This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/ca3b5f-0221-43ad-8abd-1c13206a8123/1/iTr-zXEXBcR2t4XQyG71TCEkNUw.mft File: iTr-zXEXBcR2t4XQyG71TCEkNUw.mft (raw, json) Hash identifier: bqYoWSDQMGYdPn3wiKvcHdQOOZLyllITiK0UNC30b7M= Subject key identifier: CD:76:FE:94:7F:93:2B:33:67:97:37:59:39:3E:4B:5A:FB:94:CA:92 Authority key identifier: 89:3A:FE:CD:71:17:05:C4:76:B7:85:D0:C8:6E:F5:4C:21:24:35:4C Certificate issuer: /CN=893afecd711705c476b785d0c86ef54c2124354c Certificate serial: 019B3A5875F96E49871DDCE0965E5FD15409 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iTr-zXEXBcR2t4XQyG71TCEkNUw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/ca3b5f-0221-43ad-8abd-1c13206a8123/1/iTr-zXEXBcR2t4XQyG71TCEkNUw.mft Manifest number: 1787 Signing time: Sat 20 Dec 2025 06:00:34 +0000 Manifest this update: Sat 20 Dec 2025 06:00:34 +0000 Manifest next update: Sun 21 Dec 2025 06:00:34 +0000 Files and hashes: 1: I3MDgaIPk5rQhFYqlKJ88u7QcKA.roa (hash: 9W6ILnGR89GeCDK+0ZtMLah7T+7H4VrTikrakuva5SY=) 2: hdbWZzPv8mKL7ila4Mhuuk01Www.roa (hash: CfHG1SiNzylmV2mCUzoHK+y9CvaZseJUgqyvhhx1NeI=) 3: iTr-zXEXBcR2t4XQyG71TCEkNUw.crl (hash: EQwwDA7I/1ANxs36qzfBC+2vZ8X3GgH7Sjt9f4QeNX8=) 4: rO9T6t_WHUnkGmIleBFSGRnlKnY.roa (hash: wcBWF7o7prWlR7s8a04nO9bFFc8bqPRJlh3HL2eDAqI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/ca3b5f-0221-43ad-8abd-1c13206a8123/1/iTr-zXEXBcR2t4XQyG71TCEkNUw.crl rsync://rpki.ripe.net/repository/DEFAULT/bc/ca3b5f-0221-43ad-8abd-1c13206a8123/1/iTr-zXEXBcR2t4XQyG71TCEkNUw.mft rsync://rpki.ripe.net/repository/DEFAULT/iTr-zXEXBcR2t4XQyG71TCEkNUw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 06:00:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3a:58:75:f9:6e:49:87:1d:dc:e0:96:5e:5f:d1:54:09 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=893afecd711705c476b785d0c86ef54c2124354c Validity Not Before: Dec 20 06:00:34 2025 GMT Not After : Dec 21 06:00:34 2025 GMT Subject: CN=cd76fe947f932b3367973759393e4b5afb94ca92 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:13:57:09:52:8e:03:8e:45:52:31:82:44:38: 84:22:b9:92:0e:5d:23:f0:bb:6b:57:1c:fb:41:6d: f0:3a:a6:9d:c2:8c:fa:86:c6:06:7b:5f:66:9f:08: 5d:de:ed:14:80:7b:44:ee:83:4d:77:cf:32:ea:69: 68:ae:95:9e:b7:d0:34:b3:9b:c7:96:e5:f3:94:0b: 87:13:a8:54:8e:70:72:27:ad:65:f9:74:93:bf:e9: cb:a3:21:21:e2:73:63:08:57:07:35:f1:35:37:e7: 4e:f9:da:33:36:76:99:df:6c:4f:c2:0e:cb:c7:7a: 81:6f:6d:7c:6b:2f:eb:ef:5a:a9:99:e7:1e:85:44: a7:3b:9c:47:61:8f:f6:b3:4f:0a:c1:6c:cc:22:24: 87:20:b3:6f:61:2f:d7:3d:5b:56:e9:10:60:d6:d7: cd:9e:01:5f:97:f5:75:30:b3:e9:4c:97:de:9b:0c: e0:1b:18:b8:70:db:db:d6:c5:41:b8:e8:ea:fb:45: 53:1a:d8:6c:d1:86:b2:dc:e3:90:fa:41:fe:cd:42: 97:03:34:62:52:b6:99:7c:bd:3f:36:f1:93:15:f2: 46:ce:45:61:04:f0:f3:3e:bf:57:ae:2f:95:de:0b: 2f:b4:68:22:09:db:1c:21:96:2c:8b:75:4a:83:a9: 73:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:76:FE:94:7F:93:2B:33:67:97:37:59:39:3E:4B:5A:FB:94:CA:92 X509v3 Authority Key Identifier: keyid:89:3A:FE:CD:71:17:05:C4:76:B7:85:D0:C8:6E:F5:4C:21:24:35:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iTr-zXEXBcR2t4XQyG71TCEkNUw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/ca3b5f-0221-43ad-8abd-1c13206a8123/1/iTr-zXEXBcR2t4XQyG71TCEkNUw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/ca3b5f-0221-43ad-8abd-1c13206a8123/1/iTr-zXEXBcR2t4XQyG71TCEkNUw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5c:99:50:82:0c:96:8a:a6:e9:8b:a7:23:06:46:5a:ee:85:40: 69:4c:1f:15:d4:75:e9:3d:6a:05:df:65:37:26:3c:c1:6f:a7: 8a:fe:eb:c9:ff:37:9d:8d:b4:6b:96:9d:2b:32:5c:ae:a0:b6: 6b:96:7a:eb:e5:bb:dd:c4:d2:01:40:39:de:f6:0e:d4:55:27: bd:5b:5d:f9:9b:32:2d:cb:eb:e0:60:7c:a8:85:3d:84:35:df: 16:76:22:f9:0f:80:d1:5f:18:f9:89:2b:e1:7f:f6:12:11:7b: 3a:64:34:b7:03:e2:6f:67:c2:dd:6c:ea:c6:28:9f:02:b4:26: 74:e6:07:c4:e5:b6:d6:57:8b:47:2c:bb:60:40:41:f9:18:df: ad:3b:7d:dd:91:5b:9e:c4:4b:9f:7b:fe:5b:a9:9a:ed:c9:03: 42:ca:17:da:3a:cb:5c:ab:90:30:e2:2d:3e:4d:ad:d7:94:1f: 0f:e9:13:07:e5:25:bf:1c:aa:05:c7:65:9f:d6:aa:b7:ea:b1: 87:d9:f9:6f:8c:dd:73:a2:9e:e4:6f:1a:95:2d:cc:90:d3:6b: dd:72:3a:53:61:4f:79:92:e4:15:fd:58:7e:b4:7e:0c:55:3b: f5:60:34:6d:a9:b2:4a:50:3c:e6:60:c8:bf:56:0d:ce:24:c2: 97:0f:af:a6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs6WHX5bkmHHdzgll5f0VQJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg5M2FmZWNkNzExNzA1YzQ3NmI3ODVkMGM4NmVmNTRjMjEy NDM1NGMwHhcNMjUxMjIwMDYwMDM0WhcNMjUxMjIxMDYwMDM0WjAzMTEwLwYDVQQD EyhjZDc2ZmU5NDdmOTMyYjMzNjc5NzM3NTkzOTNlNGI1YWZiOTRjYTkyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqhNXCVKOA45FUjGCRDiEIrmSDl0j 8LtrVxz7QW3wOqadwoz6hsYGe19mnwhd3u0UgHtE7oNNd88y6mlorpWet9A0s5vH luXzlAuHE6hUjnByJ61l+XSTv+nLoyEh4nNjCFcHNfE1N+dO+dozNnaZ32xPwg7L x3qBb218ay/r71qpmecehUSnO5xHYY/2s08KwWzMIiSHILNvYS/XPVtW6RBg1tfN ngFfl/V1MLPpTJfemwzgGxi4cNvb1sVBuOjq+0VTGths0Yay3OOQ+kH+zUKXAzRi UraZfL0/NvGTFfJGzkVhBPDzPr9Xri+V3gsvtGgiCdscIZYsi3VKg6lzZQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFM12/pR/kyszZ5c3WTk+S1r7lMqSMB8GA1UdIwQY MBaAFIk6/s1xFwXEdreF0Mhu9UwhJDVMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaVRyLXpYRVhCY1IydDRYUXlHNzFUQ0VrTlV3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYy9jYTNiNWYtMDIyMS00M2FkLThhYmQt MWMxMzIwNmE4MTIzLzEvaVRyLXpYRVhCY1IydDRYUXlHNzFUQ0VrTlV3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYy9jYTNiNWYtMDIyMS00M2FkLThhYmQtMWMxMzIwNmE4MTIz LzEvaVRyLXpYRVhCY1IydDRYUXlHNzFUQ0VrTlV3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXJlQggyW iqbpi6cjBkZa7oVAaUwfFdR16T1qBd9lNyY8wW+niv7ryf83nY20a5adKzJcrqC2 a5Z66+W73cTSAUA53vYO1FUnvVtd+ZsyLcvr4GB8qIU9hDXfFnYi+Q+A0V8Y+Ykr 4X/2EhF7OmQ0twPib2fC3WzqxiifArQmdOYHxOW21leLRyy7YEBB+RjfrTt93ZFb nsRLn3v+W6ma7ckDQsoX2jrLXKuQMOItPk2t15QfD+kTB+UlvxyqBcdln9aqt+qx h9n5b4zdc6Ke5G8alS3MkNNr3XI6U2FPeZLkFf1YfrR+DFU79WA0bamySlA85mDI v1YNziTClw+vpg== -----END CERTIFICATE-----Generated at Sat Dec 20 12:19:21 2025 by rpki-client