This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/058509-2fe7-486b-b4ad-8c74f9dd67fc/1/itkoGq_vyDda2LS35gSJlVWVIjc.mft File: itkoGq_vyDda2LS35gSJlVWVIjc.mft (raw, json) Hash identifier: t+k9D0+ASnZWI0FT3dXGfPhgXM+2APtrINZYM2xNwKw= Subject key identifier: 63:3C:4E:02:2D:70:7E:95:79:8F:F9:03:D5:FA:55:03:CD:0D:4E:17 Authority key identifier: 8A:D9:28:1A:AF:EF:C8:37:5A:D8:B4:B7:E6:04:89:95:55:95:22:37 Certificate issuer: /CN=8ad9281aafefc8375ad8b4b7e604899555952237 Certificate serial: 019B19BB583551FBA2217AE6493C875DB3BD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/itkoGq_vyDda2LS35gSJlVWVIjc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/058509-2fe7-486b-b4ad-8c74f9dd67fc/1/itkoGq_vyDda2LS35gSJlVWVIjc.mft Manifest number: 1776 Signing time: Sat 13 Dec 2025 22:01:06 +0000 Manifest this update: Sat 13 Dec 2025 22:01:06 +0000 Manifest next update: Sun 14 Dec 2025 22:01:06 +0000 Files and hashes: 1: S5poUcmm58bh9LYHwgnRXNYgnoA.roa (hash: lYdAfaTYBlu17YVjsaWJtgDfvkSUWB0Kx0isvQs/8cw=) 2: UH7ERX2uEAwiuiu2EIP73IUUkwI.roa (hash: 71rfZI37bB6WKWLPGXn68iFKAbS6rOx+kOHCTWBrP9Q=) 3: cFWMX2o_ui2JzGo_3BwtmNDE6Xg.roa (hash: XCpyD2PZhsa33O69EMpxJ6xZIifq0UTk39opm80d+zI=) 4: itkoGq_vyDda2LS35gSJlVWVIjc.crl (hash: a80rUrdxc2/MpAPGHAxdBbC+58o1BfRg+tyE7diYN+0=) 5: sShD_q4ceLwxQ66Q2G4C6NLHOns.roa (hash: BiX0Ojf2DbZMT20uSZBtFAbZP4As97iO/AHVcU+bzqI=) 6: tk3p5E2XBBz_gCKcQbPuR2gwU6g.roa (hash: /uRgiUmwXV30g9CXl0HkFIaUTifbBZ9DvHMj/iIVKLM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/058509-2fe7-486b-b4ad-8c74f9dd67fc/1/itkoGq_vyDda2LS35gSJlVWVIjc.crl rsync://rpki.ripe.net/repository/DEFAULT/44/058509-2fe7-486b-b4ad-8c74f9dd67fc/1/itkoGq_vyDda2LS35gSJlVWVIjc.mft rsync://rpki.ripe.net/repository/DEFAULT/itkoGq_vyDda2LS35gSJlVWVIjc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Dec 2025 17:47:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:19:bb:58:35:51:fb:a2:21:7a:e6:49:3c:87:5d:b3:bd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8ad9281aafefc8375ad8b4b7e604899555952237 Validity Not Before: Dec 13 22:01:06 2025 GMT Not After : Dec 14 22:01:06 2025 GMT Subject: CN=633c4e022d707e95798ff903d5fa5503cd0d4e17 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:9e:f6:ed:cb:ac:24:1c:3f:99:d1:10:d7:4b: d4:a3:b0:ea:a3:10:40:1a:1f:68:38:65:8a:d8:6f: f2:e2:a1:69:2b:5d:e4:83:3e:25:ff:da:7e:df:bd: b5:bc:b7:67:a2:0b:ee:c7:1a:3c:b3:21:ef:71:3a: 13:21:61:79:b0:86:d7:db:f3:03:b4:3c:0c:d9:55: de:46:3b:f6:1e:a2:1a:bc:8e:bd:cc:63:63:17:e4: dc:f0:56:09:5f:f8:46:92:76:a2:17:70:40:38:fa: f3:b6:8d:e4:a8:68:e8:df:1e:0d:42:a0:d7:98:d9: 97:e9:74:ee:0b:85:a1:3b:e5:0e:65:86:87:f2:98: d6:2d:59:f5:83:29:d2:51:2b:42:60:f4:51:08:2a: fc:57:c4:b2:50:fb:c5:d6:d0:11:9e:a2:25:f3:59: 79:4d:9a:c3:69:45:fd:4b:0f:65:f2:e8:f2:67:b9: 0f:8e:b4:5e:cc:82:05:36:17:3b:22:02:24:74:e1: e2:24:3e:f8:ae:0d:56:23:f1:13:a3:1b:8c:2a:89: 26:98:6f:d9:cf:1e:4b:68:fa:88:5c:fa:29:17:44: 4e:4e:d1:cd:4e:83:1b:0a:ab:eb:98:1f:a0:33:eb: 65:16:89:da:e6:4c:22:f2:5a:17:cb:07:6e:ad:08: 9c:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:3C:4E:02:2D:70:7E:95:79:8F:F9:03:D5:FA:55:03:CD:0D:4E:17 X509v3 Authority Key Identifier: keyid:8A:D9:28:1A:AF:EF:C8:37:5A:D8:B4:B7:E6:04:89:95:55:95:22:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/itkoGq_vyDda2LS35gSJlVWVIjc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/058509-2fe7-486b-b4ad-8c74f9dd67fc/1/itkoGq_vyDda2LS35gSJlVWVIjc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/44/058509-2fe7-486b-b4ad-8c74f9dd67fc/1/itkoGq_vyDda2LS35gSJlVWVIjc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 17:32:9f:ee:22:4d:ce:e5:0a:d5:26:f5:8c:6e:d1:f9:0b:32: e7:b0:ba:e3:63:aa:94:a2:17:73:be:97:ea:b9:ed:6e:9e:4f: 22:d8:20:81:bd:d8:7d:e6:4f:40:17:9e:9e:f1:e8:f0:04:bf: 9f:80:26:5a:93:e7:23:ec:3e:0f:fd:b5:ee:a9:d0:75:f6:ea: bf:9b:07:87:1c:c4:78:1a:5c:f0:ea:5c:36:33:67:7e:6f:e1: 09:9c:88:cf:6e:fb:fd:5b:df:0f:93:dd:50:89:1e:e0:0f:f9: 56:66:69:6f:76:55:fc:e6:54:52:62:82:51:09:7b:33:c9:3a: b4:aa:03:00:c2:8d:42:e4:3a:b8:51:1a:78:79:6d:df:96:81: 50:19:49:ff:9e:4b:16:fa:21:9f:05:d6:36:16:9b:e5:94:d7: ac:9c:8b:67:a5:d7:59:9c:63:1e:4e:d9:c4:26:69:fc:50:73: 74:64:88:ca:33:c0:99:23:55:48:06:e0:f6:35:01:f3:a8:a1: 73:ad:0b:06:15:66:c8:f5:ae:c3:e9:a5:a4:71:98:0b:d6:f6: 9a:11:2a:cc:ac:a9:df:91:a4:d4:67:9e:f3:eb:b6:2d:53:6d: d2:07:e7:8f:4b:f2:3c:41:97:73:57:2a:b2:31:6c:b3:13:ec: 65:11:c2:d2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsZu1g1UfuiIXrmSTyHXbO9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhhZDkyODFhYWZlZmM4Mzc1YWQ4YjRiN2U2MDQ4OTk1NTU5 NTIyMzcwHhcNMjUxMjEzMjIwMTA2WhcNMjUxMjE0MjIwMTA2WjAzMTEwLwYDVQQD Eyg2MzNjNGUwMjJkNzA3ZTk1Nzk4ZmY5MDNkNWZhNTUwM2NkMGQ0ZTE3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA85727cusJBw/mdEQ10vUo7DqoxBA Gh9oOGWK2G/y4qFpK13kgz4l/9p+3721vLdnogvuxxo8syHvcToTIWF5sIbX2/MD tDwM2VXeRjv2HqIavI69zGNjF+Tc8FYJX/hGknaiF3BAOPrzto3kqGjo3x4NQqDX mNmX6XTuC4WhO+UOZYaH8pjWLVn1gynSUStCYPRRCCr8V8SyUPvF1tARnqIl81l5 TZrDaUX9Sw9l8ujyZ7kPjrRezIIFNhc7IgIkdOHiJD74rg1WI/EToxuMKokmmG/Z zx5LaPqIXPopF0ROTtHNToMbCqvrmB+gM+tlFona5kwi8loXywdurQicbQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGM8TgItcH6VeY/5A9X6VQPNDU4XMB8GA1UdIwQY MBaAFIrZKBqv78g3Wti0t+YEiZVVlSI3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaXRrb0dxX3Z5RGRhMkxTMzVnU0psVldWSWpjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NC8wNTg1MDktMmZlNy00ODZiLWI0YWQt OGM3NGY5ZGQ2N2ZjLzEvaXRrb0dxX3Z5RGRhMkxTMzVnU0psVldWSWpjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80NC8wNTg1MDktMmZlNy00ODZiLWI0YWQtOGM3NGY5ZGQ2N2Zj LzEvaXRrb0dxX3Z5RGRhMkxTMzVnU0psVldWSWpjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFzKf7iJN zuUK1Sb1jG7R+Qsy57C642OqlKIXc76X6rntbp5PItgggb3YfeZPQBeenvHo8AS/ n4AmWpPnI+w+D/217qnQdfbqv5sHhxzEeBpc8OpcNjNnfm/hCZyIz277/VvfD5Pd UIke4A/5VmZpb3ZV/OZUUmKCUQl7M8k6tKoDAMKNQuQ6uFEaeHlt35aBUBlJ/55L FvohnwXWNhab5ZTXrJyLZ6XXWZxjHk7ZxCZp/FBzdGSIyjPAmSNVSAbg9jUB86ih c60LBhVmyPWuw+mlpHGYC9b2mhEqzKyp35Gk1Gee8+u2LVNt0gfnj0vyPEGXc1cq sjFssxPsZRHC0g== -----END CERTIFICATE-----Generated at Sun Dec 14 03:38:19 2025 by rpki-client