This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/2fb486-79a0-4396-833b-6c6f0e319ca1/1/IwUSFfbxvSJ9t_QN90jWTBBvhKM.mft File: IwUSFfbxvSJ9t_QN90jWTBBvhKM.mft (raw, json) Hash identifier: YpTSgdnQy2qlYwvYwtIyTsjxA5BjtNNf+rMuGee95hk= Subject key identifier: DE:66:49:55:7D:31:3B:18:64:32:E6:10:07:CB:52:FD:63:5C:DF:8E Authority key identifier: 23:05:12:15:F6:F1:BD:22:7D:B7:F4:0D:F7:48:D6:4C:10:6F:84:A3 Certificate issuer: /CN=23051215f6f1bd227db7f40df748d64c106f84a3 Certificate serial: 019B0F005B27F6814C613B8E014A3542DD88 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IwUSFfbxvSJ9t_QN90jWTBBvhKM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/2fb486-79a0-4396-833b-6c6f0e319ca1/1/IwUSFfbxvSJ9t_QN90jWTBBvhKM.mft Manifest number: 04AD Signing time: Thu 11 Dec 2025 20:00:40 +0000 Manifest this update: Thu 11 Dec 2025 20:00:40 +0000 Manifest next update: Fri 12 Dec 2025 20:00:40 +0000 Files and hashes: 1: EuYflw2vpOToo9K8lFetTYAhWyo.roa (hash: SUT2OfNUp9WFMOp/u/f5+vrQyr/WoDJgwv8+U/p5Afw=) 2: IwUSFfbxvSJ9t_QN90jWTBBvhKM.crl (hash: qPMNxi98GK5hCMcFMUvmwy+RMqbP17fNomYVhtVbVc8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/2fb486-79a0-4396-833b-6c6f0e319ca1/1/IwUSFfbxvSJ9t_QN90jWTBBvhKM.crl rsync://rpki.ripe.net/repository/DEFAULT/23/2fb486-79a0-4396-833b-6c6f0e319ca1/1/IwUSFfbxvSJ9t_QN90jWTBBvhKM.mft rsync://rpki.ripe.net/repository/DEFAULT/IwUSFfbxvSJ9t_QN90jWTBBvhKM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 14:45:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0f:00:5b:27:f6:81:4c:61:3b:8e:01:4a:35:42:dd:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=23051215f6f1bd227db7f40df748d64c106f84a3 Validity Not Before: Dec 11 20:00:40 2025 GMT Not After : Dec 12 20:00:40 2025 GMT Subject: CN=de6649557d313b186432e61007cb52fd635cdf8e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:c8:f8:7c:cb:86:30:ed:b4:f8:15:6d:9e:bc: 28:bc:9a:b3:eb:b8:c2:a0:5b:d9:ee:14:8a:6e:8e: 18:3e:31:8e:1c:16:ea:ba:36:d2:9b:aa:37:7e:fe: 19:3f:e2:99:c0:f3:43:00:25:3c:74:cd:50:d8:f3: 58:29:46:2b:a3:5c:c4:cb:34:da:97:94:9b:1e:bb: 1e:10:46:18:ff:da:56:1b:49:e8:ee:d2:ef:18:18: a9:57:de:6c:af:dc:97:ad:f3:f8:ec:90:9c:87:7f: 81:ab:cd:46:c7:8f:28:df:b4:b2:55:87:91:bd:41: 45:1f:d4:bc:7b:f8:10:cb:d8:11:5b:64:3a:ca:a2: fe:b3:11:ea:5a:54:86:ab:f5:22:0a:fa:bb:5c:59: 1a:45:1d:b0:d6:2e:bd:e9:a4:57:f8:db:36:c0:4b: c5:ff:8f:54:0c:98:b2:2c:e5:36:c9:eb:ab:1d:2f: 13:c8:3a:8d:27:26:b4:61:d9:74:f8:88:fe:c6:29: 46:60:25:da:a8:74:ea:d6:36:46:21:4a:5d:3a:e6: 6e:15:ef:b1:2b:9c:53:21:ae:90:99:14:67:d0:dd: 6d:d6:b5:3e:16:9d:95:ec:2e:04:96:7a:ca:7d:a2: 88:16:53:84:53:19:22:b2:39:6c:10:f2:57:09:a8: fb:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:66:49:55:7D:31:3B:18:64:32:E6:10:07:CB:52:FD:63:5C:DF:8E X509v3 Authority Key Identifier: keyid:23:05:12:15:F6:F1:BD:22:7D:B7:F4:0D:F7:48:D6:4C:10:6F:84:A3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IwUSFfbxvSJ9t_QN90jWTBBvhKM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/2fb486-79a0-4396-833b-6c6f0e319ca1/1/IwUSFfbxvSJ9t_QN90jWTBBvhKM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/23/2fb486-79a0-4396-833b-6c6f0e319ca1/1/IwUSFfbxvSJ9t_QN90jWTBBvhKM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6e:cf:22:2f:34:33:89:e6:f2:83:66:cc:f8:e0:87:12:e1:84: 98:1c:eb:57:97:72:72:c0:77:51:d8:00:88:06:ff:19:f5:37: 45:9a:44:37:ff:02:42:5d:7c:b1:45:02:a3:c3:df:05:86:5f: e7:7c:92:fc:91:2c:e4:40:39:db:a9:c1:db:df:d5:44:f9:70: 3f:fc:d6:56:01:10:a0:23:f9:17:2c:21:a2:91:5a:ca:5d:0b: 58:82:f4:eb:25:6b:51:e5:a5:99:3e:59:32:c8:8c:e1:0f:b7: 7c:0c:a6:52:4b:11:8c:6b:c4:94:62:55:5c:65:be:1f:f9:3f: 27:3c:c8:3d:21:51:ae:3f:b8:15:0a:18:ff:da:73:39:e8:17: 53:f7:ce:55:aa:6f:36:01:f4:cb:4d:92:6c:2c:6f:96:e9:29: cb:6a:f3:3e:68:41:4f:83:c8:44:15:cc:b8:60:c5:9b:e2:de: 4f:a2:70:32:c7:fc:55:2c:19:6f:3f:f3:18:7c:5e:c5:06:2c: a6:ac:50:ef:5a:2c:59:32:e7:3b:82:5b:56:7c:c9:b9:84:84: a1:97:13:d9:72:b5:54:b5:c9:5f:dd:ea:be:20:19:aa:cc:89: b3:78:58:8c:80:b3:08:d3:4d:d0:a3:a1:82:98:fe:cc:4a:dd: 89:02:ca:e5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsPAFsn9oFMYTuOAUo1Qt2IMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIzMDUxMjE1ZjZmMWJkMjI3ZGI3ZjQwZGY3NDhkNjRjMTA2 Zjg0YTMwHhcNMjUxMjExMjAwMDQwWhcNMjUxMjEyMjAwMDQwWjAzMTEwLwYDVQQD EyhkZTY2NDk1NTdkMzEzYjE4NjQzMmU2MTAwN2NiNTJmZDYzNWNkZjhlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvMj4fMuGMO20+BVtnrwovJqz67jC oFvZ7hSKbo4YPjGOHBbqujbSm6o3fv4ZP+KZwPNDACU8dM1Q2PNYKUYro1zEyzTa l5SbHrseEEYY/9pWG0no7tLvGBipV95sr9yXrfP47JCch3+Bq81Gx48o37SyVYeR vUFFH9S8e/gQy9gRW2Q6yqL+sxHqWlSGq/UiCvq7XFkaRR2w1i696aRX+Ns2wEvF /49UDJiyLOU2yeurHS8TyDqNJya0Ydl0+Ij+xilGYCXaqHTq1jZGIUpdOuZuFe+x K5xTIa6QmRRn0N1t1rU+Fp2V7C4ElnrKfaKIFlOEUxkisjlsEPJXCaj7AwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFN5mSVV9MTsYZDLmEAfLUv1jXN+OMB8GA1UdIwQY MBaAFCMFEhX28b0ifbf0DfdI1kwQb4SjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSXdVU0ZmYnh2U0o5dF9RTjkwaldUQkJ2aEtNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMy8yZmI0ODYtNzlhMC00Mzk2LTgzM2It NmM2ZjBlMzE5Y2ExLzEvSXdVU0ZmYnh2U0o5dF9RTjkwaldUQkJ2aEtNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMy8yZmI0ODYtNzlhMC00Mzk2LTgzM2ItNmM2ZjBlMzE5Y2Ex LzEvSXdVU0ZmYnh2U0o5dF9RTjkwaldUQkJ2aEtNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbs8iLzQz iebyg2bM+OCHEuGEmBzrV5dycsB3UdgAiAb/GfU3RZpEN/8CQl18sUUCo8PfBYZf 53yS/JEs5EA526nB29/VRPlwP/zWVgEQoCP5FywhopFayl0LWIL06yVrUeWlmT5Z MsiM4Q+3fAymUksRjGvElGJVXGW+H/k/JzzIPSFRrj+4FQoY/9pzOegXU/fOVapv NgH0y02SbCxvlukpy2rzPmhBT4PIRBXMuGDFm+LeT6JwMsf8VSwZbz/zGHxexQYs pqxQ71osWTLnO4JbVnzJuYSEoZcT2XK1VLXJX93qviAZqsyJs3hYjICzCNNN0KOh gpj+zErdiQLK5Q== -----END CERTIFICATE-----Generated at Fri Dec 12 00:09:22 2025 by rpki-client