This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/079ddb-820a-4d51-bf8d-8d11ead3af8c/1/iK09YNkgV_8PoBH0UMNkbjUtpdg.mft File: iK09YNkgV_8PoBH0UMNkbjUtpdg.mft (raw, json) Hash identifier: AoCX03v4NQeIA2bZl7HHb6l1Lq+MI+8xqtvkuB+4tGQ= Subject key identifier: 70:E3:C0:02:F2:F3:66:9A:31:14:EF:AE:99:9E:36:4D:42:28:E4:E3 Authority key identifier: 88:AD:3D:60:D9:20:57:FF:0F:A0:11:F4:50:C3:64:6E:35:2D:A5:D8 Certificate issuer: /CN=88ad3d60d92057ff0fa011f450c3646e352da5d8 Certificate serial: 019AF3C08841C93623B9C29C1022A365813F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iK09YNkgV_8PoBH0UMNkbjUtpdg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/079ddb-820a-4d51-bf8d-8d11ead3af8c/1/iK09YNkgV_8PoBH0UMNkbjUtpdg.mft Manifest number: 03B6 Signing time: Sat 06 Dec 2025 13:01:12 +0000 Manifest this update: Sat 06 Dec 2025 13:01:12 +0000 Manifest next update: Sun 07 Dec 2025 13:01:12 +0000 Files and hashes: 1: ZbzYnCdTKy9eNC3OK0DEdLUOyKk.roa (hash: oL/nHAdw2PWuZlbLqbaKwj0TlvoNl+Sz5bzNx/L6zWY=) 2: iK09YNkgV_8PoBH0UMNkbjUtpdg.crl (hash: aQnC+TpdLtjBJ8i4IYy04BWtbGypJVxLqCYOdKTzEAU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/079ddb-820a-4d51-bf8d-8d11ead3af8c/1/iK09YNkgV_8PoBH0UMNkbjUtpdg.crl rsync://rpki.ripe.net/repository/DEFAULT/fc/079ddb-820a-4d51-bf8d-8d11ead3af8c/1/iK09YNkgV_8PoBH0UMNkbjUtpdg.mft rsync://rpki.ripe.net/repository/DEFAULT/iK09YNkgV_8PoBH0UMNkbjUtpdg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:01:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:c0:88:41:c9:36:23:b9:c2:9c:10:22:a3:65:81:3f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=88ad3d60d92057ff0fa011f450c3646e352da5d8 Validity Not Before: Dec 6 13:01:12 2025 GMT Not After : Dec 7 13:01:12 2025 GMT Subject: CN=70e3c002f2f3669a3114efae999e364d4228e4e3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:c2:7f:a2:63:e4:5a:c9:10:51:e3:e9:df:76: 64:c7:03:df:9e:4b:3c:56:c7:3c:1f:77:97:51:92: 57:07:03:d4:b3:0a:67:5d:fd:90:e5:d7:76:3c:1c: b8:b8:0e:57:52:7c:f0:ad:46:d5:57:31:56:64:79: 7a:44:8e:72:60:3c:46:16:63:f0:12:3e:07:ea:84: be:2e:6b:a1:fd:97:8c:ab:bb:3d:74:43:90:34:ba: 11:c6:f9:50:7d:1c:34:25:b3:0b:0b:55:ec:7e:0a: 71:82:19:11:5e:de:66:92:35:98:a2:42:4c:9f:04: c4:c2:6a:76:68:99:fe:25:09:10:2b:0f:51:48:39: fa:51:0b:35:12:29:6b:82:e0:f9:8a:c2:2a:d2:17: 90:e5:80:f1:54:60:35:09:0f:35:fc:88:86:b4:30: c2:8a:b0:8c:ac:dd:21:e6:ca:97:90:7f:72:ad:3f: 54:1c:c8:f6:12:e9:22:86:ec:50:40:24:c2:68:41: a8:81:f8:71:64:f3:60:15:29:82:eb:44:e9:8b:90: 35:f3:56:85:37:76:dd:54:3a:a2:a8:01:01:b1:e9: 93:b6:a7:d5:65:ed:12:97:f4:f1:27:e2:84:8e:38: 03:26:dd:70:94:3a:ab:33:a9:61:af:4d:1a:97:f3: 20:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:E3:C0:02:F2:F3:66:9A:31:14:EF:AE:99:9E:36:4D:42:28:E4:E3 X509v3 Authority Key Identifier: keyid:88:AD:3D:60:D9:20:57:FF:0F:A0:11:F4:50:C3:64:6E:35:2D:A5:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iK09YNkgV_8PoBH0UMNkbjUtpdg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/079ddb-820a-4d51-bf8d-8d11ead3af8c/1/iK09YNkgV_8PoBH0UMNkbjUtpdg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/079ddb-820a-4d51-bf8d-8d11ead3af8c/1/iK09YNkgV_8PoBH0UMNkbjUtpdg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a5:4f:ee:a8:2f:16:bc:b3:26:38:58:ed:b6:fc:1f:52:67:93: 59:ab:81:83:f5:76:39:6a:59:fe:f5:a7:5f:0f:75:b4:ef:41: 2b:af:84:9d:a2:83:b4:a9:36:97:8e:0a:bf:0a:96:3c:31:47: e6:3e:0a:f0:2f:5f:47:74:dd:29:55:6d:3d:c7:ea:02:9a:7c: cc:92:f0:71:c1:96:92:04:13:22:14:d8:30:4b:42:8f:0e:1a: ab:a9:63:49:23:79:a8:08:e8:3e:9e:cc:82:fe:3f:81:e4:2c: ee:e8:81:ec:e6:e9:d1:bd:07:e9:39:74:a0:ff:cd:a7:72:47: d0:62:6d:52:7e:29:ac:ed:eb:1f:68:2d:13:d2:8d:3c:04:28: 5d:16:79:0a:a1:cf:59:80:a3:f1:0c:ec:1b:d1:77:16:a8:74: 8c:54:65:42:b4:5f:10:af:38:ac:c8:ef:e4:d0:f0:70:de:a1: 66:ac:98:28:ce:84:db:16:de:8f:5d:d7:45:7e:89:8e:2a:b5: 99:57:eb:3f:12:6e:64:21:7b:4b:50:1a:b7:75:8e:82:f2:54: ac:38:fd:16:52:8e:82:fd:d9:a6:39:90:96:d5:bd:d7:65:b6: f7:24:13:26:61:90:b9:93:01:8c:1c:3b:27:13:f5:37:02:5a: bf:ff:fa:48 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzwIhByTYjucKcECKjZYE/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg4YWQzZDYwZDkyMDU3ZmYwZmEwMTFmNDUwYzM2NDZlMzUy ZGE1ZDgwHhcNMjUxMjA2MTMwMTEyWhcNMjUxMjA3MTMwMTEyWjAzMTEwLwYDVQQD Eyg3MGUzYzAwMmYyZjM2NjlhMzExNGVmYWU5OTllMzY0ZDQyMjhlNGUzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAusJ/omPkWskQUePp33ZkxwPfnks8 Vsc8H3eXUZJXBwPUswpnXf2Q5dd2PBy4uA5XUnzwrUbVVzFWZHl6RI5yYDxGFmPw Ej4H6oS+Lmuh/ZeMq7s9dEOQNLoRxvlQfRw0JbMLC1XsfgpxghkRXt5mkjWYokJM nwTEwmp2aJn+JQkQKw9RSDn6UQs1EilrguD5isIq0heQ5YDxVGA1CQ81/IiGtDDC irCMrN0h5sqXkH9yrT9UHMj2EukihuxQQCTCaEGogfhxZPNgFSmC60Tpi5A181aF N3bdVDqiqAEBsemTtqfVZe0Sl/TxJ+KEjjgDJt1wlDqrM6lhr00al/MgKwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHDjwALy82aaMRTvrpmeNk1CKOTjMB8GA1UdIwQY MBaAFIitPWDZIFf/D6AR9FDDZG41LaXYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaUswOVlOa2dWXzhQb0JIMFVNTmtialV0cGRnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYy8wNzlkZGItODIwYS00ZDUxLWJmOGQt OGQxMWVhZDNhZjhjLzEvaUswOVlOa2dWXzhQb0JIMFVNTmtialV0cGRnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYy8wNzlkZGItODIwYS00ZDUxLWJmOGQtOGQxMWVhZDNhZjhj LzEvaUswOVlOa2dWXzhQb0JIMFVNTmtialV0cGRnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApU/uqC8W vLMmOFjttvwfUmeTWauBg/V2OWpZ/vWnXw91tO9BK6+EnaKDtKk2l44KvwqWPDFH 5j4K8C9fR3TdKVVtPcfqApp8zJLwccGWkgQTIhTYMEtCjw4aq6ljSSN5qAjoPp7M gv4/geQs7uiB7Obp0b0H6Tl0oP/Np3JH0GJtUn4prO3rH2gtE9KNPAQoXRZ5CqHP WYCj8QzsG9F3Fqh0jFRlQrRfEK84rMjv5NDwcN6hZqyYKM6E2xbej13XRX6Jjiq1 mVfrPxJuZCF7S1Aat3WOgvJUrDj9FlKOgv3ZpjmQltW912W29yQTJmGQuZMBjBw7 JxP1NwJav//6SA== -----END CERTIFICATE-----Generated at Sat Dec 6 20:20:16 2025 by rpki-client