This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/a14272-2794-4f38-9640-478ed7f8d05e/1/i9S8vzXbf-LvZjUipaOjl5pPH_g.mft File: i9S8vzXbf-LvZjUipaOjl5pPH_g.mft (raw, json) Hash identifier: Qknj/voeGBamuTxInwst8Emp1WTT85wbsNPveT5gc7o= Subject key identifier: E1:0B:49:44:1C:8C:70:6C:19:39:15:53:88:87:7F:30:7C:A5:2A:6D Authority key identifier: 8B:D4:BC:BF:35:DB:7F:E2:EF:66:35:22:A5:A3:A3:97:9A:4F:1F:F8 Certificate issuer: /CN=8bd4bcbf35db7fe2ef663522a5a3a3979a4f1ff8 Certificate serial: 019B3DFECE31550703B788A3D2DA639F22B1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i9S8vzXbf-LvZjUipaOjl5pPH_g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/a14272-2794-4f38-9640-478ed7f8d05e/1/i9S8vzXbf-LvZjUipaOjl5pPH_g.mft Manifest number: 1555 Signing time: Sat 20 Dec 2025 23:01:07 +0000 Manifest this update: Sat 20 Dec 2025 23:01:07 +0000 Manifest next update: Sun 21 Dec 2025 23:01:07 +0000 Files and hashes: 1: 1-_88t3hetlFBanVHA2DU4QOnOb4.roa (hash: latlaUAnjm2YfCy+iquDacPIbXwTYbtI55yE63hF5qU=) 2: 9bvrYkBqiqKMnn8_sup9wHDDvAw.roa (hash: OmLw4QBgjy48HSO5mm8k/HJy6DwFgzHoft0ePJqTlrs=) 3: i9S8vzXbf-LvZjUipaOjl5pPH_g.crl (hash: ICTQqJGDUb+ot4Qdx4Xh2GDwTwyZfZprThxJ/FgRtRs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/a14272-2794-4f38-9640-478ed7f8d05e/1/i9S8vzXbf-LvZjUipaOjl5pPH_g.crl rsync://rpki.ripe.net/repository/DEFAULT/cd/a14272-2794-4f38-9640-478ed7f8d05e/1/i9S8vzXbf-LvZjUipaOjl5pPH_g.mft rsync://rpki.ripe.net/repository/DEFAULT/i9S8vzXbf-LvZjUipaOjl5pPH_g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 23:01:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:fe:ce:31:55:07:03:b7:88:a3:d2:da:63:9f:22:b1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8bd4bcbf35db7fe2ef663522a5a3a3979a4f1ff8 Validity Not Before: Dec 20 23:01:07 2025 GMT Not After : Dec 21 23:01:07 2025 GMT Subject: CN=e10b49441c8c706c1939155388877f307ca52a6d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:81:b3:b5:c7:a5:b6:ec:73:c8:3c:bf:e4:13: bc:bd:ef:ba:2b:d3:1f:fa:6f:be:40:c8:f0:31:ef: 63:d3:1a:f9:7a:7a:cc:7c:a7:14:28:55:0a:4d:af: 6a:42:0a:1d:c9:2d:2e:52:16:53:9e:8d:15:e9:35: fb:39:e5:1d:cb:6b:3f:45:4a:9a:bf:b0:aa:d9:87: 69:aa:c1:4f:4d:ed:a4:80:39:ad:ed:c1:93:79:4d: 0e:5b:49:ae:00:7f:a8:b7:6e:5a:af:6b:89:f0:41: d8:5c:ac:ae:2d:d0:1c:3f:f7:50:44:2e:f6:9f:48: e2:30:f9:dc:60:66:b4:79:52:16:ee:18:00:12:22: 09:7f:bb:74:4b:9a:9e:3a:f4:46:73:d3:56:7c:40: 2c:a0:bf:33:31:e1:5d:b0:cb:4c:e1:9c:96:1b:12: 1d:e4:24:03:e1:8a:3c:95:a1:0b:7b:34:c0:e4:b3: a4:ec:06:2f:aa:fb:66:ff:15:44:0c:34:f5:dd:aa: 72:e2:61:72:f5:8c:af:44:0e:34:4f:fc:b0:45:69: 4f:e8:31:c6:e1:49:64:04:ac:61:29:9a:d6:4b:22: d8:77:13:d8:87:fc:23:57:e5:66:fd:57:9c:0e:5c: b2:5a:9a:d3:19:96:0a:82:9a:e2:d9:5f:b9:a0:6d: a3:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:0B:49:44:1C:8C:70:6C:19:39:15:53:88:87:7F:30:7C:A5:2A:6D X509v3 Authority Key Identifier: keyid:8B:D4:BC:BF:35:DB:7F:E2:EF:66:35:22:A5:A3:A3:97:9A:4F:1F:F8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i9S8vzXbf-LvZjUipaOjl5pPH_g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/a14272-2794-4f38-9640-478ed7f8d05e/1/i9S8vzXbf-LvZjUipaOjl5pPH_g.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/a14272-2794-4f38-9640-478ed7f8d05e/1/i9S8vzXbf-LvZjUipaOjl5pPH_g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 84:c8:c1:8f:b4:b7:08:78:38:35:18:e3:6a:4a:b1:e4:6c:97: bd:e2:0c:a3:7d:65:da:b8:69:64:63:af:ee:7b:69:22:55:6e: c5:a1:77:30:df:84:1d:c5:a3:05:a7:33:71:6a:ea:d9:cd:0d: 77:d8:94:aa:ed:ac:4f:00:1f:a0:cc:31:e7:4e:a1:9a:d6:ed: 08:ef:6d:51:b4:71:d2:ef:b9:b1:24:2e:9d:ba:f2:65:2a:bf: a4:ae:0b:67:d4:bc:ed:d7:60:8c:37:56:05:65:57:18:f9:c4: 6c:f7:25:84:19:ba:ba:f6:75:77:22:d2:d1:54:59:a8:f3:ac: 19:af:5c:30:8e:25:c4:47:04:65:46:8c:48:da:94:38:76:97: 6a:40:a1:5c:f5:2c:7e:f5:e2:aa:2a:1a:86:64:21:08:ac:e7: db:92:42:d3:c6:8c:3d:b0:f4:cc:89:e4:ef:28:66:9a:ec:d6: 5e:24:22:52:36:c7:fd:02:b8:d8:c0:a1:21:80:4c:ad:6b:8e: c9:78:10:bc:1f:1c:6c:b9:e9:da:d1:c2:c0:55:71:8e:3a:4e: 6f:df:e0:f1:64:93:06:09:c4:da:7c:6d:7b:af:c8:e8:8c:40: 74:d7:84:98:4b:82:a5:e2:74:ec:e7:d5:0a:6f:73:0d:db:2a: f1:57:eb:44 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9/s4xVQcDt4ij0tpjnyKxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhiZDRiY2JmMzVkYjdmZTJlZjY2MzUyMmE1YTNhMzk3OWE0 ZjFmZjgwHhcNMjUxMjIwMjMwMTA3WhcNMjUxMjIxMjMwMTA3WjAzMTEwLwYDVQQD EyhlMTBiNDk0NDFjOGM3MDZjMTkzOTE1NTM4ODg3N2YzMDdjYTUyYTZkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0oGztceltuxzyDy/5BO8ve+6K9Mf +m++QMjwMe9j0xr5enrMfKcUKFUKTa9qQgodyS0uUhZTno0V6TX7OeUdy2s/RUqa v7Cq2YdpqsFPTe2kgDmt7cGTeU0OW0muAH+ot25ar2uJ8EHYXKyuLdAcP/dQRC72 n0jiMPncYGa0eVIW7hgAEiIJf7t0S5qeOvRGc9NWfEAsoL8zMeFdsMtM4ZyWGxId 5CQD4Yo8laELezTA5LOk7AYvqvtm/xVEDDT13apy4mFy9YyvRA40T/ywRWlP6DHG 4UlkBKxhKZrWSyLYdxPYh/wjV+Vm/VecDlyyWprTGZYKgpri2V+5oG2jiwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOELSUQcjHBsGTkVU4iHfzB8pSptMB8GA1UdIwQY MBaAFIvUvL8123/i72Y1IqWjo5eaTx/4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaTlTOHZ6WGJmLUx2WmpVaXBhT2psNXBQSF9nLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZC9hMTQyNzItMjc5NC00ZjM4LTk2NDAt NDc4ZWQ3ZjhkMDVlLzEvaTlTOHZ6WGJmLUx2WmpVaXBhT2psNXBQSF9nLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZC9hMTQyNzItMjc5NC00ZjM4LTk2NDAtNDc4ZWQ3ZjhkMDVl LzEvaTlTOHZ6WGJmLUx2WmpVaXBhT2psNXBQSF9nLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhMjBj7S3 CHg4NRjjakqx5GyXveIMo31l2rhpZGOv7ntpIlVuxaF3MN+EHcWjBaczcWrq2c0N d9iUqu2sTwAfoMwx506hmtbtCO9tUbRx0u+5sSQunbryZSq/pK4LZ9S87ddgjDdW BWVXGPnEbPclhBm6uvZ1dyLS0VRZqPOsGa9cMI4lxEcEZUaMSNqUOHaXakChXPUs fvXiqioahmQhCKzn25JC08aMPbD0zInk7yhmmuzWXiQiUjbH/QK42MChIYBMrWuO yXgQvB8cbLnp2tHCwFVxjjpOb9/g8WSTBgnE2nxte6/I6IxAdNeEmEuCpeJ07OfV Cm9zDdsq8VfrRA== -----END CERTIFICATE-----Generated at Sun Dec 21 08:00:23 2025 by rpki-client