This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/790c15-2058-4c39-90cb-cd677ab431aa/1/aM73Itq-WXXKT5uoYWOI7GxlaiA.mft File: aM73Itq-WXXKT5uoYWOI7GxlaiA.mft (raw, json) Hash identifier: btvbNmuBs5WHaF6+/YwMKpdpBk32bJBopQpXyod85+o= Subject key identifier: 58:06:0D:52:3A:3C:37:C2:26:4E:7D:92:92:E7:13:04:9B:39:42:D3 Authority key identifier: 68:CE:F7:22:DA:BE:59:75:CA:4F:9B:A8:61:63:88:EC:6C:65:6A:20 Certificate issuer: /CN=68cef722dabe5975ca4f9ba8616388ec6c656a20 Certificate serial: 019B0FA592A1BF640BA29447C760F4591671 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aM73Itq-WXXKT5uoYWOI7GxlaiA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/790c15-2058-4c39-90cb-cd677ab431aa/1/aM73Itq-WXXKT5uoYWOI7GxlaiA.mft Manifest number: 0C5A Signing time: Thu 11 Dec 2025 23:01:07 +0000 Manifest this update: Thu 11 Dec 2025 23:01:07 +0000 Manifest next update: Fri 12 Dec 2025 23:01:07 +0000 Files and hashes: 1: F66nmw_9gnfRz1vGxzlxmQMgQys.roa (hash: V2QUSY1nIUt0LG1yVgyvdzAwGo/lvS6oHhY3urqyJbE=) 2: IdMP5mSXjXy5RCG7h8iUYBC-7wU.roa (hash: Ak+0cLrZuuXp8cAQmKH4z3k18zZ0o3zgplicC1IedBk=) 3: aM73Itq-WXXKT5uoYWOI7GxlaiA.crl (hash: +UjvNpV6QGAG9K691TW0slG6RbAwKce1lHdTisA3CkM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/790c15-2058-4c39-90cb-cd677ab431aa/1/aM73Itq-WXXKT5uoYWOI7GxlaiA.crl rsync://rpki.ripe.net/repository/DEFAULT/d2/790c15-2058-4c39-90cb-cd677ab431aa/1/aM73Itq-WXXKT5uoYWOI7GxlaiA.mft rsync://rpki.ripe.net/repository/DEFAULT/aM73Itq-WXXKT5uoYWOI7GxlaiA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 23:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0f:a5:92:a1:bf:64:0b:a2:94:47:c7:60:f4:59:16:71 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68cef722dabe5975ca4f9ba8616388ec6c656a20 Validity Not Before: Dec 11 23:01:07 2025 GMT Not After : Dec 12 23:01:07 2025 GMT Subject: CN=58060d523a3c37c2264e7d9292e713049b3942d3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:e8:c0:1b:a1:da:88:3e:cc:74:fd:bb:d0:50: 6c:40:89:8a:20:02:f9:ea:d4:7d:61:12:4f:a6:b0: fa:8c:44:36:5c:8a:88:07:17:34:52:ed:0a:6a:56: 4f:b4:b5:60:10:ff:de:7d:46:43:76:2c:68:64:9f: 07:f9:d8:fe:05:7c:d2:d9:b4:d4:b6:3d:31:49:9a: 14:b7:ee:2f:bc:ed:b7:50:2e:9c:53:42:82:c2:a8: 02:43:b6:ff:02:f9:1f:ff:46:03:3b:c6:9f:0a:8d: 7a:18:a8:8d:72:39:5d:dd:ce:b2:9d:8a:2d:73:1c: 08:a7:f8:a0:65:34:ce:b6:cf:78:1e:6c:1f:4d:71: 8b:18:5d:aa:ff:03:64:73:17:6b:be:cb:f3:49:f5: 8c:2a:cd:65:56:b2:55:fe:89:68:21:10:33:6e:4c: 8a:6a:ae:71:e5:a0:7b:e8:8c:b3:09:07:a4:7c:36: 64:38:1d:16:28:e0:53:db:fe:d7:67:69:0c:9b:df: 3e:df:28:ef:c2:c2:a4:7c:e1:4e:d4:4b:a0:b7:d7: a4:44:f9:73:86:b8:48:e6:5d:39:30:d5:45:d3:49: 60:dc:a6:fe:b0:d6:56:48:9d:de:70:dc:98:42:c9: e6:c7:fc:2b:f0:1b:79:a0:36:40:02:e3:61:4c:50: 51:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:06:0D:52:3A:3C:37:C2:26:4E:7D:92:92:E7:13:04:9B:39:42:D3 X509v3 Authority Key Identifier: keyid:68:CE:F7:22:DA:BE:59:75:CA:4F:9B:A8:61:63:88:EC:6C:65:6A:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aM73Itq-WXXKT5uoYWOI7GxlaiA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/790c15-2058-4c39-90cb-cd677ab431aa/1/aM73Itq-WXXKT5uoYWOI7GxlaiA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/790c15-2058-4c39-90cb-cd677ab431aa/1/aM73Itq-WXXKT5uoYWOI7GxlaiA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 69:60:37:ca:8f:9e:80:1c:98:07:d1:97:7b:8e:09:10:58:69: 26:80:66:51:7d:00:8c:0e:f2:86:b9:f0:06:a5:b4:e4:64:bf: 21:eb:cd:28:2e:8d:a8:72:f8:f8:df:2c:6c:d7:f9:a6:ca:ca: 8c:71:82:51:ff:c9:5c:33:28:af:88:ac:a7:44:6b:92:3b:eb: 9a:10:c2:02:f8:71:64:e3:d4:92:20:d1:fa:46:51:98:b4:34: 86:9a:b6:ed:37:f7:ce:73:f0:a3:ea:5a:4d:05:8b:9b:74:35: 97:5a:61:8e:98:83:4f:de:44:b8:57:46:e8:51:58:ff:3c:28: f8:eb:1f:94:ed:95:9e:ac:ff:32:c4:f8:69:54:5c:d5:c0:47: 9b:da:4a:31:a0:7f:fe:b1:d4:86:2f:19:dd:33:86:a8:b1:a3: cb:18:e5:e2:b7:7f:ea:8e:07:a0:90:04:71:48:b9:f2:c9:c0: 51:3d:f8:4c:08:4f:dd:d8:87:a7:ad:7b:bb:8e:03:fd:0c:7a: 94:1c:ba:35:dc:25:da:3a:16:38:c3:45:58:55:9e:d9:68:50: 33:c0:a8:11:e4:d8:05:6f:f3:be:85:43:37:53:47:95:1e:c8: 37:06:26:83:3f:ce:51:ce:ea:97:a3:0c:fa:38:2b:a8:65:b3: 05:50:7a:1a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsPpZKhv2QLopRHx2D0WRZxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY4Y2VmNzIyZGFiZTU5NzVjYTRmOWJhODYxNjM4OGVjNmM2 NTZhMjAwHhcNMjUxMjExMjMwMTA3WhcNMjUxMjEyMjMwMTA3WjAzMTEwLwYDVQQD Eyg1ODA2MGQ1MjNhM2MzN2MyMjY0ZTdkOTI5MmU3MTMwNDliMzk0MmQzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmOjAG6HaiD7MdP270FBsQImKIAL5 6tR9YRJPprD6jEQ2XIqIBxc0Uu0KalZPtLVgEP/efUZDdixoZJ8H+dj+BXzS2bTU tj0xSZoUt+4vvO23UC6cU0KCwqgCQ7b/Avkf/0YDO8afCo16GKiNcjld3c6ynYot cxwIp/igZTTOts94HmwfTXGLGF2q/wNkcxdrvsvzSfWMKs1lVrJV/oloIRAzbkyK aq5x5aB76IyzCQekfDZkOB0WKOBT2/7XZ2kMm98+3yjvwsKkfOFO1Eugt9ekRPlz hrhI5l05MNVF00lg3Kb+sNZWSJ3ecNyYQsnmx/wr8Bt5oDZAAuNhTFBRgQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFgGDVI6PDfCJk59kpLnEwSbOULTMB8GA1UdIwQY MBaAFGjO9yLavll1yk+bqGFjiOxsZWogMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYU03M0l0cS1XWFhLVDV1b1lXT0k3R3hsYWlBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMi83OTBjMTUtMjA1OC00YzM5LTkwY2It Y2Q2NzdhYjQzMWFhLzEvYU03M0l0cS1XWFhLVDV1b1lXT0k3R3hsYWlBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMi83OTBjMTUtMjA1OC00YzM5LTkwY2ItY2Q2NzdhYjQzMWFh LzEvYU03M0l0cS1XWFhLVDV1b1lXT0k3R3hsYWlBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaWA3yo+e gByYB9GXe44JEFhpJoBmUX0AjA7yhrnwBqW05GS/IevNKC6NqHL4+N8sbNf5psrK jHGCUf/JXDMor4isp0RrkjvrmhDCAvhxZOPUkiDR+kZRmLQ0hpq27Tf3znPwo+pa TQWLm3Q1l1phjpiDT95EuFdG6FFY/zwo+OsflO2Vnqz/MsT4aVRc1cBHm9pKMaB/ /rHUhi8Z3TOGqLGjyxjl4rd/6o4HoJAEcUi58snAUT34TAhP3diHp617u44D/Qx6 lBy6Ndwl2joWOMNFWFWe2WhQM8CoEeTYBW/zvoVDN1NHlR7INwYmgz/OUc7ql6MM +jgrqGWzBVB6Gg== -----END CERTIFICATE-----Generated at Fri Dec 12 08:56:18 2025 by rpki-client