This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/b89704-4fd2-4e07-a039-66f56ef9ce26/1/iKeAc4uFOs_7q9sjkUxQ42Qh93M.mft File: iKeAc4uFOs_7q9sjkUxQ42Qh93M.mft (raw, json) Hash identifier: yCqnMfqJbZhSelOxYPlMJgcfnPeNSaVjcTgEid9ttkU= Subject key identifier: 7B:AF:9A:71:81:47:0A:19:A2:59:BD:71:ED:E8:C8:AE:B1:10:84:70 Authority key identifier: 88:A7:80:73:8B:85:3A:CF:FB:AB:DB:23:91:4C:50:E3:64:21:F7:73 Certificate issuer: /CN=88a780738b853acffbabdb23914c50e36421f773 Certificate serial: 019B3D5992BD471D966B14B815D842AEF236 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iKeAc4uFOs_7q9sjkUxQ42Qh93M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/b89704-4fd2-4e07-a039-66f56ef9ce26/1/iKeAc4uFOs_7q9sjkUxQ42Qh93M.mft Manifest number: 178A Signing time: Sat 20 Dec 2025 20:00:38 +0000 Manifest this update: Sat 20 Dec 2025 20:00:38 +0000 Manifest next update: Sun 21 Dec 2025 20:00:38 +0000 Files and hashes: 1: 0JBSKBByojNYZjOoZlphUB11hQs.roa (hash: 9bDpXvSUlNPWWMoYaJSQ0SO0EuZKnPkwfl5l8GKFytk=) 2: aKf7cpyzNQSyfw8b7-Pr38WCYnc.roa (hash: oRGD5ClevpyjAOYjV/aBq4YhQP42jPwVRjMhzooXQlg=) 3: iKeAc4uFOs_7q9sjkUxQ42Qh93M.crl (hash: GW7CHoDPYBgvKsVaT8utosdopfaoyjNMMOsCRA98+Qs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/b89704-4fd2-4e07-a039-66f56ef9ce26/1/iKeAc4uFOs_7q9sjkUxQ42Qh93M.crl rsync://rpki.ripe.net/repository/DEFAULT/0d/b89704-4fd2-4e07-a039-66f56ef9ce26/1/iKeAc4uFOs_7q9sjkUxQ42Qh93M.mft rsync://rpki.ripe.net/repository/DEFAULT/iKeAc4uFOs_7q9sjkUxQ42Qh93M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 19:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:59:92:bd:47:1d:96:6b:14:b8:15:d8:42:ae:f2:36 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=88a780738b853acffbabdb23914c50e36421f773 Validity Not Before: Dec 20 20:00:38 2025 GMT Not After : Dec 21 20:00:38 2025 GMT Subject: CN=7baf9a7181470a19a259bd71ede8c8aeb1108470 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:8a:d2:3c:06:ed:e4:4a:64:56:5a:3c:71:74: 5f:b1:c0:52:a0:16:77:7c:70:93:cf:5f:0b:b5:25: 64:8c:d0:a9:ef:9c:e1:43:61:1b:09:cb:ee:e0:2b: 9f:ed:31:f9:0b:54:13:40:91:f7:98:bd:4b:fb:4d: 20:07:b4:26:81:70:72:80:01:a7:d7:2e:d3:9a:be: d9:8d:2c:b2:45:85:9b:0e:19:94:97:41:56:f6:5b: e5:e7:c3:e9:5f:6a:63:eb:c6:7d:45:64:a2:05:53: 4e:d6:0e:74:d4:4b:d6:40:44:3e:f4:f9:52:60:ad: 40:dd:70:4e:e5:ed:7e:c2:24:e6:d2:78:18:82:c4: d7:b0:26:1c:fe:5c:f6:9d:ed:ba:1f:3a:49:f8:ad: 65:ff:37:a3:8f:cc:eb:bd:05:bc:ea:1d:46:3b:5d: 14:0a:3d:a2:cc:86:73:ce:42:d8:c5:03:cf:23:7d: 06:2f:93:ef:7c:b3:88:1f:05:7f:de:ff:87:92:5a: da:b4:6d:9b:1a:60:bc:5c:17:4d:8b:aa:61:e7:2b: e6:91:75:19:a0:8e:dd:20:2a:a3:45:3f:ab:68:ae: 0c:21:2c:4d:6d:a6:cc:36:48:02:9f:04:19:8f:89: 6f:7a:5e:a3:9e:fe:9c:e2:d2:b1:00:7a:5f:18:77: c3:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:AF:9A:71:81:47:0A:19:A2:59:BD:71:ED:E8:C8:AE:B1:10:84:70 X509v3 Authority Key Identifier: keyid:88:A7:80:73:8B:85:3A:CF:FB:AB:DB:23:91:4C:50:E3:64:21:F7:73 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iKeAc4uFOs_7q9sjkUxQ42Qh93M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/b89704-4fd2-4e07-a039-66f56ef9ce26/1/iKeAc4uFOs_7q9sjkUxQ42Qh93M.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/b89704-4fd2-4e07-a039-66f56ef9ce26/1/iKeAc4uFOs_7q9sjkUxQ42Qh93M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8b:5b:91:80:07:b3:e9:9b:3e:04:4e:a1:c3:6b:fb:d7:76:da: f9:1f:3e:1b:23:77:43:06:90:38:b5:a0:ac:55:c2:1d:bf:23: 52:6e:43:b2:77:10:cf:d2:0c:7f:8b:2f:9c:05:9c:7c:6b:17: 90:ed:7d:a2:7b:1e:17:1b:9d:1f:63:dc:a0:f9:22:2b:8d:53: ed:bf:3a:87:10:a3:de:4f:fb:b8:54:db:8e:fc:21:83:0b:f1: e7:ed:6b:1a:86:5f:82:82:66:dd:52:6b:74:75:12:e3:31:68: 41:71:e2:dc:c1:7b:63:0e:70:33:fc:dc:1f:ca:20:72:b4:e6: c3:aa:10:d7:0a:49:92:70:fd:d6:37:e5:a2:2b:59:31:75:13: 7e:5f:d6:50:63:d9:94:4f:05:b0:1e:fd:6d:3c:6a:59:4a:80: c7:3a:fe:9c:e6:83:e7:9e:c5:d2:6c:7f:7a:37:20:cd:b6:11: 57:61:52:73:e1:1c:a1:41:2d:5b:d0:41:13:b0:cb:7e:52:36: 7b:01:3d:e0:91:6d:89:0c:f5:63:0a:5f:e0:5c:34:fc:16:bf: 44:71:24:56:77:42:fb:81:c2:fa:38:b5:ec:7e:42:11:c0:b7: 63:b4:71:17:db:a0:6f:99:45:53:a0:6f:20:22:68:ea:6c:37: fa:36:34:96 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9WZK9Rx2WaxS4FdhCrvI2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg4YTc4MDczOGI4NTNhY2ZmYmFiZGIyMzkxNGM1MGUzNjQy MWY3NzMwHhcNMjUxMjIwMjAwMDM4WhcNMjUxMjIxMjAwMDM4WjAzMTEwLwYDVQQD Eyg3YmFmOWE3MTgxNDcwYTE5YTI1OWJkNzFlZGU4YzhhZWIxMTA4NDcwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5orSPAbt5EpkVlo8cXRfscBSoBZ3 fHCTz18LtSVkjNCp75zhQ2EbCcvu4Cuf7TH5C1QTQJH3mL1L+00gB7QmgXBygAGn 1y7Tmr7ZjSyyRYWbDhmUl0FW9lvl58PpX2pj68Z9RWSiBVNO1g501EvWQEQ+9PlS YK1A3XBO5e1+wiTm0ngYgsTXsCYc/lz2ne26HzpJ+K1l/zejj8zrvQW86h1GO10U Cj2izIZzzkLYxQPPI30GL5PvfLOIHwV/3v+HklratG2bGmC8XBdNi6ph5yvmkXUZ oI7dICqjRT+raK4MISxNbabMNkgCnwQZj4lvel6jnv6c4tKxAHpfGHfDAwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHuvmnGBRwoZolm9ce3oyK6xEIRwMB8GA1UdIwQY MBaAFIingHOLhTrP+6vbI5FMUONkIfdzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaUtlQWM0dUZPc183cTlzamtVeFE0MlFoOTNNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZC9iODk3MDQtNGZkMi00ZTA3LWEwMzkt NjZmNTZlZjljZTI2LzEvaUtlQWM0dUZPc183cTlzamtVeFE0MlFoOTNNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZC9iODk3MDQtNGZkMi00ZTA3LWEwMzktNjZmNTZlZjljZTI2 LzEvaUtlQWM0dUZPc183cTlzamtVeFE0MlFoOTNNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAi1uRgAez 6Zs+BE6hw2v713ba+R8+GyN3QwaQOLWgrFXCHb8jUm5DsncQz9IMf4svnAWcfGsX kO19onseFxudH2PcoPkiK41T7b86hxCj3k/7uFTbjvwhgwvx5+1rGoZfgoJm3VJr dHUS4zFoQXHi3MF7Yw5wM/zcH8ogcrTmw6oQ1wpJknD91jfloitZMXUTfl/WUGPZ lE8FsB79bTxqWUqAxzr+nOaD557F0mx/ejcgzbYRV2FSc+EcoUEtW9BBE7DLflI2 ewE94JFtiQz1Ywpf4Fw0/Ba/RHEkVndC+4HC+ji17H5CEcC3Y7RxF9ugb5lFU6Bv ICJo6mw3+jY0lg== -----END CERTIFICATE-----Generated at Sun Dec 21 04:11:05 2025 by rpki-client