This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/8c0f0c-19c7-4eaf-96f5-7d40c11a9500/1/idOpFFlzx5o-e5VTHj0N99KMSgQ.mft File: idOpFFlzx5o-e5VTHj0N99KMSgQ.mft (raw, json) Hash identifier: fk0Y9dQBrL2SCEBZ7kPUakC64h5KCrhxZ+UNeggaPg8= Subject key identifier: 88:78:AF:9A:6B:9C:4D:DA:86:24:B0:58:65:C5:FC:05:EA:12:DF:43 Authority key identifier: 89:D3:A9:14:59:73:C7:9A:3E:7B:95:53:1E:3D:0D:F7:D2:8C:4A:04 Certificate issuer: /CN=89d3a9145973c79a3e7b95531e3d0df7d28c4a04 Certificate serial: 019B4280535C0C9BAC54561AAA0D28774351 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/idOpFFlzx5o-e5VTHj0N99KMSgQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/8c0f0c-19c7-4eaf-96f5-7d40c11a9500/1/idOpFFlzx5o-e5VTHj0N99KMSgQ.mft Manifest number: 178C Signing time: Sun 21 Dec 2025 20:01:04 +0000 Manifest this update: Sun 21 Dec 2025 20:01:04 +0000 Manifest next update: Mon 22 Dec 2025 20:01:04 +0000 Files and hashes: 1: 2PjElAAJU3KrVInjZlxeKaqsURQ.roa (hash: E5/GwvtnZzLjYWDNMf6Xqpe3KvrLvjhM7f3dCAih0vU=) 2: idOpFFlzx5o-e5VTHj0N99KMSgQ.crl (hash: tkCzLGg+aIBsvbJtTbrjFfOfQx9KxZagG6/HCKzzcRE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/8c0f0c-19c7-4eaf-96f5-7d40c11a9500/1/idOpFFlzx5o-e5VTHj0N99KMSgQ.crl rsync://rpki.ripe.net/repository/DEFAULT/c6/8c0f0c-19c7-4eaf-96f5-7d40c11a9500/1/idOpFFlzx5o-e5VTHj0N99KMSgQ.mft rsync://rpki.ripe.net/repository/DEFAULT/idOpFFlzx5o-e5VTHj0N99KMSgQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 20:01:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:42:80:53:5c:0c:9b:ac:54:56:1a:aa:0d:28:77:43:51 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89d3a9145973c79a3e7b95531e3d0df7d28c4a04 Validity Not Before: Dec 21 20:01:04 2025 GMT Not After : Dec 22 20:01:04 2025 GMT Subject: CN=8878af9a6b9c4dda8624b05865c5fc05ea12df43 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:e3:2a:26:cd:0a:95:db:56:87:56:6f:ec:cc: 6e:4e:d5:f2:ec:94:ea:3c:fd:9d:a1:60:b4:13:77: d2:9d:98:9c:54:8b:c3:27:63:4d:f8:41:c0:fb:76: 92:98:91:55:35:86:f3:37:03:26:ca:45:2b:3e:5f: da:98:bf:6c:12:15:c8:28:6f:83:ee:48:38:f6:ee: 9c:61:1c:54:23:50:4f:1f:d7:d4:af:40:0a:e4:4f: 7b:9a:74:ba:c7:35:ce:85:b6:9a:6c:4b:cc:d3:92: 1d:49:7b:d2:b5:f2:21:06:84:e1:91:d5:6f:cf:00: 03:83:95:5d:3d:34:ee:dc:1c:c2:de:34:1e:ca:e8: b6:fd:0d:03:18:58:e4:61:af:f7:3b:4c:57:3f:03: ed:53:78:7e:d2:53:0d:a9:3b:61:5c:29:61:f6:bb: 60:71:7d:59:ed:f1:01:88:d9:46:1a:3d:d0:7b:e3: ad:84:c6:01:b6:29:1c:74:6c:e4:89:fb:90:8d:be: 55:52:3d:da:59:a0:eb:50:47:fb:24:2d:09:7b:91: f4:70:cf:04:a5:7b:c0:4c:1d:33:ad:87:ed:31:07: a3:55:97:16:85:b6:09:4d:8a:cd:af:de:c2:93:77: 1d:80:94:b4:68:0e:46:8c:b8:b2:38:7e:53:da:59: db:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:78:AF:9A:6B:9C:4D:DA:86:24:B0:58:65:C5:FC:05:EA:12:DF:43 X509v3 Authority Key Identifier: keyid:89:D3:A9:14:59:73:C7:9A:3E:7B:95:53:1E:3D:0D:F7:D2:8C:4A:04 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/idOpFFlzx5o-e5VTHj0N99KMSgQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/8c0f0c-19c7-4eaf-96f5-7d40c11a9500/1/idOpFFlzx5o-e5VTHj0N99KMSgQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/8c0f0c-19c7-4eaf-96f5-7d40c11a9500/1/idOpFFlzx5o-e5VTHj0N99KMSgQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 70:d2:ea:73:cb:75:1e:61:90:43:a9:36:93:08:b3:16:b2:09: 04:8d:0a:b8:d1:af:bf:00:35:09:2a:cd:a0:36:d5:bc:9c:21: 29:a3:e7:ca:75:f0:f3:d5:71:71:ef:73:e1:3d:e5:17:ad:de: a5:a9:22:de:9d:eb:da:64:ab:7f:b9:45:1c:b9:d2:0c:0d:04: 53:a6:19:0d:19:dd:19:e5:59:8b:e4:75:11:f4:12:b1:c3:9b: 0e:98:d7:04:b3:12:69:80:68:5e:b2:f1:eb:09:53:a7:ef:bf: bd:14:5a:33:7b:89:1b:fa:be:fe:77:23:58:d7:de:8e:8a:3a: ae:5d:30:33:5b:4c:a1:3c:bc:56:34:66:21:c9:d3:9b:73:45: c9:d6:c1:3d:bb:a1:17:8e:d8:6f:7c:5c:b3:b0:43:05:23:8c: 17:52:b0:61:57:58:33:1c:3d:79:37:a7:fa:09:2d:36:8d:59: e1:62:66:3c:3b:bf:f5:22:e9:e5:61:f7:dd:ec:47:52:44:ab: f0:96:16:68:45:41:0f:43:a4:86:21:66:58:e1:06:ac:7e:23: 68:87:82:ed:0a:c1:1c:e1:16:a1:ff:43:20:4f:05:21:da:6a: 94:8a:33:6b:ee:19:0a:f8:d7:a2:cd:b6:2e:d2:59:bc:4a:8f: b1:b6:a2:ba -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtCgFNcDJusVFYaqg0od0NRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg5ZDNhOTE0NTk3M2M3OWEzZTdiOTU1MzFlM2QwZGY3ZDI4 YzRhMDQwHhcNMjUxMjIxMjAwMTA0WhcNMjUxMjIyMjAwMTA0WjAzMTEwLwYDVQQD Eyg4ODc4YWY5YTZiOWM0ZGRhODYyNGIwNTg2NWM1ZmMwNWVhMTJkZjQzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtOMqJs0KldtWh1Zv7MxuTtXy7JTq PP2doWC0E3fSnZicVIvDJ2NN+EHA+3aSmJFVNYbzNwMmykUrPl/amL9sEhXIKG+D 7kg49u6cYRxUI1BPH9fUr0AK5E97mnS6xzXOhbaabEvM05IdSXvStfIhBoThkdVv zwADg5VdPTTu3BzC3jQeyui2/Q0DGFjkYa/3O0xXPwPtU3h+0lMNqTthXClh9rtg cX1Z7fEBiNlGGj3Qe+OthMYBtikcdGzkifuQjb5VUj3aWaDrUEf7JC0Je5H0cM8E pXvATB0zrYftMQejVZcWhbYJTYrNr97Ck3cdgJS0aA5GjLiyOH5T2lnbZQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIh4r5prnE3ahiSwWGXF/AXqEt9DMB8GA1UdIwQY MBaAFInTqRRZc8eaPnuVUx49DffSjEoEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaWRPcEZGbHp4NW8tZTVWVEhqME45OUtNU2dRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNi84YzBmMGMtMTljNy00ZWFmLTk2ZjUt N2Q0MGMxMWE5NTAwLzEvaWRPcEZGbHp4NW8tZTVWVEhqME45OUtNU2dRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNi84YzBmMGMtMTljNy00ZWFmLTk2ZjUtN2Q0MGMxMWE5NTAw LzEvaWRPcEZGbHp4NW8tZTVWVEhqME45OUtNU2dRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcNLqc8t1 HmGQQ6k2kwizFrIJBI0KuNGvvwA1CSrNoDbVvJwhKaPnynXw89Vxce9z4T3lF63e paki3p3r2mSrf7lFHLnSDA0EU6YZDRndGeVZi+R1EfQSscObDpjXBLMSaYBoXrLx 6wlTp++/vRRaM3uJG/q+/ncjWNfejoo6rl0wM1tMoTy8VjRmIcnTm3NFydbBPbuh F47Yb3xcs7BDBSOMF1KwYVdYMxw9eTen+gktNo1Z4WJmPDu/9SLp5WH33exHUkSr 8JYWaEVBD0OkhiFmWOEGrH4jaIeC7QrBHOEWof9DIE8FIdpqlIoza+4ZCvjXos22 LtJZvEqPsbaiug== -----END CERTIFICATE-----Generated at Mon Dec 22 05:47:12 2025 by rpki-client