This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/981816-8860-4c2e-adf6-0d0bf2b56d59/1/iXO4_LiuetyaeZnhNn25WphaweY.mft File: iXO4_LiuetyaeZnhNn25WphaweY.mft (raw, json) Hash identifier: mj2tLjpFwWIZWze+z+nvQJmHs2o961uAOrYi5ga5KpE= Subject key identifier: CE:DE:C3:AD:71:A3:C5:2B:45:D5:D5:00:7D:B6:F6:05:9F:60:55:8E Authority key identifier: 89:73:B8:FC:B8:AE:7A:DC:9A:79:99:E1:36:7D:B9:5A:98:5A:C1:E6 Certificate issuer: /CN=8973b8fcb8ae7adc9a7999e1367db95a985ac1e6 Certificate serial: 019B360E056F560335391FBDB162927E6053 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iXO4_LiuetyaeZnhNn25WphaweY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/981816-8860-4c2e-adf6-0d0bf2b56d59/1/iXO4_LiuetyaeZnhNn25WphaweY.mft Manifest number: 1716 Signing time: Fri 19 Dec 2025 10:00:47 +0000 Manifest this update: Fri 19 Dec 2025 10:00:47 +0000 Manifest next update: Sat 20 Dec 2025 10:00:47 +0000 Files and hashes: 1: h4rlWsGQyp7l9eg6oqaTJSAFMT8.roa (hash: uarWJUMCX+17tjbtXPupyY/SCv5UIEMVh4slAsONpPQ=) 2: iXO4_LiuetyaeZnhNn25WphaweY.crl (hash: QEv6+ETonTPAzRzE/qC1BD/iZlva1Thof7VbrsoXDDE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/981816-8860-4c2e-adf6-0d0bf2b56d59/1/iXO4_LiuetyaeZnhNn25WphaweY.crl rsync://rpki.ripe.net/repository/DEFAULT/d0/981816-8860-4c2e-adf6-0d0bf2b56d59/1/iXO4_LiuetyaeZnhNn25WphaweY.mft rsync://rpki.ripe.net/repository/DEFAULT/iXO4_LiuetyaeZnhNn25WphaweY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 07:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:36:0e:05:6f:56:03:35:39:1f:bd:b1:62:92:7e:60:53 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8973b8fcb8ae7adc9a7999e1367db95a985ac1e6 Validity Not Before: Dec 19 10:00:47 2025 GMT Not After : Dec 20 10:00:47 2025 GMT Subject: CN=cedec3ad71a3c52b45d5d5007db6f6059f60558e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:ad:3b:e7:8f:f3:3d:10:e3:b0:ce:ca:1a:77: 19:9a:b3:d5:b6:3b:06:23:13:52:2d:71:f7:63:82: bf:74:c8:b8:18:f3:37:b0:8e:a1:fc:24:95:70:3c: 0d:7e:fa:9d:11:6f:2c:85:10:05:db:e5:c8:23:6b: 77:cb:0c:cf:fd:74:69:cd:4a:12:15:18:31:d6:43: f5:51:1b:b2:1a:97:2f:21:e6:89:d4:8a:f2:33:1c: 9a:6c:a1:74:95:08:74:f6:d9:d4:e2:68:39:23:c3: 14:61:48:49:ad:0a:fb:52:c2:83:5b:00:9d:6c:27: 93:ee:6f:63:49:96:15:35:47:16:29:84:45:b8:27: 8f:5a:d5:60:8a:ba:6e:e8:df:b6:df:0c:11:e8:5b: 93:a5:6b:d1:4f:e4:00:c7:b2:2b:29:71:f3:af:61: fc:18:48:ba:76:94:2b:fd:37:77:77:7d:82:28:ad: 7e:db:1e:36:c1:37:9a:70:9d:28:43:f6:ea:71:87: 95:06:77:72:bd:ba:29:30:87:8e:be:3c:bd:9e:db: a2:e7:77:5f:58:63:85:6e:c0:39:b0:84:3c:51:87: dc:0f:21:b3:60:f0:2b:65:54:ec:29:db:48:6d:fd: ac:6e:ae:8a:14:8e:7d:f2:18:a0:31:d0:1f:31:16: 73:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:DE:C3:AD:71:A3:C5:2B:45:D5:D5:00:7D:B6:F6:05:9F:60:55:8E X509v3 Authority Key Identifier: keyid:89:73:B8:FC:B8:AE:7A:DC:9A:79:99:E1:36:7D:B9:5A:98:5A:C1:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iXO4_LiuetyaeZnhNn25WphaweY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/981816-8860-4c2e-adf6-0d0bf2b56d59/1/iXO4_LiuetyaeZnhNn25WphaweY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/981816-8860-4c2e-adf6-0d0bf2b56d59/1/iXO4_LiuetyaeZnhNn25WphaweY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 85:ef:02:e1:3e:81:80:b3:b0:b4:33:1b:81:3e:fa:3b:6f:5c: cb:3d:61:bc:f1:66:d8:5f:73:d4:21:0c:6f:14:34:5d:f1:1f: 5e:73:e1:89:35:28:66:21:cc:e4:d8:cf:d6:4f:f0:1f:f7:87: d4:fe:81:25:3e:c6:a1:69:5e:94:21:7c:8d:24:bc:49:a4:f1: 4d:38:6a:fb:54:10:a6:f7:e9:cf:cb:3e:8f:8c:d7:35:1c:03: 73:84:4d:3d:d7:ef:d8:2b:c9:2a:a7:82:b9:bd:74:2b:d5:e5: f8:89:ca:d8:19:0f:6d:e5:5b:a1:6a:a3:a6:07:aa:71:47:e5: 73:f9:b0:5e:93:66:0f:ba:7e:1a:31:9d:80:61:46:4a:e2:81: 1a:24:81:47:c0:db:5e:69:bc:a9:6a:91:2d:e0:24:34:51:fb: d8:eb:25:9d:c5:41:7b:9e:74:86:fc:09:d6:4a:fd:2c:e2:ef: e1:63:96:08:cf:d6:e4:93:dd:3a:7d:c3:81:a3:26:4f:f2:20: e7:ce:e0:81:9d:1f:83:a1:97:94:7f:35:ca:37:87:33:05:94: 3e:f3:8f:be:4e:ab:75:2a:f7:a3:0c:e3:d8:34:80:ab:bb:26: b6:e5:87:a9:30:43:d5:76:9b:f2:18:bd:be:61:8d:17:76:b4: 54:44:e0:b4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs2DgVvVgM1OR+9sWKSfmBTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg5NzNiOGZjYjhhZTdhZGM5YTc5OTllMTM2N2RiOTVhOTg1 YWMxZTYwHhcNMjUxMjE5MTAwMDQ3WhcNMjUxMjIwMTAwMDQ3WjAzMTEwLwYDVQQD EyhjZWRlYzNhZDcxYTNjNTJiNDVkNWQ1MDA3ZGI2ZjYwNTlmNjA1NThlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4K0754/zPRDjsM7KGncZmrPVtjsG IxNSLXH3Y4K/dMi4GPM3sI6h/CSVcDwNfvqdEW8shRAF2+XII2t3ywzP/XRpzUoS FRgx1kP1URuyGpcvIeaJ1IryMxyabKF0lQh09tnU4mg5I8MUYUhJrQr7UsKDWwCd bCeT7m9jSZYVNUcWKYRFuCePWtVgirpu6N+23wwR6FuTpWvRT+QAx7IrKXHzr2H8 GEi6dpQr/Td3d32CKK1+2x42wTeacJ0oQ/bqcYeVBndyvbopMIeOvjy9ntui53df WGOFbsA5sIQ8UYfcDyGzYPArZVTsKdtIbf2sbq6KFI598higMdAfMRZztQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFM7ew61xo8UrRdXVAH229gWfYFWOMB8GA1UdIwQY MBaAFIlzuPy4rnrcmnmZ4TZ9uVqYWsHmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaVhPNF9MaXVldHlhZVpuaE5uMjVXcGhhd2VZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC85ODE4MTYtODg2MC00YzJlLWFkZjYt MGQwYmYyYjU2ZDU5LzEvaVhPNF9MaXVldHlhZVpuaE5uMjVXcGhhd2VZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMC85ODE4MTYtODg2MC00YzJlLWFkZjYtMGQwYmYyYjU2ZDU5 LzEvaVhPNF9MaXVldHlhZVpuaE5uMjVXcGhhd2VZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhe8C4T6B gLOwtDMbgT76O29cyz1hvPFm2F9z1CEMbxQ0XfEfXnPhiTUoZiHM5NjP1k/wH/eH 1P6BJT7GoWlelCF8jSS8SaTxTThq+1QQpvfpz8s+j4zXNRwDc4RNPdfv2CvJKqeC ub10K9Xl+InK2BkPbeVboWqjpgeqcUflc/mwXpNmD7p+GjGdgGFGSuKBGiSBR8Db Xmm8qWqRLeAkNFH72OslncVBe550hvwJ1kr9LOLv4WOWCM/W5JPdOn3DgaMmT/Ig 587ggZ0fg6GXlH81yjeHMwWUPvOPvk6rdSr3owzj2DSAq7smtuWHqTBD1Xab8hi9 vmGNF3a0VETgtA== -----END CERTIFICATE-----Generated at Fri Dec 19 12:53:06 2025 by rpki-client