This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/4d3d98-51f2-4d95-bc37-2d32426e141d/1/itC83pWbIDJiNJG_MnmtRanKC-g.mft File: itC83pWbIDJiNJG_MnmtRanKC-g.mft (raw, json) Hash identifier: HCflPyLjduBXO3WgktnSwWqsew38uDlk9/cOW67Yn6c= Subject key identifier: 04:76:89:AA:BE:BC:01:B5:C7:1F:B1:40:7C:79:B1:D0:BE:8C:1D:DF Authority key identifier: 8A:D0:BC:DE:95:9B:20:32:62:34:91:BF:32:79:AD:45:A9:CA:0B:E8 Certificate issuer: /CN=8ad0bcde959b2032623491bf3279ad45a9ca0be8 Certificate serial: 019AF23FBEB01BD6CE37D7F28B96E048F74A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/itC83pWbIDJiNJG_MnmtRanKC-g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/4d3d98-51f2-4d95-bc37-2d32426e141d/1/itC83pWbIDJiNJG_MnmtRanKC-g.mft Manifest number: 0202 Signing time: Sat 06 Dec 2025 06:00:55 +0000 Manifest this update: Sat 06 Dec 2025 06:00:55 +0000 Manifest next update: Sun 07 Dec 2025 06:00:55 +0000 Files and hashes: 1: itC83pWbIDJiNJG_MnmtRanKC-g.crl (hash: ErMMJhkw9+DzPi1LKZhVcL1q+N5NKFWmJPQL7IA7hRw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/4d3d98-51f2-4d95-bc37-2d32426e141d/1/itC83pWbIDJiNJG_MnmtRanKC-g.crl rsync://rpki.ripe.net/repository/DEFAULT/c0/4d3d98-51f2-4d95-bc37-2d32426e141d/1/itC83pWbIDJiNJG_MnmtRanKC-g.mft rsync://rpki.ripe.net/repository/DEFAULT/itC83pWbIDJiNJG_MnmtRanKC-g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:3f:be:b0:1b:d6:ce:37:d7:f2:8b:96:e0:48:f7:4a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8ad0bcde959b2032623491bf3279ad45a9ca0be8 Validity Not Before: Dec 6 06:00:55 2025 GMT Not After : Dec 7 06:00:55 2025 GMT Subject: CN=047689aabebc01b5c71fb1407c79b1d0be8c1ddf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:76:84:56:6b:27:05:52:c7:e9:cf:a5:8f:8f: 33:56:cd:d2:5e:89:6f:20:33:90:f7:b5:e0:a3:63: 6d:0b:ff:d8:aa:08:a1:5b:af:71:44:ac:e1:38:7a: 6e:23:25:b1:76:e0:94:3d:f2:a5:53:cd:98:c9:1b: b1:46:be:c8:c4:85:2e:db:1e:15:16:e9:c9:82:ea: f5:f5:16:f9:a9:de:1d:f5:c7:dc:e8:68:d9:25:44: 9f:7f:2b:39:43:f6:c8:12:0f:42:6d:64:2a:f6:d7: 36:5b:54:92:31:09:e0:eb:d7:e2:ad:20:42:a6:71: e8:a6:d0:dd:89:4e:1a:dd:a3:69:c8:3c:4b:74:6c: 73:04:aa:73:d3:7c:a8:f7:df:d8:2f:7c:50:2c:37: d7:c9:ce:82:c0:c1:ae:3c:93:f7:91:aa:47:7d:01: 1b:27:98:ad:95:20:85:da:62:fd:48:a4:2f:0d:82: 52:db:3d:4a:02:37:f5:e5:89:6e:49:9a:d9:7b:34: 72:b4:75:4a:f1:e3:7b:96:e5:71:a3:6d:5d:b9:1f: d1:0d:c5:9b:f6:47:32:cd:89:80:ee:ca:59:c9:a4: 4a:d5:a0:8e:52:28:e5:aa:05:20:2b:ea:2d:e1:3f: 3b:83:f1:a4:e1:4e:1e:90:e2:21:d1:f6:5f:c7:05: 61:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:76:89:AA:BE:BC:01:B5:C7:1F:B1:40:7C:79:B1:D0:BE:8C:1D:DF X509v3 Authority Key Identifier: keyid:8A:D0:BC:DE:95:9B:20:32:62:34:91:BF:32:79:AD:45:A9:CA:0B:E8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/itC83pWbIDJiNJG_MnmtRanKC-g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/4d3d98-51f2-4d95-bc37-2d32426e141d/1/itC83pWbIDJiNJG_MnmtRanKC-g.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/4d3d98-51f2-4d95-bc37-2d32426e141d/1/itC83pWbIDJiNJG_MnmtRanKC-g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 58:e9:17:92:fc:2f:0e:85:fa:54:ab:8b:b5:ae:cb:13:50:56: ee:71:b9:bb:14:ac:bf:29:34:42:df:21:22:05:91:07:7a:f0: b2:59:d3:59:9c:92:34:d6:63:05:cd:b9:ce:d7:6b:2f:a0:85: 87:e3:6e:41:29:44:d8:76:c4:8a:4f:e8:ea:b1:0b:27:3f:bd: 45:20:72:52:dd:c6:02:71:ed:ee:eb:0c:36:bb:b0:2f:36:8d: 7e:05:8b:ca:3c:82:23:bf:7a:62:03:ec:47:48:f7:31:e2:ee: 82:22:06:c9:38:ab:ca:6e:5f:9a:8d:17:3b:65:6c:6c:c9:d1: 58:b8:64:52:dd:48:e4:cc:a4:b3:9f:b4:3a:88:0f:3e:d1:bf: 44:98:bb:e1:f2:cc:2d:ad:f3:5c:46:df:47:e1:e9:ce:bf:c6: b5:ad:88:e9:e8:43:ea:d4:ec:07:ec:d1:f7:80:87:a9:64:82: 34:d7:98:a0:8b:a6:80:d7:c3:e1:65:82:e6:f2:4e:ed:79:70: 5c:6a:01:fc:18:30:1e:89:8a:8c:79:a2:6e:3d:75:ee:3a:f4: a5:3d:13:55:60:fb:ac:cd:67:1b:69:3a:c6:27:4d:3b:bc:e0: ef:9f:c6:ce:7b:a2:f0:e6:f6:b9:8d:fe:5f:11:8d:5e:04:41: 44:b9:bb:c7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryP76wG9bON9fyi5bgSPdKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhhZDBiY2RlOTU5YjIwMzI2MjM0OTFiZjMyNzlhZDQ1YTlj YTBiZTgwHhcNMjUxMjA2MDYwMDU1WhcNMjUxMjA3MDYwMDU1WjAzMTEwLwYDVQQD EygwNDc2ODlhYWJlYmMwMWI1YzcxZmIxNDA3Yzc5YjFkMGJlOGMxZGRmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtXaEVmsnBVLH6c+lj48zVs3SXolv IDOQ97Xgo2NtC//YqgihW69xRKzhOHpuIyWxduCUPfKlU82YyRuxRr7IxIUu2x4V FunJgur19Rb5qd4d9cfc6GjZJUSffys5Q/bIEg9CbWQq9tc2W1SSMQng69firSBC pnHoptDdiU4a3aNpyDxLdGxzBKpz03yo99/YL3xQLDfXyc6CwMGuPJP3kapHfQEb J5itlSCF2mL9SKQvDYJS2z1KAjf15YluSZrZezRytHVK8eN7luVxo21duR/RDcWb 9kcyzYmA7spZyaRK1aCOUijlqgUgK+ot4T87g/Gk4U4ekOIh0fZfxwVhQwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAR2iaq+vAG1xx+xQHx5sdC+jB3fMB8GA1UdIwQY MBaAFIrQvN6VmyAyYjSRvzJ5rUWpygvoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaXRDODNwV2JJREppTkpHX01ubXRSYW5LQy1nLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC80ZDNkOTgtNTFmMi00ZDk1LWJjMzct MmQzMjQyNmUxNDFkLzEvaXRDODNwV2JJREppTkpHX01ubXRSYW5LQy1nLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMC80ZDNkOTgtNTFmMi00ZDk1LWJjMzctMmQzMjQyNmUxNDFk LzEvaXRDODNwV2JJREppTkpHX01ubXRSYW5LQy1nLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWOkXkvwv DoX6VKuLta7LE1BW7nG5uxSsvyk0Qt8hIgWRB3rwslnTWZySNNZjBc25ztdrL6CF h+NuQSlE2HbEik/o6rELJz+9RSByUt3GAnHt7usMNruwLzaNfgWLyjyCI796YgPs R0j3MeLugiIGyTirym5fmo0XO2VsbMnRWLhkUt1I5Myks5+0OogPPtG/RJi74fLM La3zXEbfR+Hpzr/Gta2I6ehD6tTsB+zR94CHqWSCNNeYoIumgNfD4WWC5vJO7Xlw XGoB/BgwHomKjHmibj117jr0pT0TVWD7rM1nG2k6xidNO7zg75/Gznui8Ob2uY3+ XxGNXgRBRLm7xw== -----END CERTIFICATE-----Generated at Sat Dec 6 11:07:09 2025 by rpki-client