This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/c66ff9-10ea-4b44-9169-c5f670239718/1/_iT7KBKuLz1Nm7RYndcx5UaXkQk.mft File: _iT7KBKuLz1Nm7RYndcx5UaXkQk.mft (raw, json) Hash identifier: cbkDsAYop36S1HGr7OvoUydnNvk8JBgNW/I5g2xmV+o= Subject key identifier: E2:4F:84:80:AD:A9:68:F5:ED:16:4C:2D:F6:58:56:44:85:24:A6:53 Authority key identifier: FE:24:FB:28:12:AE:2F:3D:4D:9B:B4:58:9D:D7:31:E5:46:97:91:09 Certificate issuer: /CN=fe24fb2812ae2f3d4d9bb4589dd731e546979109 Certificate serial: 019B43C9D92AFC8344453AFF07D484B912B7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_iT7KBKuLz1Nm7RYndcx5UaXkQk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/c66ff9-10ea-4b44-9169-c5f670239718/1/_iT7KBKuLz1Nm7RYndcx5UaXkQk.mft Manifest number: 1369 Signing time: Mon 22 Dec 2025 02:01:00 +0000 Manifest this update: Mon 22 Dec 2025 02:01:00 +0000 Manifest next update: Tue 23 Dec 2025 02:01:00 +0000 Files and hashes: 1: 7ivcRbHUq4tA4Hz9Wb386VjaBS0.roa (hash: CGbH34TXJ114G1ywTRowOQ13NrG2LKX6vQJmgAwZZz4=) 2: _iT7KBKuLz1Nm7RYndcx5UaXkQk.crl (hash: sZbbsm9Z1lqx34FRhSAYYeQORP0ZvYmkyDUt4Jk27NQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/c66ff9-10ea-4b44-9169-c5f670239718/1/_iT7KBKuLz1Nm7RYndcx5UaXkQk.crl rsync://rpki.ripe.net/repository/DEFAULT/77/c66ff9-10ea-4b44-9169-c5f670239718/1/_iT7KBKuLz1Nm7RYndcx5UaXkQk.mft rsync://rpki.ripe.net/repository/DEFAULT/_iT7KBKuLz1Nm7RYndcx5UaXkQk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 02:01:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:43:c9:d9:2a:fc:83:44:45:3a:ff:07:d4:84:b9:12:b7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fe24fb2812ae2f3d4d9bb4589dd731e546979109 Validity Not Before: Dec 22 02:01:00 2025 GMT Not After : Dec 23 02:01:00 2025 GMT Subject: CN=e24f8480ada968f5ed164c2df65856448524a653 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:2d:44:ac:b5:18:de:c7:ef:2a:96:bf:dd:0e: cd:30:67:2c:dc:0c:a8:b2:8c:b3:d7:fc:8f:d2:da: 95:07:3f:bd:12:ba:62:27:12:d5:81:8a:61:10:f8: c2:ca:ce:56:d7:3b:c0:f4:b6:40:bd:1e:9b:b3:2f: 0f:68:84:4c:4a:24:3b:7b:ac:88:99:f0:30:8e:f1: 5d:b5:79:70:43:b2:1b:d6:d1:b4:c4:e7:b0:7c:45: 07:f9:f3:7d:28:7e:7a:24:33:d7:8e:9d:92:98:c3: a7:ee:24:85:f5:c3:58:89:8f:00:18:fb:0a:c3:b5: a8:61:f6:2a:d3:ef:b0:8c:62:53:de:b1:2c:db:a7: 62:32:43:24:67:2a:4f:b1:e3:33:44:1a:7e:df:63: 68:0e:ae:7b:0e:46:2f:6e:42:99:61:7a:3f:60:86: e4:2a:cd:9a:a3:ed:d4:ad:05:71:21:52:51:fe:12: 5e:b4:92:81:23:24:41:e4:3d:a5:3c:97:cc:26:d4: 60:1e:d5:07:d9:30:e4:8c:8f:ed:b1:83:8b:47:be: fc:e9:e3:b7:b9:8f:62:2f:1b:5d:fd:46:39:cf:01: 05:78:4e:d2:d6:ad:6a:f0:83:55:c9:45:3b:79:82: 35:74:f0:bf:ae:bc:0e:f1:a2:2f:66:b2:6b:b6:d4: 59:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:4F:84:80:AD:A9:68:F5:ED:16:4C:2D:F6:58:56:44:85:24:A6:53 X509v3 Authority Key Identifier: keyid:FE:24:FB:28:12:AE:2F:3D:4D:9B:B4:58:9D:D7:31:E5:46:97:91:09 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_iT7KBKuLz1Nm7RYndcx5UaXkQk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/c66ff9-10ea-4b44-9169-c5f670239718/1/_iT7KBKuLz1Nm7RYndcx5UaXkQk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/77/c66ff9-10ea-4b44-9169-c5f670239718/1/_iT7KBKuLz1Nm7RYndcx5UaXkQk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 86:03:2f:59:ed:28:ba:20:99:a6:a6:51:28:f4:e8:96:f5:55: ad:28:60:67:91:44:fa:f7:93:3f:50:24:ff:1d:43:b9:25:d6: ca:10:c2:ef:eb:47:39:6c:5c:f1:19:5e:8f:ce:12:34:c5:29: aa:b8:1d:29:b6:67:a8:c0:4a:c5:40:4c:f4:31:59:8c:cf:7d: f8:56:09:9b:00:60:d0:81:20:ce:8d:7b:2d:0a:b7:3b:e7:71: 6a:51:14:8a:ec:86:df:34:84:b7:d8:b1:49:81:5f:1d:2d:b8: a0:d4:90:e4:11:fa:b1:4b:c7:68:d4:a2:b0:26:1e:c0:8e:8c: 2f:66:f6:13:09:bb:65:47:a3:27:99:e9:ba:07:7e:93:20:eb: 69:dc:d7:2b:1d:91:f0:77:af:84:dc:24:cd:bb:b0:16:2e:57: 30:e6:8a:dd:45:4b:ef:e2:24:e7:9f:35:4c:ae:25:81:10:35: 4a:b5:b1:af:7f:8a:7e:46:2a:8b:38:a6:85:25:71:bb:4b:9f: e0:6e:21:4a:ca:03:d9:fe:36:33:d6:95:9f:c7:69:fe:6d:f4: ab:32:f5:14:f7:bb:37:a2:99:45:b1:e4:1c:77:49:44:0c:c7: dd:ac:2b:bc:f6:bd:2f:0c:5e:fd:2e:b2:98:55:76:f4:83:53: 15:b1:a0:53 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtDydkq/INERTr/B9SEuRK3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZlMjRmYjI4MTJhZTJmM2Q0ZDliYjQ1ODlkZDczMWU1NDY5 NzkxMDkwHhcNMjUxMjIyMDIwMTAwWhcNMjUxMjIzMDIwMTAwWjAzMTEwLwYDVQQD EyhlMjRmODQ4MGFkYTk2OGY1ZWQxNjRjMmRmNjU4NTY0NDg1MjRhNjUzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAty1ErLUY3sfvKpa/3Q7NMGcs3Ayo soyz1/yP0tqVBz+9ErpiJxLVgYphEPjCys5W1zvA9LZAvR6bsy8PaIRMSiQ7e6yI mfAwjvFdtXlwQ7Ib1tG0xOewfEUH+fN9KH56JDPXjp2SmMOn7iSF9cNYiY8AGPsK w7WoYfYq0++wjGJT3rEs26diMkMkZypPseMzRBp+32NoDq57DkYvbkKZYXo/YIbk Ks2ao+3UrQVxIVJR/hJetJKBIyRB5D2lPJfMJtRgHtUH2TDkjI/tsYOLR7786eO3 uY9iLxtd/UY5zwEFeE7S1q1q8INVyUU7eYI1dPC/rrwO8aIvZrJrttRZEQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOJPhICtqWj17RZMLfZYVkSFJKZTMB8GA1UdIwQY MBaAFP4k+ygSri89TZu0WJ3XMeVGl5EJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX2lUN0tCS3VMejFObTdSWW5kY3g1VWFYa1FrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ny9jNjZmZjktMTBlYS00YjQ0LTkxNjkt YzVmNjcwMjM5NzE4LzEvX2lUN0tCS3VMejFObTdSWW5kY3g1VWFYa1FrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Ny9jNjZmZjktMTBlYS00YjQ0LTkxNjktYzVmNjcwMjM5NzE4 LzEvX2lUN0tCS3VMejFObTdSWW5kY3g1VWFYa1FrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhgMvWe0o uiCZpqZRKPTolvVVrShgZ5FE+veTP1Ak/x1DuSXWyhDC7+tHOWxc8Rlej84SNMUp qrgdKbZnqMBKxUBM9DFZjM99+FYJmwBg0IEgzo17LQq3O+dxalEUiuyG3zSEt9ix SYFfHS24oNSQ5BH6sUvHaNSisCYewI6ML2b2Ewm7ZUejJ5npugd+kyDradzXKx2R 8HevhNwkzbuwFi5XMOaK3UVL7+Ik5581TK4lgRA1SrWxr3+KfkYqizimhSVxu0uf 4G4hSsoD2f42M9aVn8dp/m30qzL1FPe7N6KZRbHkHHdJRAzH3awrvPa9Lwxe/S6y mFV29INTFbGgUw== -----END CERTIFICATE-----Generated at Mon Dec 22 11:58:43 2025 by rpki-client