This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/2a1ce9-fb4c-41ee-9ff6-316ef261f4a5/1/IT4dUNUiiL7oDupDVXcBhxJAm74.mft File: IT4dUNUiiL7oDupDVXcBhxJAm74.mft (raw, json) Hash identifier: 8kPPniKfgUWaPBhiG56T2EvM0oBylvSgV5ML4+mazJk= Subject key identifier: 21:23:B1:09:06:86:78:F9:49:10:13:CC:85:51:79:35:A2:A6:60:5D Authority key identifier: 21:3E:1D:50:D5:22:88:BE:E8:0E:EA:43:55:77:01:87:12:40:9B:BE Certificate issuer: /CN=213e1d50d52288bee80eea435577018712409bbe Certificate serial: 019B4EF24B75B5E69B5B15D7176CE132997A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IT4dUNUiiL7oDupDVXcBhxJAm74.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/2a1ce9-fb4c-41ee-9ff6-316ef261f4a5/1/IT4dUNUiiL7oDupDVXcBhxJAm74.mft Manifest number: 12DD Signing time: Wed 24 Dec 2025 06:01:00 +0000 Manifest this update: Wed 24 Dec 2025 06:01:00 +0000 Manifest next update: Thu 25 Dec 2025 06:01:00 +0000 Files and hashes: 1: 76krOMMFj4xGzKVVHko6uuDROxo.roa (hash: ceX2KDmhx3x4hNPX/8MXCJQ5KaH4yEnp1JFYHt1MSdY=) 2: F5qz-Vy2ncltsniwS8n2KgCCfq0.roa (hash: kxMCsu4yD7h4P+QzcS37eIb+y0MEuK5iSa4JgSytJ7M=) 3: IT4dUNUiiL7oDupDVXcBhxJAm74.crl (hash: 3UUiLj7ZRHdMKNFKC0llkMQ42diwXgYzr51uKStqL78=) 4: StSC9N03azFTttR3EoIav2MRsZc.roa (hash: Cu2Gg7GKVcYUuysW1qolVhXM9Kgp01W96yjaPNDKJxk=) 5: ewZSVtLlMKbZRioDRSGf8H0IaLA.roa (hash: cBUrQBxHZc9doLajihiHlq4PDgUK5KQSHA/948O3rQg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/2a1ce9-fb4c-41ee-9ff6-316ef261f4a5/1/IT4dUNUiiL7oDupDVXcBhxJAm74.crl rsync://rpki.ripe.net/repository/DEFAULT/37/2a1ce9-fb4c-41ee-9ff6-316ef261f4a5/1/IT4dUNUiiL7oDupDVXcBhxJAm74.mft rsync://rpki.ripe.net/repository/DEFAULT/IT4dUNUiiL7oDupDVXcBhxJAm74.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4e:f2:4b:75:b5:e6:9b:5b:15:d7:17:6c:e1:32:99:7a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=213e1d50d52288bee80eea435577018712409bbe Validity Not Before: Dec 24 06:01:00 2025 GMT Not After : Dec 25 06:01:00 2025 GMT Subject: CN=2123b109068678f9491013cc85517935a2a6605d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:14:55:d4:8b:15:75:e8:d6:80:35:ea:33:34: ce:8f:d6:33:fd:b6:4d:c8:7d:b5:07:cd:79:79:ab: 64:6a:a8:2e:9b:bc:9f:01:39:ac:6e:0c:a5:fe:f3: 9c:10:5b:79:30:15:12:b7:5f:80:a2:d6:38:c0:be: 00:a7:14:07:bb:aa:ec:c5:b6:b0:17:10:63:fa:94: 1b:38:2d:dc:a5:42:57:e6:ff:49:9b:4f:03:3b:8d: 98:ce:53:27:b0:0d:c6:90:98:02:1e:d6:37:77:04: d0:da:e4:27:26:de:24:03:ab:57:9d:13:95:32:11: c6:7f:8c:2e:64:b2:37:11:14:65:50:19:aa:ed:6e: 89:3d:e2:d4:a8:f1:37:5e:1d:b7:3e:d3:8f:9b:f9: 96:9a:f4:fb:33:7b:75:cc:44:65:b6:e2:33:b3:7c: e8:6b:92:da:79:d1:12:c9:96:4c:85:ac:03:42:33: de:cd:40:31:57:54:87:d4:cf:40:4f:d4:92:15:d6: b1:72:6a:ac:f0:da:93:18:95:d3:cb:55:ae:cf:ea: 56:79:4e:d4:8b:a8:b0:bb:c9:98:87:bd:bc:00:e7: ae:8d:fa:62:54:06:f2:8b:71:ad:cf:20:60:1c:68: 6a:ad:d3:a6:ce:0e:e6:25:fd:89:4f:67:04:f9:0c: 5b:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:23:B1:09:06:86:78:F9:49:10:13:CC:85:51:79:35:A2:A6:60:5D X509v3 Authority Key Identifier: keyid:21:3E:1D:50:D5:22:88:BE:E8:0E:EA:43:55:77:01:87:12:40:9B:BE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IT4dUNUiiL7oDupDVXcBhxJAm74.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/2a1ce9-fb4c-41ee-9ff6-316ef261f4a5/1/IT4dUNUiiL7oDupDVXcBhxJAm74.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/37/2a1ce9-fb4c-41ee-9ff6-316ef261f4a5/1/IT4dUNUiiL7oDupDVXcBhxJAm74.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 10:54:d1:2a:99:b8:f2:d5:62:0e:db:8d:9e:52:f1:36:87:02: a0:16:18:39:14:4e:fe:14:17:59:d3:07:1c:93:23:cb:ae:42: a8:9a:ea:ea:60:e8:d5:b0:d5:74:9a:30:e1:b4:e7:eb:2c:f2: ae:fa:62:be:c3:c3:98:16:20:b7:d1:b9:35:a0:d6:c7:4d:03: 3e:a3:79:4a:f8:51:4a:26:dd:1c:bb:ea:e2:86:62:b3:c0:5d: 88:28:e9:4f:60:50:16:fc:d6:cd:dd:b5:5e:06:56:07:2b:90: e9:7e:58:44:16:ea:1f:fd:d0:25:21:49:3b:12:77:55:2c:16: b2:5e:19:31:59:54:a5:61:83:b8:3b:58:bf:94:0b:b3:e3:b4: c3:20:82:67:69:9d:fd:49:e3:36:e5:cb:67:6e:cb:fc:86:78: 78:6e:23:6b:67:2d:62:a3:51:bb:cd:2e:61:8e:32:a5:1c:18: c3:4f:66:da:7b:f1:2f:4b:44:78:16:d3:6c:e5:ab:a1:91:d4: c3:dc:ef:92:b3:19:04:66:c6:10:6b:7b:0a:02:af:22:b2:8f: ea:3e:97:0f:b3:27:66:52:da:13:ad:2a:8a:b9:14:5c:6b:22: 6a:91:38:a9:02:9b:c6:d0:94:e3:19:97:52:cb:b9:1b:48:91: f2:de:2f:bb -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtO8kt1teabWxXXF2zhMpl6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIxM2UxZDUwZDUyMjg4YmVlODBlZWE0MzU1NzcwMTg3MTI0 MDliYmUwHhcNMjUxMjI0MDYwMTAwWhcNMjUxMjI1MDYwMTAwWjAzMTEwLwYDVQQD EygyMTIzYjEwOTA2ODY3OGY5NDkxMDEzY2M4NTUxNzkzNWEyYTY2MDVkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2xRV1IsVdejWgDXqMzTOj9Yz/bZN yH21B815eatkaqgum7yfATmsbgyl/vOcEFt5MBUSt1+AotY4wL4ApxQHu6rsxbaw FxBj+pQbOC3cpUJX5v9Jm08DO42YzlMnsA3GkJgCHtY3dwTQ2uQnJt4kA6tXnROV MhHGf4wuZLI3ERRlUBmq7W6JPeLUqPE3Xh23PtOPm/mWmvT7M3t1zERltuIzs3zo a5LaedESyZZMhawDQjPezUAxV1SH1M9AT9SSFdaxcmqs8NqTGJXTy1Wuz+pWeU7U i6iwu8mYh728AOeujfpiVAbyi3GtzyBgHGhqrdOmzg7mJf2JT2cE+QxbeQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCEjsQkGhnj5SRATzIVReTWipmBdMB8GA1UdIwQY MBaAFCE+HVDVIoi+6A7qQ1V3AYcSQJu+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSVQ0ZFVOVWlpTDdvRHVwRFZYY0JoeEpBbTc0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNy8yYTFjZTktZmI0Yy00MWVlLTlmZjYt MzE2ZWYyNjFmNGE1LzEvSVQ0ZFVOVWlpTDdvRHVwRFZYY0JoeEpBbTc0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNy8yYTFjZTktZmI0Yy00MWVlLTlmZjYtMzE2ZWYyNjFmNGE1 LzEvSVQ0ZFVOVWlpTDdvRHVwRFZYY0JoeEpBbTc0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEFTRKpm4 8tViDtuNnlLxNocCoBYYORRO/hQXWdMHHJMjy65CqJrq6mDo1bDVdJow4bTn6yzy rvpivsPDmBYgt9G5NaDWx00DPqN5SvhRSibdHLvq4oZis8BdiCjpT2BQFvzWzd21 XgZWByuQ6X5YRBbqH/3QJSFJOxJ3VSwWsl4ZMVlUpWGDuDtYv5QLs+O0wyCCZ2md /UnjNuXLZ27L/IZ4eG4ja2ctYqNRu80uYY4ypRwYw09m2nvxL0tEeBbTbOWroZHU w9zvkrMZBGbGEGt7CgKvIrKP6j6XD7MnZlLaE60qirkUXGsiapE4qQKbxtCU4xmX Usu5G0iR8t4vuw== -----END CERTIFICATE-----Generated at Wed Dec 24 09:19:04 2025 by rpki-client