This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/61facc-669f-4456-963f-1e436dcb85c5/1/IcOUybOja2n57l-JNqL1G5XqzrQ.mft File: IcOUybOja2n57l-JNqL1G5XqzrQ.mft (raw, json) Hash identifier: tC3jvcwbtqP5KVbzxUNT9dIDl90F0H0FCnY9Hrt/iZA= Subject key identifier: 44:38:58:E1:61:D3:5A:A9:FD:FA:47:C0:C3:36:12:5C:3D:91:C1:BE Authority key identifier: 21:C3:94:C9:B3:A3:6B:69:F9:EE:5F:89:36:A2:F5:1B:95:EA:CE:B4 Certificate issuer: /CN=21c394c9b3a36b69f9ee5f8936a2f51b95eaceb4 Certificate serial: 019B39B416C06C6F0D92CAA68D9D2D008623 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IcOUybOja2n57l-JNqL1G5XqzrQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/61facc-669f-4456-963f-1e436dcb85c5/1/IcOUybOja2n57l-JNqL1G5XqzrQ.mft Manifest number: 178B Signing time: Sat 20 Dec 2025 03:01:02 +0000 Manifest this update: Sat 20 Dec 2025 03:01:02 +0000 Manifest next update: Sun 21 Dec 2025 03:01:02 +0000 Files and hashes: 1: HevIcw-udVLHAsRMuVL8AXS5DmE.roa (hash: /vwUjeGhMDVH5p9rxYTRis9U3GgQG40VBJ1bShqGwbM=) 2: IcOUybOja2n57l-JNqL1G5XqzrQ.crl (hash: DeBrdlxXMTwHLqC8pHluozNsTpTfW0KxhZyZr7VpfW8=) 3: dfcipKIHJhkLM8tES7y9qnzOa0g.roa (hash: hdMZ+zVZPKGH8nt9Efyy+7bQ/S/VggiNWiYJsxgZkUA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/61facc-669f-4456-963f-1e436dcb85c5/1/IcOUybOja2n57l-JNqL1G5XqzrQ.crl rsync://rpki.ripe.net/repository/DEFAULT/10/61facc-669f-4456-963f-1e436dcb85c5/1/IcOUybOja2n57l-JNqL1G5XqzrQ.mft rsync://rpki.ripe.net/repository/DEFAULT/IcOUybOja2n57l-JNqL1G5XqzrQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:39:b4:16:c0:6c:6f:0d:92:ca:a6:8d:9d:2d:00:86:23 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=21c394c9b3a36b69f9ee5f8936a2f51b95eaceb4 Validity Not Before: Dec 20 03:01:02 2025 GMT Not After : Dec 21 03:01:02 2025 GMT Subject: CN=443858e161d35aa9fdfa47c0c336125c3d91c1be Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:1c:a2:2d:82:54:65:cb:f7:2c:6c:c1:9f:74: 0a:4a:0b:4b:67:24:d1:d2:63:63:01:62:b4:23:80: 70:56:77:34:94:80:29:7a:3f:a7:2c:b0:3c:dd:fe: 70:8e:c5:02:82:31:6d:b7:ed:14:b4:a3:dd:43:29: c7:e0:2c:45:67:49:c3:bb:4f:4a:a1:ca:ea:07:83: c6:9f:e3:6b:94:a6:1e:c5:17:26:7d:f4:cb:c6:2d: 30:ee:44:2c:1b:cd:7f:3d:56:a9:08:cc:12:e3:46: 36:81:89:7b:25:af:f3:bf:c0:a4:03:40:cb:70:02: 47:70:29:92:1b:26:f5:1b:e3:22:8c:4b:4b:0b:62: 2c:04:02:db:b0:18:af:5f:f8:29:44:fe:d5:ad:50: b9:f5:f8:e6:17:bd:3a:33:b4:1b:1c:9b:db:b5:9d: d6:2f:7a:60:be:a8:b7:5e:80:e3:56:a1:a8:6a:55: 90:a2:8e:3b:41:15:9d:72:b6:c2:5c:c1:55:8d:24: e0:73:84:a9:73:9a:23:9b:6a:6c:54:97:2a:17:97: 04:32:43:b4:53:16:af:3c:f1:b6:3e:68:0d:94:24: f5:a1:91:c0:3e:91:33:92:f1:bc:3a:47:55:f4:12: 1b:b7:d0:e6:70:7c:72:e9:02:3e:b1:22:d9:a6:de: d8:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:38:58:E1:61:D3:5A:A9:FD:FA:47:C0:C3:36:12:5C:3D:91:C1:BE X509v3 Authority Key Identifier: keyid:21:C3:94:C9:B3:A3:6B:69:F9:EE:5F:89:36:A2:F5:1B:95:EA:CE:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IcOUybOja2n57l-JNqL1G5XqzrQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/61facc-669f-4456-963f-1e436dcb85c5/1/IcOUybOja2n57l-JNqL1G5XqzrQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/10/61facc-669f-4456-963f-1e436dcb85c5/1/IcOUybOja2n57l-JNqL1G5XqzrQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 48:3b:1a:72:63:12:1b:35:18:67:0d:cc:14:8d:bf:2a:cc:ca: 39:e7:6f:6f:e7:2c:09:3b:97:d8:0d:1b:56:e4:8d:3d:5b:fb: 8e:6c:f5:e3:e5:bb:f5:1e:ff:37:ec:44:78:26:f1:16:ba:78: 71:b3:19:23:c1:bf:ce:5e:4b:da:0c:87:51:7f:93:ba:df:3e: b9:b5:c0:11:5f:e6:4f:c3:93:06:ac:9b:b4:5c:2b:84:64:33: f4:03:4d:82:34:95:9d:b9:33:16:6d:02:e8:09:32:af:5b:15: 9a:74:57:21:ae:b6:b8:9c:dc:bc:a5:c1:7d:e9:b0:0a:0a:ca: a4:48:30:0f:a8:f5:49:31:e5:0d:5e:55:a4:12:c9:37:0a:97: 8e:21:b2:2a:c1:bb:db:6e:6f:3a:5a:29:20:05:50:db:13:5d: 7d:85:0f:bd:b4:13:1c:ad:69:c6:66:e6:b2:16:50:3d:17:ca: a1:c7:c5:7c:64:ea:34:f2:84:52:b0:c4:b2:bb:37:d3:26:4f: 30:62:43:62:ca:99:64:72:5f:4c:69:fa:af:1b:cd:8f:b5:34: 07:79:85:27:a5:76:4b:56:26:ad:91:b9:91:b8:33:cf:1d:c8: ed:4e:0b:50:77:5b:ea:6d:08:64:5f:bb:d0:f0:99:38:a5:76: b6:5c:f9:9a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs5tBbAbG8NksqmjZ0tAIYjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIxYzM5NGM5YjNhMzZiNjlmOWVlNWY4OTM2YTJmNTFiOTVl YWNlYjQwHhcNMjUxMjIwMDMwMTAyWhcNMjUxMjIxMDMwMTAyWjAzMTEwLwYDVQQD Eyg0NDM4NThlMTYxZDM1YWE5ZmRmYTQ3YzBjMzM2MTI1YzNkOTFjMWJlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnhyiLYJUZcv3LGzBn3QKSgtLZyTR 0mNjAWK0I4BwVnc0lIApej+nLLA83f5wjsUCgjFtt+0UtKPdQynH4CxFZ0nDu09K ocrqB4PGn+NrlKYexRcmffTLxi0w7kQsG81/PVapCMwS40Y2gYl7Ja/zv8CkA0DL cAJHcCmSGyb1G+MijEtLC2IsBALbsBivX/gpRP7VrVC59fjmF706M7QbHJvbtZ3W L3pgvqi3XoDjVqGoalWQoo47QRWdcrbCXMFVjSTgc4Spc5ojm2psVJcqF5cEMkO0 UxavPPG2PmgNlCT1oZHAPpEzkvG8OkdV9BIbt9DmcHxy6QI+sSLZpt7YLQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEQ4WOFh01qp/fpHwMM2Elw9kcG+MB8GA1UdIwQY MBaAFCHDlMmzo2tp+e5fiTai9RuV6s60MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSWNPVXliT2phMm41N2wtSk5xTDFHNVhxenJRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC82MWZhY2MtNjY5Zi00NDU2LTk2M2Yt MWU0MzZkY2I4NWM1LzEvSWNPVXliT2phMm41N2wtSk5xTDFHNVhxenJRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMC82MWZhY2MtNjY5Zi00NDU2LTk2M2YtMWU0MzZkY2I4NWM1 LzEvSWNPVXliT2phMm41N2wtSk5xTDFHNVhxenJRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASDsacmMS GzUYZw3MFI2/KszKOedvb+csCTuX2A0bVuSNPVv7jmz14+W79R7/N+xEeCbxFrp4 cbMZI8G/zl5L2gyHUX+Tut8+ubXAEV/mT8OTBqybtFwrhGQz9ANNgjSVnbkzFm0C 6Akyr1sVmnRXIa62uJzcvKXBfemwCgrKpEgwD6j1STHlDV5VpBLJNwqXjiGyKsG7 225vOlopIAVQ2xNdfYUPvbQTHK1pxmbmshZQPRfKocfFfGTqNPKEUrDEsrs30yZP MGJDYsqZZHJfTGn6rxvNj7U0B3mFJ6V2S1YmrZG5kbgzzx3I7U4LUHdb6m0IZF+7 0PCZOKV2tlz5mg== -----END CERTIFICATE-----Generated at Sat Dec 20 09:07:32 2025 by rpki-client