This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/dcd3b7-7cc0-4c49-bab3-7a0b145cf62b/1/iBvRQCkk7CpkTo9U5plMtKyOJKY.mft File: iBvRQCkk7CpkTo9U5plMtKyOJKY.mft (raw, json) Hash identifier: r9HpegA1s8H2cHXtE3NxJchkDzsz0EI+I5rtKsIRkaQ= Subject key identifier: DA:3D:DB:FE:B0:46:F2:E6:42:EC:93:DB:AD:47:0B:00:59:36:8A:01 Authority key identifier: 88:1B:D1:40:29:24:EC:2A:64:4E:8F:54:E6:99:4C:B4:AC:8E:24:A6 Certificate issuer: /CN=881bd1402924ec2a644e8f54e6994cb4ac8e24a6 Certificate serial: 019B1013F6F87B25FC172B0A28E024C0D725 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iBvRQCkk7CpkTo9U5plMtKyOJKY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/dcd3b7-7cc0-4c49-bab3-7a0b145cf62b/1/iBvRQCkk7CpkTo9U5plMtKyOJKY.mft Manifest number: 1037 Signing time: Fri 12 Dec 2025 01:01:42 +0000 Manifest this update: Fri 12 Dec 2025 01:01:42 +0000 Manifest next update: Sat 13 Dec 2025 01:01:42 +0000 Files and hashes: 1: 7ibZVwlfZ8ueZalO2s5Z7rPx0H0.roa (hash: Umej8EQSMHbvS0Ig+vK3MM7fmk+X8RtofGrUKqtGKkc=) 2: iBvRQCkk7CpkTo9U5plMtKyOJKY.crl (hash: u4bF31b/cDZSWVKf4c3tKHmRwE76F4SvWMxEhaA68Ew=) 3: kb-KEA3ZQd2MnkxgOKCpwGpH7ac.roa (hash: PVNmYw7m9lOZowA6tdOLawiD6fJdAXnNIKgq+V8sW40=) 4: vqIlQ51IAOGJFiTSPtHU72fvx08.roa (hash: zUhV3nwfP0jHHq/oTFIpW9P4yGQL+wJghHGlBxSt0/g=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/dcd3b7-7cc0-4c49-bab3-7a0b145cf62b/1/iBvRQCkk7CpkTo9U5plMtKyOJKY.crl rsync://rpki.ripe.net/repository/DEFAULT/ec/dcd3b7-7cc0-4c49-bab3-7a0b145cf62b/1/iBvRQCkk7CpkTo9U5plMtKyOJKY.mft rsync://rpki.ripe.net/repository/DEFAULT/iBvRQCkk7CpkTo9U5plMtKyOJKY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 19:27:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:10:13:f6:f8:7b:25:fc:17:2b:0a:28:e0:24:c0:d7:25 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=881bd1402924ec2a644e8f54e6994cb4ac8e24a6 Validity Not Before: Dec 12 01:01:42 2025 GMT Not After : Dec 13 01:01:42 2025 GMT Subject: CN=da3ddbfeb046f2e642ec93dbad470b0059368a01 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:3f:93:f1:6c:e1:b1:42:90:a3:05:9b:0a:ba: bf:0c:cc:a2:eb:9f:32:51:eb:72:85:e4:c3:44:af: ff:bc:4f:fb:65:45:54:13:5a:79:04:68:7a:0f:75: 33:04:3e:ed:95:e0:c1:7a:8a:3e:33:e9:57:a3:f2: 5d:19:20:d5:c7:30:50:0d:6c:c5:ff:52:5b:10:ae: 87:94:23:65:ac:17:b8:88:b8:2c:74:f2:f0:d3:35: f4:fa:d2:94:7d:53:79:34:d7:48:d8:88:7e:80:0c: 92:dc:14:2e:3e:47:05:21:6d:c6:03:71:ca:05:b7: f1:7b:11:e0:55:c2:7a:53:6e:41:3f:06:f2:d2:db: 6f:49:6b:a8:ae:9a:0b:72:87:9a:a7:05:c5:70:af: ea:0c:82:2a:7a:1c:85:98:e9:d7:b5:22:cd:33:c2: 9c:30:d0:f9:17:a4:de:13:4d:f3:c4:3a:c3:17:b9: f8:ea:a0:60:71:67:9d:e5:72:ba:03:a8:bd:e7:16: d5:7f:82:71:87:e3:15:ba:cd:fb:a0:71:9d:b3:38: 89:06:77:59:6a:23:84:ae:4c:27:4c:4f:fc:34:05: c3:2a:d8:b4:bd:80:4e:31:5b:47:56:a7:99:2c:d1: ed:cf:2b:67:b0:68:13:ee:db:3e:d1:4b:e8:1b:2b: d8:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:3D:DB:FE:B0:46:F2:E6:42:EC:93:DB:AD:47:0B:00:59:36:8A:01 X509v3 Authority Key Identifier: keyid:88:1B:D1:40:29:24:EC:2A:64:4E:8F:54:E6:99:4C:B4:AC:8E:24:A6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iBvRQCkk7CpkTo9U5plMtKyOJKY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/dcd3b7-7cc0-4c49-bab3-7a0b145cf62b/1/iBvRQCkk7CpkTo9U5plMtKyOJKY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/dcd3b7-7cc0-4c49-bab3-7a0b145cf62b/1/iBvRQCkk7CpkTo9U5plMtKyOJKY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4a:2c:05:00:b5:b1:13:4e:31:66:28:0e:64:3e:2e:3b:f0:21: 4c:b5:78:73:8e:95:87:fc:f9:84:d3:ea:97:7c:3b:a0:4c:0e: a0:07:30:09:70:14:ae:43:75:73:34:f5:47:72:4f:68:3a:79: e7:f1:41:33:20:72:36:75:bf:b3:18:b1:c3:33:e8:e2:93:04: 7f:09:91:d6:44:84:85:a4:62:a8:9d:8b:e8:0e:49:bd:8a:81: 8b:04:d4:7a:42:b3:1c:f3:39:a6:94:98:5f:0f:34:9c:aa:9d: 61:57:9a:77:f3:68:11:25:a6:ea:f6:d1:a0:25:24:96:ad:45: b4:54:44:2b:f8:77:35:91:8b:28:75:80:d8:c7:9e:e6:35:47: 9a:14:90:14:05:b5:ad:82:c9:24:f4:98:de:69:68:e1:c9:6a: c0:88:b3:1b:34:fa:d0:d0:2f:41:25:cc:13:d0:65:fa:f2:36: 8d:24:7f:ba:f2:0b:ca:95:3f:06:81:28:2e:96:e1:76:cb:f2: 8f:30:1a:d8:6d:52:70:47:9a:73:20:ad:82:2b:16:c9:90:17: 21:04:65:a2:7b:5d:2b:f9:9f:cc:2b:f4:6c:37:c1:be:3a:11: 5e:86:23:9d:f9:39:d1:dc:05:76:3d:87:6e:cc:7d:da:55:d0: 11:c7:7c:3a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsQE/b4eyX8FysKKOAkwNclMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg4MWJkMTQwMjkyNGVjMmE2NDRlOGY1NGU2OTk0Y2I0YWM4 ZTI0YTYwHhcNMjUxMjEyMDEwMTQyWhcNMjUxMjEzMDEwMTQyWjAzMTEwLwYDVQQD EyhkYTNkZGJmZWIwNDZmMmU2NDJlYzkzZGJhZDQ3MGIwMDU5MzY4YTAxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6T+T8WzhsUKQowWbCrq/DMyi658y UetyheTDRK//vE/7ZUVUE1p5BGh6D3UzBD7tleDBeoo+M+lXo/JdGSDVxzBQDWzF /1JbEK6HlCNlrBe4iLgsdPLw0zX0+tKUfVN5NNdI2Ih+gAyS3BQuPkcFIW3GA3HK BbfxexHgVcJ6U25BPwby0ttvSWuorpoLcoeapwXFcK/qDIIqehyFmOnXtSLNM8Kc MND5F6TeE03zxDrDF7n46qBgcWed5XK6A6i95xbVf4Jxh+MVus37oHGdsziJBndZ aiOErkwnTE/8NAXDKti0vYBOMVtHVqeZLNHtzytnsGgT7ts+0UvoGyvYHQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNo92/6wRvLmQuyT261HCwBZNooBMB8GA1UdIwQY MBaAFIgb0UApJOwqZE6PVOaZTLSsjiSmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaUJ2UlFDa2s3Q3BrVG85VTVwbE10S3lPSktZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYy9kY2QzYjctN2NjMC00YzQ5LWJhYjMt N2EwYjE0NWNmNjJiLzEvaUJ2UlFDa2s3Q3BrVG85VTVwbE10S3lPSktZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYy9kY2QzYjctN2NjMC00YzQ5LWJhYjMtN2EwYjE0NWNmNjJi LzEvaUJ2UlFDa2s3Q3BrVG85VTVwbE10S3lPSktZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASiwFALWx E04xZigOZD4uO/AhTLV4c46Vh/z5hNPql3w7oEwOoAcwCXAUrkN1czT1R3JPaDp5 5/FBMyByNnW/sxixwzPo4pMEfwmR1kSEhaRiqJ2L6A5JvYqBiwTUekKzHPM5ppSY Xw80nKqdYVead/NoESWm6vbRoCUklq1FtFREK/h3NZGLKHWA2Mee5jVHmhSQFAW1 rYLJJPSY3mlo4clqwIizGzT60NAvQSXME9Bl+vI2jSR/uvILypU/BoEoLpbhdsvy jzAa2G1ScEeacyCtgisWyZAXIQRlontdK/mfzCv0bDfBvjoRXoYjnfk50dwFdj2H bsx92lXQEcd8Og== -----END CERTIFICATE-----Generated at Fri Dec 12 02:49:45 2025 by rpki-client