This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/3a96fa-90de-460c-bea6-ec10ebe4fccf/1/IhkMJolAk9xkoF7yz9NUoGz_A50.mft File: IhkMJolAk9xkoF7yz9NUoGz_A50.mft (raw, json) Hash identifier: Kr8WvGrcJlF7Q1GCrtdlcHRRQErQ16eDjaVwOAG7Bqk= Subject key identifier: 24:16:1A:E0:3E:1A:B8:B5:13:EA:F6:26:8B:40:2D:8A:22:FF:56:5E Authority key identifier: 22:19:0C:26:89:40:93:DC:64:A0:5E:F2:CF:D3:54:A0:6C:FF:03:9D Certificate issuer: /CN=22190c26894093dc64a05ef2cfd354a06cff039d Certificate serial: 019B4FCE870B34D610E95705D486D7650896 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IhkMJolAk9xkoF7yz9NUoGz_A50.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/3a96fa-90de-460c-bea6-ec10ebe4fccf/1/IhkMJolAk9xkoF7yz9NUoGz_A50.mft Manifest number: 10C2 Signing time: Wed 24 Dec 2025 10:01:33 +0000 Manifest this update: Wed 24 Dec 2025 10:01:33 +0000 Manifest next update: Thu 25 Dec 2025 10:01:33 +0000 Files and hashes: 1: IhkMJolAk9xkoF7yz9NUoGz_A50.crl (hash: V1ac08764d6U02E8T+iOeOFwT9hyRGecajm2y5Mz0hw=) 2: VDBLRqMYCjpj60SbvjVrCA9rAtA.roa (hash: JKDK4eegAuzQo0SHJPfDcx6+y5omzYtOGcHgfrvk3wU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/3a96fa-90de-460c-bea6-ec10ebe4fccf/1/IhkMJolAk9xkoF7yz9NUoGz_A50.crl rsync://rpki.ripe.net/repository/DEFAULT/e0/3a96fa-90de-460c-bea6-ec10ebe4fccf/1/IhkMJolAk9xkoF7yz9NUoGz_A50.mft rsync://rpki.ripe.net/repository/DEFAULT/IhkMJolAk9xkoF7yz9NUoGz_A50.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 09:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4f:ce:87:0b:34:d6:10:e9:57:05:d4:86:d7:65:08:96 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=22190c26894093dc64a05ef2cfd354a06cff039d Validity Not Before: Dec 24 10:01:33 2025 GMT Not After : Dec 25 10:01:33 2025 GMT Subject: CN=24161ae03e1ab8b513eaf6268b402d8a22ff565e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:83:f6:3f:77:89:f5:46:b9:72:2a:23:b2:6e: 43:20:88:9d:20:1d:55:27:8f:a3:2e:0b:34:78:3a: b1:a1:f3:0b:3d:35:c3:35:02:69:0a:00:28:a3:bc: ef:1f:9b:43:71:54:c8:4c:8e:0b:f8:d7:32:5f:77: 7c:ab:03:c3:2b:bc:c9:9a:4c:c8:a5:01:bb:ee:4b: 1b:03:72:2f:cb:18:63:16:02:09:5a:9a:0e:c1:72: fc:39:d4:19:e3:aa:e6:9e:3a:30:e4:90:12:75:32: 4f:4e:5d:4d:0a:11:27:49:9c:55:60:b2:ca:1f:be: 91:7f:a7:0b:27:94:8c:d2:85:9c:bc:fb:32:4e:85: 02:11:76:f3:a6:4f:14:29:bc:09:5f:83:6f:7b:17: 2e:3a:89:c7:6d:9c:75:29:e7:54:48:b8:b0:a4:28: dc:1a:ee:09:24:4c:8e:1b:34:59:91:e5:d5:0f:b8: 28:d8:64:29:7f:c5:18:7c:8f:c7:3e:7d:bc:4f:18: 0c:0a:4f:41:12:9d:38:df:e7:aa:fe:5b:f9:7d:4c: 16:e5:c4:1c:61:a4:0f:51:3a:64:56:6d:60:f6:22: 8d:91:0e:7c:25:ce:bb:c9:0d:f3:e9:aa:dc:da:25: 22:50:bf:df:e6:08:19:41:a9:84:1e:ab:1a:c5:cf: b1:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:16:1A:E0:3E:1A:B8:B5:13:EA:F6:26:8B:40:2D:8A:22:FF:56:5E X509v3 Authority Key Identifier: keyid:22:19:0C:26:89:40:93:DC:64:A0:5E:F2:CF:D3:54:A0:6C:FF:03:9D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IhkMJolAk9xkoF7yz9NUoGz_A50.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/3a96fa-90de-460c-bea6-ec10ebe4fccf/1/IhkMJolAk9xkoF7yz9NUoGz_A50.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/3a96fa-90de-460c-bea6-ec10ebe4fccf/1/IhkMJolAk9xkoF7yz9NUoGz_A50.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4c:98:39:38:c4:bf:97:10:b2:c1:08:33:ab:98:ae:64:6b:bc: f4:68:05:e9:cf:62:58:61:1b:bd:00:ef:f0:13:56:aa:86:33: 26:12:7e:53:a0:f2:e4:2d:76:dc:aa:a2:46:db:b6:ea:9c:16: 5e:08:27:ae:84:74:9d:9f:95:63:09:65:42:6b:54:9d:af:ee: cf:fc:a7:84:34:fe:30:54:5d:b7:fe:40:82:20:6f:d4:6c:b9: 4e:0b:df:da:29:c8:3d:e6:4a:98:52:59:5a:29:7a:8f:71:4d: 08:66:ab:a2:23:9d:5f:67:71:a3:d9:6b:8a:17:c2:f9:39:cc: a8:78:19:64:e7:00:eb:33:bc:f1:1e:38:e4:6b:d9:09:4a:5a: cb:c8:75:6d:a2:e1:a4:c5:1d:2d:f1:c1:d5:18:19:2e:97:45: be:8d:f5:12:23:91:70:0c:66:7d:14:4f:ed:ab:30:bd:33:1c: e3:6d:2d:e8:3c:b6:ff:47:d9:68:8f:1e:e4:82:61:7d:19:0a: 75:09:8a:c5:ad:3e:f6:68:a0:ea:f7:2e:da:6a:fc:3b:8b:7e: af:f2:80:e6:2e:4a:b7:d2:89:d8:ea:dc:b4:1b:06:46:c6:97: 67:9e:45:28:51:92:76:ee:45:58:61:92:05:a8:ac:25:b0:eb: ae:66:25:0a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtPzocLNNYQ6VcF1IbXZQiWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIyMTkwYzI2ODk0MDkzZGM2NGEwNWVmMmNmZDM1NGEwNmNm ZjAzOWQwHhcNMjUxMjI0MTAwMTMzWhcNMjUxMjI1MTAwMTMzWjAzMTEwLwYDVQQD EygyNDE2MWFlMDNlMWFiOGI1MTNlYWY2MjY4YjQwMmQ4YTIyZmY1NjVlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxIP2P3eJ9Ua5ciojsm5DIIidIB1V J4+jLgs0eDqxofMLPTXDNQJpCgAoo7zvH5tDcVTITI4L+NcyX3d8qwPDK7zJmkzI pQG77ksbA3IvyxhjFgIJWpoOwXL8OdQZ46rmnjow5JASdTJPTl1NChEnSZxVYLLK H76Rf6cLJ5SM0oWcvPsyToUCEXbzpk8UKbwJX4NvexcuOonHbZx1KedUSLiwpCjc Gu4JJEyOGzRZkeXVD7go2GQpf8UYfI/HPn28TxgMCk9BEp043+eq/lv5fUwW5cQc YaQPUTpkVm1g9iKNkQ58Jc67yQ3z6arc2iUiUL/f5ggZQamEHqsaxc+xqQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCQWGuA+Gri1E+r2JotALYoi/1ZeMB8GA1UdIwQY MBaAFCIZDCaJQJPcZKBe8s/TVKBs/wOdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSWhrTUpvbEFrOXhrb0Y3eXo5TlVvR3pfQTUwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMC8zYTk2ZmEtOTBkZS00NjBjLWJlYTYt ZWMxMGViZTRmY2NmLzEvSWhrTUpvbEFrOXhrb0Y3eXo5TlVvR3pfQTUwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMC8zYTk2ZmEtOTBkZS00NjBjLWJlYTYtZWMxMGViZTRmY2Nm LzEvSWhrTUpvbEFrOXhrb0Y3eXo5TlVvR3pfQTUwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATJg5OMS/ lxCywQgzq5iuZGu89GgF6c9iWGEbvQDv8BNWqoYzJhJ+U6Dy5C123KqiRtu26pwW XggnroR0nZ+VYwllQmtUna/uz/ynhDT+MFRdt/5AgiBv1Gy5Tgvf2inIPeZKmFJZ Wil6j3FNCGaroiOdX2dxo9lrihfC+TnMqHgZZOcA6zO88R445GvZCUpay8h1baLh pMUdLfHB1RgZLpdFvo31EiORcAxmfRRP7aswvTMc420t6Dy2/0fZaI8e5IJhfRkK dQmKxa0+9mig6vcu2mr8O4t+r/KA5i5Kt9KJ2OrctBsGRsaXZ55FKFGSdu5FWGGS BaisJbDrrmYlCg== -----END CERTIFICATE-----Generated at Wed Dec 24 12:00:23 2025 by rpki-client