This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/30f7a4-36c8-499d-8d43-bebbe4aa7cab/1/i5LFXos1lQd133Y-dJMNUinJ-gA.mft File: i5LFXos1lQd133Y-dJMNUinJ-gA.mft (raw, json) Hash identifier: YPKgjed8xAnkKXxsxUfdrKvxAdPcZ+0k6sKvSBZ68s0= Subject key identifier: 65:E9:91:5E:F2:66:D3:C7:D2:09:0E:FC:62:8F:6C:66:6E:34:BB:C0 Authority key identifier: 8B:92:C5:5E:8B:35:95:07:75:DF:76:3E:74:93:0D:52:29:C9:FA:00 Certificate issuer: /CN=8b92c55e8b35950775df763e74930d5229c9fa00 Certificate serial: 019AF16489FF6733BB996982E18129A5BB90 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i5LFXos1lQd133Y-dJMNUinJ-gA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/30f7a4-36c8-499d-8d43-bebbe4aa7cab/1/i5LFXos1lQd133Y-dJMNUinJ-gA.mft Manifest number: 16F4 Signing time: Sat 06 Dec 2025 02:01:29 +0000 Manifest this update: Sat 06 Dec 2025 02:01:29 +0000 Manifest next update: Sun 07 Dec 2025 02:01:29 +0000 Files and hashes: 1: LNuPziOYyIrKubsBwXhoqEItKOI.roa (hash: HVHsB2c8MGUhz2rUlgm+F2HzTtyYnTiTaoLJeI/5tZw=) 2: i5LFXos1lQd133Y-dJMNUinJ-gA.crl (hash: raKmbRe6q/Xlwe9F8BA2MSWl1hcKpUDNEMdf5N8WhUw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/30f7a4-36c8-499d-8d43-bebbe4aa7cab/1/i5LFXos1lQd133Y-dJMNUinJ-gA.crl rsync://rpki.ripe.net/repository/DEFAULT/9c/30f7a4-36c8-499d-8d43-bebbe4aa7cab/1/i5LFXos1lQd133Y-dJMNUinJ-gA.mft rsync://rpki.ripe.net/repository/DEFAULT/i5LFXos1lQd133Y-dJMNUinJ-gA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:64:89:ff:67:33:bb:99:69:82:e1:81:29:a5:bb:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8b92c55e8b35950775df763e74930d5229c9fa00 Validity Not Before: Dec 6 02:01:29 2025 GMT Not After : Dec 7 02:01:29 2025 GMT Subject: CN=65e9915ef266d3c7d2090efc628f6c666e34bbc0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:aa:0e:b4:42:01:8c:e7:4c:cc:de:da:3e:25: 09:83:e4:00:29:e9:1c:de:a6:6d:f6:e3:f3:99:73: 24:2c:c7:29:cb:45:bd:ea:aa:24:4e:ae:3d:77:b5: ca:92:3c:71:bf:fe:ef:df:88:0e:c8:94:5f:fd:40: 6a:74:c6:f5:59:29:47:80:25:63:b5:7e:f9:3f:4b: 26:63:e8:25:d7:d6:9a:f0:e9:76:85:58:c1:68:83: 68:79:ff:b6:83:90:95:20:a5:43:b9:14:41:2e:cb: 26:3e:e7:7a:8c:46:c9:6a:ec:ab:24:56:07:cb:d4: a9:94:4f:6f:c1:95:e3:36:5a:9e:44:a5:7b:b9:ce: 20:c6:0f:d6:70:37:f4:33:09:d2:6c:bc:4e:4f:7d: 01:64:ba:0d:02:0b:4a:ff:0e:23:69:b7:b4:39:98: f9:b8:8b:06:b1:4e:b0:ae:25:da:72:8e:b8:40:87: e1:68:8f:83:b5:f3:ce:55:5f:89:c5:c4:58:b4:21: f3:15:7a:26:85:7d:c9:60:54:b0:b1:6a:b5:cc:64: 5b:61:1a:d2:57:ed:7c:3f:81:ef:14:54:dc:82:e9: 41:06:24:59:e8:52:59:cb:c9:e1:b2:0d:a0:b0:cd: bb:06:a9:9b:c9:d6:6c:55:11:df:dc:2d:5e:3b:18: 9a:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:E9:91:5E:F2:66:D3:C7:D2:09:0E:FC:62:8F:6C:66:6E:34:BB:C0 X509v3 Authority Key Identifier: keyid:8B:92:C5:5E:8B:35:95:07:75:DF:76:3E:74:93:0D:52:29:C9:FA:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i5LFXos1lQd133Y-dJMNUinJ-gA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/30f7a4-36c8-499d-8d43-bebbe4aa7cab/1/i5LFXos1lQd133Y-dJMNUinJ-gA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/30f7a4-36c8-499d-8d43-bebbe4aa7cab/1/i5LFXos1lQd133Y-dJMNUinJ-gA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 10:49:1f:53:66:4b:e7:31:37:d4:df:0c:4f:bd:09:94:e8:04: 22:b1:2c:4a:b2:b0:dc:9f:cb:2e:42:68:36:27:a4:5b:cf:5e: f3:a4:5e:54:88:02:5a:29:cb:79:45:fb:cf:1d:24:04:58:5e: 60:89:03:f3:be:eb:9b:d8:f7:54:d5:98:4b:a6:fb:70:92:b5: 71:f8:c7:fc:33:07:a4:74:f3:58:bb:84:06:d6:2c:14:46:68: d5:ba:8b:1d:be:d4:8d:2c:33:f2:25:fc:f9:21:90:cf:a0:8a: 67:98:15:de:92:d2:3b:ae:81:cc:0e:8b:c0:0a:65:bb:0b:c0: b9:2b:ca:b6:13:06:b8:99:ce:62:27:a8:8b:0f:35:9a:8e:13: 45:36:29:f3:a7:e8:1e:8f:68:93:d0:86:02:95:ad:fc:73:34: d7:e2:6e:62:ca:22:6f:92:6d:ff:9e:31:98:6c:41:0d:b3:32: 92:fd:d5:68:97:4b:ad:59:e1:ef:38:7c:c5:0a:93:c8:aa:38: 97:96:b5:bf:f3:8e:1b:64:db:40:ac:3d:3d:a8:73:fa:c5:3d: d5:a6:ad:e2:97:e2:84:67:61:94:cf:78:4e:c4:97:c6:5d:78: 98:0d:50:c3:63:6d:f2:27:76:2e:55:b7:a7:c1:71:79:05:33: dd:3e:3d:c4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxZIn/ZzO7mWmC4YEppbuQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhiOTJjNTVlOGIzNTk1MDc3NWRmNzYzZTc0OTMwZDUyMjlj OWZhMDAwHhcNMjUxMjA2MDIwMTI5WhcNMjUxMjA3MDIwMTI5WjAzMTEwLwYDVQQD Eyg2NWU5OTE1ZWYyNjZkM2M3ZDIwOTBlZmM2MjhmNmM2NjZlMzRiYmMwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApaoOtEIBjOdMzN7aPiUJg+QAKekc 3qZt9uPzmXMkLMcpy0W96qokTq49d7XKkjxxv/7v34gOyJRf/UBqdMb1WSlHgCVj tX75P0smY+gl19aa8Ol2hVjBaINoef+2g5CVIKVDuRRBLssmPud6jEbJauyrJFYH y9SplE9vwZXjNlqeRKV7uc4gxg/WcDf0MwnSbLxOT30BZLoNAgtK/w4jabe0OZj5 uIsGsU6wriXaco64QIfhaI+DtfPOVV+JxcRYtCHzFXomhX3JYFSwsWq1zGRbYRrS V+18P4HvFFTcgulBBiRZ6FJZy8nhsg2gsM27BqmbydZsVRHf3C1eOxiaAQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGXpkV7yZtPH0gkO/GKPbGZuNLvAMB8GA1UdIwQY MBaAFIuSxV6LNZUHdd92PnSTDVIpyfoAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaTVMRlhvczFsUWQxMzNZLWRKTU5VaW5KLWdBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yy8zMGY3YTQtMzZjOC00OTlkLThkNDMt YmViYmU0YWE3Y2FiLzEvaTVMRlhvczFsUWQxMzNZLWRKTU5VaW5KLWdBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Yy8zMGY3YTQtMzZjOC00OTlkLThkNDMtYmViYmU0YWE3Y2Fi LzEvaTVMRlhvczFsUWQxMzNZLWRKTU5VaW5KLWdBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEEkfU2ZL 5zE31N8MT70JlOgEIrEsSrKw3J/LLkJoNiekW89e86ReVIgCWinLeUX7zx0kBFhe YIkD877rm9j3VNWYS6b7cJK1cfjH/DMHpHTzWLuEBtYsFEZo1bqLHb7UjSwz8iX8 +SGQz6CKZ5gV3pLSO66BzA6LwApluwvAuSvKthMGuJnOYieoiw81mo4TRTYp86fo Ho9ok9CGApWt/HM01+JuYsoib5Jt/54xmGxBDbMykv3VaJdLrVnh7zh8xQqTyKo4 l5a1v/OOG2TbQKw9Pahz+sU91aat4pfihGdhlM94TsSXxl14mA1Qw2Nt8id2LlW3 p8FxeQUz3T49xA== -----END CERTIFICATE-----Generated at Sat Dec 6 07:57:47 2025 by rpki-client