This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/a6cffc-be64-4d08-94a6-a15f0e78a5a9/1/Iz44KEEbr6sAbnX9DdX1-e9V7CU.mft File: Iz44KEEbr6sAbnX9DdX1-e9V7CU.mft (raw, json) Hash identifier: AbtIt9e9IRgtvM/JgTIVruxhR/mC2HwxlEmq8txKMnE= Subject key identifier: 70:44:31:E6:5E:3A:B6:06:11:B4:71:2C:33:0A:A1:AA:DB:F6:D4:FA Authority key identifier: 23:3E:38:28:41:1B:AF:AB:00:6E:75:FD:0D:D5:F5:F9:EF:55:EC:25 Certificate issuer: /CN=233e3828411bafab006e75fd0dd5f5f9ef55ec25 Certificate serial: 019B6A321ED806B483250CC8DEA00D443DFC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Iz44KEEbr6sAbnX9DdX1-e9V7CU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/a6cffc-be64-4d08-94a6-a15f0e78a5a9/1/Iz44KEEbr6sAbnX9DdX1-e9V7CU.mft Manifest number: 144D Signing time: Mon 29 Dec 2025 13:00:28 +0000 Manifest this update: Mon 29 Dec 2025 13:00:28 +0000 Manifest next update: Tue 30 Dec 2025 13:00:28 +0000 Files and hashes: 1: Iz44KEEbr6sAbnX9DdX1-e9V7CU.crl (hash: ROG58qItxwnq0X7T88mQG2z9kBnBSr1puyhqv3VivIc=) 2: NCoehdmUvbF9hjrmMyI6BY_y1Tg.roa (hash: oKUbCP0RxT560oSwid+jhRboIkVkQAnDdP+HNoQNqUU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/a6cffc-be64-4d08-94a6-a15f0e78a5a9/1/Iz44KEEbr6sAbnX9DdX1-e9V7CU.crl rsync://rpki.ripe.net/repository/DEFAULT/ba/a6cffc-be64-4d08-94a6-a15f0e78a5a9/1/Iz44KEEbr6sAbnX9DdX1-e9V7CU.mft rsync://rpki.ripe.net/repository/DEFAULT/Iz44KEEbr6sAbnX9DdX1-e9V7CU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 30 Dec 2025 10:15:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:6a:32:1e:d8:06:b4:83:25:0c:c8:de:a0:0d:44:3d:fc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=233e3828411bafab006e75fd0dd5f5f9ef55ec25 Validity Not Before: Dec 29 13:00:28 2025 GMT Not After : Dec 30 13:00:28 2025 GMT Subject: CN=704431e65e3ab60611b4712c330aa1aadbf6d4fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:cd:4e:d7:b3:8a:0f:18:6e:41:e5:0f:c5:95: 65:fc:b2:ab:80:d4:81:32:f5:f2:24:63:e1:a3:c9: bb:a5:0f:82:81:4f:62:3b:45:fc:67:04:12:6e:b6: 80:91:5a:e7:81:94:59:4a:fe:55:11:84:9f:9e:a0: 9b:ba:26:33:c0:27:71:11:eb:0f:c8:d4:75:8a:59: 24:f7:54:bf:34:d5:b5:24:59:4d:23:60:56:50:39: da:9c:e7:0d:ec:f7:ca:50:38:54:f6:a8:bb:cc:fe: 34:97:47:bb:7c:12:4c:b7:86:1b:cf:ec:4a:d6:2a: 9e:7f:44:11:83:11:8d:ac:da:a6:80:55:6e:79:9b: e5:4d:ad:a0:b2:21:1b:33:26:8f:c5:5d:92:65:07: 2a:16:e5:d8:9d:12:4c:da:5f:3a:f6:34:ad:57:d2: 6e:3c:ec:c5:fa:76:7f:4b:5b:81:f0:a8:2d:02:58: cd:d6:b2:c7:6a:cb:99:4a:0b:87:20:ee:df:ec:06: d7:fd:3a:b4:55:f4:ee:e1:17:d7:65:df:b8:ad:53: 62:eb:c4:cc:e9:2e:c2:20:7d:35:14:b6:9e:cd:cf: 61:bd:38:f8:69:79:39:18:db:c8:af:3a:75:c6:55: 94:82:a6:47:c9:62:e4:68:1c:a2:53:53:a3:6c:33: 84:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:44:31:E6:5E:3A:B6:06:11:B4:71:2C:33:0A:A1:AA:DB:F6:D4:FA X509v3 Authority Key Identifier: keyid:23:3E:38:28:41:1B:AF:AB:00:6E:75:FD:0D:D5:F5:F9:EF:55:EC:25 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Iz44KEEbr6sAbnX9DdX1-e9V7CU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/a6cffc-be64-4d08-94a6-a15f0e78a5a9/1/Iz44KEEbr6sAbnX9DdX1-e9V7CU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/a6cffc-be64-4d08-94a6-a15f0e78a5a9/1/Iz44KEEbr6sAbnX9DdX1-e9V7CU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1d:96:e7:bc:33:fc:56:e5:b6:3b:c4:63:69:ec:60:23:d8:da: 4b:bb:19:80:4a:4b:b3:d9:37:77:b5:fc:a1:09:73:46:6f:8e: 65:c3:0a:20:07:3d:c7:e2:ef:2d:c0:3e:0b:bd:53:48:3d:81: 97:a3:c5:f9:db:7f:66:dc:04:09:ed:52:0b:17:b3:35:d8:6f: 4f:8a:58:a7:75:86:2b:7a:ab:ed:6e:ab:74:ba:32:f1:7b:11: 82:4a:17:0e:df:22:57:0e:72:a5:97:35:2c:08:2f:0b:2a:08: 6c:6d:1d:7e:b2:12:f3:0e:21:a8:28:74:70:42:37:2b:a2:12: 87:96:cd:73:2d:3e:26:88:d4:d3:15:84:bb:b4:12:7e:68:06: 86:51:fe:5c:75:41:8e:b6:ef:8e:39:91:e8:1d:f8:ea:86:c2: ad:39:42:3f:25:4f:a6:72:32:ed:08:25:81:26:cd:a3:e7:12: ff:9a:28:67:94:13:b6:41:5f:0c:49:70:df:1c:06:88:ef:4b: 44:42:7d:5e:4f:61:f3:8f:a4:d6:d8:bd:b3:22:c5:f6:b3:90: ba:4f:40:86:0a:6c:cc:8d:33:4e:27:77:e2:0f:a2:05:db:bf: d0:99:c0:74:ed:f3:99:26:fa:6d:80:40:dc:36:1f:66:7f:10: 7f:bd:5b:a0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtqMh7YBrSDJQzI3qANRD38MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIzM2UzODI4NDExYmFmYWIwMDZlNzVmZDBkZDVmNWY5ZWY1 NWVjMjUwHhcNMjUxMjI5MTMwMDI4WhcNMjUxMjMwMTMwMDI4WjAzMTEwLwYDVQQD Eyg3MDQ0MzFlNjVlM2FiNjA2MTFiNDcxMmMzMzBhYTFhYWRiZjZkNGZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvc1O17OKDxhuQeUPxZVl/LKrgNSB MvXyJGPho8m7pQ+CgU9iO0X8ZwQSbraAkVrngZRZSv5VEYSfnqCbuiYzwCdxEesP yNR1ilkk91S/NNW1JFlNI2BWUDnanOcN7PfKUDhU9qi7zP40l0e7fBJMt4Ybz+xK 1iqef0QRgxGNrNqmgFVueZvlTa2gsiEbMyaPxV2SZQcqFuXYnRJM2l869jStV9Ju POzF+nZ/S1uB8KgtAljN1rLHasuZSguHIO7f7AbX/Tq0VfTu4RfXZd+4rVNi68TM 6S7CIH01FLaezc9hvTj4aXk5GNvIrzp1xlWUgqZHyWLkaByiU1OjbDOEGQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHBEMeZeOrYGEbRxLDMKoarb9tT6MB8GA1UdIwQY MBaAFCM+OChBG6+rAG51/Q3V9fnvVewlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSXo0NEtFRWJyNnNBYm5YOURkWDEtZTlWN0NVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYS9hNmNmZmMtYmU2NC00ZDA4LTk0YTYt YTE1ZjBlNzhhNWE5LzEvSXo0NEtFRWJyNnNBYm5YOURkWDEtZTlWN0NVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYS9hNmNmZmMtYmU2NC00ZDA4LTk0YTYtYTE1ZjBlNzhhNWE5 LzEvSXo0NEtFRWJyNnNBYm5YOURkWDEtZTlWN0NVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHZbnvDP8 VuW2O8RjaexgI9jaS7sZgEpLs9k3d7X8oQlzRm+OZcMKIAc9x+LvLcA+C71TSD2B l6PF+dt/ZtwECe1SCxezNdhvT4pYp3WGK3qr7W6rdLoy8XsRgkoXDt8iVw5ypZc1 LAgvCyoIbG0dfrIS8w4hqCh0cEI3K6ISh5bNcy0+JojU0xWEu7QSfmgGhlH+XHVB jrbvjjmR6B346obCrTlCPyVPpnIy7QglgSbNo+cS/5ooZ5QTtkFfDElw3xwGiO9L REJ9Xk9h84+k1ti9syLF9rOQuk9AhgpszI0zTid34g+iBdu/0JnAdO3zmSb6bYBA 3DYfZn8Qf71boA== -----END CERTIFICATE-----Generated at Mon Dec 29 14:52:57 2025 by rpki-client