This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/a84cd2-45d9-4179-a997-920d2a6207a4/1/iKVZ3N1bxLZssklvLm-w6PlUqus.mft File: iKVZ3N1bxLZssklvLm-w6PlUqus.mft (raw, json) Hash identifier: ChZRYkpo619b7sxnYndCnX4J16toxhUS555HfX0J0xw= Subject key identifier: 0A:6A:D8:9E:DF:CC:67:2F:CB:29:01:09:B3:E9:A7:BB:23:44:8D:84 Authority key identifier: 88:A5:59:DC:DD:5B:C4:B6:6C:B2:49:6F:2E:6F:B0:E8:F9:54:AA:EB Certificate issuer: /CN=88a559dcdd5bc4b66cb2496f2e6fb0e8f954aaeb Certificate serial: 019AF1640DEC18788160D3A6C43DCF2E07D6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iKVZ3N1bxLZssklvLm-w6PlUqus.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/a84cd2-45d9-4179-a997-920d2a6207a4/1/iKVZ3N1bxLZssklvLm-w6PlUqus.mft Manifest number: 10C9 Signing time: Sat 06 Dec 2025 02:00:57 +0000 Manifest this update: Sat 06 Dec 2025 02:00:57 +0000 Manifest next update: Sun 07 Dec 2025 02:00:57 +0000 Files and hashes: 1: iKVZ3N1bxLZssklvLm-w6PlUqus.crl (hash: /UCUew8KfuKHYtVeltz4eIfMlIU7AqZdjVqZlQb5UjQ=) 2: oGUzs3HriURmMyvP-1mM3ixvd88.roa (hash: U9dJ3cn9/4GeEgNWQhNTsFuWjpySklwjtb60dseGPO4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/a84cd2-45d9-4179-a997-920d2a6207a4/1/iKVZ3N1bxLZssklvLm-w6PlUqus.crl rsync://rpki.ripe.net/repository/DEFAULT/84/a84cd2-45d9-4179-a997-920d2a6207a4/1/iKVZ3N1bxLZssklvLm-w6PlUqus.mft rsync://rpki.ripe.net/repository/DEFAULT/iKVZ3N1bxLZssklvLm-w6PlUqus.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:64:0d:ec:18:78:81:60:d3:a6:c4:3d:cf:2e:07:d6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=88a559dcdd5bc4b66cb2496f2e6fb0e8f954aaeb Validity Not Before: Dec 6 02:00:57 2025 GMT Not After : Dec 7 02:00:57 2025 GMT Subject: CN=0a6ad89edfcc672fcb290109b3e9a7bb23448d84 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:ae:b4:d7:42:cd:59:d6:d6:1d:0d:60:80:36: 81:ee:cb:d6:8e:89:b0:c4:84:83:8b:b6:e2:d0:78: b8:6b:8f:96:72:68:52:65:82:a0:4c:70:1f:00:c3: 5e:c3:f6:af:12:db:b3:78:52:e0:55:ed:40:54:f8: 53:98:c3:12:b0:d4:65:53:bd:4d:42:7b:c1:8a:8e: 09:21:6e:f7:08:a6:8b:17:4d:32:6e:e0:f0:a4:1b: 26:d3:5e:43:67:79:3c:5a:55:e9:2f:ef:1a:73:32: ef:79:74:9f:93:7c:35:53:bf:5c:9d:7c:db:13:42: f4:7b:c7:e1:41:7c:29:e9:fa:c5:2c:ca:65:fc:34: 8e:d0:3e:b3:12:0c:37:61:4b:6e:27:35:63:47:f8: 73:fd:44:09:36:45:e9:71:c5:f0:a2:6a:bf:fa:60: af:0a:dd:ae:31:34:a9:b0:4c:0c:a0:1b:4d:17:cb: 18:18:a4:3a:f4:e8:01:43:f3:06:21:23:5a:0f:22: 76:ed:36:65:ea:7d:34:97:1d:08:88:9e:93:3b:10: 55:22:85:1d:a5:33:02:9a:47:b8:92:2e:41:a1:18: e0:04:f3:f1:e8:a7:1c:ca:02:2b:77:94:20:a4:37: 07:dc:cb:71:b4:98:a4:38:4a:2e:00:8a:8d:b2:5d: 13:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:6A:D8:9E:DF:CC:67:2F:CB:29:01:09:B3:E9:A7:BB:23:44:8D:84 X509v3 Authority Key Identifier: keyid:88:A5:59:DC:DD:5B:C4:B6:6C:B2:49:6F:2E:6F:B0:E8:F9:54:AA:EB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iKVZ3N1bxLZssklvLm-w6PlUqus.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/a84cd2-45d9-4179-a997-920d2a6207a4/1/iKVZ3N1bxLZssklvLm-w6PlUqus.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/84/a84cd2-45d9-4179-a997-920d2a6207a4/1/iKVZ3N1bxLZssklvLm-w6PlUqus.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 06:02:29:b7:79:32:9b:ba:76:12:79:8a:66:66:ab:de:ba:ff: b6:43:65:2a:08:6f:f5:cc:59:37:88:8c:48:87:93:ab:0f:9a: 4d:b0:f7:2e:ef:c1:02:7d:2a:29:43:94:66:66:68:a7:91:47: c4:9d:f6:72:5f:96:c6:a7:ea:c9:f4:fb:7f:61:2c:80:fc:88: 7c:71:ef:7d:62:4f:fb:bf:51:0d:d2:f2:78:75:c2:ca:1d:ad: 82:be:a5:ce:c4:79:20:52:cd:6e:c3:20:26:a3:74:42:56:5e: 1c:b0:32:37:20:2d:3a:90:30:c3:72:84:60:37:ad:0c:d1:95: b6:b8:f2:0b:ef:0d:14:91:8c:83:4a:1c:36:02:79:3d:07:87: a6:4e:95:e9:37:6a:ad:55:df:8d:20:01:ab:38:41:41:70:3b: 96:08:3b:ee:f8:5d:4d:54:45:bd:a6:b0:30:32:7f:72:cb:6e: 21:c0:9b:05:1f:c6:4f:52:02:00:b6:a4:df:33:d8:18:03:38: 1e:8e:e2:fd:cb:d7:89:7a:42:62:a7:28:a7:6f:73:56:59:f2: 7d:04:3a:ed:97:54:60:9d:dc:9c:d5:83:e6:f5:14:8a:00:2b: 2a:76:9d:4e:ef:8a:76:bf:e7:18:58:99:d7:d0:cc:03:7f:47: a9:f5:e6:4d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxZA3sGHiBYNOmxD3PLgfWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg4YTU1OWRjZGQ1YmM0YjY2Y2IyNDk2ZjJlNmZiMGU4Zjk1 NGFhZWIwHhcNMjUxMjA2MDIwMDU3WhcNMjUxMjA3MDIwMDU3WjAzMTEwLwYDVQQD EygwYTZhZDg5ZWRmY2M2NzJmY2IyOTAxMDliM2U5YTdiYjIzNDQ4ZDg0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjq6010LNWdbWHQ1ggDaB7svWjomw xISDi7bi0Hi4a4+WcmhSZYKgTHAfAMNew/avEtuzeFLgVe1AVPhTmMMSsNRlU71N QnvBio4JIW73CKaLF00ybuDwpBsm015DZ3k8WlXpL+8aczLveXSfk3w1U79cnXzb E0L0e8fhQXwp6frFLMpl/DSO0D6zEgw3YUtuJzVjR/hz/UQJNkXpccXwomq/+mCv Ct2uMTSpsEwMoBtNF8sYGKQ69OgBQ/MGISNaDyJ27TZl6n00lx0IiJ6TOxBVIoUd pTMCmke4ki5BoRjgBPPx6KccygIrd5QgpDcH3MtxtJikOEouAIqNsl0T6wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFApq2J7fzGcvyykBCbPpp7sjRI2EMB8GA1UdIwQY MBaAFIilWdzdW8S2bLJJby5vsOj5VKrrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaUtWWjNOMWJ4TFpzc2tsdkxtLXc2UGxVcXVzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NC9hODRjZDItNDVkOS00MTc5LWE5OTct OTIwZDJhNjIwN2E0LzEvaUtWWjNOMWJ4TFpzc2tsdkxtLXc2UGxVcXVzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84NC9hODRjZDItNDVkOS00MTc5LWE5OTctOTIwZDJhNjIwN2E0 LzEvaUtWWjNOMWJ4TFpzc2tsdkxtLXc2UGxVcXVzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABgIpt3ky m7p2EnmKZmar3rr/tkNlKghv9cxZN4iMSIeTqw+aTbD3Lu/BAn0qKUOUZmZop5FH xJ32cl+WxqfqyfT7f2EsgPyIfHHvfWJP+79RDdLyeHXCyh2tgr6lzsR5IFLNbsMg JqN0QlZeHLAyNyAtOpAww3KEYDetDNGVtrjyC+8NFJGMg0ocNgJ5PQeHpk6V6Tdq rVXfjSABqzhBQXA7lgg77vhdTVRFvaawMDJ/cstuIcCbBR/GT1ICALak3zPYGAM4 Ho7i/cvXiXpCYqcop29zVlnyfQQ67ZdUYJ3cnNWD5vUUigArKnadTu+Kdr/nGFiZ 19DMA39HqfXmTQ== -----END CERTIFICATE-----Generated at Sat Dec 6 12:16:31 2025 by rpki-client