This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/7fb381-fc44-44f6-a385-f8a469d4e2b2/1/IacXNhMJ0pOTUcnYuiFz24MZqI8.mft File: IacXNhMJ0pOTUcnYuiFz24MZqI8.mft (raw, json) Hash identifier: K35hgBKxtkpzpRqniL4MOxFLsbJIFTmefaLLcp+ndjE= Subject key identifier: E0:A4:62:D8:95:BD:94:13:96:A6:6A:5C:87:A4:58:F3:A8:B0:F7:4D Authority key identifier: 21:A7:17:36:13:09:D2:93:93:51:C9:D8:BA:21:73:DB:83:19:A8:8F Certificate issuer: /CN=21a717361309d2939351c9d8ba2173db8319a88f Certificate serial: 019B4AA83CF4AB6CA07CE5AB0D526AE5E2CB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IacXNhMJ0pOTUcnYuiFz24MZqI8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/7fb381-fc44-44f6-a385-f8a469d4e2b2/1/IacXNhMJ0pOTUcnYuiFz24MZqI8.mft Manifest number: 0FAC Signing time: Tue 23 Dec 2025 10:01:38 +0000 Manifest this update: Tue 23 Dec 2025 10:01:38 +0000 Manifest next update: Wed 24 Dec 2025 10:01:38 +0000 Files and hashes: 1: IacXNhMJ0pOTUcnYuiFz24MZqI8.crl (hash: 2+8rQJa105S6m/gSzhG4TweTs2W1fx19U5njoNULea4=) 2: PeD0qOPxUYxeVA81pP9--xNVIzU.roa (hash: fJvgODfg2m2y6FUhDf+GL6D88mfLwM4rg59sQSq2L84=) 3: qwmmpmJft8mwuiEXYTlzhJQuep0.roa (hash: Q0Z/E8v8Q7W2fm0rXhwdPc4pFVbeDlufQTIsqxx5ZeE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/7fb381-fc44-44f6-a385-f8a469d4e2b2/1/IacXNhMJ0pOTUcnYuiFz24MZqI8.crl rsync://rpki.ripe.net/repository/DEFAULT/67/7fb381-fc44-44f6-a385-f8a469d4e2b2/1/IacXNhMJ0pOTUcnYuiFz24MZqI8.mft rsync://rpki.ripe.net/repository/DEFAULT/IacXNhMJ0pOTUcnYuiFz24MZqI8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 24 Dec 2025 10:01:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4a:a8:3c:f4:ab:6c:a0:7c:e5:ab:0d:52:6a:e5:e2:cb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=21a717361309d2939351c9d8ba2173db8319a88f Validity Not Before: Dec 23 10:01:38 2025 GMT Not After : Dec 24 10:01:38 2025 GMT Subject: CN=e0a462d895bd941396a66a5c87a458f3a8b0f74d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:17:82:19:84:0f:fc:02:59:e2:b0:d6:32:09: ce:f1:cd:6a:90:03:91:a7:f7:75:c5:f9:11:75:d4: 19:e7:49:a0:09:86:69:78:3b:b4:9d:82:45:04:61: 68:1d:60:11:53:ba:65:2e:bc:58:57:80:05:a8:81: 68:a7:e3:73:eb:b5:d7:e7:17:a9:67:b8:e0:58:5f: 05:a8:bf:0d:1b:12:da:0a:e1:1f:05:d7:ca:d9:47: 81:d3:3b:75:93:4e:e4:37:92:d6:27:14:e1:71:5d: 2c:cd:cd:a2:47:3d:8a:fb:9c:7c:e4:f7:67:ce:d0: e3:9e:a0:2d:30:1a:96:29:92:8b:40:14:9f:01:96: 60:b8:b6:61:f1:54:3a:df:b2:d3:dc:3b:59:22:fe: 65:92:d0:32:6a:32:3f:92:6a:8d:4b:68:7a:fa:09: 85:38:1d:97:e4:fa:e7:c1:48:60:37:fa:32:1f:75: 46:38:26:1b:57:1f:79:fa:61:4d:17:cd:03:b2:f3: fa:46:0c:9f:4e:82:3c:6f:5d:49:d6:ce:0d:af:55: ec:c5:81:a1:6e:14:74:19:7c:f8:8a:e8:6b:1e:28: 15:db:40:55:97:f9:2b:65:27:19:92:77:cb:c9:90: c6:58:cd:22:74:76:4e:be:48:89:29:cd:d5:6e:eb: 1b:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:A4:62:D8:95:BD:94:13:96:A6:6A:5C:87:A4:58:F3:A8:B0:F7:4D X509v3 Authority Key Identifier: keyid:21:A7:17:36:13:09:D2:93:93:51:C9:D8:BA:21:73:DB:83:19:A8:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IacXNhMJ0pOTUcnYuiFz24MZqI8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/7fb381-fc44-44f6-a385-f8a469d4e2b2/1/IacXNhMJ0pOTUcnYuiFz24MZqI8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/67/7fb381-fc44-44f6-a385-f8a469d4e2b2/1/IacXNhMJ0pOTUcnYuiFz24MZqI8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3e:20:2c:e6:0f:7d:a8:32:13:2a:0f:15:2b:ba:58:16:24:e1: 25:35:d9:3e:59:ba:a8:5a:43:0c:4e:cd:15:c7:a6:99:18:5e: 8c:ac:f0:a7:0b:65:2e:9a:96:d4:a4:ab:34:7d:c6:7f:4b:eb: 56:b0:92:d9:80:70:6a:f7:59:db:6e:fb:25:3c:9c:62:e7:b2: 56:b2:bc:ed:64:48:4d:70:42:2a:2c:41:e8:c5:1a:9c:4a:cd: 14:71:81:0b:0c:e4:44:c5:48:31:22:0b:30:eb:04:65:39:38: 7d:c9:45:f8:08:95:b6:4c:a7:16:0b:dc:f0:96:15:8b:d7:2a: f5:4a:d5:8f:9b:88:4f:e3:14:0e:2d:91:bc:55:17:c5:37:5b: ab:fb:77:e3:5a:d7:31:31:33:a7:a7:01:92:b5:d2:c6:9b:ba: b4:ec:f7:be:12:23:53:de:36:33:fd:cf:86:e0:85:86:bb:f9: fb:97:8e:81:24:9e:58:6f:42:fd:b3:9d:4e:63:d9:66:17:c3: ed:63:16:ce:63:0e:1e:32:54:bf:1d:e2:81:a1:c9:c8:b9:f3: ff:01:bd:b4:12:f6:85:6b:16:a5:a5:f7:2f:e0:64:d4:7a:f7: f4:c5:8c:46:5e:1f:c7:34:eb:92:f9:dd:32:9e:19:81:b2:7f: 03:b6:19:7b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtKqDz0q2ygfOWrDVJq5eLLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIxYTcxNzM2MTMwOWQyOTM5MzUxYzlkOGJhMjE3M2RiODMx OWE4OGYwHhcNMjUxMjIzMTAwMTM4WhcNMjUxMjI0MTAwMTM4WjAzMTEwLwYDVQQD EyhlMGE0NjJkODk1YmQ5NDEzOTZhNjZhNWM4N2E0NThmM2E4YjBmNzRkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsReCGYQP/AJZ4rDWMgnO8c1qkAOR p/d1xfkRddQZ50mgCYZpeDu0nYJFBGFoHWARU7plLrxYV4AFqIFop+Nz67XX5xep Z7jgWF8FqL8NGxLaCuEfBdfK2UeB0zt1k07kN5LWJxThcV0szc2iRz2K+5x85Pdn ztDjnqAtMBqWKZKLQBSfAZZguLZh8VQ637LT3DtZIv5lktAyajI/kmqNS2h6+gmF OB2X5PrnwUhgN/oyH3VGOCYbVx95+mFNF80DsvP6RgyfToI8b11J1s4Nr1XsxYGh bhR0GXz4iuhrHigV20BVl/krZScZknfLyZDGWM0idHZOvkiJKc3VbusbSQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOCkYtiVvZQTlqZqXIekWPOosPdNMB8GA1UdIwQY MBaAFCGnFzYTCdKTk1HJ2Lohc9uDGaiPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSWFjWE5oTUowcE9UVWNuWXVpRnoyNE1acUk4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ny83ZmIzODEtZmM0NC00NGY2LWEzODUt ZjhhNDY5ZDRlMmIyLzEvSWFjWE5oTUowcE9UVWNuWXVpRnoyNE1acUk4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Ny83ZmIzODEtZmM0NC00NGY2LWEzODUtZjhhNDY5ZDRlMmIy LzEvSWFjWE5oTUowcE9UVWNuWXVpRnoyNE1acUk4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPiAs5g99 qDITKg8VK7pYFiThJTXZPlm6qFpDDE7NFcemmRhejKzwpwtlLpqW1KSrNH3Gf0vr VrCS2YBwavdZ2277JTycYueyVrK87WRITXBCKixB6MUanErNFHGBCwzkRMVIMSIL MOsEZTk4fclF+AiVtkynFgvc8JYVi9cq9UrVj5uIT+MUDi2RvFUXxTdbq/t341rX MTEzp6cBkrXSxpu6tOz3vhIjU942M/3PhuCFhrv5+5eOgSSeWG9C/bOdTmPZZhfD 7WMWzmMOHjJUvx3igaHJyLnz/wG9tBL2hWsWpaX3L+Bk1Hr39MWMRl4fxzTrkvnd Mp4ZgbJ/A7YZew== -----END CERTIFICATE-----Generated at Tue Dec 23 16:46:45 2025 by rpki-client