This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/04ba26-f1b9-4285-b7fa-ee982a512f43/1/iVmuP0F3o83ZZo0MW4qJ-RhrW_w.mft File: iVmuP0F3o83ZZo0MW4qJ-RhrW_w.mft (raw, json) Hash identifier: KMVvGWyIYkYvsggTNFD2PI2sdcktSEaVFNuoXyN1YpY= Subject key identifier: 81:2B:71:15:CF:2D:A2:66:EF:2D:26:91:5F:C6:BD:99:75:B2:E3:9E Authority key identifier: 89:59:AE:3F:41:77:A3:CD:D9:66:8D:0C:5B:8A:89:F9:18:6B:5B:FC Certificate issuer: /CN=8959ae3f4177a3cdd9668d0c5b8a89f9186b5bfc Certificate serial: 019B3BA283DBDA35D7F094C01986B7675959 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iVmuP0F3o83ZZo0MW4qJ-RhrW_w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/04ba26-f1b9-4285-b7fa-ee982a512f43/1/iVmuP0F3o83ZZo0MW4qJ-RhrW_w.mft Manifest number: 1786 Signing time: Sat 20 Dec 2025 12:01:04 +0000 Manifest this update: Sat 20 Dec 2025 12:01:04 +0000 Manifest next update: Sun 21 Dec 2025 12:01:04 +0000 Files and hashes: 1: iVmuP0F3o83ZZo0MW4qJ-RhrW_w.crl (hash: O0bLPLoiuE7yUWQ7Yx/5fvDmdboPiAty8rInSAfcvHI=) 2: w8vjCf4MhWSno6arrBizV8hRGB0.roa (hash: u0VlJI61dIeh8T7++/kZccPzyKi9DwtmR02dU9ACLS8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/04ba26-f1b9-4285-b7fa-ee982a512f43/1/iVmuP0F3o83ZZo0MW4qJ-RhrW_w.crl rsync://rpki.ripe.net/repository/DEFAULT/84/04ba26-f1b9-4285-b7fa-ee982a512f43/1/iVmuP0F3o83ZZo0MW4qJ-RhrW_w.mft rsync://rpki.ripe.net/repository/DEFAULT/iVmuP0F3o83ZZo0MW4qJ-RhrW_w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 10:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3b:a2:83:db:da:35:d7:f0:94:c0:19:86:b7:67:59:59 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8959ae3f4177a3cdd9668d0c5b8a89f9186b5bfc Validity Not Before: Dec 20 12:01:04 2025 GMT Not After : Dec 21 12:01:04 2025 GMT Subject: CN=812b7115cf2da266ef2d26915fc6bd9975b2e39e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:16:d5:6b:0a:8b:e3:60:50:a9:ae:9d:bd:67: 34:c5:d2:be:da:d3:21:2b:40:c0:1e:d4:25:1c:7f: 7c:43:8a:76:a8:24:62:92:f1:6d:ec:dd:be:34:c2: 84:a1:bd:6f:96:58:57:eb:6d:c9:87:5e:5c:5e:98: 51:ea:e1:c6:2d:a0:2a:77:a1:54:a4:f1:72:ee:2c: 3d:42:31:09:57:5c:4c:e9:c7:1f:b5:6a:55:8a:72: e3:fd:49:1a:76:6b:39:2c:f6:75:1c:1a:14:9c:66: 37:99:a2:f1:02:77:d2:67:1d:99:ae:d1:a3:83:9e: 35:f4:4b:85:01:5e:25:5a:5c:ba:57:a6:8e:c9:a6: 7f:05:04:52:9b:ba:db:b0:6d:3a:9b:46:4d:c3:c4: 7f:dd:ef:eb:31:a0:95:ef:59:b0:44:b1:0d:39:ac: 66:0e:6b:4a:7d:e9:21:40:6a:01:0c:70:68:26:d4: 19:d3:95:28:94:ae:90:09:13:6f:6d:73:9d:7d:a3: 4b:20:4d:a5:4f:4b:7f:6f:d9:cf:17:c8:3f:8f:a6: 75:88:66:33:75:4c:01:68:13:9a:00:e2:a1:a1:0f: 90:1f:4a:f0:35:5c:2c:70:40:81:ec:1c:63:1e:e5: dc:1a:94:51:26:4f:f7:91:e8:d1:70:3b:ce:8a:d1: 25:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:2B:71:15:CF:2D:A2:66:EF:2D:26:91:5F:C6:BD:99:75:B2:E3:9E X509v3 Authority Key Identifier: keyid:89:59:AE:3F:41:77:A3:CD:D9:66:8D:0C:5B:8A:89:F9:18:6B:5B:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iVmuP0F3o83ZZo0MW4qJ-RhrW_w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/04ba26-f1b9-4285-b7fa-ee982a512f43/1/iVmuP0F3o83ZZo0MW4qJ-RhrW_w.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/84/04ba26-f1b9-4285-b7fa-ee982a512f43/1/iVmuP0F3o83ZZo0MW4qJ-RhrW_w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 93:15:12:fe:1b:60:c9:ce:b0:ca:ed:20:f0:ac:e9:34:51:a9: 5f:1c:b2:48:1c:c3:12:4a:f5:63:17:f4:ad:18:b5:9a:3a:78: 06:53:8d:2d:5f:8e:77:6d:ae:42:ae:2d:39:57:6c:fb:a1:d7: 93:9e:99:cd:d8:8c:df:ea:b6:e0:fd:af:01:4d:80:b8:e2:ee: 24:81:04:3a:ec:7a:c0:77:40:d0:a3:0b:45:d1:2c:61:8a:0c: 88:0d:98:06:74:4a:f8:58:03:80:4b:bc:2f:ab:75:3f:3f:6e: cd:ef:08:04:a5:17:68:91:8d:f1:4c:ca:15:cb:71:a1:61:e7: 07:5c:cf:45:c9:e2:90:fc:30:db:98:5d:28:ed:ec:80:a2:ad: 7e:72:d1:ea:36:e4:02:ab:bc:29:58:f5:cb:b1:28:af:6c:29: 40:1f:49:6f:e3:e5:53:d2:65:ca:ca:c8:2b:7c:3b:48:ae:eb: 14:11:64:8f:c0:9d:0b:8f:56:80:ce:74:e5:19:36:45:a5:5b: 15:06:17:a7:1b:c0:ce:8d:e1:62:7a:17:b2:a7:28:64:a7:74: e4:74:bc:0b:ab:b8:68:3e:f2:33:c4:b7:65:0f:2a:70:0c:75: a9:6b:85:d8:c4:7e:4e:a5:2c:b8:a7:3e:d3:16:53:8e:f1:a2: c6:ad:cd:df -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs7ooPb2jXX8JTAGYa3Z1lZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg5NTlhZTNmNDE3N2EzY2RkOTY2OGQwYzViOGE4OWY5MTg2 YjViZmMwHhcNMjUxMjIwMTIwMTA0WhcNMjUxMjIxMTIwMTA0WjAzMTEwLwYDVQQD Eyg4MTJiNzExNWNmMmRhMjY2ZWYyZDI2OTE1ZmM2YmQ5OTc1YjJlMzllMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkRbVawqL42BQqa6dvWc0xdK+2tMh K0DAHtQlHH98Q4p2qCRikvFt7N2+NMKEob1vllhX623Jh15cXphR6uHGLaAqd6FU pPFy7iw9QjEJV1xM6ccftWpVinLj/Ukadms5LPZ1HBoUnGY3maLxAnfSZx2ZrtGj g5419EuFAV4lWly6V6aOyaZ/BQRSm7rbsG06m0ZNw8R/3e/rMaCV71mwRLENOaxm DmtKfekhQGoBDHBoJtQZ05UolK6QCRNvbXOdfaNLIE2lT0t/b9nPF8g/j6Z1iGYz dUwBaBOaAOKhoQ+QH0rwNVwscECB7BxjHuXcGpRRJk/3kejRcDvOitElowIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIErcRXPLaJm7y0mkV/GvZl1suOeMB8GA1UdIwQY MBaAFIlZrj9Bd6PN2WaNDFuKifkYa1v8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaVZtdVAwRjNvODNaWm8wTVc0cUotUmhyV193LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NC8wNGJhMjYtZjFiOS00Mjg1LWI3ZmEt ZWU5ODJhNTEyZjQzLzEvaVZtdVAwRjNvODNaWm8wTVc0cUotUmhyV193Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84NC8wNGJhMjYtZjFiOS00Mjg1LWI3ZmEtZWU5ODJhNTEyZjQz LzEvaVZtdVAwRjNvODNaWm8wTVc0cUotUmhyV193LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkxUS/htg yc6wyu0g8KzpNFGpXxyySBzDEkr1Yxf0rRi1mjp4BlONLV+Od22uQq4tOVds+6HX k56ZzdiM3+q24P2vAU2AuOLuJIEEOux6wHdA0KMLRdEsYYoMiA2YBnRK+FgDgEu8 L6t1Pz9uze8IBKUXaJGN8UzKFctxoWHnB1zPRcnikPww25hdKO3sgKKtfnLR6jbk Aqu8KVj1y7Eor2wpQB9Jb+PlU9JlysrIK3w7SK7rFBFkj8CdC49WgM505Rk2RaVb FQYXpxvAzo3hYnoXsqcoZKd05HS8C6u4aD7yM8S3ZQ8qcAx1qWuF2MR+TqUsuKc+ 0xZTjvGixq3N3w== -----END CERTIFICATE-----Generated at Sat Dec 20 17:53:20 2025 by rpki-client