This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/425149-9c68-41fb-8035-d76c8c739861/1/itJAYD7G681i9y1G8dwAy34fCy4.mft File: itJAYD7G681i9y1G8dwAy34fCy4.mft (raw, json) Hash identifier: 9dUcGERG9FdERzHaWZZM9SHiwaXEW/vtI5Pt5WSw8OE= Subject key identifier: 16:1F:D2:DA:88:FB:46:02:47:55:50:6E:8E:C2:7C:D6:31:DC:C8:51 Authority key identifier: 8A:D2:40:60:3E:C6:EB:CD:62:F7:2D:46:F1:DC:00:CB:7E:1F:0B:2E Certificate issuer: /CN=8ad240603ec6ebcd62f72d46f1dc00cb7e1f0b2e Certificate serial: 019B2174EC36F0B8EDF84DE788A780EAEEDA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/itJAYD7G681i9y1G8dwAy34fCy4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/425149-9c68-41fb-8035-d76c8c739861/1/itJAYD7G681i9y1G8dwAy34fCy4.mft Manifest number: 177F Signing time: Mon 15 Dec 2025 10:01:09 +0000 Manifest this update: Mon 15 Dec 2025 10:01:09 +0000 Manifest next update: Tue 16 Dec 2025 10:01:09 +0000 Files and hashes: 1: 53I3Xwp10sSBL-xtc_jqMRAMZEE.roa (hash: 5EdJdIMmiKFhoj2g+ghy+33i5Mlz/mFCHlU2tz6Caf0=) 2: WIThVUQPtnkqQGydyKr4DwKXGUc.roa (hash: ZG07WmGePqEgXeU18ulf3ZqT0pP1PSE97ftBth4OPug=) 3: WcvcGB5_rIhp6N6ub_yEOU1frVM.roa (hash: SAdoS4J2d6uhrm3KFzHcrPvgGi6wPamf1S8poWnS5sg=) 4: cJgTWrMWwO4cBqHTiI8A-Rbr9t4.roa (hash: +22ciZigEHHnJmjL2vAXhnyOPmbAxXckxCOmW9W102s=) 5: itJAYD7G681i9y1G8dwAy34fCy4.crl (hash: xNqcYTE4aN3hUrkktMjtPtcKAX/6tzIJRKtsEfiybJY=) 6: pOdO9Se2ice1mi6CizmcbokQTm4.roa (hash: vWI5ZOqTV/1a1r4zGntVeUM1tDGMCfxq337Ldn/5HXA=) 7: rD1DyuXlotr5xosPSyeJDExCkk4.roa (hash: vqY5iQLurSqfXlXZ7xp9Cs7NZG2x1ohqMIKv8p8BnDM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/425149-9c68-41fb-8035-d76c8c739861/1/itJAYD7G681i9y1G8dwAy34fCy4.crl rsync://rpki.ripe.net/repository/DEFAULT/f7/425149-9c68-41fb-8035-d76c8c739861/1/itJAYD7G681i9y1G8dwAy34fCy4.mft rsync://rpki.ripe.net/repository/DEFAULT/itJAYD7G681i9y1G8dwAy34fCy4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 08:00:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:21:74:ec:36:f0:b8:ed:f8:4d:e7:88:a7:80:ea:ee:da Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8ad240603ec6ebcd62f72d46f1dc00cb7e1f0b2e Validity Not Before: Dec 15 10:01:09 2025 GMT Not After : Dec 16 10:01:09 2025 GMT Subject: CN=161fd2da88fb46024755506e8ec27cd631dcc851 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:60:a3:15:67:f7:8f:ef:33:5d:2e:91:42:cd: 23:11:49:3c:a2:6b:f6:40:dd:7e:20:3f:74:59:a2: a5:ed:96:00:c5:10:2d:e5:74:7e:c4:a8:c4:74:e1: f9:dd:e8:06:e1:a7:82:b2:80:4b:ba:d1:17:a2:2b: 03:25:c0:83:8e:31:18:c8:52:52:72:85:8c:7a:1c: 0c:47:e1:2f:62:72:ee:46:49:66:4f:2b:2e:cd:0c: 28:e5:74:08:92:48:c8:ae:d0:25:58:bd:3a:98:17: 3d:3e:95:34:28:fd:a7:eb:3a:e4:35:ff:9e:a6:3a: ec:83:cd:b7:f3:7c:24:d7:c5:a6:50:93:dd:bf:05: 64:30:8a:c1:d8:6c:a0:bc:5a:2b:d8:5d:9a:8f:3f: 7d:1d:f2:fb:d2:8e:43:e4:7a:e3:26:8b:ff:be:d6: 29:67:1d:f9:5b:88:44:55:13:b9:2c:ce:db:59:c8: a9:ea:4d:04:c0:89:f1:f8:12:d5:d6:6c:9b:f1:98: a7:12:bb:b4:94:1d:db:2b:7a:46:28:91:7a:35:6f: 31:a1:38:2e:e6:76:21:64:be:bb:92:93:ee:db:2d: a3:98:ae:a8:34:05:a9:a2:ec:4a:4a:3e:4e:05:c0: f1:83:a3:a0:29:64:fd:00:bb:6e:c7:5e:b4:b8:4d: 67:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:1F:D2:DA:88:FB:46:02:47:55:50:6E:8E:C2:7C:D6:31:DC:C8:51 X509v3 Authority Key Identifier: keyid:8A:D2:40:60:3E:C6:EB:CD:62:F7:2D:46:F1:DC:00:CB:7E:1F:0B:2E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/itJAYD7G681i9y1G8dwAy34fCy4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/425149-9c68-41fb-8035-d76c8c739861/1/itJAYD7G681i9y1G8dwAy34fCy4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/425149-9c68-41fb-8035-d76c8c739861/1/itJAYD7G681i9y1G8dwAy34fCy4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 77:81:a8:95:39:2b:57:d8:41:17:4c:a5:52:f5:64:8f:f8:e0: 78:97:ba:ba:12:b4:de:fa:75:ef:02:45:3f:c3:c7:9b:9a:9e: c5:10:a6:ca:0f:7d:84:4a:09:13:af:09:0f:6e:a2:66:18:3c: 59:c8:2d:4a:8e:5d:bc:b6:37:47:4a:ef:f0:03:94:21:40:cb: 10:87:60:9d:37:44:8b:e3:ba:43:6b:96:28:c2:4f:a8:a5:e2: 86:15:7e:93:7f:43:b1:68:43:fc:24:db:33:0f:6e:f1:3b:39: cb:a1:a5:44:90:18:fa:7b:b6:cb:d2:ca:4b:a9:b5:5a:1e:cc: d7:41:1b:86:9a:10:11:49:84:66:c8:01:92:c9:8b:a9:13:af: ef:ab:ed:23:a7:cf:6f:cd:6a:26:de:02:a8:52:b4:6b:40:62: 41:ad:19:a9:28:c9:0a:82:0b:57:4f:83:0c:4f:cc:54:b1:86: 4d:7e:9f:81:a0:76:3d:6c:11:9d:59:de:6e:1d:15:fd:e0:a0: 41:fb:7d:eb:ae:2b:14:af:7b:0d:e0:06:2f:8c:a0:6a:a1:84: 89:b3:67:90:25:13:bc:db:a0:cd:95:46:d1:0b:a4:d4:a1:27: 74:f8:ad:49:26:1d:e3:6d:13:c4:6f:7c:89:80:e9:3b:30:58: e0:71:ee:9f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZshdOw28Ljt+E3niKeA6u7aMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhhZDI0MDYwM2VjNmViY2Q2MmY3MmQ0NmYxZGMwMGNiN2Ux ZjBiMmUwHhcNMjUxMjE1MTAwMTA5WhcNMjUxMjE2MTAwMTA5WjAzMTEwLwYDVQQD EygxNjFmZDJkYTg4ZmI0NjAyNDc1NTUwNmU4ZWMyN2NkNjMxZGNjODUxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg2CjFWf3j+8zXS6RQs0jEUk8omv2 QN1+ID90WaKl7ZYAxRAt5XR+xKjEdOH53egG4aeCsoBLutEXoisDJcCDjjEYyFJS coWMehwMR+EvYnLuRklmTysuzQwo5XQIkkjIrtAlWL06mBc9PpU0KP2n6zrkNf+e pjrsg82383wk18WmUJPdvwVkMIrB2GygvFor2F2ajz99HfL70o5D5HrjJov/vtYp Zx35W4hEVRO5LM7bWcip6k0EwInx+BLV1myb8ZinEru0lB3bK3pGKJF6NW8xoTgu 5nYhZL67kpPu2y2jmK6oNAWpouxKSj5OBcDxg6OgKWT9ALtux160uE1nPwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBYf0tqI+0YCR1VQbo7CfNYx3MhRMB8GA1UdIwQY MBaAFIrSQGA+xuvNYvctRvHcAMt+HwsuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaXRKQVlEN0c2ODFpOXkxRzhkd0F5MzRmQ3k0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNy80MjUxNDktOWM2OC00MWZiLTgwMzUt ZDc2YzhjNzM5ODYxLzEvaXRKQVlEN0c2ODFpOXkxRzhkd0F5MzRmQ3k0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNy80MjUxNDktOWM2OC00MWZiLTgwMzUtZDc2YzhjNzM5ODYx LzEvaXRKQVlEN0c2ODFpOXkxRzhkd0F5MzRmQ3k0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAd4GolTkr V9hBF0ylUvVkj/jgeJe6uhK03vp17wJFP8PHm5qexRCmyg99hEoJE68JD26iZhg8 WcgtSo5dvLY3R0rv8AOUIUDLEIdgnTdEi+O6Q2uWKMJPqKXihhV+k39DsWhD/CTb Mw9u8Ts5y6GlRJAY+nu2y9LKS6m1Wh7M10EbhpoQEUmEZsgBksmLqROv76vtI6fP b81qJt4CqFK0a0BiQa0ZqSjJCoILV0+DDE/MVLGGTX6fgaB2PWwRnVnebh0V/eCg Qft9664rFK97DeAGL4ygaqGEibNnkCUTvNugzZVG0Quk1KEndPitSSYd420TxG98 iYDpOzBY4HHunw== -----END CERTIFICATE-----Generated at Mon Dec 15 13:19:20 2025 by rpki-client