This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/44624f-231d-466c-bb02-b38c80951981/1/iPtBCjv8c0C2Z7TyIcfLgGJniW4.mft File: iPtBCjv8c0C2Z7TyIcfLgGJniW4.mft (raw, json) Hash identifier: PXcor5UBR/TtngXHb6pEVLBdxOpHWqjmSoQxIRMXlZE= Subject key identifier: A9:AE:26:18:B3:34:25:10:19:5A:0D:CE:19:FE:B1:E1:E0:32:A9:DA Authority key identifier: 88:FB:41:0A:3B:FC:73:40:B6:67:B4:F2:21:C7:CB:80:62:67:89:6E Certificate issuer: /CN=88fb410a3bfc7340b667b4f221c7cb806267896e Certificate serial: 019B3C0FFD13D16272FD19ACCFA6DFF6F5FA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iPtBCjv8c0C2Z7TyIcfLgGJniW4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/44624f-231d-466c-bb02-b38c80951981/1/iPtBCjv8c0C2Z7TyIcfLgGJniW4.mft Manifest number: C4 Signing time: Sat 20 Dec 2025 14:00:39 +0000 Manifest this update: Sat 20 Dec 2025 14:00:39 +0000 Manifest next update: Sun 21 Dec 2025 14:00:39 +0000 Files and hashes: 1: 0i9rX2feVpxn00o6Ok1LCwfKG9s.roa (hash: CXVbkTnTW3iOhYJS4A/hhGnO0DbUsClXOzGNTAyAP1Q=) 2: CWmIJrz3eJQXe7jBCiM8trXjQw4.roa (hash: 8R85mUeKMUe1bwmttxvnk61t2dt7oCB940nQaMbkHeI=) 3: c8PgM_zsQIHG1Ac1dUTxJdTOUxU.roa (hash: lqsnU4EmNQIM3Y5xNVwQm+caTK96utnXByFl0/Rrp80=) 4: iPtBCjv8c0C2Z7TyIcfLgGJniW4.crl (hash: k4Y1+UhYoQ2Gwjov+0J5347xeLurreyJg6BQKSBeseU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/44624f-231d-466c-bb02-b38c80951981/1/iPtBCjv8c0C2Z7TyIcfLgGJniW4.crl rsync://rpki.ripe.net/repository/DEFAULT/51/44624f-231d-466c-bb02-b38c80951981/1/iPtBCjv8c0C2Z7TyIcfLgGJniW4.mft rsync://rpki.ripe.net/repository/DEFAULT/iPtBCjv8c0C2Z7TyIcfLgGJniW4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 10:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:0f:fd:13:d1:62:72:fd:19:ac:cf:a6:df:f6:f5:fa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=88fb410a3bfc7340b667b4f221c7cb806267896e Validity Not Before: Dec 20 14:00:39 2025 GMT Not After : Dec 21 14:00:39 2025 GMT Subject: CN=a9ae2618b3342510195a0dce19feb1e1e032a9da Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:88:76:38:fa:5b:17:32:6a:6d:da:93:78:9e: 0a:53:64:e3:8c:15:91:ad:03:6a:87:a0:6b:0e:5d: a7:73:56:f4:fa:ee:c8:81:61:bf:22:80:c3:d0:83: 9d:88:ad:24:57:96:0b:aa:74:eb:1d:40:b0:64:8a: 1b:ca:2c:5c:90:a7:86:99:24:04:26:2c:ca:89:15: 84:5c:5f:6f:c5:0e:20:86:e9:b8:cd:30:5c:40:ab: af:65:d7:39:84:3a:72:11:72:68:92:26:fe:56:38: 02:93:95:e0:fa:95:ca:47:e2:fe:6c:36:94:2e:9d: 97:3f:c3:27:3d:02:89:3b:7f:ea:1e:96:77:26:6d: a6:bf:27:89:87:ee:d4:3b:f8:26:fd:b8:a4:69:6e: 80:e9:48:20:7f:8f:24:9e:1d:c9:95:38:cb:30:fb: 89:82:28:26:17:be:c3:1f:7a:e7:27:06:09:cd:f9: 1b:4f:0d:1e:d4:bb:f0:6e:66:66:c9:9d:49:a0:dc: ed:a0:18:66:9a:21:2c:a0:cd:4a:dc:97:5e:00:dd: 53:6f:0e:00:dc:7e:54:56:15:fb:6f:58:61:d4:b5: ce:c9:73:1d:65:40:69:2d:82:79:39:3d:97:f1:45: eb:d5:74:ec:08:5c:d4:2e:7c:58:f4:28:26:33:4b: 72:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:AE:26:18:B3:34:25:10:19:5A:0D:CE:19:FE:B1:E1:E0:32:A9:DA X509v3 Authority Key Identifier: keyid:88:FB:41:0A:3B:FC:73:40:B6:67:B4:F2:21:C7:CB:80:62:67:89:6E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iPtBCjv8c0C2Z7TyIcfLgGJniW4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/44624f-231d-466c-bb02-b38c80951981/1/iPtBCjv8c0C2Z7TyIcfLgGJniW4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/51/44624f-231d-466c-bb02-b38c80951981/1/iPtBCjv8c0C2Z7TyIcfLgGJniW4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b0:52:91:c9:a3:15:01:f8:5e:e1:21:34:3b:04:9b:bc:05:83: c8:2d:b1:6c:cb:97:12:5c:bb:96:b6:2d:d9:f5:ae:14:dd:98: 36:f3:91:d3:fd:4c:82:ed:61:90:8a:af:77:7f:f9:f5:00:e5: ab:e4:8a:87:6f:df:fa:83:2e:04:1d:8f:95:98:a7:2e:29:da: 08:9a:9c:09:c6:45:e9:5a:27:0e:bc:fd:03:0b:7b:4d:d5:63: 86:ac:f2:05:bf:d3:66:25:a6:80:4d:9a:4f:48:cf:45:6c:16: ac:7a:aa:4b:77:85:9b:de:33:9b:9f:0c:b6:78:0d:88:a6:86: ab:bd:6c:cb:53:16:05:fb:99:5a:9d:7e:0b:06:5f:6f:2a:81: 4d:a7:d6:b9:ea:ae:61:40:32:01:0a:7f:66:ea:5d:03:fe:69: e1:5f:43:24:18:de:00:48:b4:ac:00:b7:06:3c:ef:23:f5:79: a7:3c:6b:76:2c:fe:44:53:cb:46:72:90:43:9b:08:a2:29:04: 98:c2:77:32:93:8d:dc:bb:ec:bd:66:22:76:de:0e:13:55:14: 78:48:91:be:9d:7b:ad:74:46:af:81:f3:f8:de:bc:ec:bb:6f: eb:d5:c9:b5:8e:13:d4:a5:74:2a:b5:05:f3:ac:70:3d:c0:25: 40:d0:2e:6e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs8D/0T0WJy/Rmsz6bf9vX6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg4ZmI0MTBhM2JmYzczNDBiNjY3YjRmMjIxYzdjYjgwNjI2 Nzg5NmUwHhcNMjUxMjIwMTQwMDM5WhcNMjUxMjIxMTQwMDM5WjAzMTEwLwYDVQQD EyhhOWFlMjYxOGIzMzQyNTEwMTk1YTBkY2UxOWZlYjFlMWUwMzJhOWRhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsoh2OPpbFzJqbdqTeJ4KU2TjjBWR rQNqh6BrDl2nc1b0+u7IgWG/IoDD0IOdiK0kV5YLqnTrHUCwZIobyixckKeGmSQE JizKiRWEXF9vxQ4ghum4zTBcQKuvZdc5hDpyEXJokib+VjgCk5Xg+pXKR+L+bDaU Lp2XP8MnPQKJO3/qHpZ3Jm2mvyeJh+7UO/gm/bikaW6A6Uggf48knh3JlTjLMPuJ gigmF77DH3rnJwYJzfkbTw0e1LvwbmZmyZ1JoNztoBhmmiEsoM1K3JdeAN1Tbw4A 3H5UVhX7b1hh1LXOyXMdZUBpLYJ5OT2X8UXr1XTsCFzULnxY9CgmM0tyWQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKmuJhizNCUQGVoNzhn+seHgMqnaMB8GA1UdIwQY MBaAFIj7QQo7/HNAtme08iHHy4BiZ4luMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaVB0QkNqdjhjMEMyWjdUeUljZkxnR0puaVc0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS80NDYyNGYtMjMxZC00NjZjLWJiMDIt YjM4YzgwOTUxOTgxLzEvaVB0QkNqdjhjMEMyWjdUeUljZkxnR0puaVc0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MS80NDYyNGYtMjMxZC00NjZjLWJiMDItYjM4YzgwOTUxOTgx LzEvaVB0QkNqdjhjMEMyWjdUeUljZkxnR0puaVc0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsFKRyaMV Afhe4SE0OwSbvAWDyC2xbMuXEly7lrYt2fWuFN2YNvOR0/1Mgu1hkIqvd3/59QDl q+SKh2/f+oMuBB2PlZinLinaCJqcCcZF6VonDrz9Awt7TdVjhqzyBb/TZiWmgE2a T0jPRWwWrHqqS3eFm94zm58MtngNiKaGq71sy1MWBfuZWp1+CwZfbyqBTafWuequ YUAyAQp/ZupdA/5p4V9DJBjeAEi0rAC3BjzvI/V5pzxrdiz+RFPLRnKQQ5sIoikE mMJ3MpON3LvsvWYidt4OE1UUeEiRvp17rXRGr4Hz+N687Ltv69XJtY4T1KV0KrUF 86xwPcAlQNAubg== -----END CERTIFICATE-----Generated at Sat Dec 20 18:04:44 2025 by rpki-client