This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/be7894-0ccc-4fbd-880b-9758cb2b844e/1/itKTDR_h3UMEkf17gx3pxhaSreQ.mft File: itKTDR_h3UMEkf17gx3pxhaSreQ.mft (raw, json) Hash identifier: 91nCHZ6T3d4Airgf6lvQyNW/JWl9kxcD6kEPDaCBDL0= Subject key identifier: D4:9D:B8:13:D7:40:BC:72:02:57:6D:66:5A:FC:5A:9F:EF:29:AE:1B Authority key identifier: 8A:D2:93:0D:1F:E1:DD:43:04:91:FD:7B:83:1D:E9:C6:16:92:AD:E4 Certificate issuer: /CN=8ad2930d1fe1dd430491fd7b831de9c61692ade4 Certificate serial: 019AF1D251C49BB3A9E8CBA1DE37490323E4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/itKTDR_h3UMEkf17gx3pxhaSreQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/be7894-0ccc-4fbd-880b-9758cb2b844e/1/itKTDR_h3UMEkf17gx3pxhaSreQ.mft Manifest number: 1490 Signing time: Sat 06 Dec 2025 04:01:23 +0000 Manifest this update: Sat 06 Dec 2025 04:01:23 +0000 Manifest next update: Sun 07 Dec 2025 04:01:23 +0000 Files and hashes: 1: BAzsPPCBy1zDTboFw5Sl-2syIOA.roa (hash: 3HXxwP+fQhhVnJuWOZekRFhU3Q46kmrc9Y0dZLDklcg=) 2: bYpyeHiVOX2l8iPl-uPkAX9zfmw.roa (hash: clblsPlZTuaRgRGxz58OPeCdg4rL7htkupWPy4rOhKg=) 3: itKTDR_h3UMEkf17gx3pxhaSreQ.crl (hash: VsGhN2ZGHdMMaEZC779v6qbHiExwFTY+W9rfdvV8gi4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/be7894-0ccc-4fbd-880b-9758cb2b844e/1/itKTDR_h3UMEkf17gx3pxhaSreQ.crl rsync://rpki.ripe.net/repository/DEFAULT/ce/be7894-0ccc-4fbd-880b-9758cb2b844e/1/itKTDR_h3UMEkf17gx3pxhaSreQ.mft rsync://rpki.ripe.net/repository/DEFAULT/itKTDR_h3UMEkf17gx3pxhaSreQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 04:01:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d2:51:c4:9b:b3:a9:e8:cb:a1:de:37:49:03:23:e4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8ad2930d1fe1dd430491fd7b831de9c61692ade4 Validity Not Before: Dec 6 04:01:23 2025 GMT Not After : Dec 7 04:01:23 2025 GMT Subject: CN=d49db813d740bc7202576d665afc5a9fef29ae1b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:62:60:bc:39:5d:f4:d9:af:d6:5e:07:be:93: db:b1:51:c5:d9:9c:85:e0:7f:c0:67:34:29:d7:b8: e4:cb:af:d6:26:06:24:c9:e4:be:df:91:c5:ae:f3: 53:bf:4b:0e:c3:70:05:a8:d7:f6:d6:3d:ae:e1:18: a7:23:ac:c4:57:fa:37:8c:8d:e9:8b:67:0e:cc:d2: c1:26:ec:9f:b2:32:1f:61:43:b3:aa:5a:2c:be:e1: 3c:c6:91:4a:b9:6c:74:52:9a:c2:56:e5:fb:0c:f1: 12:32:02:f5:36:5f:b3:48:31:0f:7d:57:3f:85:56: 74:86:49:6e:30:cd:43:29:52:3c:99:38:ff:db:f0: b1:cc:f7:57:55:21:4e:c1:51:65:c2:00:3f:0a:06: 4b:8a:c8:e9:96:c1:9f:8b:96:62:cc:35:cc:36:d0: 35:1a:90:0f:22:f8:03:60:fa:c7:0f:13:47:62:83: 00:ce:06:82:76:c3:43:a6:ce:5d:97:59:b1:0a:b8: 59:54:10:a5:53:ed:25:1c:3a:0d:cb:df:db:96:f3: 49:b3:33:cc:85:de:d7:de:90:bf:0c:37:a2:98:80: d9:51:ae:fc:18:3a:d5:35:c5:cc:d9:75:94:f4:51: b3:a4:f0:18:ff:81:a2:50:f8:4a:f6:82:30:eb:06: 7c:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:9D:B8:13:D7:40:BC:72:02:57:6D:66:5A:FC:5A:9F:EF:29:AE:1B X509v3 Authority Key Identifier: keyid:8A:D2:93:0D:1F:E1:DD:43:04:91:FD:7B:83:1D:E9:C6:16:92:AD:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/itKTDR_h3UMEkf17gx3pxhaSreQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/be7894-0ccc-4fbd-880b-9758cb2b844e/1/itKTDR_h3UMEkf17gx3pxhaSreQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/be7894-0ccc-4fbd-880b-9758cb2b844e/1/itKTDR_h3UMEkf17gx3pxhaSreQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a8:26:cd:47:55:63:c0:82:28:37:55:7b:3c:0c:0c:33:47:6d: 35:1b:72:cb:51:da:ff:d1:b2:41:97:28:2e:c4:eb:00:f5:5e: e1:02:f6:a9:82:b6:4e:a6:74:3f:9c:35:a9:d9:5c:3b:2d:a2: 8c:6e:59:0f:6c:08:f7:05:85:15:9b:98:ff:90:50:4c:4d:46: 16:77:8c:40:2e:d7:cf:20:f4:23:b2:88:16:6d:41:6e:f6:b7: 6b:e5:cc:b6:24:00:65:24:89:0f:5f:9a:89:e1:18:c5:a7:c8: ca:1f:1d:f4:95:fb:70:ee:fa:1a:93:ea:ef:77:63:11:1b:c4: 0c:4c:64:86:59:b2:fc:4e:21:77:00:e4:45:54:7d:7b:6e:d4: 99:8d:1c:a0:17:a0:b4:8b:20:9f:7c:82:49:d2:1d:b9:91:65: 8f:a7:3a:81:f5:12:85:fe:92:7f:9f:e4:5e:d0:10:76:cd:e6: e3:41:ee:aa:6c:59:5d:da:2a:5b:46:b6:42:f7:9a:1b:cc:43: ed:19:5c:45:12:ef:2d:6c:6a:7c:6e:14:3d:0a:8d:9e:be:b4: f9:a6:f3:33:96:8b:b2:f2:79:71:a8:52:4a:aa:cb:76:3f:50: 82:a6:db:58:85:95:41:dc:46:6b:bc:92:96:c1:4c:76:6f:bb: 88:89:d6:f9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0lHEm7Op6Muh3jdJAyPkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhhZDI5MzBkMWZlMWRkNDMwNDkxZmQ3YjgzMWRlOWM2MTY5 MmFkZTQwHhcNMjUxMjA2MDQwMTIzWhcNMjUxMjA3MDQwMTIzWjAzMTEwLwYDVQQD EyhkNDlkYjgxM2Q3NDBiYzcyMDI1NzZkNjY1YWZjNWE5ZmVmMjlhZTFiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7WJgvDld9Nmv1l4HvpPbsVHF2ZyF 4H/AZzQp17jky6/WJgYkyeS+35HFrvNTv0sOw3AFqNf21j2u4RinI6zEV/o3jI3p i2cOzNLBJuyfsjIfYUOzqlosvuE8xpFKuWx0UprCVuX7DPESMgL1Nl+zSDEPfVc/ hVZ0hkluMM1DKVI8mTj/2/CxzPdXVSFOwVFlwgA/CgZLisjplsGfi5ZizDXMNtA1 GpAPIvgDYPrHDxNHYoMAzgaCdsNDps5dl1mxCrhZVBClU+0lHDoNy9/blvNJszPM hd7X3pC/DDeimIDZUa78GDrVNcXM2XWU9FGzpPAY/4GiUPhK9oIw6wZ8DQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNSduBPXQLxyAldtZlr8Wp/vKa4bMB8GA1UdIwQY MBaAFIrSkw0f4d1DBJH9e4Md6cYWkq3kMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaXRLVERSX2gzVU1Fa2YxN2d4M3B4aGFTcmVRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZS9iZTc4OTQtMGNjYy00ZmJkLTg4MGIt OTc1OGNiMmI4NDRlLzEvaXRLVERSX2gzVU1Fa2YxN2d4M3B4aGFTcmVRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZS9iZTc4OTQtMGNjYy00ZmJkLTg4MGItOTc1OGNiMmI4NDRl LzEvaXRLVERSX2gzVU1Fa2YxN2d4M3B4aGFTcmVRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqCbNR1Vj wIIoN1V7PAwMM0dtNRtyy1Ha/9GyQZcoLsTrAPVe4QL2qYK2TqZ0P5w1qdlcOy2i jG5ZD2wI9wWFFZuY/5BQTE1GFneMQC7XzyD0I7KIFm1Bbva3a+XMtiQAZSSJD1+a ieEYxafIyh8d9JX7cO76GpPq73djERvEDExkhlmy/E4hdwDkRVR9e27UmY0coBeg tIsgn3yCSdIduZFlj6c6gfUShf6Sf5/kXtAQds3m40HuqmxZXdoqW0a2QveaG8xD 7RlcRRLvLWxqfG4UPQqNnr60+abzM5aLsvJ5cahSSqrLdj9QgqbbWIWVQdxGa7yS lsFMdm+7iInW+Q== -----END CERTIFICATE-----Generated at Sat Dec 6 12:31:48 2025 by rpki-client