This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/42664a-0f47-49a6-b737-b28df8559529/1/iPDB0Q5OWnHjzVxda-6_d4oG4wQ.mft File: iPDB0Q5OWnHjzVxda-6_d4oG4wQ.mft (raw, json) Hash identifier: SfEWsz8Te4BumqYst5OQ1sLLUnwocDUI71x+4cVC+ro= Subject key identifier: A7:F0:53:09:51:FB:D5:82:B4:56:6B:19:B2:A7:4C:3F:68:16:24:FC Authority key identifier: 88:F0:C1:D1:0E:4E:5A:71:E3:CD:5C:5D:6B:EE:BF:77:8A:06:E3:04 Certificate issuer: /CN=88f0c1d10e4e5a71e3cd5c5d6beebf778a06e304 Certificate serial: 019AF12DC59685AA245CCFD43AD9D78E1C29 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iPDB0Q5OWnHjzVxda-6_d4oG4wQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/42664a-0f47-49a6-b737-b28df8559529/1/iPDB0Q5OWnHjzVxda-6_d4oG4wQ.mft Manifest number: 1760 Signing time: Sat 06 Dec 2025 01:01:39 +0000 Manifest this update: Sat 06 Dec 2025 01:01:39 +0000 Manifest next update: Sun 07 Dec 2025 01:01:39 +0000 Files and hashes: 1: iPDB0Q5OWnHjzVxda-6_d4oG4wQ.crl (hash: ZiCXCqVHzfLxRkXC/ANK9spKNGp+VFwnRYFWi2oUdxc=) 2: y8a09sHjWHM5T2xCi9njj3ZdPYg.roa (hash: CAxwtV7q/TGnHiFNWAua77bFrVfKg4wLI65YyM+74Qo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/42664a-0f47-49a6-b737-b28df8559529/1/iPDB0Q5OWnHjzVxda-6_d4oG4wQ.crl rsync://rpki.ripe.net/repository/DEFAULT/94/42664a-0f47-49a6-b737-b28df8559529/1/iPDB0Q5OWnHjzVxda-6_d4oG4wQ.mft rsync://rpki.ripe.net/repository/DEFAULT/iPDB0Q5OWnHjzVxda-6_d4oG4wQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:01:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2d:c5:96:85:aa:24:5c:cf:d4:3a:d9:d7:8e:1c:29 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=88f0c1d10e4e5a71e3cd5c5d6beebf778a06e304 Validity Not Before: Dec 6 01:01:39 2025 GMT Not After : Dec 7 01:01:39 2025 GMT Subject: CN=a7f0530951fbd582b4566b19b2a74c3f681624fc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:a1:6d:f6:a3:e5:4f:4e:4b:80:7d:b0:ae:fd: db:28:85:6d:16:8a:1c:a7:8d:cb:23:1d:3f:25:19: 3e:8e:77:d6:8b:6e:e3:4f:bf:55:e0:3e:15:5e:33: 7d:68:e5:a1:a5:5f:b2:7b:8a:68:86:65:e3:85:b9: 0a:b5:4e:b5:69:24:96:68:5b:ae:9b:c6:07:5d:85: 81:a1:8d:61:b3:75:75:c7:5f:b6:fd:3f:f8:8e:66: 70:39:04:9e:5b:a1:42:81:d1:1c:b6:c9:b3:ab:e7: ed:d6:09:c5:31:f6:0b:48:90:fa:3e:b9:9e:22:5c: 2e:8d:73:87:18:73:85:bc:0c:2d:96:c7:85:4a:aa: 27:4d:85:dd:e7:f0:24:11:e9:87:fb:c4:72:12:24: 09:ec:10:e9:50:f6:ce:9a:06:9d:1d:16:65:f9:ed: b8:7e:ee:60:5b:50:45:c8:44:38:5f:64:3b:50:35: c0:3b:98:27:97:f4:5f:fd:f8:b5:98:59:5f:0a:7f: 2a:17:9e:7c:bd:59:9a:93:f1:86:32:58:1f:82:1c: ad:4a:ff:6c:84:dc:4d:08:25:49:38:00:57:bf:c7: e3:c9:a5:89:6e:e2:ce:3a:bc:89:7a:72:a6:1f:e3: fa:e8:9b:ac:2b:0f:4c:5f:38:1f:71:b8:bc:9b:84: f5:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:F0:53:09:51:FB:D5:82:B4:56:6B:19:B2:A7:4C:3F:68:16:24:FC X509v3 Authority Key Identifier: keyid:88:F0:C1:D1:0E:4E:5A:71:E3:CD:5C:5D:6B:EE:BF:77:8A:06:E3:04 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iPDB0Q5OWnHjzVxda-6_d4oG4wQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/42664a-0f47-49a6-b737-b28df8559529/1/iPDB0Q5OWnHjzVxda-6_d4oG4wQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/94/42664a-0f47-49a6-b737-b28df8559529/1/iPDB0Q5OWnHjzVxda-6_d4oG4wQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4b:6d:f7:d5:9a:02:3a:af:56:d1:8f:bf:b8:fb:3e:61:c6:52: ae:83:4d:57:88:98:38:e4:53:80:cb:bd:9e:ce:82:d5:58:85: c7:89:69:76:ab:8c:a3:75:59:8e:d7:15:6c:9e:0b:cf:68:1d: e4:7e:28:fa:07:61:7c:28:c8:91:71:e5:d7:c2:4e:6d:af:67: 45:58:be:74:51:d7:93:3c:96:eb:63:d6:58:66:56:55:c4:13: c7:66:41:b8:39:93:86:ac:81:f7:ec:05:bb:f2:3f:2d:d5:0c: 6a:44:2e:60:80:e0:d4:f9:8b:31:e8:52:2c:3d:37:d6:c7:96: 38:83:54:cc:39:d0:c5:9d:27:5c:9f:5c:08:6e:a0:5c:e8:d2: 78:82:fb:27:bf:8e:2a:c5:15:99:d0:63:b1:d8:6d:c2:38:da: 37:7a:ac:4f:84:2d:6b:d9:f6:0e:f5:bc:10:1e:c8:0b:65:05: 2b:c2:68:35:f6:2e:61:96:f8:6e:17:cd:e7:85:10:95:31:aa: b5:91:71:8a:bb:ee:a8:e2:a8:fe:9e:4d:2c:63:cd:07:21:ee: 28:df:ca:05:14:06:2f:9c:3c:a4:f2:8c:35:28:5d:06:48:d9: 7c:f7:f4:ae:b0:3d:47:1f:8f:fb:f7:e4:08:84:30:a1:84:66: 4e:12:c5:38 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLcWWhaokXM/UOtnXjhwpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg4ZjBjMWQxMGU0ZTVhNzFlM2NkNWM1ZDZiZWViZjc3OGEw NmUzMDQwHhcNMjUxMjA2MDEwMTM5WhcNMjUxMjA3MDEwMTM5WjAzMTEwLwYDVQQD EyhhN2YwNTMwOTUxZmJkNTgyYjQ1NjZiMTliMmE3NGMzZjY4MTYyNGZjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq6Ft9qPlT05LgH2wrv3bKIVtFooc p43LIx0/JRk+jnfWi27jT79V4D4VXjN9aOWhpV+ye4pohmXjhbkKtU61aSSWaFuu m8YHXYWBoY1hs3V1x1+2/T/4jmZwOQSeW6FCgdEctsmzq+ft1gnFMfYLSJD6Prme IlwujXOHGHOFvAwtlseFSqonTYXd5/AkEemH+8RyEiQJ7BDpUPbOmgadHRZl+e24 fu5gW1BFyEQ4X2Q7UDXAO5gnl/Rf/fi1mFlfCn8qF558vVmak/GGMlgfghytSv9s hNxNCCVJOABXv8fjyaWJbuLOOryJenKmH+P66JusKw9MXzgfcbi8m4T1owIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKfwUwlR+9WCtFZrGbKnTD9oFiT8MB8GA1UdIwQY MBaAFIjwwdEOTlpx481cXWvuv3eKBuMEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaVBEQjBRNU9XbkhqelZ4ZGEtNl9kNG9HNHdRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NC80MjY2NGEtMGY0Ny00OWE2LWI3Mzct YjI4ZGY4NTU5NTI5LzEvaVBEQjBRNU9XbkhqelZ4ZGEtNl9kNG9HNHdRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85NC80MjY2NGEtMGY0Ny00OWE2LWI3MzctYjI4ZGY4NTU5NTI5 LzEvaVBEQjBRNU9XbkhqelZ4ZGEtNl9kNG9HNHdRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAS2331ZoC Oq9W0Y+/uPs+YcZSroNNV4iYOORTgMu9ns6C1ViFx4lpdquMo3VZjtcVbJ4Lz2gd 5H4o+gdhfCjIkXHl18JOba9nRVi+dFHXkzyW62PWWGZWVcQTx2ZBuDmThqyB9+wF u/I/LdUMakQuYIDg1PmLMehSLD031seWOINUzDnQxZ0nXJ9cCG6gXOjSeIL7J7+O KsUVmdBjsdhtwjjaN3qsT4Qta9n2DvW8EB7IC2UFK8JoNfYuYZb4bhfN54UQlTGq tZFxirvuqOKo/p5NLGPNByHuKN/KBRQGL5w8pPKMNShdBkjZfPf0rrA9Rx+P+/fk CIQwoYRmThLFOA== -----END CERTIFICATE-----Generated at Sat Dec 6 09:00:55 2025 by rpki-client