This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/04ba26-f1b9-4285-b7fa-ee982a512f43/1/iVmuP0F3o83ZZo0MW4qJ-RhrW_w.mft File: iVmuP0F3o83ZZo0MW4qJ-RhrW_w.mft (raw, json) Hash identifier: 2l2yaxwod42r2UD//lkjNsxLGf1yOw+qk0wh4AzPqXE= Subject key identifier: D1:13:2B:F0:9D:6D:0D:DB:88:E5:F9:1F:2E:52:16:D2:7D:78:C6:5A Authority key identifier: 89:59:AE:3F:41:77:A3:CD:D9:66:8D:0C:5B:8A:89:F9:18:6B:5B:FC Certificate issuer: /CN=8959ae3f4177a3cdd9668d0c5b8a89f9186b5bfc Certificate serial: 019B4738FCB4AFEE5B2306AF5C32ECBC6B31 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iVmuP0F3o83ZZo0MW4qJ-RhrW_w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/04ba26-f1b9-4285-b7fa-ee982a512f43/1/iVmuP0F3o83ZZo0MW4qJ-RhrW_w.mft Manifest number: 178C Signing time: Mon 22 Dec 2025 18:01:15 +0000 Manifest this update: Mon 22 Dec 2025 18:01:15 +0000 Manifest next update: Tue 23 Dec 2025 18:01:15 +0000 Files and hashes: 1: iVmuP0F3o83ZZo0MW4qJ-RhrW_w.crl (hash: FI0nzKzr3ZLPnO7bM0l2lHf2d2eZz1HiKZjQpcUwWc4=) 2: w8vjCf4MhWSno6arrBizV8hRGB0.roa (hash: u0VlJI61dIeh8T7++/kZccPzyKi9DwtmR02dU9ACLS8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/04ba26-f1b9-4285-b7fa-ee982a512f43/1/iVmuP0F3o83ZZo0MW4qJ-RhrW_w.crl rsync://rpki.ripe.net/repository/DEFAULT/84/04ba26-f1b9-4285-b7fa-ee982a512f43/1/iVmuP0F3o83ZZo0MW4qJ-RhrW_w.mft rsync://rpki.ripe.net/repository/DEFAULT/iVmuP0F3o83ZZo0MW4qJ-RhrW_w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 15:30:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:47:38:fc:b4:af:ee:5b:23:06:af:5c:32:ec:bc:6b:31 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8959ae3f4177a3cdd9668d0c5b8a89f9186b5bfc Validity Not Before: Dec 22 18:01:15 2025 GMT Not After : Dec 23 18:01:15 2025 GMT Subject: CN=d1132bf09d6d0ddb88e5f91f2e5216d27d78c65a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:07:40:f2:04:af:e6:55:75:14:66:07:56:42: cf:22:62:ff:55:c8:93:e6:6b:8e:57:34:a3:ff:9e: 1e:92:e0:bd:12:e2:b1:ac:a7:c0:fd:bb:20:39:17: ce:d3:37:c1:31:b9:15:14:f3:e5:a6:83:f0:bb:c7: cc:fa:05:ac:2d:fb:39:50:e0:b2:e4:bb:a4:3f:4f: 48:e4:fd:1a:77:8d:c9:24:d0:72:98:7d:d4:8b:9e: bd:f9:f9:cc:53:04:3a:02:13:68:6c:ad:c7:11:88: 51:83:d2:10:a6:27:87:31:64:54:1c:1d:1c:48:d4: 4d:6a:17:c8:34:26:7d:f5:44:39:c9:63:16:22:72: 73:05:ce:66:af:ce:40:38:9d:46:cb:eb:db:26:d7: 1b:1a:36:2c:ca:fc:ed:3b:58:72:6a:1f:42:32:d7: 5a:78:fe:ab:d7:05:61:49:ec:0a:f9:06:0f:dd:a8: c0:bc:51:0f:04:16:12:5e:84:65:86:f0:30:c5:50: 95:88:c7:ac:0f:25:6a:3e:3e:40:53:0a:d9:62:6d: 76:6f:5a:e6:17:42:af:ff:47:01:19:de:33:90:ee: 1e:f4:69:80:f3:76:9c:f2:41:7c:19:48:22:3a:5d: 97:ba:2a:b9:0a:11:8f:ce:a8:f5:89:dc:f4:52:a0: dc:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:13:2B:F0:9D:6D:0D:DB:88:E5:F9:1F:2E:52:16:D2:7D:78:C6:5A X509v3 Authority Key Identifier: keyid:89:59:AE:3F:41:77:A3:CD:D9:66:8D:0C:5B:8A:89:F9:18:6B:5B:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iVmuP0F3o83ZZo0MW4qJ-RhrW_w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/04ba26-f1b9-4285-b7fa-ee982a512f43/1/iVmuP0F3o83ZZo0MW4qJ-RhrW_w.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/84/04ba26-f1b9-4285-b7fa-ee982a512f43/1/iVmuP0F3o83ZZo0MW4qJ-RhrW_w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 78:45:4b:e0:cb:34:2a:f4:49:8d:41:35:d0:f4:6a:8b:cf:52: 7c:4f:f5:27:f6:c5:36:f1:39:10:5f:d9:d0:02:30:a1:9d:04: cd:18:c9:17:23:f7:a3:3b:dc:88:a8:97:2c:15:c0:80:23:ae: 74:2d:b7:3f:45:c8:03:7f:d5:cb:a0:1f:73:96:cf:b6:f9:ca: 9f:fc:7b:09:47:75:5a:ea:bc:52:2b:e9:ea:bc:5b:f8:d0:b7: 1a:c6:85:16:ca:51:3b:a4:10:66:1d:7f:e5:87:94:48:c8:7e: 7f:56:15:6f:54:a6:3e:bb:0b:89:54:35:35:17:30:b4:12:24: 6e:bc:ae:69:69:11:24:16:20:b4:0c:c4:11:d6:8c:b4:72:4f: 33:8c:a6:ec:30:ec:c2:f0:f6:50:79:03:09:f9:0e:0e:ab:33: a2:f4:08:59:84:01:2c:f1:aa:ba:27:62:ea:da:43:f2:d4:65: d8:70:70:0c:74:ac:fc:bb:77:24:9c:fe:62:6a:c4:fd:dd:c1: f5:53:5c:a4:8d:5a:f2:c6:9a:e3:b1:22:a1:22:64:56:94:0a: 3b:f1:bc:ee:f4:1a:51:6e:99:ab:ba:17:3c:8a:69:34:36:a9: bf:d7:d3:9a:e5:0c:4c:ae:88:c8:79:6b:7c:ea:be:5c:b5:55: fc:4d:6c:25 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtHOPy0r+5bIwavXDLsvGsxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg5NTlhZTNmNDE3N2EzY2RkOTY2OGQwYzViOGE4OWY5MTg2 YjViZmMwHhcNMjUxMjIyMTgwMTE1WhcNMjUxMjIzMTgwMTE1WjAzMTEwLwYDVQQD EyhkMTEzMmJmMDlkNmQwZGRiODhlNWY5MWYyZTUyMTZkMjdkNzhjNjVhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgwdA8gSv5lV1FGYHVkLPImL/VciT 5muOVzSj/54ekuC9EuKxrKfA/bsgORfO0zfBMbkVFPPlpoPwu8fM+gWsLfs5UOCy 5LukP09I5P0ad43JJNBymH3Ui569+fnMUwQ6AhNobK3HEYhRg9IQpieHMWRUHB0c SNRNahfINCZ99UQ5yWMWInJzBc5mr85AOJ1Gy+vbJtcbGjYsyvztO1hyah9CMtda eP6r1wVhSewK+QYP3ajAvFEPBBYSXoRlhvAwxVCViMesDyVqPj5AUwrZYm12b1rm F0Kv/0cBGd4zkO4e9GmA83ac8kF8GUgiOl2Xuiq5ChGPzqj1idz0UqDcTQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNETK/CdbQ3biOX5Hy5SFtJ9eMZaMB8GA1UdIwQY MBaAFIlZrj9Bd6PN2WaNDFuKifkYa1v8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaVZtdVAwRjNvODNaWm8wTVc0cUotUmhyV193LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NC8wNGJhMjYtZjFiOS00Mjg1LWI3ZmEt ZWU5ODJhNTEyZjQzLzEvaVZtdVAwRjNvODNaWm8wTVc0cUotUmhyV193Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84NC8wNGJhMjYtZjFiOS00Mjg1LWI3ZmEtZWU5ODJhNTEyZjQz LzEvaVZtdVAwRjNvODNaWm8wTVc0cUotUmhyV193LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeEVL4Ms0 KvRJjUE10PRqi89SfE/1J/bFNvE5EF/Z0AIwoZ0EzRjJFyP3ozvciKiXLBXAgCOu dC23P0XIA3/Vy6Afc5bPtvnKn/x7CUd1Wuq8Uivp6rxb+NC3GsaFFspRO6QQZh1/ 5YeUSMh+f1YVb1SmPrsLiVQ1NRcwtBIkbryuaWkRJBYgtAzEEdaMtHJPM4ym7DDs wvD2UHkDCfkODqszovQIWYQBLPGquidi6tpD8tRl2HBwDHSs/Lt3JJz+YmrE/d3B 9VNcpI1a8saa47EioSJkVpQKO/G87vQaUW6Zq7oXPIppNDapv9fTmuUMTK6IyHlr fOq+XLVV/E1sJQ== -----END CERTIFICATE-----Generated at Mon Dec 22 21:59:34 2025 by rpki-client