This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/6f4230-05e6-4c00-a4ab-06b8dfe498bd/1/_im9i7SagJlrRg9QKO1SqOBXwLE.mft File: _im9i7SagJlrRg9QKO1SqOBXwLE.mft (raw, json) Hash identifier: GeaJ4H/zhbhuUqbfRD4gZdRamu0ebfqvgNTSwjuKyWc= Subject key identifier: 68:F0:6E:C8:15:E0:42:9F:E2:C8:30:97:0D:FC:EB:42:9A:EE:F3:12 Authority key identifier: FE:29:BD:8B:B4:9A:80:99:6B:46:0F:50:28:ED:52:A8:E0:57:C0:B1 Certificate issuer: /CN=fe29bd8bb49a80996b460f5028ed52a8e057c0b1 Certificate serial: 019B559A58D1B4D6ACB98777257C780EA9E1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_im9i7SagJlrRg9QKO1SqOBXwLE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/6f4230-05e6-4c00-a4ab-06b8dfe498bd/1/_im9i7SagJlrRg9QKO1SqOBXwLE.mft Manifest number: 154A Signing time: Thu 25 Dec 2025 13:02:17 +0000 Manifest this update: Thu 25 Dec 2025 13:02:17 +0000 Manifest next update: Fri 26 Dec 2025 13:02:17 +0000 Files and hashes: 1: GKGUA1ULBuEBg6UZcKqTCkNmhrM.roa (hash: S+MOcu2hV7fbEQM0gv8ckh0dyXeXiOXULnIXULZ3i+k=) 2: _im9i7SagJlrRg9QKO1SqOBXwLE.crl (hash: kGIAw6pcHEODdwltk6XGN7/gMr5mavbKNXQjKGRSHX0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/6f4230-05e6-4c00-a4ab-06b8dfe498bd/1/_im9i7SagJlrRg9QKO1SqOBXwLE.crl rsync://rpki.ripe.net/repository/DEFAULT/2f/6f4230-05e6-4c00-a4ab-06b8dfe498bd/1/_im9i7SagJlrRg9QKO1SqOBXwLE.mft rsync://rpki.ripe.net/repository/DEFAULT/_im9i7SagJlrRg9QKO1SqOBXwLE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 26 Dec 2025 10:17:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:55:9a:58:d1:b4:d6:ac:b9:87:77:25:7c:78:0e:a9:e1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fe29bd8bb49a80996b460f5028ed52a8e057c0b1 Validity Not Before: Dec 25 13:02:17 2025 GMT Not After : Dec 26 13:02:17 2025 GMT Subject: CN=68f06ec815e0429fe2c830970dfceb429aeef312 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:02:38:76:1d:ea:f0:74:6f:8b:93:e6:c0:38: a9:86:e9:06:72:ac:fd:be:18:d1:41:b6:40:ed:26: 75:1f:2c:f4:2f:71:c4:ec:fb:9f:ca:c3:7e:67:73: 6c:06:5a:78:5f:88:be:85:a5:66:12:99:84:6b:88: 1b:12:89:06:45:ec:60:50:76:a0:53:e6:27:a0:fb: c9:96:85:d5:9c:a2:f6:db:e0:2e:a4:99:a7:3a:7e: 42:fa:a6:e0:7a:0c:b3:fc:98:e2:b6:f1:a7:c9:5b: 56:16:b4:73:c6:83:1b:0f:19:1e:bb:ba:66:96:61: 19:51:37:2e:57:3e:ba:26:0b:7f:16:94:8b:50:29: 6d:42:ba:94:46:a9:0d:cc:08:ac:b9:48:31:6b:80: b5:f1:4e:de:79:2b:13:d7:6e:c2:d0:de:07:98:3b: 89:90:13:79:e4:7c:92:5d:84:00:0b:df:72:42:9e: ba:83:94:a3:ef:d0:43:e3:8b:2a:60:bf:31:18:a4: fe:01:09:f9:25:8d:39:25:47:72:83:a4:6a:19:16: 55:5b:17:0f:fb:64:43:f7:7d:b0:c5:18:f1:0a:a1: e2:67:25:19:2e:3b:ac:84:1e:b2:34:a0:d1:60:e1: 52:f3:ca:10:68:d4:52:33:4b:df:be:61:f7:7c:f8: 73:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:F0:6E:C8:15:E0:42:9F:E2:C8:30:97:0D:FC:EB:42:9A:EE:F3:12 X509v3 Authority Key Identifier: keyid:FE:29:BD:8B:B4:9A:80:99:6B:46:0F:50:28:ED:52:A8:E0:57:C0:B1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_im9i7SagJlrRg9QKO1SqOBXwLE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/6f4230-05e6-4c00-a4ab-06b8dfe498bd/1/_im9i7SagJlrRg9QKO1SqOBXwLE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/6f4230-05e6-4c00-a4ab-06b8dfe498bd/1/_im9i7SagJlrRg9QKO1SqOBXwLE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 70:4d:ce:64:60:e5:03:82:bd:96:c5:a4:cf:cd:20:2e:20:93: 9e:e1:b1:36:bc:36:da:a2:72:d7:d7:d6:7d:37:d7:7e:15:5b: a9:fc:8a:4b:2b:c2:39:ef:fa:58:33:e7:d7:28:10:5d:18:b8: 3d:78:f8:8c:cf:de:63:5b:7d:8c:96:8d:99:a6:2b:aa:b8:97: 31:fc:7f:a9:b5:ff:f0:74:23:84:a6:19:8c:f3:83:7f:7d:77: bf:97:93:50:b8:2d:ef:2b:42:50:15:2d:35:ac:9a:45:04:ec: eb:40:18:f8:f1:ae:59:cf:b2:2f:55:20:0e:af:18:ba:cb:06: 60:d8:e5:ed:e8:a6:f8:b1:f0:42:17:c3:7d:3e:45:b3:52:8f: aa:88:7b:ef:a3:9e:cf:04:c9:b6:15:84:8d:3d:2e:56:c4:3c: 6b:76:bd:0f:f8:e0:89:02:d5:c2:2d:b5:89:d3:26:05:7a:cb: 64:00:86:0d:2f:7e:22:d9:3c:e6:6e:44:1e:4f:8b:94:f0:3e: 04:1a:ff:66:11:df:f0:b0:ed:3f:62:74:49:23:30:87:e9:ca: f4:f3:f3:67:61:c2:d9:83:4c:8d:27:d2:87:34:ac:c9:44:24: 33:80:18:9c:26:7c:f2:70:d7:0c:bf:7d:53:30:a2:55:1b:bf: b9:b2:58:0b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtVmljRtNasuYd3JXx4DqnhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZlMjliZDhiYjQ5YTgwOTk2YjQ2MGY1MDI4ZWQ1MmE4ZTA1 N2MwYjEwHhcNMjUxMjI1MTMwMjE3WhcNMjUxMjI2MTMwMjE3WjAzMTEwLwYDVQQD Eyg2OGYwNmVjODE1ZTA0MjlmZTJjODMwOTcwZGZjZWI0MjlhZWVmMzEyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5AI4dh3q8HRvi5PmwDiphukGcqz9 vhjRQbZA7SZ1Hyz0L3HE7PufysN+Z3NsBlp4X4i+haVmEpmEa4gbEokGRexgUHag U+YnoPvJloXVnKL22+AupJmnOn5C+qbgegyz/JjitvGnyVtWFrRzxoMbDxkeu7pm lmEZUTcuVz66Jgt/FpSLUCltQrqURqkNzAisuUgxa4C18U7eeSsT127C0N4HmDuJ kBN55HySXYQAC99yQp66g5Sj79BD44sqYL8xGKT+AQn5JY05JUdyg6RqGRZVWxcP +2RD932wxRjxCqHiZyUZLjushB6yNKDRYOFS88oQaNRSM0vfvmH3fPhzyQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGjwbsgV4EKf4sgwlw3860Ka7vMSMB8GA1UdIwQY MBaAFP4pvYu0moCZa0YPUCjtUqjgV8CxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX2ltOWk3U2FnSmxyUmc5UUtPMVNxT0JYd0xFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZi82ZjQyMzAtMDVlNi00YzAwLWE0YWIt MDZiOGRmZTQ5OGJkLzEvX2ltOWk3U2FnSmxyUmc5UUtPMVNxT0JYd0xFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZi82ZjQyMzAtMDVlNi00YzAwLWE0YWItMDZiOGRmZTQ5OGJk LzEvX2ltOWk3U2FnSmxyUmc5UUtPMVNxT0JYd0xFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcE3OZGDl A4K9lsWkz80gLiCTnuGxNrw22qJy19fWfTfXfhVbqfyKSyvCOe/6WDPn1ygQXRi4 PXj4jM/eY1t9jJaNmaYrqriXMfx/qbX/8HQjhKYZjPODf313v5eTULgt7ytCUBUt NayaRQTs60AY+PGuWc+yL1UgDq8YussGYNjl7eim+LHwQhfDfT5Fs1KPqoh776Oe zwTJthWEjT0uVsQ8a3a9D/jgiQLVwi21idMmBXrLZACGDS9+Itk85m5EHk+LlPA+ BBr/ZhHf8LDtP2J0SSMwh+nK9PPzZ2HC2YNMjSfShzSsyUQkM4AYnCZ88nDXDL99 UzCiVRu/ubJYCw== -----END CERTIFICATE-----Generated at Thu Dec 25 15:42:38 2025 by rpki-client