This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/f9a3dd-5a61-4724-a5a3-5b0b05093e0c/1/0iMJPOFQh0AW15P0OfQ9LmRAw_I.mft File: 0iMJPOFQh0AW15P0OfQ9LmRAw_I.mft (raw, json) Hash identifier: vjAVtgfB/gvz+Png7/A6JAoD14t4dI6zU/k0n+ARXEo= Subject key identifier: DF:A3:35:A5:EE:C5:26:17:C9:55:FC:5A:BA:2D:A5:7E:69:E0:1B:E5 Authority key identifier: D2:23:09:3C:E1:50:87:40:16:D7:93:F4:39:F4:3D:2E:64:40:C3:F2 Certificate issuer: /CN=d223093ce150874016d793f439f43d2e6440c3f2 Certificate serial: 019B300BB0A4752088DE85EDAD31EE8C67DD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0iMJPOFQh0AW15P0OfQ9LmRAw_I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/f9a3dd-5a61-4724-a5a3-5b0b05093e0c/1/0iMJPOFQh0AW15P0OfQ9LmRAw_I.mft Manifest number: 177F Signing time: Thu 18 Dec 2025 06:00:30 +0000 Manifest this update: Thu 18 Dec 2025 06:00:30 +0000 Manifest next update: Fri 19 Dec 2025 06:00:30 +0000 Files and hashes: 1: 0iMJPOFQh0AW15P0OfQ9LmRAw_I.crl (hash: 949jz7TUl+T34Q+keXknDBuG/cogNUhNoGyyoHEa4Ck=) 2: 8foZPawfC4Bge_VpnjQP50GOAg8.roa (hash: GRqVhwrx6ASLBDj77rYjcJvDM0QCQ1bVWMj8DIm3F+M=) 3: Qvc8RSbEXXaKTVJ-2F_YzL6RWqQ.roa (hash: a+7CPhduNeCdLfwErr+aJ4N+Kny/SpDPIbHNdyGUm+I=) 4: Yav_wTnthnhUJgVUNCqahhzwsSo.roa (hash: JhocbRWhMTwMsID+n4FCpeOKgy5OrWytCdlYeicraA4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/f9a3dd-5a61-4724-a5a3-5b0b05093e0c/1/0iMJPOFQh0AW15P0OfQ9LmRAw_I.crl rsync://rpki.ripe.net/repository/DEFAULT/bb/f9a3dd-5a61-4724-a5a3-5b0b05093e0c/1/0iMJPOFQh0AW15P0OfQ9LmRAw_I.mft rsync://rpki.ripe.net/repository/DEFAULT/0iMJPOFQh0AW15P0OfQ9LmRAw_I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 06:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:30:0b:b0:a4:75:20:88:de:85:ed:ad:31:ee:8c:67:dd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d223093ce150874016d793f439f43d2e6440c3f2 Validity Not Before: Dec 18 06:00:30 2025 GMT Not After : Dec 19 06:00:30 2025 GMT Subject: CN=dfa335a5eec52617c955fc5aba2da57e69e01be5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:c4:59:73:94:bf:c3:e2:1e:68:e2:e2:0f:fc: 4e:af:ca:27:a7:e6:ea:a8:03:c5:38:cb:78:28:03: d2:67:15:85:ff:80:ab:e0:dd:c9:59:47:36:1a:e7: ab:08:f6:49:d0:35:b6:97:0b:67:c0:0c:57:0c:67: 7e:41:fa:2f:59:ac:2d:d7:8b:eb:3f:66:26:21:28: 86:13:63:91:06:da:a0:3a:ac:c0:a3:e9:06:66:29: e5:76:16:ad:f0:04:54:a8:63:87:bc:11:cb:ba:0d: 3a:76:b3:5f:5f:a7:8b:23:3c:9c:8d:fc:5c:89:04: d0:dc:b0:1f:0d:6e:fe:dd:3d:7b:f1:13:49:1e:a5: 7a:79:dc:7f:78:15:68:38:f2:8c:c1:83:c1:47:96: e2:a2:0f:86:a9:fd:2d:31:17:f1:6e:3a:31:9a:89: 18:61:4c:1c:51:76:8e:b0:89:d1:ae:91:5f:ae:ad: 82:80:06:c7:72:bc:da:3a:05:30:55:42:a7:d8:48: 36:9a:f7:ee:53:65:8b:35:f3:ba:fd:e9:4a:fd:a7: e7:a9:db:b2:d4:e6:78:4a:85:35:4a:57:cd:63:e3: 89:2a:ca:e6:1b:85:8d:e8:1b:88:38:e3:32:7c:b1: ec:f3:56:de:b6:f1:da:f9:1b:61:ee:0b:aa:c8:4f: 32:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:A3:35:A5:EE:C5:26:17:C9:55:FC:5A:BA:2D:A5:7E:69:E0:1B:E5 X509v3 Authority Key Identifier: keyid:D2:23:09:3C:E1:50:87:40:16:D7:93:F4:39:F4:3D:2E:64:40:C3:F2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0iMJPOFQh0AW15P0OfQ9LmRAw_I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/f9a3dd-5a61-4724-a5a3-5b0b05093e0c/1/0iMJPOFQh0AW15P0OfQ9LmRAw_I.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/f9a3dd-5a61-4724-a5a3-5b0b05093e0c/1/0iMJPOFQh0AW15P0OfQ9LmRAw_I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8b:ff:6b:f4:15:0b:a2:2a:46:9a:01:24:b6:52:b0:50:f8:df: ab:07:ce:e1:c3:f1:b8:9c:8a:16:20:4d:94:0c:26:d2:a1:01: e2:2c:9f:49:d5:b5:48:5e:85:5f:b5:fc:15:0e:13:aa:80:8d: cc:07:ff:96:d1:84:4e:c7:2e:60:62:bf:dc:6a:99:e1:7f:05: 06:19:8d:74:d3:a0:e1:c1:1f:e6:c0:34:c5:04:c5:99:c3:37: 71:0c:b6:84:f0:19:8f:8c:87:cb:b0:8d:00:aa:01:b5:eb:5c: 44:a0:10:f7:21:17:49:76:1c:d5:9c:61:74:22:a5:15:7c:74: c2:da:b5:f9:20:a6:07:16:f4:1d:b6:60:c2:40:f2:88:e6:5b: ac:5e:2d:db:d9:a1:1b:55:8b:83:c8:1e:83:e0:55:e8:14:3f: 03:af:83:25:7c:78:09:a5:ee:6e:da:29:3d:dc:63:43:05:a0: 33:06:ad:fb:6d:c8:01:fa:57:2a:49:8c:2f:b0:3e:52:9d:39: 09:87:f7:80:6f:2e:57:a2:98:32:b9:a3:89:73:7f:61:9d:cd: 60:f2:3a:95:8b:50:6c:2c:86:72:20:bd:57:df:64:3a:5e:29: 70:11:55:42:da:fc:62:71:88:1c:b2:38:1a:64:75:f5:74:13: f4:c5:cb:1f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZswC7CkdSCI3oXtrTHujGfdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQyMjMwOTNjZTE1MDg3NDAxNmQ3OTNmNDM5ZjQzZDJlNjQ0 MGMzZjIwHhcNMjUxMjE4MDYwMDMwWhcNMjUxMjE5MDYwMDMwWjAzMTEwLwYDVQQD EyhkZmEzMzVhNWVlYzUyNjE3Yzk1NWZjNWFiYTJkYTU3ZTY5ZTAxYmU1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAycRZc5S/w+IeaOLiD/xOr8onp+bq qAPFOMt4KAPSZxWF/4Cr4N3JWUc2GuerCPZJ0DW2lwtnwAxXDGd+QfovWawt14vr P2YmISiGE2ORBtqgOqzAo+kGZinldhat8ARUqGOHvBHLug06drNfX6eLIzycjfxc iQTQ3LAfDW7+3T178RNJHqV6edx/eBVoOPKMwYPBR5biog+Gqf0tMRfxbjoxmokY YUwcUXaOsInRrpFfrq2CgAbHcrzaOgUwVUKn2Eg2mvfuU2WLNfO6/elK/afnqduy 1OZ4SoU1SlfNY+OJKsrmG4WN6BuIOOMyfLHs81betvHa+Rth7guqyE8yfwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFN+jNaXuxSYXyVX8WrotpX5p4BvlMB8GA1UdIwQY MBaAFNIjCTzhUIdAFteT9Dn0PS5kQMPyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMGlNSlBPRlFoMEFXMTVQME9mUTlMbVJBd19JLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYi9mOWEzZGQtNWE2MS00NzI0LWE1YTMt NWIwYjA1MDkzZTBjLzEvMGlNSlBPRlFoMEFXMTVQME9mUTlMbVJBd19JLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYi9mOWEzZGQtNWE2MS00NzI0LWE1YTMtNWIwYjA1MDkzZTBj LzEvMGlNSlBPRlFoMEFXMTVQME9mUTlMbVJBd19JLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAi/9r9BUL oipGmgEktlKwUPjfqwfO4cPxuJyKFiBNlAwm0qEB4iyfSdW1SF6FX7X8FQ4TqoCN zAf/ltGETscuYGK/3GqZ4X8FBhmNdNOg4cEf5sA0xQTFmcM3cQy2hPAZj4yHy7CN AKoBtetcRKAQ9yEXSXYc1ZxhdCKlFXx0wtq1+SCmBxb0HbZgwkDyiOZbrF4t29mh G1WLg8geg+BV6BQ/A6+DJXx4CaXubtopPdxjQwWgMwat+23IAfpXKkmML7A+Up05 CYf3gG8uV6KYMrmjiXN/YZ3NYPI6lYtQbCyGciC9V99kOl4pcBFVQtr8YnGIHLI4 GmR19XQT9MXLHw== -----END CERTIFICATE-----Generated at Thu Dec 18 14:21:43 2025 by rpki-client