This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/5c3ae6-2934-479e-8c2d-8e8d5b3e5586/1/IxMMmax6pAhscXVxFKQWP4AJAUI.mft File: IxMMmax6pAhscXVxFKQWP4AJAUI.mft (raw, json) Hash identifier: NTRSRWh947gqjfQNEcMoFsK70fFUhOYMyfUaodyBRVY= Subject key identifier: 98:E6:7E:36:62:59:29:CD:BE:5D:81:CE:3D:C2:B8:EE:5B:6B:F8:04 Authority key identifier: 23:13:0C:99:AC:7A:A4:08:6C:71:75:71:14:A4:16:3F:80:09:01:42 Certificate issuer: /CN=23130c99ac7aa4086c71757114a4163f80090142 Certificate serial: 019B397CF9733900960C48FCFF7CDBF29458 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IxMMmax6pAhscXVxFKQWP4AJAUI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/5c3ae6-2934-479e-8c2d-8e8d5b3e5586/1/IxMMmax6pAhscXVxFKQWP4AJAUI.mft Manifest number: 0ACF Signing time: Sat 20 Dec 2025 02:00:50 +0000 Manifest this update: Sat 20 Dec 2025 02:00:50 +0000 Manifest next update: Sun 21 Dec 2025 02:00:50 +0000 Files and hashes: 1: 7LeNtT1Py-375udT6tgnEczdaA4.roa (hash: KcUWkl6MBuk85woap7zLa0rzE+sobb9Vo8npqesilrw=) 2: IxMMmax6pAhscXVxFKQWP4AJAUI.crl (hash: 8/QpKaiuasNtjk4rr7wLFDlom1RdBSLZ9slG/iwiUjU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/5c3ae6-2934-479e-8c2d-8e8d5b3e5586/1/IxMMmax6pAhscXVxFKQWP4AJAUI.crl rsync://rpki.ripe.net/repository/DEFAULT/ec/5c3ae6-2934-479e-8c2d-8e8d5b3e5586/1/IxMMmax6pAhscXVxFKQWP4AJAUI.mft rsync://rpki.ripe.net/repository/DEFAULT/IxMMmax6pAhscXVxFKQWP4AJAUI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 02:00:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:39:7c:f9:73:39:00:96:0c:48:fc:ff:7c:db:f2:94:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=23130c99ac7aa4086c71757114a4163f80090142 Validity Not Before: Dec 20 02:00:50 2025 GMT Not After : Dec 21 02:00:50 2025 GMT Subject: CN=98e67e36625929cdbe5d81ce3dc2b8ee5b6bf804 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:22:88:bc:b3:bf:5f:ab:80:08:ad:e8:00:14: 83:b0:ea:d2:f6:34:6f:dc:a1:59:0e:8e:45:93:16: c7:a8:02:4e:2b:2d:48:f7:f9:56:b7:f5:3a:42:c0: 50:83:18:ec:c6:fb:7a:95:aa:76:5d:b1:cf:f3:35: b5:e0:06:90:64:7d:52:68:56:50:07:6c:9c:ea:cd: 8d:00:dc:83:45:56:e5:4d:3a:e1:d7:fc:cc:ef:f8: 16:a3:6b:86:98:fd:b0:7a:e8:d1:20:1b:48:c2:8f: 2b:e8:e1:2c:da:85:36:fa:31:f1:7b:38:95:83:f5: f1:d4:24:4e:37:a0:56:ea:6c:f2:89:9a:2f:26:98: 92:54:69:36:ac:00:41:7a:8f:0f:1c:9a:a9:26:9f: ee:47:73:32:04:5a:36:df:0b:42:72:05:89:46:c4: 23:3e:f1:5c:6d:33:6f:f5:72:6e:af:6d:88:ec:e4: 11:d1:72:7c:16:bc:ef:61:41:04:2a:e0:a5:44:97: e8:ec:24:c9:68:6c:00:57:97:a7:f6:3a:03:72:05: 02:57:c0:f6:c4:b4:b8:7e:16:22:50:19:8a:42:d4: 7a:e2:75:a5:c7:e1:a5:34:2c:2d:05:13:f1:8d:27: 31:c8:6b:db:00:4f:93:52:14:d5:ad:85:6e:f7:eb: 9f:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:E6:7E:36:62:59:29:CD:BE:5D:81:CE:3D:C2:B8:EE:5B:6B:F8:04 X509v3 Authority Key Identifier: keyid:23:13:0C:99:AC:7A:A4:08:6C:71:75:71:14:A4:16:3F:80:09:01:42 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IxMMmax6pAhscXVxFKQWP4AJAUI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/5c3ae6-2934-479e-8c2d-8e8d5b3e5586/1/IxMMmax6pAhscXVxFKQWP4AJAUI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/5c3ae6-2934-479e-8c2d-8e8d5b3e5586/1/IxMMmax6pAhscXVxFKQWP4AJAUI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 04:a4:8d:8c:7c:d4:8c:7e:df:08:2e:9e:a6:1f:82:8f:51:ac: db:89:e6:05:f8:7c:8a:5a:75:34:8b:23:4c:7c:98:dc:5d:e1: 2e:65:59:56:d9:5d:b7:ec:70:58:56:13:ee:c2:a9:cf:94:37: 49:34:2a:7b:3d:6f:86:2d:ac:17:2a:81:94:17:27:67:e5:07: c8:22:4c:a8:dc:39:33:50:f6:bf:8e:de:1e:82:45:9d:c9:47: 96:3c:18:50:9d:52:f0:af:19:e9:3f:3a:c7:78:90:44:de:52: e3:88:d3:b3:d6:11:91:3b:6a:0f:86:81:19:fe:05:56:61:15: fb:83:55:9e:d0:ae:c5:fe:d1:de:5d:d2:d0:d8:dd:3c:ed:55: 46:33:9f:64:d6:c8:b6:ae:36:1a:36:0c:45:86:a1:e5:2e:a9: 50:fe:83:ac:cb:51:df:b1:d5:15:6f:8f:02:ea:b0:63:09:d7: 41:94:1c:52:92:92:92:f3:dd:13:1e:7d:d0:94:15:4a:0d:51: f2:98:76:49:23:c9:f5:25:68:e9:77:8d:0f:4d:e8:e9:c2:38: 13:39:1b:7c:bb:a0:0d:06:e4:fb:3c:9b:96:ff:8d:98:43:18: bc:23:01:64:26:9b:8c:ea:e9:f3:ac:dc:78:0a:3c:63:2d:bb: ce:1f:12:83 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs5fPlzOQCWDEj8/3zb8pRYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIzMTMwYzk5YWM3YWE0MDg2YzcxNzU3MTE0YTQxNjNmODAw OTAxNDIwHhcNMjUxMjIwMDIwMDUwWhcNMjUxMjIxMDIwMDUwWjAzMTEwLwYDVQQD Eyg5OGU2N2UzNjYyNTkyOWNkYmU1ZDgxY2UzZGMyYjhlZTViNmJmODA0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtyKIvLO/X6uACK3oABSDsOrS9jRv 3KFZDo5FkxbHqAJOKy1I9/lWt/U6QsBQgxjsxvt6lap2XbHP8zW14AaQZH1SaFZQ B2yc6s2NANyDRVblTTrh1/zM7/gWo2uGmP2weujRIBtIwo8r6OEs2oU2+jHxeziV g/Xx1CRON6BW6mzyiZovJpiSVGk2rABBeo8PHJqpJp/uR3MyBFo23wtCcgWJRsQj PvFcbTNv9XJur22I7OQR0XJ8FrzvYUEEKuClRJfo7CTJaGwAV5en9joDcgUCV8D2 xLS4fhYiUBmKQtR64nWlx+GlNCwtBRPxjScxyGvbAE+TUhTVrYVu9+uf5wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJjmfjZiWSnNvl2Bzj3CuO5ba/gEMB8GA1UdIwQY MBaAFCMTDJmseqQIbHF1cRSkFj+ACQFCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSXhNTW1heDZwQWhzY1hWeEZLUVdQNEFKQVVJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYy81YzNhZTYtMjkzNC00NzllLThjMmQt OGU4ZDViM2U1NTg2LzEvSXhNTW1heDZwQWhzY1hWeEZLUVdQNEFKQVVJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYy81YzNhZTYtMjkzNC00NzllLThjMmQtOGU4ZDViM2U1NTg2 LzEvSXhNTW1heDZwQWhzY1hWeEZLUVdQNEFKQVVJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABKSNjHzU jH7fCC6eph+Cj1Gs24nmBfh8ilp1NIsjTHyY3F3hLmVZVtldt+xwWFYT7sKpz5Q3 STQqez1vhi2sFyqBlBcnZ+UHyCJMqNw5M1D2v47eHoJFnclHljwYUJ1S8K8Z6T86 x3iQRN5S44jTs9YRkTtqD4aBGf4FVmEV+4NVntCuxf7R3l3S0NjdPO1VRjOfZNbI tq42GjYMRYah5S6pUP6DrMtR37HVFW+PAuqwYwnXQZQcUpKSkvPdEx590JQVSg1R 8ph2SSPJ9SVo6XeND03o6cI4EzkbfLugDQbk+zyblv+NmEMYvCMBZCabjOrp86zc eAo8Yy27zh8Sgw== -----END CERTIFICATE-----Generated at Sat Dec 20 11:17:56 2025 by rpki-client