10:5a:80:11:25:48:ac:de:87:e6: 28:6a:ee:76:9b:de:0b:f8:b4:a7:7d:f5:51:ea:36: 6f:b2:0c:86:9b:ee:47:30:89:07:30:d3:c2:7f:8d: 98:15:31:c4:94:27:3e:0a:13:68:7a:f7:e2:bd:bb: 86:f8:a3:e1:17:cf:32:de:3b:42:66:41:f5:18:77: 3d:b5:36:f0:c7:06:00:c9:a1:d5:68:58:b4:2d:fe: 38:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:A9:31:89:6A:AE:EA:FB:4E:83:EF:E2:43:02:0A:B0:CC:DA:DC:98 X509v3 Authority Key Identifier: keyid:8A:DA:4B:F5:F1:90:F3:99:8B:80:C6:14:9A:14:63:27:0F:BB:EE:15 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/itpL9fGQ85mLgMYUmhRjJw-77hU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/ca5e24-6e92-4d3a-9ad5-8935e9079796/1/itpL9fGQ85mLgMYUmhRjJw-77hU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/ca5e24-6e92-4d3a-9ad5-8935e9079796/1/itpL9fGQ85mLgMYUmhRjJw-77hU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5a:2d:23:c4:45:5e:59:70:78:2a:86:27:a3:66:d4:d0:a7:b4: 20:3e:0a:ea:bc:f4:bb:16:d0:30:91:c6:97:d1:26:de:35:ba: 03:c5:13:cb:04:44:af:31:96:fd:e5:19:4a:0e:47:53:87:5b: 1e:90:d5:c3:2b:13:64:33:83:47:7f:e6:6f:e8:61:9b:4e:25: 60:83:50:68:31:57:c0:ab:5f:ba:8a:7e:90:57:9d:84:57:f9: 28:d1:8c:f3:8f:8c:3a:67:dd:02:4d:ef:ae:aa:6d:31:03:d6: d7:b8:e1:4f:bc:0c:49:3d:76:26:bf:f1:7f:46:a1:1b:b6:70: 50:52:10:d3:e9:82:64:9f:3b:d8:0c:e2:c2:ad:21:24:5c:f8: c3:ad:04:75:ad:8e:b0:d5:6a:55:25:89:6c:de:23:c1:a6:d4: d7:57:19:e8:b1:56:86:b2:37:e9:6f:c4:bd:a3:ad:77:d7:25: d9:b8:a4:51:86:9f:2e:1e:4f:d4:71:62:30:a6:ef:50:e4:3d: 6c:06:ec:83:e7:17:79:98:68:af:0c:5e:ab:a3:69:63:be:50: c2:1f:c5:5e:96:2b:0b:35:db:22:99:0b:09:0f:45:f0:f1:5d: 77:e7:42:32:38:4a:44:5d:42:6b:92:e9:2e:f2:d9:28:0f:2d: 09:c3:95:9c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryP3olwGeIr3an44sjkvTpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhhZGE0YmY1ZjE5MGYzOTk4YjgwYzYxNDlhMTQ2MzI3MGZi YmVlMTUwHhcNMjUxMjA2MDYwMDM3WhcNMjUxMjA3MDYwMDM3WjAzMTEwLwYDVQQD EyhlMWE5MzE4OTZhYWVlYWZiNGU4M2VmZTI0MzAyMGFiMGNjZGFkYzk4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq9iShIKtSyIFSgU3ALDgw2byPhUo iuEqM3KTtERTuoXw1ENi19E9txLYGUmvPZ4x1jEIlBvTgOc29eh65mOgYVYBmLFI MKckDBkF239OQoC76h3Z8CrfEts+oou0vyK+nyj9RTV58vguxvl0MKKHby0YTHv5 +TIa4t58VpgDFyvS9qAIBcrHUSgZPsMbkz165uI27DuSQI+jYtemoxzHf3cS342i fpr7iBBagBElSKzeh+Yoau52m94L+LSnffVR6jZvsgyGm+5HMIkHMNPCf42YFTHE lCc+ChNoevfivbuG+KPhF88y3jtCZkH1GHc9tTbwxwYAyaHVaFi0Lf44PQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOGpMYlqrur7ToPv4kMCCrDM2tyYMB8GA1UdIwQY MBaAFIraS/XxkPOZi4DGFJoUYycPu+4VMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaXRwTDlmR1E4NW1MZ01ZVW1oUmpKdy03N2hVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Zi9jYTVlMjQtNmU5Mi00ZDNhLTlhZDUt ODkzNWU5MDc5Nzk2LzEvaXRwTDlmR1E4NW1MZ01ZVW1oUmpKdy03N2hVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Zi9jYTVlMjQtNmU5Mi00ZDNhLTlhZDUtODkzNWU5MDc5Nzk2 LzEvaXRwTDlmR1E4NW1MZ01ZVW1oUmpKdy03N2hVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWi0jxEVe WXB4KoYno2bU0Ke0ID4K6rz0uxbQMJHGl9Em3jW6A8UTywRErzGW/eUZSg5HU4db HpDVwysTZDODR3/mb+hhm04lYINQaDFXwKtfuop+kFedhFf5KNGM84+MOmfdAk3v rqptMQPW17jhT7wMST12Jr/xf0ahG7ZwUFIQ0+mCZJ872Aziwq0hJFz4w60Eda2O sNVqVSWJbN4jwabU11cZ6LFWhrI36W/EvaOtd9cl2bikUYafLh5P1HFiMKbvUOQ9 bAbsg+cXeZhorwxeq6NpY75Qwh/FXpYrCzXbIpkLCQ9F8PFdd+dCMjhKRF1Ca5Lp LvLZKA8tCcOVnA== -----END CERTIFICATE-----Generated at Sat Dec 6 08:06:16 2025 by rpki-client