This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/61facc-669f-4456-963f-1e436dcb85c5/1/IcOUybOja2n57l-JNqL1G5XqzrQ.mft File: IcOUybOja2n57l-JNqL1G5XqzrQ.mft (raw, json) Hash identifier: KxtUpeItHAiNlnkyWBXwmvuyoDRz86c3Z8L+6ta6yY8= Subject key identifier: B5:8C:CD:86:5E:E0:B1:E6:D4:97:9C:2D:AE:52:DE:62:95:E9:A7:91 Authority key identifier: 21:C3:94:C9:B3:A3:6B:69:F9:EE:5F:89:36:A2:F5:1B:95:EA:CE:B4 Certificate issuer: /CN=21c394c9b3a36b69f9ee5f8936a2f51b95eaceb4 Certificate serial: 019B49272D868A10D70312C0279289144F02 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IcOUybOja2n57l-JNqL1G5XqzrQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/61facc-669f-4456-963f-1e436dcb85c5/1/IcOUybOja2n57l-JNqL1G5XqzrQ.mft Manifest number: 1793 Signing time: Tue 23 Dec 2025 03:01:02 +0000 Manifest this update: Tue 23 Dec 2025 03:01:02 +0000 Manifest next update: Wed 24 Dec 2025 03:01:02 +0000 Files and hashes: 1: HevIcw-udVLHAsRMuVL8AXS5DmE.roa (hash: /vwUjeGhMDVH5p9rxYTRis9U3GgQG40VBJ1bShqGwbM=) 2: IcOUybOja2n57l-JNqL1G5XqzrQ.crl (hash: fnpgSPeo7/0qzMHAUn6PYB+nm0zYXP5Kby7D8uQhw40=) 3: dfcipKIHJhkLM8tES7y9qnzOa0g.roa (hash: hdMZ+zVZPKGH8nt9Efyy+7bQ/S/VggiNWiYJsxgZkUA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/61facc-669f-4456-963f-1e436dcb85c5/1/IcOUybOja2n57l-JNqL1G5XqzrQ.crl rsync://rpki.ripe.net/repository/DEFAULT/10/61facc-669f-4456-963f-1e436dcb85c5/1/IcOUybOja2n57l-JNqL1G5XqzrQ.mft rsync://rpki.ripe.net/repository/DEFAULT/IcOUybOja2n57l-JNqL1G5XqzrQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 24 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:49:27:2d:86:8a:10:d7:03:12:c0:27:92:89:14:4f:02 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=21c394c9b3a36b69f9ee5f8936a2f51b95eaceb4 Validity Not Before: Dec 23 03:01:02 2025 GMT Not After : Dec 24 03:01:02 2025 GMT Subject: CN=b58ccd865ee0b1e6d4979c2dae52de6295e9a791 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:1e:dc:20:0b:13:c5:41:a5:ba:b4:f2:46:00: 82:72:08:28:f3:f0:e3:dd:32:70:08:c6:f2:97:22: 49:18:b5:56:0c:52:cb:46:90:d0:05:f4:09:3e:c5: 1d:15:68:1e:38:8f:4e:55:6e:14:67:bc:51:08:b9: b6:44:ee:0e:b3:5f:d5:db:05:0a:a1:79:62:02:85: 41:a2:63:b6:67:40:08:46:e9:61:d6:5c:cd:d1:25: 03:20:09:8d:61:66:1f:5c:1d:c6:25:44:d9:32:a6: d6:82:88:ed:bb:9e:26:94:eb:8b:92:c6:11:d9:6e: b2:44:8c:51:3b:99:41:25:df:4d:8c:01:4a:04:fd: 08:8b:ae:ef:d2:80:f1:c6:94:f8:95:07:8a:23:09: ab:75:3e:07:ea:3e:f7:1a:18:cc:31:a3:51:f4:4c: 7e:08:1c:b2:8e:22:b9:22:f3:09:eb:35:71:ef:96: 0b:78:db:7f:ef:97:8a:f9:2a:d9:b5:fa:39:be:20: 8e:0e:f7:b3:a5:29:d8:0d:6a:f3:ec:bd:58:d7:94: 4c:23:f7:a4:18:85:93:2e:88:97:02:b3:83:3a:e5: f3:c4:88:01:4e:9d:6f:7f:83:e5:19:a3:7a:5d:28: 40:ab:26:19:b3:d4:f7:b0:cf:06:15:eb:a0:63:61: bc:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:8C:CD:86:5E:E0:B1:E6:D4:97:9C:2D:AE:52:DE:62:95:E9:A7:91 X509v3 Authority Key Identifier: keyid:21:C3:94:C9:B3:A3:6B:69:F9:EE:5F:89:36:A2:F5:1B:95:EA:CE:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IcOUybOja2n57l-JNqL1G5XqzrQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/61facc-669f-4456-963f-1e436dcb85c5/1/IcOUybOja2n57l-JNqL1G5XqzrQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/10/61facc-669f-4456-963f-1e436dcb85c5/1/IcOUybOja2n57l-JNqL1G5XqzrQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 51:00:95:8c:2b:31:71:77:36:2e:0d:9a:8c:79:12:d3:0d:c3: 3f:cf:7f:35:9a:7d:58:1a:9a:73:69:ee:94:18:0f:32:d3:4f: a5:83:06:a6:49:cb:75:73:53:55:9d:4b:fc:c1:40:ae:13:6c: f6:63:3c:50:30:85:d3:ac:f5:8d:05:aa:5c:17:75:80:ea:12: 2a:9c:7b:b4:ab:8c:43:e5:bc:f8:6f:8f:1e:df:49:f7:ec:2f: 1b:d9:60:a5:a7:6e:c7:3b:8c:57:8e:1d:74:76:d2:e0:33:0b: fd:e1:20:42:60:fb:cd:d1:11:c7:a5:8e:47:20:ff:8d:d8:05: b1:b6:6d:f2:93:06:b9:42:c8:b0:f1:fe:2c:ec:59:81:b2:27: 00:f6:e0:49:9e:9c:48:a0:ee:7c:05:85:97:2e:ab:31:4d:17: e1:b9:54:01:63:b1:43:a0:49:bc:7a:a7:99:8e:58:24:7c:c5: cc:89:a5:c0:5b:dd:f2:aa:41:e1:37:ae:78:0d:14:01:74:fe: d6:22:f6:8c:4f:e8:94:e2:85:e8:d9:66:55:43:33:4a:27:95: 75:76:8a:cf:ba:b7:5f:b5:69:33:15:5b:6e:75:94:16:d7:df: 6b:73:93:29:f3:02:8f:51:49:d1:4b:d3:bd:ef:9d:a5:33:77: c1:66:c8:ea -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtJJy2GihDXAxLAJ5KJFE8CMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIxYzM5NGM5YjNhMzZiNjlmOWVlNWY4OTM2YTJmNTFiOTVl YWNlYjQwHhcNMjUxMjIzMDMwMTAyWhcNMjUxMjI0MDMwMTAyWjAzMTEwLwYDVQQD EyhiNThjY2Q4NjVlZTBiMWU2ZDQ5NzljMmRhZTUyZGU2Mjk1ZTlhNzkxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuB7cIAsTxUGlurTyRgCCcggo8/Dj 3TJwCMbylyJJGLVWDFLLRpDQBfQJPsUdFWgeOI9OVW4UZ7xRCLm2RO4Os1/V2wUK oXliAoVBomO2Z0AIRulh1lzN0SUDIAmNYWYfXB3GJUTZMqbWgojtu54mlOuLksYR 2W6yRIxRO5lBJd9NjAFKBP0Ii67v0oDxxpT4lQeKIwmrdT4H6j73GhjMMaNR9Ex+ CByyjiK5IvMJ6zVx75YLeNt/75eK+SrZtfo5viCODvezpSnYDWrz7L1Y15RMI/ek GIWTLoiXArODOuXzxIgBTp1vf4PlGaN6XShAqyYZs9T3sM8GFeugY2G8pQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLWMzYZe4LHm1JecLa5S3mKV6aeRMB8GA1UdIwQY MBaAFCHDlMmzo2tp+e5fiTai9RuV6s60MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSWNPVXliT2phMm41N2wtSk5xTDFHNVhxenJRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC82MWZhY2MtNjY5Zi00NDU2LTk2M2Yt MWU0MzZkY2I4NWM1LzEvSWNPVXliT2phMm41N2wtSk5xTDFHNVhxenJRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMC82MWZhY2MtNjY5Zi00NDU2LTk2M2YtMWU0MzZkY2I4NWM1 LzEvSWNPVXliT2phMm41N2wtSk5xTDFHNVhxenJRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUQCVjCsx cXc2Lg2ajHkS0w3DP89/NZp9WBqac2nulBgPMtNPpYMGpknLdXNTVZ1L/MFArhNs 9mM8UDCF06z1jQWqXBd1gOoSKpx7tKuMQ+W8+G+PHt9J9+wvG9lgpaduxzuMV44d dHbS4DML/eEgQmD7zdERx6WORyD/jdgFsbZt8pMGuULIsPH+LOxZgbInAPbgSZ6c SKDufAWFly6rMU0X4blUAWOxQ6BJvHqnmY5YJHzFzImlwFvd8qpB4TeueA0UAXT+ 1iL2jE/olOKF6NlmVUMzSieVdXaKz7q3X7VpMxVbbnWUFtffa3OTKfMCj1FJ0UvT ve+dpTN3wWbI6g== -----END CERTIFICATE-----Generated at Tue Dec 23 09:23:43 2025 by rpki-client