This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/a2a52c-136a-43a8-967c-f6d966ca4f07/1/CI4DIScTMq_HfkyFefDlVZzAnFA.mft File: CI4DIScTMq_HfkyFefDlVZzAnFA.mft (raw, json) Hash identifier: iSDP+zM6TdUAtGdfH6k7FAlSjZ0wcajsM9X4o9uzYXU= Subject key identifier: 67:17:1B:A0:1E:35:8D:DE:16:D0:92:17:BB:E6:F2:8A:50:94:C0:2C Authority key identifier: 08:8E:03:21:27:13:32:AF:C7:7E:4C:85:79:F0:E5:55:9C:C0:9C:50 Certificate issuer: /CN=088e0321271332afc77e4c8579f0e5559cc09c50 Certificate serial: 019AF0BF21D5A30DA76260C2589A4FCD1725 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CI4DIScTMq_HfkyFefDlVZzAnFA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/a2a52c-136a-43a8-967c-f6d966ca4f07/1/CI4DIScTMq_HfkyFefDlVZzAnFA.mft Manifest number: 1428 Signing time: Fri 05 Dec 2025 23:00:48 +0000 Manifest this update: Fri 05 Dec 2025 23:00:48 +0000 Manifest next update: Sat 06 Dec 2025 23:00:48 +0000 Files and hashes: 1: CI4DIScTMq_HfkyFefDlVZzAnFA.crl (hash: o2pnuKy/VS4ti5q0T/Itin4JIjJfN37gEXd8cuubwiQ=) 2: ICR_37PsCBP-8LWQQc9BQZWkbu8.roa (hash: qbGaCfhiVfxLumC4av9v0LJhrwsxTdIAQc0ayhncJww=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/a2a52c-136a-43a8-967c-f6d966ca4f07/1/CI4DIScTMq_HfkyFefDlVZzAnFA.crl rsync://rpki.ripe.net/repository/DEFAULT/d0/a2a52c-136a-43a8-967c-f6d966ca4f07/1/CI4DIScTMq_HfkyFefDlVZzAnFA.mft rsync://rpki.ripe.net/repository/DEFAULT/CI4DIScTMq_HfkyFefDlVZzAnFA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 23:00:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:bf:21:d5:a3:0d:a7:62:60:c2:58:9a:4f:cd:17:25 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=088e0321271332afc77e4c8579f0e5559cc09c50 Validity Not Before: Dec 5 23:00:48 2025 GMT Not After : Dec 6 23:00:48 2025 GMT Subject: CN=67171ba01e358dde16d09217bbe6f28a5094c02c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:ce:17:d4:bc:7c:3a:3a:ea:ca:c0:3c:54:d3: 57:01:1b:2e:bc:ea:33:0e:7e:36:0c:dc:b7:d8:03: 0d:31:79:5c:f7:2e:7b:61:86:67:11:aa:de:2f:39: 83:43:a7:2d:38:f1:65:35:10:82:99:cd:23:45:83: f6:c5:71:81:b2:a1:55:d0:57:9c:50:e4:4c:52:0c: 16:b6:32:7d:41:09:3a:d2:b3:bb:1d:93:c9:6d:8e: 0f:30:62:5d:e1:56:f3:0a:b0:52:f6:9e:9b:76:35: 7b:75:c3:9c:c0:0b:a8:bc:1b:01:cb:c2:9f:7e:a9: 9c:c9:25:db:9e:62:d8:09:11:32:23:12:af:7e:f9: 0d:52:3b:67:09:b0:ee:05:cc:e5:d0:dc:d0:8e:2a: 39:04:10:a6:f3:13:60:aa:12:cf:aa:a8:88:b3:53: 3a:f2:05:6c:50:9f:3f:ac:fe:18:68:62:4a:7c:f5: 46:d8:d5:f5:dd:88:ca:0a:5c:6a:37:61:1b:46:15: 8e:df:76:63:f6:02:2a:85:09:8e:20:7c:69:b0:16: f5:91:4b:8f:ed:d4:47:2e:b9:cc:96:a8:5c:22:01: e0:a1:5f:f5:54:8f:14:9e:13:d6:e8:19:a9:a2:ab: 0c:92:7c:2e:44:48:10:05:e4:c1:bd:e8:4e:05:e1: 50:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:17:1B:A0:1E:35:8D:DE:16:D0:92:17:BB:E6:F2:8A:50:94:C0:2C X509v3 Authority Key Identifier: keyid:08:8E:03:21:27:13:32:AF:C7:7E:4C:85:79:F0:E5:55:9C:C0:9C:50 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CI4DIScTMq_HfkyFefDlVZzAnFA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/a2a52c-136a-43a8-967c-f6d966ca4f07/1/CI4DIScTMq_HfkyFefDlVZzAnFA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/a2a52c-136a-43a8-967c-f6d966ca4f07/1/CI4DIScTMq_HfkyFefDlVZzAnFA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2f:0a:4d:07:6a:0c:5f:33:8d:c7:4a:1f:77:4e:52:a0:e4:8d: 20:6d:61:68:cb:19:f0:70:13:57:b6:95:eb:b7:34:5e:f6:34: aa:e6:06:e7:5a:2b:b6:d6:49:fe:53:e0:d3:b6:d6:27:d9:26: fe:17:6f:f7:a5:58:6c:28:32:d1:77:6e:31:4c:45:0d:41:81: e1:98:01:58:8a:2a:60:54:da:a7:c2:2a:22:27:bc:09:ee:85: 20:9b:b8:ed:e0:69:ef:a7:ba:02:05:da:05:f1:c7:e1:39:75: 96:16:e2:96:7e:f4:02:69:c2:42:19:6c:62:90:76:3a:00:b8: 02:9f:fd:db:d1:a1:11:70:7a:f3:0e:74:af:83:4c:52:28:24: ed:96:05:77:69:41:c2:68:4d:30:c7:9f:34:56:36:74:49:44: bf:f9:b3:20:e0:8f:9f:a5:33:91:3b:7d:bd:f5:a3:db:dd:08: 5f:15:0d:c5:32:89:08:ce:95:8f:55:c5:95:a4:d8:8a:d6:67: 90:98:d5:ee:80:c8:43:0d:00:46:96:e8:72:1e:e1:6a:11:77: 93:d4:df:1b:e8:f7:22:dd:f8:87:f9:49:a4:f3:19:31:35:25: 93:b4:7c:1c:0d:bd:49:a7:28:e4:f4:2c:c0:e3:58:b4:10:2b: 23:07:b0:77 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrwvyHVow2nYmDCWJpPzRclMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA4OGUwMzIxMjcxMzMyYWZjNzdlNGM4NTc5ZjBlNTU1OWNj MDljNTAwHhcNMjUxMjA1MjMwMDQ4WhcNMjUxMjA2MjMwMDQ4WjAzMTEwLwYDVQQD Eyg2NzE3MWJhMDFlMzU4ZGRlMTZkMDkyMTdiYmU2ZjI4YTUwOTRjMDJjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkc4X1Lx8OjrqysA8VNNXARsuvOoz Dn42DNy32AMNMXlc9y57YYZnEareLzmDQ6ctOPFlNRCCmc0jRYP2xXGBsqFV0Fec UORMUgwWtjJ9QQk60rO7HZPJbY4PMGJd4VbzCrBS9p6bdjV7dcOcwAuovBsBy8Kf fqmcySXbnmLYCREyIxKvfvkNUjtnCbDuBczl0NzQjio5BBCm8xNgqhLPqqiIs1M6 8gVsUJ8/rP4YaGJKfPVG2NX13YjKClxqN2EbRhWO33Zj9gIqhQmOIHxpsBb1kUuP 7dRHLrnMlqhcIgHgoV/1VI8UnhPW6BmpoqsMknwuREgQBeTBvehOBeFQ2wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGcXG6AeNY3eFtCSF7vm8opQlMAsMB8GA1UdIwQY MBaAFAiOAyEnEzKvx35MhXnw5VWcwJxQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ0k0RElTY1RNcV9IZmt5RmVmRGxWWnpBbkZBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC9hMmE1MmMtMTM2YS00M2E4LTk2N2Mt ZjZkOTY2Y2E0ZjA3LzEvQ0k0RElTY1RNcV9IZmt5RmVmRGxWWnpBbkZBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMC9hMmE1MmMtMTM2YS00M2E4LTk2N2MtZjZkOTY2Y2E0ZjA3 LzEvQ0k0RElTY1RNcV9IZmt5RmVmRGxWWnpBbkZBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALwpNB2oM XzONx0ofd05SoOSNIG1haMsZ8HATV7aV67c0XvY0quYG51orttZJ/lPg07bWJ9km /hdv96VYbCgy0XduMUxFDUGB4ZgBWIoqYFTap8IqIie8Ce6FIJu47eBp76e6AgXa BfHH4Tl1lhbiln70AmnCQhlsYpB2OgC4Ap/929GhEXB68w50r4NMUigk7ZYFd2lB wmhNMMefNFY2dElEv/mzIOCPn6UzkTt9vfWj290IXxUNxTKJCM6Vj1XFlaTYitZn kJjV7oDIQw0ARpboch7hahF3k9TfG+j3It34h/lJpPMZMTUlk7R8HA29Saco5PQs wONYtBArIwewdw== -----END CERTIFICATE-----Generated at Sat Dec 6 08:59:06 2025 by rpki-client