This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/9355b9-73d4-4c4c-9601-f01a2f58ef88/1/itR7qpqm4KIK2ZWnnCqN5gT5qjc.mft File: itR7qpqm4KIK2ZWnnCqN5gT5qjc.mft (raw, json) Hash identifier: YUcmtyxsGzyQ6UXpFzeDaVezUiqjx/xTqf0Y+YKi0Zs= Subject key identifier: A5:52:88:A1:E2:9F:C6:6B:43:9D:77:07:38:C5:C0:94:2C:3C:A0:57 Authority key identifier: 8A:D4:7B:AA:9A:A6:E0:A2:0A:D9:95:A7:9C:2A:8D:E6:04:F9:AA:37 Certificate issuer: /CN=8ad47baa9aa6e0a20ad995a79c2a8de604f9aa37 Certificate serial: 019B5418ADBE27477C0120E7E6F489408BBA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/itR7qpqm4KIK2ZWnnCqN5gT5qjc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/9355b9-73d4-4c4c-9601-f01a2f58ef88/1/itR7qpqm4KIK2ZWnnCqN5gT5qjc.mft Manifest number: 16DA Signing time: Thu 25 Dec 2025 06:01:01 +0000 Manifest this update: Thu 25 Dec 2025 06:01:01 +0000 Manifest next update: Fri 26 Dec 2025 06:01:01 +0000 Files and hashes: 1: 6LoGTUsxl6ngR0px_QWDZqMrDqY.roa (hash: +ceUAHPEc+ox8TyB65QxlBTF9+xyruiKTwNKbUkFhfY=) 2: itR7qpqm4KIK2ZWnnCqN5gT5qjc.crl (hash: ndvQc6O2vj43njXJkUlPxtcBI/fcgD335S4TTrmbz30=) 3: kOrxmXRMoh0iVhgCI3h3ap9gzjY.roa (hash: UuZBkN7yMoGzAAanQfroluxDy9hZk4vWUEry2ogeBOM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/9355b9-73d4-4c4c-9601-f01a2f58ef88/1/itR7qpqm4KIK2ZWnnCqN5gT5qjc.crl rsync://rpki.ripe.net/repository/DEFAULT/b1/9355b9-73d4-4c4c-9601-f01a2f58ef88/1/itR7qpqm4KIK2ZWnnCqN5gT5qjc.mft rsync://rpki.ripe.net/repository/DEFAULT/itR7qpqm4KIK2ZWnnCqN5gT5qjc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 26 Dec 2025 01:21:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:54:18:ad:be:27:47:7c:01:20:e7:e6:f4:89:40:8b:ba Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8ad47baa9aa6e0a20ad995a79c2a8de604f9aa37 Validity Not Before: Dec 25 06:01:01 2025 GMT Not After : Dec 26 06:01:01 2025 GMT Subject: CN=a55288a1e29fc66b439d770738c5c0942c3ca057 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:3b:70:6f:f6:97:9b:68:d2:96:70:e3:57:ac: 96:82:eb:2f:85:71:a7:dd:04:e2:65:60:94:d4:a0: 9a:83:d1:e4:8c:06:6f:25:5b:1a:25:0a:66:5f:eb: ed:7d:11:87:3a:2d:db:34:6f:d6:a7:f9:e2:ee:3b: aa:8f:f8:d5:41:db:24:48:d2:3c:a6:c1:c4:1c:17: bd:80:8a:cf:39:1a:38:2c:8b:00:2a:04:6a:ca:0a: 9c:1d:e4:96:67:28:ef:b6:74:80:56:5c:00:7f:2b: 0b:1d:bf:76:5b:27:43:41:b6:46:d4:24:1f:b1:10: 53:6f:72:a8:b2:31:eb:b4:59:89:f1:2b:78:7f:c0: 98:e3:05:27:0f:1f:83:53:44:8c:56:4b:71:c0:9b: 8a:4d:a2:fa:be:48:b6:7a:6c:25:96:0e:17:e2:ac: 3f:85:e6:4f:83:2f:a2:cf:2c:e1:b8:1d:9f:95:80: cf:89:1a:19:66:e7:62:75:dc:83:72:7d:73:01:9f: fc:43:47:48:01:d9:09:4e:59:ad:d9:82:a0:ec:63: 26:65:fd:07:a0:5c:98:15:2e:d9:62:7c:da:69:25: a4:58:26:50:1e:c7:b0:4d:ed:48:73:a0:09:8f:33: 5d:1e:e8:82:33:19:94:fd:52:03:be:bd:bc:8f:1e: 20:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:52:88:A1:E2:9F:C6:6B:43:9D:77:07:38:C5:C0:94:2C:3C:A0:57 X509v3 Authority Key Identifier: keyid:8A:D4:7B:AA:9A:A6:E0:A2:0A:D9:95:A7:9C:2A:8D:E6:04:F9:AA:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/itR7qpqm4KIK2ZWnnCqN5gT5qjc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/9355b9-73d4-4c4c-9601-f01a2f58ef88/1/itR7qpqm4KIK2ZWnnCqN5gT5qjc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/9355b9-73d4-4c4c-9601-f01a2f58ef88/1/itR7qpqm4KIK2ZWnnCqN5gT5qjc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 71:91:b7:ce:12:bb:8f:0b:e6:1f:06:7a:d1:a6:c9:95:09:79: f0:1a:54:94:5f:0a:9e:a9:be:9c:65:84:71:66:28:64:2a:ba: 4c:a5:d8:26:8e:9a:16:96:f1:1d:c0:1e:f8:a3:46:ae:09:9e: 22:d6:70:c7:ee:1e:28:76:fc:cf:23:36:d1:fe:09:ca:21:da: 70:b6:ee:23:30:f5:cc:72:58:73:00:b2:d8:73:68:f1:8d:c4: 5e:a0:96:ec:05:33:88:1b:ef:fb:a2:ea:2c:30:ca:6a:4e:3c: c1:7a:66:f6:ca:aa:e0:7c:14:cd:6c:b4:ad:d6:b8:17:00:9c: e8:61:e6:5e:c3:6f:7f:23:fd:24:08:78:a9:10:f1:77:25:d0: 02:df:6f:e1:ae:d5:55:5e:5d:4c:9f:69:fc:59:80:5a:d2:d2: 1a:c9:be:16:64:53:11:9c:d5:03:d1:bf:2e:2a:78:00:57:b9: 72:4a:7d:00:8f:fc:b3:23:36:7c:fa:e2:24:b9:49:6c:72:bd: 00:71:77:93:a4:50:e2:85:d5:08:93:66:70:80:57:6f:e6:b3: 2f:ab:72:d2:a9:59:f2:6e:0c:d0:d3:dc:d8:c5:2a:83:65:8c: 7b:8a:71:1b:9b:e0:ee:53:14:ce:f8:36:b0:f9:b3:68:71:d2: 87:e1:fa:92 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtUGK2+J0d8ASDn5vSJQIu6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhhZDQ3YmFhOWFhNmUwYTIwYWQ5OTVhNzljMmE4ZGU2MDRm OWFhMzcwHhcNMjUxMjI1MDYwMTAxWhcNMjUxMjI2MDYwMTAxWjAzMTEwLwYDVQQD EyhhNTUyODhhMWUyOWZjNjZiNDM5ZDc3MDczOGM1YzA5NDJjM2NhMDU3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAljtwb/aXm2jSlnDjV6yWgusvhXGn 3QTiZWCU1KCag9HkjAZvJVsaJQpmX+vtfRGHOi3bNG/Wp/ni7juqj/jVQdskSNI8 psHEHBe9gIrPORo4LIsAKgRqygqcHeSWZyjvtnSAVlwAfysLHb92WydDQbZG1CQf sRBTb3KosjHrtFmJ8St4f8CY4wUnDx+DU0SMVktxwJuKTaL6vki2emwllg4X4qw/ heZPgy+izyzhuB2flYDPiRoZZudiddyDcn1zAZ/8Q0dIAdkJTlmt2YKg7GMmZf0H oFyYFS7ZYnzaaSWkWCZQHsewTe1Ic6AJjzNdHuiCMxmU/VIDvr28jx4g/QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKVSiKHin8ZrQ513BzjFwJQsPKBXMB8GA1UdIwQY MBaAFIrUe6qapuCiCtmVp5wqjeYE+ao3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaXRSN3FwcW00S0lLMlpXbm5DcU41Z1Q1cWpjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS85MzU1YjktNzNkNC00YzRjLTk2MDEt ZjAxYTJmNThlZjg4LzEvaXRSN3FwcW00S0lLMlpXbm5DcU41Z1Q1cWpjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMS85MzU1YjktNzNkNC00YzRjLTk2MDEtZjAxYTJmNThlZjg4 LzEvaXRSN3FwcW00S0lLMlpXbm5DcU41Z1Q1cWpjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcZG3zhK7 jwvmHwZ60abJlQl58BpUlF8Knqm+nGWEcWYoZCq6TKXYJo6aFpbxHcAe+KNGrgme ItZwx+4eKHb8zyM20f4JyiHacLbuIzD1zHJYcwCy2HNo8Y3EXqCW7AUziBvv+6Lq LDDKak48wXpm9sqq4HwUzWy0rda4FwCc6GHmXsNvfyP9JAh4qRDxdyXQAt9v4a7V VV5dTJ9p/FmAWtLSGsm+FmRTEZzVA9G/Lip4AFe5ckp9AI/8syM2fPriJLlJbHK9 AHF3k6RQ4oXVCJNmcIBXb+azL6ty0qlZ8m4M0NPc2MUqg2WMe4pxG5vg7lMUzvg2 sPmzaHHSh+H6kg== -----END CERTIFICATE-----Generated at Thu Dec 25 07:10:21 2025 by rpki-client