This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/b043af-b492-4b5b-a250-301433ebe436/1/IT2HNcFEzxJWWEO2nrQKTRowGqU.mft File: IT2HNcFEzxJWWEO2nrQKTRowGqU.mft (raw, json) Hash identifier: YrxA81lWJTVRxlAQLgTTO3LRKTRiIYvCP5htx88t8sk= Subject key identifier: 08:71:F7:44:DD:25:0A:3B:6A:32:1D:E8:E5:19:75:D4:63:5B:05:BD Authority key identifier: 21:3D:87:35:C1:44:CF:12:56:58:43:B6:9E:B4:0A:4D:1A:30:1A:A5 Certificate issuer: /CN=213d8735c144cf12565843b69eb40a4d1a301aa5 Certificate serial: 019B544FF339279985B4E16982AB9E7B9900 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IT2HNcFEzxJWWEO2nrQKTRowGqU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/b043af-b492-4b5b-a250-301433ebe436/1/IT2HNcFEzxJWWEO2nrQKTRowGqU.mft Manifest number: 1105 Signing time: Thu 25 Dec 2025 07:01:24 +0000 Manifest this update: Thu 25 Dec 2025 07:01:24 +0000 Manifest next update: Fri 26 Dec 2025 07:01:24 +0000 Files and hashes: 1: IT2HNcFEzxJWWEO2nrQKTRowGqU.crl (hash: 6VfjGelR11eaA5iBHgpcehFPIVrhbgzvFz3O5Gw1MS0=) 2: oYl1-NMXXzEXtTi3L5l80mvOKew.roa (hash: HGKJcqJks4x1KvA9MPs1IeJtaKWdWbE52yFjhD/1Aak=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/b043af-b492-4b5b-a250-301433ebe436/1/IT2HNcFEzxJWWEO2nrQKTRowGqU.crl rsync://rpki.ripe.net/repository/DEFAULT/a0/b043af-b492-4b5b-a250-301433ebe436/1/IT2HNcFEzxJWWEO2nrQKTRowGqU.mft rsync://rpki.ripe.net/repository/DEFAULT/IT2HNcFEzxJWWEO2nrQKTRowGqU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 26 Dec 2025 03:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:54:4f:f3:39:27:99:85:b4:e1:69:82:ab:9e:7b:99:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=213d8735c144cf12565843b69eb40a4d1a301aa5 Validity Not Before: Dec 25 07:01:24 2025 GMT Not After : Dec 26 07:01:24 2025 GMT Subject: CN=0871f744dd250a3b6a321de8e51975d4635b05bd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:ab:e8:d3:90:48:3d:c9:0f:3a:af:8b:a9:24: 2b:26:b3:03:2c:21:04:1e:dc:95:a4:8b:ea:55:b7: e7:72:49:b9:c1:8b:00:18:bd:25:d3:78:40:fe:32: 7b:79:4c:47:be:e3:bf:00:48:4b:31:3c:b3:26:48: 3e:2e:1c:8e:25:e5:c3:3a:26:18:0d:e5:10:6b:51: 89:f7:a6:7f:4d:b9:7a:9b:98:b0:7d:1e:82:c5:d9: 27:b5:fb:03:6a:8f:22:ee:d3:45:8e:0d:5a:ce:a5: 20:3a:45:4a:0b:18:1e:66:54:a3:f0:c1:a0:ae:30: 22:f7:a8:45:f0:d3:a5:83:b9:bd:20:04:b6:18:60: fa:8e:c8:40:59:29:7d:5b:8f:10:07:c9:54:47:52: cc:98:e6:3c:4e:ec:a6:6a:e3:9b:5b:3e:75:3d:71: 5d:1e:30:52:c2:8c:17:f8:66:3f:1a:3a:57:51:33: 3d:30:d2:da:cc:fb:cf:8b:ff:2b:38:72:c0:74:47: 75:50:bd:ce:da:28:c0:b2:81:33:14:0a:4a:47:c0: 32:6e:41:88:99:32:74:a2:c9:0d:a4:03:d2:eb:08: d6:7a:b5:25:30:90:d0:35:e8:84:bc:eb:4f:df:bd: 2c:d7:ee:65:e3:31:29:4a:ba:96:b2:1e:46:5e:72: c3:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:71:F7:44:DD:25:0A:3B:6A:32:1D:E8:E5:19:75:D4:63:5B:05:BD X509v3 Authority Key Identifier: keyid:21:3D:87:35:C1:44:CF:12:56:58:43:B6:9E:B4:0A:4D:1A:30:1A:A5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IT2HNcFEzxJWWEO2nrQKTRowGqU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/b043af-b492-4b5b-a250-301433ebe436/1/IT2HNcFEzxJWWEO2nrQKTRowGqU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/b043af-b492-4b5b-a250-301433ebe436/1/IT2HNcFEzxJWWEO2nrQKTRowGqU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a1:1d:d3:00:fd:bd:bc:cf:3e:d4:e4:39:f2:fa:7d:45:3a:65: a3:c0:63:6d:ce:be:19:de:c5:7d:f9:e0:b0:ec:02:36:32:cd: 8e:91:74:dd:ee:f8:cf:dc:c9:c3:53:52:56:7b:2b:13:22:38: 1a:63:d7:81:e8:a0:ae:bd:6c:79:15:ad:1e:8c:1c:f2:7b:01: 76:fc:a9:25:5c:80:60:6e:bd:58:9b:ec:e0:85:5b:08:92:28: c6:9c:03:6d:1d:f1:6c:dc:8e:63:41:d7:36:92:1c:51:af:22: 62:0e:cf:56:30:3c:93:bd:ca:e0:38:47:ff:56:2c:aa:66:5d: b4:55:79:91:d0:76:c5:a1:d9:b9:d7:ac:5f:96:2a:b7:01:15: 53:90:3f:5f:81:53:94:fb:bb:4b:f2:dc:02:55:8e:a3:18:09: 89:86:de:cb:79:6a:bf:0c:c1:1e:61:c4:bb:1d:f0:05:a2:67: 9c:3f:d4:8b:ce:c9:ea:f3:f6:22:9b:77:4c:d2:53:ff:af:2d: 65:8c:bb:23:0e:9a:94:e3:17:0c:ef:49:f6:eb:74:d6:fd:2d: bd:88:19:42:56:7e:10:af:2c:00:ef:32:01:14:21:ce:ee:64: 8c:c0:c0:95:62:18:24:8b:79:3f:0c:a4:ab:93:fb:dd:5d:a6: cb:42:5b:ff -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtUT/M5J5mFtOFpgquee5kAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIxM2Q4NzM1YzE0NGNmMTI1NjU4NDNiNjllYjQwYTRkMWEz MDFhYTUwHhcNMjUxMjI1MDcwMTI0WhcNMjUxMjI2MDcwMTI0WjAzMTEwLwYDVQQD EygwODcxZjc0NGRkMjUwYTNiNmEzMjFkZThlNTE5NzVkNDYzNWIwNWJkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiavo05BIPckPOq+LqSQrJrMDLCEE HtyVpIvqVbfnckm5wYsAGL0l03hA/jJ7eUxHvuO/AEhLMTyzJkg+LhyOJeXDOiYY DeUQa1GJ96Z/Tbl6m5iwfR6CxdkntfsDao8i7tNFjg1azqUgOkVKCxgeZlSj8MGg rjAi96hF8NOlg7m9IAS2GGD6jshAWSl9W48QB8lUR1LMmOY8TuymauObWz51PXFd HjBSwowX+GY/GjpXUTM9MNLazPvPi/8rOHLAdEd1UL3O2ijAsoEzFApKR8AybkGI mTJ0oskNpAPS6wjWerUlMJDQNeiEvOtP370s1+5l4zEpSrqWsh5GXnLDQQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAhx90TdJQo7ajId6OUZddRjWwW9MB8GA1UdIwQY MBaAFCE9hzXBRM8SVlhDtp60Ck0aMBqlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSVQySE5jRkV6eEpXV0VPMm5yUUtUUm93R3FVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMC9iMDQzYWYtYjQ5Mi00YjViLWEyNTAt MzAxNDMzZWJlNDM2LzEvSVQySE5jRkV6eEpXV0VPMm5yUUtUUm93R3FVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMC9iMDQzYWYtYjQ5Mi00YjViLWEyNTAtMzAxNDMzZWJlNDM2 LzEvSVQySE5jRkV6eEpXV0VPMm5yUUtUUm93R3FVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoR3TAP29 vM8+1OQ58vp9RTplo8Bjbc6+Gd7FffngsOwCNjLNjpF03e74z9zJw1NSVnsrEyI4 GmPXgeigrr1seRWtHowc8nsBdvypJVyAYG69WJvs4IVbCJIoxpwDbR3xbNyOY0HX NpIcUa8iYg7PVjA8k73K4DhH/1YsqmZdtFV5kdB2xaHZudesX5YqtwEVU5A/X4FT lPu7S/LcAlWOoxgJiYbey3lqvwzBHmHEux3wBaJnnD/Ui87J6vP2Ipt3TNJT/68t ZYy7Iw6alOMXDO9J9ut01v0tvYgZQlZ+EK8sAO8yARQhzu5kjMDAlWIYJIt5Pwyk q5P73V2my0Jb/w== -----END CERTIFICATE-----Generated at Thu Dec 25 10:31:02 2025 by rpki-client