This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/2a1ce9-fb4c-41ee-9ff6-316ef261f4a5/1/IT4dUNUiiL7oDupDVXcBhxJAm74.mft File: IT4dUNUiiL7oDupDVXcBhxJAm74.mft (raw, json) Hash identifier: 4J12rd+nu5aep5f/FIximomGw0zzm9JggaY1d2+J8o8= Subject key identifier: 42:92:03:1F:60:8A:09:37:AF:CE:AD:76:C2:0E:2C:3F:64:8E:1C:D7 Authority key identifier: 21:3E:1D:50:D5:22:88:BE:E8:0E:EA:43:55:77:01:87:12:40:9B:BE Certificate issuer: /CN=213e1d50d52288bee80eea435577018712409bbe Certificate serial: 019AF9F981700C7E59CD33F61E920EAADA02 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IT4dUNUiiL7oDupDVXcBhxJAm74.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/2a1ce9-fb4c-41ee-9ff6-316ef261f4a5/1/IT4dUNUiiL7oDupDVXcBhxJAm74.mft Manifest number: 12B1 Signing time: Sun 07 Dec 2025 18:01:09 +0000 Manifest this update: Sun 07 Dec 2025 18:01:09 +0000 Manifest next update: Mon 08 Dec 2025 18:01:09 +0000 Files and hashes: 1: 76krOMMFj4xGzKVVHko6uuDROxo.roa (hash: ceX2KDmhx3x4hNPX/8MXCJQ5KaH4yEnp1JFYHt1MSdY=) 2: F5qz-Vy2ncltsniwS8n2KgCCfq0.roa (hash: kxMCsu4yD7h4P+QzcS37eIb+y0MEuK5iSa4JgSytJ7M=) 3: IT4dUNUiiL7oDupDVXcBhxJAm74.crl (hash: +W5P+n90GNUTsXAtJ1Z9Y0kAFCsdsaKYPHJm0ShjIXg=) 4: StSC9N03azFTttR3EoIav2MRsZc.roa (hash: Cu2Gg7GKVcYUuysW1qolVhXM9Kgp01W96yjaPNDKJxk=) 5: ewZSVtLlMKbZRioDRSGf8H0IaLA.roa (hash: cBUrQBxHZc9doLajihiHlq4PDgUK5KQSHA/948O3rQg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/2a1ce9-fb4c-41ee-9ff6-316ef261f4a5/1/IT4dUNUiiL7oDupDVXcBhxJAm74.crl rsync://rpki.ripe.net/repository/DEFAULT/37/2a1ce9-fb4c-41ee-9ff6-316ef261f4a5/1/IT4dUNUiiL7oDupDVXcBhxJAm74.mft rsync://rpki.ripe.net/repository/DEFAULT/IT4dUNUiiL7oDupDVXcBhxJAm74.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 08 Dec 2025 17:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f9:f9:81:70:0c:7e:59:cd:33:f6:1e:92:0e:aa:da:02 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=213e1d50d52288bee80eea435577018712409bbe Validity Not Before: Dec 7 18:01:09 2025 GMT Not After : Dec 8 18:01:09 2025 GMT Subject: CN=4292031f608a0937afcead76c20e2c3f648e1cd7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:9e:e0:c0:48:2e:ad:b2:0d:c5:d4:a5:2f:0c: 28:e7:f2:c1:76:c1:50:15:5f:f2:f2:36:57:b1:16: 92:0e:b8:e3:a4:83:52:ca:31:5e:82:b1:12:3f:ee: 51:b5:89:92:ff:20:57:2d:13:30:96:0c:e2:b2:7e: d2:26:26:9e:9c:b7:9a:11:1b:43:86:2d:cc:60:ef: d4:e9:10:a4:d6:0f:05:99:d4:53:c6:f1:57:5f:52: 65:b3:97:d7:1f:a1:7b:8e:e6:46:8b:96:84:3b:f9: 90:d5:d7:92:0d:7c:3e:ef:be:a5:17:f1:ed:20:15: 4a:19:71:62:8d:e6:d3:8e:78:45:9e:7c:fc:d0:46: 63:36:7b:9c:61:1e:b9:aa:16:fe:10:f7:bf:ff:a6: 72:40:f0:19:eb:e2:07:07:8c:8d:7b:b9:9f:12:bc: 3b:7e:2b:12:3e:15:b7:a0:76:15:98:56:4a:fc:07: 48:1b:8f:92:d9:a1:92:79:14:b0:29:1e:1d:0a:a5: 1d:de:99:4c:b3:c3:dc:18:da:5a:8d:5e:db:b3:c5: 20:36:be:ef:34:21:c2:4e:2b:45:72:b2:2d:8f:dd: a6:4a:99:c2:ca:b5:6b:48:42:c8:6d:80:ba:af:27: 44:d8:7a:29:92:ab:b6:d0:b3:cb:9b:c0:2d:3a:d2: c0:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:92:03:1F:60:8A:09:37:AF:CE:AD:76:C2:0E:2C:3F:64:8E:1C:D7 X509v3 Authority Key Identifier: keyid:21:3E:1D:50:D5:22:88:BE:E8:0E:EA:43:55:77:01:87:12:40:9B:BE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IT4dUNUiiL7oDupDVXcBhxJAm74.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/2a1ce9-fb4c-41ee-9ff6-316ef261f4a5/1/IT4dUNUiiL7oDupDVXcBhxJAm74.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/37/2a1ce9-fb4c-41ee-9ff6-316ef261f4a5/1/IT4dUNUiiL7oDupDVXcBhxJAm74.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 93:02:e6:23:1b:0d:c8:c3:b7:d6:b9:c6:45:2f:96:03:b9:55: 89:70:e8:50:a4:7f:3d:9b:bc:6d:dd:0a:51:dc:f0:ff:8a:44: 6a:76:f1:0f:09:ba:4a:0d:f1:f1:84:6e:7b:96:cd:13:63:62: 3c:47:08:ef:75:9d:81:a5:b6:6f:06:0e:72:d0:6c:18:0e:43: 7f:ad:8d:3e:31:64:32:0f:74:27:c4:17:e8:42:16:48:4a:56: 16:ff:4a:ec:88:14:c9:cb:ab:5c:37:fe:ad:78:aa:9d:88:eb: 6a:8a:e7:b0:61:c5:34:0a:26:c2:f5:0c:05:f4:1e:6c:fe:83: c0:5c:ac:2a:78:ca:eb:06:7d:25:2a:87:81:13:ee:34:dd:6a: e3:42:9b:50:5a:ae:73:83:93:2c:c8:42:20:3e:4a:2b:2e:11: e0:38:7c:32:ff:64:e7:ca:79:a2:62:50:ae:26:56:b5:9a:a0: f6:28:0c:2b:d2:f9:67:4a:4a:bc:e7:54:f0:79:fa:07:d0:6f: 21:24:4c:af:dd:c9:71:84:bd:ca:8b:6f:27:e2:9c:04:db:d1: 26:f2:68:22:69:be:53:91:0b:f1:a3:e6:85:63:50:56:1d:8b: e2:ba:0a:b8:89:33:a3:c5:6f:20:b5:eb:b7:5e:f2:5f:70:a7: 54:de:1b:88 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr5+YFwDH5ZzTP2HpIOqtoCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIxM2UxZDUwZDUyMjg4YmVlODBlZWE0MzU1NzcwMTg3MTI0 MDliYmUwHhcNMjUxMjA3MTgwMTA5WhcNMjUxMjA4MTgwMTA5WjAzMTEwLwYDVQQD Eyg0MjkyMDMxZjYwOGEwOTM3YWZjZWFkNzZjMjBlMmMzZjY0OGUxY2Q3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA257gwEgurbINxdSlLwwo5/LBdsFQ FV/y8jZXsRaSDrjjpINSyjFegrESP+5RtYmS/yBXLRMwlgzisn7SJiaenLeaERtD hi3MYO/U6RCk1g8FmdRTxvFXX1Jls5fXH6F7juZGi5aEO/mQ1deSDXw+776lF/Ht IBVKGXFijebTjnhFnnz80EZjNnucYR65qhb+EPe//6ZyQPAZ6+IHB4yNe7mfErw7 fisSPhW3oHYVmFZK/AdIG4+S2aGSeRSwKR4dCqUd3plMs8PcGNpajV7bs8UgNr7v NCHCTitFcrItj92mSpnCyrVrSELIbYC6rydE2Hopkqu20LPLm8AtOtLALQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEKSAx9gigk3r86tdsIOLD9kjhzXMB8GA1UdIwQY MBaAFCE+HVDVIoi+6A7qQ1V3AYcSQJu+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSVQ0ZFVOVWlpTDdvRHVwRFZYY0JoeEpBbTc0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNy8yYTFjZTktZmI0Yy00MWVlLTlmZjYt MzE2ZWYyNjFmNGE1LzEvSVQ0ZFVOVWlpTDdvRHVwRFZYY0JoeEpBbTc0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNy8yYTFjZTktZmI0Yy00MWVlLTlmZjYtMzE2ZWYyNjFmNGE1 LzEvSVQ0ZFVOVWlpTDdvRHVwRFZYY0JoeEpBbTc0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkwLmIxsN yMO31rnGRS+WA7lViXDoUKR/PZu8bd0KUdzw/4pEanbxDwm6Sg3x8YRue5bNE2Ni PEcI73WdgaW2bwYOctBsGA5Df62NPjFkMg90J8QX6EIWSEpWFv9K7IgUycurXDf+ rXiqnYjraornsGHFNAomwvUMBfQebP6DwFysKnjK6wZ9JSqHgRPuNN1q40KbUFqu c4OTLMhCID5KKy4R4Dh8Mv9k58p5omJQriZWtZqg9igMK9L5Z0pKvOdU8Hn6B9Bv ISRMr93JcYS9yotvJ+KcBNvRJvJoImm+U5EL8aPmhWNQVh2L4roKuIkzo8VvILXr t17yX3CnVN4biA== -----END CERTIFICATE-----Generated at Sun Dec 7 22:02:09 2025 by rpki-client