This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/a84cd2-45d9-4179-a997-920d2a6207a4/1/iKVZ3N1bxLZssklvLm-w6PlUqus.mft File: iKVZ3N1bxLZssklvLm-w6PlUqus.mft (raw, json) Hash identifier: u4nlXqkIZR0aRfkVT4P5XsBdtol8k7idHwKOnecEOP4= Subject key identifier: 25:3F:16:7D:EB:30:66:94:91:9E:37:EB:B9:F6:60:D4:6F:43:07:94 Authority key identifier: 88:A5:59:DC:DD:5B:C4:B6:6C:B2:49:6F:2E:6F:B0:E8:F9:54:AA:EB Certificate issuer: /CN=88a559dcdd5bc4b66cb2496f2e6fb0e8f954aaeb Certificate serial: 019B36E9CAEC8FFCB4BCED31AFB6531B57DD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iKVZ3N1bxLZssklvLm-w6PlUqus.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/a84cd2-45d9-4179-a997-920d2a6207a4/1/iKVZ3N1bxLZssklvLm-w6PlUqus.mft Manifest number: 10ED Signing time: Fri 19 Dec 2025 14:00:49 +0000 Manifest this update: Fri 19 Dec 2025 14:00:49 +0000 Manifest next update: Sat 20 Dec 2025 14:00:49 +0000 Files and hashes: 1: iKVZ3N1bxLZssklvLm-w6PlUqus.crl (hash: /f/eyphWJptPHyRlaHb8JMWOW6Eazghl6+Cq7AqHezI=) 2: oGUzs3HriURmMyvP-1mM3ixvd88.roa (hash: U9dJ3cn9/4GeEgNWQhNTsFuWjpySklwjtb60dseGPO4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/a84cd2-45d9-4179-a997-920d2a6207a4/1/iKVZ3N1bxLZssklvLm-w6PlUqus.crl rsync://rpki.ripe.net/repository/DEFAULT/84/a84cd2-45d9-4179-a997-920d2a6207a4/1/iKVZ3N1bxLZssklvLm-w6PlUqus.mft rsync://rpki.ripe.net/repository/DEFAULT/iKVZ3N1bxLZssklvLm-w6PlUqus.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 14:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:36:e9:ca:ec:8f:fc:b4:bc:ed:31:af:b6:53:1b:57:dd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=88a559dcdd5bc4b66cb2496f2e6fb0e8f954aaeb Validity Not Before: Dec 19 14:00:49 2025 GMT Not After : Dec 20 14:00:49 2025 GMT Subject: CN=253f167deb306694919e37ebb9f660d46f430794 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:bf:a1:9b:42:19:9d:47:00:25:3b:af:fe:41: ea:29:3c:8f:7f:07:ae:66:d4:0e:8a:12:40:d8:6c: bc:6b:89:68:ff:6c:40:79:5c:86:d9:a7:c9:c5:8b: 11:e1:dd:82:2c:7f:7c:30:ec:41:3a:b3:ea:17:31: 5d:35:34:de:f4:e4:da:f2:ea:ad:a2:19:36:11:a0: 47:77:4a:18:18:41:d7:a5:ac:f8:73:0b:28:d1:92: 59:9a:6a:17:6c:e4:2d:55:f1:a2:3e:be:30:02:62: 19:51:38:97:a9:eb:f4:98:f9:3c:53:fc:18:27:64: d1:d7:55:b9:cc:50:41:25:f5:9f:0f:83:8e:92:f6: c3:95:a6:f0:be:08:b3:2f:56:50:51:50:ee:d7:86: e4:db:e4:8e:ca:7e:1c:54:9c:e2:2f:13:f7:e5:bf: cd:4f:e7:da:9b:cf:66:bc:42:9b:fe:fe:40:f7:0c: 16:2e:e7:27:b3:73:70:27:b8:ea:ef:e6:51:07:da: d7:a4:09:1c:aa:41:8a:4e:f2:09:40:6b:f7:be:d5: f0:c8:e7:31:9f:81:fe:c9:45:67:ee:7b:a6:9e:8d: 69:cc:46:1d:58:52:2a:df:98:57:4e:ef:54:51:53: 6d:d4:17:1f:52:69:fc:8f:4f:44:bf:be:fa:ec:84: 3b:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:3F:16:7D:EB:30:66:94:91:9E:37:EB:B9:F6:60:D4:6F:43:07:94 X509v3 Authority Key Identifier: keyid:88:A5:59:DC:DD:5B:C4:B6:6C:B2:49:6F:2E:6F:B0:E8:F9:54:AA:EB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iKVZ3N1bxLZssklvLm-w6PlUqus.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/a84cd2-45d9-4179-a997-920d2a6207a4/1/iKVZ3N1bxLZssklvLm-w6PlUqus.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/84/a84cd2-45d9-4179-a997-920d2a6207a4/1/iKVZ3N1bxLZssklvLm-w6PlUqus.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 81:00:2c:cc:b7:a5:12:f6:9f:8e:04:e9:9b:de:79:7d:72:cc: 10:1a:78:4c:40:c5:0d:2c:3c:c2:41:1c:f7:e1:bd:29:d4:a8: 71:39:54:cd:e1:44:a7:c9:c3:a9:e0:4c:d7:23:df:1e:7f:55: 28:f8:39:2b:2d:ef:ca:b4:04:71:c1:ff:22:29:74:f3:74:c3: bd:d6:c9:91:2e:64:3e:f7:4d:fb:10:3a:7b:56:80:de:ad:8d: 34:01:68:bb:34:54:97:77:59:ff:bf:1a:7e:b0:49:17:85:a5: 51:53:c7:28:75:c3:0f:36:ff:7a:bc:94:ad:ba:d9:7e:65:51: 2b:f3:e9:71:f3:df:34:fd:92:5b:1d:55:17:5e:6f:1f:d0:28: 85:9e:a8:f8:4a:99:51:42:f2:8d:07:4a:dd:60:d9:63:7d:2f: 5f:49:2a:31:36:80:ca:78:a9:9f:e1:f4:72:ad:e2:b2:ed:aa: 7f:f8:a8:e0:93:3e:e0:33:c4:d9:f6:f2:27:fb:80:ef:48:e3: fd:57:c1:3b:92:85:13:a5:88:78:87:29:22:4b:95:e2:4e:c1: 66:b1:f1:30:76:44:10:4c:0e:ac:1a:0e:4c:3f:fb:5e:95:ea: 51:d0:e2:5e:45:0c:ee:0d:7e:ee:27:7e:af:36:75:14:11:65: 77:06:a6:73 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs26crsj/y0vO0xr7ZTG1fdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg4YTU1OWRjZGQ1YmM0YjY2Y2IyNDk2ZjJlNmZiMGU4Zjk1 NGFhZWIwHhcNMjUxMjE5MTQwMDQ5WhcNMjUxMjIwMTQwMDQ5WjAzMTEwLwYDVQQD EygyNTNmMTY3ZGViMzA2Njk0OTE5ZTM3ZWJiOWY2NjBkNDZmNDMwNzk0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkb+hm0IZnUcAJTuv/kHqKTyPfweu ZtQOihJA2Gy8a4lo/2xAeVyG2afJxYsR4d2CLH98MOxBOrPqFzFdNTTe9OTa8uqt ohk2EaBHd0oYGEHXpaz4cwso0ZJZmmoXbOQtVfGiPr4wAmIZUTiXqev0mPk8U/wY J2TR11W5zFBBJfWfD4OOkvbDlabwvgizL1ZQUVDu14bk2+SOyn4cVJziLxP35b/N T+fam89mvEKb/v5A9wwWLucns3NwJ7jq7+ZRB9rXpAkcqkGKTvIJQGv3vtXwyOcx n4H+yUVn7numno1pzEYdWFIq35hXTu9UUVNt1BcfUmn8j09Ev7767IQ7LwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCU/Fn3rMGaUkZ4367n2YNRvQweUMB8GA1UdIwQY MBaAFIilWdzdW8S2bLJJby5vsOj5VKrrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaUtWWjNOMWJ4TFpzc2tsdkxtLXc2UGxVcXVzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NC9hODRjZDItNDVkOS00MTc5LWE5OTct OTIwZDJhNjIwN2E0LzEvaUtWWjNOMWJ4TFpzc2tsdkxtLXc2UGxVcXVzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84NC9hODRjZDItNDVkOS00MTc5LWE5OTctOTIwZDJhNjIwN2E0 LzEvaUtWWjNOMWJ4TFpzc2tsdkxtLXc2UGxVcXVzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgQAszLel EvafjgTpm955fXLMEBp4TEDFDSw8wkEc9+G9KdSocTlUzeFEp8nDqeBM1yPfHn9V KPg5Ky3vyrQEccH/Iil083TDvdbJkS5kPvdN+xA6e1aA3q2NNAFouzRUl3dZ/78a frBJF4WlUVPHKHXDDzb/eryUrbrZfmVRK/PpcfPfNP2SWx1VF15vH9AohZ6o+EqZ UULyjQdK3WDZY30vX0kqMTaAynipn+H0cq3isu2qf/io4JM+4DPE2fbyJ/uA70jj /VfBO5KFE6WIeIcpIkuV4k7BZrHxMHZEEEwOrBoOTD/7XpXqUdDiXkUM7g1+7id+ rzZ1FBFldwamcw== -----END CERTIFICATE-----Generated at Fri Dec 19 21:08:22 2025 by rpki-client