This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/9246cb-d46b-4062-987b-5b34bc378436/1/Ix4oNZwYDqbEiKmMo693tbt5Pe4.mft File: Ix4oNZwYDqbEiKmMo693tbt5Pe4.mft (raw, json) Hash identifier: ZjABUz5Pb8NTaxe5o3B9WGL0MHq0Vsb2RjYDZNa171g= Subject key identifier: 3D:BA:40:09:5E:A8:89:02:28:11:35:E9:E6:D1:69:E3:D8:09:98:D4 Authority key identifier: 23:1E:28:35:9C:18:0E:A6:C4:88:A9:8C:A3:AF:77:B5:BB:79:3D:EE Certificate issuer: /CN=231e28359c180ea6c488a98ca3af77b5bb793dee Certificate serial: 019B1BAABAD406F0A36616D23EFC62453927 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ix4oNZwYDqbEiKmMo693tbt5Pe4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/9246cb-d46b-4062-987b-5b34bc378436/1/Ix4oNZwYDqbEiKmMo693tbt5Pe4.mft Manifest number: 1777 Signing time: Sun 14 Dec 2025 07:02:12 +0000 Manifest this update: Sun 14 Dec 2025 07:02:12 +0000 Manifest next update: Mon 15 Dec 2025 07:02:12 +0000 Files and hashes: 1: 1--lfY911D4o-n0x13kTzxgPAa1c.roa (hash: 7jYLrsmco67v6YLtE1rUNiJwEOZGyK+AZuLqYtKHcu0=) 2: 1-PLlhObhI2KvU31PH_oGB4eDG5U.roa (hash: h2JQLRGR8RDG0rSKaLT0jUCHodG0PW/TX0LlgI0i4Qc=) 3: Ix4oNZwYDqbEiKmMo693tbt5Pe4.crl (hash: Ldv44XRhvBcBOEOSqnrCxzmJ6JTvd/RlhtRboNsy19E=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/9246cb-d46b-4062-987b-5b34bc378436/1/Ix4oNZwYDqbEiKmMo693tbt5Pe4.crl rsync://rpki.ripe.net/repository/DEFAULT/59/9246cb-d46b-4062-987b-5b34bc378436/1/Ix4oNZwYDqbEiKmMo693tbt5Pe4.mft rsync://rpki.ripe.net/repository/DEFAULT/Ix4oNZwYDqbEiKmMo693tbt5Pe4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 15 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:1b:aa:ba:d4:06:f0:a3:66:16:d2:3e:fc:62:45:39:27 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=231e28359c180ea6c488a98ca3af77b5bb793dee Validity Not Before: Dec 14 07:02:12 2025 GMT Not After : Dec 15 07:02:12 2025 GMT Subject: CN=3dba40095ea88902281135e9e6d169e3d80998d4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:09:46:34:5a:ff:50:4c:dc:e5:25:0c:a4:84: 36:12:39:13:c4:c9:eb:39:4d:c2:c5:c7:9f:73:3a: 7b:d6:a6:40:03:8c:7b:a7:7e:91:92:67:1c:76:f6: 6b:83:ef:cd:19:39:72:24:9e:88:c5:d7:bb:2d:51: fd:c3:96:56:45:30:c4:e7:0c:45:f4:68:b2:f3:cf: 78:99:36:f2:c5:1e:3f:67:1e:04:d1:9f:17:6e:1b: ca:65:0b:10:83:5b:dc:6f:c1:c6:19:81:2b:a1:71: cd:b7:3c:26:de:e0:ff:b1:13:e0:22:04:6d:c3:bc: b6:b9:50:ff:2e:ef:6b:b6:ce:5f:b8:76:d6:d3:cd: c2:54:f1:23:f2:ec:b4:41:f8:d6:27:bf:f5:d6:d5: 33:b4:8a:85:d8:0a:a6:18:ea:8c:12:d9:8e:5c:3f: 62:1c:9a:3a:b7:ff:ce:ac:43:d4:8d:66:d0:21:3c: 5d:52:1b:fd:c4:d0:87:43:82:a2:d6:dc:87:37:1a: 1f:41:8c:83:0f:ad:28:85:14:96:15:ce:cd:2b:af: 25:cc:47:bf:79:66:58:b0:bf:e8:2d:9d:ee:df:5b: 06:f5:6a:87:06:14:6b:92:4a:4c:35:18:38:a6:fe: 7e:97:c9:40:2b:34:7e:d8:4a:4c:c0:b2:a2:9a:cc: 64:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:BA:40:09:5E:A8:89:02:28:11:35:E9:E6:D1:69:E3:D8:09:98:D4 X509v3 Authority Key Identifier: keyid:23:1E:28:35:9C:18:0E:A6:C4:88:A9:8C:A3:AF:77:B5:BB:79:3D:EE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ix4oNZwYDqbEiKmMo693tbt5Pe4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/9246cb-d46b-4062-987b-5b34bc378436/1/Ix4oNZwYDqbEiKmMo693tbt5Pe4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/59/9246cb-d46b-4062-987b-5b34bc378436/1/Ix4oNZwYDqbEiKmMo693tbt5Pe4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3c:e3:86:47:0f:de:58:81:0c:db:c8:74:3f:59:24:13:d2:fb: c4:f0:f1:97:2d:59:d3:49:dd:e1:6b:a7:61:90:98:2f:96:aa: 99:f4:02:7f:72:40:99:ab:e9:48:6b:82:09:24:12:21:77:18: 1d:a3:46:ca:ef:48:d5:85:7a:49:73:be:37:c8:4f:f6:13:a3: ce:a0:db:84:c6:65:df:4d:d9:00:41:b4:95:60:7a:ab:58:a1: 32:c4:6a:be:c4:ba:d9:05:e8:6d:51:6d:14:d8:27:4b:82:41: db:68:fc:15:21:8f:dc:99:d4:b5:a4:70:07:86:c3:b8:3f:3e: ed:75:a5:c8:48:2a:f8:48:e6:c2:4f:53:f4:17:79:e8:de:91: c1:94:22:09:6c:85:be:72:ea:ab:d4:19:67:ba:3f:3c:63:bd: c7:12:8c:58:42:12:58:b2:5b:2c:1a:b2:dd:77:23:0d:8f:b9: 09:d5:75:d9:33:ec:2a:c5:14:cd:d5:aa:90:96:b8:fa:6c:84: c7:83:04:a5:54:66:3d:67:53:a8:fd:60:1b:9e:fe:67:1a:6e: 01:26:2b:4d:32:e1:7f:65:d4:ab:b6:65:f9:a8:95:70:7d:d0: ef:92:07:8d:30:3c:e3:fd:fa:34:fd:b0:42:b4:fc:bd:12:84: 9d:a1:a4:84 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsbqrrUBvCjZhbSPvxiRTknMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIzMWUyODM1OWMxODBlYTZjNDg4YTk4Y2EzYWY3N2I1YmI3 OTNkZWUwHhcNMjUxMjE0MDcwMjEyWhcNMjUxMjE1MDcwMjEyWjAzMTEwLwYDVQQD EygzZGJhNDAwOTVlYTg4OTAyMjgxMTM1ZTllNmQxNjllM2Q4MDk5OGQ0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArglGNFr/UEzc5SUMpIQ2EjkTxMnr OU3Cxcefczp71qZAA4x7p36RkmccdvZrg+/NGTlyJJ6Ixde7LVH9w5ZWRTDE5wxF 9Giy8894mTbyxR4/Zx4E0Z8XbhvKZQsQg1vcb8HGGYEroXHNtzwm3uD/sRPgIgRt w7y2uVD/Lu9rts5fuHbW083CVPEj8uy0QfjWJ7/11tUztIqF2AqmGOqMEtmOXD9i HJo6t//OrEPUjWbQITxdUhv9xNCHQ4Ki1tyHNxofQYyDD60ohRSWFc7NK68lzEe/ eWZYsL/oLZ3u31sG9WqHBhRrkkpMNRg4pv5+l8lAKzR+2EpMwLKimsxkowIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFD26QAleqIkCKBE16ebRaePYCZjUMB8GA1UdIwQY MBaAFCMeKDWcGA6mxIipjKOvd7W7eT3uMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSXg0b05ad1lEcWJFaUttTW82OTN0YnQ1UGU0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OS85MjQ2Y2ItZDQ2Yi00MDYyLTk4N2It NWIzNGJjMzc4NDM2LzEvSXg0b05ad1lEcWJFaUttTW82OTN0YnQ1UGU0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81OS85MjQ2Y2ItZDQ2Yi00MDYyLTk4N2ItNWIzNGJjMzc4NDM2 LzEvSXg0b05ad1lEcWJFaUttTW82OTN0YnQ1UGU0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPOOGRw/e WIEM28h0P1kkE9L7xPDxly1Z00nd4WunYZCYL5aqmfQCf3JAmavpSGuCCSQSIXcY HaNGyu9I1YV6SXO+N8hP9hOjzqDbhMZl303ZAEG0lWB6q1ihMsRqvsS62QXobVFt FNgnS4JB22j8FSGP3JnUtaRwB4bDuD8+7XWlyEgq+Ejmwk9T9Bd56N6RwZQiCWyF vnLqq9QZZ7o/PGO9xxKMWEISWLJbLBqy3XcjDY+5CdV12TPsKsUUzdWqkJa4+myE x4MEpVRmPWdTqP1gG57+ZxpuASYrTTLhf2XUq7Zl+aiVcH3Q75IHjTA84/36NP2w QrT8vRKEnaGkhA== -----END CERTIFICATE-----Generated at Sun Dec 14 14:46:09 2025 by rpki-client