This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/d6db46-85b1-420c-8ce7-f7dabb0d2787/1/Iet_m1iVK56Ar897vboysmo00KE.mft File: Iet_m1iVK56Ar897vboysmo00KE.mft (raw, json) Hash identifier: 4lih6y/5Xj7YwfxJoUFFyDJCGGSZRXCFrA9H1qt93iA= Subject key identifier: 00:05:AA:D1:98:66:0D:F3:7B:B5:C6:E1:B8:51:04:85:A7:D9:A2:E1 Authority key identifier: 21:EB:7F:9B:58:95:2B:9E:80:AF:CF:7B:BD:BA:32:B2:6A:34:D0:A1 Certificate issuer: /CN=21eb7f9b58952b9e80afcf7bbdba32b26a34d0a1 Certificate serial: 019B4324DA63FE2C7FEAEA67C05B1FF420A5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Iet_m1iVK56Ar897vboysmo00KE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/d6db46-85b1-420c-8ce7-f7dabb0d2787/1/Iet_m1iVK56Ar897vboysmo00KE.mft Manifest number: 145F Signing time: Sun 21 Dec 2025 23:00:47 +0000 Manifest this update: Sun 21 Dec 2025 23:00:47 +0000 Manifest next update: Mon 22 Dec 2025 23:00:47 +0000 Files and hashes: 1: Iet_m1iVK56Ar897vboysmo00KE.crl (hash: 0QyrHWXgMpTnOyuJB8sfQjMiiVh+fLwmkpbamfJdo0c=) 2: awEUUsb69K1CqabOYZXpO61MCTg.roa (hash: 9PPvHVQ3Mjg4T1Rer/rBY6hN8ex1RSBq3SwkRV1OUrQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/d6db46-85b1-420c-8ce7-f7dabb0d2787/1/Iet_m1iVK56Ar897vboysmo00KE.crl rsync://rpki.ripe.net/repository/DEFAULT/86/d6db46-85b1-420c-8ce7-f7dabb0d2787/1/Iet_m1iVK56Ar897vboysmo00KE.mft rsync://rpki.ripe.net/repository/DEFAULT/Iet_m1iVK56Ar897vboysmo00KE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:43:24:da:63:fe:2c:7f:ea:ea:67:c0:5b:1f:f4:20:a5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=21eb7f9b58952b9e80afcf7bbdba32b26a34d0a1 Validity Not Before: Dec 21 23:00:47 2025 GMT Not After : Dec 22 23:00:47 2025 GMT Subject: CN=0005aad198660df37bb5c6e1b8510485a7d9a2e1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:06:a9:8d:59:25:9d:76:2d:e9:9f:71:0b:b2: b7:9b:24:89:42:45:aa:51:01:e6:6e:20:a8:18:6d: ec:7f:22:03:d0:9f:43:37:9a:0a:3b:e1:89:d1:a1: 06:b9:45:19:88:27:c6:6b:f7:f7:ca:31:89:11:4f: 73:3f:3d:85:46:57:b5:5f:8f:38:b9:64:1a:11:d8: 20:9c:23:5c:e7:cf:ae:17:d8:6e:29:07:bc:c8:e3: 70:38:29:ff:af:f7:7f:97:c8:4b:a6:f8:8e:86:72: f7:38:06:d1:74:fc:28:2d:76:1f:01:3e:15:eb:fb: 9b:34:03:74:a7:2a:ac:c8:60:af:1c:9f:cd:41:f1: dc:2c:e2:0c:97:36:e9:2d:76:6b:40:56:fa:5b:1d: 32:48:c6:38:6f:ad:9e:25:a8:68:52:a4:9c:8f:76: 74:d3:57:56:6f:bb:b0:ea:19:95:da:ee:a3:4d:45: 44:66:74:c2:7e:d6:f1:86:7c:d3:0b:40:a3:f5:73: 58:a2:f7:ce:da:d4:69:63:14:6f:f2:b6:f1:12:67: 25:7c:c4:da:bf:c3:38:76:0e:19:e4:ef:60:58:0a: b5:0d:4d:94:f1:39:c2:69:47:32:51:b3:ee:58:d1: b5:fb:9f:7a:7d:5e:66:c2:6a:7c:5f:ad:4e:65:12: b1:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:05:AA:D1:98:66:0D:F3:7B:B5:C6:E1:B8:51:04:85:A7:D9:A2:E1 X509v3 Authority Key Identifier: keyid:21:EB:7F:9B:58:95:2B:9E:80:AF:CF:7B:BD:BA:32:B2:6A:34:D0:A1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Iet_m1iVK56Ar897vboysmo00KE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/d6db46-85b1-420c-8ce7-f7dabb0d2787/1/Iet_m1iVK56Ar897vboysmo00KE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/86/d6db46-85b1-420c-8ce7-f7dabb0d2787/1/Iet_m1iVK56Ar897vboysmo00KE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 10:98:b8:42:82:20:59:df:43:ef:9b:49:2c:c8:bc:92:09:8a: 39:31:91:d0:82:00:81:5a:05:17:c6:ce:d8:96:11:4b:35:e3: 07:69:61:b9:c4:cf:5e:f7:ea:34:b0:43:2a:65:50:4e:f7:3b: 09:94:32:10:0f:13:d1:5a:28:1c:45:23:4f:aa:d9:60:ac:fc: af:af:9c:b8:b9:ff:1f:b9:02:4f:39:a2:8b:15:29:28:8b:9d: e9:54:c5:d2:a2:51:57:ea:46:67:a9:3c:d5:18:43:e5:2f:0d: 14:7d:7c:db:f5:53:68:19:f5:38:a1:ed:bc:1c:99:c7:de:95: f4:cd:f1:9d:f4:b8:1a:1a:45:b5:3e:9f:b4:6c:f2:63:29:8f: d6:9b:5a:93:b5:14:a0:b5:e3:24:1a:f5:c0:2d:78:11:41:40: 31:05:0f:22:c9:6e:e2:5d:ad:82:43:cd:ac:a1:c3:a6:e9:f3: 48:03:3a:e4:7a:ce:62:b9:81:e5:5e:0d:5f:4d:36:aa:a9:6b: eb:fd:72:8b:96:2f:84:f3:49:f0:60:ee:de:95:e7:bc:f4:00: 9b:31:12:50:f0:81:57:73:2d:f7:86:30:c3:e3:e1:a5:90:96: 56:5a:43:a1:b7:4a:f7:6d:44:e7:6e:02:24:d3:51:dc:1c:0c: e6:d6:6d:54 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtDJNpj/ix/6upnwFsf9CClMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIxZWI3ZjliNTg5NTJiOWU4MGFmY2Y3YmJkYmEzMmIyNmEz NGQwYTEwHhcNMjUxMjIxMjMwMDQ3WhcNMjUxMjIyMjMwMDQ3WjAzMTEwLwYDVQQD EygwMDA1YWFkMTk4NjYwZGYzN2JiNWM2ZTFiODUxMDQ4NWE3ZDlhMmUxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxgapjVklnXYt6Z9xC7K3mySJQkWq UQHmbiCoGG3sfyID0J9DN5oKO+GJ0aEGuUUZiCfGa/f3yjGJEU9zPz2FRle1X484 uWQaEdggnCNc58+uF9huKQe8yONwOCn/r/d/l8hLpviOhnL3OAbRdPwoLXYfAT4V 6/ubNAN0pyqsyGCvHJ/NQfHcLOIMlzbpLXZrQFb6Wx0ySMY4b62eJahoUqScj3Z0 01dWb7uw6hmV2u6jTUVEZnTCftbxhnzTC0Cj9XNYovfO2tRpYxRv8rbxEmclfMTa v8M4dg4Z5O9gWAq1DU2U8TnCaUcyUbPuWNG1+596fV5mwmp8X61OZRKxIwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAAFqtGYZg3ze7XG4bhRBIWn2aLhMB8GA1UdIwQY MBaAFCHrf5tYlSuegK/Pe726MrJqNNChMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSWV0X20xaVZLNTZBcjg5N3Zib3lzbW8wMEtFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ni9kNmRiNDYtODViMS00MjBjLThjZTct ZjdkYWJiMGQyNzg3LzEvSWV0X20xaVZLNTZBcjg5N3Zib3lzbW8wMEtFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Ni9kNmRiNDYtODViMS00MjBjLThjZTctZjdkYWJiMGQyNzg3 LzEvSWV0X20xaVZLNTZBcjg5N3Zib3lzbW8wMEtFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEJi4QoIg Wd9D75tJLMi8kgmKOTGR0IIAgVoFF8bO2JYRSzXjB2lhucTPXvfqNLBDKmVQTvc7 CZQyEA8T0VooHEUjT6rZYKz8r6+cuLn/H7kCTzmiixUpKIud6VTF0qJRV+pGZ6k8 1RhD5S8NFH182/VTaBn1OKHtvByZx96V9M3xnfS4GhpFtT6ftGzyYymP1ptak7UU oLXjJBr1wC14EUFAMQUPIslu4l2tgkPNrKHDpunzSAM65HrOYrmB5V4NX002qqlr 6/1yi5YvhPNJ8GDu3pXnvPQAmzESUPCBV3Mt94Yww+PhpZCWVlpDobdK921E524C JNNR3BwM5tZtVA== -----END CERTIFICATE-----Generated at Mon Dec 22 04:20:57 2025 by rpki-client