This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/3e2077-bc10-4621-ab0b-dba4c9b8706b/1/iVVHgNslskPAotNhl5sTCn8Txg0.mft File: iVVHgNslskPAotNhl5sTCn8Txg0.mft (raw, json) Hash identifier: sNLJL968Fs1qk26lc0TyHvW6KV3OSIBBM9fAEquR4B4= Subject key identifier: 3C:0C:98:70:F5:32:5D:59:3B:2A:FA:FF:DA:C0:AD:92:08:15:F5:95 Authority key identifier: 89:55:47:80:DB:25:B2:43:C0:A2:D3:61:97:9B:13:0A:7F:13:C6:0D Certificate issuer: /CN=89554780db25b243c0a2d361979b130a7f13c60d Certificate serial: 019B0ECA018471F0EB03F9CC684959542A87 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iVVHgNslskPAotNhl5sTCn8Txg0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/3e2077-bc10-4621-ab0b-dba4c9b8706b/1/iVVHgNslskPAotNhl5sTCn8Txg0.mft Manifest number: 0C99 Signing time: Thu 11 Dec 2025 19:01:18 +0000 Manifest this update: Thu 11 Dec 2025 19:01:18 +0000 Manifest next update: Fri 12 Dec 2025 19:01:18 +0000 Files and hashes: 1: Io8_rALEkRmJyvwQSYZoU_nTQg0.roa (hash: IdvBLL1znSmthNlumpub/fXZwL7C6UNAlVvYWPg9Tzc=) 2: fp-LIMQ80k5YBVtTaX91n-J89eo.roa (hash: ItqEQhJ82EwpqjGgmH+0CXCKGMVgFNbNle1pM5dmqlE=) 3: iVVHgNslskPAotNhl5sTCn8Txg0.crl (hash: oJoamO5gWv70FSgyrivGiZZhYP8QHy+oGmW9f3jl5cc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/3e2077-bc10-4621-ab0b-dba4c9b8706b/1/iVVHgNslskPAotNhl5sTCn8Txg0.crl rsync://rpki.ripe.net/repository/DEFAULT/ea/3e2077-bc10-4621-ab0b-dba4c9b8706b/1/iVVHgNslskPAotNhl5sTCn8Txg0.mft rsync://rpki.ripe.net/repository/DEFAULT/iVVHgNslskPAotNhl5sTCn8Txg0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 14:45:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0e:ca:01:84:71:f0:eb:03:f9:cc:68:49:59:54:2a:87 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89554780db25b243c0a2d361979b130a7f13c60d Validity Not Before: Dec 11 19:01:18 2025 GMT Not After : Dec 12 19:01:18 2025 GMT Subject: CN=3c0c9870f5325d593b2afaffdac0ad920815f595 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:9a:60:58:18:42:3d:b1:fa:95:5a:05:0e:41: 0c:ed:90:a1:45:90:18:51:c2:84:da:57:75:55:10: b0:29:87:c2:38:51:a3:50:5d:c7:0e:4e:f8:0d:f3: cc:29:37:4e:46:81:99:b6:14:12:06:47:63:12:86: 29:09:48:f9:c0:66:44:f7:2d:ab:24:37:b4:9e:7c: 95:1b:65:e3:a1:36:4c:27:8c:75:31:84:83:c4:d4: 64:72:f6:22:eb:a0:b5:b1:a2:e7:f2:9b:f3:af:61: ce:80:46:96:c1:32:29:bb:09:51:f7:34:27:44:a4: 2a:27:bf:9a:62:09:17:51:f0:58:1a:76:5e:a9:14: 83:10:b6:4f:e1:7e:2f:8d:6e:ca:25:6c:9f:78:f1: 63:a5:8b:5e:ec:84:e1:39:57:24:6c:a6:37:8e:2f: d8:0c:fa:f8:6d:3a:7c:3a:a7:95:ad:bb:7f:1d:08: 53:58:e9:87:86:8d:e6:e2:04:2b:34:73:7e:88:b0: 49:c4:19:96:ca:57:f5:f9:93:6d:95:90:c6:5a:b8: 01:8e:f6:af:54:dc:e7:70:43:65:60:ca:36:a6:e7: df:57:7a:fd:07:23:f5:31:21:6d:d6:c5:e5:34:e8: df:ba:f4:14:26:e5:0b:12:ef:f0:a5:41:c1:2c:f7: d3:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:0C:98:70:F5:32:5D:59:3B:2A:FA:FF:DA:C0:AD:92:08:15:F5:95 X509v3 Authority Key Identifier: keyid:89:55:47:80:DB:25:B2:43:C0:A2:D3:61:97:9B:13:0A:7F:13:C6:0D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iVVHgNslskPAotNhl5sTCn8Txg0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/3e2077-bc10-4621-ab0b-dba4c9b8706b/1/iVVHgNslskPAotNhl5sTCn8Txg0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/3e2077-bc10-4621-ab0b-dba4c9b8706b/1/iVVHgNslskPAotNhl5sTCn8Txg0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1f:2b:db:f0:41:e2:78:05:cf:4f:d1:37:a2:64:c7:16:df:31: 70:11:50:88:7a:d9:8f:f8:eb:85:23:04:62:1d:13:f7:94:2c: 24:58:67:c3:e9:60:a8:26:58:34:19:da:ca:3b:3d:e0:24:df: 93:fe:ae:9b:e1:ab:f9:fe:c5:c4:37:28:2f:34:df:61:be:ae: 39:2c:8b:d7:57:af:df:6a:5d:1d:f8:03:0a:2c:88:7b:95:d3: 9f:ad:f4:f7:05:1e:be:18:fb:e2:32:73:4f:5c:f6:1c:b4:1b: db:ec:96:87:e6:79:40:d1:32:09:69:36:3c:f3:5f:8e:64:49: 60:bf:6b:c5:ef:b4:03:07:31:a2:87:c5:e3:63:ad:5c:b7:ae: 89:83:50:dd:a4:5d:e0:78:4e:57:7e:dd:11:42:56:f2:46:82: 97:7b:5b:36:4c:e8:6e:f4:19:49:70:55:94:f8:57:c0:33:82: af:b6:72:b8:8b:d8:65:b1:8d:8d:c5:83:25:17:89:09:a8:7f: 14:88:24:35:53:a6:f6:fa:ee:9a:24:1f:8e:66:d6:04:4b:84: db:4c:0a:b8:d8:d4:e0:05:dd:db:b1:75:09:5c:f8:65:43:92: 5f:09:cb:84:b5:ea:b8:4b:5a:f6:4c:3f:4d:c4:c9:7b:16:b1: f4:9d:0b:ab -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsOygGEcfDrA/nMaElZVCqHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg5NTU0NzgwZGIyNWIyNDNjMGEyZDM2MTk3OWIxMzBhN2Yx M2M2MGQwHhcNMjUxMjExMTkwMTE4WhcNMjUxMjEyMTkwMTE4WjAzMTEwLwYDVQQD EygzYzBjOTg3MGY1MzI1ZDU5M2IyYWZhZmZkYWMwYWQ5MjA4MTVmNTk1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzppgWBhCPbH6lVoFDkEM7ZChRZAY UcKE2ld1VRCwKYfCOFGjUF3HDk74DfPMKTdORoGZthQSBkdjEoYpCUj5wGZE9y2r JDe0nnyVG2XjoTZMJ4x1MYSDxNRkcvYi66C1saLn8pvzr2HOgEaWwTIpuwlR9zQn RKQqJ7+aYgkXUfBYGnZeqRSDELZP4X4vjW7KJWyfePFjpYte7IThOVckbKY3ji/Y DPr4bTp8OqeVrbt/HQhTWOmHho3m4gQrNHN+iLBJxBmWylf1+ZNtlZDGWrgBjvav VNzncENlYMo2puffV3r9ByP1MSFt1sXlNOjfuvQUJuULEu/wpUHBLPfTOwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDwMmHD1Ml1ZOyr6/9rArZIIFfWVMB8GA1UdIwQY MBaAFIlVR4DbJbJDwKLTYZebEwp/E8YNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaVZWSGdOc2xza1BBb3ROaGw1c1RDbjhUeGcwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYS8zZTIwNzctYmMxMC00NjIxLWFiMGIt ZGJhNGM5Yjg3MDZiLzEvaVZWSGdOc2xza1BBb3ROaGw1c1RDbjhUeGcwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYS8zZTIwNzctYmMxMC00NjIxLWFiMGItZGJhNGM5Yjg3MDZi LzEvaVZWSGdOc2xza1BBb3ROaGw1c1RDbjhUeGcwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHyvb8EHi eAXPT9E3omTHFt8xcBFQiHrZj/jrhSMEYh0T95QsJFhnw+lgqCZYNBnayjs94CTf k/6um+Gr+f7FxDcoLzTfYb6uOSyL11ev32pdHfgDCiyIe5XTn6309wUevhj74jJz T1z2HLQb2+yWh+Z5QNEyCWk2PPNfjmRJYL9rxe+0AwcxoofF42OtXLeuiYNQ3aRd 4HhOV37dEUJW8kaCl3tbNkzobvQZSXBVlPhXwDOCr7ZyuIvYZbGNjcWDJReJCah/ FIgkNVOm9vrumiQfjmbWBEuE20wKuNjU4AXd27F1CVz4ZUOSXwnLhLXquEta9kw/ TcTJexax9J0Lqw== -----END CERTIFICATE-----Generated at Fri Dec 12 00:20:04 2025 by rpki-client