This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/d814b4-02b1-4fb3-acef-1601d41fdc1f/1/i024ekl6Fbp5pwbRLukExESdG1U.mft File: i024ekl6Fbp5pwbRLukExESdG1U.mft (raw, json) Hash identifier: IYaCrw7/tMce2YOq5QVK1sACIgw4OP91MN8Bnl6Be5o= Subject key identifier: F2:F4:A3:B2:1E:6D:7B:C9:02:91:65:5D:AF:9E:F2:B3:0C:8E:86:AA Authority key identifier: 8B:4D:B8:7A:49:7A:15:BA:79:A7:06:D1:2E:E9:04:C4:44:9D:1B:55 Certificate issuer: /CN=8b4db87a497a15ba79a706d12ee904c4449d1b55 Certificate serial: 019B0EC9B98B49F0327C94D8D2BDCC318986 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i024ekl6Fbp5pwbRLukExESdG1U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/d814b4-02b1-4fb3-acef-1601d41fdc1f/1/i024ekl6Fbp5pwbRLukExESdG1U.mft Manifest number: 021E Signing time: Thu 11 Dec 2025 19:00:59 +0000 Manifest this update: Thu 11 Dec 2025 19:00:59 +0000 Manifest next update: Fri 12 Dec 2025 19:00:59 +0000 Files and hashes: 1: Mf_fXP2jPHVmLONdZ1xYPtuNu7Q.roa (hash: LOr2gDDIVLXiBV/jZXlGLfpc3s69N4tqrkcfM7qBuoA=) 2: i024ekl6Fbp5pwbRLukExESdG1U.crl (hash: fRaIAqk02pNhKfSBZRmQRQ90aZ/RvOM2MmNo7UK+uoE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/d814b4-02b1-4fb3-acef-1601d41fdc1f/1/i024ekl6Fbp5pwbRLukExESdG1U.crl rsync://rpki.ripe.net/repository/DEFAULT/d8/d814b4-02b1-4fb3-acef-1601d41fdc1f/1/i024ekl6Fbp5pwbRLukExESdG1U.mft rsync://rpki.ripe.net/repository/DEFAULT/i024ekl6Fbp5pwbRLukExESdG1U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 19:00:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0e:c9:b9:8b:49:f0:32:7c:94:d8:d2:bd:cc:31:89:86 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8b4db87a497a15ba79a706d12ee904c4449d1b55 Validity Not Before: Dec 11 19:00:59 2025 GMT Not After : Dec 12 19:00:59 2025 GMT Subject: CN=f2f4a3b21e6d7bc90291655daf9ef2b30c8e86aa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:92:f8:39:fc:cc:e5:fd:5e:2e:d6:8e:d3:a7: 22:c4:25:14:46:1c:16:8d:90:63:a6:04:10:f2:60: a6:b9:40:61:4f:ad:77:f1:1e:4b:73:37:51:9f:27: 7b:97:63:16:69:8e:1c:7d:77:8d:cf:d9:cf:69:99: aa:18:ce:75:86:29:a4:a5:a8:8d:08:52:74:81:ca: 87:fb:38:a1:a3:03:ef:bd:70:89:8e:7c:ad:b8:d9: 24:ab:80:16:9e:45:88:17:22:a2:62:79:77:29:2a: 67:2a:f2:21:fe:39:84:da:00:17:b0:b2:5b:b5:df: 82:41:c9:35:0d:a7:b7:fd:4e:69:a8:bb:b3:74:a2: 2b:1b:56:4f:b5:07:e6:22:e8:c2:e4:38:a6:ca:a0: 61:ea:49:c3:f0:51:1a:d0:59:ed:83:6d:d7:15:8f: 7c:28:ae:bc:09:96:6b:a1:e2:45:d9:4b:51:85:c2: a6:b6:b4:23:8a:0d:0f:74:cf:57:3e:96:3a:95:4d: e8:a6:63:0e:1e:86:c9:2e:b1:52:b1:7b:3f:21:3b: 4e:89:5a:c7:7e:84:4f:29:c4:54:d3:6c:25:0a:ea: 55:1c:dd:2f:2e:f6:44:3a:49:d1:df:c8:07:10:2f: 9a:df:ed:a8:ff:48:2a:64:08:6b:51:7f:46:1e:eb: ac:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:F4:A3:B2:1E:6D:7B:C9:02:91:65:5D:AF:9E:F2:B3:0C:8E:86:AA X509v3 Authority Key Identifier: keyid:8B:4D:B8:7A:49:7A:15:BA:79:A7:06:D1:2E:E9:04:C4:44:9D:1B:55 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i024ekl6Fbp5pwbRLukExESdG1U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/d814b4-02b1-4fb3-acef-1601d41fdc1f/1/i024ekl6Fbp5pwbRLukExESdG1U.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/d814b4-02b1-4fb3-acef-1601d41fdc1f/1/i024ekl6Fbp5pwbRLukExESdG1U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a7:50:45:05:d9:4a:f6:a1:f8:5e:e5:95:b7:16:2b:a9:29:61: d4:dc:5c:90:5f:b5:50:0e:d5:32:38:6d:bb:0b:10:91:c2:ad: 74:db:0d:43:7d:38:1c:ce:6e:88:72:95:ac:61:da:b6:46:7d: fb:05:72:48:a9:8c:68:02:f9:57:e5:6c:32:e0:b0:f8:26:a9: 1e:19:f4:09:ec:91:74:b5:8b:07:43:e2:55:46:a2:2e:ec:c1: e7:dc:40:a1:b2:92:29:06:c1:2e:f1:a9:8e:b8:fb:e6:80:d5: c1:76:33:3c:c8:d9:13:21:30:b2:26:39:5c:78:f8:6f:30:4e: 3e:32:ed:28:96:92:e5:b0:3f:7f:02:0d:9e:fe:c2:4e:8a:3d: 4e:36:25:5c:b3:bc:79:a9:35:02:f7:e7:c4:e7:06:57:ba:4f: 71:a5:aa:c6:23:42:79:5b:12:0d:d5:7b:aa:75:75:56:e7:b1: 63:29:04:4a:95:4c:5c:81:ee:54:5d:6e:3a:09:4a:2e:92:92: d1:82:a9:0a:5e:42:38:67:2e:ad:e2:c1:db:94:de:4e:a0:63: 98:16:47:fc:a0:a8:a9:6b:8e:c1:af:03:de:cf:fc:fa:aa:d2: 1d:9f:a3:61:e1:e6:f3:da:8c:08:b3:a4:60:48:58:6e:bc:62: a9:ba:94:68 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsOybmLSfAyfJTY0r3MMYmGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhiNGRiODdhNDk3YTE1YmE3OWE3MDZkMTJlZTkwNGM0NDQ5 ZDFiNTUwHhcNMjUxMjExMTkwMDU5WhcNMjUxMjEyMTkwMDU5WjAzMTEwLwYDVQQD EyhmMmY0YTNiMjFlNmQ3YmM5MDI5MTY1NWRhZjllZjJiMzBjOGU4NmFhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr5L4OfzM5f1eLtaO06cixCUURhwW jZBjpgQQ8mCmuUBhT6138R5LczdRnyd7l2MWaY4cfXeNz9nPaZmqGM51himkpaiN CFJ0gcqH+zihowPvvXCJjnytuNkkq4AWnkWIFyKiYnl3KSpnKvIh/jmE2gAXsLJb td+CQck1Dae3/U5pqLuzdKIrG1ZPtQfmIujC5DimyqBh6knD8FEa0Fntg23XFY98 KK68CZZroeJF2UtRhcKmtrQjig0PdM9XPpY6lU3opmMOHobJLrFSsXs/ITtOiVrH foRPKcRU02wlCupVHN0vLvZEOknR38gHEC+a3+2o/0gqZAhrUX9GHuusJQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPL0o7IebXvJApFlXa+e8rMMjoaqMB8GA1UdIwQY MBaAFItNuHpJehW6eacG0S7pBMREnRtVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaTAyNGVrbDZGYnA1cHdiUkx1a0V4RVNkRzFVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOC9kODE0YjQtMDJiMS00ZmIzLWFjZWYt MTYwMWQ0MWZkYzFmLzEvaTAyNGVrbDZGYnA1cHdiUkx1a0V4RVNkRzFVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kOC9kODE0YjQtMDJiMS00ZmIzLWFjZWYtMTYwMWQ0MWZkYzFm LzEvaTAyNGVrbDZGYnA1cHdiUkx1a0V4RVNkRzFVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAp1BFBdlK 9qH4XuWVtxYrqSlh1NxckF+1UA7VMjhtuwsQkcKtdNsNQ304HM5uiHKVrGHatkZ9 +wVySKmMaAL5V+VsMuCw+CapHhn0CeyRdLWLB0PiVUaiLuzB59xAobKSKQbBLvGp jrj75oDVwXYzPMjZEyEwsiY5XHj4bzBOPjLtKJaS5bA/fwINnv7CToo9TjYlXLO8 eak1AvfnxOcGV7pPcaWqxiNCeVsSDdV7qnV1VuexYykESpVMXIHuVF1uOglKLpKS 0YKpCl5COGcureLB25TeTqBjmBZH/KCoqWuOwa8D3s/8+qrSHZ+jYeHm89qMCLOk YEhYbrxiqbqUaA== -----END CERTIFICATE-----Generated at Fri Dec 12 01:44:39 2025 by rpki-client