This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/2a1ce9-fb4c-41ee-9ff6-316ef261f4a5/1/IT4dUNUiiL7oDupDVXcBhxJAm74.mft File: IT4dUNUiiL7oDupDVXcBhxJAm74.mft (raw, json) Hash identifier: 0tieFy5tQq7Uutv8pa1B/E4QA9LNZpTF2Qzafch2up4= Subject key identifier: 8E:68:66:10:F7:41:E6:3F:A0:63:9A:9F:BA:A6:49:54:94:FD:B7:0A Authority key identifier: 21:3E:1D:50:D5:22:88:BE:E8:0E:EA:43:55:77:01:87:12:40:9B:BE Certificate issuer: /CN=213e1d50d52288bee80eea435577018712409bbe Certificate serial: 019B39B427454BFBF10749BC16CD209956CB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IT4dUNUiiL7oDupDVXcBhxJAm74.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/2a1ce9-fb4c-41ee-9ff6-316ef261f4a5/1/IT4dUNUiiL7oDupDVXcBhxJAm74.mft Manifest number: 12D2 Signing time: Sat 20 Dec 2025 03:01:06 +0000 Manifest this update: Sat 20 Dec 2025 03:01:06 +0000 Manifest next update: Sun 21 Dec 2025 03:01:06 +0000 Files and hashes: 1: 76krOMMFj4xGzKVVHko6uuDROxo.roa (hash: ceX2KDmhx3x4hNPX/8MXCJQ5KaH4yEnp1JFYHt1MSdY=) 2: F5qz-Vy2ncltsniwS8n2KgCCfq0.roa (hash: kxMCsu4yD7h4P+QzcS37eIb+y0MEuK5iSa4JgSytJ7M=) 3: IT4dUNUiiL7oDupDVXcBhxJAm74.crl (hash: DS9DMuCo25M1J9w6++U/oLptwl8ufV8XDn8Sdp1sxM4=) 4: StSC9N03azFTttR3EoIav2MRsZc.roa (hash: Cu2Gg7GKVcYUuysW1qolVhXM9Kgp01W96yjaPNDKJxk=) 5: ewZSVtLlMKbZRioDRSGf8H0IaLA.roa (hash: cBUrQBxHZc9doLajihiHlq4PDgUK5KQSHA/948O3rQg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/2a1ce9-fb4c-41ee-9ff6-316ef261f4a5/1/IT4dUNUiiL7oDupDVXcBhxJAm74.crl rsync://rpki.ripe.net/repository/DEFAULT/37/2a1ce9-fb4c-41ee-9ff6-316ef261f4a5/1/IT4dUNUiiL7oDupDVXcBhxJAm74.mft rsync://rpki.ripe.net/repository/DEFAULT/IT4dUNUiiL7oDupDVXcBhxJAm74.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:39:b4:27:45:4b:fb:f1:07:49:bc:16:cd:20:99:56:cb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=213e1d50d52288bee80eea435577018712409bbe Validity Not Before: Dec 20 03:01:06 2025 GMT Not After : Dec 21 03:01:06 2025 GMT Subject: CN=8e686610f741e63fa0639a9fbaa6495494fdb70a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:1c:f2:35:14:67:36:8c:4f:55:b7:a6:5d:72: d2:59:3e:78:b5:1e:17:c0:00:18:6f:c5:5f:9f:14: 61:bd:84:d5:2e:b0:2a:7a:69:3d:c1:cf:60:d8:8f: a8:ab:27:0f:58:a8:92:e7:ac:65:4c:b4:c8:f9:75: fc:39:d1:9b:f1:13:04:0c:1b:fd:74:b9:28:4d:62: 15:40:19:b9:90:cd:8c:d9:75:1c:f1:d0:42:76:6e: 2e:4c:3f:80:36:b6:0e:55:c4:98:44:7c:64:71:21: 6d:2e:a6:96:7b:a3:d8:31:b9:64:66:30:98:59:10: c8:01:f1:bc:b1:35:0d:bc:c0:e1:e7:3b:7c:f5:72: 28:c7:42:b0:db:0e:65:fb:50:33:01:ec:27:a4:76: 29:67:b8:41:4f:0b:91:f5:84:8e:7b:82:db:33:84: 88:46:a2:06:1e:5d:5f:c5:1b:e5:40:be:9a:79:1a: 4a:36:9c:00:4c:d4:52:4e:b1:2a:f3:c5:85:96:5e: 0e:bb:a2:d9:71:f0:4b:0e:12:5f:f2:0b:25:3e:d7: e6:c7:5f:77:36:2b:fb:68:69:98:c8:5a:1a:48:f4: a4:fb:55:ae:25:32:94:c9:cc:22:7b:70:ab:34:a7: 6f:fe:1e:a7:34:30:2f:b9:23:8a:d2:86:81:fb:45: d8:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:68:66:10:F7:41:E6:3F:A0:63:9A:9F:BA:A6:49:54:94:FD:B7:0A X509v3 Authority Key Identifier: keyid:21:3E:1D:50:D5:22:88:BE:E8:0E:EA:43:55:77:01:87:12:40:9B:BE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IT4dUNUiiL7oDupDVXcBhxJAm74.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/2a1ce9-fb4c-41ee-9ff6-316ef261f4a5/1/IT4dUNUiiL7oDupDVXcBhxJAm74.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/37/2a1ce9-fb4c-41ee-9ff6-316ef261f4a5/1/IT4dUNUiiL7oDupDVXcBhxJAm74.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 12:fe:95:a4:d5:ac:fb:7b:d8:42:cb:d5:70:e2:96:2e:58:c8: 44:5b:fd:67:bf:f6:72:35:6c:a2:1b:7b:6b:da:24:d7:c9:67: e8:d1:d3:f6:16:73:3c:ec:33:dc:42:9c:a6:0d:ac:21:a6:c9: 3a:8c:49:ac:64:a0:20:d3:b1:5a:b6:d1:83:f0:ac:92:e7:6c: c1:b7:9f:0e:e2:a4:e4:c5:3f:4c:44:a1:38:73:58:57:f2:05: a9:fd:3a:ad:78:53:13:c1:d9:cd:a1:0a:1b:52:18:18:45:c5: f4:ef:5a:d8:5c:12:b1:33:41:4b:3f:be:28:87:b5:c5:77:ee: 0d:47:5a:b5:57:d8:70:0d:41:3f:90:51:aa:38:90:8a:1a:3b: a6:eb:e0:a1:09:a5:23:3b:d4:99:b1:11:f6:08:e4:e4:b4:f3: 07:df:7d:98:9e:9b:c4:b8:0f:5b:57:87:0e:b3:32:6c:6b:5c: 9b:7c:3b:22:ad:67:a4:b8:ac:7c:ed:2b:f3:66:29:36:21:e5: 9e:55:17:55:52:2b:e9:89:80:f7:00:20:04:d0:75:27:e6:77: 94:4b:f4:6a:1e:1a:74:9f:c4:61:2a:4a:ab:cd:59:1a:6e:ef: 27:64:25:4e:84:c2:51:c0:50:10:cf:74:ac:2b:47:61:98:bd: e9:fa:42:8e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs5tCdFS/vxB0m8Fs0gmVbLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIxM2UxZDUwZDUyMjg4YmVlODBlZWE0MzU1NzcwMTg3MTI0 MDliYmUwHhcNMjUxMjIwMDMwMTA2WhcNMjUxMjIxMDMwMTA2WjAzMTEwLwYDVQQD Eyg4ZTY4NjYxMGY3NDFlNjNmYTA2MzlhOWZiYWE2NDk1NDk0ZmRiNzBhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvBzyNRRnNoxPVbemXXLSWT54tR4X wAAYb8VfnxRhvYTVLrAqemk9wc9g2I+oqycPWKiS56xlTLTI+XX8OdGb8RMEDBv9 dLkoTWIVQBm5kM2M2XUc8dBCdm4uTD+ANrYOVcSYRHxkcSFtLqaWe6PYMblkZjCY WRDIAfG8sTUNvMDh5zt89XIox0Kw2w5l+1AzAewnpHYpZ7hBTwuR9YSOe4LbM4SI RqIGHl1fxRvlQL6aeRpKNpwATNRSTrEq88WFll4Ou6LZcfBLDhJf8gslPtfmx193 Niv7aGmYyFoaSPSk+1WuJTKUycwie3CrNKdv/h6nNDAvuSOK0oaB+0XYAQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFI5oZhD3QeY/oGOan7qmSVSU/bcKMB8GA1UdIwQY MBaAFCE+HVDVIoi+6A7qQ1V3AYcSQJu+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSVQ0ZFVOVWlpTDdvRHVwRFZYY0JoeEpBbTc0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNy8yYTFjZTktZmI0Yy00MWVlLTlmZjYt MzE2ZWYyNjFmNGE1LzEvSVQ0ZFVOVWlpTDdvRHVwRFZYY0JoeEpBbTc0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNy8yYTFjZTktZmI0Yy00MWVlLTlmZjYtMzE2ZWYyNjFmNGE1 LzEvSVQ0ZFVOVWlpTDdvRHVwRFZYY0JoeEpBbTc0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEv6VpNWs +3vYQsvVcOKWLljIRFv9Z7/2cjVsoht7a9ok18ln6NHT9hZzPOwz3EKcpg2sIabJ OoxJrGSgINOxWrbRg/CskudswbefDuKk5MU/TEShOHNYV/IFqf06rXhTE8HZzaEK G1IYGEXF9O9a2FwSsTNBSz++KIe1xXfuDUdatVfYcA1BP5BRqjiQiho7puvgoQml IzvUmbER9gjk5LTzB999mJ6bxLgPW1eHDrMybGtcm3w7Iq1npLisfO0r82YpNiHl nlUXVVIr6YmA9wAgBNB1J+Z3lEv0ah4adJ/EYSpKq81ZGm7vJ2QlToTCUcBQEM90 rCtHYZi96fpCjg== -----END CERTIFICATE-----Generated at Sat Dec 20 09:07:24 2025 by rpki-client