This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/64c431-5330-437b-b207-28fecc63398c/1/irW5qTaHl6hrrryB9iOz9OeG9Ro.mft File: irW5qTaHl6hrrryB9iOz9OeG9Ro.mft (raw, json) Hash identifier: Uih+eM/cD3Z71zJVL4FCmvzvu8qvwZ1dUSHT0UJPxWw= Subject key identifier: 86:AD:DA:5B:BC:F1:D1:F4:2E:D2:A2:EB:69:CD:0B:D3:CD:68:C2:0A Authority key identifier: 8A:B5:B9:A9:36:87:97:A8:6B:AE:BC:81:F6:23:B3:F4:E7:86:F5:1A Certificate issuer: /CN=8ab5b9a9368797a86baebc81f623b3f4e786f51a Certificate serial: 019B4701FF304F8D9EB8418EA325F570725D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/irW5qTaHl6hrrryB9iOz9OeG9Ro.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/64c431-5330-437b-b207-28fecc63398c/1/irW5qTaHl6hrrryB9iOz9OeG9Ro.mft Manifest number: 0BE5 Signing time: Mon 22 Dec 2025 17:01:11 +0000 Manifest this update: Mon 22 Dec 2025 17:01:11 +0000 Manifest next update: Tue 23 Dec 2025 17:01:11 +0000 Files and hashes: 1: 8Ztwq8Ff-jJd_sBf28s8lvQ9SqU.roa (hash: QWa/HtnKYiYQsWevU25s3knaSRBSQ+SLuyEHZRqaj0Q=) 2: irW5qTaHl6hrrryB9iOz9OeG9Ro.crl (hash: vOEuVdHWYJd2JV5dgHxqf53J0JwT4iADI27S29kpiyg=) 3: rXdrQXveU3qj0FGkRcK0QMl-LXw.roa (hash: MqIHKMdtZYEs0bc9AhyZZKGumnTYkeuiPOOBSx8nfws=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/64c431-5330-437b-b207-28fecc63398c/1/irW5qTaHl6hrrryB9iOz9OeG9Ro.crl rsync://rpki.ripe.net/repository/DEFAULT/ac/64c431-5330-437b-b207-28fecc63398c/1/irW5qTaHl6hrrryB9iOz9OeG9Ro.mft rsync://rpki.ripe.net/repository/DEFAULT/irW5qTaHl6hrrryB9iOz9OeG9Ro.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 15:30:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:47:01:ff:30:4f:8d:9e:b8:41:8e:a3:25:f5:70:72:5d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8ab5b9a9368797a86baebc81f623b3f4e786f51a Validity Not Before: Dec 22 17:01:11 2025 GMT Not After : Dec 23 17:01:11 2025 GMT Subject: CN=86adda5bbcf1d1f42ed2a2eb69cd0bd3cd68c20a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:db:95:98:0e:a6:10:fd:dd:45:58:a1:37:df: 52:4c:cc:d9:19:cd:57:f5:c7:ac:99:85:97:45:1b: 02:c9:97:de:fa:8d:29:2a:34:3b:fb:f7:01:a2:a1: ab:b7:d5:31:4c:45:44:36:b5:77:ed:af:2a:d7:d3: fa:fd:69:01:da:2e:7c:71:67:dc:35:f7:73:29:19: c6:53:fe:8d:bc:07:fa:90:5e:86:69:99:f0:72:85: a8:9d:f5:64:9b:c6:c3:28:ce:0b:9a:c5:7a:c3:f8: 51:1b:98:de:ef:8d:bf:a4:af:8e:49:59:f6:01:14: 50:32:07:44:7f:28:eb:39:b4:00:c9:77:48:6d:c5: 7d:95:7f:5b:8a:81:b7:d7:09:ea:0f:68:f4:b6:84: 01:b7:c9:d7:98:89:9b:b0:a7:0c:1a:93:1b:91:9c: 87:88:fe:0d:26:6b:c8:97:95:d4:6f:b6:32:b3:b3: 42:6d:e6:4d:37:55:2a:e6:08:b4:c3:88:a8:88:86: 5e:1f:96:d3:61:58:94:1c:82:f4:f2:d5:66:30:ec: 07:b5:b6:95:25:c2:bd:38:bb:cd:38:60:0e:fc:05: f7:50:ff:65:c0:b8:ba:fa:59:00:fa:fd:4c:2c:80: f6:76:24:2b:c3:f4:69:e2:18:77:bf:e4:9d:35:ff: 83:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:AD:DA:5B:BC:F1:D1:F4:2E:D2:A2:EB:69:CD:0B:D3:CD:68:C2:0A X509v3 Authority Key Identifier: keyid:8A:B5:B9:A9:36:87:97:A8:6B:AE:BC:81:F6:23:B3:F4:E7:86:F5:1A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/irW5qTaHl6hrrryB9iOz9OeG9Ro.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/64c431-5330-437b-b207-28fecc63398c/1/irW5qTaHl6hrrryB9iOz9OeG9Ro.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/64c431-5330-437b-b207-28fecc63398c/1/irW5qTaHl6hrrryB9iOz9OeG9Ro.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5e:63:4d:5a:58:fc:e0:72:14:a1:2c:35:82:bb:cb:94:ee:04: fa:fe:58:42:01:83:c9:c3:09:dc:7a:fd:98:ac:56:a7:52:77: 82:2e:c8:35:72:c7:fe:3b:8a:65:eb:49:8c:6a:d3:3f:47:e6: a8:23:bc:bb:09:a3:21:a7:cc:d2:f5:c5:2b:11:a9:b2:13:8b: 62:07:5f:60:be:49:15:fd:22:bc:fa:8e:28:50:75:da:ca:d8: 2e:b6:c9:f6:e1:b3:55:55:6c:e1:97:e8:38:e2:72:fa:69:c9: 98:9b:5c:5d:10:72:2e:36:28:8b:c8:1f:74:e0:8d:92:fa:6c: 1f:7a:f6:cf:83:c3:1a:04:77:8e:32:80:58:52:bb:9d:2f:d0: 5f:36:c1:d7:8f:37:2b:0c:32:92:7e:49:ca:50:28:40:e7:50: 99:f9:c1:39:f1:5f:31:13:1e:c7:cb:2e:5c:61:f8:00:94:e3: 87:0c:28:8c:49:38:85:70:28:11:c7:bd:4b:1a:a0:05:6c:d2: 91:39:ec:a6:7e:71:32:ec:da:27:cb:41:b9:92:55:b2:1e:20: 64:c6:4c:64:46:a2:a8:a1:b7:2e:07:c0:bb:28:a9:36:ad:a9: 2d:34:34:b2:81:d5:86:19:00:67:47:ba:8b:3a:ca:20:2f:7b: 54:03:16:aa -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtHAf8wT42euEGOoyX1cHJdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhhYjViOWE5MzY4Nzk3YTg2YmFlYmM4MWY2MjNiM2Y0ZTc4 NmY1MWEwHhcNMjUxMjIyMTcwMTExWhcNMjUxMjIzMTcwMTExWjAzMTEwLwYDVQQD Eyg4NmFkZGE1YmJjZjFkMWY0MmVkMmEyZWI2OWNkMGJkM2NkNjhjMjBhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3NuVmA6mEP3dRVihN99STMzZGc1X 9cesmYWXRRsCyZfe+o0pKjQ7+/cBoqGrt9UxTEVENrV37a8q19P6/WkB2i58cWfc NfdzKRnGU/6NvAf6kF6GaZnwcoWonfVkm8bDKM4LmsV6w/hRG5je742/pK+OSVn2 ARRQMgdEfyjrObQAyXdIbcV9lX9bioG31wnqD2j0toQBt8nXmImbsKcMGpMbkZyH iP4NJmvIl5XUb7Yys7NCbeZNN1Uq5gi0w4ioiIZeH5bTYViUHIL08tVmMOwHtbaV JcK9OLvNOGAO/AX3UP9lwLi6+lkA+v1MLID2diQrw/Rp4hh3v+SdNf+DoQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIat2lu88dH0LtKi62nNC9PNaMIKMB8GA1UdIwQY MBaAFIq1uak2h5eoa668gfYjs/TnhvUaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaXJXNXFUYUhsNmhycnJ5QjlpT3o5T2VHOVJvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYy82NGM0MzEtNTMzMC00MzdiLWIyMDct MjhmZWNjNjMzOThjLzEvaXJXNXFUYUhsNmhycnJ5QjlpT3o5T2VHOVJvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYy82NGM0MzEtNTMzMC00MzdiLWIyMDctMjhmZWNjNjMzOThj LzEvaXJXNXFUYUhsNmhycnJ5QjlpT3o5T2VHOVJvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXmNNWlj8 4HIUoSw1grvLlO4E+v5YQgGDycMJ3Hr9mKxWp1J3gi7INXLH/juKZetJjGrTP0fm qCO8uwmjIafM0vXFKxGpshOLYgdfYL5JFf0ivPqOKFB12srYLrbJ9uGzVVVs4Zfo OOJy+mnJmJtcXRByLjYoi8gfdOCNkvpsH3r2z4PDGgR3jjKAWFK7nS/QXzbB1483 Kwwykn5JylAoQOdQmfnBOfFfMRMex8suXGH4AJTjhwwojEk4hXAoEce9SxqgBWzS kTnspn5xMuzaJ8tBuZJVsh4gZMZMZEaiqKG3LgfAuyipNq2pLTQ0soHVhhkAZ0e6 izrKIC97VAMWqg== -----END CERTIFICATE-----Generated at Mon Dec 22 20:44:24 2025 by rpki-client