This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/6ab93e-8563-4606-b19e-8c003c4a5456/1/I4k0HhDmsCH6hH9VXlYD3vhdLCs.mft File: I4k0HhDmsCH6hH9VXlYD3vhdLCs.mft (raw, json) Hash identifier: q5+Sdg+kzwTCM6oadAqvTkX2Qlc+mg+U9Oes+lpIik8= Subject key identifier: AE:DB:38:72:23:A8:72:88:E8:C9:C2:43:D3:21:EC:40:F3:47:2A:5C Authority key identifier: 23:89:34:1E:10:E6:B0:21:FA:84:7F:55:5E:56:03:DE:F8:5D:2C:2B Certificate issuer: /CN=2389341e10e6b021fa847f555e5603def85d2c2b Certificate serial: 019B390F635DAB6310DA842D962E24578B52 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I4k0HhDmsCH6hH9VXlYD3vhdLCs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/6ab93e-8563-4606-b19e-8c003c4a5456/1/I4k0HhDmsCH6hH9VXlYD3vhdLCs.mft Manifest number: 0B4C Signing time: Sat 20 Dec 2025 00:01:08 +0000 Manifest this update: Sat 20 Dec 2025 00:01:08 +0000 Manifest next update: Sun 21 Dec 2025 00:01:08 +0000 Files and hashes: 1: FSsZO7tf2uyGI_GTm9rqM0qzwyo.roa (hash: +N02NDT8cxwi6khKovC14z/AE2KwVw5IVFU5XCAAiJs=) 2: I4k0HhDmsCH6hH9VXlYD3vhdLCs.crl (hash: avxjzSKsKOScUYiauEF6FIl2g2TAkthXaHR7flmskQE=) 3: pGnzHT17oa6cGFgaKh_Mb1gg4HU.roa (hash: tnbr1e3XQydvlzjAP3o8eDkS1HDgrVPM/kErIEuP+f8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/6ab93e-8563-4606-b19e-8c003c4a5456/1/I4k0HhDmsCH6hH9VXlYD3vhdLCs.crl rsync://rpki.ripe.net/repository/DEFAULT/d0/6ab93e-8563-4606-b19e-8c003c4a5456/1/I4k0HhDmsCH6hH9VXlYD3vhdLCs.mft rsync://rpki.ripe.net/repository/DEFAULT/I4k0HhDmsCH6hH9VXlYD3vhdLCs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 00:01:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:39:0f:63:5d:ab:63:10:da:84:2d:96:2e:24:57:8b:52 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2389341e10e6b021fa847f555e5603def85d2c2b Validity Not Before: Dec 20 00:01:08 2025 GMT Not After : Dec 21 00:01:08 2025 GMT Subject: CN=aedb387223a87288e8c9c243d321ec40f3472a5c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:a3:c9:5a:c6:05:c2:46:ce:e2:8c:48:42:c2: 48:d8:0d:91:9f:50:24:fb:e3:d6:47:8f:4e:d0:cd: e3:d8:d5:c3:ca:9b:1e:10:0a:26:55:19:66:db:1c: 78:e7:66:d9:a8:77:b0:29:7b:05:d3:f3:a9:bc:be: c0:a8:30:95:64:e5:43:12:0b:97:09:d1:ee:bb:b4: 09:60:4f:53:56:8a:76:c5:20:d6:8a:6d:41:fe:49: 22:a9:ce:10:f9:03:a4:74:de:0e:a3:f7:aa:18:43: c1:b9:68:c1:ef:26:b9:74:7c:c1:04:16:91:8f:67: 80:52:ee:a9:86:dc:30:8c:a6:3c:5a:8f:6f:8b:8d: 83:2c:96:01:53:7e:ea:bb:46:ca:66:18:47:6e:56: d0:25:9b:2b:83:8a:36:08:e4:71:5f:7f:01:83:8d: ef:7e:53:12:49:7a:85:0a:d1:bc:b0:5e:82:79:28: 43:cd:c2:88:2b:06:d2:e8:52:cb:6e:70:20:53:15: 31:bf:57:c7:e0:a1:5b:64:81:95:95:be:62:4f:4c: e9:99:26:0c:eb:75:90:68:78:bf:06:71:4a:f5:5f: 91:fc:cf:54:c6:31:20:82:4d:a0:53:a8:89:4b:3a: 8b:7e:3f:93:94:14:cb:27:41:9b:c6:46:2d:ff:af: 5b:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:DB:38:72:23:A8:72:88:E8:C9:C2:43:D3:21:EC:40:F3:47:2A:5C X509v3 Authority Key Identifier: keyid:23:89:34:1E:10:E6:B0:21:FA:84:7F:55:5E:56:03:DE:F8:5D:2C:2B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I4k0HhDmsCH6hH9VXlYD3vhdLCs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/6ab93e-8563-4606-b19e-8c003c4a5456/1/I4k0HhDmsCH6hH9VXlYD3vhdLCs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/6ab93e-8563-4606-b19e-8c003c4a5456/1/I4k0HhDmsCH6hH9VXlYD3vhdLCs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5b:9e:eb:cd:89:dc:ed:1c:12:68:25:5e:af:91:6b:cb:11:0d: d0:94:05:a3:d3:25:a0:33:e5:8c:1f:16:25:9a:c8:3a:7d:a4: b2:c1:4b:96:ce:b6:46:ba:e2:41:db:10:81:7a:46:da:1a:29: de:48:4a:9d:67:83:e9:ab:49:4f:fb:62:bb:43:d0:7a:68:99: 7d:01:c7:38:a7:c7:4a:f6:00:9f:b7:54:85:0e:de:78:7e:29: d1:c1:e6:85:4c:17:35:b0:3e:90:02:e4:ab:45:dc:1f:33:2c: 95:dc:15:55:2f:94:91:aa:01:3a:ed:2e:30:8a:bf:2d:85:93: d0:22:5f:c7:74:75:82:2b:60:e3:fc:b4:38:0e:4e:f6:27:dc: 6c:56:0f:85:58:47:1b:cc:bb:e4:15:8d:80:13:47:fe:93:8b: fb:91:ce:56:68:bb:2f:61:e1:35:34:80:f5:69:8a:2e:63:53: 22:4f:d2:82:61:db:a5:18:e6:f8:0f:e7:4b:48:23:e1:98:a4: cc:d4:f3:b1:ce:5c:d9:0b:17:a1:9a:15:ef:f4:80:11:0e:18: 71:79:42:6a:48:e2:ec:03:48:c7:a2:9c:4b:b4:4e:36:f1:33: ad:93:31:ba:98:a4:13:1a:3e:11:10:90:f2:53:17:8a:76:48: dc:58:9d:aa -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs5D2Ndq2MQ2oQtli4kV4tSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIzODkzNDFlMTBlNmIwMjFmYTg0N2Y1NTVlNTYwM2RlZjg1 ZDJjMmIwHhcNMjUxMjIwMDAwMTA4WhcNMjUxMjIxMDAwMTA4WjAzMTEwLwYDVQQD EyhhZWRiMzg3MjIzYTg3Mjg4ZThjOWMyNDNkMzIxZWM0MGYzNDcyYTVjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs6PJWsYFwkbO4oxIQsJI2A2Rn1Ak ++PWR49O0M3j2NXDypseEAomVRlm2xx452bZqHewKXsF0/OpvL7AqDCVZOVDEguX CdHuu7QJYE9TVop2xSDWim1B/kkiqc4Q+QOkdN4Oo/eqGEPBuWjB7ya5dHzBBBaR j2eAUu6phtwwjKY8Wo9vi42DLJYBU37qu0bKZhhHblbQJZsrg4o2CORxX38Bg43v flMSSXqFCtG8sF6CeShDzcKIKwbS6FLLbnAgUxUxv1fH4KFbZIGVlb5iT0zpmSYM 63WQaHi/BnFK9V+R/M9UxjEggk2gU6iJSzqLfj+TlBTLJ0GbxkYt/69bAwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFK7bOHIjqHKI6MnCQ9Mh7EDzRypcMB8GA1UdIwQY MBaAFCOJNB4Q5rAh+oR/VV5WA974XSwrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSTRrMEhoRG1zQ0g2aEg5VlhsWUQzdmhkTENzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC82YWI5M2UtODU2My00NjA2LWIxOWUt OGMwMDNjNGE1NDU2LzEvSTRrMEhoRG1zQ0g2aEg5VlhsWUQzdmhkTENzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMC82YWI5M2UtODU2My00NjA2LWIxOWUtOGMwMDNjNGE1NDU2 LzEvSTRrMEhoRG1zQ0g2aEg5VlhsWUQzdmhkTENzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAW57rzYnc 7RwSaCVer5FryxEN0JQFo9MloDPljB8WJZrIOn2kssFLls62RrriQdsQgXpG2hop 3khKnWeD6atJT/tiu0PQemiZfQHHOKfHSvYAn7dUhQ7eeH4p0cHmhUwXNbA+kALk q0XcHzMsldwVVS+UkaoBOu0uMIq/LYWT0CJfx3R1gitg4/y0OA5O9ifcbFYPhVhH G8y75BWNgBNH/pOL+5HOVmi7L2HhNTSA9WmKLmNTIk/SgmHbpRjm+A/nS0gj4Zik zNTzsc5c2QsXoZoV7/SAEQ4YcXlCakji7ANIx6KcS7RONvEzrZMxupikExo+ERCQ 8lMXinZI3Fidqg== -----END CERTIFICATE-----Generated at Sat Dec 20 09:06:06 2025 by rpki-client