This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/64722b-2995-40de-8b87-226b8d4a5f60/1/IP7vOR8WMAFXu3iy6uoG1hwgyUU.mft File: IP7vOR8WMAFXu3iy6uoG1hwgyUU.mft (raw, json) Hash identifier: MJrgqSdjUp7W19u7hjtWg5QmI2VXXfXYbHz4dMMohsw= Subject key identifier: 53:E4:B8:DD:1A:76:A9:8F:91:68:CB:03:B1:7E:BB:F5:67:21:5B:C0 Authority key identifier: 20:FE:EF:39:1F:16:30:01:57:BB:78:B2:EA:EA:06:D6:1C:20:C9:45 Certificate issuer: /CN=20feef391f16300157bb78b2eaea06d61c20c945 Certificate serial: 019B3C7EE6B0716D5009C4C7955BEE37F2E8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IP7vOR8WMAFXu3iy6uoG1hwgyUU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/64722b-2995-40de-8b87-226b8d4a5f60/1/IP7vOR8WMAFXu3iy6uoG1hwgyUU.mft Manifest number: 069B Signing time: Sat 20 Dec 2025 16:01:48 +0000 Manifest this update: Sat 20 Dec 2025 16:01:48 +0000 Manifest next update: Sun 21 Dec 2025 16:01:48 +0000 Files and hashes: 1: IP7vOR8WMAFXu3iy6uoG1hwgyUU.crl (hash: Z8jO2YsrAMqyXIqDNNrPn1O5ndo592sjPO5Tf1ZdpZM=) 2: bMgRIHfe9czZPsPUKpcmfdHESeA.roa (hash: xt+uVWCgpmniCKO9lfh4KPFwtigjOiclhRJVmau9h3E=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/64722b-2995-40de-8b87-226b8d4a5f60/1/IP7vOR8WMAFXu3iy6uoG1hwgyUU.crl rsync://rpki.ripe.net/repository/DEFAULT/d8/64722b-2995-40de-8b87-226b8d4a5f60/1/IP7vOR8WMAFXu3iy6uoG1hwgyUU.mft rsync://rpki.ripe.net/repository/DEFAULT/IP7vOR8WMAFXu3iy6uoG1hwgyUU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 10:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:7e:e6:b0:71:6d:50:09:c4:c7:95:5b:ee:37:f2:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=20feef391f16300157bb78b2eaea06d61c20c945 Validity Not Before: Dec 20 16:01:48 2025 GMT Not After : Dec 21 16:01:48 2025 GMT Subject: CN=53e4b8dd1a76a98f9168cb03b17ebbf567215bc0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:e2:96:c7:a1:27:a7:8b:ef:5d:94:00:65:ca: 17:2c:da:40:93:ff:28:9a:83:9a:ad:6d:0e:b1:93: 91:d0:c3:5c:a3:2c:a4:89:e5:89:d5:bb:a9:64:ae: d7:dd:79:98:56:8c:8b:0a:7d:27:2c:bc:e0:1d:a2: 36:4b:67:8a:5c:a9:48:d2:be:d9:08:48:3a:71:d0: 5e:ef:e7:8c:81:fd:32:77:67:3f:a8:06:40:56:f9: d7:89:4a:01:06:73:96:24:24:26:bb:5d:36:95:8e: ab:ea:0b:9c:e2:19:25:a3:e0:b2:fc:0c:2e:8f:22: 8d:80:95:53:8b:56:d1:0e:cd:8a:7b:b2:ee:0a:a5: e1:b5:f2:68:59:df:9e:96:06:ad:00:b2:a3:e7:7a: 34:2c:52:10:59:1f:51:18:f5:29:50:c6:06:fb:11: f1:06:38:51:4e:d5:60:e3:db:a3:dd:79:5b:ac:f0: 87:fc:2d:11:ac:0a:c9:b6:9b:ca:39:5c:75:ff:71: 84:88:ef:e3:0f:6e:fc:46:a1:7b:31:74:13:82:41: 1d:1e:7e:51:64:6c:71:66:4f:c1:29:c4:9e:00:fb: 6d:c3:d7:43:47:dd:cb:74:63:ac:2d:3e:49:7d:5b: d5:8a:cf:eb:fb:a7:48:3f:f8:08:63:b6:58:9d:0d: 72:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:E4:B8:DD:1A:76:A9:8F:91:68:CB:03:B1:7E:BB:F5:67:21:5B:C0 X509v3 Authority Key Identifier: keyid:20:FE:EF:39:1F:16:30:01:57:BB:78:B2:EA:EA:06:D6:1C:20:C9:45 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IP7vOR8WMAFXu3iy6uoG1hwgyUU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/64722b-2995-40de-8b87-226b8d4a5f60/1/IP7vOR8WMAFXu3iy6uoG1hwgyUU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/64722b-2995-40de-8b87-226b8d4a5f60/1/IP7vOR8WMAFXu3iy6uoG1hwgyUU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8a:49:0f:b8:9a:79:d8:11:37:a4:04:dc:04:8b:c1:64:e9:2d: 4c:9e:cf:63:7a:0d:6b:d4:7d:62:d1:ea:04:9d:c8:7d:cf:15: d3:95:58:20:b9:6c:e3:b3:48:b8:a7:35:18:26:9e:17:4c:66: 5b:60:b3:f0:02:fb:45:50:13:78:7d:d1:f1:40:fd:a2:05:2b: 3f:e8:30:f9:06:0f:86:49:6f:84:a4:cf:27:9b:85:88:b6:31: 8c:cf:66:98:34:46:17:22:26:af:60:f1:31:f2:ad:c4:87:89: 92:62:7b:3f:3b:98:8c:96:42:14:0f:4a:59:25:ba:d6:75:64: f0:85:26:9f:71:59:a2:8b:39:15:96:8e:02:45:e1:a2:66:be: 5c:b8:76:1b:d0:ed:5a:63:b8:2e:f9:62:01:b1:e7:9a:90:bc: 9a:36:dc:cd:b5:d8:91:5f:ed:c4:fd:46:10:c6:4e:cb:39:2c: 8b:0d:bc:af:fb:30:47:c7:31:33:ec:ed:ca:ee:6c:f2:4e:9e: fa:f7:7d:b3:1e:54:07:c8:40:ce:bd:a3:7d:b8:9a:c1:e8:57: 9c:17:80:f6:3c:9a:8f:43:33:0c:0f:ae:b1:1d:3c:2d:dd:33: 81:e7:6b:e0:ee:13:8f:97:4c:5e:c6:49:9a:1a:5f:c5:4a:07: c4:54:ee:4c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs8fuawcW1QCcTHlVvuN/LoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIwZmVlZjM5MWYxNjMwMDE1N2JiNzhiMmVhZWEwNmQ2MWMy MGM5NDUwHhcNMjUxMjIwMTYwMTQ4WhcNMjUxMjIxMTYwMTQ4WjAzMTEwLwYDVQQD Eyg1M2U0YjhkZDFhNzZhOThmOTE2OGNiMDNiMTdlYmJmNTY3MjE1YmMwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7eKWx6Enp4vvXZQAZcoXLNpAk/8o moOarW0OsZOR0MNcoyykieWJ1bupZK7X3XmYVoyLCn0nLLzgHaI2S2eKXKlI0r7Z CEg6cdBe7+eMgf0yd2c/qAZAVvnXiUoBBnOWJCQmu102lY6r6guc4hklo+Cy/Awu jyKNgJVTi1bRDs2Ke7LuCqXhtfJoWd+elgatALKj53o0LFIQWR9RGPUpUMYG+xHx BjhRTtVg49uj3XlbrPCH/C0RrArJtpvKOVx1/3GEiO/jD278RqF7MXQTgkEdHn5R ZGxxZk/BKcSeAPttw9dDR93LdGOsLT5JfVvVis/r+6dIP/gIY7ZYnQ1yrwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFPkuN0adqmPkWjLA7F+u/VnIVvAMB8GA1UdIwQY MBaAFCD+7zkfFjABV7t4surqBtYcIMlFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSVA3dk9SOFdNQUZYdTNpeTZ1b0cxaHdneVVVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOC82NDcyMmItMjk5NS00MGRlLThiODct MjI2YjhkNGE1ZjYwLzEvSVA3dk9SOFdNQUZYdTNpeTZ1b0cxaHdneVVVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kOC82NDcyMmItMjk5NS00MGRlLThiODctMjI2YjhkNGE1ZjYw LzEvSVA3dk9SOFdNQUZYdTNpeTZ1b0cxaHdneVVVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAikkPuJp5 2BE3pATcBIvBZOktTJ7PY3oNa9R9YtHqBJ3Ifc8V05VYILls47NIuKc1GCaeF0xm W2Cz8AL7RVATeH3R8UD9ogUrP+gw+QYPhklvhKTPJ5uFiLYxjM9mmDRGFyImr2Dx MfKtxIeJkmJ7PzuYjJZCFA9KWSW61nVk8IUmn3FZoos5FZaOAkXhoma+XLh2G9Dt WmO4LvliAbHnmpC8mjbczbXYkV/txP1GEMZOyzksiw28r/swR8cxM+ztyu5s8k6e +vd9sx5UB8hAzr2jfbiawehXnBeA9jyaj0MzDA+usR08Ld0zgedr4O4Tj5dMXsZJ mhpfxUoHxFTuTA== -----END CERTIFICATE-----Generated at Sat Dec 20 20:03:27 2025 by rpki-client