This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/ca3b5f-0221-43ad-8abd-1c13206a8123/1/iTr-zXEXBcR2t4XQyG71TCEkNUw.mft File: iTr-zXEXBcR2t4XQyG71TCEkNUw.mft (raw, json) Hash identifier: lc4PM6r6LbcZOwbGMR6kLRaxMpWKJaK0hCwOv7f3c/Y= Subject key identifier: 0B:D8:AE:78:72:B1:8B:6E:B1:55:4F:76:51:37:68:11:7F:B0:8C:1E Authority key identifier: 89:3A:FE:CD:71:17:05:C4:76:B7:85:D0:C8:6E:F5:4C:21:24:35:4C Certificate issuer: /CN=893afecd711705c476b785d0c86ef54c2124354c Certificate serial: 019B30B0A807AF275BF76A0FFF84FA5E4253 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iTr-zXEXBcR2t4XQyG71TCEkNUw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/ca3b5f-0221-43ad-8abd-1c13206a8123/1/iTr-zXEXBcR2t4XQyG71TCEkNUw.mft Manifest number: 1782 Signing time: Thu 18 Dec 2025 09:00:42 +0000 Manifest this update: Thu 18 Dec 2025 09:00:42 +0000 Manifest next update: Fri 19 Dec 2025 09:00:42 +0000 Files and hashes: 1: I3MDgaIPk5rQhFYqlKJ88u7QcKA.roa (hash: 9W6ILnGR89GeCDK+0ZtMLah7T+7H4VrTikrakuva5SY=) 2: hdbWZzPv8mKL7ila4Mhuuk01Www.roa (hash: CfHG1SiNzylmV2mCUzoHK+y9CvaZseJUgqyvhhx1NeI=) 3: iTr-zXEXBcR2t4XQyG71TCEkNUw.crl (hash: Gut935zQYnKhfTZuAxFqB9wqAQlZAh7d3t9M+pQLp4Q=) 4: rO9T6t_WHUnkGmIleBFSGRnlKnY.roa (hash: wcBWF7o7prWlR7s8a04nO9bFFc8bqPRJlh3HL2eDAqI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/ca3b5f-0221-43ad-8abd-1c13206a8123/1/iTr-zXEXBcR2t4XQyG71TCEkNUw.crl rsync://rpki.ripe.net/repository/DEFAULT/bc/ca3b5f-0221-43ad-8abd-1c13206a8123/1/iTr-zXEXBcR2t4XQyG71TCEkNUw.mft rsync://rpki.ripe.net/repository/DEFAULT/iTr-zXEXBcR2t4XQyG71TCEkNUw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 09:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:30:b0:a8:07:af:27:5b:f7:6a:0f:ff:84:fa:5e:42:53 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=893afecd711705c476b785d0c86ef54c2124354c Validity Not Before: Dec 18 09:00:42 2025 GMT Not After : Dec 19 09:00:42 2025 GMT Subject: CN=0bd8ae7872b18b6eb1554f76513768117fb08c1e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:1f:9b:e0:d1:c9:de:f7:30:1e:db:b8:d6:b2: b3:c4:8a:0a:4e:13:30:68:4f:91:72:01:db:77:36: d2:9a:3e:9e:d0:e9:22:9c:6d:f8:c5:bb:7c:2c:d4: ce:97:ba:30:36:c1:30:4f:f4:c6:b3:c0:19:69:bd: 00:a9:9b:a1:a5:d4:63:3e:33:43:f5:aa:a9:26:4d: 04:21:0a:66:27:4d:4e:69:b6:b2:b8:43:24:5d:ca: 86:36:9e:b1:c7:87:76:d6:87:73:eb:fe:1f:4b:c0: b9:01:ee:e8:93:33:17:51:a9:c2:81:a4:3d:4f:e2: 59:d8:c5:44:ab:26:d7:5b:da:3a:eb:cb:82:41:75: 00:4d:a5:b6:38:9c:8a:ab:d5:0d:df:f1:54:b1:2a: 0c:6e:65:61:d5:34:84:c9:23:50:3d:82:13:46:00: e6:2b:2f:86:d1:ed:df:d0:06:63:60:9e:fa:17:4d: c2:8d:50:96:68:7d:ed:1a:16:c9:de:94:4c:6e:4e: 62:02:97:e2:f5:43:f6:51:d2:7c:dd:f7:d9:dc:c6: 76:83:a9:75:cf:c9:7a:0b:a4:6b:28:92:e8:9a:2b: 87:bc:37:01:8c:fc:d1:e4:17:fa:82:bf:2c:ef:29: b1:c2:a2:84:30:51:45:74:79:a9:5f:a4:a9:87:61: 3e:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:D8:AE:78:72:B1:8B:6E:B1:55:4F:76:51:37:68:11:7F:B0:8C:1E X509v3 Authority Key Identifier: keyid:89:3A:FE:CD:71:17:05:C4:76:B7:85:D0:C8:6E:F5:4C:21:24:35:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iTr-zXEXBcR2t4XQyG71TCEkNUw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/ca3b5f-0221-43ad-8abd-1c13206a8123/1/iTr-zXEXBcR2t4XQyG71TCEkNUw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/ca3b5f-0221-43ad-8abd-1c13206a8123/1/iTr-zXEXBcR2t4XQyG71TCEkNUw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 20:c2:3e:37:23:fe:61:80:d5:ae:59:df:51:d7:0b:b0:50:79: 16:99:52:ca:f0:86:b9:bd:d4:b0:39:ae:71:3f:94:d7:b2:a6: e3:e5:52:de:64:ef:c4:1a:3f:e7:d1:88:37:62:76:a2:db:01: 54:07:d4:f4:f7:6a:fc:67:d8:a1:57:63:25:21:d5:1a:7c:9b: 76:f7:70:03:ef:1c:9f:a2:45:59:20:1b:42:95:31:d3:8b:d7: c5:9d:99:e9:6e:fa:52:4b:aa:0a:8f:ba:3a:f3:e6:4a:d4:a1: 84:89:66:c0:b6:ae:16:24:3a:56:a8:29:72:22:59:77:67:14: 91:19:8d:04:a0:1e:5a:65:19:d8:35:7a:28:75:24:1b:8b:76: 89:12:c2:ad:74:b8:c7:49:36:8c:ea:e6:b5:de:bc:2c:08:07: 0d:48:c7:40:87:5a:dd:56:fd:59:cd:16:e2:ff:64:05:77:7d: 86:1f:c6:06:4f:be:07:a2:2f:52:db:26:d1:b6:5e:a2:94:47: 26:c9:3a:a3:09:f8:b3:f5:5f:01:8f:c4:be:d5:75:5e:b3:59: 4c:24:99:d2:21:21:5c:08:cc:a4:dd:db:25:af:e4:41:7e:cf: c3:f4:a2:8b:d7:61:af:2f:b4:19:74:e8:aa:23:8c:96:b8:5f: 8c:8d:5e:7e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZswsKgHrydb92oP/4T6XkJTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg5M2FmZWNkNzExNzA1YzQ3NmI3ODVkMGM4NmVmNTRjMjEy NDM1NGMwHhcNMjUxMjE4MDkwMDQyWhcNMjUxMjE5MDkwMDQyWjAzMTEwLwYDVQQD EygwYmQ4YWU3ODcyYjE4YjZlYjE1NTRmNzY1MTM3NjgxMTdmYjA4YzFlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvx+b4NHJ3vcwHtu41rKzxIoKThMw aE+RcgHbdzbSmj6e0OkinG34xbt8LNTOl7owNsEwT/TGs8AZab0AqZuhpdRjPjND 9aqpJk0EIQpmJ01OabayuEMkXcqGNp6xx4d21odz6/4fS8C5Ae7okzMXUanCgaQ9 T+JZ2MVEqybXW9o668uCQXUATaW2OJyKq9UN3/FUsSoMbmVh1TSEySNQPYITRgDm Ky+G0e3f0AZjYJ76F03CjVCWaH3tGhbJ3pRMbk5iApfi9UP2UdJ83ffZ3MZ2g6l1 z8l6C6RrKJLomiuHvDcBjPzR5Bf6gr8s7ymxwqKEMFFFdHmpX6Sph2E+VQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAvYrnhysYtusVVPdlE3aBF/sIweMB8GA1UdIwQY MBaAFIk6/s1xFwXEdreF0Mhu9UwhJDVMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaVRyLXpYRVhCY1IydDRYUXlHNzFUQ0VrTlV3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYy9jYTNiNWYtMDIyMS00M2FkLThhYmQt MWMxMzIwNmE4MTIzLzEvaVRyLXpYRVhCY1IydDRYUXlHNzFUQ0VrTlV3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYy9jYTNiNWYtMDIyMS00M2FkLThhYmQtMWMxMzIwNmE4MTIz LzEvaVRyLXpYRVhCY1IydDRYUXlHNzFUQ0VrTlV3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIMI+NyP+ YYDVrlnfUdcLsFB5FplSyvCGub3UsDmucT+U17Km4+VS3mTvxBo/59GIN2J2otsB VAfU9Pdq/GfYoVdjJSHVGnybdvdwA+8cn6JFWSAbQpUx04vXxZ2Z6W76UkuqCo+6 OvPmStShhIlmwLauFiQ6VqgpciJZd2cUkRmNBKAeWmUZ2DV6KHUkG4t2iRLCrXS4 x0k2jOrmtd68LAgHDUjHQIda3Vb9Wc0W4v9kBXd9hh/GBk++B6IvUtsm0bZeopRH Jsk6own4s/VfAY/EvtV1XrNZTCSZ0iEhXAjMpN3bJa/kQX7Pw/Sii9dhry+0GXTo qiOMlrhfjI1efg== -----END CERTIFICATE-----Generated at Thu Dec 18 19:12:21 2025 by rpki-client