This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/387136-3c70-4619-8321-3d93fe6d20aa/1/hI2YANad664Rt_gWHDzogYH957Q.mft File: hI2YANad664Rt_gWHDzogYH957Q.mft (raw, json) Hash identifier: QpsEF5d6sAcb+jrSj0Y1pPLc+v71LG2nzNNfakmRpUU= Subject key identifier: 60:E2:6B:9D:4C:1C:29:2E:BE:3D:49:AB:9E:9C:63:BE:AA:EB:7C:0B Authority key identifier: 84:8D:98:00:D6:9D:EB:AE:11:B7:F8:16:1C:3C:E8:81:81:FD:E7:B4 Certificate issuer: /CN=848d9800d69debae11b7f8161c3ce88181fde7b4 Certificate serial: 019AF209C15734A6D7E31BB5E598A2A7FB0C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hI2YANad664Rt_gWHDzogYH957Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/387136-3c70-4619-8321-3d93fe6d20aa/1/hI2YANad664Rt_gWHDzogYH957Q.mft Manifest number: 0B5A Signing time: Sat 06 Dec 2025 05:01:56 +0000 Manifest this update: Sat 06 Dec 2025 05:01:56 +0000 Manifest next update: Sun 07 Dec 2025 05:01:56 +0000 Files and hashes: 1: Pi13Jn_f8QNwlYweA6cENA4uaSs.roa (hash: UZD7c+7NUs2opXS6uWJEcxhLpAXCSZYdWwe68q1uABI=) 2: hI2YANad664Rt_gWHDzogYH957Q.crl (hash: cUkACx0Bsx/2Lq+7v73rFmlECpI6cED+p69gJYibpJM=) 3: kSeV1NXuoW2kMAhRuEJXNL0G3J8.roa (hash: BCpFIjkEeCfOQHY9iAYyAPzCmQqEp82NEt+xGk7yxzQ=) 4: sXoE76O0g9HbvTQdsrTuLQ6BEGY.roa (hash: 2c9XhIaXdBcwGvuorQuJKcEG+b0v5OcuRLvlracJLGY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/387136-3c70-4619-8321-3d93fe6d20aa/1/hI2YANad664Rt_gWHDzogYH957Q.crl rsync://rpki.ripe.net/repository/DEFAULT/bb/387136-3c70-4619-8321-3d93fe6d20aa/1/hI2YANad664Rt_gWHDzogYH957Q.mft rsync://rpki.ripe.net/repository/DEFAULT/hI2YANad664Rt_gWHDzogYH957Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:09:c1:57:34:a6:d7:e3:1b:b5:e5:98:a2:a7:fb:0c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=848d9800d69debae11b7f8161c3ce88181fde7b4 Validity Not Before: Dec 6 05:01:56 2025 GMT Not After : Dec 7 05:01:56 2025 GMT Subject: CN=60e26b9d4c1c292ebe3d49ab9e9c63beaaeb7c0b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:5a:0f:25:57:c0:3f:43:ba:09:91:22:0f:c4: ab:d3:f8:98:80:ee:6b:7b:52:99:aa:52:ef:68:0b: ee:0c:b8:3e:42:5c:0a:6f:98:97:39:36:b5:24:97: 59:d7:bf:35:4d:64:bb:5a:7f:15:b1:ad:29:cd:69: cc:6c:9e:d2:ed:8d:b3:d4:35:42:65:74:f8:68:c8: 1a:33:04:4a:67:ab:df:84:87:9b:8e:93:3c:19:73: 41:50:a5:f3:2b:e5:50:4a:51:22:c7:8e:e9:3b:ef: 30:4d:ad:c0:15:27:11:7d:b4:09:e7:75:fe:17:98: 6f:6e:92:5b:ef:3b:59:8a:ef:21:0c:0b:85:6c:07: 7a:9e:db:f2:c2:aa:67:dd:17:33:f1:cf:64:2d:ac: 40:54:c1:e2:c1:e2:d9:1c:02:d2:c3:7e:5a:ca:fe: dd:9f:4b:ea:ca:f4:2e:d0:02:42:2d:43:4e:82:82: 8d:93:e7:5f:0a:f2:7a:ec:b2:fd:d1:66:9b:66:4c: 0c:30:5f:66:e6:84:ef:64:dd:b7:50:1d:80:3e:34: d7:b9:1d:5f:e7:c1:c2:0f:dc:bf:9c:99:d5:d3:5e: ae:59:b9:2c:6f:ba:cb:f5:e4:bd:a0:82:b9:94:e3: 00:d6:f3:e9:84:fe:8f:57:b4:86:3c:93:1e:ab:8c: db:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:E2:6B:9D:4C:1C:29:2E:BE:3D:49:AB:9E:9C:63:BE:AA:EB:7C:0B X509v3 Authority Key Identifier: keyid:84:8D:98:00:D6:9D:EB:AE:11:B7:F8:16:1C:3C:E8:81:81:FD:E7:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hI2YANad664Rt_gWHDzogYH957Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/387136-3c70-4619-8321-3d93fe6d20aa/1/hI2YANad664Rt_gWHDzogYH957Q.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/387136-3c70-4619-8321-3d93fe6d20aa/1/hI2YANad664Rt_gWHDzogYH957Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7f:64:18:ab:e6:48:e6:7e:d0:e4:af:21:1a:bb:96:e0:68:51: 07:0a:29:fa:12:37:62:3e:c4:b7:11:25:92:d2:54:7e:14:ba: 4b:b5:c4:81:f4:8f:d2:71:4a:09:08:c1:c8:51:09:76:e8:ec: 1c:b0:3d:0d:21:db:74:4b:f7:ee:a9:3c:e3:48:18:50:5a:77: 64:77:b9:9e:0f:e6:66:29:5b:a4:d0:e0:bb:a2:3d:52:a8:75: 0c:c9:1d:44:b4:48:62:72:78:19:54:c0:20:42:83:f1:a0:6a: 7c:04:8d:83:7a:21:a6:ae:3d:49:fd:ac:5e:94:f2:27:39:21: 35:df:96:85:0d:29:cf:03:e6:c8:85:a5:d4:b2:86:7c:64:08: 3f:96:9f:ad:1f:6e:c8:f8:ca:3a:c9:02:0f:d6:ce:1b:eb:24: 3d:57:f5:f6:3f:60:b7:9b:30:44:cd:9e:10:5b:a9:72:8c:cc: 8a:26:e8:72:37:bc:4f:aa:5a:8a:73:6f:d9:df:e1:d5:9c:7f: 87:2a:ce:5e:42:25:97:93:78:e2:bb:29:e5:bf:c0:cd:5d:d2: c1:8b:20:4d:c6:bf:48:f2:24:27:71:4d:47:e2:1c:13:b0:e0: 98:46:96:4c:14:f9:73:01:4e:d0:2d:b3:7b:a0:5b:64:2f:01: e9:f4:5e:d8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCcFXNKbX4xu15Ziip/sMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg0OGQ5ODAwZDY5ZGViYWUxMWI3ZjgxNjFjM2NlODgxODFm ZGU3YjQwHhcNMjUxMjA2MDUwMTU2WhcNMjUxMjA3MDUwMTU2WjAzMTEwLwYDVQQD Eyg2MGUyNmI5ZDRjMWMyOTJlYmUzZDQ5YWI5ZTljNjNiZWFhZWI3YzBiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqVoPJVfAP0O6CZEiD8Sr0/iYgO5r e1KZqlLvaAvuDLg+QlwKb5iXOTa1JJdZ1781TWS7Wn8Vsa0pzWnMbJ7S7Y2z1DVC ZXT4aMgaMwRKZ6vfhIebjpM8GXNBUKXzK+VQSlEix47pO+8wTa3AFScRfbQJ53X+ F5hvbpJb7ztZiu8hDAuFbAd6ntvywqpn3Rcz8c9kLaxAVMHiweLZHALSw35ayv7d n0vqyvQu0AJCLUNOgoKNk+dfCvJ67LL90WabZkwMMF9m5oTvZN23UB2APjTXuR1f 58HCD9y/nJnV016uWbksb7rL9eS9oIK5lOMA1vPphP6PV7SGPJMeq4zbQwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGDia51MHCkuvj1Jq56cY76q63wLMB8GA1UdIwQY MBaAFISNmADWneuuEbf4Fhw86IGB/ee0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaEkyWUFOYWQ2NjRSdF9nV0hEem9nWUg5NTdRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYi8zODcxMzYtM2M3MC00NjE5LTgzMjEt M2Q5M2ZlNmQyMGFhLzEvaEkyWUFOYWQ2NjRSdF9nV0hEem9nWUg5NTdRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYi8zODcxMzYtM2M3MC00NjE5LTgzMjEtM2Q5M2ZlNmQyMGFh LzEvaEkyWUFOYWQ2NjRSdF9nV0hEem9nWUg5NTdRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAf2QYq+ZI 5n7Q5K8hGruW4GhRBwop+hI3Yj7EtxElktJUfhS6S7XEgfSP0nFKCQjByFEJdujs HLA9DSHbdEv37qk840gYUFp3ZHe5ng/mZilbpNDgu6I9Uqh1DMkdRLRIYnJ4GVTA IEKD8aBqfASNg3ohpq49Sf2sXpTyJzkhNd+WhQ0pzwPmyIWl1LKGfGQIP5afrR9u yPjKOskCD9bOG+skPVf19j9gt5swRM2eEFupcozMiibocje8T6painNv2d/h1Zx/ hyrOXkIll5N44rsp5b/AzV3SwYsgTca/SPIkJ3FNR+IcE7DgmEaWTBT5cwFO0C2z e6BbZC8B6fRe2A== -----END CERTIFICATE-----Generated at Sat Dec 6 10:13:17 2025 by rpki-client