This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/6c3d9f-8a4f-4a6c-8579-e92ece4d3cb3/1/IaAAgM0ssbsHOQOzKyWtZgo2ZIY.mft File: IaAAgM0ssbsHOQOzKyWtZgo2ZIY.mft (raw, json) Hash identifier: 3ChoNP7bjwHQcZXqM7cwCLKpuTPAKkv/3+yA/RQ2AxU= Subject key identifier: AD:9E:C7:B5:CD:39:5D:A7:70:1B:3B:E7:D4:4E:D1:A6:1C:7A:D0:5F Authority key identifier: 21:A0:00:80:CD:2C:B1:BB:07:39:03:B3:2B:25:AD:66:0A:36:64:86 Certificate issuer: /CN=21a00080cd2cb1bb073903b32b25ad660a366486 Certificate serial: 019B34FBD022FF75D35E96B6FEE96F869303 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IaAAgM0ssbsHOQOzKyWtZgo2ZIY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/6c3d9f-8a4f-4a6c-8579-e92ece4d3cb3/1/IaAAgM0ssbsHOQOzKyWtZgo2ZIY.mft Manifest number: 1659 Signing time: Fri 19 Dec 2025 05:01:16 +0000 Manifest this update: Fri 19 Dec 2025 05:01:16 +0000 Manifest next update: Sat 20 Dec 2025 05:01:16 +0000 Files and hashes: 1: 1KLC3gBk4V8UlL1q34VPnUxHzZY.roa (hash: PpTqyE9jhdplaM4jeC6bew/Mkzc7lRGupafDYfql5k0=) 2: IaAAgM0ssbsHOQOzKyWtZgo2ZIY.crl (hash: yA1hupqi+4JzzUhDUGnYhkPsZl8sh4AYojPNbT+Mk+I=) 3: QdEJ7zpCJnQlkbu72Bn_JyCb_EM.roa (hash: uicaL7GuC1Mghzq3VpHhej/MKa/9KriBzrxlFVoCpcc=) 4: WylnrO-wU58E26AefCAQ7nrb79w.roa (hash: y1OWdCLTeRgES3w6dtbyOUz1ZW2NZGMx2qqGlzUOOl8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/6c3d9f-8a4f-4a6c-8579-e92ece4d3cb3/1/IaAAgM0ssbsHOQOzKyWtZgo2ZIY.crl rsync://rpki.ripe.net/repository/DEFAULT/c7/6c3d9f-8a4f-4a6c-8579-e92ece4d3cb3/1/IaAAgM0ssbsHOQOzKyWtZgo2ZIY.mft rsync://rpki.ripe.net/repository/DEFAULT/IaAAgM0ssbsHOQOzKyWtZgo2ZIY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 05:01:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:34:fb:d0:22:ff:75:d3:5e:96:b6:fe:e9:6f:86:93:03 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=21a00080cd2cb1bb073903b32b25ad660a366486 Validity Not Before: Dec 19 05:01:16 2025 GMT Not After : Dec 20 05:01:16 2025 GMT Subject: CN=ad9ec7b5cd395da7701b3be7d44ed1a61c7ad05f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:df:b3:2f:b7:eb:d5:6c:57:ba:5d:73:24:ec: 4e:5a:c3:72:f7:16:2d:39:20:f9:fe:aa:31:3c:9b: 63:e0:76:f4:54:3a:5b:27:0e:7a:e4:75:ba:1d:bc: 28:79:ed:55:7c:97:a6:93:00:a7:bd:df:ea:cb:5f: b1:67:df:e7:9e:13:d3:00:de:1d:75:95:e9:58:3d: 4c:bc:d0:1c:ef:b3:9c:9c:b4:54:bb:1f:46:ee:84: 0d:cc:18:33:be:76:ac:b4:18:b6:bf:4e:ac:31:33: 59:1d:9a:96:45:2d:b5:ae:95:29:52:1a:ca:4a:bd: f5:d8:a5:cc:e4:0b:81:54:ee:c1:eb:cc:4b:99:ee: 65:4a:cd:87:0e:95:40:88:90:f3:a7:04:3b:2d:5c: fb:c7:9a:23:c8:21:ce:2a:1c:81:2d:3b:f4:1a:b9: 0d:85:af:ad:8f:cf:80:fa:50:45:ad:ee:17:a2:8a: 6e:04:e7:b4:2a:65:a6:12:7b:36:07:25:37:a9:d5: 7e:d6:7f:78:0f:67:26:8a:f6:c2:46:b3:a8:52:b7: 5e:5f:b6:14:05:77:b3:f5:68:64:93:63:8d:7b:31: db:9e:9d:b5:f3:af:c0:76:44:20:d2:80:4f:51:36: 17:cd:10:fc:fd:94:b8:08:62:1d:cd:2d:a2:4c:f0: 63:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:9E:C7:B5:CD:39:5D:A7:70:1B:3B:E7:D4:4E:D1:A6:1C:7A:D0:5F X509v3 Authority Key Identifier: keyid:21:A0:00:80:CD:2C:B1:BB:07:39:03:B3:2B:25:AD:66:0A:36:64:86 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IaAAgM0ssbsHOQOzKyWtZgo2ZIY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/6c3d9f-8a4f-4a6c-8579-e92ece4d3cb3/1/IaAAgM0ssbsHOQOzKyWtZgo2ZIY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/6c3d9f-8a4f-4a6c-8579-e92ece4d3cb3/1/IaAAgM0ssbsHOQOzKyWtZgo2ZIY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7c:8e:a6:f6:ad:86:3d:df:23:03:cf:91:f1:b6:ce:16:7b:73: 33:5d:0d:e6:08:dd:b1:dc:87:2e:b1:59:cb:30:0f:6c:65:d8: da:16:25:b7:14:95:51:be:1b:0e:d6:c3:49:25:d8:73:9b:1f: eb:31:27:bf:1b:e7:62:63:ae:06:63:41:ac:60:8d:bd:fe:bc: 28:28:72:36:a3:7f:92:da:12:50:b3:52:b6:11:64:de:9e:1c: 27:1c:73:57:50:cd:ee:90:70:cc:9f:3f:ee:eb:9e:e5:87:40: 4d:38:d5:37:f8:b9:0b:30:dd:05:e0:bf:da:05:f1:b3:9c:ff: 57:63:e9:1e:fe:df:9f:0e:1c:f3:29:67:66:4a:13:29:d2:ea: 58:52:bf:82:7a:e8:3f:a0:a4:04:e2:b3:b8:49:02:88:f5:2d: f2:53:fb:f1:00:84:bf:5b:5b:05:ee:5f:6e:e6:77:a7:c5:bf: 72:61:13:89:44:6d:68:9a:62:74:5d:1b:3a:3a:0d:65:f3:99: c8:c7:14:9d:88:19:00:37:c5:25:d7:5f:e5:22:ec:78:6d:67: bb:72:8e:ef:bf:76:c6:86:3f:b1:a4:08:a7:6c:2b:83:36:fe: 73:ae:46:f9:c1:45:76:ba:e8:49:68:2c:11:6a:ec:9f:2a:fb: d6:67:51:5a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs0+9Ai/3XTXpa2/ulvhpMDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIxYTAwMDgwY2QyY2IxYmIwNzM5MDNiMzJiMjVhZDY2MGEz NjY0ODYwHhcNMjUxMjE5MDUwMTE2WhcNMjUxMjIwMDUwMTE2WjAzMTEwLwYDVQQD EyhhZDllYzdiNWNkMzk1ZGE3NzAxYjNiZTdkNDRlZDFhNjFjN2FkMDVmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4d+zL7fr1WxXul1zJOxOWsNy9xYt OSD5/qoxPJtj4Hb0VDpbJw565HW6Hbwoee1VfJemkwCnvd/qy1+xZ9/nnhPTAN4d dZXpWD1MvNAc77OcnLRUux9G7oQNzBgzvnastBi2v06sMTNZHZqWRS21rpUpUhrK Sr312KXM5AuBVO7B68xLme5lSs2HDpVAiJDzpwQ7LVz7x5ojyCHOKhyBLTv0GrkN ha+tj8+A+lBFre4XoopuBOe0KmWmEns2ByU3qdV+1n94D2cmivbCRrOoUrdeX7YU BXez9Whkk2ONezHbnp2186/AdkQg0oBPUTYXzRD8/ZS4CGIdzS2iTPBjLQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFK2ex7XNOV2ncBs759RO0aYcetBfMB8GA1UdIwQY MBaAFCGgAIDNLLG7BzkDsyslrWYKNmSGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSWFBQWdNMHNzYnNIT1FPekt5V3RaZ28yWklZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy82YzNkOWYtOGE0Zi00YTZjLTg1Nzkt ZTkyZWNlNGQzY2IzLzEvSWFBQWdNMHNzYnNIT1FPekt5V3RaZ28yWklZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNy82YzNkOWYtOGE0Zi00YTZjLTg1NzktZTkyZWNlNGQzY2Iz LzEvSWFBQWdNMHNzYnNIT1FPekt5V3RaZ28yWklZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfI6m9q2G Pd8jA8+R8bbOFntzM10N5gjdsdyHLrFZyzAPbGXY2hYltxSVUb4bDtbDSSXYc5sf 6zEnvxvnYmOuBmNBrGCNvf68KChyNqN/ktoSULNSthFk3p4cJxxzV1DN7pBwzJ8/ 7uue5YdATTjVN/i5CzDdBeC/2gXxs5z/V2PpHv7fnw4c8ylnZkoTKdLqWFK/gnro P6CkBOKzuEkCiPUt8lP78QCEv1tbBe5fbuZ3p8W/cmETiURtaJpidF0bOjoNZfOZ yMcUnYgZADfFJddf5SLseG1nu3KO7792xoY/saQIp2wrgzb+c65G+cFFdrroSWgs EWrsnyr71mdRWg== -----END CERTIFICATE-----Generated at Fri Dec 19 14:34:34 2025 by rpki-client