This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/8fc261-bff8-4490-8b69-009739f7e55c/1/10itqKdHT1rZkMmB_2snzj3hRxM.mft File: 10itqKdHT1rZkMmB_2snzj3hRxM.mft (raw, json) Hash identifier: uJx3sjmM1/XCdvrgLyKknHwg0uQsFNZjZ/Jqass+MpA= Subject key identifier: 24:32:13:5E:63:87:C3:38:FB:1E:E2:AC:61:14:55:98:E4:3F:F5:98 Authority key identifier: D7:48:AD:A8:A7:47:4F:5A:D9:90:C9:81:FF:6B:27:CE:3D:E1:47:13 Certificate issuer: /CN=d748ada8a7474f5ad990c981ff6b27ce3de14713 Certificate serial: 019B1CBC212CABD1CF23115E0A1796399CD6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/10itqKdHT1rZkMmB_2snzj3hRxM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/8fc261-bff8-4490-8b69-009739f7e55c/1/10itqKdHT1rZkMmB_2snzj3hRxM.mft Manifest number: 93 Signing time: Sun 14 Dec 2025 12:00:49 +0000 Manifest this update: Sun 14 Dec 2025 12:00:49 +0000 Manifest next update: Mon 15 Dec 2025 12:00:49 +0000 Files and hashes: 1: 10itqKdHT1rZkMmB_2snzj3hRxM.crl (hash: KXmMsHbeDynO3U5UcbrRBJ8oCpqQpWwXSHBiNjHq5BU=) 2: PkscByip9HCjcCDlJO2uYujjYDg.roa (hash: edTZgmleKt6WCIy8Cw2+p9r62NxbuqSZiXd6FCg4ClY=) 3: y3ziAMAG8XxgkWIdVv0WfxIMrGQ.roa (hash: Bk60cLKzbGKlYVw0cTFXtgYaf3rDfp8I2gvBkNj7UQ0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/8fc261-bff8-4490-8b69-009739f7e55c/1/10itqKdHT1rZkMmB_2snzj3hRxM.crl rsync://rpki.ripe.net/repository/DEFAULT/42/8fc261-bff8-4490-8b69-009739f7e55c/1/10itqKdHT1rZkMmB_2snzj3hRxM.mft rsync://rpki.ripe.net/repository/DEFAULT/10itqKdHT1rZkMmB_2snzj3hRxM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 15 Dec 2025 12:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:1c:bc:21:2c:ab:d1:cf:23:11:5e:0a:17:96:39:9c:d6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d748ada8a7474f5ad990c981ff6b27ce3de14713 Validity Not Before: Dec 14 12:00:49 2025 GMT Not After : Dec 15 12:00:49 2025 GMT Subject: CN=2432135e6387c338fb1ee2ac61145598e43ff598 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:51:70:c5:9c:e7:97:08:28:8c:a1:f8:9a:9f: 2b:de:a5:f6:3f:9b:ff:0c:bc:0c:35:59:cb:38:74: a2:d4:03:cc:8d:4e:f2:5e:43:38:d7:dc:95:67:c3: 87:08:b8:3c:10:52:e6:ee:76:99:60:f2:b6:1e:0e: 96:c3:00:0d:5a:aa:6d:92:fa:2e:b0:ba:16:9d:7d: 3d:8b:cc:8c:69:d7:c9:4a:5b:81:56:43:e2:29:bd: dc:e0:db:c5:0c:5a:35:b1:fe:f9:09:9f:f5:b6:27: 69:c4:fa:56:98:31:58:6f:14:a7:36:ce:f9:58:95: 21:99:62:af:d6:59:05:eb:dc:97:dd:b6:53:fc:ab: be:cb:bc:5b:58:a0:54:45:f5:bd:d0:48:f4:e7:ee: 3f:13:88:de:c2:f9:94:64:6b:e9:57:50:a5:90:84: d4:60:6a:b5:1b:82:2b:a8:5d:1a:1d:36:71:7f:86: c4:87:98:cb:a5:43:ff:14:cb:fe:2c:5d:36:6e:d8: d3:26:87:e9:61:f8:89:0d:9d:49:cc:7c:6d:74:84: 3c:2a:71:d0:09:51:23:1c:88:95:26:6b:75:32:c5: 23:24:be:25:38:5a:39:a0:1a:de:96:ec:ec:e8:c3: 35:c5:76:b9:3b:17:2f:2b:e7:76:8f:e4:b8:69:62: d1:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:32:13:5E:63:87:C3:38:FB:1E:E2:AC:61:14:55:98:E4:3F:F5:98 X509v3 Authority Key Identifier: keyid:D7:48:AD:A8:A7:47:4F:5A:D9:90:C9:81:FF:6B:27:CE:3D:E1:47:13 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/10itqKdHT1rZkMmB_2snzj3hRxM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/8fc261-bff8-4490-8b69-009739f7e55c/1/10itqKdHT1rZkMmB_2snzj3hRxM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/42/8fc261-bff8-4490-8b69-009739f7e55c/1/10itqKdHT1rZkMmB_2snzj3hRxM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2d:17:76:03:b8:36:22:e2:67:82:20:3c:7f:3f:ba:67:71:64: c3:80:e1:88:2d:a2:79:04:13:f4:04:6b:58:a1:1d:f3:dc:70: ff:81:e1:3c:ad:ca:b2:a5:e3:f2:d8:5c:9e:d0:14:8f:9d:95: e4:67:e3:62:3a:39:9d:85:c9:83:93:94:ae:0c:8f:e5:bf:c4: 87:a9:7d:12:45:85:09:42:9c:88:07:d5:41:bb:b8:12:e2:49: 36:45:24:b1:ff:0d:d3:ab:ce:9a:cb:ae:44:6e:09:91:f9:2c: 38:8f:84:86:e3:58:1c:e4:64:df:70:48:07:d0:3c:96:5e:88: e7:48:dc:e8:eb:65:5d:2a:d7:06:58:b9:39:1c:8f:43:20:97: 1e:10:fb:b4:fb:77:89:4e:f6:5e:b8:f5:31:5b:c2:9c:ef:fa: 7d:67:1d:8a:a2:ed:19:d8:50:e5:a1:5d:fd:c8:ae:55:c9:9f: 2d:21:93:d7:b1:b6:b7:8d:b1:35:22:f8:27:90:5c:8a:de:40: 4c:11:2e:53:78:26:c4:dd:2c:38:f6:26:cf:72:f4:29:4d:a0: 2b:c2:9a:52:7e:f6:82:53:26:c9:bc:8e:6e:38:5d:d1:24:66: 89:76:e7:b7:6d:f1:83:fc:df:42:0b:c0:c8:a7:d0:32:1e:a2: 81:54:df:e9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZscvCEsq9HPIxFeCheWOZzWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ3NDhhZGE4YTc0NzRmNWFkOTkwYzk4MWZmNmIyN2NlM2Rl MTQ3MTMwHhcNMjUxMjE0MTIwMDQ5WhcNMjUxMjE1MTIwMDQ5WjAzMTEwLwYDVQQD EygyNDMyMTM1ZTYzODdjMzM4ZmIxZWUyYWM2MTE0NTU5OGU0M2ZmNTk4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsFFwxZznlwgojKH4mp8r3qX2P5v/ DLwMNVnLOHSi1APMjU7yXkM419yVZ8OHCLg8EFLm7naZYPK2Hg6WwwANWqptkvou sLoWnX09i8yMadfJSluBVkPiKb3c4NvFDFo1sf75CZ/1tidpxPpWmDFYbxSnNs75 WJUhmWKv1lkF69yX3bZT/Ku+y7xbWKBURfW90Ej05+4/E4jewvmUZGvpV1ClkITU YGq1G4IrqF0aHTZxf4bEh5jLpUP/FMv+LF02btjTJofpYfiJDZ1JzHxtdIQ8KnHQ CVEjHIiVJmt1MsUjJL4lOFo5oBreluzs6MM1xXa5OxcvK+d2j+S4aWLRsQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCQyE15jh8M4+x7irGEUVZjkP/WYMB8GA1UdIwQY MBaAFNdIrainR09a2ZDJgf9rJ8494UcTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMTBpdHFLZEhUMXJaa01tQl8yc256ajNoUnhNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Mi84ZmMyNjEtYmZmOC00NDkwLThiNjkt MDA5NzM5ZjdlNTVjLzEvMTBpdHFLZEhUMXJaa01tQl8yc256ajNoUnhNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Mi84ZmMyNjEtYmZmOC00NDkwLThiNjktMDA5NzM5ZjdlNTVj LzEvMTBpdHFLZEhUMXJaa01tQl8yc256ajNoUnhNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALRd2A7g2 IuJngiA8fz+6Z3Fkw4DhiC2ieQQT9ARrWKEd89xw/4HhPK3KsqXj8thcntAUj52V 5GfjYjo5nYXJg5OUrgyP5b/Eh6l9EkWFCUKciAfVQbu4EuJJNkUksf8N06vOmsuu RG4JkfksOI+EhuNYHORk33BIB9A8ll6I50jc6OtlXSrXBli5ORyPQyCXHhD7tPt3 iU72Xrj1MVvCnO/6fWcdiqLtGdhQ5aFd/ciuVcmfLSGT17G2t42xNSL4J5Bcit5A TBEuU3gmxN0sOPYmz3L0KU2gK8KaUn72glMmybyObjhd0SRmiXbnt23xg/zfQgvA yKfQMh6igVTf6Q== -----END CERTIFICATE-----Generated at Sun Dec 14 22:15:11 2025 by rpki-client