This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/3a96fa-90de-460c-bea6-ec10ebe4fccf/1/IhkMJolAk9xkoF7yz9NUoGz_A50.mft File: IhkMJolAk9xkoF7yz9NUoGz_A50.mft (raw, json) Hash identifier: iDl6qloU+hu87CeggJYSxaDHLq7o/F9fi9bIPsbpex8= Subject key identifier: 0D:38:D2:A6:63:C6:C0:0D:73:1C:25:2E:2D:66:47:F8:A7:B6:30:4D Authority key identifier: 22:19:0C:26:89:40:93:DC:64:A0:5E:F2:CF:D3:54:A0:6C:FF:03:9D Certificate issuer: /CN=22190c26894093dc64a05ef2cfd354a06cff039d Certificate serial: 019AF31BDC70623479A1B06749E050B21D48 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IhkMJolAk9xkoF7yz9NUoGz_A50.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/3a96fa-90de-460c-bea6-ec10ebe4fccf/1/IhkMJolAk9xkoF7yz9NUoGz_A50.mft Manifest number: 1092 Signing time: Sat 06 Dec 2025 10:01:20 +0000 Manifest this update: Sat 06 Dec 2025 10:01:20 +0000 Manifest next update: Sun 07 Dec 2025 10:01:20 +0000 Files and hashes: 1: IhkMJolAk9xkoF7yz9NUoGz_A50.crl (hash: Auf+KH4S79aFUPadwDJP+Sh5ThNmbiO6hUvnAi2MePo=) 2: VDBLRqMYCjpj60SbvjVrCA9rAtA.roa (hash: JKDK4eegAuzQo0SHJPfDcx6+y5omzYtOGcHgfrvk3wU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/3a96fa-90de-460c-bea6-ec10ebe4fccf/1/IhkMJolAk9xkoF7yz9NUoGz_A50.crl rsync://rpki.ripe.net/repository/DEFAULT/e0/3a96fa-90de-460c-bea6-ec10ebe4fccf/1/IhkMJolAk9xkoF7yz9NUoGz_A50.mft rsync://rpki.ripe.net/repository/DEFAULT/IhkMJolAk9xkoF7yz9NUoGz_A50.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1b:dc:70:62:34:79:a1:b0:67:49:e0:50:b2:1d:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=22190c26894093dc64a05ef2cfd354a06cff039d Validity Not Before: Dec 6 10:01:20 2025 GMT Not After : Dec 7 10:01:20 2025 GMT Subject: CN=0d38d2a663c6c00d731c252e2d6647f8a7b6304d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:fc:6d:41:87:34:e9:bc:cd:26:16:b2:09:af: 2f:b8:02:de:49:a8:c9:55:89:48:78:c5:c1:57:bf: 54:b4:f7:b1:36:6f:b2:e9:8c:f4:f0:4c:63:fc:82: ac:f7:b3:0a:69:b8:72:f3:03:61:88:18:c5:77:80: c7:7a:11:8b:f4:a4:b9:ff:4b:95:8c:e4:de:db:4b: 10:24:cc:14:30:c6:e1:9d:40:bb:9f:de:84:49:44: ba:bf:cd:7e:a6:8d:35:a8:a7:25:51:d2:f3:06:82: 2d:dd:41:d8:97:74:5b:75:43:5b:eb:e7:3b:df:f3: dc:37:ce:55:c4:3a:24:5d:4c:e7:d1:af:63:9a:19: 72:2d:9f:0d:5b:0f:ba:8c:76:de:c6:09:c9:41:fb: dc:a2:de:3f:7e:45:77:e9:81:38:14:01:b2:7c:52: bc:0d:59:cb:41:5e:78:4a:77:8b:82:59:6d:9d:03: 62:fe:c2:87:d5:bd:49:56:2f:cb:2b:77:17:37:21: 67:a0:38:82:b4:08:60:74:72:a9:8f:66:1a:a1:cb: 46:dd:c1:2f:92:af:cd:6b:d7:79:2f:79:49:7a:5b: 00:e5:19:b4:bf:0f:65:f4:41:3d:fc:9d:0e:c1:9c: 62:da:83:50:be:72:87:9e:92:f8:cb:f0:7d:a4:08: 17:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:38:D2:A6:63:C6:C0:0D:73:1C:25:2E:2D:66:47:F8:A7:B6:30:4D X509v3 Authority Key Identifier: keyid:22:19:0C:26:89:40:93:DC:64:A0:5E:F2:CF:D3:54:A0:6C:FF:03:9D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IhkMJolAk9xkoF7yz9NUoGz_A50.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/3a96fa-90de-460c-bea6-ec10ebe4fccf/1/IhkMJolAk9xkoF7yz9NUoGz_A50.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/3a96fa-90de-460c-bea6-ec10ebe4fccf/1/IhkMJolAk9xkoF7yz9NUoGz_A50.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 07:83:32:f1:bf:fd:41:14:d0:e8:8b:36:a0:88:0d:70:ab:de: 6d:d6:ee:0d:b5:ad:1c:55:f5:39:bf:d6:44:51:65:7c:f2:35: 79:98:36:73:78:98:c7:fa:8f:b7:c2:0b:22:07:6d:75:bf:30: 8e:a3:9c:79:ae:e7:56:3e:61:90:65:77:97:25:82:33:b0:da: fb:a0:03:99:bf:96:b3:41:73:f0:95:7b:03:90:fa:6f:b6:33: a0:0e:f8:4d:e0:95:8d:d0:3c:ec:14:60:bb:3e:0f:88:49:8c: 9a:e9:99:f3:ff:1d:77:d4:af:a9:ea:cc:c3:f9:b3:fd:68:18: a6:9f:b1:08:b8:98:bc:f4:55:81:6a:a7:4a:b3:bf:85:01:f9: bb:e9:c9:58:bd:27:1c:b7:83:9e:4e:00:d8:2f:98:ec:eb:8f: 17:03:6e:a1:81:69:33:13:da:f8:3b:7b:da:94:2a:bc:a4:cb: f4:f3:33:e7:4a:43:bc:b2:1f:a5:43:2b:4a:b6:38:b5:74:bc: 63:f8:b1:71:25:63:69:8f:ff:5a:d3:58:63:f4:e7:de:d6:8e: c4:d6:7e:cf:da:0a:e4:4f:8f:e3:70:42:c1:d2:90:98:d8:ac: 16:14:61:a8:9d:46:c3:5a:fa:97:c5:7f:71:2f:29:3f:6f:ec: 55:04:f8:eb -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzG9xwYjR5obBnSeBQsh1IMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIyMTkwYzI2ODk0MDkzZGM2NGEwNWVmMmNmZDM1NGEwNmNm ZjAzOWQwHhcNMjUxMjA2MTAwMTIwWhcNMjUxMjA3MTAwMTIwWjAzMTEwLwYDVQQD EygwZDM4ZDJhNjYzYzZjMDBkNzMxYzI1MmUyZDY2NDdmOGE3YjYzMDRkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxfxtQYc06bzNJhayCa8vuALeSajJ VYlIeMXBV79UtPexNm+y6Yz08Exj/IKs97MKabhy8wNhiBjFd4DHehGL9KS5/0uV jOTe20sQJMwUMMbhnUC7n96ESUS6v81+po01qKclUdLzBoIt3UHYl3RbdUNb6+c7 3/PcN85VxDokXUzn0a9jmhlyLZ8NWw+6jHbexgnJQfvcot4/fkV36YE4FAGyfFK8 DVnLQV54SneLglltnQNi/sKH1b1JVi/LK3cXNyFnoDiCtAhgdHKpj2YaoctG3cEv kq/Na9d5L3lJelsA5Rm0vw9l9EE9/J0OwZxi2oNQvnKHnpL4y/B9pAgXjwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFA040qZjxsANcxwlLi1mR/intjBNMB8GA1UdIwQY MBaAFCIZDCaJQJPcZKBe8s/TVKBs/wOdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSWhrTUpvbEFrOXhrb0Y3eXo5TlVvR3pfQTUwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMC8zYTk2ZmEtOTBkZS00NjBjLWJlYTYt ZWMxMGViZTRmY2NmLzEvSWhrTUpvbEFrOXhrb0Y3eXo5TlVvR3pfQTUwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMC8zYTk2ZmEtOTBkZS00NjBjLWJlYTYtZWMxMGViZTRmY2Nm LzEvSWhrTUpvbEFrOXhrb0Y3eXo5TlVvR3pfQTUwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAB4My8b/9 QRTQ6Is2oIgNcKvebdbuDbWtHFX1Ob/WRFFlfPI1eZg2c3iYx/qPt8ILIgdtdb8w jqOcea7nVj5hkGV3lyWCM7Da+6ADmb+Ws0Fz8JV7A5D6b7YzoA74TeCVjdA87BRg uz4PiEmMmumZ8/8dd9SvqerMw/mz/WgYpp+xCLiYvPRVgWqnSrO/hQH5u+nJWL0n HLeDnk4A2C+Y7OuPFwNuoYFpMxPa+Dt72pQqvKTL9PMz50pDvLIfpUMrSrY4tXS8 Y/ixcSVjaY//WtNYY/Tn3taOxNZ+z9oK5E+P43BCwdKQmNisFhRhqJ1Gw1r6l8V/ cS8pP2/sVQT46w== -----END CERTIFICATE-----Generated at Sat Dec 6 13:07:08 2025 by rpki-client