This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/d0c38d-9f02-418b-96b2-fb3111dbd1ca/1/i29IgAONVauY18tm38-ol7e6Eeg.mft File: i29IgAONVauY18tm38-ol7e6Eeg.mft (raw, json) Hash identifier: oG539c8+vxNJBP1q+TxfbyuiumMuyP62cBGTN8OXOig= Subject key identifier: 3A:57:F4:FA:EC:6E:B4:14:28:A9:E6:05:36:AA:72:66:F8:4A:0F:32 Authority key identifier: 8B:6F:48:80:03:8D:55:AB:98:D7:CB:66:DF:CF:A8:97:B7:BA:11:E8 Certificate issuer: /CN=8b6f4880038d55ab98d7cb66dfcfa897b7ba11e8 Certificate serial: 019AF0885176AA3C2B82CE1A053ADB15854D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i29IgAONVauY18tm38-ol7e6Eeg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/d0c38d-9f02-418b-96b2-fb3111dbd1ca/1/i29IgAONVauY18tm38-ol7e6Eeg.mft Manifest number: 05D9 Signing time: Fri 05 Dec 2025 22:00:56 +0000 Manifest this update: Fri 05 Dec 2025 22:00:56 +0000 Manifest next update: Sat 06 Dec 2025 22:00:56 +0000 Files and hashes: 1: i29IgAONVauY18tm38-ol7e6Eeg.crl (hash: s+yqVrM0i1QySsTqltVsyj/cu24YYKAg+Tm8+cLNIog=) 2: uJrupPlV0TuAxsM7Yezc0lvFtvQ.roa (hash: zjqfplB2jtSi/5nKhDu31J1mMkLaG/4MZV1txaGrR6E=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/d0c38d-9f02-418b-96b2-fb3111dbd1ca/1/i29IgAONVauY18tm38-ol7e6Eeg.crl rsync://rpki.ripe.net/repository/DEFAULT/f4/d0c38d-9f02-418b-96b2-fb3111dbd1ca/1/i29IgAONVauY18tm38-ol7e6Eeg.mft rsync://rpki.ripe.net/repository/DEFAULT/i29IgAONVauY18tm38-ol7e6Eeg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 22:00:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:88:51:76:aa:3c:2b:82:ce:1a:05:3a:db:15:85:4d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8b6f4880038d55ab98d7cb66dfcfa897b7ba11e8 Validity Not Before: Dec 5 22:00:56 2025 GMT Not After : Dec 6 22:00:56 2025 GMT Subject: CN=3a57f4faec6eb41428a9e60536aa7266f84a0f32 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:4e:7e:b7:e7:f5:cb:10:1b:df:50:ac:71:ac: 09:43:ee:71:e1:e8:6c:30:aa:63:3c:44:a0:af:45: 08:39:68:0e:53:75:12:ff:2e:41:23:e8:5d:da:cf: 48:13:8d:11:38:41:91:70:ad:f9:fe:28:13:14:aa: f1:b2:ab:b7:73:56:bc:fe:05:cb:74:77:0b:e3:5e: 77:68:4b:b5:fd:b0:5e:b4:e6:f3:86:84:dc:fe:5b: 0d:ac:26:65:4b:79:f9:44:ba:27:c9:6f:a3:31:46: 30:31:aa:f6:5b:88:38:dd:f4:4f:36:d7:ac:23:66: b0:1b:1f:6d:9a:93:01:99:bf:c4:da:82:31:a9:58: 0c:09:aa:40:de:0f:36:18:3e:e1:c4:cd:70:63:1f: f6:d9:18:1a:39:79:a7:a8:4b:3c:5c:b1:a8:e6:6c: a9:6a:92:6e:14:a0:d3:0e:05:0d:2d:f4:76:d0:ad: 70:cb:0e:75:fa:b4:82:ce:d2:44:7e:f5:cb:3a:61: ad:82:0a:47:79:8a:33:b2:1b:10:0a:81:26:c1:15: ee:b7:64:38:fd:d7:3a:f3:f9:12:4c:ec:3a:4a:66: 40:3a:02:59:b2:74:8e:30:dc:ec:45:ff:f2:05:58: 5f:f2:8f:eb:3e:3e:c8:3a:9b:93:0a:e3:1e:b0:f7: 18:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:57:F4:FA:EC:6E:B4:14:28:A9:E6:05:36:AA:72:66:F8:4A:0F:32 X509v3 Authority Key Identifier: keyid:8B:6F:48:80:03:8D:55:AB:98:D7:CB:66:DF:CF:A8:97:B7:BA:11:E8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i29IgAONVauY18tm38-ol7e6Eeg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/d0c38d-9f02-418b-96b2-fb3111dbd1ca/1/i29IgAONVauY18tm38-ol7e6Eeg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/d0c38d-9f02-418b-96b2-fb3111dbd1ca/1/i29IgAONVauY18tm38-ol7e6Eeg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption cb:6d:93:4e:b6:42:06:a6:4b:b7:23:77:6b:ce:57:3d:da:2e: 18:5e:2f:2f:28:ab:d0:4a:5a:d2:ef:07:ab:7c:23:4e:36:d3: df:b6:80:86:95:e4:15:01:87:a4:30:95:47:5f:9b:26:d4:ab: 48:4c:49:a0:dd:5e:4f:c9:7f:ac:42:7f:52:7d:76:e8:67:48: a9:9a:7a:8d:24:27:45:a7:a3:65:06:67:5f:b4:37:0f:51:0e: 59:26:a1:33:b3:b1:c2:bc:37:3b:66:c1:b8:ce:c2:12:0c:4c: 9f:22:65:b8:23:a6:7d:a4:b5:df:5f:cc:c9:2c:58:94:ab:29: b4:a8:31:e1:7b:a4:f6:23:b0:84:e1:f6:6d:bc:b7:d7:b2:61: 51:ff:3c:54:53:24:3f:a5:b6:d4:f1:60:d6:69:3a:0f:6a:12: ec:0a:23:1c:db:03:87:a6:da:a3:ab:e6:9c:f8:ba:0f:b4:b4: 6d:9a:5f:98:51:19:63:d6:be:1e:5f:f3:c1:44:0e:c6:1f:37: 9e:5a:b2:07:73:b4:64:dc:92:04:bf:f5:66:03:6a:db:01:b0: ab:06:e2:39:2d:75:83:01:27:50:45:e0:0c:61:99:a3:5e:8b: 97:c7:4d:59:45:c8:bd:84:24:38:4b:ae:d2:94:ce:0d:d6:37: 31:bf:ba:cc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrwiFF2qjwrgs4aBTrbFYVNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhiNmY0ODgwMDM4ZDU1YWI5OGQ3Y2I2NmRmY2ZhODk3Yjdi YTExZTgwHhcNMjUxMjA1MjIwMDU2WhcNMjUxMjA2MjIwMDU2WjAzMTEwLwYDVQQD EygzYTU3ZjRmYWVjNmViNDE0MjhhOWU2MDUzNmFhNzI2NmY4NGEwZjMyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA205+t+f1yxAb31CscawJQ+5x4ehs MKpjPESgr0UIOWgOU3US/y5BI+hd2s9IE40ROEGRcK35/igTFKrxsqu3c1a8/gXL dHcL4153aEu1/bBetObzhoTc/lsNrCZlS3n5RLonyW+jMUYwMar2W4g43fRPNtes I2awGx9tmpMBmb/E2oIxqVgMCapA3g82GD7hxM1wYx/22RgaOXmnqEs8XLGo5myp apJuFKDTDgUNLfR20K1wyw51+rSCztJEfvXLOmGtggpHeYozshsQCoEmwRXut2Q4 /dc68/kSTOw6SmZAOgJZsnSOMNzsRf/yBVhf8o/rPj7IOpuTCuMesPcYFwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDpX9PrsbrQUKKnmBTaqcmb4Sg8yMB8GA1UdIwQY MBaAFItvSIADjVWrmNfLZt/PqJe3uhHoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaTI5SWdBT05WYXVZMTh0bTM4LW9sN2U2RWVnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNC9kMGMzOGQtOWYwMi00MThiLTk2YjIt ZmIzMTExZGJkMWNhLzEvaTI5SWdBT05WYXVZMTh0bTM4LW9sN2U2RWVnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNC9kMGMzOGQtOWYwMi00MThiLTk2YjItZmIzMTExZGJkMWNh LzEvaTI5SWdBT05WYXVZMTh0bTM4LW9sN2U2RWVnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAy22TTrZC BqZLtyN3a85XPdouGF4vLyir0Epa0u8Hq3wjTjbT37aAhpXkFQGHpDCVR1+bJtSr SExJoN1eT8l/rEJ/Un126GdIqZp6jSQnRaejZQZnX7Q3D1EOWSahM7Oxwrw3O2bB uM7CEgxMnyJluCOmfaS131/MySxYlKsptKgx4Xuk9iOwhOH2bby317JhUf88VFMk P6W21PFg1mk6D2oS7AojHNsDh6bao6vmnPi6D7S0bZpfmFEZY9a+Hl/zwUQOxh83 nlqyB3O0ZNySBL/1ZgNq2wGwqwbiOS11gwEnUEXgDGGZo16Ll8dNWUXIvYQkOEuu 0pTODdY3Mb+6zA== -----END CERTIFICATE-----Generated at Sat Dec 6 07:46:00 2025 by rpki-client