This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/fa1004-e450-41ec-9d5e-4a1f7c1bdf78/1/IZt8FF4Kz4FIQY1UJH393_wZ-kw.mft File: IZt8FF4Kz4FIQY1UJH393_wZ-kw.mft (raw, json) Hash identifier: mkqx8mn98yFaxlOdfyB2xjN323MtBc7p1WL3zzN8syY= Subject key identifier: AC:4F:7B:C9:4A:C7:68:3C:CE:F9:D7:A7:24:17:0F:A3:62:2F:5D:59 Authority key identifier: 21:9B:7C:14:5E:0A:CF:81:48:41:8D:54:24:7D:FD:DF:FC:19:FA:4C Certificate issuer: /CN=219b7c145e0acf8148418d54247dfddffc19fa4c Certificate serial: 019AF16412ABD9AE576F2B7025AC4B48BFE8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IZt8FF4Kz4FIQY1UJH393_wZ-kw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/fa1004-e450-41ec-9d5e-4a1f7c1bdf78/1/IZt8FF4Kz4FIQY1UJH393_wZ-kw.mft Manifest number: 0314 Signing time: Sat 06 Dec 2025 02:00:58 +0000 Manifest this update: Sat 06 Dec 2025 02:00:58 +0000 Manifest next update: Sun 07 Dec 2025 02:00:58 +0000 Files and hashes: 1: IZt8FF4Kz4FIQY1UJH393_wZ-kw.crl (hash: cMJX8M9cMJZPZKLQBJuFMsXVSGB/UBOiLr9bXNzQnZc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/fa1004-e450-41ec-9d5e-4a1f7c1bdf78/1/IZt8FF4Kz4FIQY1UJH393_wZ-kw.crl rsync://rpki.ripe.net/repository/DEFAULT/f5/fa1004-e450-41ec-9d5e-4a1f7c1bdf78/1/IZt8FF4Kz4FIQY1UJH393_wZ-kw.mft rsync://rpki.ripe.net/repository/DEFAULT/IZt8FF4Kz4FIQY1UJH393_wZ-kw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:64:12:ab:d9:ae:57:6f:2b:70:25:ac:4b:48:bf:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=219b7c145e0acf8148418d54247dfddffc19fa4c Validity Not Before: Dec 6 02:00:58 2025 GMT Not After : Dec 7 02:00:58 2025 GMT Subject: CN=ac4f7bc94ac7683ccef9d7a724170fa3622f5d59 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:ff:5f:89:5f:ac:d3:5e:5e:ae:67:02:7c:c6: 4a:c3:0a:a0:44:cc:9b:d3:99:94:93:33:39:fd:ea: da:c9:1e:fb:ee:0c:5b:18:53:3b:35:57:50:dd:4d: 29:3f:0b:dd:08:13:f5:1e:1e:48:d0:4f:02:a0:67: bc:ef:b7:af:aa:5b:10:58:5f:87:c9:58:0d:da:dc: 89:c2:7f:35:46:61:1d:31:f4:34:66:93:a8:33:5a: cb:20:7a:4b:62:ed:08:28:99:df:6f:2e:9d:a7:e1: fc:a2:7b:e0:1e:65:e9:d1:74:0b:2e:34:25:ad:bb: 71:45:b8:39:c6:ca:f8:72:23:32:71:c5:15:fd:ac: 22:7b:da:8c:ff:bc:f0:7a:cc:2a:06:55:81:eb:8c: 96:6d:c7:d6:07:21:98:88:54:fd:64:ce:ec:9c:c1: 1f:5e:14:9c:5d:81:77:3f:1f:f6:09:70:ca:37:bf: 97:b7:a2:40:85:5e:d6:9a:c1:50:49:f2:6e:28:ce: 4f:09:de:80:16:1b:1d:d5:ce:86:f5:bd:e8:72:a9: 88:c0:46:64:48:04:bb:ad:9f:cc:67:b6:1e:ed:8d: c0:7e:70:82:ff:f0:97:c1:2a:2c:aa:86:ab:cf:df: 06:60:e7:6a:32:0f:86:b9:8b:76:a3:12:58:05:b0: 8d:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:4F:7B:C9:4A:C7:68:3C:CE:F9:D7:A7:24:17:0F:A3:62:2F:5D:59 X509v3 Authority Key Identifier: keyid:21:9B:7C:14:5E:0A:CF:81:48:41:8D:54:24:7D:FD:DF:FC:19:FA:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IZt8FF4Kz4FIQY1UJH393_wZ-kw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/fa1004-e450-41ec-9d5e-4a1f7c1bdf78/1/IZt8FF4Kz4FIQY1UJH393_wZ-kw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/fa1004-e450-41ec-9d5e-4a1f7c1bdf78/1/IZt8FF4Kz4FIQY1UJH393_wZ-kw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 54:8f:23:a4:8f:e8:42:10:6a:99:5c:31:35:50:6a:51:13:33: 3f:c1:54:bd:cf:4c:9f:ef:a5:77:b6:f9:45:89:10:54:54:15: 17:09:cc:96:ee:a5:b8:12:6b:e8:40:53:c6:29:2e:5d:21:21: 17:28:6a:9b:6f:e9:26:67:d1:c6:09:0a:96:25:4e:07:a5:5f: 28:41:98:71:8b:7b:77:57:c4:94:c8:92:c1:18:b2:fb:6b:a8: 12:b9:e8:6c:d6:68:8b:b0:f9:72:3f:0e:0e:3a:48:42:e4:68: cd:20:d8:fb:c0:06:4d:c5:04:53:fc:2c:04:88:fb:02:90:f0: d9:b4:1a:57:26:be:b0:84:3e:0f:1b:61:26:16:ab:60:4b:99: af:5e:7b:97:05:49:30:2b:b6:c4:ec:ab:7a:7b:52:29:78:28: 64:24:74:54:f9:86:3c:76:88:9f:50:f1:2e:47:a0:4e:30:33: 8c:85:82:bb:db:99:10:30:9f:a7:6a:23:e0:1c:77:7a:ad:df: 3b:3a:49:09:09:f6:a2:71:67:75:d0:c3:e8:64:b3:ca:83:18: 5d:ac:01:fe:c3:3d:c0:a9:3d:3c:4c:90:b9:66:de:76:29:a4: 69:6a:06:fb:e7:00:62:88:6d:5f:f0:29:68:5d:76:c3:46:91: a3:1a:c0:56 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxZBKr2a5XbytwJaxLSL/oMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIxOWI3YzE0NWUwYWNmODE0ODQxOGQ1NDI0N2RmZGRmZmMx OWZhNGMwHhcNMjUxMjA2MDIwMDU4WhcNMjUxMjA3MDIwMDU4WjAzMTEwLwYDVQQD EyhhYzRmN2JjOTRhYzc2ODNjY2VmOWQ3YTcyNDE3MGZhMzYyMmY1ZDU5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvP9fiV+s015ermcCfMZKwwqgRMyb 05mUkzM5/erayR777gxbGFM7NVdQ3U0pPwvdCBP1Hh5I0E8CoGe877evqlsQWF+H yVgN2tyJwn81RmEdMfQ0ZpOoM1rLIHpLYu0IKJnfby6dp+H8onvgHmXp0XQLLjQl rbtxRbg5xsr4ciMyccUV/awie9qM/7zweswqBlWB64yWbcfWByGYiFT9ZM7snMEf XhScXYF3Px/2CXDKN7+Xt6JAhV7WmsFQSfJuKM5PCd6AFhsd1c6G9b3ocqmIwEZk SAS7rZ/MZ7Ye7Y3AfnCC//CXwSosqoarz98GYOdqMg+GuYt2oxJYBbCNTQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKxPe8lKx2g8zvnXpyQXD6NiL11ZMB8GA1UdIwQY MBaAFCGbfBReCs+BSEGNVCR9/d/8GfpMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSVp0OEZGNEt6NEZJUVkxVUpIMzkzX3daLWt3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNS9mYTEwMDQtZTQ1MC00MWVjLTlkNWUt NGExZjdjMWJkZjc4LzEvSVp0OEZGNEt6NEZJUVkxVUpIMzkzX3daLWt3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNS9mYTEwMDQtZTQ1MC00MWVjLTlkNWUtNGExZjdjMWJkZjc4 LzEvSVp0OEZGNEt6NEZJUVkxVUpIMzkzX3daLWt3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVI8jpI/o QhBqmVwxNVBqURMzP8FUvc9Mn++ld7b5RYkQVFQVFwnMlu6luBJr6EBTxikuXSEh Fyhqm2/pJmfRxgkKliVOB6VfKEGYcYt7d1fElMiSwRiy+2uoErnobNZoi7D5cj8O DjpIQuRozSDY+8AGTcUEU/wsBIj7ApDw2bQaVya+sIQ+DxthJharYEuZr157lwVJ MCu2xOyrentSKXgoZCR0VPmGPHaIn1DxLkegTjAzjIWCu9uZEDCfp2oj4Bx3eq3f OzpJCQn2onFnddDD6GSzyoMYXawB/sM9wKk9PEyQuWbedimkaWoG++cAYohtX/Ap aF12w0aRoxrAVg== -----END CERTIFICATE-----Generated at Sat Dec 6 07:58:31 2025 by rpki-client