This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/cb5abb-b3f7-4d40-ad36-251168edd3e4/1/ix7fUmscpf8OaC_0iuzhIdJ7wMM.mft File: ix7fUmscpf8OaC_0iuzhIdJ7wMM.mft (raw, json) Hash identifier: r/XIOnADpgXjwQhCyEUl8cdJhMwbmeMczFC4RN1b8eE= Subject key identifier: 52:CC:8A:77:81:36:A9:AB:3A:54:E3:12:8A:B2:7C:F4:44:1D:CD:DC Authority key identifier: 8B:1E:DF:52:6B:1C:A5:FF:0E:68:2F:F4:8A:EC:E1:21:D2:7B:C0:C3 Certificate issuer: /CN=8b1edf526b1ca5ff0e682ff48aece121d27bc0c3 Certificate serial: 019B44DD0D098A13B59094ABC876B6006750 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ix7fUmscpf8OaC_0iuzhIdJ7wMM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/cb5abb-b3f7-4d40-ad36-251168edd3e4/1/ix7fUmscpf8OaC_0iuzhIdJ7wMM.mft Manifest number: 06DB Signing time: Mon 22 Dec 2025 07:01:36 +0000 Manifest this update: Mon 22 Dec 2025 07:01:36 +0000 Manifest next update: Tue 23 Dec 2025 07:01:36 +0000 Files and hashes: 1: 1iEj79HjJmqaWkGf361U7nZQikY.roa (hash: 94aaNrCAEDrHjoHsfGX3cHWK+s0OW99qZZJRJsNm9lg=) 2: ix7fUmscpf8OaC_0iuzhIdJ7wMM.crl (hash: 4f+/35NDPkxjwJARXFRRvPWuIcuh1uEqKyNWuQDNXaw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/cb5abb-b3f7-4d40-ad36-251168edd3e4/1/ix7fUmscpf8OaC_0iuzhIdJ7wMM.crl rsync://rpki.ripe.net/repository/DEFAULT/39/cb5abb-b3f7-4d40-ad36-251168edd3e4/1/ix7fUmscpf8OaC_0iuzhIdJ7wMM.mft rsync://rpki.ripe.net/repository/DEFAULT/ix7fUmscpf8OaC_0iuzhIdJ7wMM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 07:01:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:44:dd:0d:09:8a:13:b5:90:94:ab:c8:76:b6:00:67:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8b1edf526b1ca5ff0e682ff48aece121d27bc0c3 Validity Not Before: Dec 22 07:01:36 2025 GMT Not After : Dec 23 07:01:36 2025 GMT Subject: CN=52cc8a778136a9ab3a54e3128ab27cf4441dcddc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:f4:9f:b1:f2:10:4a:2e:5e:59:b2:4a:ad:8b: d9:95:54:34:61:73:c2:33:ba:99:07:5f:0d:d9:99: f5:42:22:7c:ae:fc:2e:19:17:62:09:ae:0e:15:20: 24:b6:b3:bf:20:08:51:b2:b5:2f:05:3f:75:e2:44: 5c:f7:d6:0b:c0:df:fc:3a:aa:e0:7c:a9:7e:96:82: 8d:04:a4:ee:83:0d:b9:f8:12:41:33:a4:6f:b0:59: d0:8a:3f:2e:01:1f:73:30:47:0c:7f:e9:63:6d:e1: 26:b7:c7:e2:20:ba:d6:2b:d1:d9:9c:d4:c0:ba:c7: 4e:af:3e:ec:57:55:d3:8b:b0:49:e4:96:66:78:4f: e8:5a:fd:7a:83:1b:ac:7c:66:3c:0f:db:42:82:42: ae:70:8f:23:fd:33:a0:89:49:c1:0c:8e:0b:8c:ac: 2e:50:ac:01:01:5c:52:3d:5f:c2:61:33:51:c8:35: 71:cc:67:cf:4f:e1:c9:ff:7d:01:a9:f4:6c:56:25: ef:a9:66:89:f6:c8:70:ba:b8:ae:ce:97:48:7f:c1: 84:da:6e:64:f7:66:95:b5:21:cf:a1:bb:ae:a5:38: c4:c7:74:3e:6a:af:48:d6:5c:6a:12:4c:d3:1d:80: e6:b4:8d:9b:8c:6f:d2:5c:4b:e5:d5:91:dd:73:74: 3b:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:CC:8A:77:81:36:A9:AB:3A:54:E3:12:8A:B2:7C:F4:44:1D:CD:DC X509v3 Authority Key Identifier: keyid:8B:1E:DF:52:6B:1C:A5:FF:0E:68:2F:F4:8A:EC:E1:21:D2:7B:C0:C3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ix7fUmscpf8OaC_0iuzhIdJ7wMM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/cb5abb-b3f7-4d40-ad36-251168edd3e4/1/ix7fUmscpf8OaC_0iuzhIdJ7wMM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/39/cb5abb-b3f7-4d40-ad36-251168edd3e4/1/ix7fUmscpf8OaC_0iuzhIdJ7wMM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 52:02:03:a9:17:a5:c6:c1:e5:d6:4a:e1:05:26:55:76:88:12: d2:69:0d:8d:68:80:49:b7:d5:9f:98:5d:76:06:3b:19:51:66: 44:5e:84:4c:4e:6f:99:5f:44:44:e3:37:ce:93:9d:d9:4f:90: c9:a6:aa:4d:cf:de:65:a6:e9:f5:4c:1a:ad:20:34:b3:29:4f: 00:90:5f:fc:48:e2:12:05:c7:e4:f0:2d:16:d9:94:d3:13:54: 84:79:53:84:0c:ce:fe:67:a6:ae:fc:93:0a:7e:a1:22:b2:b5: 79:da:27:74:11:4e:2d:89:63:67:e7:8a:f7:63:18:0a:45:d8: af:b1:bb:a6:7a:b2:6b:c7:b2:61:bb:63:19:ee:73:64:8f:11: b9:5d:2d:98:0f:ba:2f:87:2f:d0:b9:8c:ee:c5:3a:10:89:ab: eb:52:69:0f:f9:b4:75:5c:cd:6f:0d:27:d5:c9:a9:a0:9e:89: 11:3f:69:47:2c:fc:63:22:f0:9a:d5:70:79:11:69:90:41:0f: 65:ec:54:d6:26:a6:4d:fb:c0:19:6d:a8:7f:f4:ce:1e:4c:b9: 5e:3a:2e:13:e5:9e:f6:e0:b9:4a:42:1e:05:45:a4:b0:2f:1b: 9b:76:67:14:a3:a6:81:71:0f:53:f3:26:1b:e3:72:8d:fb:b0: dd:18:e7:60 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtE3Q0JihO1kJSryHa2AGdQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhiMWVkZjUyNmIxY2E1ZmYwZTY4MmZmNDhhZWNlMTIxZDI3 YmMwYzMwHhcNMjUxMjIyMDcwMTM2WhcNMjUxMjIzMDcwMTM2WjAzMTEwLwYDVQQD Eyg1MmNjOGE3NzgxMzZhOWFiM2E1NGUzMTI4YWIyN2NmNDQ0MWRjZGRjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwfSfsfIQSi5eWbJKrYvZlVQ0YXPC M7qZB18N2Zn1QiJ8rvwuGRdiCa4OFSAktrO/IAhRsrUvBT914kRc99YLwN/8Oqrg fKl+loKNBKTugw25+BJBM6RvsFnQij8uAR9zMEcMf+ljbeEmt8fiILrWK9HZnNTA usdOrz7sV1XTi7BJ5JZmeE/oWv16gxusfGY8D9tCgkKucI8j/TOgiUnBDI4LjKwu UKwBAVxSPV/CYTNRyDVxzGfPT+HJ/30BqfRsViXvqWaJ9shwuriuzpdIf8GE2m5k 92aVtSHPobuupTjEx3Q+aq9I1lxqEkzTHYDmtI2bjG/SXEvl1ZHdc3Q7oQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFLMineBNqmrOlTjEoqyfPREHc3cMB8GA1UdIwQY MBaAFIse31JrHKX/Dmgv9Irs4SHSe8DDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaXg3ZlVtc2NwZjhPYUNfMGl1emhJZEo3d01NLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOS9jYjVhYmItYjNmNy00ZDQwLWFkMzYt MjUxMTY4ZWRkM2U0LzEvaXg3ZlVtc2NwZjhPYUNfMGl1emhJZEo3d01NLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zOS9jYjVhYmItYjNmNy00ZDQwLWFkMzYtMjUxMTY4ZWRkM2U0 LzEvaXg3ZlVtc2NwZjhPYUNfMGl1emhJZEo3d01NLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUgIDqRel xsHl1krhBSZVdogS0mkNjWiASbfVn5hddgY7GVFmRF6ETE5vmV9EROM3zpOd2U+Q yaaqTc/eZabp9UwarSA0sylPAJBf/EjiEgXH5PAtFtmU0xNUhHlThAzO/memrvyT Cn6hIrK1edondBFOLYljZ+eK92MYCkXYr7G7pnqya8eyYbtjGe5zZI8RuV0tmA+6 L4cv0LmM7sU6EImr61JpD/m0dVzNbw0n1cmpoJ6JET9pRyz8YyLwmtVweRFpkEEP ZexU1iamTfvAGW2of/TOHky5XjouE+We9uC5SkIeBUWksC8bm3ZnFKOmgXEPU/Mm G+Nyjfuw3RjnYA== -----END CERTIFICATE-----Generated at Mon Dec 22 12:58:28 2025 by rpki-client