This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/e13b32-1ba9-4db9-a569-4aca09564fa8/1/ieXrHhIJiXh0XVQNypbP8N5HBNo.mft File: ieXrHhIJiXh0XVQNypbP8N5HBNo.mft (raw, json) Hash identifier: pOJuxSARHFHNTVMoC7fkgW1eyW9fhog8OgI8FflHrwA= Subject key identifier: 5F:FB:79:03:A8:48:79:A1:8E:0E:49:66:5E:93:0D:38:C6:5A:4C:B2 Authority key identifier: 89:E5:EB:1E:12:09:89:78:74:5D:54:0D:CA:96:CF:F0:DE:47:04:DA Certificate issuer: /CN=89e5eb1e12098978745d540dca96cff0de4704da Certificate serial: 019B446EA562EB09DF64E9E24E1C7C6A9B5F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ieXrHhIJiXh0XVQNypbP8N5HBNo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/e13b32-1ba9-4db9-a569-4aca09564fa8/1/ieXrHhIJiXh0XVQNypbP8N5HBNo.mft Manifest number: 0C01 Signing time: Mon 22 Dec 2025 05:01:00 +0000 Manifest this update: Mon 22 Dec 2025 05:01:00 +0000 Manifest next update: Tue 23 Dec 2025 05:01:00 +0000 Files and hashes: 1: ieXrHhIJiXh0XVQNypbP8N5HBNo.crl (hash: wwcD7WalyJWArEnz+ZAWCEcMpgLqQgUNNCvm2yRnsJ8=) 2: l-HFEGYP57VmF8aDDh7--ZbJBDw.roa (hash: z6foBKVqU7T5Yu/Dwks8ZalWU/MYlRsXoQCU7GPCUOE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/e13b32-1ba9-4db9-a569-4aca09564fa8/1/ieXrHhIJiXh0XVQNypbP8N5HBNo.crl rsync://rpki.ripe.net/repository/DEFAULT/48/e13b32-1ba9-4db9-a569-4aca09564fa8/1/ieXrHhIJiXh0XVQNypbP8N5HBNo.mft rsync://rpki.ripe.net/repository/DEFAULT/ieXrHhIJiXh0XVQNypbP8N5HBNo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 05:01:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:44:6e:a5:62:eb:09:df:64:e9:e2:4e:1c:7c:6a:9b:5f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89e5eb1e12098978745d540dca96cff0de4704da Validity Not Before: Dec 22 05:01:00 2025 GMT Not After : Dec 23 05:01:00 2025 GMT Subject: CN=5ffb7903a84879a18e0e49665e930d38c65a4cb2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:f1:1a:35:f8:48:b4:c7:bd:a7:2e:81:0c:1a: b5:06:b4:d8:15:9c:59:36:b3:20:e3:d6:ba:3f:8f: 30:95:de:77:02:1b:2d:a3:ce:0e:5d:2c:0b:d2:b7: 5c:c1:e0:6f:c2:29:49:5a:60:1b:5f:83:9d:ce:11: 98:e0:08:54:e1:c1:42:d4:1a:da:b1:a9:f0:e4:08: d8:d4:64:7b:f2:c9:b0:86:14:69:36:d5:e1:de:cb: 6d:b5:b6:a3:e9:9a:65:14:e5:37:1f:b9:cd:72:ce: 7e:3a:e2:a6:68:04:48:7a:b9:a0:78:49:f6:be:37: 83:46:4f:f4:9b:bd:65:19:04:d5:89:10:43:a1:ed: 5a:51:5e:ca:5d:ca:a3:2d:70:d4:92:1f:d8:02:34: 1f:e8:27:d8:fd:5e:3f:e3:17:49:72:24:26:14:a9: 55:e2:39:94:55:01:9c:a3:74:5b:1e:1c:c1:41:49: 7a:63:5b:50:6e:b2:b7:2c:7f:41:f8:d4:38:7f:14: 90:75:0c:65:de:46:4d:71:33:01:f1:e8:68:cd:ec: c6:58:4e:42:b5:94:d3:01:7f:cf:de:41:9a:e0:bc: cf:16:86:dd:c0:d8:3d:01:41:73:fe:66:84:9d:13: c7:70:3e:bd:7d:62:59:84:03:d3:84:fd:f7:3c:81: 8f:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:FB:79:03:A8:48:79:A1:8E:0E:49:66:5E:93:0D:38:C6:5A:4C:B2 X509v3 Authority Key Identifier: keyid:89:E5:EB:1E:12:09:89:78:74:5D:54:0D:CA:96:CF:F0:DE:47:04:DA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ieXrHhIJiXh0XVQNypbP8N5HBNo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/e13b32-1ba9-4db9-a569-4aca09564fa8/1/ieXrHhIJiXh0XVQNypbP8N5HBNo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/48/e13b32-1ba9-4db9-a569-4aca09564fa8/1/ieXrHhIJiXh0XVQNypbP8N5HBNo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 05:2a:bc:f5:e0:da:30:21:b2:1f:7c:84:fc:f4:8d:d6:54:d6: 6b:bb:97:05:11:d8:51:85:08:d6:83:d4:d3:07:07:c8:01:26: 4e:fe:63:26:cc:40:df:8c:3d:48:77:ee:fb:1c:23:fe:c5:c0: 55:af:76:b0:ef:cd:bf:f0:49:16:a0:6a:5b:c6:2c:d1:9c:43: f7:5f:22:e4:d3:52:d5:40:4e:ca:e5:54:5d:cf:fa:75:86:88: d0:a8:7d:c6:bc:5b:3a:e4:69:0c:f1:69:7b:34:7c:06:f5:7f: 10:e3:57:77:81:6b:8b:5a:2e:2e:c5:65:69:8b:2c:53:1f:4a: 1c:96:1c:62:fb:2e:c6:3b:0d:89:d6:bf:60:56:62:1a:01:5a: 7a:c7:7f:b7:45:ee:bc:48:a8:09:1c:c8:61:06:0d:80:e2:2c: e5:c6:a5:b0:10:95:af:e7:63:23:66:ab:b0:3c:56:d1:57:ac: 1e:d3:09:09:93:3f:d0:40:75:bf:d7:e6:d8:19:d1:3d:d9:21: 88:55:d0:21:25:bb:cd:1a:2b:8c:27:ac:4e:1c:ff:d4:b7:bd: be:2d:e1:3e:eb:90:50:8a:44:ba:d4:93:84:bb:58:64:c9:a0: e1:44:71:e6:3f:94:b1:6d:6a:fd:fe:e9:f1:37:3b:6f:ce:60: 5c:cf:2f:b9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtEbqVi6wnfZOniThx8aptfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg5ZTVlYjFlMTIwOTg5Nzg3NDVkNTQwZGNhOTZjZmYwZGU0 NzA0ZGEwHhcNMjUxMjIyMDUwMTAwWhcNMjUxMjIzMDUwMTAwWjAzMTEwLwYDVQQD Eyg1ZmZiNzkwM2E4NDg3OWExOGUwZTQ5NjY1ZTkzMGQzOGM2NWE0Y2IyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5PEaNfhItMe9py6BDBq1BrTYFZxZ NrMg49a6P48wld53Ahsto84OXSwL0rdcweBvwilJWmAbX4OdzhGY4AhU4cFC1Bra sanw5AjY1GR78smwhhRpNtXh3stttbaj6ZplFOU3H7nNcs5+OuKmaARIermgeEn2 vjeDRk/0m71lGQTViRBDoe1aUV7KXcqjLXDUkh/YAjQf6CfY/V4/4xdJciQmFKlV 4jmUVQGco3RbHhzBQUl6Y1tQbrK3LH9B+NQ4fxSQdQxl3kZNcTMB8ehozezGWE5C tZTTAX/P3kGa4LzPFobdwNg9AUFz/maEnRPHcD69fWJZhAPThP33PIGPQwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFF/7eQOoSHmhjg5JZl6TDTjGWkyyMB8GA1UdIwQY MBaAFInl6x4SCYl4dF1UDcqWz/DeRwTaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaWVYckhoSUppWGgwWFZRTnlwYlA4TjVIQk5vLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OC9lMTNiMzItMWJhOS00ZGI5LWE1Njkt NGFjYTA5NTY0ZmE4LzEvaWVYckhoSUppWGgwWFZRTnlwYlA4TjVIQk5vLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80OC9lMTNiMzItMWJhOS00ZGI5LWE1NjktNGFjYTA5NTY0ZmE4 LzEvaWVYckhoSUppWGgwWFZRTnlwYlA4TjVIQk5vLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABSq89eDa MCGyH3yE/PSN1lTWa7uXBRHYUYUI1oPU0wcHyAEmTv5jJsxA34w9SHfu+xwj/sXA Va92sO/Nv/BJFqBqW8Ys0ZxD918i5NNS1UBOyuVUXc/6dYaI0Kh9xrxbOuRpDPFp ezR8BvV/EONXd4Fri1ouLsVlaYssUx9KHJYcYvsuxjsNida/YFZiGgFaesd/t0Xu vEioCRzIYQYNgOIs5calsBCVr+djI2arsDxW0VesHtMJCZM/0EB1v9fm2BnRPdkh iFXQISW7zRorjCesThz/1Le9vi3hPuuQUIpEutSThLtYZMmg4URx5j+UsW1q/f7p 8Tc7b85gXM8vuQ== -----END CERTIFICATE-----Generated at Mon Dec 22 13:55:55 2025 by rpki-client