This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/accd38-0ae6-4b43-a168-1152f4393020/1/0RIqXLBkP3NsfseWGAmiWThmjw4.mft File: 0RIqXLBkP3NsfseWGAmiWThmjw4.mft (raw, json) Hash identifier: B2Vn/mEv+oBEIvaj694bmi+KNEnex728fKlEUP7iRqU= Subject key identifier: 89:08:60:DB:F0:4A:E5:D3:43:00:CA:9F:97:1A:1E:F3:10:34:52:BE Authority key identifier: D1:12:2A:5C:B0:64:3F:73:6C:7E:C7:96:18:09:A2:59:38:66:8F:0E Certificate issuer: /CN=d1122a5cb0643f736c7ec7961809a25938668f0e Certificate serial: 019B3E6D06A80C141B961B7A3F6127FB6C94 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0RIqXLBkP3NsfseWGAmiWThmjw4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/accd38-0ae6-4b43-a168-1152f4393020/1/0RIqXLBkP3NsfseWGAmiWThmjw4.mft Manifest number: 178C Signing time: Sun 21 Dec 2025 01:01:31 +0000 Manifest this update: Sun 21 Dec 2025 01:01:31 +0000 Manifest next update: Mon 22 Dec 2025 01:01:31 +0000 Files and hashes: 1: 0RIqXLBkP3NsfseWGAmiWThmjw4.crl (hash: s6XCLiYs0t4BqXsNnLWAPyXuVS+1heO96nZhy91eCYs=) 2: 8-GooV5TAxKdFjFhaWz2PUvGsuA.roa (hash: b6Xa2ccXpxI5otp+9VG+BLBYAPmLH8i33HGV6Lw4iJI=) 3: gQiZYCaIXeqAfyMrnz6-0UZTGpA.roa (hash: JWxyJtGpHCFniKAl8h4IcYF6FXj87lqG4HgwxnjAG2w=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/accd38-0ae6-4b43-a168-1152f4393020/1/0RIqXLBkP3NsfseWGAmiWThmjw4.crl rsync://rpki.ripe.net/repository/DEFAULT/23/accd38-0ae6-4b43-a168-1152f4393020/1/0RIqXLBkP3NsfseWGAmiWThmjw4.mft rsync://rpki.ripe.net/repository/DEFAULT/0RIqXLBkP3NsfseWGAmiWThmjw4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3e:6d:06:a8:0c:14:1b:96:1b:7a:3f:61:27:fb:6c:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d1122a5cb0643f736c7ec7961809a25938668f0e Validity Not Before: Dec 21 01:01:31 2025 GMT Not After : Dec 22 01:01:31 2025 GMT Subject: CN=890860dbf04ae5d34300ca9f971a1ef3103452be Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:11:a2:89:ca:fb:33:2d:28:68:ad:c1:7d:e8: 24:dc:e3:a7:14:63:e8:d3:37:5a:31:b7:f7:b0:ef: f8:9e:6f:e5:f0:45:42:ca:36:26:03:3a:b5:dd:1a: f4:11:22:59:99:12:a4:9d:eb:04:3c:f6:7e:99:f3: 99:26:a6:f0:a2:91:64:ec:c8:83:fe:d9:3f:24:ee: ad:c8:ff:dd:b7:9c:1f:cb:0c:d9:5b:ad:e2:28:77: c8:ab:19:75:96:5c:3d:25:15:36:49:6a:77:f4:22: 1f:2c:d7:5d:70:45:0b:c3:5e:d5:3b:33:df:3b:ad: cf:c7:e3:0a:42:5d:5f:ff:e3:16:df:25:70:91:0d: 83:bc:18:ae:85:dc:4f:23:35:61:54:d6:d3:d8:b4: a6:f2:64:89:2f:80:37:99:fb:9f:13:ec:7d:b1:66: d8:da:f2:48:24:ed:23:e2:09:b1:0b:ff:a1:28:d9: 6e:71:83:1c:0d:cb:43:80:dd:1b:43:20:64:6f:f8: df:22:4f:26:33:d5:08:35:5b:f5:64:7e:b4:68:81: 5d:60:06:54:68:6b:c1:55:5e:75:04:90:e3:89:a0: 97:92:56:9e:fd:6c:7b:4a:3e:c3:e1:69:aa:21:6c: 9e:56:80:e1:8e:7a:38:82:cc:c4:de:e0:36:05:37: 7c:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:08:60:DB:F0:4A:E5:D3:43:00:CA:9F:97:1A:1E:F3:10:34:52:BE X509v3 Authority Key Identifier: keyid:D1:12:2A:5C:B0:64:3F:73:6C:7E:C7:96:18:09:A2:59:38:66:8F:0E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0RIqXLBkP3NsfseWGAmiWThmjw4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/accd38-0ae6-4b43-a168-1152f4393020/1/0RIqXLBkP3NsfseWGAmiWThmjw4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/23/accd38-0ae6-4b43-a168-1152f4393020/1/0RIqXLBkP3NsfseWGAmiWThmjw4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 48:87:30:f1:b8:c9:f4:d3:2a:92:ed:12:e5:02:34:80:e5:d0: a1:c6:0c:7d:27:fa:c0:96:a2:91:22:1e:04:89:36:9e:40:b9: 6d:27:30:cb:68:d2:69:66:c1:fa:6b:df:03:8e:92:e5:84:48: 97:5b:a9:8c:89:1f:ee:d2:c9:7a:b5:02:76:90:f9:52:32:6d: b4:94:88:fa:12:10:f5:c0:59:ec:fd:ba:8e:7c:c2:69:0d:4f: 4c:97:47:8d:9d:9f:53:21:4c:fe:04:8f:68:c8:f5:9b:fc:f3: 8b:ce:da:0f:87:1d:52:2a:07:cc:9b:92:df:79:eb:c4:cb:ec: 12:86:8c:51:29:91:05:e3:fb:09:e7:d3:ab:59:30:20:70:85: 4b:41:7c:d7:be:ec:23:48:f9:18:bf:a8:e3:20:f2:80:6c:4d: ee:2f:e2:79:76:64:14:b3:b6:c1:ea:6c:dd:54:0d:83:27:df: bd:e2:82:17:45:fc:bb:b5:f4:70:49:da:9b:9e:a5:1d:3d:7b: b7:dc:d3:72:40:7d:ad:7e:fb:b9:7a:79:11:8a:e9:73:c3:82: ba:8a:dc:3b:04:fc:66:fd:98:78:19:e1:55:3d:0e:bb:78:a8: a8:c3:de:bc:20:10:0c:f4:c9:87:13:1a:df:2a:93:5c:ff:cf: 2d:de:85:06 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs+bQaoDBQblht6P2En+2yUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQxMTIyYTVjYjA2NDNmNzM2YzdlYzc5NjE4MDlhMjU5Mzg2 NjhmMGUwHhcNMjUxMjIxMDEwMTMxWhcNMjUxMjIyMDEwMTMxWjAzMTEwLwYDVQQD Eyg4OTA4NjBkYmYwNGFlNWQzNDMwMGNhOWY5NzFhMWVmMzEwMzQ1MmJlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoBGiicr7My0oaK3Bfegk3OOnFGPo 0zdaMbf3sO/4nm/l8EVCyjYmAzq13Rr0ESJZmRKknesEPPZ+mfOZJqbwopFk7MiD /tk/JO6tyP/dt5wfywzZW63iKHfIqxl1llw9JRU2SWp39CIfLNddcEULw17VOzPf O63Px+MKQl1f/+MW3yVwkQ2DvBiuhdxPIzVhVNbT2LSm8mSJL4A3mfufE+x9sWbY 2vJIJO0j4gmxC/+hKNlucYMcDctDgN0bQyBkb/jfIk8mM9UINVv1ZH60aIFdYAZU aGvBVV51BJDjiaCXklae/Wx7Sj7D4WmqIWyeVoDhjno4gszE3uA2BTd8IwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIkIYNvwSuXTQwDKn5caHvMQNFK+MB8GA1UdIwQY MBaAFNESKlywZD9zbH7HlhgJolk4Zo8OMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMFJJcVhMQmtQM05zZnNlV0dBbWlXVGhtanc0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMy9hY2NkMzgtMGFlNi00YjQzLWExNjgt MTE1MmY0MzkzMDIwLzEvMFJJcVhMQmtQM05zZnNlV0dBbWlXVGhtanc0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMy9hY2NkMzgtMGFlNi00YjQzLWExNjgtMTE1MmY0MzkzMDIw LzEvMFJJcVhMQmtQM05zZnNlV0dBbWlXVGhtanc0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASIcw8bjJ 9NMqku0S5QI0gOXQocYMfSf6wJaikSIeBIk2nkC5bScwy2jSaWbB+mvfA46S5YRI l1upjIkf7tLJerUCdpD5UjJttJSI+hIQ9cBZ7P26jnzCaQ1PTJdHjZ2fUyFM/gSP aMj1m/zzi87aD4cdUioHzJuS33nrxMvsEoaMUSmRBeP7CefTq1kwIHCFS0F8177s I0j5GL+o4yDygGxN7i/ieXZkFLO2weps3VQNgyffveKCF0X8u7X0cEnam56lHT17 t9zTckB9rX77uXp5EYrpc8OCuorcOwT8Zv2YeBnhVT0Ou3ioqMPevCAQDPTJhxMa 3yqTXP/PLd6FBg== -----END CERTIFICATE-----Generated at Sun Dec 21 09:18:30 2025 by rpki-client