This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/ca3b5f-0221-43ad-8abd-1c13206a8123/1/iTr-zXEXBcR2t4XQyG71TCEkNUw.mft File: iTr-zXEXBcR2t4XQyG71TCEkNUw.mft (raw, json) Hash identifier: XTBlCDCvY2bxKZFk/M+yTNo+1A7FsbWkmiD83wA90/c= Subject key identifier: C6:99:28:ED:13:A3:7E:6C:65:47:7B:01:67:E8:96:B2:CF:41:64:59 Authority key identifier: 89:3A:FE:CD:71:17:05:C4:76:B7:85:D0:C8:6E:F5:4C:21:24:35:4C Certificate issuer: /CN=893afecd711705c476b785d0c86ef54c2124354c Certificate serial: 019AF4D29C70CB29F55C0A9C3F86ED0BA4B7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iTr-zXEXBcR2t4XQyG71TCEkNUw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/ca3b5f-0221-43ad-8abd-1c13206a8123/1/iTr-zXEXBcR2t4XQyG71TCEkNUw.mft Manifest number: 1763 Signing time: Sat 06 Dec 2025 18:00:34 +0000 Manifest this update: Sat 06 Dec 2025 18:00:34 +0000 Manifest next update: Sun 07 Dec 2025 18:00:34 +0000 Files and hashes: 1: I3MDgaIPk5rQhFYqlKJ88u7QcKA.roa (hash: 9W6ILnGR89GeCDK+0ZtMLah7T+7H4VrTikrakuva5SY=) 2: hdbWZzPv8mKL7ila4Mhuuk01Www.roa (hash: CfHG1SiNzylmV2mCUzoHK+y9CvaZseJUgqyvhhx1NeI=) 3: iTr-zXEXBcR2t4XQyG71TCEkNUw.crl (hash: EPedlrKfRUy72ilPsvjA0G8HfysobU2qCx/pVZVgeFQ=) 4: rO9T6t_WHUnkGmIleBFSGRnlKnY.roa (hash: wcBWF7o7prWlR7s8a04nO9bFFc8bqPRJlh3HL2eDAqI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/ca3b5f-0221-43ad-8abd-1c13206a8123/1/iTr-zXEXBcR2t4XQyG71TCEkNUw.crl rsync://rpki.ripe.net/repository/DEFAULT/bc/ca3b5f-0221-43ad-8abd-1c13206a8123/1/iTr-zXEXBcR2t4XQyG71TCEkNUw.mft rsync://rpki.ripe.net/repository/DEFAULT/iTr-zXEXBcR2t4XQyG71TCEkNUw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 18:00:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:d2:9c:70:cb:29:f5:5c:0a:9c:3f:86:ed:0b:a4:b7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=893afecd711705c476b785d0c86ef54c2124354c Validity Not Before: Dec 6 18:00:34 2025 GMT Not After : Dec 7 18:00:34 2025 GMT Subject: CN=c69928ed13a37e6c65477b0167e896b2cf416459 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:e2:1b:d8:57:16:80:62:3a:fa:0e:4c:f1:7a: 7c:5f:ef:f6:28:bc:c7:a6:a5:e9:66:09:c9:df:dc: 5a:d3:c4:ef:2c:49:b6:bd:f8:e2:50:df:1e:38:26: 70:b3:15:72:c3:7d:f5:e6:e3:20:81:a3:1e:c1:51: 96:d6:f9:55:0f:40:7b:86:ae:6a:e8:04:b7:a2:69: a7:3c:07:cc:24:7e:a3:46:95:81:92:e8:ef:08:9c: 6c:9f:fb:4c:cb:d9:5d:21:35:a2:c0:fc:1f:6f:e6: c8:c0:c5:4b:da:7a:5c:f6:97:09:ab:ee:cc:11:dd: 54:d3:d1:76:5f:71:58:86:d6:d5:c6:cc:e5:cb:c8: 51:8b:d9:4b:62:1b:b0:53:00:37:e6:99:87:e8:9a: 40:d6:85:e2:db:b7:ee:eb:9e:e9:6a:64:82:44:ee: 86:80:c3:14:b3:f9:64:fa:a1:14:73:8b:70:79:2f: c6:5d:cd:ea:f3:24:d2:5c:61:c9:4e:fa:88:16:e7: b9:f1:02:1c:19:55:85:55:15:66:c1:c0:b9:f3:70: 6e:83:ad:ec:f2:4a:dd:eb:2d:f7:1c:06:4c:95:0b: ef:5b:36:23:db:ff:71:80:74:a1:31:a0:d5:16:61: c4:8e:54:c4:bf:13:5f:0e:95:11:55:93:0b:90:7e: a7:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:99:28:ED:13:A3:7E:6C:65:47:7B:01:67:E8:96:B2:CF:41:64:59 X509v3 Authority Key Identifier: keyid:89:3A:FE:CD:71:17:05:C4:76:B7:85:D0:C8:6E:F5:4C:21:24:35:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iTr-zXEXBcR2t4XQyG71TCEkNUw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/ca3b5f-0221-43ad-8abd-1c13206a8123/1/iTr-zXEXBcR2t4XQyG71TCEkNUw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/ca3b5f-0221-43ad-8abd-1c13206a8123/1/iTr-zXEXBcR2t4XQyG71TCEkNUw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4f:c6:d8:02:52:ef:55:07:1c:2a:0a:59:bd:76:cc:20:8e:ac: d6:b9:d2:be:75:e6:fd:4c:0c:3b:5e:99:12:a8:2c:04:a5:bd: af:93:b1:e9:0e:87:cc:f9:73:f1:40:9e:28:ab:52:4f:e7:58: 02:72:97:44:b6:8a:c0:f4:45:51:5c:9a:04:71:14:9a:c6:ea: f7:4e:82:af:dd:96:a2:36:f7:c0:cb:b8:e7:fb:b3:a9:c0:22: dd:ef:a5:75:fe:b4:9a:f1:c5:da:08:f2:2d:0b:e4:78:0a:f5: 47:03:68:09:a9:dd:0e:4f:d9:4d:a4:ab:7d:a3:11:c9:bb:b8: b7:a1:24:78:94:aa:8f:72:3e:b5:0a:7d:96:af:fd:36:7e:5a: a4:24:1b:4d:ac:15:0d:a1:96:e3:d7:a2:9d:85:6b:fd:1a:ed: 01:f8:a0:27:ca:50:8e:6d:aa:bb:8e:f7:9d:10:e9:bb:57:1c: f1:f7:9f:30:62:a2:c0:52:30:1d:83:5a:43:01:08:00:b7:60: c1:22:86:df:0b:6d:cb:4c:d5:f9:f6:a9:02:39:24:a6:25:47: c2:5a:e3:2a:97:ce:55:22:09:06:25:61:16:5d:e9:8d:7a:48: c9:79:a1:e7:8f:cf:69:19:ad:24:50:ac:9e:88:d1:f7:64:15: 3f:40:c2:3f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr00pxwyyn1XAqcP4btC6S3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg5M2FmZWNkNzExNzA1YzQ3NmI3ODVkMGM4NmVmNTRjMjEy NDM1NGMwHhcNMjUxMjA2MTgwMDM0WhcNMjUxMjA3MTgwMDM0WjAzMTEwLwYDVQQD EyhjNjk5MjhlZDEzYTM3ZTZjNjU0NzdiMDE2N2U4OTZiMmNmNDE2NDU5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu+Ib2FcWgGI6+g5M8Xp8X+/2KLzH pqXpZgnJ39xa08TvLEm2vfjiUN8eOCZwsxVyw3315uMggaMewVGW1vlVD0B7hq5q 6AS3ommnPAfMJH6jRpWBkujvCJxsn/tMy9ldITWiwPwfb+bIwMVL2npc9pcJq+7M Ed1U09F2X3FYhtbVxszly8hRi9lLYhuwUwA35pmH6JpA1oXi27fu657pamSCRO6G gMMUs/lk+qEUc4tweS/GXc3q8yTSXGHJTvqIFue58QIcGVWFVRVmwcC583Bug63s 8krd6y33HAZMlQvvWzYj2/9xgHShMaDVFmHEjlTEvxNfDpURVZMLkH6n2wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMaZKO0To35sZUd7AWfolrLPQWRZMB8GA1UdIwQY MBaAFIk6/s1xFwXEdreF0Mhu9UwhJDVMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaVRyLXpYRVhCY1IydDRYUXlHNzFUQ0VrTlV3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYy9jYTNiNWYtMDIyMS00M2FkLThhYmQt MWMxMzIwNmE4MTIzLzEvaVRyLXpYRVhCY1IydDRYUXlHNzFUQ0VrTlV3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYy9jYTNiNWYtMDIyMS00M2FkLThhYmQtMWMxMzIwNmE4MTIz LzEvaVRyLXpYRVhCY1IydDRYUXlHNzFUQ0VrTlV3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAT8bYAlLv VQccKgpZvXbMII6s1rnSvnXm/UwMO16ZEqgsBKW9r5Ox6Q6HzPlz8UCeKKtST+dY AnKXRLaKwPRFUVyaBHEUmsbq906Cr92Wojb3wMu45/uzqcAi3e+ldf60mvHF2gjy LQvkeAr1RwNoCandDk/ZTaSrfaMRybu4t6EkeJSqj3I+tQp9lq/9Nn5apCQbTawV DaGW49einYVr/RrtAfigJ8pQjm2qu473nRDpu1cc8fefMGKiwFIwHYNaQwEIALdg wSKG3wtty0zV+fapAjkkpiVHwlrjKpfOVSIJBiVhFl3pjXpIyXmh54/PaRmtJFCs nojR92QVP0DCPw== -----END CERTIFICATE-----Generated at Sun Dec 7 01:42:31 2025 by rpki-client