This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/740c1e-1a4c-4ca2-bd53-537b1b49dfe7/1/iqtMDPIcGj1upBBoy-kIvjiORQo.mft File: iqtMDPIcGj1upBBoy-kIvjiORQo.mft (raw, json) Hash identifier: lcapy4Jl5boKIVVKT1+hj0fkZZIk4qA6qg1MTUuLjso= Subject key identifier: 29:42:C6:8A:05:FA:4A:71:39:AE:13:1D:08:7B:3C:A9:D3:66:81:A3 Authority key identifier: 8A:AB:4C:0C:F2:1C:1A:3D:6E:A4:10:68:CB:E9:08:BE:38:8E:45:0A Certificate issuer: /CN=8aab4c0cf21c1a3d6ea41068cbe908be388e450a Certificate serial: 019B38D862151F4762A97D84E2735361F862 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iqtMDPIcGj1upBBoy-kIvjiORQo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/740c1e-1a4c-4ca2-bd53-537b1b49dfe7/1/iqtMDPIcGj1upBBoy-kIvjiORQo.mft Manifest number: 04C9 Signing time: Fri 19 Dec 2025 23:01:03 +0000 Manifest this update: Fri 19 Dec 2025 23:01:03 +0000 Manifest next update: Sat 20 Dec 2025 23:01:03 +0000 Files and hashes: 1: G350oN6xck9sDuFPco_m0pUGJ-4.roa (hash: lAZMvwW39peHPp7Gi+NQnv+PV4aVrgoRzPsjZkOfCAA=) 2: KNoplKbnalbBlNJ0HrGiOS5fwgk.roa (hash: 6g25L6YriR7F4NqmIjLUqgHXTaSIa9NMu6Z6ggsvzHE=) 3: alNy-myxrA734TUoeZ1JVeikh6c.roa (hash: OCkDLXElKJB9eMUhsdq5dMT5WhX6caAwH3DuhC8oZvM=) 4: dQ-UnjUf_zrF6QrM_x6OnxYwXrs.roa (hash: lmcAQBoAG4rGhrHwCQpsyMirWvdOFHnh3mHdkplTacE=) 5: iqtMDPIcGj1upBBoy-kIvjiORQo.crl (hash: OmzfqtIloKdHkpDVFBG9herCtRrmFEa84TpMr+CThxU=) 6: o6gIOFd94HWkz0C7qKDElB9ddLg.roa (hash: O6hiQL5dtUMOxfO7I5/Qs8GG3APxd+JEX/g4sJbBrHE=) 7: t-24rH7-JcWRQl10GG2TwvUWpfw.roa (hash: Q+PFhb4BxvMEH8mNwldbOzxcrgHXdHD5grZaE0hgfdU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/740c1e-1a4c-4ca2-bd53-537b1b49dfe7/1/iqtMDPIcGj1upBBoy-kIvjiORQo.crl rsync://rpki.ripe.net/repository/DEFAULT/b1/740c1e-1a4c-4ca2-bd53-537b1b49dfe7/1/iqtMDPIcGj1upBBoy-kIvjiORQo.mft rsync://rpki.ripe.net/repository/DEFAULT/iqtMDPIcGj1upBBoy-kIvjiORQo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 23:01:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:38:d8:62:15:1f:47:62:a9:7d:84:e2:73:53:61:f8:62 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8aab4c0cf21c1a3d6ea41068cbe908be388e450a Validity Not Before: Dec 19 23:01:03 2025 GMT Not After : Dec 20 23:01:03 2025 GMT Subject: CN=2942c68a05fa4a7139ae131d087b3ca9d36681a3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:d7:f9:82:73:9a:e9:00:f4:72:22:b6:2d:ec: b7:52:69:93:82:3b:72:e9:02:93:04:52:7c:53:dc: a7:e1:80:16:67:d3:da:40:ac:ab:d1:69:82:28:6f: 0d:02:66:35:0b:7e:88:ed:f9:b7:65:b6:f1:64:ef: d6:b4:e4:df:4c:7a:90:a4:ac:9a:e3:f0:cf:74:6e: f4:7d:08:e6:fe:1a:6b:fa:76:80:d1:42:42:c5:62: 3f:f8:9a:04:47:72:7c:01:4d:f9:30:05:53:39:dc: 28:97:71:db:a4:b6:06:75:27:ba:70:bc:1b:6f:c1: dc:55:e3:90:b1:c1:2a:47:10:77:f6:b1:05:77:d9: 54:18:34:c5:a9:1b:cc:3a:d4:02:5e:80:e8:07:e7: 98:c3:6b:8a:0f:cd:fd:2e:50:e5:80:fe:66:09:23: 1f:c9:84:fb:8e:36:bb:06:36:36:37:90:54:2e:52: e6:38:e8:e7:28:7f:ef:08:85:e4:a7:db:da:2e:1b: d4:7c:6a:c7:41:42:3b:39:49:8f:4b:f9:3a:e2:cf: a9:85:7e:92:3c:a5:90:a0:46:c6:59:44:35:ec:9c: 23:83:70:22:42:a6:9b:7e:6b:f7:61:c4:93:2f:c4: 81:ba:83:35:6e:52:f4:e1:94:4b:af:5d:63:5e:0e: 9e:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:42:C6:8A:05:FA:4A:71:39:AE:13:1D:08:7B:3C:A9:D3:66:81:A3 X509v3 Authority Key Identifier: keyid:8A:AB:4C:0C:F2:1C:1A:3D:6E:A4:10:68:CB:E9:08:BE:38:8E:45:0A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iqtMDPIcGj1upBBoy-kIvjiORQo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/740c1e-1a4c-4ca2-bd53-537b1b49dfe7/1/iqtMDPIcGj1upBBoy-kIvjiORQo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/740c1e-1a4c-4ca2-bd53-537b1b49dfe7/1/iqtMDPIcGj1upBBoy-kIvjiORQo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption be:d1:dd:b5:37:9b:a5:d1:81:75:c9:2f:53:f2:d3:78:bf:08: ab:4c:01:ec:a2:42:cb:d0:b8:3b:24:cc:54:7f:ca:7a:83:96: 54:5a:40:4c:b5:f0:b4:1d:af:db:86:39:d0:5d:0a:31:b8:89: d3:a1:3e:0f:98:30:af:a7:11:6a:6d:89:4f:a5:9e:fc:f3:ca: 8b:72:e6:dc:1f:23:c7:a2:f0:00:26:aa:13:ec:d1:be:88:e1: f4:fc:38:74:f9:ad:24:11:31:39:8d:9e:32:75:f4:35:7b:9f: f3:9b:a4:71:82:ad:7d:fd:90:a8:b2:b1:1a:4a:e0:32:1f:5c: 32:9f:00:57:3e:f3:7d:96:d2:55:cf:a5:b8:e9:a5:5c:44:d4: a3:68:9d:cd:47:c7:1c:ec:8d:ca:74:6d:c7:0f:09:4c:45:0e: 2b:dc:0f:7c:1f:85:fd:e4:d5:91:4b:29:c2:9a:38:d3:29:29: ae:7e:62:4d:ea:a2:6d:ef:f9:3a:be:05:6e:fc:0e:1b:32:04: 82:57:4f:ce:41:2b:1f:3c:a1:73:81:bd:09:68:98:27:71:93: 07:f2:bc:b2:a1:48:25:ca:e6:69:d5:b8:76:39:ee:f7:01:5f: ba:c6:6b:26:65:52:a1:dd:34:b5:01:4a:00:05:69:25:89:e6: 49:f8:47:fb -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs42GIVH0diqX2E4nNTYfhiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhhYWI0YzBjZjIxYzFhM2Q2ZWE0MTA2OGNiZTkwOGJlMzg4 ZTQ1MGEwHhcNMjUxMjE5MjMwMTAzWhcNMjUxMjIwMjMwMTAzWjAzMTEwLwYDVQQD EygyOTQyYzY4YTA1ZmE0YTcxMzlhZTEzMWQwODdiM2NhOWQzNjY4MWEzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAntf5gnOa6QD0ciK2Ley3UmmTgjty 6QKTBFJ8U9yn4YAWZ9PaQKyr0WmCKG8NAmY1C36I7fm3ZbbxZO/WtOTfTHqQpKya 4/DPdG70fQjm/hpr+naA0UJCxWI/+JoER3J8AU35MAVTOdwol3HbpLYGdSe6cLwb b8HcVeOQscEqRxB39rEFd9lUGDTFqRvMOtQCXoDoB+eYw2uKD839LlDlgP5mCSMf yYT7jja7BjY2N5BULlLmOOjnKH/vCIXkp9vaLhvUfGrHQUI7OUmPS/k64s+phX6S PKWQoEbGWUQ17Jwjg3AiQqabfmv3YcSTL8SBuoM1blL04ZRLr11jXg6euwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFClCxooF+kpxOa4THQh7PKnTZoGjMB8GA1UdIwQY MBaAFIqrTAzyHBo9bqQQaMvpCL44jkUKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaXF0TURQSWNHajF1cEJCb3kta0l2amlPUlFvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS83NDBjMWUtMWE0Yy00Y2EyLWJkNTMt NTM3YjFiNDlkZmU3LzEvaXF0TURQSWNHajF1cEJCb3kta0l2amlPUlFvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMS83NDBjMWUtMWE0Yy00Y2EyLWJkNTMtNTM3YjFiNDlkZmU3 LzEvaXF0TURQSWNHajF1cEJCb3kta0l2amlPUlFvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvtHdtTeb pdGBdckvU/LTeL8Iq0wB7KJCy9C4OyTMVH/KeoOWVFpATLXwtB2v24Y50F0KMbiJ 06E+D5gwr6cRam2JT6We/PPKi3Lm3B8jx6LwACaqE+zRvojh9Pw4dPmtJBExOY2e MnX0NXuf85ukcYKtff2QqLKxGkrgMh9cMp8AVz7zfZbSVc+luOmlXETUo2idzUfH HOyNynRtxw8JTEUOK9wPfB+F/eTVkUspwpo40ykprn5iTeqibe/5Or4FbvwOGzIE gldPzkErHzyhc4G9CWiYJ3GTB/K8sqFIJcrmadW4djnu9wFfusZrJmVSod00tQFK AAVpJYnmSfhH+w== -----END CERTIFICATE-----Generated at Sat Dec 20 06:55:08 2025 by rpki-client