This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/b203f4-8271-46e7-8a4a-f9e2c2fdbf35/1/iuE5rwiZ9da1syWBNz7aMDfqMMA.mft File: iuE5rwiZ9da1syWBNz7aMDfqMMA.mft (raw, json) Hash identifier: 5AzUuC7Ue/V1MMjNkIB9W3tyzsTLTpVGfEoe3dFut6U= Subject key identifier: FD:18:2D:A7:0D:6E:A3:35:50:50:10:32:34:A4:C2:38:0A:9A:4B:17 Authority key identifier: 8A:E1:39:AF:08:99:F5:D6:B5:B3:25:81:37:3E:DA:30:37:EA:30:C0 Certificate issuer: /CN=8ae139af0899f5d6b5b32581373eda3037ea30c0 Certificate serial: 019B3E6C70BAC5F987EB337905232811EF26 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iuE5rwiZ9da1syWBNz7aMDfqMMA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/b203f4-8271-46e7-8a4a-f9e2c2fdbf35/1/iuE5rwiZ9da1syWBNz7aMDfqMMA.mft Manifest number: 0E40 Signing time: Sun 21 Dec 2025 01:00:52 +0000 Manifest this update: Sun 21 Dec 2025 01:00:52 +0000 Manifest next update: Mon 22 Dec 2025 01:00:52 +0000 Files and hashes: 1: NGjcJESkWKoe17DLj5CiFkjFkhs.roa (hash: GPilr/syUwSnDgvatxbmfR2uNG9m+2J2hRVuK9V/K4A=) 2: iuE5rwiZ9da1syWBNz7aMDfqMMA.crl (hash: Dx34JaekYCsKIqDlQXmBV2qXQafvF6dynBVGNIyq0tY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/b203f4-8271-46e7-8a4a-f9e2c2fdbf35/1/iuE5rwiZ9da1syWBNz7aMDfqMMA.crl rsync://rpki.ripe.net/repository/DEFAULT/17/b203f4-8271-46e7-8a4a-f9e2c2fdbf35/1/iuE5rwiZ9da1syWBNz7aMDfqMMA.mft rsync://rpki.ripe.net/repository/DEFAULT/iuE5rwiZ9da1syWBNz7aMDfqMMA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 01:00:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3e:6c:70:ba:c5:f9:87:eb:33:79:05:23:28:11:ef:26 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8ae139af0899f5d6b5b32581373eda3037ea30c0 Validity Not Before: Dec 21 01:00:52 2025 GMT Not After : Dec 22 01:00:52 2025 GMT Subject: CN=fd182da70d6ea3355050103234a4c2380a9a4b17 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:83:a6:c8:ea:f8:e1:a5:69:b8:e0:94:f9:6f: 1b:cd:e3:2b:ac:bc:ff:c5:5e:7f:25:f3:1d:88:ac: 7c:88:01:4a:1a:a4:7c:d5:7b:6c:79:db:ba:fa:a5: 84:c4:87:ca:98:13:f0:27:6f:98:af:0d:55:60:30: 00:8c:81:bb:67:70:1c:62:7d:7b:56:73:36:95:ac: aa:b5:97:47:04:88:9e:ed:2a:fa:df:a3:ec:9d:e5: 68:49:7d:5a:46:86:de:8e:12:56:ee:22:fb:0a:33: 10:43:76:ef:f8:72:83:c6:56:5e:05:60:ed:d5:98: 32:14:8c:36:e2:f5:36:b4:5f:50:e2:b5:d6:40:b4: f4:6d:cd:43:92:ed:7c:d7:6d:c3:7a:2a:15:a6:d4: 90:ef:f1:a9:2c:b9:b7:ef:88:2b:70:4c:c8:b1:4a: a5:9b:13:a2:13:df:db:32:b1:68:08:3a:71:f1:80: 63:d4:c7:85:c5:92:03:93:31:01:3a:d4:be:cd:ee: b2:c1:a7:a1:1a:59:0e:32:81:e9:46:b8:1b:52:72: f0:7e:f2:06:54:ec:86:83:8c:3a:0c:2a:86:92:8a: bf:df:56:f4:5a:f8:9d:bb:b2:52:3b:85:2b:b5:35: e6:26:68:7f:74:3a:79:aa:b8:4e:e1:ed:4c:a2:c2: 2b:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:18:2D:A7:0D:6E:A3:35:50:50:10:32:34:A4:C2:38:0A:9A:4B:17 X509v3 Authority Key Identifier: keyid:8A:E1:39:AF:08:99:F5:D6:B5:B3:25:81:37:3E:DA:30:37:EA:30:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iuE5rwiZ9da1syWBNz7aMDfqMMA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/b203f4-8271-46e7-8a4a-f9e2c2fdbf35/1/iuE5rwiZ9da1syWBNz7aMDfqMMA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/17/b203f4-8271-46e7-8a4a-f9e2c2fdbf35/1/iuE5rwiZ9da1syWBNz7aMDfqMMA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 00:82:f9:04:19:f9:9e:52:c9:40:f9:0b:63:b6:bc:b3:f0:b1: 9d:11:4f:c4:28:c5:93:e6:96:07:78:f0:b2:dd:e6:da:b3:f1: f5:db:38:77:da:b1:29:4b:20:f4:52:07:41:41:ef:be:06:8d: 65:ac:74:9f:45:67:36:b2:79:25:60:1e:77:03:14:48:f7:ed: fe:ee:8c:38:c1:e4:5e:f5:99:42:78:4a:b5:4d:3e:5c:bb:a3: 76:da:04:b7:aa:08:53:49:2e:f0:e9:07:46:ca:f4:1f:b7:76: ac:25:e8:f7:30:e1:ad:93:48:e1:15:d3:70:ca:c9:00:03:3e: 06:76:c3:4e:c7:9d:a8:d0:85:41:9f:b1:b1:be:13:0a:22:d8: d5:bf:fd:5b:65:1a:de:50:86:4d:72:d2:ee:cf:33:f9:a5:e2: 00:0c:2e:a5:2b:20:09:09:a0:81:b1:e6:eb:ae:c4:8b:38:52: 51:ba:8a:50:be:28:be:65:0a:be:7c:4d:94:e0:9f:17:a7:07: 5c:66:c5:30:2b:d7:c5:61:b9:03:c1:be:15:95:e1:8e:57:d1: 8b:30:92:f3:03:74:ff:83:c9:86:f5:2f:05:53:8b:4a:fc:03: 81:4b:be:23:54:23:1e:7c:22:bb:ee:e3:d4:d0:bb:01:c7:33: a9:4c:fc:45 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs+bHC6xfmH6zN5BSMoEe8mMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhhZTEzOWFmMDg5OWY1ZDZiNWIzMjU4MTM3M2VkYTMwMzdl YTMwYzAwHhcNMjUxMjIxMDEwMDUyWhcNMjUxMjIyMDEwMDUyWjAzMTEwLwYDVQQD EyhmZDE4MmRhNzBkNmVhMzM1NTA1MDEwMzIzNGE0YzIzODBhOWE0YjE3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo4OmyOr44aVpuOCU+W8bzeMrrLz/ xV5/JfMdiKx8iAFKGqR81Xtsedu6+qWExIfKmBPwJ2+Yrw1VYDAAjIG7Z3AcYn17 VnM2layqtZdHBIie7Sr636PsneVoSX1aRobejhJW7iL7CjMQQ3bv+HKDxlZeBWDt 1ZgyFIw24vU2tF9Q4rXWQLT0bc1Dku18123DeioVptSQ7/GpLLm374grcEzIsUql mxOiE9/bMrFoCDpx8YBj1MeFxZIDkzEBOtS+ze6ywaehGlkOMoHpRrgbUnLwfvIG VOyGg4w6DCqGkoq/31b0Wvidu7JSO4UrtTXmJmh/dDp5qrhO4e1MosIr1QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFP0YLacNbqM1UFAQMjSkwjgKmksXMB8GA1UdIwQY MBaAFIrhOa8ImfXWtbMlgTc+2jA36jDAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaXVFNXJ3aVo5ZGExc3lXQk56N2FNRGZxTU1BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy9iMjAzZjQtODI3MS00NmU3LThhNGEt ZjllMmMyZmRiZjM1LzEvaXVFNXJ3aVo5ZGExc3lXQk56N2FNRGZxTU1BLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNy9iMjAzZjQtODI3MS00NmU3LThhNGEtZjllMmMyZmRiZjM1 LzEvaXVFNXJ3aVo5ZGExc3lXQk56N2FNRGZxTU1BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAIL5BBn5 nlLJQPkLY7a8s/CxnRFPxCjFk+aWB3jwst3m2rPx9ds4d9qxKUsg9FIHQUHvvgaN Zax0n0VnNrJ5JWAedwMUSPft/u6MOMHkXvWZQnhKtU0+XLujdtoEt6oIU0ku8OkH Rsr0H7d2rCXo9zDhrZNI4RXTcMrJAAM+BnbDTsedqNCFQZ+xsb4TCiLY1b/9W2Ua 3lCGTXLS7s8z+aXiAAwupSsgCQmggbHm667EizhSUbqKUL4ovmUKvnxNlOCfF6cH XGbFMCvXxWG5A8G+FZXhjlfRizCS8wN0/4PJhvUvBVOLSvwDgUu+I1QjHnwiu+7j 1NC7AcczqUz8RQ== -----END CERTIFICATE-----Generated at Sun Dec 21 10:36:01 2025 by rpki-client