This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/945305-0a63-4c2f-aaff-cb220b719e78/1/IFlFRDxbJeTc9iA_BhrATTaHFVQ.mft File: IFlFRDxbJeTc9iA_BhrATTaHFVQ.mft (raw, json) Hash identifier: LT2fDSpUw6lbGXDv7EGptlZcWnOiALKCRQJkC2QGrj8= Subject key identifier: 03:4C:02:1B:AE:D3:49:4E:E5:80:1F:51:B7:88:E8:77:E2:E7:C6:54 Authority key identifier: 20:59:45:44:3C:5B:25:E4:DC:F6:20:3F:06:1A:C0:4D:36:87:15:54 Certificate issuer: /CN=205945443c5b25e4dcf6203f061ac04d36871554 Certificate serial: 019B3D2351967B2CB03CE31FFE1CE424CF5C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IFlFRDxbJeTc9iA_BhrATTaHFVQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/945305-0a63-4c2f-aaff-cb220b719e78/1/IFlFRDxbJeTc9iA_BhrATTaHFVQ.mft Manifest number: 178A Signing time: Sat 20 Dec 2025 19:01:23 +0000 Manifest this update: Sat 20 Dec 2025 19:01:23 +0000 Manifest next update: Sun 21 Dec 2025 19:01:23 +0000 Files and hashes: 1: IFlFRDxbJeTc9iA_BhrATTaHFVQ.crl (hash: si+TtEZ58KmIgEqBQtU/g/NYLQJiyRIlSqNmyocOkow=) 2: vwwOJsNwZhQ7jXxQBO6C3CzaqW4.roa (hash: PgsS8twf0GYuOEotT5Wskvo1GlMh/1Ykh+edTuYgZgU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/945305-0a63-4c2f-aaff-cb220b719e78/1/IFlFRDxbJeTc9iA_BhrATTaHFVQ.crl rsync://rpki.ripe.net/repository/DEFAULT/d0/945305-0a63-4c2f-aaff-cb220b719e78/1/IFlFRDxbJeTc9iA_BhrATTaHFVQ.mft rsync://rpki.ripe.net/repository/DEFAULT/IFlFRDxbJeTc9iA_BhrATTaHFVQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 19:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:23:51:96:7b:2c:b0:3c:e3:1f:fe:1c:e4:24:cf:5c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=205945443c5b25e4dcf6203f061ac04d36871554 Validity Not Before: Dec 20 19:01:23 2025 GMT Not After : Dec 21 19:01:23 2025 GMT Subject: CN=034c021baed3494ee5801f51b788e877e2e7c654 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:63:d4:a6:b2:0f:d4:f6:85:97:cd:90:3b:de: d8:58:5d:c5:df:bd:6e:3a:2d:00:f1:72:d7:f5:5d: 37:10:8a:2c:ea:96:6f:f3:f3:02:97:86:d7:a9:9e: e2:e3:03:d6:9d:62:34:a6:77:1c:c0:4e:40:12:3a: 74:82:e4:8a:e9:48:81:6e:2a:ee:ed:f6:15:ca:66: 89:ed:b6:80:de:fa:83:68:ce:6e:fc:f5:33:82:fe: ec:b9:10:bb:07:1a:a9:8b:e3:4e:c0:4f:1a:cc:bb: b7:13:12:51:e6:31:c8:82:46:48:c6:a8:81:3d:d5: fa:84:7e:7b:e5:3a:31:b2:62:71:d9:58:c7:cd:5b: 0c:1f:06:d5:09:f0:b9:24:52:e0:d5:a8:d5:33:f2: 2b:bb:27:51:f0:d3:37:4f:94:56:95:b8:4b:9a:1e: 5b:9e:21:94:dd:52:3d:0e:52:9f:c4:02:26:d5:2b: 30:6e:6f:20:d3:d5:b3:5c:4d:44:ec:9e:ef:ad:08: fb:60:49:47:49:32:f9:b6:b7:29:dc:17:80:58:32: 49:7a:e6:ae:ad:d9:e5:16:71:08:11:8a:fe:3c:71: 6e:f6:d8:b7:77:d4:aa:7f:b3:67:26:2b:5a:6f:be: cb:61:c7:77:bb:4b:02:fe:51:b6:7e:0e:1b:8b:9b: bc:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:4C:02:1B:AE:D3:49:4E:E5:80:1F:51:B7:88:E8:77:E2:E7:C6:54 X509v3 Authority Key Identifier: keyid:20:59:45:44:3C:5B:25:E4:DC:F6:20:3F:06:1A:C0:4D:36:87:15:54 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IFlFRDxbJeTc9iA_BhrATTaHFVQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/945305-0a63-4c2f-aaff-cb220b719e78/1/IFlFRDxbJeTc9iA_BhrATTaHFVQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/945305-0a63-4c2f-aaff-cb220b719e78/1/IFlFRDxbJeTc9iA_BhrATTaHFVQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0e:f8:6d:3d:d4:03:56:9d:b0:b4:29:8e:df:5f:e5:9f:e4:16: 33:a6:84:9b:2f:60:10:d4:5b:c2:59:21:2f:06:a5:de:8a:25: 6f:ac:0d:62:db:ba:59:5d:f9:ce:07:2d:5e:77:65:25:61:6a: 98:2e:d0:be:18:d2:55:01:ad:3b:46:e8:9e:39:67:79:bb:2a: b9:41:0c:0a:bb:54:50:dc:46:68:38:6b:a9:63:74:52:88:5e: 74:a9:83:ab:64:3d:3a:53:55:39:03:98:3b:1b:ae:6f:46:b2: 74:02:e6:04:bc:c7:f0:68:ef:a0:1b:8d:53:d9:65:1f:b4:ad: 0f:d6:30:4b:5d:c8:5d:73:6f:32:78:e5:a4:6c:23:99:56:45: 68:e9:43:0f:63:97:f8:b8:da:c8:8f:44:f3:af:fc:9a:87:15: 60:a5:d6:f6:18:4a:88:ea:44:14:a3:34:91:47:71:dc:4f:75: bd:2b:cb:4c:b5:fd:1b:f9:0e:98:d1:9a:29:28:57:f4:21:9a: 29:cc:4d:86:57:45:74:61:26:c9:20:67:d6:71:7a:7d:43:80: b0:bb:5f:10:2a:4c:11:e9:99:4e:65:f8:14:03:34:85:ba:2a: 68:ef:1b:2c:46:dd:0a:2e:2a:de:59:98:a0:be:95:5d:ff:b1: e3:40:f7:5a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9I1GWeyywPOMf/hzkJM9cMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIwNTk0NTQ0M2M1YjI1ZTRkY2Y2MjAzZjA2MWFjMDRkMzY4 NzE1NTQwHhcNMjUxMjIwMTkwMTIzWhcNMjUxMjIxMTkwMTIzWjAzMTEwLwYDVQQD EygwMzRjMDIxYmFlZDM0OTRlZTU4MDFmNTFiNzg4ZTg3N2UyZTdjNjU0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2GPUprIP1PaFl82QO97YWF3F371u Oi0A8XLX9V03EIos6pZv8/MCl4bXqZ7i4wPWnWI0pnccwE5AEjp0guSK6UiBbiru 7fYVymaJ7baA3vqDaM5u/PUzgv7suRC7Bxqpi+NOwE8azLu3ExJR5jHIgkZIxqiB PdX6hH575ToxsmJx2VjHzVsMHwbVCfC5JFLg1ajVM/IruydR8NM3T5RWlbhLmh5b niGU3VI9DlKfxAIm1Sswbm8g09WzXE1E7J7vrQj7YElHSTL5trcp3BeAWDJJeuau rdnlFnEIEYr+PHFu9ti3d9Sqf7NnJitab77LYcd3u0sC/lG2fg4bi5u87QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFANMAhuu00lO5YAfUbeI6Hfi58ZUMB8GA1UdIwQY MBaAFCBZRUQ8WyXk3PYgPwYawE02hxVUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSUZsRlJEeGJKZVRjOWlBX0JockFUVGFIRlZRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC85NDUzMDUtMGE2My00YzJmLWFhZmYt Y2IyMjBiNzE5ZTc4LzEvSUZsRlJEeGJKZVRjOWlBX0JockFUVGFIRlZRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMC85NDUzMDUtMGE2My00YzJmLWFhZmYtY2IyMjBiNzE5ZTc4 LzEvSUZsRlJEeGJKZVRjOWlBX0JockFUVGFIRlZRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADvhtPdQD Vp2wtCmO31/ln+QWM6aEmy9gENRbwlkhLwal3oolb6wNYtu6WV35zgctXndlJWFq mC7QvhjSVQGtO0bonjlnebsquUEMCrtUUNxGaDhrqWN0UohedKmDq2Q9OlNVOQOY Oxuub0aydALmBLzH8GjvoBuNU9llH7StD9YwS13IXXNvMnjlpGwjmVZFaOlDD2OX +LjayI9E86/8mocVYKXW9hhKiOpEFKM0kUdx3E91vSvLTLX9G/kOmNGaKShX9CGa KcxNhldFdGEmySBn1nF6fUOAsLtfECpMEemZTmX4FAM0hboqaO8bLEbdCi4q3lmY oL6VXf+x40D3Wg== -----END CERTIFICATE-----Generated at Sun Dec 21 03:01:38 2025 by rpki-client