This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/09db8c-6df0-4cee-ae07-a1e24aaf610f/1/iH-jc3HX1Fk7opDvRWaeoN4pN4I.mft File: iH-jc3HX1Fk7opDvRWaeoN4pN4I.mft (raw, json) Hash identifier: 4I+7ACMKTEQGvrb2IBQrQrzep+w8tvcbC+tdYvCGNr4= Subject key identifier: 69:81:8B:94:A7:77:C9:13:AA:77:A5:9F:F1:35:C0:D1:39:A1:12:F2 Authority key identifier: 88:7F:A3:73:71:D7:D4:59:3B:A2:90:EF:45:66:9E:A0:DE:29:37:82 Certificate issuer: /CN=887fa37371d7d4593ba290ef45669ea0de293782 Certificate serial: 019B0E26055F0E861011931E216304D441FE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iH-jc3HX1Fk7opDvRWaeoN4pN4I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/09db8c-6df0-4cee-ae07-a1e24aaf610f/1/iH-jc3HX1Fk7opDvRWaeoN4pN4I.mft Manifest number: 0892 Signing time: Thu 11 Dec 2025 16:02:11 +0000 Manifest this update: Thu 11 Dec 2025 16:02:11 +0000 Manifest next update: Fri 12 Dec 2025 16:02:11 +0000 Files and hashes: 1: XWaEMNo4oCmJKw7xuT_lUqU1a9o.roa (hash: vlh1Ps1w/BBZ8U+fD5oVlO0yHpfRUnw+NHa2xAJ40qE=) 2: iH-jc3HX1Fk7opDvRWaeoN4pN4I.crl (hash: YqZ6cX7GARkjcAnuBgCgtqSkoupsbKvko1bp4hE5ZqY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/09db8c-6df0-4cee-ae07-a1e24aaf610f/1/iH-jc3HX1Fk7opDvRWaeoN4pN4I.crl rsync://rpki.ripe.net/repository/DEFAULT/3b/09db8c-6df0-4cee-ae07-a1e24aaf610f/1/iH-jc3HX1Fk7opDvRWaeoN4pN4I.mft rsync://rpki.ripe.net/repository/DEFAULT/iH-jc3HX1Fk7opDvRWaeoN4pN4I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 14:45:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0e:26:05:5f:0e:86:10:11:93:1e:21:63:04:d4:41:fe Signature Algorithm: sha256WithRSAEncryption Issuer: CN=887fa37371d7d4593ba290ef45669ea0de293782 Validity Not Before: Dec 11 16:02:11 2025 GMT Not After : Dec 12 16:02:11 2025 GMT Subject: CN=69818b94a777c913aa77a59ff135c0d139a112f2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:af:be:04:ef:02:5f:43:0f:58:bb:7f:d4:28: 3a:34:22:87:7c:ed:24:05:13:68:35:a5:0c:a8:f1: 83:79:bf:82:d5:88:4f:94:4e:82:ed:34:f3:05:c7: eb:1c:fc:46:92:47:63:8c:a5:75:aa:c2:aa:b7:df: cf:ca:6f:27:ec:80:ee:15:64:58:44:a8:11:c2:b6: 32:9c:81:07:2c:a6:02:9d:b0:6b:b6:13:bb:47:a6: 1e:87:00:ea:b8:a5:c8:48:8b:a1:ca:c1:bf:51:d1: a1:62:1c:5b:98:38:a5:94:0d:10:1d:6a:42:40:16: 07:5a:6d:b2:57:9d:46:a3:6c:25:91:23:7d:e1:80: 32:bd:16:50:d5:9d:e4:a7:04:91:ad:2d:f0:19:a9: 62:78:f5:2e:47:57:35:24:8c:3c:92:8a:3b:70:12: 1a:4b:29:8a:20:48:c6:29:78:56:b8:fb:1c:1e:59: c3:93:e3:58:50:14:9a:81:85:f3:3b:ed:39:df:36: 25:93:a5:92:af:79:18:cc:de:56:d7:dc:ec:46:6a: 60:05:60:22:df:ae:3c:b9:bd:0f:48:97:7c:fd:b6: 79:84:f4:da:f5:06:9e:29:cf:41:d2:64:d5:5c:14: 77:ca:91:58:54:c9:08:e8:24:58:1a:33:bc:06:7a: 5e:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:81:8B:94:A7:77:C9:13:AA:77:A5:9F:F1:35:C0:D1:39:A1:12:F2 X509v3 Authority Key Identifier: keyid:88:7F:A3:73:71:D7:D4:59:3B:A2:90:EF:45:66:9E:A0:DE:29:37:82 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iH-jc3HX1Fk7opDvRWaeoN4pN4I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/09db8c-6df0-4cee-ae07-a1e24aaf610f/1/iH-jc3HX1Fk7opDvRWaeoN4pN4I.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/09db8c-6df0-4cee-ae07-a1e24aaf610f/1/iH-jc3HX1Fk7opDvRWaeoN4pN4I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a5:46:8a:8f:14:a8:bf:e8:76:07:b7:ab:ad:c0:b5:27:ec:e4: 42:22:77:05:fd:61:0a:19:96:b6:b1:13:37:68:c2:96:8b:50: 0a:b0:2f:61:1d:5f:0b:da:d0:22:2c:fe:b7:4b:a8:bf:d6:bf: fd:20:dc:54:c4:15:6c:bf:04:2b:af:9b:a9:fa:18:92:a1:73: 6d:c6:8c:3e:c5:82:f5:30:ec:61:58:16:42:ab:22:62:62:30: 48:46:b7:87:0f:a7:ec:65:d7:99:8a:82:a9:39:2a:c0:4b:96: 89:63:ca:d9:ce:bb:06:6e:d0:3a:71:8c:47:cb:55:bc:42:4e: 7c:8a:eb:d4:a6:ed:49:cb:65:bd:60:bc:f4:d0:ee:f3:ae:53: 18:ad:f9:c2:6a:79:90:26:dc:e8:cb:9a:dc:de:56:6a:33:c7: 56:ac:9a:34:f4:ed:fc:0e:17:62:04:93:bb:e8:30:1b:51:e2: 0e:72:af:4e:27:35:75:31:3c:49:2e:b7:5a:a0:c4:e0:5d:ed: 0a:a4:a4:70:9a:50:0a:52:bd:fc:0b:7f:be:bf:fa:d5:ae:bb: be:fd:3a:8c:d3:37:29:b1:f2:f0:49:06:d8:0f:4f:5a:80:99: e0:d7:0a:ce:c4:46:79:8f:8d:cd:8b:53:a4:f9:54:ce:06:e3: b0:3b:ae:0a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsOJgVfDoYQEZMeIWME1EH+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg4N2ZhMzczNzFkN2Q0NTkzYmEyOTBlZjQ1NjY5ZWEwZGUy OTM3ODIwHhcNMjUxMjExMTYwMjExWhcNMjUxMjEyMTYwMjExWjAzMTEwLwYDVQQD Eyg2OTgxOGI5NGE3NzdjOTEzYWE3N2E1OWZmMTM1YzBkMTM5YTExMmYyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtK++BO8CX0MPWLt/1Cg6NCKHfO0k BRNoNaUMqPGDeb+C1YhPlE6C7TTzBcfrHPxGkkdjjKV1qsKqt9/Pym8n7IDuFWRY RKgRwrYynIEHLKYCnbBrthO7R6YehwDquKXISIuhysG/UdGhYhxbmDillA0QHWpC QBYHWm2yV51Go2wlkSN94YAyvRZQ1Z3kpwSRrS3wGaliePUuR1c1JIw8koo7cBIa SymKIEjGKXhWuPscHlnDk+NYUBSagYXzO+053zYlk6WSr3kYzN5W19zsRmpgBWAi 3648ub0PSJd8/bZ5hPTa9QaeKc9B0mTVXBR3ypFYVMkI6CRYGjO8Bnpe6QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGmBi5Snd8kTqneln/E1wNE5oRLyMB8GA1UdIwQY MBaAFIh/o3Nx19RZO6KQ70VmnqDeKTeCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaUgtamMzSFgxRms3b3BEdlJXYWVvTjRwTjRJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYi8wOWRiOGMtNmRmMC00Y2VlLWFlMDct YTFlMjRhYWY2MTBmLzEvaUgtamMzSFgxRms3b3BEdlJXYWVvTjRwTjRJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYi8wOWRiOGMtNmRmMC00Y2VlLWFlMDctYTFlMjRhYWY2MTBm LzEvaUgtamMzSFgxRms3b3BEdlJXYWVvTjRwTjRJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApUaKjxSo v+h2B7errcC1J+zkQiJ3Bf1hChmWtrETN2jClotQCrAvYR1fC9rQIiz+t0uov9a/ /SDcVMQVbL8EK6+bqfoYkqFzbcaMPsWC9TDsYVgWQqsiYmIwSEa3hw+n7GXXmYqC qTkqwEuWiWPK2c67Bm7QOnGMR8tVvEJOfIrr1KbtSctlvWC89NDu865TGK35wmp5 kCbc6Mua3N5WajPHVqyaNPTt/A4XYgSTu+gwG1HiDnKvTic1dTE8SS63WqDE4F3t CqSkcJpQClK9/At/vr/61a67vv06jNM3KbHy8EkG2A9PWoCZ4NcKzsRGeY+NzYtT pPlUzgbjsDuuCg== -----END CERTIFICATE-----Generated at Thu Dec 11 23:20:19 2025 by rpki-client