This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/760452-f63c-48aa-a3e0-38d0cf8fb8b8/1/iNCLhhV8ayjmrJguDD_rGj7DKBA.mft File: iNCLhhV8ayjmrJguDD_rGj7DKBA.mft (raw, json) Hash identifier: 0U5tVKKcsgc72VfIHHPXXe+zGnxUZ3hOr7WW08N6IPo= Subject key identifier: 1A:B2:E7:38:A9:59:3E:40:0B:0A:D2:EC:68:41:39:01:66:86:95:16 Authority key identifier: 88:D0:8B:86:15:7C:6B:28:E6:AC:98:2E:0C:3F:EB:1A:3E:C3:28:10 Certificate issuer: /CN=88d08b86157c6b28e6ac982e0c3feb1a3ec32810 Certificate serial: 019B2C66C2DACDF7C6ABEF39CF142213F680 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iNCLhhV8ayjmrJguDD_rGj7DKBA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/760452-f63c-48aa-a3e0-38d0cf8fb8b8/1/iNCLhhV8ayjmrJguDD_rGj7DKBA.mft Manifest number: 0680 Signing time: Wed 17 Dec 2025 13:01:30 +0000 Manifest this update: Wed 17 Dec 2025 13:01:30 +0000 Manifest next update: Thu 18 Dec 2025 13:01:30 +0000 Files and hashes: 1: Ajbz3OGkwZMEFq0jmclXR5Gr8N4.roa (hash: VyX/vNC7tiH5t3Mk3m61yLf9U3OPk8ttEhnvx5R6lEc=) 2: iNCLhhV8ayjmrJguDD_rGj7DKBA.crl (hash: g3LFMclQcNC/4IVo8qwUYlH6E5UYIOOxU8LAfuuFR/4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/760452-f63c-48aa-a3e0-38d0cf8fb8b8/1/iNCLhhV8ayjmrJguDD_rGj7DKBA.crl rsync://rpki.ripe.net/repository/DEFAULT/63/760452-f63c-48aa-a3e0-38d0cf8fb8b8/1/iNCLhhV8ayjmrJguDD_rGj7DKBA.mft rsync://rpki.ripe.net/repository/DEFAULT/iNCLhhV8ayjmrJguDD_rGj7DKBA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 10:00:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2c:66:c2:da:cd:f7:c6:ab:ef:39:cf:14:22:13:f6:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=88d08b86157c6b28e6ac982e0c3feb1a3ec32810 Validity Not Before: Dec 17 13:01:30 2025 GMT Not After : Dec 18 13:01:30 2025 GMT Subject: CN=1ab2e738a9593e400b0ad2ec6841390166869516 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:a6:1a:d9:26:be:aa:4b:21:f6:2d:bc:03:b2: 36:42:94:27:2a:35:4e:c9:31:d4:84:4d:33:3d:eb: ea:ed:ce:fc:8b:46:3c:37:f1:07:c2:9c:26:4f:e3: 09:0c:d5:31:fa:d5:47:3e:e5:6e:5b:d0:eb:5b:7a: b5:85:1d:a1:b6:cc:43:b7:0a:ab:07:e0:53:1c:d8: f1:cb:61:b5:17:5a:af:d8:44:3b:61:bb:34:ff:88: f2:0f:df:db:d1:42:01:ea:75:d7:cd:01:d0:7f:0d: 2f:cb:aa:f7:52:7b:02:95:79:dd:47:1e:d4:31:27: 63:d4:16:37:d4:21:06:24:a1:e2:c1:2b:1c:95:b3: a8:12:8f:74:d9:8a:51:43:55:2d:87:c8:e2:e7:1a: 10:d9:de:0a:d4:38:fc:cc:31:f3:c8:93:15:42:e5: 57:f9:bd:0e:68:68:5a:9c:93:ba:19:77:64:07:3f: 02:a3:d1:75:bb:10:e5:b0:15:6a:1e:d3:9a:00:7b: 8f:d1:46:2a:1c:8f:aa:e6:98:2f:52:32:92:25:46: 26:09:e4:8b:2d:38:e3:6f:4f:e9:de:14:5c:bf:9c: b9:22:96:86:9d:4c:69:78:ae:0d:0d:92:86:56:e2: eb:70:26:01:46:bb:92:a7:eb:8f:27:24:56:06:e9: 12:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:B2:E7:38:A9:59:3E:40:0B:0A:D2:EC:68:41:39:01:66:86:95:16 X509v3 Authority Key Identifier: keyid:88:D0:8B:86:15:7C:6B:28:E6:AC:98:2E:0C:3F:EB:1A:3E:C3:28:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iNCLhhV8ayjmrJguDD_rGj7DKBA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/760452-f63c-48aa-a3e0-38d0cf8fb8b8/1/iNCLhhV8ayjmrJguDD_rGj7DKBA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/63/760452-f63c-48aa-a3e0-38d0cf8fb8b8/1/iNCLhhV8ayjmrJguDD_rGj7DKBA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 03:b2:bd:e0:18:58:10:4c:a5:dd:fa:19:44:6d:0f:d9:56:b8: 49:a8:5d:db:76:a2:02:69:00:da:82:e9:6f:88:f9:76:d9:a1: 1a:6d:82:c5:a2:e1:b0:f6:db:0c:4a:f8:7d:7e:3b:f4:51:72: 73:92:01:54:66:f3:69:7b:c6:25:99:07:9a:52:9a:4f:01:fa: 49:9c:ec:6b:60:65:ef:1d:62:b4:58:7e:fd:ea:20:a5:8d:59: e8:ef:ea:ee:ff:c0:02:c1:79:17:8f:97:82:ab:65:e4:bc:9f: 78:5c:16:9f:8e:94:5f:53:f4:51:04:65:f7:85:ce:76:64:2a: 21:0b:79:48:2a:40:7f:63:b9:ae:d2:c8:82:e6:c5:ad:93:64: 32:5a:aa:83:c6:ce:3f:81:dd:ea:c1:23:91:fa:34:e0:ef:7e: a2:82:f8:b8:4f:9b:fa:d8:50:8d:35:83:c2:8a:1c:bf:53:74: 5b:d8:15:da:25:7e:de:86:04:9e:00:91:34:12:ff:ef:ab:b8: 91:d0:bc:7c:02:91:4e:54:4f:16:45:fe:85:48:90:5c:79:b1: a4:da:0f:f9:55:4c:67:28:9e:6f:19:70:ff:c1:fd:c1:f9:cc: b8:f8:b8:78:e5:25:5b:7d:9e:59:7f:a9:35:66:f8:a2:c8:77: 1a:fc:be:f1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZssZsLazffGq+85zxQiE/aAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg4ZDA4Yjg2MTU3YzZiMjhlNmFjOTgyZTBjM2ZlYjFhM2Vj MzI4MTAwHhcNMjUxMjE3MTMwMTMwWhcNMjUxMjE4MTMwMTMwWjAzMTEwLwYDVQQD EygxYWIyZTczOGE5NTkzZTQwMGIwYWQyZWM2ODQxMzkwMTY2ODY5NTE2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA56Ya2Sa+qksh9i28A7I2QpQnKjVO yTHUhE0zPevq7c78i0Y8N/EHwpwmT+MJDNUx+tVHPuVuW9DrW3q1hR2htsxDtwqr B+BTHNjxy2G1F1qv2EQ7Ybs0/4jyD9/b0UIB6nXXzQHQfw0vy6r3UnsClXndRx7U MSdj1BY31CEGJKHiwSsclbOoEo902YpRQ1Uth8ji5xoQ2d4K1Dj8zDHzyJMVQuVX +b0OaGhanJO6GXdkBz8Co9F1uxDlsBVqHtOaAHuP0UYqHI+q5pgvUjKSJUYmCeSL LTjjb0/p3hRcv5y5IpaGnUxpeK4NDZKGVuLrcCYBRruSp+uPJyRWBukS9wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBqy5zipWT5ACwrS7GhBOQFmhpUWMB8GA1UdIwQY MBaAFIjQi4YVfGso5qyYLgw/6xo+wygQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaU5DTGhoVjhheWptckpndUREX3JHajdES0JBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82My83NjA0NTItZjYzYy00OGFhLWEzZTAt MzhkMGNmOGZiOGI4LzEvaU5DTGhoVjhheWptckpndUREX3JHajdES0JBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82My83NjA0NTItZjYzYy00OGFhLWEzZTAtMzhkMGNmOGZiOGI4 LzEvaU5DTGhoVjhheWptckpndUREX3JHajdES0JBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAA7K94BhY EEyl3foZRG0P2Va4Sahd23aiAmkA2oLpb4j5dtmhGm2CxaLhsPbbDEr4fX479FFy c5IBVGbzaXvGJZkHmlKaTwH6SZzsa2Bl7x1itFh+/eogpY1Z6O/q7v/AAsF5F4+X gqtl5LyfeFwWn46UX1P0UQRl94XOdmQqIQt5SCpAf2O5rtLIgubFrZNkMlqqg8bO P4Hd6sEjkfo04O9+ooL4uE+b+thQjTWDwoocv1N0W9gV2iV+3oYEngCRNBL/76u4 kdC8fAKRTlRPFkX+hUiQXHmxpNoP+VVMZyiebxlw/8H9wfnMuPi4eOUlW32eWX+p NWb4osh3Gvy+8Q== -----END CERTIFICATE-----Generated at Wed Dec 17 19:03:47 2025 by rpki-client