This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/be7894-0ccc-4fbd-880b-9758cb2b844e/1/itKTDR_h3UMEkf17gx3pxhaSreQ.mft File: itKTDR_h3UMEkf17gx3pxhaSreQ.mft (raw, json) Hash identifier: s4tFGdnZdSA3dzKvLcovF5aKhJ9fHUq66cUiLZ+TTt8= Subject key identifier: BE:6E:3A:3C:19:ED:7E:85:40:D3:EE:3F:34:EB:F0:91:3D:FD:2F:B5 Authority key identifier: 8A:D2:93:0D:1F:E1:DD:43:04:91:FD:7B:83:1D:E9:C6:16:92:AD:E4 Certificate issuer: /CN=8ad2930d1fe1dd430491fd7b831de9c61692ade4 Certificate serial: 019B44DCC75E5BE841FA969407B88EF5E471 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/itKTDR_h3UMEkf17gx3pxhaSreQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/be7894-0ccc-4fbd-880b-9758cb2b844e/1/itKTDR_h3UMEkf17gx3pxhaSreQ.mft Manifest number: 14BB Signing time: Mon 22 Dec 2025 07:01:18 +0000 Manifest this update: Mon 22 Dec 2025 07:01:18 +0000 Manifest next update: Tue 23 Dec 2025 07:01:18 +0000 Files and hashes: 1: BAzsPPCBy1zDTboFw5Sl-2syIOA.roa (hash: 3HXxwP+fQhhVnJuWOZekRFhU3Q46kmrc9Y0dZLDklcg=) 2: bYpyeHiVOX2l8iPl-uPkAX9zfmw.roa (hash: clblsPlZTuaRgRGxz58OPeCdg4rL7htkupWPy4rOhKg=) 3: itKTDR_h3UMEkf17gx3pxhaSreQ.crl (hash: zF9QYHzGrbvSS1bHVizh6dgIrzHdaQR6rtAXTv8biAI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/be7894-0ccc-4fbd-880b-9758cb2b844e/1/itKTDR_h3UMEkf17gx3pxhaSreQ.crl rsync://rpki.ripe.net/repository/DEFAULT/ce/be7894-0ccc-4fbd-880b-9758cb2b844e/1/itKTDR_h3UMEkf17gx3pxhaSreQ.mft rsync://rpki.ripe.net/repository/DEFAULT/itKTDR_h3UMEkf17gx3pxhaSreQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 07:01:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:44:dc:c7:5e:5b:e8:41:fa:96:94:07:b8:8e:f5:e4:71 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8ad2930d1fe1dd430491fd7b831de9c61692ade4 Validity Not Before: Dec 22 07:01:18 2025 GMT Not After : Dec 23 07:01:18 2025 GMT Subject: CN=be6e3a3c19ed7e8540d3ee3f34ebf0913dfd2fb5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:f3:2c:a7:47:eb:5f:ae:d0:5d:1f:a3:9d:4d: b3:11:a6:37:3b:ea:e2:e3:cb:79:11:d4:74:a0:1f: a7:dc:23:14:8f:1c:a2:9b:a1:85:9c:b8:09:c9:f0: 89:87:7d:5c:9f:cf:dd:0b:df:5f:f9:6a:e1:22:47: a5:4c:61:f1:b4:2a:86:b8:2a:f5:63:3d:54:ed:22: f0:9e:d0:79:85:7d:22:bf:77:e2:0a:4a:b6:cc:f2: 25:79:ee:ee:87:e6:d1:4e:cc:24:2f:1d:a9:bc:c5: 09:b4:83:03:8f:86:76:ba:b6:79:53:e3:c4:a5:1b: a3:1a:e3:a1:38:4a:e3:17:af:b5:bf:d3:0e:fb:0f: 91:da:ff:19:99:9b:6a:91:7b:26:e7:07:64:72:59: 78:79:cb:4d:d1:06:9b:1d:cb:70:d3:25:3f:d6:98: b5:bb:66:77:8e:8a:5c:a9:e8:46:4a:3f:74:b6:ca: 02:6a:f0:01:eb:cc:a1:1f:83:9a:16:3a:49:11:4f: 93:75:92:c7:3b:5e:29:74:8a:c4:3d:aa:ea:4b:60: 05:1e:88:5f:00:1e:0a:64:ab:c6:ba:4a:49:f1:ae: f4:de:39:44:0c:11:14:aa:de:c1:88:32:96:ad:9e: 82:dc:44:dc:60:7b:7c:1b:b9:f8:bf:9a:e0:50:07: 97:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:6E:3A:3C:19:ED:7E:85:40:D3:EE:3F:34:EB:F0:91:3D:FD:2F:B5 X509v3 Authority Key Identifier: keyid:8A:D2:93:0D:1F:E1:DD:43:04:91:FD:7B:83:1D:E9:C6:16:92:AD:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/itKTDR_h3UMEkf17gx3pxhaSreQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/be7894-0ccc-4fbd-880b-9758cb2b844e/1/itKTDR_h3UMEkf17gx3pxhaSreQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/be7894-0ccc-4fbd-880b-9758cb2b844e/1/itKTDR_h3UMEkf17gx3pxhaSreQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2a:f9:c1:0f:7e:e7:5f:ad:12:62:a1:54:a5:ca:da:50:03:12: 4a:18:0c:5b:c6:ef:e1:94:bf:21:fb:03:a0:d2:a8:5c:bd:f0: b6:3b:78:4b:64:46:68:35:7f:4b:9a:02:c9:1c:40:43:bd:d2: 60:84:22:97:89:11:0f:3d:2b:86:96:be:c5:60:07:24:0f:13: 1a:17:f6:f1:1d:49:23:06:6e:09:a8:d3:34:bb:32:33:6c:b7: 7d:e6:35:d6:aa:b7:22:b4:a8:39:b6:56:20:e8:e6:cb:51:f5: 56:d2:37:5f:53:a5:f7:7c:9a:67:f4:4a:a0:61:60:bc:ec:79: b9:ce:f4:e2:e8:4a:62:4e:d2:44:db:2a:05:3d:1b:7f:79:86: fc:0a:03:1c:c6:a1:ed:bf:25:37:72:cf:e4:e3:75:9f:85:cf: ef:b7:90:cd:03:b6:ad:ff:49:92:c2:78:5a:82:ab:5b:ce:a2: f6:0a:4a:41:d1:42:9d:1d:12:71:33:aa:36:62:10:62:da:cf: b5:fb:a9:03:f1:e5:24:1f:13:3e:bd:d3:5c:26:bc:09:ee:7b: d6:b7:21:f8:32:18:04:81:3c:f1:db:2d:68:02:f2:3b:50:ce: df:b8:39:ed:4a:64:84:a2:40:f6:03:fb:a6:58:07:59:f5:7b: 19:50:3f:b9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtE3MdeW+hB+paUB7iO9eRxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhhZDI5MzBkMWZlMWRkNDMwNDkxZmQ3YjgzMWRlOWM2MTY5 MmFkZTQwHhcNMjUxMjIyMDcwMTE4WhcNMjUxMjIzMDcwMTE4WjAzMTEwLwYDVQQD EyhiZTZlM2EzYzE5ZWQ3ZTg1NDBkM2VlM2YzNGViZjA5MTNkZmQyZmI1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7vMsp0frX67QXR+jnU2zEaY3O+ri 48t5EdR0oB+n3CMUjxyim6GFnLgJyfCJh31cn8/dC99f+WrhIkelTGHxtCqGuCr1 Yz1U7SLwntB5hX0iv3fiCkq2zPIlee7uh+bRTswkLx2pvMUJtIMDj4Z2urZ5U+PE pRujGuOhOErjF6+1v9MO+w+R2v8ZmZtqkXsm5wdkcll4ectN0QabHctw0yU/1pi1 u2Z3jopcqehGSj90tsoCavAB68yhH4OaFjpJEU+TdZLHO14pdIrEParqS2AFHohf AB4KZKvGukpJ8a703jlEDBEUqt7BiDKWrZ6C3ETcYHt8G7n4v5rgUAeXqQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFL5uOjwZ7X6FQNPuPzTr8JE9/S+1MB8GA1UdIwQY MBaAFIrSkw0f4d1DBJH9e4Md6cYWkq3kMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaXRLVERSX2gzVU1Fa2YxN2d4M3B4aGFTcmVRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZS9iZTc4OTQtMGNjYy00ZmJkLTg4MGIt OTc1OGNiMmI4NDRlLzEvaXRLVERSX2gzVU1Fa2YxN2d4M3B4aGFTcmVRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZS9iZTc4OTQtMGNjYy00ZmJkLTg4MGItOTc1OGNiMmI4NDRl LzEvaXRLVERSX2gzVU1Fa2YxN2d4M3B4aGFTcmVRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKvnBD37n X60SYqFUpcraUAMSShgMW8bv4ZS/IfsDoNKoXL3wtjt4S2RGaDV/S5oCyRxAQ73S YIQil4kRDz0rhpa+xWAHJA8TGhf28R1JIwZuCajTNLsyM2y3feY11qq3IrSoObZW IOjmy1H1VtI3X1Ol93yaZ/RKoGFgvOx5uc704uhKYk7SRNsqBT0bf3mG/AoDHMah 7b8lN3LP5ON1n4XP77eQzQO2rf9JksJ4WoKrW86i9gpKQdFCnR0ScTOqNmIQYtrP tfupA/HlJB8TPr3TXCa8Ce571rch+DIYBIE88dstaALyO1DO37g57UpkhKJA9gP7 plgHWfV7GVA/uQ== -----END CERTIFICATE-----Generated at Mon Dec 22 16:12:14 2025 by rpki-client