This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/60e376-993c-4baf-b590-6e6481e5765c/1/IFDfUfDlvIHbSwX0SfdDCNf8-i4.mft File: IFDfUfDlvIHbSwX0SfdDCNf8-i4.mft (raw, json) Hash identifier: LD7CRVdWMLJjKA+ErMT34FrKaeVVh/4imdBTFdbTak4= Subject key identifier: 0C:DE:A7:B0:EE:6A:C1:A9:B5:04:A1:80:C3:03:3B:BE:90:B1:9A:10 Authority key identifier: 20:50:DF:51:F0:E5:BC:81:DB:4B:05:F4:49:F7:43:08:D7:FC:FA:2E Certificate issuer: /CN=2050df51f0e5bc81db4b05f449f74308d7fcfa2e Certificate serial: 019B0E937BA23B270BD3BC9DD354148BA6EC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IFDfUfDlvIHbSwX0SfdDCNf8-i4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/60e376-993c-4baf-b590-6e6481e5765c/1/IFDfUfDlvIHbSwX0SfdDCNf8-i4.mft Manifest number: 16F8 Signing time: Thu 11 Dec 2025 18:01:45 +0000 Manifest this update: Thu 11 Dec 2025 18:01:45 +0000 Manifest next update: Fri 12 Dec 2025 18:01:45 +0000 Files and hashes: 1: 5TmF660osVLf2yedLZYIouqKzCQ.roa (hash: svEuw+A3XrP85kyKwdSMhC87V3nCBDwlLWE+iKrkH+s=) 2: IFDfUfDlvIHbSwX0SfdDCNf8-i4.crl (hash: sL/KhqwQeTqbApolCo81o002flKgl6SMNRtJJj5Jiu8=) 3: QbfQw6PQWXMnUYTcNMeoW813ttw.roa (hash: g9TBhQ7bZYV+JTfg685xMP7NzWGbPIajKmZ/OPgHv/k=) 4: SqW3-Pav388bYoCFb9onFjXDUEM.roa (hash: rQ+0p4O5Q843ntXsLKc+VAqP1ejZ7AJIeWPPGt1vzco=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/60e376-993c-4baf-b590-6e6481e5765c/1/IFDfUfDlvIHbSwX0SfdDCNf8-i4.crl rsync://rpki.ripe.net/repository/DEFAULT/ca/60e376-993c-4baf-b590-6e6481e5765c/1/IFDfUfDlvIHbSwX0SfdDCNf8-i4.mft rsync://rpki.ripe.net/repository/DEFAULT/IFDfUfDlvIHbSwX0SfdDCNf8-i4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 14:45:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0e:93:7b:a2:3b:27:0b:d3:bc:9d:d3:54:14:8b:a6:ec Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2050df51f0e5bc81db4b05f449f74308d7fcfa2e Validity Not Before: Dec 11 18:01:45 2025 GMT Not After : Dec 12 18:01:45 2025 GMT Subject: CN=0cdea7b0ee6ac1a9b504a180c3033bbe90b19a10 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:dc:94:a9:4f:b6:18:ad:15:74:e2:37:ea:6a: 07:57:4b:72:38:3b:bd:04:e6:10:fb:57:e3:16:4a: c3:63:b3:b8:e7:06:9d:c7:d9:3f:16:dc:0b:9b:df: 53:ab:2f:ee:ce:21:93:ce:6f:69:57:ca:c1:d9:91: 0e:fc:5d:a6:28:9c:b6:ad:b7:4b:82:d6:ac:a6:e4: ae:5e:22:ca:d9:0f:23:ce:36:b3:59:73:03:38:d4: 8a:41:a3:a4:a8:f7:f5:4d:25:61:c5:67:9a:cb:03: 0c:66:69:21:dc:37:3a:f1:86:f1:00:8d:0d:ea:39: df:a6:cf:13:14:2c:b8:a2:15:0b:c4:6a:a1:3f:ad: ea:7c:9d:bc:d4:e9:d8:66:9a:f3:dd:bf:89:c7:fa: 6c:10:bb:e5:22:73:b4:b1:3c:63:6b:2c:e3:32:ad: 59:38:35:52:42:d9:5a:69:c0:51:6c:c1:f5:2a:d9: cc:01:af:3e:b6:43:c3:80:e9:4e:54:ef:61:b8:f1: 3d:93:22:15:ea:21:9e:e7:f8:5c:26:42:c9:30:b3: 62:93:cf:ec:81:ce:8c:a3:15:8c:48:67:02:3f:6b: 3a:7a:08:f9:98:65:76:92:f4:4e:e9:8e:cb:6d:e6: cc:52:1f:4a:83:de:87:25:2f:66:c0:26:24:98:be: e5:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:DE:A7:B0:EE:6A:C1:A9:B5:04:A1:80:C3:03:3B:BE:90:B1:9A:10 X509v3 Authority Key Identifier: keyid:20:50:DF:51:F0:E5:BC:81:DB:4B:05:F4:49:F7:43:08:D7:FC:FA:2E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IFDfUfDlvIHbSwX0SfdDCNf8-i4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/60e376-993c-4baf-b590-6e6481e5765c/1/IFDfUfDlvIHbSwX0SfdDCNf8-i4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/60e376-993c-4baf-b590-6e6481e5765c/1/IFDfUfDlvIHbSwX0SfdDCNf8-i4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5c:f4:f6:a1:e4:ef:49:e7:15:b8:6d:81:1b:6b:ae:09:f3:3a: 20:c3:30:30:99:ff:71:0c:eb:15:91:81:90:37:60:85:aa:51: a3:79:27:37:e4:70:4d:4b:e3:cb:7b:e9:e8:c6:dc:59:87:02: b9:1e:6e:6e:04:e4:3b:d1:1d:a3:4f:6a:38:c0:ac:7e:e6:12: 84:02:65:d2:f6:13:20:33:24:11:11:ac:57:5d:4d:63:3e:3a: f1:85:26:13:0a:6a:19:1a:3e:cc:75:83:26:96:2f:8c:05:6b: 34:c4:32:d2:6c:4a:31:a2:ce:1d:0a:65:62:33:ab:4c:d9:6e: 1d:84:dd:b6:28:76:c1:d3:36:15:fe:48:4d:cd:ee:ff:95:23: 74:8e:e9:35:21:2b:64:8a:39:2d:08:8d:68:e7:4d:6e:59:c1: fe:fe:80:ae:09:86:f1:81:49:48:23:0b:c5:70:a8:28:39:3c: 69:ec:3c:3c:9a:4c:0e:a3:2b:12:14:5c:cf:00:51:80:e7:93: 7d:e5:10:cf:ce:c6:0d:33:a0:68:72:2c:61:06:06:4c:c1:9b: 62:d6:20:9d:e6:70:61:36:6c:0d:14:29:b0:76:94:22:98:e2: f1:53:4a:8d:8a:63:ca:7e:2e:26:e6:73:7c:4b:06:18:b9:7b: 0f:84:46:9f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsOk3uiOycL07yd01QUi6bsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIwNTBkZjUxZjBlNWJjODFkYjRiMDVmNDQ5Zjc0MzA4ZDdm Y2ZhMmUwHhcNMjUxMjExMTgwMTQ1WhcNMjUxMjEyMTgwMTQ1WjAzMTEwLwYDVQQD EygwY2RlYTdiMGVlNmFjMWE5YjUwNGExODBjMzAzM2JiZTkwYjE5YTEwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxNyUqU+2GK0VdOI36moHV0tyODu9 BOYQ+1fjFkrDY7O45wadx9k/FtwLm99Tqy/uziGTzm9pV8rB2ZEO/F2mKJy2rbdL gtaspuSuXiLK2Q8jzjazWXMDONSKQaOkqPf1TSVhxWeaywMMZmkh3Dc68YbxAI0N 6jnfps8TFCy4ohULxGqhP63qfJ281OnYZprz3b+Jx/psELvlInO0sTxjayzjMq1Z ODVSQtlaacBRbMH1KtnMAa8+tkPDgOlOVO9huPE9kyIV6iGe5/hcJkLJMLNik8/s gc6MoxWMSGcCP2s6egj5mGV2kvRO6Y7LbebMUh9Kg96HJS9mwCYkmL7lWQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAzep7DuasGptQShgMMDO76QsZoQMB8GA1UdIwQY MBaAFCBQ31Hw5byB20sF9En3QwjX/PouMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSUZEZlVmRGx2SUhiU3dYMFNmZERDTmY4LWk0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYS82MGUzNzYtOTkzYy00YmFmLWI1OTAt NmU2NDgxZTU3NjVjLzEvSUZEZlVmRGx2SUhiU3dYMFNmZERDTmY4LWk0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYS82MGUzNzYtOTkzYy00YmFmLWI1OTAtNmU2NDgxZTU3NjVj LzEvSUZEZlVmRGx2SUhiU3dYMFNmZERDTmY4LWk0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXPT2oeTv SecVuG2BG2uuCfM6IMMwMJn/cQzrFZGBkDdghapRo3knN+RwTUvjy3vp6MbcWYcC uR5ubgTkO9Edo09qOMCsfuYShAJl0vYTIDMkERGsV11NYz468YUmEwpqGRo+zHWD JpYvjAVrNMQy0mxKMaLOHQplYjOrTNluHYTdtih2wdM2Ff5ITc3u/5UjdI7pNSEr ZIo5LQiNaOdNblnB/v6ArgmG8YFJSCMLxXCoKDk8aew8PJpMDqMrEhRczwBRgOeT feUQz87GDTOgaHIsYQYGTMGbYtYgneZwYTZsDRQpsHaUIpji8VNKjYpjyn4uJuZz fEsGGLl7D4RGnw== -----END CERTIFICATE-----Generated at Thu Dec 11 23:25:49 2025 by rpki-client