This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/24fd15-22a9-4bd6-a232-8b36e9d063a1/1/iPNC3REnxnrxEWqx-ZfifLTIhOg.mft File: iPNC3REnxnrxEWqx-ZfifLTIhOg.mft (raw, json) Hash identifier: 4lFhEIOHJRohbvuCn+LutW7wFFREq3cpFgafkPaz1Uo= Subject key identifier: EA:11:EC:1D:E4:F2:D6:AB:A0:6D:E4:BE:CC:B9:6C:70:61:73:D7:D2 Authority key identifier: 88:F3:42:DD:11:27:C6:7A:F1:11:6A:B1:F9:97:E2:7C:B4:C8:84:E8 Certificate issuer: /CN=88f342dd1127c67af1116ab1f997e27cb4c884e8 Certificate serial: 019B1871A75F1C42FAC7136E3A271A80382D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iPNC3REnxnrxEWqx-ZfifLTIhOg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/24fd15-22a9-4bd6-a232-8b36e9d063a1/1/iPNC3REnxnrxEWqx-ZfifLTIhOg.mft Manifest number: 1776 Signing time: Sat 13 Dec 2025 16:01:00 +0000 Manifest this update: Sat 13 Dec 2025 16:01:00 +0000 Manifest next update: Sun 14 Dec 2025 16:01:00 +0000 Files and hashes: 1: 0tVPRt7zVqUIIvmXairhGKRXv0U.roa (hash: dhSo1lkIbUUIXrPA3/k2AFZiXI7dxBUbTf590V+gQts=) 2: iPNC3REnxnrxEWqx-ZfifLTIhOg.crl (hash: dgPo/NFBPLEGsjqzzCEA87lV+uzer92JpbH/RbNUsXY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/24fd15-22a9-4bd6-a232-8b36e9d063a1/1/iPNC3REnxnrxEWqx-ZfifLTIhOg.crl rsync://rpki.ripe.net/repository/DEFAULT/2d/24fd15-22a9-4bd6-a232-8b36e9d063a1/1/iPNC3REnxnrxEWqx-ZfifLTIhOg.mft rsync://rpki.ripe.net/repository/DEFAULT/iPNC3REnxnrxEWqx-ZfifLTIhOg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Dec 2025 16:01:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:18:71:a7:5f:1c:42:fa:c7:13:6e:3a:27:1a:80:38:2d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=88f342dd1127c67af1116ab1f997e27cb4c884e8 Validity Not Before: Dec 13 16:01:00 2025 GMT Not After : Dec 14 16:01:00 2025 GMT Subject: CN=ea11ec1de4f2d6aba06de4beccb96c706173d7d2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:07:02:3f:eb:11:c5:d1:c3:ab:0f:dc:2e:a6: fc:e3:38:15:3f:e4:b8:08:60:ce:59:54:9c:d3:50: db:c6:3e:05:76:01:47:49:c7:46:ae:bd:3b:49:a1: d2:ed:93:be:d1:80:81:a2:0e:2c:30:da:04:02:88: f3:de:9e:3c:90:52:b5:75:ef:08:4b:9e:08:c3:9d: 25:1f:57:b7:56:29:e0:b3:d3:ee:b1:92:b2:2f:11: de:a6:11:7c:b3:4c:2d:d1:33:b0:0e:09:f9:aa:1c: 3d:5d:09:7f:4c:2f:8d:5d:d7:25:ec:10:10:40:4c: 53:19:c4:d1:43:36:16:b5:7c:d7:61:84:c2:06:c7: 91:78:8d:3b:28:c0:8e:94:95:42:4d:49:1a:f6:10: c7:e6:eb:d8:6d:31:da:90:52:bc:36:61:85:12:41: 73:ba:84:5f:00:c1:4e:ff:8a:49:80:5c:84:0e:20: 15:74:50:ee:78:79:5e:e4:d0:c4:19:f8:c7:20:7f: 12:79:86:58:b6:0c:00:e0:9e:2e:46:c9:f9:00:31: d6:1a:2f:11:36:63:7d:99:3b:99:ca:72:c8:f7:20: a4:6c:f9:80:af:2c:89:de:db:5a:2e:28:88:99:87: 81:e0:44:7b:40:72:4c:f4:af:4f:66:a4:18:a7:e2: 2e:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:11:EC:1D:E4:F2:D6:AB:A0:6D:E4:BE:CC:B9:6C:70:61:73:D7:D2 X509v3 Authority Key Identifier: keyid:88:F3:42:DD:11:27:C6:7A:F1:11:6A:B1:F9:97:E2:7C:B4:C8:84:E8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iPNC3REnxnrxEWqx-ZfifLTIhOg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/24fd15-22a9-4bd6-a232-8b36e9d063a1/1/iPNC3REnxnrxEWqx-ZfifLTIhOg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/24fd15-22a9-4bd6-a232-8b36e9d063a1/1/iPNC3REnxnrxEWqx-ZfifLTIhOg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 89:88:89:0b:df:16:cb:49:64:fa:c7:87:80:36:59:12:ef:e2: ab:e6:18:c1:75:cb:1a:20:6c:87:fe:89:af:d4:c6:39:2a:89: ca:94:66:ef:55:1d:1f:32:a1:50:1b:d7:13:14:ab:15:3c:5f: 48:c7:1f:10:dd:6a:d4:39:1c:78:55:5f:a7:36:14:ba:88:a3: 7f:bc:6b:b6:7b:c2:12:ca:d0:ca:38:fb:1a:53:c3:96:a4:39: 81:0a:bb:62:c2:ed:14:c3:b8:61:fb:6a:20:26:bc:68:a1:84: 64:49:83:3d:27:2d:0d:d7:f7:50:64:77:6d:33:12:95:5a:76: 57:50:0b:0b:8c:26:e5:e5:37:3c:00:23:64:8f:fc:66:47:4e: c7:81:1b:45:77:f2:e9:a4:0a:8b:cc:50:c0:5f:9a:1d:22:36: e7:19:1d:8d:4f:d0:54:22:19:7b:78:e1:8a:43:47:78:5b:c0: 6f:7f:6f:d4:0d:83:a0:96:34:ee:cf:58:27:46:73:4d:29:94: 03:32:04:59:57:41:44:e5:57:f3:95:ef:85:af:11:6a:13:3b: f3:2b:f2:85:43:78:6b:2b:51:e9:90:fb:fb:55:5f:36:76:52: d7:ee:74:16:60:32:76:11:aa:22:9d:30:00:9b:01:97:da:80: 6f:93:6e:01 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsYcadfHEL6xxNuOicagDgtMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg4ZjM0MmRkMTEyN2M2N2FmMTExNmFiMWY5OTdlMjdjYjRj ODg0ZTgwHhcNMjUxMjEzMTYwMTAwWhcNMjUxMjE0MTYwMTAwWjAzMTEwLwYDVQQD EyhlYTExZWMxZGU0ZjJkNmFiYTA2ZGU0YmVjY2I5NmM3MDYxNzNkN2QyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7QcCP+sRxdHDqw/cLqb84zgVP+S4 CGDOWVSc01Dbxj4FdgFHScdGrr07SaHS7ZO+0YCBog4sMNoEAojz3p48kFK1de8I S54Iw50lH1e3Vings9PusZKyLxHephF8s0wt0TOwDgn5qhw9XQl/TC+NXdcl7BAQ QExTGcTRQzYWtXzXYYTCBseReI07KMCOlJVCTUka9hDH5uvYbTHakFK8NmGFEkFz uoRfAMFO/4pJgFyEDiAVdFDueHle5NDEGfjHIH8SeYZYtgwA4J4uRsn5ADHWGi8R NmN9mTuZynLI9yCkbPmAryyJ3ttaLiiImYeB4ER7QHJM9K9PZqQYp+IuNQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOoR7B3k8taroG3kvsy5bHBhc9fSMB8GA1UdIwQY MBaAFIjzQt0RJ8Z68RFqsfmX4ny0yIToMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaVBOQzNSRW54bnJ4RVdxeC1aZmlmTFRJaE9nLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZC8yNGZkMTUtMjJhOS00YmQ2LWEyMzIt OGIzNmU5ZDA2M2ExLzEvaVBOQzNSRW54bnJ4RVdxeC1aZmlmTFRJaE9nLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZC8yNGZkMTUtMjJhOS00YmQ2LWEyMzItOGIzNmU5ZDA2M2Ex LzEvaVBOQzNSRW54bnJ4RVdxeC1aZmlmTFRJaE9nLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiYiJC98W y0lk+seHgDZZEu/iq+YYwXXLGiBsh/6Jr9TGOSqJypRm71UdHzKhUBvXExSrFTxf SMcfEN1q1DkceFVfpzYUuoijf7xrtnvCEsrQyjj7GlPDlqQ5gQq7YsLtFMO4Yftq ICa8aKGEZEmDPSctDdf3UGR3bTMSlVp2V1ALC4wm5eU3PAAjZI/8ZkdOx4EbRXfy 6aQKi8xQwF+aHSI25xkdjU/QVCIZe3jhikNHeFvAb39v1A2DoJY07s9YJ0ZzTSmU AzIEWVdBROVX85Xvha8RahM78yvyhUN4aytR6ZD7+1VfNnZS1+50FmAydhGqIp0w AJsBl9qAb5NuAQ== -----END CERTIFICATE-----Generated at Sun Dec 14 01:54:09 2025 by rpki-client