This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/f86013-fe1d-41be-afe8-c8fc6163942b/1/IEY2c5AiSgdoTXl3-RZaCVDwPVQ.mft File: IEY2c5AiSgdoTXl3-RZaCVDwPVQ.mft (raw, json) Hash identifier: RGtSk6oEbbsdpPMEVudAKIkEhGW3tgc4er9BcKtwMOs= Subject key identifier: 11:CD:42:AD:6A:2B:DE:81:7A:E6:F9:6B:54:6C:68:D1:72:58:85:EF Authority key identifier: 20:46:36:73:90:22:4A:07:68:4D:79:77:F9:16:5A:09:50:F0:3D:54 Certificate issuer: /CN=2046367390224a07684d7977f9165a0950f03d54 Certificate serial: 019B1B05150A7E8C79085247F8900DD6C165 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IEY2c5AiSgdoTXl3-RZaCVDwPVQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/f86013-fe1d-41be-afe8-c8fc6163942b/1/IEY2c5AiSgdoTXl3-RZaCVDwPVQ.mft Manifest number: 1483 Signing time: Sun 14 Dec 2025 04:01:16 +0000 Manifest this update: Sun 14 Dec 2025 04:01:16 +0000 Manifest next update: Mon 15 Dec 2025 04:01:16 +0000 Files and hashes: 1: ICVbUtHfbHYJwV7ucXI2K_14ylU.roa (hash: d0or5/9y3dY5/PzUShTK41fVXw4MjWFCN4HTk7PqBCg=) 2: IEY2c5AiSgdoTXl3-RZaCVDwPVQ.crl (hash: mFl1KVAfkdeDmsC9VUtFNPKPOxFt3xJlaTHDVx3+dXo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/f86013-fe1d-41be-afe8-c8fc6163942b/1/IEY2c5AiSgdoTXl3-RZaCVDwPVQ.crl rsync://rpki.ripe.net/repository/DEFAULT/b0/f86013-fe1d-41be-afe8-c8fc6163942b/1/IEY2c5AiSgdoTXl3-RZaCVDwPVQ.mft rsync://rpki.ripe.net/repository/DEFAULT/IEY2c5AiSgdoTXl3-RZaCVDwPVQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 15 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:1b:05:15:0a:7e:8c:79:08:52:47:f8:90:0d:d6:c1:65 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2046367390224a07684d7977f9165a0950f03d54 Validity Not Before: Dec 14 04:01:16 2025 GMT Not After : Dec 15 04:01:16 2025 GMT Subject: CN=11cd42ad6a2bde817ae6f96b546c68d1725885ef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:6a:cc:f4:d1:06:9b:26:12:70:34:6b:a4:f8: be:ef:c6:f5:db:93:78:89:66:82:14:92:49:4d:0f: dc:21:8c:24:99:fc:8a:94:32:93:dd:c6:a8:d5:15: 10:ac:4b:0e:54:99:a3:97:1f:fb:b5:76:43:c7:7b: aa:ff:35:88:18:15:f2:4f:f9:2b:17:39:60:fc:19: 4e:4c:c4:91:5a:c4:fc:e5:33:ae:77:8f:dc:e5:27: db:a3:a5:98:c1:50:50:f1:d9:a0:c3:7f:11:a0:17: c9:71:f2:b8:2c:62:7a:98:5a:4a:52:1a:d4:fa:81: 47:3f:0a:82:12:cc:f1:65:5f:6b:2d:ee:79:e9:77: 9c:60:45:2c:b2:0e:7e:fe:62:a3:76:60:49:10:0b: 3f:6e:b9:99:11:74:08:66:01:cc:cb:1f:16:17:5c: 42:11:d0:25:aa:be:b3:74:a1:f9:89:3b:7b:2a:b8: ae:4c:6c:49:83:bb:d8:6e:9c:d9:b1:20:9d:0e:99: db:3c:13:75:d7:06:d9:31:f7:12:3d:28:1e:d9:7a: 30:07:08:64:17:c2:45:e1:da:b1:cd:97:d5:03:03: e6:9e:ca:84:76:4f:d6:9e:ff:65:63:b4:6f:d0:f6: 6a:e8:62:cc:d8:50:55:d9:95:e8:86:e0:4d:2d:26: 78:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:CD:42:AD:6A:2B:DE:81:7A:E6:F9:6B:54:6C:68:D1:72:58:85:EF X509v3 Authority Key Identifier: keyid:20:46:36:73:90:22:4A:07:68:4D:79:77:F9:16:5A:09:50:F0:3D:54 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IEY2c5AiSgdoTXl3-RZaCVDwPVQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/f86013-fe1d-41be-afe8-c8fc6163942b/1/IEY2c5AiSgdoTXl3-RZaCVDwPVQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/f86013-fe1d-41be-afe8-c8fc6163942b/1/IEY2c5AiSgdoTXl3-RZaCVDwPVQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 47:37:cb:6e:22:80:07:9f:e4:64:6a:ca:26:7d:40:29:50:63: 96:cd:04:f1:eb:af:ac:59:b2:04:74:db:ac:b7:7c:26:bc:43: 37:c6:ea:86:ba:50:6d:0b:ec:eb:8e:36:f8:c4:84:5c:51:ca: 0f:4c:e1:82:54:e1:60:3e:39:7a:a8:a0:35:36:a4:48:86:80: 5e:f0:a5:17:0f:7b:07:e5:2d:02:ee:e6:bb:7e:26:2b:bd:1d: c7:c9:f7:85:cd:f2:7b:f2:13:fd:b6:7a:b0:2d:a6:4e:24:3d: bd:cd:ea:71:45:40:09:37:e9:73:eb:6a:48:dc:0b:3f:1d:e3: 10:6b:8e:55:98:07:be:22:f4:51:b5:ef:f9:76:de:98:79:ea: 14:31:93:05:b3:5b:a7:e6:f6:66:45:e3:c8:4b:7d:21:bd:fa: e6:48:0b:87:cf:f0:29:0e:08:17:f0:95:a8:53:0b:3e:8a:e2: a6:a3:24:e6:4b:fe:68:bc:ed:27:5e:c3:17:d2:b1:5d:74:bf: 01:7c:44:cf:15:aa:c7:f8:6b:46:e3:14:19:9d:9d:99:f1:96: 15:bd:ca:22:0a:6a:4e:bf:e5:94:c8:b2:68:5e:24:5b:73:26: 83:98:a2:f5:1f:0d:0d:e8:e9:ee:31:8f:2d:9a:ce:bd:6e:fd: 38:e7:0e:8f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsbBRUKfox5CFJH+JAN1sFlMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIwNDYzNjczOTAyMjRhMDc2ODRkNzk3N2Y5MTY1YTA5NTBm MDNkNTQwHhcNMjUxMjE0MDQwMTE2WhcNMjUxMjE1MDQwMTE2WjAzMTEwLwYDVQQD EygxMWNkNDJhZDZhMmJkZTgxN2FlNmY5NmI1NDZjNjhkMTcyNTg4NWVmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy2rM9NEGmyYScDRrpPi+78b125N4 iWaCFJJJTQ/cIYwkmfyKlDKT3cao1RUQrEsOVJmjlx/7tXZDx3uq/zWIGBXyT/kr Fzlg/BlOTMSRWsT85TOud4/c5Sfbo6WYwVBQ8dmgw38RoBfJcfK4LGJ6mFpKUhrU +oFHPwqCEszxZV9rLe556XecYEUssg5+/mKjdmBJEAs/brmZEXQIZgHMyx8WF1xC EdAlqr6zdKH5iTt7KriuTGxJg7vYbpzZsSCdDpnbPBN11wbZMfcSPSge2XowBwhk F8JF4dqxzZfVAwPmnsqEdk/Wnv9lY7Rv0PZq6GLM2FBV2ZXohuBNLSZ4VQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBHNQq1qK96Beub5a1RsaNFyWIXvMB8GA1UdIwQY MBaAFCBGNnOQIkoHaE15d/kWWglQ8D1UMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSUVZMmM1QWlTZ2RvVFhsMy1SWmFDVkR3UFZRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC9mODYwMTMtZmUxZC00MWJlLWFmZTgt YzhmYzYxNjM5NDJiLzEvSUVZMmM1QWlTZ2RvVFhsMy1SWmFDVkR3UFZRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMC9mODYwMTMtZmUxZC00MWJlLWFmZTgtYzhmYzYxNjM5NDJi LzEvSUVZMmM1QWlTZ2RvVFhsMy1SWmFDVkR3UFZRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARzfLbiKA B5/kZGrKJn1AKVBjls0E8euvrFmyBHTbrLd8JrxDN8bqhrpQbQvs6442+MSEXFHK D0zhglThYD45eqigNTakSIaAXvClFw97B+UtAu7mu34mK70dx8n3hc3ye/IT/bZ6 sC2mTiQ9vc3qcUVACTfpc+tqSNwLPx3jEGuOVZgHviL0UbXv+XbemHnqFDGTBbNb p+b2ZkXjyEt9Ib365kgLh8/wKQ4IF/CVqFMLPoripqMk5kv+aLztJ17DF9KxXXS/ AXxEzxWqx/hrRuMUGZ2dmfGWFb3KIgpqTr/llMiyaF4kW3Mmg5ii9R8NDejp7jGP LZrOvW79OOcOjw== -----END CERTIFICATE-----Generated at Sun Dec 14 09:30:37 2025 by rpki-client