This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/3e3126-3f4f-48e9-abef-5cb11a368d10/1/itN6mTOwUsLxLvG48U108F_dthE.mft File: itN6mTOwUsLxLvG48U108F_dthE.mft (raw, json) Hash identifier: tqrVbgI17je6myq7tdphEg8QdrJz+iwnE5ByelXglsA= Subject key identifier: 02:BD:26:A4:0F:E1:94:47:78:EB:D6:80:32:D4:AA:F9:12:EE:FF:95 Authority key identifier: 8A:D3:7A:99:33:B0:52:C2:F1:2E:F1:B8:F1:4D:74:F0:5F:DD:B6:11 Certificate issuer: /CN=8ad37a9933b052c2f12ef1b8f14d74f05fddb611 Certificate serial: 019B3A8FEC5D2ADFF7EF2FDACD6B2D994361 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/itN6mTOwUsLxLvG48U108F_dthE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/3e3126-3f4f-48e9-abef-5cb11a368d10/1/itN6mTOwUsLxLvG48U108F_dthE.mft Manifest number: 178A Signing time: Sat 20 Dec 2025 07:01:09 +0000 Manifest this update: Sat 20 Dec 2025 07:01:09 +0000 Manifest next update: Sun 21 Dec 2025 07:01:09 +0000 Files and hashes: 1: JwgRDJiJNlMDAQ-P-K-E7oLdVEE.roa (hash: eWvYggxPbmUrtkETleY+0mXFUMuKDGQl8Ca4V2dhuzo=) 2: RE9aFykceNUyqQ5Yh55JiiN859A.roa (hash: h9rNiKJSEqsRDhT3jZgfTnHK3ITCLzU3oznaGDO3rok=) 3: itN6mTOwUsLxLvG48U108F_dthE.crl (hash: 7WGv6n6yd5tJPegsQotQ7jRMQM33oVXiYnBC5QKIWv4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/3e3126-3f4f-48e9-abef-5cb11a368d10/1/itN6mTOwUsLxLvG48U108F_dthE.crl rsync://rpki.ripe.net/repository/DEFAULT/1f/3e3126-3f4f-48e9-abef-5cb11a368d10/1/itN6mTOwUsLxLvG48U108F_dthE.mft rsync://rpki.ripe.net/repository/DEFAULT/itN6mTOwUsLxLvG48U108F_dthE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 07:01:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3a:8f:ec:5d:2a:df:f7:ef:2f:da:cd:6b:2d:99:43:61 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8ad37a9933b052c2f12ef1b8f14d74f05fddb611 Validity Not Before: Dec 20 07:01:09 2025 GMT Not After : Dec 21 07:01:09 2025 GMT Subject: CN=02bd26a40fe1944778ebd68032d4aaf912eeff95 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:be:f9:3b:73:17:68:27:36:f1:5f:bb:35:dd: 86:e5:8f:64:98:95:5d:93:05:0b:84:f6:20:43:00: d8:31:88:0c:a9:00:ed:a3:06:74:11:76:32:b8:f8: 1f:59:ca:74:08:30:01:92:37:ff:d1:16:19:3c:da: 9a:92:23:7c:d8:b8:c1:9e:59:b6:52:8a:e4:45:ab: 4e:b6:a6:f4:00:e3:6c:e0:fe:8d:c6:b1:38:49:0e: 05:9a:bb:4a:19:83:0e:28:0a:a4:01:68:d4:4f:fa: 0e:96:08:9d:80:97:02:a1:90:f7:af:9c:51:ee:2e: 58:e4:97:61:f4:6f:1a:4d:43:03:08:19:77:4f:e4: 50:ee:37:eb:1b:60:6c:8b:af:df:e0:62:b7:6d:ec: c2:99:ce:1a:15:c7:86:c2:84:48:c3:d0:59:3d:be: 5a:ce:80:2b:11:99:b6:18:e9:24:cc:ab:37:e1:83: d0:e4:9d:e5:37:ab:47:2a:e8:e7:5f:59:99:38:34: 7d:f3:9c:51:40:20:bf:3a:50:19:ad:ca:7e:38:7f: 7e:a1:f7:47:e8:f0:0e:40:14:f7:b5:9a:27:fd:de: b3:60:db:16:c2:a6:4a:a7:a1:98:0a:c2:f1:75:5b: 8e:c2:ce:f6:16:7b:bc:f2:ce:f3:d9:69:ab:7a:74: 15:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:BD:26:A4:0F:E1:94:47:78:EB:D6:80:32:D4:AA:F9:12:EE:FF:95 X509v3 Authority Key Identifier: keyid:8A:D3:7A:99:33:B0:52:C2:F1:2E:F1:B8:F1:4D:74:F0:5F:DD:B6:11 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/itN6mTOwUsLxLvG48U108F_dthE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/3e3126-3f4f-48e9-abef-5cb11a368d10/1/itN6mTOwUsLxLvG48U108F_dthE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/3e3126-3f4f-48e9-abef-5cb11a368d10/1/itN6mTOwUsLxLvG48U108F_dthE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0f:e2:de:f3:21:f3:02:04:7b:c9:ca:d2:e1:c2:6a:7b:c6:b2: 72:4f:c8:2b:a0:45:32:8f:fa:57:6d:d8:f1:43:fa:ca:d5:be: dc:16:81:18:bb:b1:a1:41:6b:18:b2:3f:24:5e:c9:e5:2a:f7: 9a:0e:c6:50:3b:b5:c2:b5:ab:f9:be:26:f2:77:74:39:7d:6f: e9:b3:de:0e:48:ea:73:f5:94:4d:26:e6:04:3b:b4:83:2f:aa: b9:04:84:80:87:73:84:c1:ff:8f:19:5c:d4:50:1a:43:1f:8c: 17:2e:4c:54:d3:46:b2:6c:a5:76:f4:67:7c:6b:82:9d:83:59: d3:5c:ee:18:95:a8:1e:de:e8:39:35:7a:96:a5:62:48:25:8a: 7c:a2:9f:7d:2f:6e:f8:63:90:24:9e:f7:b6:c9:d2:c2:de:32: 40:02:b5:7e:51:c9:92:f8:0d:cb:10:7e:1d:9e:2f:4c:a9:97: f4:71:20:89:e6:e8:cc:fb:47:5a:34:1b:ea:8b:d5:7c:aa:6b: 7e:92:a9:c8:cf:30:bd:4b:fa:68:5e:a5:62:9b:9d:89:32:0c: f5:6c:8e:64:e6:ac:a4:69:4f:4a:23:7e:19:7c:c8:8a:f4:39: 3a:fd:52:45:21:79:1d:eb:6c:d5:4e:aa:9d:87:ed:8f:e0:9a: 6f:ad:ac:b8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs6j+xdKt/37y/azWstmUNhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhhZDM3YTk5MzNiMDUyYzJmMTJlZjFiOGYxNGQ3NGYwNWZk ZGI2MTEwHhcNMjUxMjIwMDcwMTA5WhcNMjUxMjIxMDcwMTA5WjAzMTEwLwYDVQQD EygwMmJkMjZhNDBmZTE5NDQ3NzhlYmQ2ODAzMmQ0YWFmOTEyZWVmZjk1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqr75O3MXaCc28V+7Nd2G5Y9kmJVd kwULhPYgQwDYMYgMqQDtowZ0EXYyuPgfWcp0CDABkjf/0RYZPNqakiN82LjBnlm2 UorkRatOtqb0AONs4P6NxrE4SQ4FmrtKGYMOKAqkAWjUT/oOlgidgJcCoZD3r5xR 7i5Y5Jdh9G8aTUMDCBl3T+RQ7jfrG2Bsi6/f4GK3bezCmc4aFceGwoRIw9BZPb5a zoArEZm2GOkkzKs34YPQ5J3lN6tHKujnX1mZODR985xRQCC/OlAZrcp+OH9+ofdH 6PAOQBT3tZon/d6zYNsWwqZKp6GYCsLxdVuOws72Fnu88s7z2WmrenQVqQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAK9JqQP4ZRHeOvWgDLUqvkS7v+VMB8GA1UdIwQY MBaAFIrTepkzsFLC8S7xuPFNdPBf3bYRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaXRONm1UT3dVc0x4THZHNDhVMTA4Rl9kdGhFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZi8zZTMxMjYtM2Y0Zi00OGU5LWFiZWYt NWNiMTFhMzY4ZDEwLzEvaXRONm1UT3dVc0x4THZHNDhVMTA4Rl9kdGhFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xZi8zZTMxMjYtM2Y0Zi00OGU5LWFiZWYtNWNiMTFhMzY4ZDEw LzEvaXRONm1UT3dVc0x4THZHNDhVMTA4Rl9kdGhFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAD+Le8yHz AgR7ycrS4cJqe8ayck/IK6BFMo/6V23Y8UP6ytW+3BaBGLuxoUFrGLI/JF7J5Sr3 mg7GUDu1wrWr+b4m8nd0OX1v6bPeDkjqc/WUTSbmBDu0gy+quQSEgIdzhMH/jxlc 1FAaQx+MFy5MVNNGsmyldvRnfGuCnYNZ01zuGJWoHt7oOTV6lqViSCWKfKKffS9u +GOQJJ73tsnSwt4yQAK1flHJkvgNyxB+HZ4vTKmX9HEgiebozPtHWjQb6ovVfKpr fpKpyM8wvUv6aF6lYpudiTIM9WyOZOaspGlPSiN+GXzIivQ5Ov1SRSF5Hets1U6q nYftj+Cab62suA== -----END CERTIFICATE-----Generated at Sat Dec 20 14:07:57 2025 by rpki-client