This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/c3988e-8654-4311-8292-426039788919/1/IKf8vlkxTDcraPIyIjgoseM6A-w.mft File: IKf8vlkxTDcraPIyIjgoseM6A-w.mft (raw, json) Hash identifier: D3JmcnH4zE8ICmt8FX55IxqJwzgvTKpfyNg4WerK6ME= Subject key identifier: B1:8F:5A:B3:74:22:0D:05:6D:88:65:C1:C9:E7:C8:EA:5D:EC:00:79 Authority key identifier: 20:A7:FC:BE:59:31:4C:37:2B:68:F2:32:22:38:28:B1:E3:3A:03:EC Certificate issuer: /CN=20a7fcbe59314c372b68f232223828b1e33a03ec Certificate serial: 019B3DC80F8DB130D5A39094D921D74C1DFD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IKf8vlkxTDcraPIyIjgoseM6A-w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/c3988e-8654-4311-8292-426039788919/1/IKf8vlkxTDcraPIyIjgoseM6A-w.mft Manifest number: 13E8 Signing time: Sat 20 Dec 2025 22:01:19 +0000 Manifest this update: Sat 20 Dec 2025 22:01:19 +0000 Manifest next update: Sun 21 Dec 2025 22:01:19 +0000 Files and hashes: 1: IKf8vlkxTDcraPIyIjgoseM6A-w.crl (hash: 32d8kMbvC6Ir6OWpy/MseFqWhdE4w7mGf1K2tTw3k+A=) 2: O18qD-IOxU7Qpx-7qCdZCriatME.roa (hash: XB9lqyR5AkwxeYq52oBczF39tInCtjYqPPhU7+xJ+5I=) 3: d-01XFis9cLH8BZUIJJWfcsmDG4.roa (hash: NudOKOFu9rScWQsymrxK2r70c3aFtGLF+JDUyVcCcnw=) 4: rwFlopf5Xa6Dqk29FmnWdxdlBsc.roa (hash: sHbPcAOKBddNPUyuRRzIjyvQe1AGIhhOwA82JfuKSsE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/c3988e-8654-4311-8292-426039788919/1/IKf8vlkxTDcraPIyIjgoseM6A-w.crl rsync://rpki.ripe.net/repository/DEFAULT/8b/c3988e-8654-4311-8292-426039788919/1/IKf8vlkxTDcraPIyIjgoseM6A-w.mft rsync://rpki.ripe.net/repository/DEFAULT/IKf8vlkxTDcraPIyIjgoseM6A-w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 19:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:c8:0f:8d:b1:30:d5:a3:90:94:d9:21:d7:4c:1d:fd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=20a7fcbe59314c372b68f232223828b1e33a03ec Validity Not Before: Dec 20 22:01:19 2025 GMT Not After : Dec 21 22:01:19 2025 GMT Subject: CN=b18f5ab374220d056d8865c1c9e7c8ea5dec0079 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:3a:12:37:02:d7:4b:2d:f1:97:2f:e1:8c:5b: 65:6c:ab:d0:dc:9d:d3:d7:5d:dc:c3:d9:a5:50:a9: 71:53:52:17:bb:60:f0:aa:72:a0:3a:06:63:cf:73: 82:d6:af:05:b4:8f:75:36:be:e3:99:02:f9:10:84: ac:a1:e3:61:10:de:17:a8:37:f4:d8:f0:04:5b:f8: d9:b0:29:af:4e:51:9f:32:2b:0a:de:29:32:0a:4f: b8:d5:21:4f:06:9f:cb:aa:5f:3b:31:a1:46:11:81: e9:c1:bf:c2:b1:89:1e:51:2c:0f:6f:ad:c2:04:05: 6a:a2:18:75:f9:b1:31:c9:fd:f1:9e:0a:52:64:61: 09:a7:88:80:22:ef:93:5d:3d:2d:5f:dc:31:9e:af: 3c:0e:2c:d7:0b:b9:ba:63:6b:22:7b:05:9f:55:b9: 72:96:6a:21:2f:d9:71:fe:5b:cf:c9:25:3f:0e:44: 74:d6:02:a5:16:4d:81:fd:6b:ef:04:1c:8d:fa:a4: f0:3d:19:bf:59:5f:10:df:ed:96:f9:7b:53:4f:c0: 23:c2:54:58:33:2f:00:f8:5f:8d:7d:98:0d:a1:ff: d4:5d:51:d7:60:4c:7e:6f:e0:be:57:af:2b:cb:1c: 1c:34:a5:28:be:c8:d6:00:ac:d8:7d:b2:0a:af:55: 2f:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:8F:5A:B3:74:22:0D:05:6D:88:65:C1:C9:E7:C8:EA:5D:EC:00:79 X509v3 Authority Key Identifier: keyid:20:A7:FC:BE:59:31:4C:37:2B:68:F2:32:22:38:28:B1:E3:3A:03:EC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IKf8vlkxTDcraPIyIjgoseM6A-w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/c3988e-8654-4311-8292-426039788919/1/IKf8vlkxTDcraPIyIjgoseM6A-w.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/c3988e-8654-4311-8292-426039788919/1/IKf8vlkxTDcraPIyIjgoseM6A-w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4f:c7:0b:dc:ec:e2:b0:af:7a:f2:62:24:62:f9:89:63:29:eb: 15:ad:62:1e:6c:df:9a:71:68:51:ea:8b:7b:f5:19:e9:b0:8a: 07:97:73:04:1d:77:94:93:2e:af:77:5c:44:f9:2f:79:8a:36: c2:df:68:46:12:13:e3:ce:8d:d9:fd:d8:89:dc:c6:04:d0:06: 58:3f:f4:3b:1d:0b:fe:aa:6d:5c:b8:48:b1:a4:c3:3e:33:5e: 2f:96:81:43:69:97:b3:37:01:2c:31:96:d7:8a:d5:a6:9e:6a: 1f:39:fa:3e:8a:89:51:a6:36:99:ec:f6:dd:3f:33:5b:80:73: 80:9f:b6:98:d1:47:cc:f1:3a:ea:86:3d:45:cb:15:ee:89:04: 68:0f:ff:36:c6:7f:46:70:0e:c0:18:6f:c7:fe:e4:d2:a6:a6: 7c:4a:73:80:54:28:05:0c:ba:c8:27:96:1b:c0:2e:80:2c:47: 05:dc:a4:c5:bc:19:ba:8a:fc:31:86:18:22:20:ad:aa:22:89: 02:15:e3:9a:89:fb:e8:21:f4:43:8e:f0:b4:ea:6a:6e:df:e1: 34:03:ef:e6:1a:58:0f:9e:a1:e5:18:dc:79:4e:e9:ee:67:0a: dc:cf:b9:9f:87:43:e7:f2:e0:5c:77:10:42:12:f1:d1:bb:f6: de:9d:7b:b7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9yA+NsTDVo5CU2SHXTB39MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIwYTdmY2JlNTkzMTRjMzcyYjY4ZjIzMjIyMzgyOGIxZTMz YTAzZWMwHhcNMjUxMjIwMjIwMTE5WhcNMjUxMjIxMjIwMTE5WjAzMTEwLwYDVQQD EyhiMThmNWFiMzc0MjIwZDA1NmQ4ODY1YzFjOWU3YzhlYTVkZWMwMDc5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5DoSNwLXSy3xly/hjFtlbKvQ3J3T 113cw9mlUKlxU1IXu2DwqnKgOgZjz3OC1q8FtI91Nr7jmQL5EISsoeNhEN4XqDf0 2PAEW/jZsCmvTlGfMisK3ikyCk+41SFPBp/Lql87MaFGEYHpwb/CsYkeUSwPb63C BAVqohh1+bExyf3xngpSZGEJp4iAIu+TXT0tX9wxnq88DizXC7m6Y2siewWfVbly lmohL9lx/lvPySU/DkR01gKlFk2B/WvvBByN+qTwPRm/WV8Q3+2W+XtTT8AjwlRY My8A+F+NfZgNof/UXVHXYEx+b+C+V68ryxwcNKUovsjWAKzYfbIKr1UvJQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLGPWrN0Ig0FbYhlwcnnyOpd7AB5MB8GA1UdIwQY MBaAFCCn/L5ZMUw3K2jyMiI4KLHjOgPsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSUtmOHZsa3hURGNyYVBJeUlqZ29zZU02QS13LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yi9jMzk4OGUtODY1NC00MzExLTgyOTIt NDI2MDM5Nzg4OTE5LzEvSUtmOHZsa3hURGNyYVBJeUlqZ29zZU02QS13Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Yi9jMzk4OGUtODY1NC00MzExLTgyOTItNDI2MDM5Nzg4OTE5 LzEvSUtmOHZsa3hURGNyYVBJeUlqZ29zZU02QS13LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAT8cL3Ozi sK968mIkYvmJYynrFa1iHmzfmnFoUeqLe/UZ6bCKB5dzBB13lJMur3dcRPkveYo2 wt9oRhIT486N2f3YidzGBNAGWD/0Ox0L/qptXLhIsaTDPjNeL5aBQ2mXszcBLDGW 14rVpp5qHzn6PoqJUaY2mez23T8zW4BzgJ+2mNFHzPE66oY9RcsV7okEaA//NsZ/ RnAOwBhvx/7k0qamfEpzgFQoBQy6yCeWG8AugCxHBdykxbwZuor8MYYYIiCtqiKJ AhXjmon76CH0Q47wtOpqbt/hNAPv5hpYD56h5RjceU7p7mcK3M+5n4dD5/LgXHcQ QhLx0bv23p17tw== -----END CERTIFICATE-----Generated at Sun Dec 21 03:56:40 2025 by rpki-client