This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/945305-0a63-4c2f-aaff-cb220b719e78/1/IFlFRDxbJeTc9iA_BhrATTaHFVQ.mft File: IFlFRDxbJeTc9iA_BhrATTaHFVQ.mft (raw, json) Hash identifier: SUuC7zhkBle5XXEwyCkhpkFoioMkjErzT38sA21RXo0= Subject key identifier: 7F:75:3D:EA:02:BF:42:A5:20:CF:F0:DD:00:6D:F5:CA:74:71:53:C9 Authority key identifier: 20:59:45:44:3C:5B:25:E4:DC:F6:20:3F:06:1A:C0:4D:36:87:15:54 Certificate issuer: /CN=205945443c5b25e4dcf6203f061ac04d36871554 Certificate serial: 019B5072F0441E38F26283D8918732332EF6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IFlFRDxbJeTc9iA_BhrATTaHFVQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/945305-0a63-4c2f-aaff-cb220b719e78/1/IFlFRDxbJeTc9iA_BhrATTaHFVQ.mft Manifest number: 1794 Signing time: Wed 24 Dec 2025 13:01:08 +0000 Manifest this update: Wed 24 Dec 2025 13:01:08 +0000 Manifest next update: Thu 25 Dec 2025 13:01:08 +0000 Files and hashes: 1: IFlFRDxbJeTc9iA_BhrATTaHFVQ.crl (hash: z9M5GboXUPC3ER4PkA2tE4x34y712RqHN/4dJUUqwPk=) 2: vwwOJsNwZhQ7jXxQBO6C3CzaqW4.roa (hash: PgsS8twf0GYuOEotT5Wskvo1GlMh/1Ykh+edTuYgZgU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/945305-0a63-4c2f-aaff-cb220b719e78/1/IFlFRDxbJeTc9iA_BhrATTaHFVQ.crl rsync://rpki.ripe.net/repository/DEFAULT/d0/945305-0a63-4c2f-aaff-cb220b719e78/1/IFlFRDxbJeTc9iA_BhrATTaHFVQ.mft rsync://rpki.ripe.net/repository/DEFAULT/IFlFRDxbJeTc9iA_BhrATTaHFVQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 13:01:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:50:72:f0:44:1e:38:f2:62:83:d8:91:87:32:33:2e:f6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=205945443c5b25e4dcf6203f061ac04d36871554 Validity Not Before: Dec 24 13:01:08 2025 GMT Not After : Dec 25 13:01:08 2025 GMT Subject: CN=7f753dea02bf42a520cff0dd006df5ca747153c9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:ff:b1:a0:bf:40:12:ea:91:94:f1:db:d9:13: b2:37:dc:fd:6d:9b:82:01:3f:c0:b9:4b:f0:f0:a8: 1b:00:dc:1b:f7:29:bb:fb:f5:2f:3e:74:ac:fb:ad: 57:d8:e9:91:7f:ad:db:8d:b6:f7:c9:b6:49:d7:7a: 6a:ac:a9:fa:86:da:b7:45:a2:c8:da:dd:b9:11:1a: 31:2c:32:27:4a:dd:31:b5:42:94:55:37:84:1a:b5: c5:5b:e9:41:dd:41:72:c7:6a:c1:a9:c6:84:c0:4b: f7:0a:d4:f1:78:47:9d:f4:ef:f6:81:e3:8a:40:89: 1f:b5:fa:a1:e3:29:d6:9a:a5:39:4a:6f:93:cf:06: bd:1e:12:62:41:59:83:68:02:17:91:5a:5c:35:eb: 76:e7:4b:20:36:43:31:50:26:4b:45:a9:23:78:2e: 51:aa:1a:c7:23:15:3a:f5:d5:21:5a:68:ee:c9:c7: a3:c1:cc:34:77:23:e6:b8:38:2e:cd:ba:5a:c1:ac: 46:27:cf:7c:fe:40:83:90:e2:6f:ae:db:79:ce:04: db:05:04:7e:84:a2:76:1e:5b:b9:c7:7f:38:6a:48: 2b:6f:ff:e0:99:87:bf:b2:51:c9:2a:8d:3e:02:2f: 3a:01:df:9f:0f:e2:1e:5a:b9:01:3b:3c:9b:99:ff: 16:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:75:3D:EA:02:BF:42:A5:20:CF:F0:DD:00:6D:F5:CA:74:71:53:C9 X509v3 Authority Key Identifier: keyid:20:59:45:44:3C:5B:25:E4:DC:F6:20:3F:06:1A:C0:4D:36:87:15:54 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IFlFRDxbJeTc9iA_BhrATTaHFVQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/945305-0a63-4c2f-aaff-cb220b719e78/1/IFlFRDxbJeTc9iA_BhrATTaHFVQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/945305-0a63-4c2f-aaff-cb220b719e78/1/IFlFRDxbJeTc9iA_BhrATTaHFVQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 10:fb:16:54:f2:e3:4d:af:08:06:3f:27:a4:46:86:d3:9d:b3: 00:5e:cb:94:00:b5:29:f7:d7:d7:1a:5f:d3:0b:38:74:bb:ed: cb:d5:54:be:53:0c:35:34:23:df:2a:32:6a:97:d3:b4:aa:f1: bf:48:f3:c4:bc:d6:ea:76:0e:e2:68:fd:03:ef:0b:f7:be:ed: 12:5c:df:0c:e3:c4:a0:d8:5d:c5:d4:20:7e:c1:6a:c2:82:3a: 68:4b:b9:30:56:5a:7a:5c:f3:04:40:46:c8:b8:02:71:48:05: ce:5c:22:93:e6:47:2b:7a:ca:05:2d:85:33:d0:ae:b4:59:0c: 3d:71:61:19:43:8f:a8:ff:07:00:df:67:1b:0f:d3:24:8e:58: 19:29:eb:ac:73:66:f9:05:a0:36:0d:44:7f:37:7a:9c:b0:aa: 1d:b5:b6:6d:a4:68:37:1a:7a:e2:39:28:47:1c:59:23:b9:33: d9:56:94:dc:32:58:ff:db:1f:95:b2:5b:86:b1:99:11:ed:47: 4b:0d:0c:e2:1d:1a:8b:d0:a0:c9:36:b3:34:7d:69:28:ce:e7: d4:3b:1c:f3:93:be:eb:4e:e4:84:54:9c:c0:74:a2:7e:3c:4b: 1a:7c:f6:77:33:76:ce:c7:ea:a2:27:40:61:5e:37:fb:1a:d0: 2d:22:78:53 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtQcvBEHjjyYoPYkYcyMy72MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIwNTk0NTQ0M2M1YjI1ZTRkY2Y2MjAzZjA2MWFjMDRkMzY4 NzE1NTQwHhcNMjUxMjI0MTMwMTA4WhcNMjUxMjI1MTMwMTA4WjAzMTEwLwYDVQQD Eyg3Zjc1M2RlYTAyYmY0MmE1MjBjZmYwZGQwMDZkZjVjYTc0NzE1M2M5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAof+xoL9AEuqRlPHb2ROyN9z9bZuC AT/AuUvw8KgbANwb9ym7+/UvPnSs+61X2OmRf63bjbb3ybZJ13pqrKn6htq3RaLI 2t25ERoxLDInSt0xtUKUVTeEGrXFW+lB3UFyx2rBqcaEwEv3CtTxeEed9O/2geOK QIkftfqh4ynWmqU5Sm+Tzwa9HhJiQVmDaAIXkVpcNet250sgNkMxUCZLRakjeC5R qhrHIxU69dUhWmjuycejwcw0dyPmuDguzbpawaxGJ898/kCDkOJvrtt5zgTbBQR+ hKJ2Hlu5x384akgrb//gmYe/slHJKo0+Ai86Ad+fD+IeWrkBOzybmf8WAQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFH91PeoCv0KlIM/w3QBt9cp0cVPJMB8GA1UdIwQY MBaAFCBZRUQ8WyXk3PYgPwYawE02hxVUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSUZsRlJEeGJKZVRjOWlBX0JockFUVGFIRlZRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC85NDUzMDUtMGE2My00YzJmLWFhZmYt Y2IyMjBiNzE5ZTc4LzEvSUZsRlJEeGJKZVRjOWlBX0JockFUVGFIRlZRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMC85NDUzMDUtMGE2My00YzJmLWFhZmYtY2IyMjBiNzE5ZTc4 LzEvSUZsRlJEeGJKZVRjOWlBX0JockFUVGFIRlZRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEPsWVPLj Ta8IBj8npEaG052zAF7LlAC1KffX1xpf0ws4dLvty9VUvlMMNTQj3yoyapfTtKrx v0jzxLzW6nYO4mj9A+8L977tElzfDOPEoNhdxdQgfsFqwoI6aEu5MFZaelzzBEBG yLgCcUgFzlwik+ZHK3rKBS2FM9CutFkMPXFhGUOPqP8HAN9nGw/TJI5YGSnrrHNm +QWgNg1Efzd6nLCqHbW2baRoNxp64jkoRxxZI7kz2VaU3DJY/9sflbJbhrGZEe1H Sw0M4h0ai9CgyTazNH1pKM7n1Dsc85O+607khFScwHSifjxLGnz2dzN2zsfqoidA YV43+xrQLSJ4Uw== -----END CERTIFICATE-----Generated at Wed Dec 24 22:06:05 2025 by rpki-client