This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/f2d0cb-c3d4-49be-b0f2-305fb09556c9/1/iXN4Em9V2WUZVT2qSOAuMoISFkQ.mft File: iXN4Em9V2WUZVT2qSOAuMoISFkQ.mft (raw, json) Hash identifier: BhAhyLhSRxxTLRXMGcUaLRyxBmm+lRZpkPVWxQPmfyQ= Subject key identifier: 17:1D:C6:CF:65:E1:67:40:80:6C:92:8E:58:4C:76:E4:E3:D3:20:57 Authority key identifier: 89:73:78:12:6F:55:D9:65:19:55:3D:AA:48:E0:2E:32:82:12:16:44 Certificate issuer: /CN=897378126f55d96519553daa48e02e3282121644 Certificate serial: 019AF31B947E77D4145D69DA53134DD97E84 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iXN4Em9V2WUZVT2qSOAuMoISFkQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/f2d0cb-c3d4-49be-b0f2-305fb09556c9/1/iXN4Em9V2WUZVT2qSOAuMoISFkQ.mft Manifest number: 0FBD Signing time: Sat 06 Dec 2025 10:01:02 +0000 Manifest this update: Sat 06 Dec 2025 10:01:02 +0000 Manifest next update: Sun 07 Dec 2025 10:01:02 +0000 Files and hashes: 1: gGw6ft1sLBQmsJ-vRfx6KJXkhbk.roa (hash: S1p9cVSO3FaBQReociITznoI/L2Cqm4kk12uycY2TsA=) 2: iXN4Em9V2WUZVT2qSOAuMoISFkQ.crl (hash: 4c/vzBEd1AKZHVzgfjQqSYxXjHJ6gioKPksj5O85RJI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/f2d0cb-c3d4-49be-b0f2-305fb09556c9/1/iXN4Em9V2WUZVT2qSOAuMoISFkQ.crl rsync://rpki.ripe.net/repository/DEFAULT/c4/f2d0cb-c3d4-49be-b0f2-305fb09556c9/1/iXN4Em9V2WUZVT2qSOAuMoISFkQ.mft rsync://rpki.ripe.net/repository/DEFAULT/iXN4Em9V2WUZVT2qSOAuMoISFkQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1b:94:7e:77:d4:14:5d:69:da:53:13:4d:d9:7e:84 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=897378126f55d96519553daa48e02e3282121644 Validity Not Before: Dec 6 10:01:02 2025 GMT Not After : Dec 7 10:01:02 2025 GMT Subject: CN=171dc6cf65e16740806c928e584c76e4e3d32057 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:f7:41:dc:e9:14:37:b7:0f:93:92:e6:dc:bc: cc:1c:5a:a4:7b:2a:d0:91:91:dd:bf:a9:2b:f4:d5: b8:ec:87:f3:91:a3:37:32:86:d0:10:0b:8e:18:de: be:01:3c:71:57:4a:1e:b9:60:83:40:a5:22:44:98: aa:ff:37:c0:d5:88:05:ed:51:98:06:18:f6:e0:06: b2:69:26:8e:59:0c:c4:14:03:29:c6:b7:eb:2e:6f: 08:ab:b6:43:a7:58:47:33:54:1e:66:d9:57:f0:bf: 8e:6f:e3:b9:c2:7a:20:8d:cd:ee:cc:fa:96:55:e4: 9e:0d:f5:9a:36:ff:9e:bc:45:cd:4c:4f:fb:5e:5c: cc:e9:d8:be:82:02:83:3c:05:ca:b2:b4:cf:42:03: e4:e5:5c:9c:79:53:a8:73:b6:eb:9d:07:fb:b6:d9: 13:d0:23:a0:cb:dd:eb:e7:c4:4f:e2:c3:8f:68:d0: 94:9a:1a:e7:43:e0:d5:cf:5a:ea:36:2e:02:24:27: 0f:64:cd:71:2e:68:99:e5:a7:f0:ef:7f:dd:8c:df: b9:04:8c:d9:c1:fd:27:a1:a7:bb:a7:f4:a6:a9:a2: 5f:02:71:66:e0:b3:b0:5a:54:4b:a4:fa:64:e7:04: 88:58:b5:a1:22:61:d1:1e:43:b0:a6:96:61:07:bb: 6d:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:1D:C6:CF:65:E1:67:40:80:6C:92:8E:58:4C:76:E4:E3:D3:20:57 X509v3 Authority Key Identifier: keyid:89:73:78:12:6F:55:D9:65:19:55:3D:AA:48:E0:2E:32:82:12:16:44 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iXN4Em9V2WUZVT2qSOAuMoISFkQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/f2d0cb-c3d4-49be-b0f2-305fb09556c9/1/iXN4Em9V2WUZVT2qSOAuMoISFkQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/f2d0cb-c3d4-49be-b0f2-305fb09556c9/1/iXN4Em9V2WUZVT2qSOAuMoISFkQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption e4:04:b9:2b:8b:fe:6b:f5:02:64:c2:24:5e:c1:a9:94:57:01: 9a:b5:31:ab:be:18:74:1e:3a:a7:09:bc:44:03:f6:bd:79:2a: f7:3c:23:cd:52:ee:bb:45:bf:45:b8:cc:83:f7:a3:9f:57:ec: f2:ec:1b:e8:a9:31:62:34:c2:63:2d:73:a4:9f:ae:06:a5:a2: ff:b4:23:a4:d1:77:ec:08:02:2e:36:ae:79:ac:ff:51:33:65: 2a:65:df:f5:3c:da:94:da:8c:3f:96:e8:47:49:bc:d1:4a:f8: b3:fd:79:b2:52:31:ea:2e:b5:23:65:56:88:7a:27:27:87:e4: 70:c6:2c:a3:c4:46:f0:9f:aa:90:36:63:49:45:ca:7c:9d:e5: d2:60:b8:6e:d3:ec:79:25:8d:f5:35:72:5c:aa:a3:d1:9c:51: 67:23:6d:bb:cb:1e:41:f3:85:ce:3e:08:ce:4a:4a:bc:10:a1: 9a:23:54:f4:d5:fd:d8:e3:7f:d5:59:a4:9c:e0:ac:63:99:0c: 66:56:e1:31:58:ac:9f:fe:f1:1a:ce:fb:24:8b:99:b1:a5:e1: c6:59:1e:8b:b6:ff:4c:9e:0f:ba:04:10:e1:9d:a2:e6:21:41: 50:a9:60:a3:a1:5d:1d:bc:f8:6a:55:d3:eb:dc:27:75:a7:6b: 63:4f:4d:77 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzG5R+d9QUXWnaUxNN2X6EMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg5NzM3ODEyNmY1NWQ5NjUxOTU1M2RhYTQ4ZTAyZTMyODIx MjE2NDQwHhcNMjUxMjA2MTAwMTAyWhcNMjUxMjA3MTAwMTAyWjAzMTEwLwYDVQQD EygxNzFkYzZjZjY1ZTE2NzQwODA2YzkyOGU1ODRjNzZlNGUzZDMyMDU3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx/dB3OkUN7cPk5Lm3LzMHFqkeyrQ kZHdv6kr9NW47IfzkaM3MobQEAuOGN6+ATxxV0oeuWCDQKUiRJiq/zfA1YgF7VGY Bhj24AayaSaOWQzEFAMpxrfrLm8Iq7ZDp1hHM1QeZtlX8L+Ob+O5wnogjc3uzPqW VeSeDfWaNv+evEXNTE/7XlzM6di+ggKDPAXKsrTPQgPk5VyceVOoc7brnQf7ttkT 0COgy93r58RP4sOPaNCUmhrnQ+DVz1rqNi4CJCcPZM1xLmiZ5afw73/djN+5BIzZ wf0noae7p/SmqaJfAnFm4LOwWlRLpPpk5wSIWLWhImHRHkOwppZhB7ttKQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBcdxs9l4WdAgGySjlhMduTj0yBXMB8GA1UdIwQY MBaAFIlzeBJvVdllGVU9qkjgLjKCEhZEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaVhONEVtOVYyV1VaVlQycVNPQXVNb0lTRmtRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNC9mMmQwY2ItYzNkNC00OWJlLWIwZjIt MzA1ZmIwOTU1NmM5LzEvaVhONEVtOVYyV1VaVlQycVNPQXVNb0lTRmtRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNC9mMmQwY2ItYzNkNC00OWJlLWIwZjItMzA1ZmIwOTU1NmM5 LzEvaVhONEVtOVYyV1VaVlQycVNPQXVNb0lTRmtRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA5AS5K4v+ a/UCZMIkXsGplFcBmrUxq74YdB46pwm8RAP2vXkq9zwjzVLuu0W/RbjMg/ejn1fs 8uwb6KkxYjTCYy1zpJ+uBqWi/7QjpNF37AgCLjaueaz/UTNlKmXf9TzalNqMP5bo R0m80Ur4s/15slIx6i61I2VWiHonJ4fkcMYso8RG8J+qkDZjSUXKfJ3l0mC4btPs eSWN9TVyXKqj0ZxRZyNtu8seQfOFzj4IzkpKvBChmiNU9NX92ON/1VmknOCsY5kM ZlbhMVisn/7xGs77JIuZsaXhxlkei7b/TJ4PugQQ4Z2i5iFBUKlgo6FdHbz4alXT 69wndadrY09Ndw== -----END CERTIFICATE-----Generated at Sat Dec 6 12:49:17 2025 by rpki-client