This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/437ae5-c2ab-4c71-9d06-fec6c2701eda/1/dI6Zox81gkAKtd-nd8YNFqyu3bM.mft File: dI6Zox81gkAKtd-nd8YNFqyu3bM.mft (raw, json) Hash identifier: TxT/R9LLorE3JEvGwc3tneHujjF7shtQDOGKzVz4b60= Subject key identifier: 7B:D1:60:CB:5E:35:99:6D:5D:CE:CA:A4:5D:0D:8D:1A:76:80:61:01 Authority key identifier: 74:8E:99:A3:1F:35:82:40:0A:B5:DF:A7:77:C6:0D:16:AC:AE:DD:B3 Certificate issuer: /CN=748e99a31f3582400ab5dfa777c60d16acaeddb3 Certificate serial: 019AF12D86D9C18A0C51AEE555E03746B723 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dI6Zox81gkAKtd-nd8YNFqyu3bM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/437ae5-c2ab-4c71-9d06-fec6c2701eda/1/dI6Zox81gkAKtd-nd8YNFqyu3bM.mft Manifest number: 0930 Signing time: Sat 06 Dec 2025 01:01:23 +0000 Manifest this update: Sat 06 Dec 2025 01:01:23 +0000 Manifest next update: Sun 07 Dec 2025 01:01:23 +0000 Files and hashes: 1: VWVp9Cs0S9PvQSERU4KTGGzQ8JI.roa (hash: SxWsENl0azYTplSpEg/TKtQu0dvHaU6Cl+WjOSHnKaA=) 2: dI6Zox81gkAKtd-nd8YNFqyu3bM.crl (hash: h45RpjBtRQXsdWoUS8J5ChbqTzJlDnSY1CoQovG/Ki0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/437ae5-c2ab-4c71-9d06-fec6c2701eda/1/dI6Zox81gkAKtd-nd8YNFqyu3bM.crl rsync://rpki.ripe.net/repository/DEFAULT/c4/437ae5-c2ab-4c71-9d06-fec6c2701eda/1/dI6Zox81gkAKtd-nd8YNFqyu3bM.mft rsync://rpki.ripe.net/repository/DEFAULT/dI6Zox81gkAKtd-nd8YNFqyu3bM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:01:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2d:86:d9:c1:8a:0c:51:ae:e5:55:e0:37:46:b7:23 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=748e99a31f3582400ab5dfa777c60d16acaeddb3 Validity Not Before: Dec 6 01:01:23 2025 GMT Not After : Dec 7 01:01:23 2025 GMT Subject: CN=7bd160cb5e35996d5dcecaa45d0d8d1a76806101 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:23:4a:cd:52:4d:ee:4d:6e:67:21:c7:a0:2a: b6:31:08:a6:48:07:eb:f2:c9:38:96:14:71:83:89: 1b:86:a6:ef:d8:64:5f:13:72:a1:1f:34:d4:ef:0d: 97:1a:49:79:9e:a5:46:1c:32:cf:3c:02:a7:12:70: 5f:7c:07:93:c4:d3:e0:36:af:be:b7:93:96:9b:9a: 84:df:14:bc:3c:ac:bc:ea:b1:39:79:34:df:d4:5c: ae:70:05:3f:b2:8b:72:6a:44:79:48:78:4a:b2:e4: 81:7a:d1:20:43:61:5e:77:a9:bb:5e:02:78:f0:c0: a4:58:1e:5c:b3:23:d0:61:b3:0a:5d:33:d8:87:5d: 37:dd:48:b3:49:1f:d0:8c:f5:f2:27:7c:53:12:db: af:3f:a7:3e:3c:81:f1:ba:bd:58:be:8a:a4:7f:9c: 0c:8e:0d:db:f1:3c:56:bf:cc:cc:db:06:64:41:62: d9:69:2a:93:21:05:76:1c:3f:15:18:43:18:11:53: f0:fc:82:86:df:5d:df:f7:3c:a8:a3:73:88:e9:0d: ad:73:9e:f3:96:f6:2c:77:63:5b:ce:32:89:06:e7: 99:db:52:f1:8a:95:aa:82:05:c9:4a:e6:fb:24:a5: 88:d4:fe:cd:c1:36:3e:b8:54:ed:52:24:eb:43:cd: 33:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:D1:60:CB:5E:35:99:6D:5D:CE:CA:A4:5D:0D:8D:1A:76:80:61:01 X509v3 Authority Key Identifier: keyid:74:8E:99:A3:1F:35:82:40:0A:B5:DF:A7:77:C6:0D:16:AC:AE:DD:B3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dI6Zox81gkAKtd-nd8YNFqyu3bM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/437ae5-c2ab-4c71-9d06-fec6c2701eda/1/dI6Zox81gkAKtd-nd8YNFqyu3bM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/437ae5-c2ab-4c71-9d06-fec6c2701eda/1/dI6Zox81gkAKtd-nd8YNFqyu3bM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a7:56:45:31:18:f4:f7:f6:7f:5c:52:33:e1:9e:fc:0f:61:af: 53:5c:18:84:1d:46:c7:fa:4a:5b:90:0b:a4:cd:4c:95:7c:96: b6:db:81:53:60:e2:7c:f5:35:01:3d:a9:cc:30:93:33:ea:f8: dd:5d:5b:88:74:7b:23:f1:75:7e:bd:a0:87:89:98:14:b2:f0: b4:4a:7b:8f:1d:31:bb:ea:3d:19:e0:d3:6e:3c:cc:9d:cb:7e: 27:07:4b:d5:08:af:fa:b6:36:86:6b:10:6c:2b:92:95:d4:34: 74:47:e6:12:4b:f3:44:6e:23:8e:39:65:7c:be:3a:9f:40:7f: e4:c7:38:c9:74:89:40:a2:68:c0:b0:e4:74:9d:71:ef:45:80: 5a:51:9c:f1:20:0b:a4:b3:9e:54:12:94:43:34:60:3c:61:48: 66:4b:25:1d:84:37:e7:f3:1a:5d:68:8c:6c:c3:f9:f2:3e:ed: 0c:e2:f3:a3:42:7b:07:f9:f0:78:22:48:78:d2:50:46:2f:53: 71:cb:20:84:3a:7b:9a:59:1c:f0:1f:34:a3:69:e9:29:1b:1a: 09:29:4e:ed:02:b9:35:83:b7:5f:72:50:52:fb:14:02:06:fd: 05:5f:73:d3:4a:05:f5:f3:e8:8d:db:87:3c:c7:1e:95:aa:e7: e8:e1:3a:48 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLYbZwYoMUa7lVeA3RrcjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc0OGU5OWEzMWYzNTgyNDAwYWI1ZGZhNzc3YzYwZDE2YWNh ZWRkYjMwHhcNMjUxMjA2MDEwMTIzWhcNMjUxMjA3MDEwMTIzWjAzMTEwLwYDVQQD Eyg3YmQxNjBjYjVlMzU5OTZkNWRjZWNhYTQ1ZDBkOGQxYTc2ODA2MTAxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoCNKzVJN7k1uZyHHoCq2MQimSAfr 8sk4lhRxg4kbhqbv2GRfE3KhHzTU7w2XGkl5nqVGHDLPPAKnEnBffAeTxNPgNq++ t5OWm5qE3xS8PKy86rE5eTTf1FyucAU/sotyakR5SHhKsuSBetEgQ2Fed6m7XgJ4 8MCkWB5csyPQYbMKXTPYh1033UizSR/QjPXyJ3xTEtuvP6c+PIHxur1Yvoqkf5wM jg3b8TxWv8zM2wZkQWLZaSqTIQV2HD8VGEMYEVPw/IKG313f9zyoo3OI6Q2tc57z lvYsd2NbzjKJBueZ21LxipWqggXJSub7JKWI1P7NwTY+uFTtUiTrQ80ztwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHvRYMteNZltXc7KpF0NjRp2gGEBMB8GA1UdIwQY MBaAFHSOmaMfNYJACrXfp3fGDRasrt2zMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZEk2Wm94ODFna0FLdGQtbmQ4WU5GcXl1M2JNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNC80MzdhZTUtYzJhYi00YzcxLTlkMDYt ZmVjNmMyNzAxZWRhLzEvZEk2Wm94ODFna0FLdGQtbmQ4WU5GcXl1M2JNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNC80MzdhZTUtYzJhYi00YzcxLTlkMDYtZmVjNmMyNzAxZWRh LzEvZEk2Wm94ODFna0FLdGQtbmQ4WU5GcXl1M2JNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAp1ZFMRj0 9/Z/XFIz4Z78D2GvU1wYhB1Gx/pKW5ALpM1MlXyWttuBU2DifPU1AT2pzDCTM+r4 3V1biHR7I/F1fr2gh4mYFLLwtEp7jx0xu+o9GeDTbjzMnct+JwdL1Qiv+rY2hmsQ bCuSldQ0dEfmEkvzRG4jjjllfL46n0B/5Mc4yXSJQKJowLDkdJ1x70WAWlGc8SAL pLOeVBKUQzRgPGFIZkslHYQ35/MaXWiMbMP58j7tDOLzo0J7B/nweCJIeNJQRi9T ccsghDp7mlkc8B80o2npKRsaCSlO7QK5NYO3X3JQUvsUAgb9BV9z00oF9fPojduH PMcelarn6OE6SA== -----END CERTIFICATE-----Generated at Sat Dec 6 08:35:10 2025 by rpki-client