This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/425149-9c68-41fb-8035-d76c8c739861/1/itJAYD7G681i9y1G8dwAy34fCy4.mft File: itJAYD7G681i9y1G8dwAy34fCy4.mft (raw, json) Hash identifier: 8Hbw80G0CyXcaYZo3ujXGsaOpHkQFIKv0dHWruNnJDU= Subject key identifier: A4:77:D3:8A:97:C3:47:A4:24:2F:F4:06:FD:B0:AB:31:05:92:21:91 Authority key identifier: 8A:D2:40:60:3E:C6:EB:CD:62:F7:2D:46:F1:DC:00:CB:7E:1F:0B:2E Certificate issuer: /CN=8ad240603ec6ebcd62f72d46f1dc00cb7e1f0b2e Certificate serial: 019AF31B88317C3FE38D1C108414CE8A2805 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/itJAYD7G681i9y1G8dwAy34fCy4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/425149-9c68-41fb-8035-d76c8c739861/1/itJAYD7G681i9y1G8dwAy34fCy4.mft Manifest number: 1767 Signing time: Sat 06 Dec 2025 10:00:59 +0000 Manifest this update: Sat 06 Dec 2025 10:00:59 +0000 Manifest next update: Sun 07 Dec 2025 10:00:59 +0000 Files and hashes: 1: 53I3Xwp10sSBL-xtc_jqMRAMZEE.roa (hash: 5EdJdIMmiKFhoj2g+ghy+33i5Mlz/mFCHlU2tz6Caf0=) 2: WIThVUQPtnkqQGydyKr4DwKXGUc.roa (hash: ZG07WmGePqEgXeU18ulf3ZqT0pP1PSE97ftBth4OPug=) 3: WcvcGB5_rIhp6N6ub_yEOU1frVM.roa (hash: SAdoS4J2d6uhrm3KFzHcrPvgGi6wPamf1S8poWnS5sg=) 4: cJgTWrMWwO4cBqHTiI8A-Rbr9t4.roa (hash: +22ciZigEHHnJmjL2vAXhnyOPmbAxXckxCOmW9W102s=) 5: itJAYD7G681i9y1G8dwAy34fCy4.crl (hash: Y59Ofn0fogvuw2btptpL8+7WFST1SMwSuZ08Wq1/6Fo=) 6: pOdO9Se2ice1mi6CizmcbokQTm4.roa (hash: vWI5ZOqTV/1a1r4zGntVeUM1tDGMCfxq337Ldn/5HXA=) 7: rD1DyuXlotr5xosPSyeJDExCkk4.roa (hash: vqY5iQLurSqfXlXZ7xp9Cs7NZG2x1ohqMIKv8p8BnDM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/425149-9c68-41fb-8035-d76c8c739861/1/itJAYD7G681i9y1G8dwAy34fCy4.crl rsync://rpki.ripe.net/repository/DEFAULT/f7/425149-9c68-41fb-8035-d76c8c739861/1/itJAYD7G681i9y1G8dwAy34fCy4.mft rsync://rpki.ripe.net/repository/DEFAULT/itJAYD7G681i9y1G8dwAy34fCy4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 10:00:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1b:88:31:7c:3f:e3:8d:1c:10:84:14:ce:8a:28:05 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8ad240603ec6ebcd62f72d46f1dc00cb7e1f0b2e Validity Not Before: Dec 6 10:00:59 2025 GMT Not After : Dec 7 10:00:59 2025 GMT Subject: CN=a477d38a97c347a4242ff406fdb0ab3105922191 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:d1:10:22:e9:5b:ed:c7:37:56:bb:c2:8e:95: 83:37:29:6f:f5:61:6f:36:a7:fe:44:32:c0:37:29: 0d:3c:c8:c7:4a:12:2e:b9:a3:a4:60:94:bf:ab:39: 76:04:1c:2c:80:eb:31:10:7e:66:ee:20:26:0d:7e: 25:b0:cc:97:24:4a:d3:34:27:c3:ce:2b:b0:96:2d: 86:58:88:b7:c4:a8:14:ac:51:10:4c:53:ca:cc:59: 39:18:78:25:c7:a6:9e:a9:4e:28:68:73:28:e9:c6: 43:3c:81:22:bd:2d:19:42:b6:e4:bf:62:83:b1:f4: 0b:98:f3:e6:c9:1d:5e:ea:39:2b:6a:fe:80:8d:d4: b0:2f:67:4b:e6:55:f3:86:6c:49:fb:b4:af:97:bd: 4d:32:a1:4f:ab:fb:c4:f9:bb:9f:85:ef:b8:c8:c5: 6e:9b:e7:54:f3:7e:cd:ed:77:9c:98:15:19:d8:b7: 76:d7:a5:54:85:76:b4:17:56:7d:b2:3a:7f:3d:32: 5a:c7:b6:6b:26:ab:d8:a4:2d:5e:db:97:90:a0:0d: 1a:8c:16:bf:1a:33:ad:29:a3:5e:1d:0c:42:66:ac: 9f:69:38:cb:66:27:27:e5:99:48:ad:65:a9:ce:d5: db:1f:81:ed:e0:7b:f5:42:d7:c9:c6:ea:91:6d:8c: 98:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:77:D3:8A:97:C3:47:A4:24:2F:F4:06:FD:B0:AB:31:05:92:21:91 X509v3 Authority Key Identifier: keyid:8A:D2:40:60:3E:C6:EB:CD:62:F7:2D:46:F1:DC:00:CB:7E:1F:0B:2E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/itJAYD7G681i9y1G8dwAy34fCy4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/425149-9c68-41fb-8035-d76c8c739861/1/itJAYD7G681i9y1G8dwAy34fCy4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/425149-9c68-41fb-8035-d76c8c739861/1/itJAYD7G681i9y1G8dwAy34fCy4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4b:47:33:47:dc:19:de:ac:ed:ce:a9:9d:d4:61:ad:e0:d1:61: 3d:78:9f:db:22:df:80:f6:91:8d:12:f6:e1:10:f3:9a:eb:e5: 3e:ac:05:4c:57:4e:f2:01:42:47:28:1b:73:08:b2:e1:d7:11: 2c:9d:c0:3c:f9:03:d6:17:14:27:30:74:fe:ca:30:3f:c0:3a: 01:fb:4d:44:50:d6:73:3d:34:e8:a8:c6:4d:60:21:a1:99:9d: cc:34:85:94:97:68:0d:ea:e3:66:ba:54:6b:14:e9:66:02:2f: 35:7d:ce:27:e9:af:91:04:01:eb:b4:c3:80:68:b1:75:79:f6: 5d:40:a0:b6:b2:a6:8d:c0:af:53:e7:ee:a6:4f:0a:fa:f3:3a: b9:90:1f:48:60:89:01:00:6c:54:41:a2:78:d6:f1:dc:3c:f3: 11:50:30:92:de:58:92:46:79:8d:28:eb:7d:23:a8:9f:9b:73: fa:aa:76:de:a6:e4:74:9d:58:ce:d1:02:dd:50:1b:5b:38:4a: fa:7a:19:63:41:d6:bf:98:0b:c4:29:4f:ef:f1:e0:a4:da:fe: 37:e5:9b:08:e2:03:dc:52:2f:20:83:1c:06:c6:df:9a:e0:35: 0c:9b:c5:cb:2b:7a:2a:00:de:0e:e2:cc:4a:51:7e:44:7f:a7: dc:84:c1:41 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzG4gxfD/jjRwQhBTOiigFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhhZDI0MDYwM2VjNmViY2Q2MmY3MmQ0NmYxZGMwMGNiN2Ux ZjBiMmUwHhcNMjUxMjA2MTAwMDU5WhcNMjUxMjA3MTAwMDU5WjAzMTEwLwYDVQQD EyhhNDc3ZDM4YTk3YzM0N2E0MjQyZmY0MDZmZGIwYWIzMTA1OTIyMTkxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq9EQIulb7cc3VrvCjpWDNylv9WFv Nqf+RDLANykNPMjHShIuuaOkYJS/qzl2BBwsgOsxEH5m7iAmDX4lsMyXJErTNCfD ziuwli2GWIi3xKgUrFEQTFPKzFk5GHglx6aeqU4oaHMo6cZDPIEivS0ZQrbkv2KD sfQLmPPmyR1e6jkrav6AjdSwL2dL5lXzhmxJ+7Svl71NMqFPq/vE+bufhe+4yMVu m+dU837N7XecmBUZ2Ld216VUhXa0F1Z9sjp/PTJax7ZrJqvYpC1e25eQoA0ajBa/ GjOtKaNeHQxCZqyfaTjLZicn5ZlIrWWpztXbH4Ht4Hv1QtfJxuqRbYyYhwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKR304qXw0ekJC/0Bv2wqzEFkiGRMB8GA1UdIwQY MBaAFIrSQGA+xuvNYvctRvHcAMt+HwsuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaXRKQVlEN0c2ODFpOXkxRzhkd0F5MzRmQ3k0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNy80MjUxNDktOWM2OC00MWZiLTgwMzUt ZDc2YzhjNzM5ODYxLzEvaXRKQVlEN0c2ODFpOXkxRzhkd0F5MzRmQ3k0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNy80MjUxNDktOWM2OC00MWZiLTgwMzUtZDc2YzhjNzM5ODYx LzEvaXRKQVlEN0c2ODFpOXkxRzhkd0F5MzRmQ3k0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAS0czR9wZ 3qztzqmd1GGt4NFhPXif2yLfgPaRjRL24RDzmuvlPqwFTFdO8gFCRygbcwiy4dcR LJ3APPkD1hcUJzB0/sowP8A6AftNRFDWcz006KjGTWAhoZmdzDSFlJdoDerjZrpU axTpZgIvNX3OJ+mvkQQB67TDgGixdXn2XUCgtrKmjcCvU+fupk8K+vM6uZAfSGCJ AQBsVEGieNbx3DzzEVAwkt5YkkZ5jSjrfSOon5tz+qp23qbkdJ1YztEC3VAbWzhK +noZY0HWv5gLxClP7/HgpNr+N+WbCOID3FIvIIMcBsbfmuA1DJvFyyt6KgDeDuLM SlF+RH+n3ITBQQ== -----END CERTIFICATE-----Generated at Sat Dec 6 19:03:08 2025 by rpki-client