This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/5d1852-afa8-45c5-a6b7-b5ab78960c6b/1/iTmr9x7sEMXZBgn8qfNMuF09VE4.mft File: iTmr9x7sEMXZBgn8qfNMuF09VE4.mft (raw, json) Hash identifier: +SB2dNeYLlRsyqKI3XZxhk5bRBf+HGxKZAKZbkRBtnE= Subject key identifier: 44:94:81:5D:74:18:DE:22:66:80:49:97:9A:60:3A:41:66:20:79:FE Authority key identifier: 89:39:AB:F7:1E:EC:10:C5:D9:06:09:FC:A9:F3:4C:B8:5D:3D:54:4E Certificate issuer: /CN=8939abf71eec10c5d90609fca9f34cb85d3d544e Certificate serial: 019AF209A1259E47042295AC249310860D5B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iTmr9x7sEMXZBgn8qfNMuF09VE4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/5d1852-afa8-45c5-a6b7-b5ab78960c6b/1/iTmr9x7sEMXZBgn8qfNMuF09VE4.mft Manifest number: 084E Signing time: Sat 06 Dec 2025 05:01:48 +0000 Manifest this update: Sat 06 Dec 2025 05:01:48 +0000 Manifest next update: Sun 07 Dec 2025 05:01:48 +0000 Files and hashes: 1: aOLkUwKlyZCWJaSS1dakY6JU8B8.roa (hash: 9gmA62Oo7ZhqLy8gi4PS0qhVisTPHP1+xk49Xpd1+EQ=) 2: iTmr9x7sEMXZBgn8qfNMuF09VE4.crl (hash: OwALCa7cdbb6bWE8n+kqjt5gjVPCqDO6SjmWhHKCWSQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/5d1852-afa8-45c5-a6b7-b5ab78960c6b/1/iTmr9x7sEMXZBgn8qfNMuF09VE4.crl rsync://rpki.ripe.net/repository/DEFAULT/d0/5d1852-afa8-45c5-a6b7-b5ab78960c6b/1/iTmr9x7sEMXZBgn8qfNMuF09VE4.mft rsync://rpki.ripe.net/repository/DEFAULT/iTmr9x7sEMXZBgn8qfNMuF09VE4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:09:a1:25:9e:47:04:22:95:ac:24:93:10:86:0d:5b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8939abf71eec10c5d90609fca9f34cb85d3d544e Validity Not Before: Dec 6 05:01:48 2025 GMT Not After : Dec 7 05:01:48 2025 GMT Subject: CN=4494815d7418de22668049979a603a41662079fe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:d3:98:3b:cb:a3:c6:40:f3:6b:b0:ed:67:e3: 41:4c:53:e7:a0:92:cb:65:34:4a:13:5c:e0:f8:1e: 99:01:1a:b1:fd:ed:c5:3a:12:e8:1a:2e:84:68:1c: 63:ea:44:56:53:1d:9a:27:a1:27:51:ea:c9:4a:65: a7:d4:ad:f3:12:9d:51:7d:ca:f6:ca:2c:aa:b0:a0: d8:4d:c7:00:40:60:6a:2c:e8:30:ac:3f:b3:67:9e: 21:cd:9c:dd:dd:aa:e5:fe:dd:8c:dc:82:94:83:03: b0:66:25:5b:b4:0c:ca:43:c4:f2:ce:cd:74:05:9a: 92:1f:52:d8:8b:16:df:a5:b1:2f:89:44:aa:53:36: de:8b:5e:cd:be:45:82:4b:75:b0:2d:ad:4d:2c:9f: d7:3a:b0:e4:60:25:d8:84:d7:f5:ca:51:81:b0:ad: 62:01:dc:0b:27:c2:ec:20:50:ba:c1:50:94:fc:41: a4:e9:92:b9:d3:4e:8d:30:af:18:49:c8:3f:df:7d: bf:28:88:83:7a:24:75:0b:da:e3:18:49:3a:7c:eb: 90:5c:3e:60:a4:b3:4c:ab:ac:22:38:1e:b4:95:5e: d2:63:a1:9f:40:69:24:d8:93:95:51:67:03:0f:99: 31:ff:db:f9:48:52:32:f1:0d:e1:73:8c:2f:58:f6: c0:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:94:81:5D:74:18:DE:22:66:80:49:97:9A:60:3A:41:66:20:79:FE X509v3 Authority Key Identifier: keyid:89:39:AB:F7:1E:EC:10:C5:D9:06:09:FC:A9:F3:4C:B8:5D:3D:54:4E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iTmr9x7sEMXZBgn8qfNMuF09VE4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/5d1852-afa8-45c5-a6b7-b5ab78960c6b/1/iTmr9x7sEMXZBgn8qfNMuF09VE4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/5d1852-afa8-45c5-a6b7-b5ab78960c6b/1/iTmr9x7sEMXZBgn8qfNMuF09VE4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 28:4f:55:8e:1b:70:46:fc:d7:2f:d1:f9:fe:81:62:8c:fa:0d: 77:e7:6f:97:9d:cf:d8:a3:54:ea:41:9d:49:7f:d6:76:9a:de: d1:dc:60:d5:32:fd:1b:ff:50:0b:cc:a0:23:50:0c:12:87:c1: 8c:88:47:1e:8a:a6:c0:90:7c:12:f3:63:c7:4c:4f:de:b7:cb: b6:6b:91:09:3e:88:81:92:2b:d2:67:ef:1b:5d:5a:d2:9e:db: 8a:68:b5:66:9d:52:41:f7:07:bf:d6:26:2a:34:3c:12:c9:72: 06:0a:bc:d4:dd:9c:bd:1f:ce:e8:fa:15:c3:46:f8:a0:02:17: 27:2e:1f:04:32:f2:1a:0a:9d:f0:33:cb:69:75:59:44:02:22: c8:a1:26:da:e8:71:ee:1b:48:7a:c8:06:a6:c6:6a:a3:cd:29: 8b:5c:5a:cb:d6:b5:b8:81:1a:24:57:7b:e9:03:34:3b:e3:7a: 5d:da:94:41:d8:49:32:6f:6d:d6:5c:1a:b1:b4:58:81:a3:db: 6e:ad:a0:c7:45:8d:23:a2:e9:73:6e:62:2d:06:85:18:6f:6c: cd:7f:f4:17:79:74:0a:01:a4:2d:3c:8b:2f:a6:fc:4c:65:33: d6:00:74:c5:14:ba:37:96:4a:dc:b6:58:7c:6c:b9:63:04:4e: 02:7f:cf:7d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCaElnkcEIpWsJJMQhg1bMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg5MzlhYmY3MWVlYzEwYzVkOTA2MDlmY2E5ZjM0Y2I4NWQz ZDU0NGUwHhcNMjUxMjA2MDUwMTQ4WhcNMjUxMjA3MDUwMTQ4WjAzMTEwLwYDVQQD Eyg0NDk0ODE1ZDc0MThkZTIyNjY4MDQ5OTc5YTYwM2E0MTY2MjA3OWZlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhtOYO8ujxkDza7DtZ+NBTFPnoJLL ZTRKE1zg+B6ZARqx/e3FOhLoGi6EaBxj6kRWUx2aJ6EnUerJSmWn1K3zEp1Rfcr2 yiyqsKDYTccAQGBqLOgwrD+zZ54hzZzd3arl/t2M3IKUgwOwZiVbtAzKQ8Tyzs10 BZqSH1LYixbfpbEviUSqUzbei17NvkWCS3WwLa1NLJ/XOrDkYCXYhNf1ylGBsK1i AdwLJ8LsIFC6wVCU/EGk6ZK5006NMK8YScg/332/KIiDeiR1C9rjGEk6fOuQXD5g pLNMq6wiOB60lV7SY6GfQGkk2JOVUWcDD5kx/9v5SFIy8Q3hc4wvWPbABwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFESUgV10GN4iZoBJl5pgOkFmIHn+MB8GA1UdIwQY MBaAFIk5q/ce7BDF2QYJ/KnzTLhdPVROMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaVRtcjl4N3NFTVhaQmduOHFmTk11RjA5VkU0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC81ZDE4NTItYWZhOC00NWM1LWE2Yjct YjVhYjc4OTYwYzZiLzEvaVRtcjl4N3NFTVhaQmduOHFmTk11RjA5VkU0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMC81ZDE4NTItYWZhOC00NWM1LWE2YjctYjVhYjc4OTYwYzZi LzEvaVRtcjl4N3NFTVhaQmduOHFmTk11RjA5VkU0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKE9Vjhtw RvzXL9H5/oFijPoNd+dvl53P2KNU6kGdSX/Wdpre0dxg1TL9G/9QC8ygI1AMEofB jIhHHoqmwJB8EvNjx0xP3rfLtmuRCT6IgZIr0mfvG11a0p7bimi1Zp1SQfcHv9Ym KjQ8EslyBgq81N2cvR/O6PoVw0b4oAIXJy4fBDLyGgqd8DPLaXVZRAIiyKEm2uhx 7htIesgGpsZqo80pi1xay9a1uIEaJFd76QM0O+N6XdqUQdhJMm9t1lwasbRYgaPb bq2gx0WNI6Lpc25iLQaFGG9szX/0F3l0CgGkLTyLL6b8TGUz1gB0xRS6N5ZK3LZY fGy5YwROAn/PfQ== -----END CERTIFICATE-----Generated at Sat Dec 6 09:21:35 2025 by rpki-client