This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/43afb6-0d21-4ff6-9863-bc517e121d54/1/ifTHhzt_6kn_brkNUCwdvDpfjDM.mft File: ifTHhzt_6kn_brkNUCwdvDpfjDM.mft (raw, json) Hash identifier: 8OLgycPzJ0Q1zUnR/rj/2ZIDM+RPQgWYRn9Io0d5GT0= Subject key identifier: 14:C2:71:A8:AF:45:9F:EC:C2:1C:30:2C:E9:48:04:73:38:7A:9B:11 Authority key identifier: 89:F4:C7:87:3B:7F:EA:49:FF:6E:B9:0D:50:2C:1D:BC:3A:5F:8C:33 Certificate issuer: /CN=89f4c7873b7fea49ff6eb90d502c1dbc3a5f8c33 Certificate serial: 019B5ABF8356C451B1CC070E6CDE9CE6C39B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ifTHhzt_6kn_brkNUCwdvDpfjDM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/43afb6-0d21-4ff6-9863-bc517e121d54/1/ifTHhzt_6kn_brkNUCwdvDpfjDM.mft Manifest number: 177C Signing time: Fri 26 Dec 2025 13:00:58 +0000 Manifest this update: Fri 26 Dec 2025 13:00:58 +0000 Manifest next update: Sat 27 Dec 2025 13:00:58 +0000 Files and hashes: 1: 5dE_GC4RYmruYsEQCosEswqhvMw.roa (hash: PKjCYy3vCzlACHchkXt5SVZDwsnRqMCgtgL6CJOnCUg=) 2: ifTHhzt_6kn_brkNUCwdvDpfjDM.crl (hash: C/M8Tcw2XfRCH6pyZGPn9JjZ0PththweZ8KLMdi1NLo=) 3: wITBUH3fVii4QvavQf9IYQ9sIA4.roa (hash: sUVkY3RRTmkWlOCgQmin3wil/Gjs5wSpMGd2nMYWzJU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/43afb6-0d21-4ff6-9863-bc517e121d54/1/ifTHhzt_6kn_brkNUCwdvDpfjDM.crl rsync://rpki.ripe.net/repository/DEFAULT/f9/43afb6-0d21-4ff6-9863-bc517e121d54/1/ifTHhzt_6kn_brkNUCwdvDpfjDM.mft rsync://rpki.ripe.net/repository/DEFAULT/ifTHhzt_6kn_brkNUCwdvDpfjDM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5a:bf:83:56:c4:51:b1:cc:07:0e:6c:de:9c:e6:c3:9b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89f4c7873b7fea49ff6eb90d502c1dbc3a5f8c33 Validity Not Before: Dec 26 13:00:58 2025 GMT Not After : Dec 27 13:00:58 2025 GMT Subject: CN=14c271a8af459fecc21c302ce9480473387a9b11 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:2b:bf:13:6b:58:fc:e6:30:a2:9a:af:e3:db: 61:fc:31:46:2a:93:2e:96:41:07:f3:a3:13:d5:2c: b8:50:4e:a1:83:40:ce:f4:ef:d7:99:0f:24:43:ec: 45:c5:38:cd:7b:e1:ae:ff:38:3a:a9:15:1e:eb:8d: 8b:8c:5d:c2:af:2c:e5:2e:26:ac:90:94:00:e1:7d: 89:b9:2c:7b:fb:9b:ab:44:6e:72:dc:4b:e8:b0:6b: 77:43:e9:78:9e:92:e6:6e:0c:15:65:4f:9d:9d:3b: ce:51:f4:bd:6f:6b:b0:25:96:c5:fa:96:b5:ea:6d: a4:71:42:85:0b:f6:b5:2a:f5:35:27:65:1e:bd:84: dc:90:03:4d:e6:32:82:ce:aa:73:ee:d4:b4:f6:2e: 6c:d9:00:21:e7:13:de:bf:6b:97:0c:25:62:14:84: 8c:e1:37:59:f4:b7:02:9e:12:45:79:52:c1:2b:7f: 84:0d:e2:3e:a1:64:91:ba:ae:78:d3:6a:00:37:c0: b5:89:c9:d8:53:af:f3:9e:d8:7f:fd:0b:f3:4f:5c: b8:bd:0f:2a:11:04:7d:76:8f:bc:e4:a3:e2:62:6b: ea:ac:8c:cc:7a:82:34:6e:03:be:f5:9c:09:30:d3: cb:e1:5e:9f:40:54:3a:54:50:a6:23:c2:e1:98:25: a2:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:C2:71:A8:AF:45:9F:EC:C2:1C:30:2C:E9:48:04:73:38:7A:9B:11 X509v3 Authority Key Identifier: keyid:89:F4:C7:87:3B:7F:EA:49:FF:6E:B9:0D:50:2C:1D:BC:3A:5F:8C:33 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ifTHhzt_6kn_brkNUCwdvDpfjDM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/43afb6-0d21-4ff6-9863-bc517e121d54/1/ifTHhzt_6kn_brkNUCwdvDpfjDM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/43afb6-0d21-4ff6-9863-bc517e121d54/1/ifTHhzt_6kn_brkNUCwdvDpfjDM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 40:b3:85:e5:d8:8e:66:43:1b:18:09:0f:23:75:b1:74:6c:4b: d6:11:d8:77:73:ec:98:09:d5:ef:b7:10:f1:a5:32:a8:04:dd: b5:9c:9e:1f:92:01:5f:02:e8:cc:59:14:bc:64:87:84:5f:52: db:d1:9f:77:7b:ff:5e:20:2c:3e:c7:65:f4:19:9d:5c:71:33: 51:08:fa:b9:38:93:04:4c:f8:1e:eb:f3:98:94:2d:68:98:8e: 75:11:ea:5e:7e:65:3a:c1:07:80:65:f0:31:e3:75:ff:2e:35: ce:99:b0:25:86:c5:5e:e5:b3:8d:43:31:61:40:a2:0a:b0:66: df:fe:19:f7:77:31:9f:42:bf:86:3b:4e:25:8e:dc:75:7a:44: 18:b7:b7:ca:fa:35:0b:18:5c:d1:d2:18:ff:7e:c6:86:1d:82: 06:d8:6f:18:57:28:98:f8:0f:83:5d:9b:f1:92:c6:6b:c7:ec: 4f:b3:30:4d:9f:cf:44:c5:9f:3d:5d:de:77:20:03:ca:3f:26: 56:2a:5e:e4:82:6c:49:2a:cb:9d:db:f8:a7:1a:f7:26:3c:25: 2a:7c:23:01:81:66:3f:f8:95:21:c7:56:ce:0b:72:30:fa:a3: b5:06:6f:17:89:b6:81:76:17:8c:34:e1:15:bf:92:2d:f2:8a: eb:f4:5a:ad -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtav4NWxFGxzAcObN6c5sObMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg5ZjRjNzg3M2I3ZmVhNDlmZjZlYjkwZDUwMmMxZGJjM2E1 ZjhjMzMwHhcNMjUxMjI2MTMwMDU4WhcNMjUxMjI3MTMwMDU4WjAzMTEwLwYDVQQD EygxNGMyNzFhOGFmNDU5ZmVjYzIxYzMwMmNlOTQ4MDQ3MzM4N2E5YjExMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4Cu/E2tY/OYwopqv49th/DFGKpMu lkEH86MT1Sy4UE6hg0DO9O/XmQ8kQ+xFxTjNe+Gu/zg6qRUe642LjF3CryzlLias kJQA4X2JuSx7+5urRG5y3EvosGt3Q+l4npLmbgwVZU+dnTvOUfS9b2uwJZbF+pa1 6m2kcUKFC/a1KvU1J2UevYTckANN5jKCzqpz7tS09i5s2QAh5xPev2uXDCViFISM 4TdZ9LcCnhJFeVLBK3+EDeI+oWSRuq5402oAN8C1icnYU6/znth//QvzT1y4vQ8q EQR9do+85KPiYmvqrIzMeoI0bgO+9ZwJMNPL4V6fQFQ6VFCmI8LhmCWiWQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBTCcaivRZ/swhwwLOlIBHM4epsRMB8GA1UdIwQY MBaAFIn0x4c7f+pJ/265DVAsHbw6X4wzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaWZUSGh6dF82a25fYnJrTlVDd2R2RHBmakRNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOS80M2FmYjYtMGQyMS00ZmY2LTk4NjMt YmM1MTdlMTIxZDU0LzEvaWZUSGh6dF82a25fYnJrTlVDd2R2RHBmakRNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mOS80M2FmYjYtMGQyMS00ZmY2LTk4NjMtYmM1MTdlMTIxZDU0 LzEvaWZUSGh6dF82a25fYnJrTlVDd2R2RHBmakRNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQLOF5diO ZkMbGAkPI3WxdGxL1hHYd3PsmAnV77cQ8aUyqATdtZyeH5IBXwLozFkUvGSHhF9S 29Gfd3v/XiAsPsdl9BmdXHEzUQj6uTiTBEz4HuvzmJQtaJiOdRHqXn5lOsEHgGXw MeN1/y41zpmwJYbFXuWzjUMxYUCiCrBm3/4Z93cxn0K/hjtOJY7cdXpEGLe3yvo1 Cxhc0dIY/37Ghh2CBthvGFcomPgPg12b8ZLGa8fsT7MwTZ/PRMWfPV3edyADyj8m Vipe5IJsSSrLndv4pxr3JjwlKnwjAYFmP/iVIcdWzgtyMPqjtQZvF4m2gXYXjDTh Fb+SLfKK6/RarQ== -----END CERTIFICATE-----Generated at Fri Dec 26 14:17:17 2025 by rpki-client