This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/60fc0d-0eb9-424c-a630-9a5c73bffa23/1/ijH4vqM7AFZEbjMh7t46Fw-9fB8.mft File: ijH4vqM7AFZEbjMh7t46Fw-9fB8.mft (raw, json) Hash identifier: ZZxMIvebBFyFiaFiUS9GEd6qb2Jsn2CrUckSpDPltVA= Subject key identifier: 34:95:B4:44:38:59:E7:13:B8:BF:60:FB:6C:BB:14:1F:78:6C:83:AD Authority key identifier: 8A:31:F8:BE:A3:3B:00:56:44:6E:33:21:EE:DE:3A:17:0F:BD:7C:1F Certificate issuer: /CN=8a31f8bea33b0056446e3321eede3a170fbd7c1f Certificate serial: 019B717DD31CDC19981FCD544AFA20AC3A49 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ijH4vqM7AFZEbjMh7t46Fw-9fB8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/60fc0d-0eb9-424c-a630-9a5c73bffa23/1/ijH4vqM7AFZEbjMh7t46Fw-9fB8.mft Manifest number: 17A3 Signing time: Tue 30 Dec 2025 23:00:29 +0000 Manifest this update: Tue 30 Dec 2025 23:00:29 +0000 Manifest next update: Wed 31 Dec 2025 23:00:29 +0000 Files and hashes: 1: SZpd9qPeF2_UcZ0BFTiD1uQx6CE.roa (hash: 4d7c/yFsOUlnwxOih4L4b458874C6mb5/7y63/As6E0=) 2: e6NTQMQbAc2rRpYIgSE0b5QlitQ.roa (hash: AW2JD/AMZP/3NkMYPVumCDsjg07AD98EjBhRoynRE5I=) 3: ijH4vqM7AFZEbjMh7t46Fw-9fB8.crl (hash: uLwj/J5JQFhYbj0kqJJkUaNCLoszEw4PscV3MmiT8ys=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/60fc0d-0eb9-424c-a630-9a5c73bffa23/1/ijH4vqM7AFZEbjMh7t46Fw-9fB8.crl rsync://rpki.ripe.net/repository/DEFAULT/b0/60fc0d-0eb9-424c-a630-9a5c73bffa23/1/ijH4vqM7AFZEbjMh7t46Fw-9fB8.mft rsync://rpki.ripe.net/repository/DEFAULT/ijH4vqM7AFZEbjMh7t46Fw-9fB8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 31 Dec 2025 23:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:71:7d:d3:1c:dc:19:98:1f:cd:54:4a:fa:20:ac:3a:49 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8a31f8bea33b0056446e3321eede3a170fbd7c1f Validity Not Before: Dec 30 23:00:29 2025 GMT Not After : Dec 31 23:00:29 2025 GMT Subject: CN=3495b4443859e713b8bf60fb6cbb141f786c83ad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:10:49:f0:f0:ea:a9:12:bf:cc:36:28:af:c3: 5e:da:7b:4a:29:f6:d2:38:49:c1:27:15:f0:d1:57: 33:15:f9:7b:60:10:ee:fe:89:6a:34:09:ce:dc:b3: d7:dd:75:bd:4d:30:1b:f8:6e:6a:8c:7a:54:68:7e: 17:ac:24:50:dd:6e:c9:c4:ee:be:a4:ba:a7:07:78: a5:0a:02:46:4d:3f:80:37:9f:34:11:ef:77:31:b7: 72:e8:67:7f:32:fd:f1:e7:1f:0b:25:bd:87:70:bc: 03:fc:99:d3:45:eb:51:7f:d3:23:a3:3e:63:66:5b: 2c:ca:23:7f:91:ae:6c:7d:39:f0:3f:95:59:4c:03: bd:a2:50:3a:d6:96:dd:1b:71:3b:c0:a2:8e:d5:d7: ed:4d:d1:ec:d8:52:3f:7d:aa:93:ea:e7:c9:c4:af: aa:0a:56:08:99:f5:be:6c:de:43:8a:d3:0e:ab:98: 3f:cb:1e:41:dd:36:50:02:c9:22:d4:93:2e:bb:c4: e7:a6:26:b3:6b:d2:af:4f:5a:65:89:1a:b1:03:db: 1c:6d:6f:95:20:6c:1f:b4:c6:2f:e5:42:81:ec:91: e9:91:0d:e9:b1:bf:12:31:a1:a1:0a:20:94:66:c6: 2f:d4:e1:bd:46:ae:ff:74:9f:a5:b0:63:87:17:77: 4f:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:95:B4:44:38:59:E7:13:B8:BF:60:FB:6C:BB:14:1F:78:6C:83:AD X509v3 Authority Key Identifier: keyid:8A:31:F8:BE:A3:3B:00:56:44:6E:33:21:EE:DE:3A:17:0F:BD:7C:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ijH4vqM7AFZEbjMh7t46Fw-9fB8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/60fc0d-0eb9-424c-a630-9a5c73bffa23/1/ijH4vqM7AFZEbjMh7t46Fw-9fB8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/60fc0d-0eb9-424c-a630-9a5c73bffa23/1/ijH4vqM7AFZEbjMh7t46Fw-9fB8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 46:8d:7a:0a:0d:8e:5d:3d:49:c9:36:28:dd:62:45:d5:c0:59: 94:14:d5:db:88:a9:0a:db:5a:b1:c2:ca:0b:f9:2c:2f:f8:27: a8:53:89:ae:57:26:f4:6e:d2:c8:58:02:fe:45:89:04:0c:8d: c0:ac:67:26:a7:ab:e2:67:ba:f8:be:27:74:bf:72:81:6f:41: 69:fa:a3:5c:20:29:f1:71:46:32:01:a4:b9:53:83:14:fc:39: 96:9d:c8:aa:3e:3e:db:29:34:96:4f:a6:c9:86:af:6f:13:71: 41:a5:9a:42:6e:65:88:06:50:63:4d:01:fd:1d:3c:e4:82:a4: d0:ab:56:e1:a7:0a:50:a6:54:df:d2:95:92:05:60:c5:ff:71: f7:2e:90:07:b8:88:cc:75:4d:a1:3e:f4:21:93:c8:10:f4:c3: 10:74:60:76:b0:c5:6a:44:82:8d:33:34:3d:9e:ee:82:dc:5a: aa:7c:44:63:3f:79:b4:2f:6b:df:f4:6b:ea:6a:4b:0f:67:d3: 5b:03:aa:65:8a:db:2e:ba:c9:2e:22:c6:54:c3:e4:a8:94:51: 56:61:14:0e:99:29:94:17:c0:9e:90:70:1b:6c:95:f5:f0:0a: 47:66:fb:b7:8a:ec:df:b8:b5:8a:bd:8c:77:78:5c:62:3f:db: 30:77:a9:07 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtxfdMc3BmYH81USvogrDpJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhhMzFmOGJlYTMzYjAwNTY0NDZlMzMyMWVlZGUzYTE3MGZi ZDdjMWYwHhcNMjUxMjMwMjMwMDI5WhcNMjUxMjMxMjMwMDI5WjAzMTEwLwYDVQQD EygzNDk1YjQ0NDM4NTllNzEzYjhiZjYwZmI2Y2JiMTQxZjc4NmM4M2FkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtRBJ8PDqqRK/zDYor8Ne2ntKKfbS OEnBJxXw0VczFfl7YBDu/olqNAnO3LPX3XW9TTAb+G5qjHpUaH4XrCRQ3W7JxO6+ pLqnB3ilCgJGTT+AN580Ee93Mbdy6Gd/Mv3x5x8LJb2HcLwD/JnTRetRf9Mjoz5j ZlssyiN/ka5sfTnwP5VZTAO9olA61pbdG3E7wKKO1dftTdHs2FI/faqT6ufJxK+q ClYImfW+bN5DitMOq5g/yx5B3TZQAski1JMuu8Tnpiaza9KvT1pliRqxA9scbW+V IGwftMYv5UKB7JHpkQ3psb8SMaGhCiCUZsYv1OG9Rq7/dJ+lsGOHF3dPQQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDSVtEQ4WecTuL9g+2y7FB94bIOtMB8GA1UdIwQY MBaAFIox+L6jOwBWRG4zIe7eOhcPvXwfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaWpINHZxTTdBRlpFYmpNaDd0NDZGdy05ZkI4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC82MGZjMGQtMGViOS00MjRjLWE2MzAt OWE1YzczYmZmYTIzLzEvaWpINHZxTTdBRlpFYmpNaDd0NDZGdy05ZkI4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMC82MGZjMGQtMGViOS00MjRjLWE2MzAtOWE1YzczYmZmYTIz LzEvaWpINHZxTTdBRlpFYmpNaDd0NDZGdy05ZkI4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARo16Cg2O XT1JyTYo3WJF1cBZlBTV24ipCttascLKC/ksL/gnqFOJrlcm9G7SyFgC/kWJBAyN wKxnJqer4me6+L4ndL9ygW9BafqjXCAp8XFGMgGkuVODFPw5lp3Iqj4+2yk0lk+m yYavbxNxQaWaQm5liAZQY00B/R085IKk0KtW4acKUKZU39KVkgVgxf9x9y6QB7iI zHVNoT70IZPIEPTDEHRgdrDFakSCjTM0PZ7ugtxaqnxEYz95tC9r3/Rr6mpLD2fT WwOqZYrbLrrJLiLGVMPkqJRRVmEUDpkplBfAnpBwG2yV9fAKR2b7t4rs37i1ir2M d3hcYj/bMHepBw== -----END CERTIFICATE-----Generated at Wed Dec 31 09:14:44 2025 by rpki-client