This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/b182bc-bc32-4e2f-bad7-ca51fb408901/1/IHi67mtuxUJaFrH8AMUsMO2Vo_A.mft File: IHi67mtuxUJaFrH8AMUsMO2Vo_A.mft (raw, json) Hash identifier: VRGVuuXBoNYD4U9f5D4lgT1nX8HJhkRkbeThQxoU9eo= Subject key identifier: 7B:38:77:9A:EF:AF:BC:F0:B2:CE:BC:52:A1:B6:BF:92:0E:2B:DB:33 Authority key identifier: 20:78:BA:EE:6B:6E:C5:42:5A:16:B1:FC:00:C5:2C:30:ED:95:A3:F0 Certificate issuer: /CN=2078baee6b6ec5425a16b1fc00c52c30ed95a3f0 Certificate serial: 019B1B3BF790230779D79E9D9439C7517BC5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IHi67mtuxUJaFrH8AMUsMO2Vo_A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/b182bc-bc32-4e2f-bad7-ca51fb408901/1/IHi67mtuxUJaFrH8AMUsMO2Vo_A.mft Manifest number: 14E8 Signing time: Sun 14 Dec 2025 05:01:13 +0000 Manifest this update: Sun 14 Dec 2025 05:01:13 +0000 Manifest next update: Mon 15 Dec 2025 05:01:13 +0000 Files and hashes: 1: IHi67mtuxUJaFrH8AMUsMO2Vo_A.crl (hash: 32aN9ewE+7XENn9yEgigcJH7Eqd3GhWEp5tXMexACUQ=) 2: Tj1VT7s8ilnWaRH5FDEx4ErgOfw.roa (hash: EAnVAxYXeZnLn3O7V7JRGZpaiw9YJLofd+adf3s7hWw=) 3: z8gJT3mWJvoCjNtGavez3w-sptI.roa (hash: rAtA37xRZ8BRiEnR3BviWDsE+vEFga17zSGIolCXdPw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/b182bc-bc32-4e2f-bad7-ca51fb408901/1/IHi67mtuxUJaFrH8AMUsMO2Vo_A.crl rsync://rpki.ripe.net/repository/DEFAULT/ff/b182bc-bc32-4e2f-bad7-ca51fb408901/1/IHi67mtuxUJaFrH8AMUsMO2Vo_A.mft rsync://rpki.ripe.net/repository/DEFAULT/IHi67mtuxUJaFrH8AMUsMO2Vo_A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 15 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:1b:3b:f7:90:23:07:79:d7:9e:9d:94:39:c7:51:7b:c5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2078baee6b6ec5425a16b1fc00c52c30ed95a3f0 Validity Not Before: Dec 14 05:01:13 2025 GMT Not After : Dec 15 05:01:13 2025 GMT Subject: CN=7b38779aefafbcf0b2cebc52a1b6bf920e2bdb33 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:b7:57:83:a2:1d:89:33:d4:58:0c:93:25:82: 19:99:3d:06:50:54:40:47:3c:a5:5e:58:cb:6b:77: c7:4a:f9:c3:8b:ff:1d:a2:e4:cf:71:ed:24:80:87: b6:f3:96:8f:0b:96:e6:a1:3c:46:27:9b:3a:9e:d6: ea:d4:c3:08:19:4b:69:c0:b1:69:5e:f9:16:db:ae: 90:80:b9:bc:5f:a5:fd:25:f6:af:1e:46:1c:f3:67: 07:c5:e4:36:9f:91:26:84:fa:19:ab:a3:27:e6:78: d2:12:22:fb:cf:50:2a:9f:32:cc:9f:8b:15:36:b4: b9:48:aa:40:e9:87:14:f2:28:87:03:47:df:dd:16: d6:46:d1:b6:13:14:36:94:70:e5:01:f9:e5:9e:1b: a9:65:5a:ab:b2:4f:63:c6:25:79:4a:33:e8:7d:f2: 16:a4:63:fd:50:55:65:f0:b5:15:2f:68:46:8b:cb: 4a:03:26:5d:4d:a9:57:a6:25:87:0b:73:95:57:97: af:c0:f5:6f:34:67:36:dd:31:73:6c:7d:e1:7d:8f: dc:14:89:b6:60:72:e3:35:3a:ac:87:66:c1:d4:b1: 78:6f:92:5b:91:0b:54:88:c1:48:bc:e2:d2:7a:37: bf:a2:21:59:ce:58:b7:73:1d:34:9b:d8:9c:ae:8b: 2e:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:38:77:9A:EF:AF:BC:F0:B2:CE:BC:52:A1:B6:BF:92:0E:2B:DB:33 X509v3 Authority Key Identifier: keyid:20:78:BA:EE:6B:6E:C5:42:5A:16:B1:FC:00:C5:2C:30:ED:95:A3:F0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IHi67mtuxUJaFrH8AMUsMO2Vo_A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/b182bc-bc32-4e2f-bad7-ca51fb408901/1/IHi67mtuxUJaFrH8AMUsMO2Vo_A.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/b182bc-bc32-4e2f-bad7-ca51fb408901/1/IHi67mtuxUJaFrH8AMUsMO2Vo_A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8b:13:83:4b:d2:f1:5e:04:cd:7f:1a:3a:fc:5e:7f:6e:f0:92: f5:a1:45:04:58:4b:15:05:90:ec:59:da:44:66:fd:2f:4d:c4: bc:d5:3f:1f:dc:70:ca:1d:72:6a:a0:be:4c:2b:4b:80:61:d0: d2:a7:71:bb:cd:ed:03:1d:39:82:a2:01:a6:f6:aa:f1:23:cf: 89:97:66:f8:26:68:2d:50:1c:4e:04:b3:95:42:84:04:a6:c9: 6f:9e:e0:f6:0e:9c:3e:c8:0e:27:20:b3:ba:d1:b3:e4:ee:ba: 5a:b1:64:54:72:46:2b:e3:55:d5:21:df:ac:01:97:9c:74:a6: 7d:f5:a5:97:c0:6d:14:7d:04:5f:a2:43:96:e1:04:34:b2:92: b2:c8:84:d3:4e:d4:8d:c3:3e:26:14:35:59:1c:3e:58:a6:54: 67:b7:d1:86:9f:ed:d5:4a:43:ba:1c:cf:ff:02:a2:ad:4a:4c: 28:ea:e0:ca:c8:11:a0:2b:98:9a:0a:e8:ee:40:ab:67:cd:bb: 1f:08:fd:b1:3e:24:72:dc:8c:14:0c:1a:7f:4f:d2:b9:95:10: b7:65:57:5a:9d:3d:8e:7e:95:3b:73:9d:7e:7a:09:9f:30:63: 72:f0:d6:ce:60:a0:12:42:2f:11:c7:47:c8:b6:27:4f:2b:ad: ba:e2:2c:a2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsbO/eQIwd5156dlDnHUXvFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIwNzhiYWVlNmI2ZWM1NDI1YTE2YjFmYzAwYzUyYzMwZWQ5 NWEzZjAwHhcNMjUxMjE0MDUwMTEzWhcNMjUxMjE1MDUwMTEzWjAzMTEwLwYDVQQD Eyg3YjM4Nzc5YWVmYWZiY2YwYjJjZWJjNTJhMWI2YmY5MjBlMmJkYjMzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw7dXg6IdiTPUWAyTJYIZmT0GUFRA RzylXljLa3fHSvnDi/8douTPce0kgIe285aPC5bmoTxGJ5s6ntbq1MMIGUtpwLFp XvkW266QgLm8X6X9JfavHkYc82cHxeQ2n5EmhPoZq6Mn5njSEiL7z1AqnzLMn4sV NrS5SKpA6YcU8iiHA0ff3RbWRtG2ExQ2lHDlAfnlnhupZVqrsk9jxiV5SjPoffIW pGP9UFVl8LUVL2hGi8tKAyZdTalXpiWHC3OVV5evwPVvNGc23TFzbH3hfY/cFIm2 YHLjNTqsh2bB1LF4b5JbkQtUiMFIvOLSeje/oiFZzli3cx00m9icrosuKQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHs4d5rvr7zwss68UqG2v5IOK9szMB8GA1UdIwQY MBaAFCB4uu5rbsVCWhax/ADFLDDtlaPwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSUhpNjdtdHV4VUphRnJIOEFNVXNNTzJWb19BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZi9iMTgyYmMtYmMzMi00ZTJmLWJhZDct Y2E1MWZiNDA4OTAxLzEvSUhpNjdtdHV4VUphRnJIOEFNVXNNTzJWb19BLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZi9iMTgyYmMtYmMzMi00ZTJmLWJhZDctY2E1MWZiNDA4OTAx LzEvSUhpNjdtdHV4VUphRnJIOEFNVXNNTzJWb19BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAixODS9Lx XgTNfxo6/F5/bvCS9aFFBFhLFQWQ7FnaRGb9L03EvNU/H9xwyh1yaqC+TCtLgGHQ 0qdxu83tAx05gqIBpvaq8SPPiZdm+CZoLVAcTgSzlUKEBKbJb57g9g6cPsgOJyCz utGz5O66WrFkVHJGK+NV1SHfrAGXnHSmffWll8BtFH0EX6JDluEENLKSssiE007U jcM+JhQ1WRw+WKZUZ7fRhp/t1UpDuhzP/wKirUpMKOrgysgRoCuYmgro7kCrZ827 Hwj9sT4kctyMFAwaf0/SuZUQt2VXWp09jn6VO3OdfnoJnzBjcvDWzmCgEkIvEcdH yLYnTyutuuIsog== -----END CERTIFICATE-----Generated at Sun Dec 14 13:59:46 2025 by rpki-client