This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/fd90c5-183c-4d69-92f1-56bc70967885/1/IWRiyMAGWgps6vJDmFtpfPE1e_s.mft File: IWRiyMAGWgps6vJDmFtpfPE1e_s.mft (raw, json) Hash identifier: FS05LR7wjeHEPfwjN/m97YSTsjNt9e+aWffUpSSzKsg= Subject key identifier: 00:64:DA:95:61:52:BE:D1:3C:AE:A6:83:D4:A6:4A:AA:12:AC:0E:71 Authority key identifier: 21:64:62:C8:C0:06:5A:0A:6C:EA:F2:43:98:5B:69:7C:F1:35:7B:FB Certificate issuer: /CN=216462c8c0065a0a6ceaf243985b697cf1357bfb Certificate serial: 019B19BBB9A7707ECE7DB496D1D23645863D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IWRiyMAGWgps6vJDmFtpfPE1e_s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/fd90c5-183c-4d69-92f1-56bc70967885/1/IWRiyMAGWgps6vJDmFtpfPE1e_s.mft Manifest number: 1465 Signing time: Sat 13 Dec 2025 22:01:31 +0000 Manifest this update: Sat 13 Dec 2025 22:01:31 +0000 Manifest next update: Sun 14 Dec 2025 22:01:31 +0000 Files and hashes: 1: 1-BW4odJAyxl12AYDgfFuFOqGWeE.roa (hash: qq64q7wVgL8AHerH5wdm8XW+pg0/VDQN8uM/uUKTeDM=) 2: IWRiyMAGWgps6vJDmFtpfPE1e_s.crl (hash: 4rcvvzHtXjkXPINuDrK8sSPuq/AOw5bBeOYyIqwJ2n4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/fd90c5-183c-4d69-92f1-56bc70967885/1/IWRiyMAGWgps6vJDmFtpfPE1e_s.crl rsync://rpki.ripe.net/repository/DEFAULT/08/fd90c5-183c-4d69-92f1-56bc70967885/1/IWRiyMAGWgps6vJDmFtpfPE1e_s.mft rsync://rpki.ripe.net/repository/DEFAULT/IWRiyMAGWgps6vJDmFtpfPE1e_s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Dec 2025 20:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:19:bb:b9:a7:70:7e:ce:7d:b4:96:d1:d2:36:45:86:3d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=216462c8c0065a0a6ceaf243985b697cf1357bfb Validity Not Before: Dec 13 22:01:31 2025 GMT Not After : Dec 14 22:01:31 2025 GMT Subject: CN=0064da956152bed13caea683d4a64aaa12ac0e71 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:61:e7:2f:8e:71:4b:e5:dd:2f:b8:4e:35:d1: 6f:cf:8b:6d:6d:24:36:e7:b0:1b:d3:05:a6:ae:e2: da:6d:ef:e7:a9:3a:4c:d6:83:fb:15:4e:d2:c4:e1: c6:b5:6c:63:c7:8c:21:48:55:74:2d:13:55:d3:a0: d8:fd:11:7e:99:9e:9b:b9:e0:13:c4:21:c4:84:1a: 2f:6f:5b:67:06:f2:46:ca:9e:d9:e1:c7:76:47:4c: 64:02:47:5b:a0:2c:17:e4:2f:4e:cc:bf:3d:8d:af: 89:7d:02:61:17:a1:8b:d9:44:17:88:f4:68:81:58: 37:1f:8f:61:a8:85:ea:a2:f0:11:65:4d:72:c4:36: 4e:5f:1a:28:08:f6:f5:57:c2:5b:78:0e:58:8d:e2: 2f:4a:e1:0d:dc:19:4c:85:8b:f1:88:de:8a:0a:c1: cb:da:48:13:a0:e4:3e:93:aa:38:43:a6:80:46:b1: d6:11:0f:c7:40:f7:4d:c5:9f:0e:16:1c:ce:a6:b8: 26:fc:bf:82:7f:14:9b:c1:82:33:40:1c:31:59:fa: d8:c8:f0:e9:b1:ce:98:be:f7:01:fd:3b:be:b4:54: a0:fb:13:92:b6:99:25:b1:85:a6:4c:c7:f8:b7:b2: 56:52:5b:ea:d9:02:95:8d:76:f7:cf:92:a0:7a:05: e5:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:64:DA:95:61:52:BE:D1:3C:AE:A6:83:D4:A6:4A:AA:12:AC:0E:71 X509v3 Authority Key Identifier: keyid:21:64:62:C8:C0:06:5A:0A:6C:EA:F2:43:98:5B:69:7C:F1:35:7B:FB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IWRiyMAGWgps6vJDmFtpfPE1e_s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/fd90c5-183c-4d69-92f1-56bc70967885/1/IWRiyMAGWgps6vJDmFtpfPE1e_s.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/08/fd90c5-183c-4d69-92f1-56bc70967885/1/IWRiyMAGWgps6vJDmFtpfPE1e_s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6c:c9:6b:46:da:a5:55:c7:34:da:0e:2c:86:d0:1e:65:a4:0f: a2:19:19:a9:98:5c:cc:7b:e0:e4:df:05:12:f3:79:71:42:4d: 65:8e:4b:27:74:e3:c1:e7:90:33:2d:6a:5d:3a:02:f7:39:75: ff:0d:0d:c4:6a:64:b8:22:dc:80:9f:d7:32:f2:85:f4:95:89: bc:7e:72:57:5e:2a:c1:63:f2:b8:34:17:c5:af:4c:a8:a5:94: 65:2c:f5:bb:68:21:de:c2:19:5a:bf:b5:36:2b:8d:d9:b3:73: 85:eb:8f:fc:f8:ec:e2:83:89:31:8b:40:7c:e2:05:ee:41:36: 19:2e:fe:e5:d1:63:8f:7f:29:de:90:07:54:b7:4d:b5:01:4e: df:e4:41:90:24:73:68:bf:e7:1a:be:c8:ec:0e:01:ab:74:b6: ae:b5:86:11:8a:85:35:0d:a2:94:b4:8b:90:3e:cd:b7:cd:ef: 79:e1:d4:00:54:6d:f2:5d:86:4b:36:cb:a6:f7:88:bc:36:e3: 7d:90:95:32:4f:8e:ae:52:06:36:b5:8c:a0:52:cf:8c:ed:45: a9:45:ce:6d:76:21:f9:1a:10:9f:2e:90:00:5f:98:da:0a:15: 52:2e:69:54:a7:2e:51:8d:44:8f:66:d2:75:71:49:3f:7b:02: b6:cf:12:98 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsZu7mncH7OfbSW0dI2RYY9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIxNjQ2MmM4YzAwNjVhMGE2Y2VhZjI0Mzk4NWI2OTdjZjEz NTdiZmIwHhcNMjUxMjEzMjIwMTMxWhcNMjUxMjE0MjIwMTMxWjAzMTEwLwYDVQQD EygwMDY0ZGE5NTYxNTJiZWQxM2NhZWE2ODNkNGE2NGFhYTEyYWMwZTcxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo2HnL45xS+XdL7hONdFvz4ttbSQ2 57Ab0wWmruLabe/nqTpM1oP7FU7SxOHGtWxjx4whSFV0LRNV06DY/RF+mZ6bueAT xCHEhBovb1tnBvJGyp7Z4cd2R0xkAkdboCwX5C9OzL89ja+JfQJhF6GL2UQXiPRo gVg3H49hqIXqovARZU1yxDZOXxooCPb1V8JbeA5YjeIvSuEN3BlMhYvxiN6KCsHL 2kgToOQ+k6o4Q6aARrHWEQ/HQPdNxZ8OFhzOprgm/L+CfxSbwYIzQBwxWfrYyPDp sc6YvvcB/Tu+tFSg+xOStpklsYWmTMf4t7JWUlvq2QKVjXb3z5KgegXl2wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFABk2pVhUr7RPK6mg9SmSqoSrA5xMB8GA1UdIwQY MBaAFCFkYsjABloKbOryQ5hbaXzxNXv7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSVdSaXlNQUdXZ3BzNnZKRG1GdHBmUEUxZV9zLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOC9mZDkwYzUtMTgzYy00ZDY5LTkyZjEt NTZiYzcwOTY3ODg1LzEvSVdSaXlNQUdXZ3BzNnZKRG1GdHBmUEUxZV9zLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wOC9mZDkwYzUtMTgzYy00ZDY5LTkyZjEtNTZiYzcwOTY3ODg1 LzEvSVdSaXlNQUdXZ3BzNnZKRG1GdHBmUEUxZV9zLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbMlrRtql Vcc02g4shtAeZaQPohkZqZhczHvg5N8FEvN5cUJNZY5LJ3TjweeQMy1qXToC9zl1 /w0NxGpkuCLcgJ/XMvKF9JWJvH5yV14qwWPyuDQXxa9MqKWUZSz1u2gh3sIZWr+1 NiuN2bNzheuP/Pjs4oOJMYtAfOIF7kE2GS7+5dFjj38p3pAHVLdNtQFO3+RBkCRz aL/nGr7I7A4Bq3S2rrWGEYqFNQ2ilLSLkD7Nt83veeHUAFRt8l2GSzbLpveIvDbj fZCVMk+OrlIGNrWMoFLPjO1FqUXObXYh+RoQny6QAF+Y2goVUi5pVKcuUY1Ej2bS dXFJP3sCts8SmA== -----END CERTIFICATE-----Generated at Sun Dec 14 03:39:47 2025 by rpki-client