This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/bc1915-dbfe-4481-b31b-5697c7b1c5c1/1/it4Hh8-YgaH8WVVsoVQtd3nyh2U.mft File: it4Hh8-YgaH8WVVsoVQtd3nyh2U.mft (raw, json) Hash identifier: FY4PVjZZxOUPQIicFmh7r3oiDI5LPzM2cKBQJgNy0KY= Subject key identifier: D2:07:94:A3:1D:D9:3D:15:D1:B8:CA:17:B3:E1:57:BC:80:33:38:33 Authority key identifier: 8A:DE:07:87:CF:98:81:A1:FC:59:55:6C:A1:54:2D:77:79:F2:87:65 Certificate issuer: /CN=8ade0787cf9881a1fc59556ca1542d7779f28765 Certificate serial: 019B39EB6F5C3E0A398EF3EEB89B7F09648E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/it4Hh8-YgaH8WVVsoVQtd3nyh2U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/bc1915-dbfe-4481-b31b-5697c7b1c5c1/1/it4Hh8-YgaH8WVVsoVQtd3nyh2U.mft Manifest number: 1483 Signing time: Sat 20 Dec 2025 04:01:29 +0000 Manifest this update: Sat 20 Dec 2025 04:01:29 +0000 Manifest next update: Sun 21 Dec 2025 04:01:29 +0000 Files and hashes: 1: 5v7duN9Ge8yGISXqxG3qUzWZAS0.roa (hash: 1SA0Oa41y733C6WZxDupsHaqhvUOZQl7E3vDY0FiKPY=) 2: it4Hh8-YgaH8WVVsoVQtd3nyh2U.crl (hash: Zar5wQLWxvDumCPN9q09DppEbPLL+1XPOY8lB0CrK3I=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/bc1915-dbfe-4481-b31b-5697c7b1c5c1/1/it4Hh8-YgaH8WVVsoVQtd3nyh2U.crl rsync://rpki.ripe.net/repository/DEFAULT/5d/bc1915-dbfe-4481-b31b-5697c7b1c5c1/1/it4Hh8-YgaH8WVVsoVQtd3nyh2U.mft rsync://rpki.ripe.net/repository/DEFAULT/it4Hh8-YgaH8WVVsoVQtd3nyh2U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:39:eb:6f:5c:3e:0a:39:8e:f3:ee:b8:9b:7f:09:64:8e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8ade0787cf9881a1fc59556ca1542d7779f28765 Validity Not Before: Dec 20 04:01:29 2025 GMT Not After : Dec 21 04:01:29 2025 GMT Subject: CN=d20794a31dd93d15d1b8ca17b3e157bc80333833 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:8e:41:cd:6f:e7:69:17:16:49:52:08:4e:76: 5e:5a:f4:27:b7:3f:69:5d:3b:24:d9:c5:a6:8f:97: 16:88:52:67:0c:f2:39:41:60:c9:09:c1:26:de:79: 21:62:f0:6f:dd:d0:09:a1:78:f3:94:fd:cb:79:08: 42:5b:49:5a:22:b9:09:2b:ea:b1:85:78:dd:a1:53: 8b:30:1b:03:74:19:e4:4d:ff:59:f3:fd:1e:c8:c4: 23:8c:19:82:27:41:e8:3e:a4:00:bf:b9:07:5d:83: b2:ca:a8:23:60:a3:11:fb:d9:32:57:a1:c1:e2:a1: 9e:cd:73:aa:de:96:a9:4a:9b:58:aa:1c:82:43:63: 99:e0:a6:12:12:d7:56:71:d4:07:29:cf:03:50:e9: 01:67:7a:ab:29:fc:51:74:02:fc:57:50:af:db:6c: d3:64:63:56:8d:85:bc:2d:36:5c:b2:43:5c:98:ff: 7a:38:ca:f6:32:30:ef:ea:73:e9:0e:ae:25:cc:08: da:94:0b:28:70:13:5e:04:f1:1a:eb:1f:8c:7c:de: 1c:5c:4c:82:d5:07:59:5c:e9:3b:e7:3f:9c:7b:71: 36:2c:6b:b3:5f:58:3b:c9:79:f6:9e:4c:19:46:97: cb:22:8a:ba:5e:8f:e4:2d:e2:02:60:37:98:f4:45: 6c:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:07:94:A3:1D:D9:3D:15:D1:B8:CA:17:B3:E1:57:BC:80:33:38:33 X509v3 Authority Key Identifier: keyid:8A:DE:07:87:CF:98:81:A1:FC:59:55:6C:A1:54:2D:77:79:F2:87:65 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/it4Hh8-YgaH8WVVsoVQtd3nyh2U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/bc1915-dbfe-4481-b31b-5697c7b1c5c1/1/it4Hh8-YgaH8WVVsoVQtd3nyh2U.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/bc1915-dbfe-4481-b31b-5697c7b1c5c1/1/it4Hh8-YgaH8WVVsoVQtd3nyh2U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7b:d3:f9:c8:58:d9:29:76:4e:38:d0:a0:4c:8b:6e:22:3b:70: c6:20:7d:bf:b1:81:92:03:6b:ee:db:63:0e:37:3b:46:ef:45: 01:20:ea:f7:4f:98:3e:33:9a:cb:d8:be:a4:d1:b9:5d:86:39: 7a:0c:fd:3f:5e:6a:6d:13:d6:df:c9:e3:38:8e:82:34:b9:f3: 35:54:15:e2:51:0a:30:b6:58:33:79:7c:2b:92:9b:e8:e6:52: 70:8f:d4:7c:fc:d2:a9:a5:a4:19:44:d3:31:69:3e:40:9d:f2: a4:3b:dd:51:b8:52:a5:68:a9:b4:3c:7d:03:74:73:01:94:78: 24:a8:43:d3:80:b7:23:36:99:1f:29:18:ba:00:c8:40:3d:4c: 58:19:7e:ad:d6:ea:29:48:65:d5:aa:66:29:ce:cb:c7:f1:cf: d5:42:19:29:08:74:84:f3:77:fd:9d:9c:ef:c0:08:96:5b:56: 32:78:bd:57:eb:11:ab:ef:06:52:6d:5f:a3:ff:f6:d3:13:4d: 5a:55:bc:9d:7a:e3:a3:bf:ec:9a:f0:32:54:94:a8:10:4a:9b: bc:e1:3d:99:c0:80:a9:fc:be:3b:bb:96:03:f2:fb:64:b0:40: 90:49:5a:ff:a8:eb:61:3a:a5:42:be:fe:db:27:4c:53:db:1a: 1a:2a:04:bf -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs5629cPgo5jvPuuJt/CWSOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhhZGUwNzg3Y2Y5ODgxYTFmYzU5NTU2Y2ExNTQyZDc3Nzlm Mjg3NjUwHhcNMjUxMjIwMDQwMTI5WhcNMjUxMjIxMDQwMTI5WjAzMTEwLwYDVQQD EyhkMjA3OTRhMzFkZDkzZDE1ZDFiOGNhMTdiM2UxNTdiYzgwMzMzODMzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAho5BzW/naRcWSVIITnZeWvQntz9p XTsk2cWmj5cWiFJnDPI5QWDJCcEm3nkhYvBv3dAJoXjzlP3LeQhCW0laIrkJK+qx hXjdoVOLMBsDdBnkTf9Z8/0eyMQjjBmCJ0HoPqQAv7kHXYOyyqgjYKMR+9kyV6HB 4qGezXOq3papSptYqhyCQ2OZ4KYSEtdWcdQHKc8DUOkBZ3qrKfxRdAL8V1Cv22zT ZGNWjYW8LTZcskNcmP96OMr2MjDv6nPpDq4lzAjalAsocBNeBPEa6x+MfN4cXEyC 1QdZXOk75z+ce3E2LGuzX1g7yXn2nkwZRpfLIoq6Xo/kLeICYDeY9EVsdQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNIHlKMd2T0V0bjKF7PhV7yAMzgzMB8GA1UdIwQY MBaAFIreB4fPmIGh/FlVbKFULXd58odlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaXQ0SGg4LVlnYUg4V1ZWc29WUXRkM255aDJVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZC9iYzE5MTUtZGJmZS00NDgxLWIzMWIt NTY5N2M3YjFjNWMxLzEvaXQ0SGg4LVlnYUg4V1ZWc29WUXRkM255aDJVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81ZC9iYzE5MTUtZGJmZS00NDgxLWIzMWItNTY5N2M3YjFjNWMx LzEvaXQ0SGg4LVlnYUg4V1ZWc29WUXRkM255aDJVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAe9P5yFjZ KXZOONCgTItuIjtwxiB9v7GBkgNr7ttjDjc7Ru9FASDq90+YPjOay9i+pNG5XYY5 egz9P15qbRPW38njOI6CNLnzNVQV4lEKMLZYM3l8K5Kb6OZScI/UfPzSqaWkGUTT MWk+QJ3ypDvdUbhSpWiptDx9A3RzAZR4JKhD04C3IzaZHykYugDIQD1MWBl+rdbq KUhl1apmKc7Lx/HP1UIZKQh0hPN3/Z2c78AIlltWMni9V+sRq+8GUm1fo//20xNN WlW8nXrjo7/smvAyVJSoEEqbvOE9mcCAqfy+O7uWA/L7ZLBAkEla/6jrYTqlQr7+ 2ydMU9saGioEvw== -----END CERTIFICATE-----Generated at Sat Dec 20 10:52:35 2025 by rpki-client