This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/edb8cd-003d-483a-906a-f6b78e2b17a1/1/IC9MGjfpMTzdLup3UK4CjRjNWq4.mft File: IC9MGjfpMTzdLup3UK4CjRjNWq4.mft (raw, json) Hash identifier: CW/xFNGCeTt9jfOIbFusAhwbPAaAwdf/eIMZE+eJhjU= Subject key identifier: 8F:23:AE:57:52:D4:4C:1F:37:31:83:1B:D2:1B:1C:1B:F5:F3:E1:0B Authority key identifier: 20:2F:4C:1A:37:E9:31:3C:DD:2E:EA:77:50:AE:02:8D:18:CD:5A:AE Certificate issuer: /CN=202f4c1a37e9313cdd2eea7750ae028d18cd5aae Certificate serial: 019B0E2687C9ADCB488B6BA7EFA5208ABF19 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IC9MGjfpMTzdLup3UK4CjRjNWq4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/edb8cd-003d-483a-906a-f6b78e2b17a1/1/IC9MGjfpMTzdLup3UK4CjRjNWq4.mft Manifest number: 1772 Signing time: Thu 11 Dec 2025 16:02:44 +0000 Manifest this update: Thu 11 Dec 2025 16:02:44 +0000 Manifest next update: Fri 12 Dec 2025 16:02:44 +0000 Files and hashes: 1: IC9MGjfpMTzdLup3UK4CjRjNWq4.crl (hash: mhAuslDrGUfNV8tsAhTmZpaR6jnIVwYhVv1VsDnkTyI=) 2: IpCJGLN8WNm4ASMIxNnGZPuEtp4.roa (hash: nrrSBtVL1+LxQy+ccPed0KobnXytQAq3RiSJBLbBVIg=) 3: NfNd6pjqYOF2P-1csZDDcYiiQ28.roa (hash: iQWQfc6lD74rDEabgsCAVeBcixywrixRVP1KpMFN48o=) 4: PJBAejzPvEvF3ZoupzGWVEj1Og0.roa (hash: BFJtqcfNldj6Jrfn0Y0+mOBk6xT0n483gTjn5ogYiu8=) 5: aCUjIUK5OOSaycrn7_ksP5SjmPw.roa (hash: O1lgV6htb/Z9+mSwOsrU/V0sb4jZo6xRqeghVOqs13I=) 6: dSYYIsgqOPsPCWRb8n6bjaKooRw.roa (hash: Pvqr/OOkaqypvOSknbbOn2J0oHNnn5WhmVz2GaH3aXU=) 7: quZyu716dxS9mdBeGNCJZ1sGIZM.roa (hash: MPvLxa0c+riXjzyelLJV18hBBvFNCarL2WtEM/bk6Os=) 8: sx8Ag2ZkbPORNb5IpKGaIu2_Dqo.roa (hash: ZFFpoBJ2SvC/bg4XtAEwmcSclBY/i+xRWcdnLVCOAss=) 9: wUsJ3Y8bKRlwOlXMA6Qttd1Brps.roa (hash: zuU1UQuoYfDo2IQVUCO8dMMln85NIWVqpAhKwg/ayj8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/edb8cd-003d-483a-906a-f6b78e2b17a1/1/IC9MGjfpMTzdLup3UK4CjRjNWq4.crl rsync://rpki.ripe.net/repository/DEFAULT/4e/edb8cd-003d-483a-906a-f6b78e2b17a1/1/IC9MGjfpMTzdLup3UK4CjRjNWq4.mft rsync://rpki.ripe.net/repository/DEFAULT/IC9MGjfpMTzdLup3UK4CjRjNWq4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 16:02:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0e:26:87:c9:ad:cb:48:8b:6b:a7:ef:a5:20:8a:bf:19 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=202f4c1a37e9313cdd2eea7750ae028d18cd5aae Validity Not Before: Dec 11 16:02:44 2025 GMT Not After : Dec 12 16:02:44 2025 GMT Subject: CN=8f23ae5752d44c1f3731831bd21b1c1bf5f3e10b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:2b:c1:6c:3a:cd:af:14:a6:00:df:d8:54:3d: b1:f0:6d:3f:3f:09:31:39:21:4a:3b:f7:e2:93:bb: c1:40:2f:bc:a4:b8:ab:8d:0e:44:e2:03:ca:31:2d: 85:d2:7b:c2:a2:6e:81:ce:81:72:8c:23:6f:5a:57: 1f:9c:15:6e:dc:18:c6:51:72:f3:d4:fa:e2:5f:61: 66:53:e0:4b:c1:c0:2f:2e:4f:b0:53:81:5e:8c:14: df:bc:7e:aa:76:36:4a:71:d2:fb:07:0d:79:3f:69: 52:96:2f:5e:d0:f2:91:6f:48:13:49:29:f9:5c:50: 58:80:94:87:98:da:d2:19:6f:7b:1a:9f:87:9a:12: aa:ba:3c:78:77:c2:59:21:25:db:d4:af:2d:d4:88: 2e:9e:72:ce:6a:e7:6c:d6:fc:fd:0d:71:13:3f:54: 61:93:9d:7e:72:22:bf:62:40:bc:92:01:1b:71:62: 4d:fa:91:0f:82:8c:f1:54:b5:c6:61:8b:f9:01:a2: b2:15:a4:39:a7:ea:da:e1:79:21:d7:2c:14:20:10: 25:7e:34:fc:1b:54:21:c0:32:89:50:cf:57:43:aa: b7:85:ae:35:46:52:e1:72:55:7f:21:ff:b0:f8:63: 36:d0:d7:ad:7d:8d:8e:c3:2f:d0:cf:f8:31:f4:19: 70:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:23:AE:57:52:D4:4C:1F:37:31:83:1B:D2:1B:1C:1B:F5:F3:E1:0B X509v3 Authority Key Identifier: keyid:20:2F:4C:1A:37:E9:31:3C:DD:2E:EA:77:50:AE:02:8D:18:CD:5A:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IC9MGjfpMTzdLup3UK4CjRjNWq4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/edb8cd-003d-483a-906a-f6b78e2b17a1/1/IC9MGjfpMTzdLup3UK4CjRjNWq4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/edb8cd-003d-483a-906a-f6b78e2b17a1/1/IC9MGjfpMTzdLup3UK4CjRjNWq4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 49:81:57:71:69:56:4d:95:16:b0:8e:fd:cf:e3:30:c9:6a:7f: 0e:ab:1e:c7:12:ee:13:52:62:4a:8b:70:bc:0b:3c:ab:d5:82: 96:d5:98:38:d5:37:15:58:50:7d:18:9e:9d:27:ff:d7:7e:bd: f7:31:78:ac:f0:fc:04:33:cd:d7:df:1d:a4:d3:f0:44:4c:d1: 41:d8:36:60:91:b0:8f:a1:2c:9f:ee:9f:86:05:4a:d8:2f:60: ba:42:12:23:0e:22:b2:2d:7c:b0:78:cc:02:5b:73:c1:24:e6: 2c:8e:ba:72:ae:86:6a:f4:ac:fe:78:17:53:0b:24:4a:85:0a: 53:a3:22:f2:e6:a4:b4:11:b1:f5:1e:8a:19:d0:36:96:bd:4f: 47:e7:4e:c2:74:a3:24:c4:37:ab:10:22:dc:98:a3:b1:1a:2e: 2f:96:c7:5a:7c:0d:e4:f8:42:13:18:01:5c:14:e5:6c:53:14: 40:f7:17:e9:3b:2e:da:cc:cb:4e:58:01:c8:e3:13:a5:37:7c: de:13:45:9e:20:6c:a4:1d:5f:ca:c3:44:70:a5:c8:9e:7d:28: a7:8b:c1:bb:40:9c:38:85:c7:71:33:99:bf:79:3b:9f:95:d0: 4e:e7:24:f3:9a:c0:b9:4f:a5:de:88:02:e6:3b:d9:ea:28:e9: 08:ba:91:dc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsOJofJrctIi2un76Ugir8ZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIwMmY0YzFhMzdlOTMxM2NkZDJlZWE3NzUwYWUwMjhkMThj ZDVhYWUwHhcNMjUxMjExMTYwMjQ0WhcNMjUxMjEyMTYwMjQ0WjAzMTEwLwYDVQQD Eyg4ZjIzYWU1NzUyZDQ0YzFmMzczMTgzMWJkMjFiMWMxYmY1ZjNlMTBiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyCvBbDrNrxSmAN/YVD2x8G0/Pwkx OSFKO/fik7vBQC+8pLirjQ5E4gPKMS2F0nvCom6BzoFyjCNvWlcfnBVu3BjGUXLz 1PriX2FmU+BLwcAvLk+wU4FejBTfvH6qdjZKcdL7Bw15P2lSli9e0PKRb0gTSSn5 XFBYgJSHmNrSGW97Gp+HmhKqujx4d8JZISXb1K8t1IgunnLOauds1vz9DXETP1Rh k51+ciK/YkC8kgEbcWJN+pEPgozxVLXGYYv5AaKyFaQ5p+ra4Xkh1ywUIBAlfjT8 G1QhwDKJUM9XQ6q3ha41RlLhclV/If+w+GM20NetfY2Owy/Qz/gx9BlwDQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFI8jrldS1EwfNzGDG9IbHBv18+ELMB8GA1UdIwQY MBaAFCAvTBo36TE83S7qd1CuAo0YzVquMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSUM5TUdqZnBNVHpkTHVwM1VLNENqUmpOV3E0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZS9lZGI4Y2QtMDAzZC00ODNhLTkwNmEt ZjZiNzhlMmIxN2ExLzEvSUM5TUdqZnBNVHpkTHVwM1VLNENqUmpOV3E0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80ZS9lZGI4Y2QtMDAzZC00ODNhLTkwNmEtZjZiNzhlMmIxN2Ex LzEvSUM5TUdqZnBNVHpkTHVwM1VLNENqUmpOV3E0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASYFXcWlW TZUWsI79z+MwyWp/DqsexxLuE1JiSotwvAs8q9WCltWYONU3FVhQfRienSf/1369 9zF4rPD8BDPN198dpNPwREzRQdg2YJGwj6Esn+6fhgVK2C9gukISIw4isi18sHjM AltzwSTmLI66cq6GavSs/ngXUwskSoUKU6Mi8uaktBGx9R6KGdA2lr1PR+dOwnSj JMQ3qxAi3JijsRouL5bHWnwN5PhCExgBXBTlbFMUQPcX6Tsu2szLTlgByOMTpTd8 3hNFniBspB1fysNEcKXInn0op4vBu0CcOIXHcTOZv3k7n5XQTuck85rAuU+l3ogC 5jvZ6ijpCLqR3A== -----END CERTIFICATE-----Generated at Fri Dec 12 01:41:52 2025 by rpki-client