This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/a10ddf-bb6e-4bb0-beff-0e68000b3537/1/iZOf8Sk7fiJ3n8VbTIPxPlLpRCg.mft File: iZOf8Sk7fiJ3n8VbTIPxPlLpRCg.mft (raw, json) Hash identifier: kXt/g/l5DOsC+N3R+4NzTSvMbfH5PS6JygSGyNwPnBE= Subject key identifier: D6:45:60:A5:F3:14:8D:93:C8:06:8D:C6:86:D7:21:A4:53:F5:17:B1 Authority key identifier: 89:93:9F:F1:29:3B:7E:22:77:9F:C5:5B:4C:83:F1:3E:52:E9:44:28 Certificate issuer: /CN=89939ff1293b7e22779fc55b4c83f13e52e94428 Certificate serial: 019B4D71BACC7C2CAC31F4FF99C5BF861B21 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iZOf8Sk7fiJ3n8VbTIPxPlLpRCg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/a10ddf-bb6e-4bb0-beff-0e68000b3537/1/iZOf8Sk7fiJ3n8VbTIPxPlLpRCg.mft Manifest number: 1767 Signing time: Tue 23 Dec 2025 23:00:57 +0000 Manifest this update: Tue 23 Dec 2025 23:00:57 +0000 Manifest next update: Wed 24 Dec 2025 23:00:57 +0000 Files and hashes: 1: QdF_t5GM6hFZDI7Ycz1kPbhRE0s.roa (hash: gZA+5nFU0e3J+dZOb0p/gBtvIfB/51rVDEOTe4nlfP8=) 2: iZOf8Sk7fiJ3n8VbTIPxPlLpRCg.crl (hash: bv7r84Kjn44qAJocGKkbtdIXmf1RDUyEb4qerrp4RBo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/a10ddf-bb6e-4bb0-beff-0e68000b3537/1/iZOf8Sk7fiJ3n8VbTIPxPlLpRCg.crl rsync://rpki.ripe.net/repository/DEFAULT/55/a10ddf-bb6e-4bb0-beff-0e68000b3537/1/iZOf8Sk7fiJ3n8VbTIPxPlLpRCg.mft rsync://rpki.ripe.net/repository/DEFAULT/iZOf8Sk7fiJ3n8VbTIPxPlLpRCg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 24 Dec 2025 19:01:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4d:71:ba:cc:7c:2c:ac:31:f4:ff:99:c5:bf:86:1b:21 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89939ff1293b7e22779fc55b4c83f13e52e94428 Validity Not Before: Dec 23 23:00:57 2025 GMT Not After : Dec 24 23:00:57 2025 GMT Subject: CN=d64560a5f3148d93c8068dc686d721a453f517b1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:eb:7a:14:0f:89:d7:30:fe:00:4c:1a:74:b8: 36:c7:15:18:20:a0:a0:46:4d:ae:2b:0e:4b:a2:67: fe:a8:8c:f7:17:7e:7d:8a:55:29:7d:89:2e:e5:a1: a9:55:40:3b:8f:87:df:29:2f:6c:69:39:98:5a:13: fd:fc:a6:cc:b4:7a:0d:e7:e6:ab:31:5f:ec:e5:d8: 45:4a:52:d3:15:ef:45:16:01:ae:b3:c0:3c:0b:3a: 6e:9f:f6:23:68:43:c5:13:3a:a3:c9:28:08:45:53: a6:a8:2d:4e:ea:b7:5d:2b:25:e0:4a:44:b6:3a:57: ff:53:50:d8:a2:bc:be:75:64:93:9d:7f:7d:4d:a1: 0d:73:d6:7c:e4:0f:21:30:fe:2d:11:f0:8b:7b:6a: f2:36:7b:61:23:79:f6:d4:c3:99:75:11:71:e3:bd: 3e:ee:bb:1c:fc:1a:dd:c7:2e:a5:49:10:87:02:da: c6:45:6d:f8:67:4d:89:90:82:05:4d:c3:68:89:36: ab:cc:9c:18:db:9e:ef:4e:5c:78:0a:fc:53:3a:a0: 78:61:25:7c:e7:ea:6c:93:da:ba:f0:31:1f:e0:d7: e9:73:ce:e2:ec:ef:f1:35:ab:a2:d7:68:b0:9c:d0: 7e:6d:a6:d2:fa:ad:31:7e:b2:f3:8d:77:a4:c0:68: 6c:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:45:60:A5:F3:14:8D:93:C8:06:8D:C6:86:D7:21:A4:53:F5:17:B1 X509v3 Authority Key Identifier: keyid:89:93:9F:F1:29:3B:7E:22:77:9F:C5:5B:4C:83:F1:3E:52:E9:44:28 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iZOf8Sk7fiJ3n8VbTIPxPlLpRCg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/a10ddf-bb6e-4bb0-beff-0e68000b3537/1/iZOf8Sk7fiJ3n8VbTIPxPlLpRCg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/55/a10ddf-bb6e-4bb0-beff-0e68000b3537/1/iZOf8Sk7fiJ3n8VbTIPxPlLpRCg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 61:39:3f:a3:4a:35:af:16:f2:15:97:aa:1d:53:4c:9e:20:95: a3:db:c9:1e:54:73:e3:f9:23:2b:83:4f:43:cc:90:9b:6e:c1: db:10:2b:4c:08:41:0f:f6:07:e3:d4:48:b6:fa:c2:51:cf:3f: 11:bb:e7:a3:a1:63:6b:36:73:6a:80:eb:56:f3:5a:b3:b8:55: 1b:34:d4:ff:67:ee:dc:4c:6c:31:ff:fd:0e:c4:34:3c:8e:3c: d9:54:a0:d9:1f:c1:c2:3c:e7:de:10:23:cb:95:51:ab:31:90: a1:8b:9b:10:bc:e5:2f:40:8b:a4:68:ed:df:1f:5c:df:1c:10: 7e:ca:d5:5d:45:ac:ad:81:bc:d5:c8:1b:9c:2e:05:ad:18:bf: 2a:aa:e3:4f:3d:6c:fa:56:86:16:2d:37:7c:dd:9b:69:67:10: 91:c0:f9:8f:b6:1f:5c:0d:14:71:c8:bf:9f:8b:eb:e1:f6:db: 71:a9:62:c1:8a:dc:a8:bc:a5:6a:57:2b:4e:7b:32:f2:7d:f6: fc:48:57:99:6e:55:cc:ba:95:50:68:aa:cb:8b:34:8f:fa:b1: 96:58:e2:1e:ed:e3:47:30:15:5c:d0:fa:06:1c:16:79:4c:2b: 87:a9:7c:6d:09:56:47:60:75:3a:b6:b2:03:1f:66:61:d7:44: 71:d0:59:56 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtNcbrMfCysMfT/mcW/hhshMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg5OTM5ZmYxMjkzYjdlMjI3NzlmYzU1YjRjODNmMTNlNTJl OTQ0MjgwHhcNMjUxMjIzMjMwMDU3WhcNMjUxMjI0MjMwMDU3WjAzMTEwLwYDVQQD EyhkNjQ1NjBhNWYzMTQ4ZDkzYzgwNjhkYzY4NmQ3MjFhNDUzZjUxN2IxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvut6FA+J1zD+AEwadLg2xxUYIKCg Rk2uKw5Lomf+qIz3F359ilUpfYku5aGpVUA7j4ffKS9saTmYWhP9/KbMtHoN5+ar MV/s5dhFSlLTFe9FFgGus8A8Czpun/YjaEPFEzqjySgIRVOmqC1O6rddKyXgSkS2 Olf/U1DYory+dWSTnX99TaENc9Z85A8hMP4tEfCLe2ryNnthI3n21MOZdRFx470+ 7rsc/Brdxy6lSRCHAtrGRW34Z02JkIIFTcNoiTarzJwY257vTlx4CvxTOqB4YSV8 5+psk9q68DEf4Nfpc87i7O/xNaui12iwnNB+babS+q0xfrLzjXekwGhsYQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNZFYKXzFI2TyAaNxobXIaRT9RexMB8GA1UdIwQY MBaAFImTn/EpO34id5/FW0yD8T5S6UQoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaVpPZjhTazdmaUozbjhWYlRJUHhQbExwUkNnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS9hMTBkZGYtYmI2ZS00YmIwLWJlZmYt MGU2ODAwMGIzNTM3LzEvaVpPZjhTazdmaUozbjhWYlRJUHhQbExwUkNnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81NS9hMTBkZGYtYmI2ZS00YmIwLWJlZmYtMGU2ODAwMGIzNTM3 LzEvaVpPZjhTazdmaUozbjhWYlRJUHhQbExwUkNnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYTk/o0o1 rxbyFZeqHVNMniCVo9vJHlRz4/kjK4NPQ8yQm27B2xArTAhBD/YH49RItvrCUc8/ Ebvno6FjazZzaoDrVvNas7hVGzTU/2fu3ExsMf/9DsQ0PI482VSg2R/Bwjzn3hAj y5VRqzGQoYubELzlL0CLpGjt3x9c3xwQfsrVXUWsrYG81cgbnC4FrRi/KqrjTz1s +laGFi03fN2baWcQkcD5j7YfXA0Ucci/n4vr4fbbcaliwYrcqLylalcrTnsy8n32 /EhXmW5VzLqVUGiqy4s0j/qxlljiHu3jRzAVXND6BhwWeUwrh6l8bQlWR2B1Oray Ax9mYddEcdBZVg== -----END CERTIFICATE-----Generated at Wed Dec 24 02:58:17 2025 by rpki-client