This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/f45bda-786e-41e9-8323-ba4926e965e8/1/IGfzCg2Q0tFymS6a6m9znQGyh5I.mft File: IGfzCg2Q0tFymS6a6m9znQGyh5I.mft (raw, json) Hash identifier: Zu8srKGRj1J1PcPfU3VYi5C11pzvQ7c3usNUGXjJAOE= Subject key identifier: E5:8D:77:63:18:25:2D:CE:83:45:7D:3A:16:D9:6B:14:EC:DD:68:9C Authority key identifier: 20:67:F3:0A:0D:90:D2:D1:72:99:2E:9A:EA:6F:73:9D:01:B2:87:92 Certificate issuer: /CN=2067f30a0d90d2d172992e9aea6f739d01b28792 Certificate serial: 019AF12E02DD2CC03C7E343E66EF171D8C99 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IGfzCg2Q0tFymS6a6m9znQGyh5I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/f45bda-786e-41e9-8323-ba4926e965e8/1/IGfzCg2Q0tFymS6a6m9znQGyh5I.mft Manifest number: 0A28 Signing time: Sat 06 Dec 2025 01:01:55 +0000 Manifest this update: Sat 06 Dec 2025 01:01:55 +0000 Manifest next update: Sun 07 Dec 2025 01:01:55 +0000 Files and hashes: 1: IGfzCg2Q0tFymS6a6m9znQGyh5I.crl (hash: qb/zvFHgzaVurIL0uGTu9YHeWfmYXtGOzQldSvbS1KQ=) 2: tYexsQdQ-bwy8SQ16CJTCKZPCX8.roa (hash: 4iRrkMtR/RQqmCmFoKMuS1dWTtpIHivuyEUKzRu+I4I=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/f45bda-786e-41e9-8323-ba4926e965e8/1/IGfzCg2Q0tFymS6a6m9znQGyh5I.crl rsync://rpki.ripe.net/repository/DEFAULT/be/f45bda-786e-41e9-8323-ba4926e965e8/1/IGfzCg2Q0tFymS6a6m9znQGyh5I.mft rsync://rpki.ripe.net/repository/DEFAULT/IGfzCg2Q0tFymS6a6m9znQGyh5I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:01:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2e:02:dd:2c:c0:3c:7e:34:3e:66:ef:17:1d:8c:99 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2067f30a0d90d2d172992e9aea6f739d01b28792 Validity Not Before: Dec 6 01:01:55 2025 GMT Not After : Dec 7 01:01:55 2025 GMT Subject: CN=e58d776318252dce83457d3a16d96b14ecdd689c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:38:24:c7:91:d1:42:4f:26:1b:8d:57:9d:c8: fb:66:4c:2e:64:1c:86:fb:ec:0f:0d:95:0f:f6:de: 8c:5f:1b:b4:b5:f1:c6:f7:90:88:90:3a:f2:fe:18: a9:79:b9:10:ab:c2:2b:02:c2:28:1d:4f:4b:47:45: a9:6a:75:f6:a8:e4:81:b2:d7:fb:91:18:97:c4:a6: 51:a4:c8:42:78:f9:60:54:50:3d:4d:02:41:c0:00: 99:e9:dc:35:bf:5b:bd:1e:e4:32:45:6c:44:3a:ca: b2:af:77:66:bc:e7:50:77:ae:19:17:14:64:8d:ad: d4:c5:f8:d9:cd:fa:12:da:42:d0:e0:74:dd:82:02: 01:c7:b0:a2:00:b1:15:99:c7:53:e8:ac:1b:a3:f4: 4c:91:d8:8e:15:c6:34:01:06:d0:a8:e9:4a:ef:2a: e9:0e:c0:be:01:66:72:3d:a1:3e:45:07:75:f1:8e: 73:a0:d2:bc:3d:d0:a3:41:2b:2e:9a:49:77:f4:d2: 0e:a4:7d:6c:8e:df:7d:5a:15:fb:90:37:8f:89:be: be:e1:ed:ff:33:14:88:56:93:0b:28:dc:e5:40:36: 19:f7:2a:ee:dd:57:f8:ab:0c:38:14:56:79:49:dd: 3a:73:85:4a:c9:be:51:10:b1:f5:72:39:d9:c1:25: 35:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:8D:77:63:18:25:2D:CE:83:45:7D:3A:16:D9:6B:14:EC:DD:68:9C X509v3 Authority Key Identifier: keyid:20:67:F3:0A:0D:90:D2:D1:72:99:2E:9A:EA:6F:73:9D:01:B2:87:92 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IGfzCg2Q0tFymS6a6m9znQGyh5I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/f45bda-786e-41e9-8323-ba4926e965e8/1/IGfzCg2Q0tFymS6a6m9znQGyh5I.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/be/f45bda-786e-41e9-8323-ba4926e965e8/1/IGfzCg2Q0tFymS6a6m9znQGyh5I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption cf:19:7a:7a:95:e0:f3:5d:b3:41:81:ae:f5:aa:26:b5:79:ca: 49:e5:e0:04:e7:20:4a:96:7e:67:d2:f1:c5:9e:37:94:e7:ad: c7:0b:6b:92:02:2b:ca:02:7c:83:48:7e:13:88:d5:d9:f2:e4: 4c:ba:0d:7a:7b:0b:8e:1b:15:07:f3:73:9d:1d:69:a6:88:a8: 21:51:9f:8f:a8:ff:4a:ae:a9:d1:f3:ff:9f:8f:fc:8b:c4:5e: 31:d8:3f:a4:a6:8a:d6:6b:a4:a2:36:6d:47:9c:53:a1:0d:aa: b9:5d:8e:5f:83:69:24:38:22:4b:e9:91:40:6b:91:11:9d:b0: 32:40:ff:21:0f:a7:4d:38:f3:7a:26:a5:c6:0e:d9:16:de:e0: 0a:dc:94:f0:14:aa:c0:3e:c0:9d:73:b3:7b:eb:75:9a:5d:3c: 20:db:69:2d:b2:1e:bf:c7:61:89:74:5f:e4:75:78:53:9a:0a: dd:96:78:18:01:54:16:d3:ef:d1:ed:91:b3:54:db:45:bb:52: f1:ce:2e:a0:6b:dc:e5:27:1d:f4:1f:4c:04:be:70:e6:aa:b5: 8a:5d:1c:c4:50:91:ef:2c:03:8e:9c:2d:15:f7:df:82:b3:c7: 87:35:18:51:34:09:7f:ff:52:2f:94:fa:cf:99:2a:2d:0b:7b: 99:39:c0:9b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLgLdLMA8fjQ+Zu8XHYyZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIwNjdmMzBhMGQ5MGQyZDE3Mjk5MmU5YWVhNmY3MzlkMDFi Mjg3OTIwHhcNMjUxMjA2MDEwMTU1WhcNMjUxMjA3MDEwMTU1WjAzMTEwLwYDVQQD EyhlNThkNzc2MzE4MjUyZGNlODM0NTdkM2ExNmQ5NmIxNGVjZGQ2ODljMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtzgkx5HRQk8mG41Xncj7ZkwuZByG ++wPDZUP9t6MXxu0tfHG95CIkDry/hipebkQq8IrAsIoHU9LR0WpanX2qOSBstf7 kRiXxKZRpMhCePlgVFA9TQJBwACZ6dw1v1u9HuQyRWxEOsqyr3dmvOdQd64ZFxRk ja3UxfjZzfoS2kLQ4HTdggIBx7CiALEVmcdT6Kwbo/RMkdiOFcY0AQbQqOlK7yrp DsC+AWZyPaE+RQd18Y5zoNK8PdCjQSsumkl39NIOpH1sjt99WhX7kDePib6+4e3/ MxSIVpMLKNzlQDYZ9yru3Vf4qww4FFZ5Sd06c4VKyb5RELH1cjnZwSU1awIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOWNd2MYJS3Og0V9OhbZaxTs3WicMB8GA1UdIwQY MBaAFCBn8woNkNLRcpkumupvc50BsoeSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSUdmekNnMlEwdEZ5bVM2YTZtOXpuUUd5aDVJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZS9mNDViZGEtNzg2ZS00MWU5LTgzMjMt YmE0OTI2ZTk2NWU4LzEvSUdmekNnMlEwdEZ5bVM2YTZtOXpuUUd5aDVJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZS9mNDViZGEtNzg2ZS00MWU5LTgzMjMtYmE0OTI2ZTk2NWU4 LzEvSUdmekNnMlEwdEZ5bVM2YTZtOXpuUUd5aDVJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAzxl6epXg 812zQYGu9aomtXnKSeXgBOcgSpZ+Z9LxxZ43lOetxwtrkgIrygJ8g0h+E4jV2fLk TLoNensLjhsVB/NznR1ppoioIVGfj6j/Sq6p0fP/n4/8i8ReMdg/pKaK1mukojZt R5xToQ2quV2OX4NpJDgiS+mRQGuREZ2wMkD/IQ+nTTjzeialxg7ZFt7gCtyU8BSq wD7AnXOze+t1ml08INtpLbIev8dhiXRf5HV4U5oK3ZZ4GAFUFtPv0e2Rs1TbRbtS 8c4uoGvc5Scd9B9MBL5w5qq1il0cxFCR7ywDjpwtFfffgrPHhzUYUTQJf/9SL5T6 z5kqLQt7mTnAmw== -----END CERTIFICATE-----Generated at Sat Dec 6 09:15:30 2025 by rpki-client