This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/dbe446-9da3-4854-b5d3-25a38a246fa2/1/i0LHUqmwmDEos9KV5F6hazPuffk.mft File: i0LHUqmwmDEos9KV5F6hazPuffk.mft (raw, json) Hash identifier: 4zumTc/Ob9yCf8+PnxhyJHLQ9ZSZF/JV4fsQUrMDR1o= Subject key identifier: 8D:A9:7D:47:AD:63:95:F0:5A:81:5F:9A:DE:48:3D:4D:F6:CF:1F:20 Authority key identifier: 8B:42:C7:52:A9:B0:98:31:28:B3:D2:95:E4:5E:A1:6B:33:EE:7D:F9 Certificate issuer: /CN=8b42c752a9b0983128b3d295e45ea16b33ee7df9 Certificate serial: 019B4C282C6457878D2B8D1F78B2B0B66388 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i0LHUqmwmDEos9KV5F6hazPuffk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/dbe446-9da3-4854-b5d3-25a38a246fa2/1/i0LHUqmwmDEos9KV5F6hazPuffk.mft Manifest number: 1791 Signing time: Tue 23 Dec 2025 17:00:59 +0000 Manifest this update: Tue 23 Dec 2025 17:00:59 +0000 Manifest next update: Wed 24 Dec 2025 17:00:59 +0000 Files and hashes: 1: deCTZwf8Lo4tPBt2V0GwD8QTdjQ.roa (hash: FyKYzrCJB3LXbVhWQRcS/ZI/wI5zOqLIDpvmKLMGaw0=) 2: i0LHUqmwmDEos9KV5F6hazPuffk.crl (hash: qGE5XL1HgoeziDzp3BMnwxoJoHO/OIstZXopxqMOorM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/dbe446-9da3-4854-b5d3-25a38a246fa2/1/i0LHUqmwmDEos9KV5F6hazPuffk.crl rsync://rpki.ripe.net/repository/DEFAULT/f6/dbe446-9da3-4854-b5d3-25a38a246fa2/1/i0LHUqmwmDEos9KV5F6hazPuffk.mft rsync://rpki.ripe.net/repository/DEFAULT/i0LHUqmwmDEos9KV5F6hazPuffk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 24 Dec 2025 15:46:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4c:28:2c:64:57:87:8d:2b:8d:1f:78:b2:b0:b6:63:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8b42c752a9b0983128b3d295e45ea16b33ee7df9 Validity Not Before: Dec 23 17:00:59 2025 GMT Not After : Dec 24 17:00:59 2025 GMT Subject: CN=8da97d47ad6395f05a815f9ade483d4df6cf1f20 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:af:5f:b0:ca:8c:54:b2:b7:c0:a1:70:91:86: 66:15:b4:0c:15:54:14:89:9b:cc:08:ea:51:1e:a7: 82:9b:72:ec:f0:39:62:3e:2e:13:0d:cf:d2:af:4d: f7:3e:db:82:7f:8e:52:11:24:f8:6b:3f:e8:d7:01: a2:e3:17:b0:07:fc:b4:75:59:f4:29:57:a5:59:d3: 1d:ea:b2:49:d0:8d:4c:e0:a0:ea:2e:3a:1a:7e:d4: 4c:05:0c:f0:1d:22:45:a4:26:c3:f9:72:25:ab:4e: 7c:1d:cc:ab:70:56:76:2e:b9:cc:be:f7:ed:5b:dd: ce:6d:2b:8b:bb:77:00:7a:29:8a:29:5f:91:4e:29: da:6e:53:21:5d:69:57:48:64:0d:d8:52:14:cd:99: 86:87:b7:9e:1a:3f:26:f5:af:d4:fd:88:91:23:92: 93:a8:dc:70:5a:ff:a6:60:73:37:e9:69:ab:9c:ca: b4:45:dd:a1:b1:25:54:d7:5d:40:6d:5a:e4:f5:2e: 1a:42:e4:f9:ce:38:f7:35:40:b0:59:21:d0:6f:0b: b4:c6:1d:8f:fa:7b:38:d2:99:b5:ca:e5:ec:ef:0c: 53:da:02:56:7e:fd:e8:93:dc:9c:08:72:b3:65:0e: 1c:bd:4e:a3:5c:64:ea:9b:78:fa:6d:5d:58:fb:00: cd:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:A9:7D:47:AD:63:95:F0:5A:81:5F:9A:DE:48:3D:4D:F6:CF:1F:20 X509v3 Authority Key Identifier: keyid:8B:42:C7:52:A9:B0:98:31:28:B3:D2:95:E4:5E:A1:6B:33:EE:7D:F9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i0LHUqmwmDEos9KV5F6hazPuffk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/dbe446-9da3-4854-b5d3-25a38a246fa2/1/i0LHUqmwmDEos9KV5F6hazPuffk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/dbe446-9da3-4854-b5d3-25a38a246fa2/1/i0LHUqmwmDEos9KV5F6hazPuffk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7b:66:dc:a0:37:39:1c:29:f9:3c:ae:fb:52:fd:91:8f:89:c3: 95:58:ad:ba:68:fd:59:39:5f:46:e4:0c:a2:70:87:e7:50:11: e3:e6:3c:23:5e:71:a4:26:85:6f:f7:72:53:2c:e3:82:da:3d: 95:5a:83:ed:49:bf:c5:4d:89:dd:9b:54:99:00:c5:35:08:ea: 1a:8a:8d:4e:54:5e:6a:af:ab:c9:30:90:e7:79:33:17:38:16: 5a:5c:5d:80:1b:15:b8:8a:c4:0b:e6:41:b0:5b:3c:b1:64:e4: 9b:9b:c7:b1:5e:db:d3:32:74:d1:7f:3d:3d:bb:25:25:24:76: bb:57:39:60:84:0d:d7:89:f9:b0:a1:85:6c:f6:0f:6d:50:8b: 44:4d:d6:02:a3:2a:74:cf:24:cf:0e:d1:45:1f:7a:30:6a:e0: 00:5c:55:97:0d:90:3b:ea:c3:2a:2c:36:5d:5c:05:0f:1c:97: b9:24:3c:48:0c:33:7d:d3:9a:dc:18:c1:61:76:10:4b:25:07: a3:8c:87:fc:ec:a3:3c:8f:fd:55:d0:6e:7f:b3:8f:3b:12:cc: 90:65:1c:de:82:36:9b:40:cf:30:59:7d:d2:e6:33:bb:8c:41: cb:77:1f:60:68:fa:22:a9:a4:bf:77:c9:ad:02:9d:a7:b0:9a: 95:db:03:90 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtMKCxkV4eNK40feLKwtmOIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhiNDJjNzUyYTliMDk4MzEyOGIzZDI5NWU0NWVhMTZiMzNl ZTdkZjkwHhcNMjUxMjIzMTcwMDU5WhcNMjUxMjI0MTcwMDU5WjAzMTEwLwYDVQQD Eyg4ZGE5N2Q0N2FkNjM5NWYwNWE4MTVmOWFkZTQ4M2Q0ZGY2Y2YxZjIwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj69fsMqMVLK3wKFwkYZmFbQMFVQU iZvMCOpRHqeCm3Ls8DliPi4TDc/Sr033PtuCf45SEST4az/o1wGi4xewB/y0dVn0 KVelWdMd6rJJ0I1M4KDqLjoaftRMBQzwHSJFpCbD+XIlq058HcyrcFZ2LrnMvvft W93ObSuLu3cAeimKKV+RTinablMhXWlXSGQN2FIUzZmGh7eeGj8m9a/U/YiRI5KT qNxwWv+mYHM36WmrnMq0Rd2hsSVU111AbVrk9S4aQuT5zjj3NUCwWSHQbwu0xh2P +ns40pm1yuXs7wxT2gJWfv3ok9ycCHKzZQ4cvU6jXGTqm3j6bV1Y+wDN9wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFI2pfUetY5XwWoFfmt5IPU32zx8gMB8GA1UdIwQY MBaAFItCx1KpsJgxKLPSleReoWsz7n35MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaTBMSFVxbXdtREVvczlLVjVGNmhhelB1ZmZrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNi9kYmU0NDYtOWRhMy00ODU0LWI1ZDMt MjVhMzhhMjQ2ZmEyLzEvaTBMSFVxbXdtREVvczlLVjVGNmhhelB1ZmZrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNi9kYmU0NDYtOWRhMy00ODU0LWI1ZDMtMjVhMzhhMjQ2ZmEy LzEvaTBMSFVxbXdtREVvczlLVjVGNmhhelB1ZmZrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAe2bcoDc5 HCn5PK77Uv2Rj4nDlVitumj9WTlfRuQMonCH51AR4+Y8I15xpCaFb/dyUyzjgto9 lVqD7Um/xU2J3ZtUmQDFNQjqGoqNTlReaq+ryTCQ53kzFzgWWlxdgBsVuIrEC+ZB sFs8sWTkm5vHsV7b0zJ00X89PbslJSR2u1c5YIQN14n5sKGFbPYPbVCLRE3WAqMq dM8kzw7RRR96MGrgAFxVlw2QO+rDKiw2XVwFDxyXuSQ8SAwzfdOa3BjBYXYQSyUH o4yH/OyjPI/9VdBuf7OPOxLMkGUc3oI2m0DPMFl90uYzu4xBy3cfYGj6Iqmkv3fJ rQKdp7CaldsDkA== -----END CERTIFICATE-----Generated at Tue Dec 23 20:34:52 2025 by rpki-client