This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/dbe446-9da3-4854-b5d3-25a38a246fa2/1/i0LHUqmwmDEos9KV5F6hazPuffk.mft File: i0LHUqmwmDEos9KV5F6hazPuffk.mft (raw, json) Hash identifier: q7TFVxlIizoFcHwtft9n7M2dRLYwtJhtu1od9ZRvRGo= Subject key identifier: 9B:7C:29:6A:68:60:01:C4:D7:B1:90:4F:25:44:DD:74:3A:07:91:FE Authority key identifier: 8B:42:C7:52:A9:B0:98:31:28:B3:D2:95:E4:5E:A1:6B:33:EE:7D:F9 Certificate issuer: /CN=8b42c752a9b0983128b3d295e45ea16b33ee7df9 Certificate serial: 019AF16487B5D64574D1FA75C65816957381 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i0LHUqmwmDEos9KV5F6hazPuffk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/dbe446-9da3-4854-b5d3-25a38a246fa2/1/i0LHUqmwmDEos9KV5F6hazPuffk.mft Manifest number: 1762 Signing time: Sat 06 Dec 2025 02:01:28 +0000 Manifest this update: Sat 06 Dec 2025 02:01:28 +0000 Manifest next update: Sun 07 Dec 2025 02:01:28 +0000 Files and hashes: 1: deCTZwf8Lo4tPBt2V0GwD8QTdjQ.roa (hash: FyKYzrCJB3LXbVhWQRcS/ZI/wI5zOqLIDpvmKLMGaw0=) 2: i0LHUqmwmDEos9KV5F6hazPuffk.crl (hash: 8INrtrE83oOTcKrQuAR6Jzx6boj2mPrtraii46qyDSw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/dbe446-9da3-4854-b5d3-25a38a246fa2/1/i0LHUqmwmDEos9KV5F6hazPuffk.crl rsync://rpki.ripe.net/repository/DEFAULT/f6/dbe446-9da3-4854-b5d3-25a38a246fa2/1/i0LHUqmwmDEos9KV5F6hazPuffk.mft rsync://rpki.ripe.net/repository/DEFAULT/i0LHUqmwmDEos9KV5F6hazPuffk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:64:87:b5:d6:45:74:d1:fa:75:c6:58:16:95:73:81 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8b42c752a9b0983128b3d295e45ea16b33ee7df9 Validity Not Before: Dec 6 02:01:28 2025 GMT Not After : Dec 7 02:01:28 2025 GMT Subject: CN=9b7c296a686001c4d7b1904f2544dd743a0791fe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:5a:1f:b8:6c:86:3b:38:29:7b:a2:c8:3d:c8: 28:d2:42:e4:c0:a2:71:d9:89:35:6f:59:fa:df:88: c8:b9:c1:f9:28:43:73:04:d9:e5:cd:16:3f:8b:85: 86:4c:71:7f:2a:a3:59:7c:b0:8d:17:88:b3:9f:6b: 47:ab:8e:07:f3:4c:e1:ca:8a:dd:75:dd:cd:f7:9b: 1a:2c:96:a8:70:74:43:bc:e6:38:d2:45:08:ef:b4: e2:2d:28:cd:2c:ee:23:26:3d:ad:ee:c7:b6:a2:25: 6a:7b:3f:61:f5:dc:d0:a9:13:a4:07:3d:4e:4c:9c: bc:2d:6e:6d:3e:ba:d0:0b:27:10:7d:3e:0b:95:88: 8c:f6:13:5b:88:f3:fd:08:dc:0c:22:e5:11:82:e9: ab:65:a8:7c:7e:69:d3:49:f9:c8:fb:b5:4e:05:fa: 4c:96:76:2a:b1:78:eb:65:17:23:2b:6d:80:03:30: 45:21:42:c2:8c:e3:73:17:8d:4c:9c:6e:f5:6e:81: a6:a2:b8:4c:90:66:45:25:41:79:c1:60:6a:ec:3d: ac:ce:be:f8:ff:e6:13:4c:57:cc:c5:82:f6:03:2b: 12:15:64:6c:ed:be:57:c1:ed:8c:71:b9:2a:13:4d: ec:09:12:45:8b:8c:52:17:c6:05:95:14:31:fd:11: b0:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:7C:29:6A:68:60:01:C4:D7:B1:90:4F:25:44:DD:74:3A:07:91:FE X509v3 Authority Key Identifier: keyid:8B:42:C7:52:A9:B0:98:31:28:B3:D2:95:E4:5E:A1:6B:33:EE:7D:F9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i0LHUqmwmDEos9KV5F6hazPuffk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/dbe446-9da3-4854-b5d3-25a38a246fa2/1/i0LHUqmwmDEos9KV5F6hazPuffk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/dbe446-9da3-4854-b5d3-25a38a246fa2/1/i0LHUqmwmDEos9KV5F6hazPuffk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 97:a0:55:d8:aa:f7:9a:0e:fd:df:a6:c2:60:62:a5:41:2b:4e: 48:27:e8:e6:2b:08:d3:02:e0:a0:5d:24:23:0a:48:fe:13:7c: 0b:e6:24:e2:1d:89:26:51:54:35:5e:73:d0:ec:6b:32:ad:d5: 5d:4a:1d:f8:be:f8:8b:bc:2d:29:1f:78:bb:da:89:a4:28:34: c1:c8:b4:6c:e7:79:64:9d:31:85:28:58:fe:bb:39:0b:80:b5: 63:e4:b9:a2:00:f2:5d:df:33:9e:ba:3a:fb:c2:f2:5d:c8:8a: f9:55:46:20:4d:58:88:ae:16:9d:e7:38:5b:d6:33:70:0f:1d: f0:43:e4:b1:bd:b7:9d:bf:0b:17:6e:df:a2:04:9d:3e:97:f5: 63:7c:23:ed:47:ad:61:e5:2b:f0:ef:d3:80:77:2d:4b:a0:b0: 23:eb:58:ff:e2:b3:58:99:c8:19:72:6a:23:ed:15:84:b4:e3: ca:15:ad:85:e6:95:8a:28:1c:87:e0:a9:56:31:d0:99:5c:7d: 2b:60:ea:cb:f7:c4:49:df:77:31:49:d2:8b:2b:8b:24:79:ef: 98:f6:33:1a:18:f9:65:d0:57:1a:09:86:bf:57:80:92:ce:b5: 60:c2:91:93:b7:be:fb:fa:f3:17:d4:95:23:0e:a1:10:53:3f: e8:65:eb:50 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxZIe11kV00fp1xlgWlXOBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhiNDJjNzUyYTliMDk4MzEyOGIzZDI5NWU0NWVhMTZiMzNl ZTdkZjkwHhcNMjUxMjA2MDIwMTI4WhcNMjUxMjA3MDIwMTI4WjAzMTEwLwYDVQQD Eyg5YjdjMjk2YTY4NjAwMWM0ZDdiMTkwNGYyNTQ0ZGQ3NDNhMDc5MWZlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvlofuGyGOzgpe6LIPcgo0kLkwKJx 2Yk1b1n634jIucH5KENzBNnlzRY/i4WGTHF/KqNZfLCNF4izn2tHq44H80zhyord dd3N95saLJaocHRDvOY40kUI77TiLSjNLO4jJj2t7se2oiVqez9h9dzQqROkBz1O TJy8LW5tPrrQCycQfT4LlYiM9hNbiPP9CNwMIuURgumrZah8fmnTSfnI+7VOBfpM lnYqsXjrZRcjK22AAzBFIULCjONzF41MnG71boGmorhMkGZFJUF5wWBq7D2szr74 /+YTTFfMxYL2AysSFWRs7b5Xwe2McbkqE03sCRJFi4xSF8YFlRQx/RGw2QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJt8KWpoYAHE17GQTyVE3XQ6B5H+MB8GA1UdIwQY MBaAFItCx1KpsJgxKLPSleReoWsz7n35MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaTBMSFVxbXdtREVvczlLVjVGNmhhelB1ZmZrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNi9kYmU0NDYtOWRhMy00ODU0LWI1ZDMt MjVhMzhhMjQ2ZmEyLzEvaTBMSFVxbXdtREVvczlLVjVGNmhhelB1ZmZrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNi9kYmU0NDYtOWRhMy00ODU0LWI1ZDMtMjVhMzhhMjQ2ZmEy LzEvaTBMSFVxbXdtREVvczlLVjVGNmhhelB1ZmZrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAl6BV2Kr3 mg7936bCYGKlQStOSCfo5isI0wLgoF0kIwpI/hN8C+Yk4h2JJlFUNV5z0OxrMq3V XUod+L74i7wtKR94u9qJpCg0wci0bOd5ZJ0xhShY/rs5C4C1Y+S5ogDyXd8znro6 +8LyXciK+VVGIE1YiK4Wnec4W9YzcA8d8EPksb23nb8LF27fogSdPpf1Y3wj7Uet YeUr8O/TgHctS6CwI+tY/+KzWJnIGXJqI+0VhLTjyhWtheaViigch+CpVjHQmVx9 K2Dqy/fESd93MUnSiyuLJHnvmPYzGhj5ZdBXGgmGv1eAks61YMKRk7e++/rzF9SV Iw6hEFM/6GXrUA== -----END CERTIFICATE-----Generated at Sat Dec 6 09:21:36 2025 by rpki-client