This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/4e5d08-4267-4c78-862b-0cb562f98a52/1/IZah91DmPqz2d_fz533CxKLGyAk.mft File: IZah91DmPqz2d_fz533CxKLGyAk.mft (raw, json) Hash identifier: 2sVKYMteek4XMLYTxxn2mIp9+V0tHP2qRea8gNx1qOs= Subject key identifier: 40:39:4A:03:38:7B:A7:54:83:F6:1E:53:56:E0:DF:85:7A:3E:4A:37 Authority key identifier: 21:96:A1:F7:50:E6:3E:AC:F6:77:F7:F3:E7:7D:C2:C4:A2:C6:C8:09 Certificate issuer: /CN=2196a1f750e63eacf677f7f3e77dc2c4a2c6c809 Certificate serial: 019B59E46BB821869C4E766F5B97381722A6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IZah91DmPqz2d_fz533CxKLGyAk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/4e5d08-4267-4c78-862b-0cb562f98a52/1/IZah91DmPqz2d_fz533CxKLGyAk.mft Manifest number: 84 Signing time: Fri 26 Dec 2025 09:01:40 +0000 Manifest this update: Fri 26 Dec 2025 09:01:40 +0000 Manifest next update: Sat 27 Dec 2025 09:01:40 +0000 Files and hashes: 1: IZah91DmPqz2d_fz533CxKLGyAk.crl (hash: 0pP5Kthz4KBPa5vAdrRDabJISOinopk7vbPod+QJXMU=) 2: knngGI39I0NVgBPG_Lf0q4HKJ1c.roa (hash: /q0F4K5neo5vF0JOJMy5NS7gJ83gwtGXNrG1p1CvIqQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/4e5d08-4267-4c78-862b-0cb562f98a52/1/IZah91DmPqz2d_fz533CxKLGyAk.crl rsync://rpki.ripe.net/repository/DEFAULT/5d/4e5d08-4267-4c78-862b-0cb562f98a52/1/IZah91DmPqz2d_fz533CxKLGyAk.mft rsync://rpki.ripe.net/repository/DEFAULT/IZah91DmPqz2d_fz533CxKLGyAk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:e4:6b:b8:21:86:9c:4e:76:6f:5b:97:38:17:22:a6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2196a1f750e63eacf677f7f3e77dc2c4a2c6c809 Validity Not Before: Dec 26 09:01:40 2025 GMT Not After : Dec 27 09:01:40 2025 GMT Subject: CN=40394a03387ba75483f61e5356e0df857a3e4a37 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:59:94:06:25:32:8f:ca:0c:b3:c2:9d:86:fa: 42:8d:26:5c:3d:38:57:7f:94:f6:84:cf:97:06:39: 5a:15:06:31:8d:f6:5d:84:05:4a:f1:1b:28:bd:d4: 6e:1b:69:71:3d:ca:71:a7:5b:ce:8d:0f:e3:15:d6: 61:04:ae:80:a4:3a:29:f2:82:41:bb:02:7e:0c:34: 68:25:85:1f:ec:26:64:82:e5:3e:dc:42:22:6d:d0: 0e:0f:0b:10:91:dd:eb:cc:5a:a2:b7:b7:1a:b3:ff: 2a:ab:d7:c7:ee:e9:33:28:1e:04:33:4a:e2:4d:8e: 8d:7d:1f:47:3b:a3:11:8f:29:fe:a7:0b:10:7d:66: 40:02:de:dc:bd:c0:63:4d:78:bc:eb:ec:ae:a4:5e: 54:dd:11:16:f2:37:2d:0b:08:95:ec:48:f8:24:09: 64:5e:df:cc:cc:00:07:77:47:d4:ef:ee:d8:47:54: 3c:81:5c:d9:51:10:43:1b:9d:3c:55:e0:ca:61:79: 6e:a0:f1:db:f1:13:11:d1:fc:e4:60:ac:d8:7c:50: 04:ca:76:d9:59:49:7d:f6:22:29:c6:30:fb:0d:65: 03:78:c4:1a:5e:28:7a:6d:5d:26:7f:1d:20:e3:87: ad:3b:62:02:9a:70:0c:7b:05:23:7b:5e:e0:e5:1a: e8:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:39:4A:03:38:7B:A7:54:83:F6:1E:53:56:E0:DF:85:7A:3E:4A:37 X509v3 Authority Key Identifier: keyid:21:96:A1:F7:50:E6:3E:AC:F6:77:F7:F3:E7:7D:C2:C4:A2:C6:C8:09 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IZah91DmPqz2d_fz533CxKLGyAk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/4e5d08-4267-4c78-862b-0cb562f98a52/1/IZah91DmPqz2d_fz533CxKLGyAk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/4e5d08-4267-4c78-862b-0cb562f98a52/1/IZah91DmPqz2d_fz533CxKLGyAk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6a:26:d7:e6:fd:a3:7b:e4:a9:2b:c0:cc:db:82:07:d0:98:72: 61:ee:2c:1b:77:a1:a5:e0:aa:cd:2b:c0:d7:68:c3:88:b6:d3: de:b9:a8:d9:86:25:e3:37:c3:b6:ef:1c:56:d6:7d:4d:d1:9d: 08:ad:57:cc:06:40:46:55:97:aa:aa:31:ad:d2:aa:84:7b:b0: 89:4b:8b:7b:8a:b2:2c:36:ce:23:ba:9a:cc:90:7b:4c:9e:83: 0d:fe:2f:0b:04:b6:7f:99:a4:a7:f3:4f:7c:87:ea:69:7e:8d: e0:eb:63:83:f8:dc:e6:c4:57:03:38:9a:1c:e0:2e:07:4d:52: f9:e1:5c:ce:4f:8b:c1:da:fd:b0:a1:f8:bb:7d:0b:6e:fc:8a: 8c:ac:74:db:64:b8:40:e0:f5:0d:90:90:d1:2d:3e:a8:93:8d: de:25:22:00:f5:17:6b:6b:f4:9a:88:ea:38:28:93:a9:bf:ba: 78:6a:fa:0a:e3:f1:f2:d4:0b:78:ea:56:74:48:84:9b:84:bb: 2d:88:51:a4:93:12:4a:49:cc:33:6a:8c:5d:57:ba:ac:25:86: c9:6b:6a:44:cb:ae:f2:57:cc:35:46:20:38:1e:a9:b6:02:b4: 2f:73:dd:99:75:3c:60:00:31:8b:b3:15:78:0f:06:1e:b3:a8: 21:82:30:58 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtZ5Gu4IYacTnZvW5c4FyKmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIxOTZhMWY3NTBlNjNlYWNmNjc3ZjdmM2U3N2RjMmM0YTJj NmM4MDkwHhcNMjUxMjI2MDkwMTQwWhcNMjUxMjI3MDkwMTQwWjAzMTEwLwYDVQQD Eyg0MDM5NGEwMzM4N2JhNzU0ODNmNjFlNTM1NmUwZGY4NTdhM2U0YTM3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvVmUBiUyj8oMs8KdhvpCjSZcPThX f5T2hM+XBjlaFQYxjfZdhAVK8RsovdRuG2lxPcpxp1vOjQ/jFdZhBK6ApDop8oJB uwJ+DDRoJYUf7CZkguU+3EIibdAODwsQkd3rzFqit7cas/8qq9fH7ukzKB4EM0ri TY6NfR9HO6MRjyn+pwsQfWZAAt7cvcBjTXi86+yupF5U3REW8jctCwiV7Ej4JAlk Xt/MzAAHd0fU7+7YR1Q8gVzZURBDG508VeDKYXluoPHb8RMR0fzkYKzYfFAEynbZ WUl99iIpxjD7DWUDeMQaXih6bV0mfx0g44etO2ICmnAMewUje17g5Rro5wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEA5SgM4e6dUg/YeU1bg34V6Pko3MB8GA1UdIwQY MBaAFCGWofdQ5j6s9nf38+d9wsSixsgJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSVphaDkxRG1QcXoyZF9mejUzM0N4S0xHeUFrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZC80ZTVkMDgtNDI2Ny00Yzc4LTg2MmIt MGNiNTYyZjk4YTUyLzEvSVphaDkxRG1QcXoyZF9mejUzM0N4S0xHeUFrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81ZC80ZTVkMDgtNDI2Ny00Yzc4LTg2MmItMGNiNTYyZjk4YTUy LzEvSVphaDkxRG1QcXoyZF9mejUzM0N4S0xHeUFrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaibX5v2j e+SpK8DM24IH0JhyYe4sG3ehpeCqzSvA12jDiLbT3rmo2YYl4zfDtu8cVtZ9TdGd CK1XzAZARlWXqqoxrdKqhHuwiUuLe4qyLDbOI7qazJB7TJ6DDf4vCwS2f5mkp/NP fIfqaX6N4Otjg/jc5sRXAziaHOAuB01S+eFczk+Lwdr9sKH4u30LbvyKjKx022S4 QOD1DZCQ0S0+qJON3iUiAPUXa2v0mojqOCiTqb+6eGr6CuPx8tQLeOpWdEiEm4S7 LYhRpJMSSknMM2qMXVe6rCWGyWtqRMuu8lfMNUYgOB6ptgK0L3PdmXU8YAAxi7MV eA8GHrOoIYIwWA== -----END CERTIFICATE-----Generated at Fri Dec 26 16:00:33 2025 by rpki-client