This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/445a66-b76b-4b48-a02d-bc289a931b4b/1/iAsPesuH0TTDhZ1y0NGmHkdRusA.mft File: iAsPesuH0TTDhZ1y0NGmHkdRusA.mft (raw, json) Hash identifier: v6kGN9FwZVR+bCIiIqTkHQDHoNVNmP+tgLAlGssaDfw= Subject key identifier: B0:8C:85:96:8C:56:69:E9:71:07:4E:96:42:3E:93:A5:A9:9A:4F:9D Authority key identifier: 88:0B:0F:7A:CB:87:D1:34:C3:85:9D:72:D0:D1:A6:1E:47:51:BA:C0 Certificate issuer: /CN=880b0f7acb87d134c3859d72d0d1a61e4751bac0 Certificate serial: 019B54863A919E675E3228B247D3A5008340 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iAsPesuH0TTDhZ1y0NGmHkdRusA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/445a66-b76b-4b48-a02d-bc289a931b4b/1/iAsPesuH0TTDhZ1y0NGmHkdRusA.mft Manifest number: 0E3F Signing time: Thu 25 Dec 2025 08:00:41 +0000 Manifest this update: Thu 25 Dec 2025 08:00:41 +0000 Manifest next update: Fri 26 Dec 2025 08:00:41 +0000 Files and hashes: 1: UubezK0uH4JLqxbhgPEY0N-6nSw.roa (hash: Oagl7z5x1jSe2CWCzxXuth3kqDf2dweMIxQL2+jadVg=) 2: iAsPesuH0TTDhZ1y0NGmHkdRusA.crl (hash: b7JSqLySSaz/oGHnDEwFZMv06LV7ySI41I4UiYs6nbg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/445a66-b76b-4b48-a02d-bc289a931b4b/1/iAsPesuH0TTDhZ1y0NGmHkdRusA.crl rsync://rpki.ripe.net/repository/DEFAULT/16/445a66-b76b-4b48-a02d-bc289a931b4b/1/iAsPesuH0TTDhZ1y0NGmHkdRusA.mft rsync://rpki.ripe.net/repository/DEFAULT/iAsPesuH0TTDhZ1y0NGmHkdRusA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 26 Dec 2025 03:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:54:86:3a:91:9e:67:5e:32:28:b2:47:d3:a5:00:83:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=880b0f7acb87d134c3859d72d0d1a61e4751bac0 Validity Not Before: Dec 25 08:00:41 2025 GMT Not After : Dec 26 08:00:41 2025 GMT Subject: CN=b08c85968c5669e971074e96423e93a5a99a4f9d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:24:f8:ff:09:29:10:99:78:c3:bf:3c:04:c6: 9e:c5:07:eb:1b:f0:27:1f:9a:ad:ed:e3:8c:11:6a: 7f:43:aa:b8:40:72:dd:d8:43:82:1c:43:9c:88:63: 6a:d2:cc:80:d0:bb:0d:eb:d6:d3:0d:ec:71:65:65: 79:27:9e:b5:07:a2:f7:a4:f9:31:00:30:e0:e5:51: ef:f3:00:5c:82:fb:a0:49:92:bf:6c:a4:c3:df:90: 29:6e:0e:00:7e:db:88:b5:2d:7f:a6:2b:28:68:c5: be:62:28:8e:a6:cb:06:42:01:f5:d5:b4:cd:9b:77: 3c:7b:b1:18:6e:c6:f0:ca:82:db:71:5d:07:3d:6b: f3:3f:f4:26:60:ec:0d:8c:2b:54:cd:f8:f1:e5:fc: 83:2e:4e:8c:6c:fe:0b:d8:47:e7:50:77:b4:40:91: ba:35:a5:37:86:29:33:78:6c:45:e3:e8:15:b4:7a: 3f:48:46:3c:e3:57:49:0d:f6:ed:7d:60:e9:c5:ff: 4e:ac:0e:c3:17:18:d5:41:e0:e3:6b:a6:6b:fd:ea: 0e:13:49:41:64:e2:9e:3b:15:c3:be:e2:ff:12:68: 70:05:79:1e:11:e4:40:23:f0:a4:12:ce:97:37:68: 28:d0:47:93:50:c8:a3:93:9f:e8:c4:69:af:c0:45: 50:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:8C:85:96:8C:56:69:E9:71:07:4E:96:42:3E:93:A5:A9:9A:4F:9D X509v3 Authority Key Identifier: keyid:88:0B:0F:7A:CB:87:D1:34:C3:85:9D:72:D0:D1:A6:1E:47:51:BA:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iAsPesuH0TTDhZ1y0NGmHkdRusA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/445a66-b76b-4b48-a02d-bc289a931b4b/1/iAsPesuH0TTDhZ1y0NGmHkdRusA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/16/445a66-b76b-4b48-a02d-bc289a931b4b/1/iAsPesuH0TTDhZ1y0NGmHkdRusA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 86:c5:4d:fd:10:be:0f:55:c6:70:65:ad:45:4b:48:98:dc:7b: 4e:84:bc:09:d6:30:fe:3d:af:ce:42:a6:74:86:1f:04:8a:06: 72:34:b9:b5:29:b2:41:32:e8:85:7f:c2:c3:00:7a:4e:95:ca: fa:20:7a:e4:1e:bf:92:41:d3:01:ac:02:4b:d6:dd:2f:4a:77: 68:b6:37:ff:75:a6:6c:27:a2:7c:d5:ae:0e:9a:f1:f5:04:3b: 11:e8:4d:91:80:43:cd:76:40:64:4e:ef:e9:8a:26:b5:0e:4d: dd:0a:2e:44:8a:0f:1e:76:dc:36:66:77:29:1e:11:74:11:cb: a9:a7:a2:4d:60:f6:32:bb:61:eb:f5:b1:08:77:86:6f:63:62: b7:9d:ac:3c:36:45:af:b6:26:f5:db:fc:c4:b3:53:fa:f7:03: ee:f7:6d:e9:b7:bd:2e:3c:a8:ed:1a:c2:2d:36:10:9f:db:cb: ff:f6:a7:90:d7:3a:5b:cd:97:14:0c:c0:9a:25:11:70:dc:9b: 91:19:fb:84:de:dc:9a:fb:eb:46:fc:12:e3:60:bb:f8:11:45: 15:71:09:03:b7:23:2b:51:58:56:38:6b:65:59:3d:a2:2e:3e: 2d:d7:6d:4c:61:2e:ff:1c:09:9e:3f:b7:22:0e:6c:dd:e3:0b: 1c:14:56:c0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtUhjqRnmdeMiiyR9OlAINAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg4MGIwZjdhY2I4N2QxMzRjMzg1OWQ3MmQwZDFhNjFlNDc1 MWJhYzAwHhcNMjUxMjI1MDgwMDQxWhcNMjUxMjI2MDgwMDQxWjAzMTEwLwYDVQQD EyhiMDhjODU5NjhjNTY2OWU5NzEwNzRlOTY0MjNlOTNhNWE5OWE0ZjlkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApiT4/wkpEJl4w788BMaexQfrG/An H5qt7eOMEWp/Q6q4QHLd2EOCHEOciGNq0syA0LsN69bTDexxZWV5J561B6L3pPkx ADDg5VHv8wBcgvugSZK/bKTD35Apbg4AftuItS1/pisoaMW+YiiOpssGQgH11bTN m3c8e7EYbsbwyoLbcV0HPWvzP/QmYOwNjCtUzfjx5fyDLk6MbP4L2EfnUHe0QJG6 NaU3hikzeGxF4+gVtHo/SEY841dJDfbtfWDpxf9OrA7DFxjVQeDja6Zr/eoOE0lB ZOKeOxXDvuL/EmhwBXkeEeRAI/CkEs6XN2go0EeTUMijk5/oxGmvwEVQ9QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLCMhZaMVmnpcQdOlkI+k6Wpmk+dMB8GA1UdIwQY MBaAFIgLD3rLh9E0w4WdctDRph5HUbrAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaUFzUGVzdUgwVFREaFoxeTBOR21Ia2RSdXNBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi80NDVhNjYtYjc2Yi00YjQ4LWEwMmQt YmMyODlhOTMxYjRiLzEvaUFzUGVzdUgwVFREaFoxeTBOR21Ia2RSdXNBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNi80NDVhNjYtYjc2Yi00YjQ4LWEwMmQtYmMyODlhOTMxYjRi LzEvaUFzUGVzdUgwVFREaFoxeTBOR21Ia2RSdXNBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhsVN/RC+ D1XGcGWtRUtImNx7ToS8CdYw/j2vzkKmdIYfBIoGcjS5tSmyQTLohX/CwwB6TpXK +iB65B6/kkHTAawCS9bdL0p3aLY3/3WmbCeifNWuDprx9QQ7EehNkYBDzXZAZE7v 6YomtQ5N3QouRIoPHnbcNmZ3KR4RdBHLqaeiTWD2Mrth6/WxCHeGb2Nit52sPDZF r7Ym9dv8xLNT+vcD7vdt6be9Ljyo7RrCLTYQn9vL//ankNc6W82XFAzAmiURcNyb kRn7hN7cmvvrRvwS42C7+BFFFXEJA7cjK1FYVjhrZVk9oi4+LddtTGEu/xwJnj+3 Ig5s3eMLHBRWwA== -----END CERTIFICATE-----Generated at Thu Dec 25 13:05:23 2025 by rpki-client