This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/425149-9c68-41fb-8035-d76c8c739861/1/itJAYD7G681i9y1G8dwAy34fCy4.mft File: itJAYD7G681i9y1G8dwAy34fCy4.mft (raw, json) Hash identifier: z10+XXdLgPhiVY30J8dwWBq2nV6auUZShh+Lgm8bfGo= Subject key identifier: 9F:39:71:60:CE:B4:75:8C:CA:2B:11:56:4A:53:F6:1B:5F:70:64:B3 Authority key identifier: 8A:D2:40:60:3E:C6:EB:CD:62:F7:2D:46:F1:DC:00:CB:7E:1F:0B:2E Certificate issuer: /CN=8ad240603ec6ebcd62f72d46f1dc00cb7e1f0b2e Certificate serial: 019B3C7E329570B5DB80D4575F9074B58019 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/itJAYD7G681i9y1G8dwAy34fCy4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/425149-9c68-41fb-8035-d76c8c739861/1/itJAYD7G681i9y1G8dwAy34fCy4.mft Manifest number: 178D Signing time: Sat 20 Dec 2025 16:01:02 +0000 Manifest this update: Sat 20 Dec 2025 16:01:02 +0000 Manifest next update: Sun 21 Dec 2025 16:01:02 +0000 Files and hashes: 1: 53I3Xwp10sSBL-xtc_jqMRAMZEE.roa (hash: 5EdJdIMmiKFhoj2g+ghy+33i5Mlz/mFCHlU2tz6Caf0=) 2: WIThVUQPtnkqQGydyKr4DwKXGUc.roa (hash: ZG07WmGePqEgXeU18ulf3ZqT0pP1PSE97ftBth4OPug=) 3: WcvcGB5_rIhp6N6ub_yEOU1frVM.roa (hash: SAdoS4J2d6uhrm3KFzHcrPvgGi6wPamf1S8poWnS5sg=) 4: cJgTWrMWwO4cBqHTiI8A-Rbr9t4.roa (hash: +22ciZigEHHnJmjL2vAXhnyOPmbAxXckxCOmW9W102s=) 5: itJAYD7G681i9y1G8dwAy34fCy4.crl (hash: 9Xw2UiPDTvAWJhubr+rk+PiamuyKOTU2xFlJ3imE0Pg=) 6: pOdO9Se2ice1mi6CizmcbokQTm4.roa (hash: vWI5ZOqTV/1a1r4zGntVeUM1tDGMCfxq337Ldn/5HXA=) 7: rD1DyuXlotr5xosPSyeJDExCkk4.roa (hash: vqY5iQLurSqfXlXZ7xp9Cs7NZG2x1ohqMIKv8p8BnDM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/425149-9c68-41fb-8035-d76c8c739861/1/itJAYD7G681i9y1G8dwAy34fCy4.crl rsync://rpki.ripe.net/repository/DEFAULT/f7/425149-9c68-41fb-8035-d76c8c739861/1/itJAYD7G681i9y1G8dwAy34fCy4.mft rsync://rpki.ripe.net/repository/DEFAULT/itJAYD7G681i9y1G8dwAy34fCy4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:7e:32:95:70:b5:db:80:d4:57:5f:90:74:b5:80:19 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8ad240603ec6ebcd62f72d46f1dc00cb7e1f0b2e Validity Not Before: Dec 20 16:01:02 2025 GMT Not After : Dec 21 16:01:02 2025 GMT Subject: CN=9f397160ceb4758cca2b11564a53f61b5f7064b3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:81:bd:48:65:65:e1:4e:9d:3f:bf:2f:27:f6: e4:da:79:c8:7f:93:bc:09:60:46:b2:28:ff:4b:fc: 80:51:16:49:c9:70:04:f2:5f:d4:95:d7:ee:00:e9: 99:ba:f2:23:02:2a:0f:9d:ca:01:19:2c:34:04:c4: f2:13:0e:01:33:e1:cf:ec:4d:63:7b:a4:bc:4e:21: 64:2c:a6:68:e2:13:61:21:8d:23:ab:6c:cf:13:9a: af:23:68:ef:7c:47:25:c8:cc:09:03:65:66:e9:90: 32:f2:06:03:4b:f5:19:a3:eb:0d:34:24:40:90:8c: c4:b9:d0:5f:7c:ed:ef:f6:4b:8c:2a:16:cf:8f:79: f9:6f:74:7f:6e:a1:06:e5:7f:26:15:1c:69:8d:9e: 5c:f7:b4:59:2f:c5:37:5a:74:bb:8f:89:d6:34:3e: f4:26:f5:b3:ac:7c:3a:6b:92:8d:77:26:2e:4f:50: 6a:c4:35:79:19:d9:73:40:06:af:ad:5c:e9:e7:e0: 42:0a:a4:59:a7:39:f9:b2:5e:cd:e2:7d:a4:8e:09: fb:61:47:22:09:3b:9a:03:ea:99:dd:e4:95:05:1e: 39:2c:53:56:f4:7e:29:f1:09:11:8f:e6:ef:f0:c1: cf:42:c8:34:d0:5e:42:f7:bc:d6:63:bd:f0:ce:a0: a0:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:39:71:60:CE:B4:75:8C:CA:2B:11:56:4A:53:F6:1B:5F:70:64:B3 X509v3 Authority Key Identifier: keyid:8A:D2:40:60:3E:C6:EB:CD:62:F7:2D:46:F1:DC:00:CB:7E:1F:0B:2E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/itJAYD7G681i9y1G8dwAy34fCy4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/425149-9c68-41fb-8035-d76c8c739861/1/itJAYD7G681i9y1G8dwAy34fCy4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/425149-9c68-41fb-8035-d76c8c739861/1/itJAYD7G681i9y1G8dwAy34fCy4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 82:01:7c:3b:06:42:c5:b5:5e:1a:98:cb:90:7a:6d:2d:5d:ae: cc:b3:04:db:e3:aa:35:6c:27:9b:dd:f8:f6:92:aa:2e:2a:a6: 33:8c:72:86:93:05:ef:09:86:c2:99:5d:b5:eb:92:43:05:10: 6c:70:e3:70:57:6e:89:a3:12:81:5a:c8:36:e7:a0:23:e2:43: 24:ea:c1:0d:58:51:cb:f5:5f:1e:3e:19:84:f3:33:ef:72:ae: 08:e3:d4:4d:ea:06:e9:92:48:bb:98:85:d4:ea:f8:fb:74:d7: 7c:8d:cd:0a:3b:7b:b4:43:70:6c:83:7d:6e:e3:31:1c:59:c6: 5d:b0:62:74:2c:80:eb:71:96:a1:25:e3:44:e0:a0:b9:02:c4: 91:7d:ce:62:de:7c:9b:38:d1:59:8e:25:a0:88:e8:05:b9:1e: f0:00:13:3a:ef:01:3a:06:76:c7:dd:c8:f3:34:98:8e:dc:2e: a0:98:02:01:70:42:bf:ab:9f:c3:bd:0c:ec:94:86:b1:91:48: 67:bd:8a:6a:e5:50:96:51:c0:25:f6:a9:7f:fc:6f:9c:36:a4: 77:c2:33:da:db:21:30:d6:b9:da:fc:83:94:fd:70:a5:75:f3: a5:40:4f:9f:bf:d2:57:1d:ad:bc:cb:4a:df:e0:25:cc:af:b5: 84:ce:d2:77 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs8fjKVcLXbgNRXX5B0tYAZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhhZDI0MDYwM2VjNmViY2Q2MmY3MmQ0NmYxZGMwMGNiN2Ux ZjBiMmUwHhcNMjUxMjIwMTYwMTAyWhcNMjUxMjIxMTYwMTAyWjAzMTEwLwYDVQQD Eyg5ZjM5NzE2MGNlYjQ3NThjY2EyYjExNTY0YTUzZjYxYjVmNzA2NGIzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnYG9SGVl4U6dP78vJ/bk2nnIf5O8 CWBGsij/S/yAURZJyXAE8l/UldfuAOmZuvIjAioPncoBGSw0BMTyEw4BM+HP7E1j e6S8TiFkLKZo4hNhIY0jq2zPE5qvI2jvfEclyMwJA2Vm6ZAy8gYDS/UZo+sNNCRA kIzEudBffO3v9kuMKhbPj3n5b3R/bqEG5X8mFRxpjZ5c97RZL8U3WnS7j4nWND70 JvWzrHw6a5KNdyYuT1BqxDV5GdlzQAavrVzp5+BCCqRZpzn5sl7N4n2kjgn7YUci CTuaA+qZ3eSVBR45LFNW9H4p8QkRj+bv8MHPQsg00F5C97zWY73wzqCgsQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJ85cWDOtHWMyisRVkpT9htfcGSzMB8GA1UdIwQY MBaAFIrSQGA+xuvNYvctRvHcAMt+HwsuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaXRKQVlEN0c2ODFpOXkxRzhkd0F5MzRmQ3k0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNy80MjUxNDktOWM2OC00MWZiLTgwMzUt ZDc2YzhjNzM5ODYxLzEvaXRKQVlEN0c2ODFpOXkxRzhkd0F5MzRmQ3k0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNy80MjUxNDktOWM2OC00MWZiLTgwMzUtZDc2YzhjNzM5ODYx LzEvaXRKQVlEN0c2ODFpOXkxRzhkd0F5MzRmQ3k0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAggF8OwZC xbVeGpjLkHptLV2uzLME2+OqNWwnm9349pKqLiqmM4xyhpMF7wmGwpldteuSQwUQ bHDjcFduiaMSgVrINuegI+JDJOrBDVhRy/VfHj4ZhPMz73KuCOPUTeoG6ZJIu5iF 1Or4+3TXfI3NCjt7tENwbIN9buMxHFnGXbBidCyA63GWoSXjROCguQLEkX3OYt58 mzjRWY4loIjoBbke8AATOu8BOgZ2x93I8zSYjtwuoJgCAXBCv6ufw70M7JSGsZFI Z72KauVQllHAJfapf/xvnDakd8Iz2tshMNa52vyDlP1wpXXzpUBPn7/SVx2tvMtK 3+AlzK+1hM7Sdw== -----END CERTIFICATE-----Generated at Sun Dec 21 00:52:50 2025 by rpki-client