This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/9b4900-085a-4a0e-a98f-c6db34c2f7e9/1/IiT9ZQA8OUkKvqqeHv5fICRtx3s.mft File: IiT9ZQA8OUkKvqqeHv5fICRtx3s.mft (raw, json) Hash identifier: /PDgd1w0yQ6fIg9tFeV2RFQNyJQfocfxCc4x3vmH4TY= Subject key identifier: 57:54:71:87:A5:3B:4D:A6:58:EB:8A:71:E7:53:BF:8B:21:50:BC:F2 Authority key identifier: 22:24:FD:65:00:3C:39:49:0A:BE:AA:9E:1E:FE:5F:20:24:6D:C7:7B Certificate issuer: /CN=2224fd65003c39490abeaa9e1efe5f20246dc77b Certificate serial: 019AF31D0EC85183C9DA614FDBDDAB947B5A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IiT9ZQA8OUkKvqqeHv5fICRtx3s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/9b4900-085a-4a0e-a98f-c6db34c2f7e9/1/IiT9ZQA8OUkKvqqeHv5fICRtx3s.mft Manifest number: 0DDE Signing time: Sat 06 Dec 2025 10:02:38 +0000 Manifest this update: Sat 06 Dec 2025 10:02:38 +0000 Manifest next update: Sun 07 Dec 2025 10:02:38 +0000 Files and hashes: 1: IiT9ZQA8OUkKvqqeHv5fICRtx3s.crl (hash: lZDcu5B2bTfIq0d0Nk1vrLcMGEOcnB5Envm/WKEGBnc=) 2: gJhF5evxe8g-iDe3hBXACq-nKPk.roa (hash: qM5+n5uw27ndltKhnl7N0lO0fW10CmbET7TyhvcxHok=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/9b4900-085a-4a0e-a98f-c6db34c2f7e9/1/IiT9ZQA8OUkKvqqeHv5fICRtx3s.crl rsync://rpki.ripe.net/repository/DEFAULT/fe/9b4900-085a-4a0e-a98f-c6db34c2f7e9/1/IiT9ZQA8OUkKvqqeHv5fICRtx3s.mft rsync://rpki.ripe.net/repository/DEFAULT/IiT9ZQA8OUkKvqqeHv5fICRtx3s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 10:02:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1d:0e:c8:51:83:c9:da:61:4f:db:dd:ab:94:7b:5a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2224fd65003c39490abeaa9e1efe5f20246dc77b Validity Not Before: Dec 6 10:02:38 2025 GMT Not After : Dec 7 10:02:38 2025 GMT Subject: CN=57547187a53b4da658eb8a71e753bf8b2150bcf2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:d2:3a:ef:34:2b:e9:e8:51:5c:8f:0f:8e:41: 03:7e:9a:2e:70:4f:d7:4d:af:9a:4f:be:7f:6c:02: 60:a0:8a:e5:3b:be:f2:34:01:4e:56:3d:71:56:40: 64:d4:28:f1:ba:44:8b:56:fa:c3:30:5a:a4:09:8a: d1:b4:85:7c:dd:18:67:7b:47:95:41:56:7a:4b:91: 58:d0:c9:fc:9f:eb:d1:c1:95:c2:65:d5:42:ec:c3: 06:4c:11:d1:31:94:f5:c1:9d:76:e9:11:41:6a:57: 1a:6e:12:53:b7:1e:2a:a9:0b:43:53:bc:4a:66:a2: 90:da:90:88:f6:98:3e:19:0b:c4:9b:37:f0:39:5c: 40:7b:2f:82:f5:04:2a:19:80:d6:4a:e2:4c:01:3c: 8f:05:ba:79:d5:76:fc:a3:3d:f7:5b:d0:08:bb:27: f2:4c:a8:d4:ec:16:3f:10:18:94:2f:8a:9c:fc:57: 1c:99:a7:b6:c2:70:66:37:98:c2:30:11:51:92:cc: c9:32:f3:6c:4c:68:fd:21:29:98:0d:62:55:23:25: 4d:37:50:e1:1a:7c:59:90:42:b5:c4:52:82:03:40: 11:fc:25:e0:7f:38:2e:db:22:98:e0:0d:7a:d3:f0: b1:aa:93:0f:07:27:f0:a8:32:fe:96:15:3e:84:ef: 44:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:54:71:87:A5:3B:4D:A6:58:EB:8A:71:E7:53:BF:8B:21:50:BC:F2 X509v3 Authority Key Identifier: keyid:22:24:FD:65:00:3C:39:49:0A:BE:AA:9E:1E:FE:5F:20:24:6D:C7:7B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IiT9ZQA8OUkKvqqeHv5fICRtx3s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/9b4900-085a-4a0e-a98f-c6db34c2f7e9/1/IiT9ZQA8OUkKvqqeHv5fICRtx3s.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/9b4900-085a-4a0e-a98f-c6db34c2f7e9/1/IiT9ZQA8OUkKvqqeHv5fICRtx3s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 56:4b:7e:9e:d0:82:1c:9c:79:98:54:dd:aa:79:1f:1c:3b:6d: 9a:c5:3b:7d:69:26:b1:d6:ae:8e:7b:51:55:6c:3f:ee:41:98: 46:65:37:5c:79:8a:1d:dc:6e:4e:2e:b6:5a:58:09:7f:ea:a3: eb:51:f4:c1:95:9e:a5:61:96:79:c2:19:b3:b4:a8:d3:3d:d8: 64:8d:c0:34:c6:33:b3:fe:78:c2:60:fd:51:ee:68:a2:2f:9a: f4:72:e9:21:de:0e:c9:4b:ca:ef:b3:e5:90:27:92:4f:e7:7c: 5a:6a:b4:b9:5f:04:f2:4d:db:bc:12:c9:d2:cc:1e:ab:cb:e3: d9:ad:55:c4:b1:6b:de:53:a8:cd:42:f3:29:9a:52:c7:1a:34: 13:36:75:ba:79:f5:6c:37:56:cb:cb:66:cd:d2:2c:d4:eb:3b: 15:a2:1c:09:55:f9:62:66:f7:e2:e3:c3:3e:d8:3a:96:88:b6: 77:e8:b2:65:49:e1:ad:64:3a:e6:5d:90:09:5e:2b:dc:42:85: 53:1b:f3:6f:6c:0e:0a:b1:42:d6:48:9e:94:ed:f2:43:54:2f: 84:a2:d7:82:d7:9f:e5:41:23:f4:cc:cb:3c:7b:d4:34:24:2d: 63:29:cc:c8:45:4b:8d:b6:27:dc:e1:fe:74:a3:7d:88:76:cb: d3:99:83:e8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzHQ7IUYPJ2mFP292rlHtaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIyMjRmZDY1MDAzYzM5NDkwYWJlYWE5ZTFlZmU1ZjIwMjQ2 ZGM3N2IwHhcNMjUxMjA2MTAwMjM4WhcNMjUxMjA3MTAwMjM4WjAzMTEwLwYDVQQD Eyg1NzU0NzE4N2E1M2I0ZGE2NThlYjhhNzFlNzUzYmY4YjIxNTBiY2YyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAndI67zQr6ehRXI8PjkEDfpoucE/X Ta+aT75/bAJgoIrlO77yNAFOVj1xVkBk1CjxukSLVvrDMFqkCYrRtIV83Rhne0eV QVZ6S5FY0Mn8n+vRwZXCZdVC7MMGTBHRMZT1wZ126RFBalcabhJTtx4qqQtDU7xK ZqKQ2pCI9pg+GQvEmzfwOVxAey+C9QQqGYDWSuJMATyPBbp51Xb8oz33W9AIuyfy TKjU7BY/EBiUL4qc/Fccmae2wnBmN5jCMBFRkszJMvNsTGj9ISmYDWJVIyVNN1Dh GnxZkEK1xFKCA0AR/CXgfzgu2yKY4A160/CxqpMPByfwqDL+lhU+hO9EfQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFdUcYelO02mWOuKcedTv4shULzyMB8GA1UdIwQY MBaAFCIk/WUAPDlJCr6qnh7+XyAkbcd7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSWlUOVpRQThPVWtLdnFxZUh2NWZJQ1J0eDNzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS85YjQ5MDAtMDg1YS00YTBlLWE5OGYt YzZkYjM0YzJmN2U5LzEvSWlUOVpRQThPVWtLdnFxZUh2NWZJQ1J0eDNzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZS85YjQ5MDAtMDg1YS00YTBlLWE5OGYtYzZkYjM0YzJmN2U5 LzEvSWlUOVpRQThPVWtLdnFxZUh2NWZJQ1J0eDNzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVkt+ntCC HJx5mFTdqnkfHDttmsU7fWkmsdaujntRVWw/7kGYRmU3XHmKHdxuTi62WlgJf+qj 61H0wZWepWGWecIZs7So0z3YZI3ANMYzs/54wmD9Ue5ooi+a9HLpId4OyUvK77Pl kCeST+d8Wmq0uV8E8k3bvBLJ0sweq8vj2a1VxLFr3lOozULzKZpSxxo0EzZ1unn1 bDdWy8tmzdIs1Os7FaIcCVX5Ymb34uPDPtg6loi2d+iyZUnhrWQ65l2QCV4r3EKF Uxvzb2wOCrFC1kielO3yQ1QvhKLXgtef5UEj9MzLPHvUNCQtYynMyEVLjbYn3OH+ dKN9iHbL05mD6A== -----END CERTIFICATE-----Generated at Sat Dec 6 17:30:37 2025 by rpki-client