This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/0b35c5-8990-4e76-aeee-fcaf4cdd1663/1/IPtKDEbqkecGD7KUJqEyM4UmhJU.mft File: IPtKDEbqkecGD7KUJqEyM4UmhJU.mft (raw, json) Hash identifier: kMVIDR+KWXhfusLJoH6w+w6GrinGH6PhrhAQAYJn4TQ= Subject key identifier: F9:2B:E9:30:F9:FD:A0:DF:51:94:35:08:BB:1A:06:31:C0:99:A1:79 Authority key identifier: 20:FB:4A:0C:46:EA:91:E7:06:0F:B2:94:26:A1:32:33:85:26:84:95 Certificate issuer: /CN=20fb4a0c46ea91e7060fb29426a1323385268495 Certificate serial: 019B5BD2978FF97211191C6DF826E651AD2E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IPtKDEbqkecGD7KUJqEyM4UmhJU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/0b35c5-8990-4e76-aeee-fcaf4cdd1663/1/IPtKDEbqkecGD7KUJqEyM4UmhJU.mft Manifest number: 06F4 Signing time: Fri 26 Dec 2025 18:01:26 +0000 Manifest this update: Fri 26 Dec 2025 18:01:26 +0000 Manifest next update: Sat 27 Dec 2025 18:01:26 +0000 Files and hashes: 1: IPtKDEbqkecGD7KUJqEyM4UmhJU.crl (hash: ufd5H7TRshHmnE8gYhh2GbbPdHpf6gXlYxK4wgAFgck=) 2: VHq92EwfoMDVXDmr3YDQVJFW754.roa (hash: JpzdYMai2LkiTqQiR+iyiuscebR4y7kmN03dvpWGwHk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/0b35c5-8990-4e76-aeee-fcaf4cdd1663/1/IPtKDEbqkecGD7KUJqEyM4UmhJU.crl rsync://rpki.ripe.net/repository/DEFAULT/a9/0b35c5-8990-4e76-aeee-fcaf4cdd1663/1/IPtKDEbqkecGD7KUJqEyM4UmhJU.mft rsync://rpki.ripe.net/repository/DEFAULT/IPtKDEbqkecGD7KUJqEyM4UmhJU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 18:01:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5b:d2:97:8f:f9:72:11:19:1c:6d:f8:26:e6:51:ad:2e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=20fb4a0c46ea91e7060fb29426a1323385268495 Validity Not Before: Dec 26 18:01:26 2025 GMT Not After : Dec 27 18:01:26 2025 GMT Subject: CN=f92be930f9fda0df51943508bb1a0631c099a179 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:20:5e:82:83:4f:0e:c3:34:29:3e:9e:69:c9: 67:0b:ab:b4:1f:08:0e:af:0f:b2:dc:f2:23:dc:46: da:fc:83:c6:72:3f:cf:b1:8d:1f:fc:47:ee:ce:f9: 12:a6:4e:f6:fb:b5:85:2f:d6:e4:e6:1c:23:23:b9: 29:af:8e:68:4d:0d:cb:e0:99:90:9d:53:7d:f4:4f: a7:b5:58:be:e2:ad:97:3d:d0:92:b7:31:2b:7c:31: 66:97:98:5f:1e:c0:42:f0:8b:5e:66:e2:b4:56:1e: eb:6c:46:80:71:9e:e4:d8:b9:dc:b7:df:4a:aa:af: e7:32:e2:13:9e:4d:6d:4e:b2:40:dc:f5:a8:59:45: 55:8e:c2:52:05:9b:88:34:9e:77:2c:05:07:6b:4c: 63:d9:34:e4:26:95:06:99:ad:2b:50:9f:a9:35:61: c9:25:25:68:e8:77:51:10:70:d5:b6:d4:44:98:75: 15:dd:df:99:0f:85:0c:e1:79:86:7e:0f:51:61:41: e1:a7:be:d3:88:ab:f9:e4:d9:67:41:50:97:ff:04: 0d:e4:0c:be:4f:7d:b9:14:f7:99:32:64:b7:11:62: 2d:7d:98:65:2b:29:4b:ee:a1:d3:eb:8e:d5:c3:29: 0f:98:e3:64:97:4b:c4:ab:c2:ef:37:6a:58:04:33: 27:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:2B:E9:30:F9:FD:A0:DF:51:94:35:08:BB:1A:06:31:C0:99:A1:79 X509v3 Authority Key Identifier: keyid:20:FB:4A:0C:46:EA:91:E7:06:0F:B2:94:26:A1:32:33:85:26:84:95 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IPtKDEbqkecGD7KUJqEyM4UmhJU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/0b35c5-8990-4e76-aeee-fcaf4cdd1663/1/IPtKDEbqkecGD7KUJqEyM4UmhJU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/0b35c5-8990-4e76-aeee-fcaf4cdd1663/1/IPtKDEbqkecGD7KUJqEyM4UmhJU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0b:e8:ee:1f:ef:76:cb:88:93:2d:3c:0a:25:3e:84:5f:ac:6c: c0:23:49:d0:2d:54:26:c3:64:a9:42:da:49:3c:92:0c:06:d3: 98:45:07:00:a7:e3:1d:a8:91:3c:13:e7:66:ab:c0:96:ef:2a: 49:42:23:61:57:e7:be:ad:a4:9a:d0:2c:55:65:8c:83:9f:c9: 37:71:fa:2d:74:6d:32:eb:4c:6d:a9:58:87:ed:5c:32:f4:87: 70:2c:a9:93:b5:8d:fd:ec:18:a7:c7:99:2d:b0:fc:b9:1d:ad: 44:22:ec:8b:1a:50:63:dd:14:15:5d:7a:d9:c0:6c:fa:e1:2a: 2d:3d:78:e7:0e:75:84:09:d2:22:04:29:10:96:d5:69:0d:4f: c8:2c:2f:7f:a5:e0:43:61:3c:a9:8e:ad:56:49:6d:96:86:20: b7:49:8a:64:b0:7b:b1:47:57:4e:37:95:ee:e0:d5:b5:17:88: 1c:af:72:9b:d6:56:67:3e:86:be:d5:e8:5e:a1:90:2e:7c:03: bc:ae:ff:65:ed:c7:8a:f4:fe:3a:de:93:9f:10:b7:e4:11:b5: b2:c4:25:a5:d9:fb:f5:04:f7:4c:b8:9e:1c:0c:f9:54:e6:19: 70:6c:4d:99:30:27:bc:6b:cd:1d:e6:51:08:5b:9d:be:4b:a6: ac:9e:ea:9e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtb0peP+XIRGRxt+CbmUa0uMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIwZmI0YTBjNDZlYTkxZTcwNjBmYjI5NDI2YTEzMjMzODUy Njg0OTUwHhcNMjUxMjI2MTgwMTI2WhcNMjUxMjI3MTgwMTI2WjAzMTEwLwYDVQQD EyhmOTJiZTkzMGY5ZmRhMGRmNTE5NDM1MDhiYjFhMDYzMWMwOTlhMTc5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxCBegoNPDsM0KT6eaclnC6u0HwgO rw+y3PIj3Eba/IPGcj/PsY0f/EfuzvkSpk72+7WFL9bk5hwjI7kpr45oTQ3L4JmQ nVN99E+ntVi+4q2XPdCStzErfDFml5hfHsBC8IteZuK0Vh7rbEaAcZ7k2Lnct99K qq/nMuITnk1tTrJA3PWoWUVVjsJSBZuINJ53LAUHa0xj2TTkJpUGma0rUJ+pNWHJ JSVo6HdREHDVttREmHUV3d+ZD4UM4XmGfg9RYUHhp77TiKv55NlnQVCX/wQN5Ay+ T325FPeZMmS3EWItfZhlKylL7qHT647VwykPmONkl0vEq8LvN2pYBDMnNwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPkr6TD5/aDfUZQ1CLsaBjHAmaF5MB8GA1UdIwQY MBaAFCD7SgxG6pHnBg+ylCahMjOFJoSVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSVB0S0RFYnFrZWNHRDdLVUpxRXlNNFVtaEpVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOS8wYjM1YzUtODk5MC00ZTc2LWFlZWUt ZmNhZjRjZGQxNjYzLzEvSVB0S0RFYnFrZWNHRDdLVUpxRXlNNFVtaEpVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hOS8wYjM1YzUtODk5MC00ZTc2LWFlZWUtZmNhZjRjZGQxNjYz LzEvSVB0S0RFYnFrZWNHRDdLVUpxRXlNNFVtaEpVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAC+juH+92 y4iTLTwKJT6EX6xswCNJ0C1UJsNkqULaSTySDAbTmEUHAKfjHaiRPBPnZqvAlu8q SUIjYVfnvq2kmtAsVWWMg5/JN3H6LXRtMutMbalYh+1cMvSHcCypk7WN/ewYp8eZ LbD8uR2tRCLsixpQY90UFV162cBs+uEqLT145w51hAnSIgQpEJbVaQ1PyCwvf6Xg Q2E8qY6tVkltloYgt0mKZLB7sUdXTjeV7uDVtReIHK9ym9ZWZz6GvtXoXqGQLnwD vK7/Ze3HivT+Ot6TnxC35BG1ssQlpdn79QT3TLieHAz5VOYZcGxNmTAnvGvNHeZR CFudvkumrJ7qng== -----END CERTIFICATE-----Generated at Sat Dec 27 03:52:28 2025 by rpki-client