This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/60e376-993c-4baf-b590-6e6481e5765c/1/IFDfUfDlvIHbSwX0SfdDCNf8-i4.mft File: IFDfUfDlvIHbSwX0SfdDCNf8-i4.mft (raw, json) Hash identifier: JpNdQIBW6XX1djAyH9ZPZyYqddQQ1a4KPaw9otrbpuY= Subject key identifier: FF:D6:DC:C2:72:95:60:41:62:B3:7E:A5:70:50:32:AB:AF:31:15:8C Authority key identifier: 20:50:DF:51:F0:E5:BC:81:DB:4B:05:F4:49:F7:43:08:D7:FC:FA:2E Certificate issuer: /CN=2050df51f0e5bc81db4b05f449f74308d7fcfa2e Certificate serial: 019B21E2F0A7D762C4E4860A691852BD88C5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IFDfUfDlvIHbSwX0SfdDCNf8-i4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/60e376-993c-4baf-b590-6e6481e5765c/1/IFDfUfDlvIHbSwX0SfdDCNf8-i4.mft Manifest number: 1702 Signing time: Mon 15 Dec 2025 12:01:19 +0000 Manifest this update: Mon 15 Dec 2025 12:01:19 +0000 Manifest next update: Tue 16 Dec 2025 12:01:19 +0000 Files and hashes: 1: 5TmF660osVLf2yedLZYIouqKzCQ.roa (hash: svEuw+A3XrP85kyKwdSMhC87V3nCBDwlLWE+iKrkH+s=) 2: IFDfUfDlvIHbSwX0SfdDCNf8-i4.crl (hash: H5SNczgy3AHj3pYSMsZ1TGyCorOfHxoMlkUqjFeuwBA=) 3: QbfQw6PQWXMnUYTcNMeoW813ttw.roa (hash: g9TBhQ7bZYV+JTfg685xMP7NzWGbPIajKmZ/OPgHv/k=) 4: SqW3-Pav388bYoCFb9onFjXDUEM.roa (hash: rQ+0p4O5Q843ntXsLKc+VAqP1ejZ7AJIeWPPGt1vzco=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/60e376-993c-4baf-b590-6e6481e5765c/1/IFDfUfDlvIHbSwX0SfdDCNf8-i4.crl rsync://rpki.ripe.net/repository/DEFAULT/ca/60e376-993c-4baf-b590-6e6481e5765c/1/IFDfUfDlvIHbSwX0SfdDCNf8-i4.mft rsync://rpki.ripe.net/repository/DEFAULT/IFDfUfDlvIHbSwX0SfdDCNf8-i4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 12:01:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:21:e2:f0:a7:d7:62:c4:e4:86:0a:69:18:52:bd:88:c5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2050df51f0e5bc81db4b05f449f74308d7fcfa2e Validity Not Before: Dec 15 12:01:19 2025 GMT Not After : Dec 16 12:01:19 2025 GMT Subject: CN=ffd6dcc27295604162b37ea5705032abaf31158c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:1a:5d:86:6e:5e:f5:03:53:b1:47:5a:b8:7a: 31:02:82:e4:01:64:36:7f:26:3f:cb:55:ec:31:03: 73:42:59:12:b7:36:4b:c5:f8:9d:fd:6a:7a:02:79: 6c:ec:f9:13:f6:57:0f:bb:12:d3:f8:b6:0d:08:de: 6e:37:45:87:c8:1d:a3:87:66:23:3d:3e:4f:46:dd: 76:9c:cb:01:1f:4e:8b:31:ae:37:31:15:fd:89:46: 10:7a:5f:7d:30:0d:ae:58:bd:23:14:e1:e8:17:22: 8b:43:a6:41:b9:46:c4:91:50:e8:4f:11:0e:13:40: cb:5f:7e:c3:bb:2b:f5:58:92:fd:00:07:d9:1b:0c: f8:5a:9d:e6:68:5c:bb:f8:6b:07:55:b8:b8:a5:1c: 1d:84:26:25:69:2c:16:85:eb:af:55:25:07:d5:16: 7f:91:7d:46:69:94:25:bd:bf:32:1b:5d:18:14:be: f0:c8:d0:38:51:c6:ae:27:cb:a8:ac:3b:7e:8c:fe: 5b:d1:15:df:b6:22:61:ae:6e:89:58:2e:60:89:c6: f5:da:9f:c4:34:d2:e1:0e:f5:17:56:41:b5:37:ac: 21:a1:44:8e:65:fd:1b:d3:c4:4c:4c:0b:f0:7c:0c: 97:a0:91:fa:93:89:fc:11:eb:ce:91:95:69:5c:49: 8b:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:D6:DC:C2:72:95:60:41:62:B3:7E:A5:70:50:32:AB:AF:31:15:8C X509v3 Authority Key Identifier: keyid:20:50:DF:51:F0:E5:BC:81:DB:4B:05:F4:49:F7:43:08:D7:FC:FA:2E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IFDfUfDlvIHbSwX0SfdDCNf8-i4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/60e376-993c-4baf-b590-6e6481e5765c/1/IFDfUfDlvIHbSwX0SfdDCNf8-i4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/60e376-993c-4baf-b590-6e6481e5765c/1/IFDfUfDlvIHbSwX0SfdDCNf8-i4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2d:b5:8d:a3:a4:9a:e9:83:7f:e9:47:40:3d:f7:e7:db:9e:42: 54:d4:d2:c4:b9:96:7b:87:62:ac:c1:9b:a2:a1:cf:df:06:dc: 46:57:f3:63:3b:24:41:34:d4:6e:cf:e6:86:0f:77:72:18:35: ab:9e:de:a3:88:0d:a9:87:30:a1:21:d2:4a:7f:34:a9:60:c9: f5:f8:88:11:bc:c5:a4:56:36:9d:43:63:0c:0b:b1:55:db:e5: 8e:2b:a0:4d:cc:34:5c:07:b7:29:2f:ef:f6:4e:a2:f7:62:54: 60:75:25:fe:4f:9e:36:fd:0f:d2:1a:e5:fc:fd:63:e8:68:0f: 3b:60:3e:2a:b2:bd:e4:37:2e:75:48:63:66:e5:5e:74:32:b2: f1:9f:8b:74:5b:ba:97:1e:41:d3:94:67:98:72:8e:83:a3:f2: 29:e5:8b:7d:c9:97:cc:1c:b4:d7:32:ae:b9:d5:9c:66:e5:88: e8:51:9a:0f:c7:30:06:36:b0:dd:56:22:a6:9d:b1:12:ba:40: 0a:a5:71:a1:bb:a5:8a:06:cf:9e:e8:f5:37:8d:b8:83:da:bb: 2a:a5:08:b4:28:51:67:95:a0:26:9b:9d:28:5d:3e:51:b3:e7: b0:d0:d0:f3:81:f8:c2:f1:25:5c:c3:87:37:9b:f3:42:cc:dd: e8:ff:9d:e1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsh4vCn12LE5IYKaRhSvYjFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIwNTBkZjUxZjBlNWJjODFkYjRiMDVmNDQ5Zjc0MzA4ZDdm Y2ZhMmUwHhcNMjUxMjE1MTIwMTE5WhcNMjUxMjE2MTIwMTE5WjAzMTEwLwYDVQQD EyhmZmQ2ZGNjMjcyOTU2MDQxNjJiMzdlYTU3MDUwMzJhYmFmMzExNThjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmhpdhm5e9QNTsUdauHoxAoLkAWQ2 fyY/y1XsMQNzQlkStzZLxfid/Wp6Anls7PkT9lcPuxLT+LYNCN5uN0WHyB2jh2Yj PT5PRt12nMsBH06LMa43MRX9iUYQel99MA2uWL0jFOHoFyKLQ6ZBuUbEkVDoTxEO E0DLX37Duyv1WJL9AAfZGwz4Wp3maFy7+GsHVbi4pRwdhCYlaSwWheuvVSUH1RZ/ kX1GaZQlvb8yG10YFL7wyNA4UcauJ8uorDt+jP5b0RXftiJhrm6JWC5gicb12p/E NNLhDvUXVkG1N6whoUSOZf0b08RMTAvwfAyXoJH6k4n8EevOkZVpXEmLuQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFP/W3MJylWBBYrN+pXBQMquvMRWMMB8GA1UdIwQY MBaAFCBQ31Hw5byB20sF9En3QwjX/PouMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSUZEZlVmRGx2SUhiU3dYMFNmZERDTmY4LWk0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYS82MGUzNzYtOTkzYy00YmFmLWI1OTAt NmU2NDgxZTU3NjVjLzEvSUZEZlVmRGx2SUhiU3dYMFNmZERDTmY4LWk0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYS82MGUzNzYtOTkzYy00YmFmLWI1OTAtNmU2NDgxZTU3NjVj LzEvSUZEZlVmRGx2SUhiU3dYMFNmZERDTmY4LWk0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALbWNo6Sa 6YN/6UdAPffn255CVNTSxLmWe4dirMGboqHP3wbcRlfzYzskQTTUbs/mhg93chg1 q57eo4gNqYcwoSHSSn80qWDJ9fiIEbzFpFY2nUNjDAuxVdvljiugTcw0XAe3KS/v 9k6i92JUYHUl/k+eNv0P0hrl/P1j6GgPO2A+KrK95DcudUhjZuVedDKy8Z+LdFu6 lx5B05RnmHKOg6PyKeWLfcmXzBy01zKuudWcZuWI6FGaD8cwBjaw3VYipp2xErpA CqVxobuligbPnuj1N424g9q7KqUItChRZ5WgJpudKF0+UbPnsNDQ84H4wvElXMOH N5vzQszd6P+d4Q== -----END CERTIFICATE-----Generated at Mon Dec 15 16:54:20 2025 by rpki-client