This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/9b4900-085a-4a0e-a98f-c6db34c2f7e9/1/IiT9ZQA8OUkKvqqeHv5fICRtx3s.mft File: IiT9ZQA8OUkKvqqeHv5fICRtx3s.mft (raw, json) Hash identifier: 2L1TqlYfuunyoiIE6t4PbZaB/id0bYlNnew1eywtu8o= Subject key identifier: 41:4E:C6:EC:54:B7:0D:2B:04:CA:7F:70:AF:7F:80:E1:20:EE:19:AA Authority key identifier: 22:24:FD:65:00:3C:39:49:0A:BE:AA:9E:1E:FE:5F:20:24:6D:C7:7B Certificate issuer: /CN=2224fd65003c39490abeaa9e1efe5f20246dc77b Certificate serial: 019B51BCC059B3860A393BB127B778B0F827 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IiT9ZQA8OUkKvqqeHv5fICRtx3s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/9b4900-085a-4a0e-a98f-c6db34c2f7e9/1/IiT9ZQA8OUkKvqqeHv5fICRtx3s.mft Manifest number: 0E0F Signing time: Wed 24 Dec 2025 19:01:23 +0000 Manifest this update: Wed 24 Dec 2025 19:01:23 +0000 Manifest next update: Thu 25 Dec 2025 19:01:23 +0000 Files and hashes: 1: IiT9ZQA8OUkKvqqeHv5fICRtx3s.crl (hash: ypYH6QNQejUMVDvuSz7TnFAUTwHfGNAGaupPfpetSIY=) 2: gJhF5evxe8g-iDe3hBXACq-nKPk.roa (hash: qM5+n5uw27ndltKhnl7N0lO0fW10CmbET7TyhvcxHok=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/9b4900-085a-4a0e-a98f-c6db34c2f7e9/1/IiT9ZQA8OUkKvqqeHv5fICRtx3s.crl rsync://rpki.ripe.net/repository/DEFAULT/fe/9b4900-085a-4a0e-a98f-c6db34c2f7e9/1/IiT9ZQA8OUkKvqqeHv5fICRtx3s.mft rsync://rpki.ripe.net/repository/DEFAULT/IiT9ZQA8OUkKvqqeHv5fICRtx3s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 14:30:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:51:bc:c0:59:b3:86:0a:39:3b:b1:27:b7:78:b0:f8:27 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2224fd65003c39490abeaa9e1efe5f20246dc77b Validity Not Before: Dec 24 19:01:23 2025 GMT Not After : Dec 25 19:01:23 2025 GMT Subject: CN=414ec6ec54b70d2b04ca7f70af7f80e120ee19aa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:cd:1e:d5:f5:47:af:79:ca:b3:5e:65:c4:64: e3:f1:f8:f9:90:86:05:7d:c8:97:0f:0c:ac:6c:07: ad:bb:29:03:33:1d:d4:8c:37:47:f1:45:f8:a3:1e: 27:9c:4e:81:69:f2:0e:14:68:8c:1c:28:2e:29:de: 2a:3a:f0:a1:df:1e:f6:b2:da:15:96:3d:aa:c1:d3: 99:54:2f:ab:6c:29:04:9f:72:06:18:c5:b8:56:cf: 50:58:57:74:0b:d0:32:54:02:d5:5c:db:a1:c3:94: 22:cd:a6:1d:e8:fe:bf:7b:22:74:50:61:af:b9:fe: 6f:16:61:1a:6c:33:d9:d8:c6:6c:15:6e:42:de:91: ff:d5:f2:05:04:16:a9:e0:2d:65:f8:48:92:27:e8: 29:8e:3e:8f:75:04:50:2a:32:02:bb:7f:c1:8f:35: b2:3a:4b:10:17:40:6c:f8:5b:8c:ab:7a:89:37:6b: fd:f2:95:72:2c:69:58:de:80:a4:98:0a:1f:dd:97: a2:55:6f:dd:9f:15:ae:90:ea:ad:93:29:43:4d:97: 5c:08:77:45:79:c2:c8:f7:26:6f:00:5f:a5:63:b5: bd:20:f0:21:cb:25:f2:88:11:7f:8f:42:9d:1e:8a: f8:95:82:f7:7e:6f:02:73:5a:0d:50:40:93:84:55: 09:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:4E:C6:EC:54:B7:0D:2B:04:CA:7F:70:AF:7F:80:E1:20:EE:19:AA X509v3 Authority Key Identifier: keyid:22:24:FD:65:00:3C:39:49:0A:BE:AA:9E:1E:FE:5F:20:24:6D:C7:7B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IiT9ZQA8OUkKvqqeHv5fICRtx3s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/9b4900-085a-4a0e-a98f-c6db34c2f7e9/1/IiT9ZQA8OUkKvqqeHv5fICRtx3s.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/9b4900-085a-4a0e-a98f-c6db34c2f7e9/1/IiT9ZQA8OUkKvqqeHv5fICRtx3s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0f:e8:1b:ec:b0:87:35:c8:71:9b:b1:39:22:8e:72:cb:3a:1d: 8c:5b:2a:b9:80:33:91:e3:31:b0:08:18:e3:ed:cd:64:9b:97: 51:79:fb:5c:b6:3b:bb:db:1d:28:10:33:a4:26:f6:22:9f:33: 12:5b:80:47:b3:ba:b5:43:eb:7e:27:29:18:c0:5c:4b:c8:72: fe:26:18:3d:a0:92:d8:4e:03:4f:74:f0:69:d3:91:28:e5:1c: d0:0e:1e:b8:ef:df:a7:34:54:89:4d:11:75:8b:1b:a9:f0:c7: 0c:88:c8:bb:53:4e:e4:55:15:d4:52:06:81:e5:6d:6e:80:0d: 16:6f:db:08:43:bc:fe:88:09:b2:b2:ad:c0:dc:61:3c:2a:85: d6:de:19:e4:05:59:4c:57:a4:a5:af:65:29:fc:00:4d:b8:0d: cc:7c:bf:73:97:ac:8e:4f:a0:28:06:34:5b:a2:13:23:86:15: c4:75:5a:51:7b:84:c4:4b:18:16:3e:7a:09:5c:00:01:4d:11: 2e:88:1b:a2:de:12:f0:e9:76:c5:10:46:91:f2:62:89:ce:a0: 12:13:78:ef:b0:38:9e:32:7e:57:9b:af:c1:22:6c:cb:9b:61: a4:cc:73:b1:20:12:ae:49:49:c7:ea:7e:95:bc:f7:14:dd:9f: 0a:3a:46:50 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtRvMBZs4YKOTuxJ7d4sPgnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIyMjRmZDY1MDAzYzM5NDkwYWJlYWE5ZTFlZmU1ZjIwMjQ2 ZGM3N2IwHhcNMjUxMjI0MTkwMTIzWhcNMjUxMjI1MTkwMTIzWjAzMTEwLwYDVQQD Eyg0MTRlYzZlYzU0YjcwZDJiMDRjYTdmNzBhZjdmODBlMTIwZWUxOWFhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmM0e1fVHr3nKs15lxGTj8fj5kIYF fciXDwysbAetuykDMx3UjDdH8UX4ox4nnE6BafIOFGiMHCguKd4qOvCh3x72stoV lj2qwdOZVC+rbCkEn3IGGMW4Vs9QWFd0C9AyVALVXNuhw5QizaYd6P6/eyJ0UGGv uf5vFmEabDPZ2MZsFW5C3pH/1fIFBBap4C1l+EiSJ+gpjj6PdQRQKjICu3/BjzWy OksQF0Bs+FuMq3qJN2v98pVyLGlY3oCkmAof3ZeiVW/dnxWukOqtkylDTZdcCHdF ecLI9yZvAF+lY7W9IPAhyyXyiBF/j0KdHor4lYL3fm8Cc1oNUECThFUJOwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEFOxuxUtw0rBMp/cK9/gOEg7hmqMB8GA1UdIwQY MBaAFCIk/WUAPDlJCr6qnh7+XyAkbcd7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSWlUOVpRQThPVWtLdnFxZUh2NWZJQ1J0eDNzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS85YjQ5MDAtMDg1YS00YTBlLWE5OGYt YzZkYjM0YzJmN2U5LzEvSWlUOVpRQThPVWtLdnFxZUh2NWZJQ1J0eDNzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZS85YjQ5MDAtMDg1YS00YTBlLWE5OGYtYzZkYjM0YzJmN2U5 LzEvSWlUOVpRQThPVWtLdnFxZUh2NWZJQ1J0eDNzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAD+gb7LCH Nchxm7E5Io5yyzodjFsquYAzkeMxsAgY4+3NZJuXUXn7XLY7u9sdKBAzpCb2Ip8z EluAR7O6tUPrficpGMBcS8hy/iYYPaCS2E4DT3TwadORKOUc0A4euO/fpzRUiU0R dYsbqfDHDIjIu1NO5FUV1FIGgeVtboANFm/bCEO8/ogJsrKtwNxhPCqF1t4Z5AVZ TFekpa9lKfwATbgNzHy/c5esjk+gKAY0W6ITI4YVxHVaUXuExEsYFj56CVwAAU0R Logbot4S8Ol2xRBGkfJiic6gEhN477A4njJ+V5uvwSJsy5thpMxzsSASrklJx+p+ lbz3FN2fCjpGUA== -----END CERTIFICATE-----Generated at Wed Dec 24 20:00:17 2025 by rpki-client