This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/45a9c5-2cc1-4f45-ba80-ad58189de754/1/ira9Zf4qhv1C-cT1BOHu1YVw-T0.mft File: ira9Zf4qhv1C-cT1BOHu1YVw-T0.mft (raw, json) Hash identifier: pXcQ0qk4JWlRZbeG4BB5YDJfL/C8MxtkbPLaEV/p00Y= Subject key identifier: F2:4F:EC:09:5D:98:81:D8:33:5F:D3:7D:D0:2C:01:3F:39:CF:D5:B7 Authority key identifier: 8A:B6:BD:65:FE:2A:86:FD:42:F9:C4:F5:04:E1:EE:D5:85:70:F9:3D Certificate issuer: /CN=8ab6bd65fe2a86fd42f9c4f504e1eed58570f93d Certificate serial: 019B59E3B2172DD96693C8B9580714E2F104 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ira9Zf4qhv1C-cT1BOHu1YVw-T0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/45a9c5-2cc1-4f45-ba80-ad58189de754/1/ira9Zf4qhv1C-cT1BOHu1YVw-T0.mft Manifest number: 08DB Signing time: Fri 26 Dec 2025 09:00:53 +0000 Manifest this update: Fri 26 Dec 2025 09:00:53 +0000 Manifest next update: Sat 27 Dec 2025 09:00:53 +0000 Files and hashes: 1: 46cUFKURmF9XnPH8sSx3t3pgjTo.roa (hash: 0QimrSPj6EgGm2B8/lr6EDBnOBJIibCqv64JLqj1ceI=) 2: ira9Zf4qhv1C-cT1BOHu1YVw-T0.crl (hash: CZkQ9TFMuzTCe+YQleDurw1BH6cU/t/f88brfWF+5t8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/45a9c5-2cc1-4f45-ba80-ad58189de754/1/ira9Zf4qhv1C-cT1BOHu1YVw-T0.crl rsync://rpki.ripe.net/repository/DEFAULT/27/45a9c5-2cc1-4f45-ba80-ad58189de754/1/ira9Zf4qhv1C-cT1BOHu1YVw-T0.mft rsync://rpki.ripe.net/repository/DEFAULT/ira9Zf4qhv1C-cT1BOHu1YVw-T0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:e3:b2:17:2d:d9:66:93:c8:b9:58:07:14:e2:f1:04 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8ab6bd65fe2a86fd42f9c4f504e1eed58570f93d Validity Not Before: Dec 26 09:00:53 2025 GMT Not After : Dec 27 09:00:53 2025 GMT Subject: CN=f24fec095d9881d8335fd37dd02c013f39cfd5b7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f6:85:b4:ae:46:05:3c:60:5c:4f:44:de:cd:b3: 3a:8f:10:d4:a6:42:88:35:89:e2:e0:f2:32:bd:92: b8:d3:33:ed:91:74:18:cd:4c:d8:e2:84:09:fb:47: a9:3f:45:ef:77:cf:4f:77:ed:e8:b8:b9:40:26:d4: 2a:17:8d:8a:92:f8:c3:e6:96:05:d9:ba:d4:8f:15: 50:d7:c9:e8:1c:38:9e:75:87:50:2a:02:7e:b8:66: 91:b0:c2:68:0b:6b:3f:1e:0e:fc:bf:fa:38:b2:75: 7b:60:38:cf:c8:b4:79:41:d8:ee:12:7d:ea:50:8f: d3:60:a8:81:3d:ad:18:a1:20:81:d1:af:55:11:80: b7:79:3c:2f:8b:5c:e4:1f:69:68:c9:70:96:96:9d: f9:a9:c0:3e:84:4e:78:f2:ec:2c:d7:40:a5:41:0b: ef:c8:f6:3a:d2:d5:fc:17:9f:65:3e:e3:e8:65:6e: b2:ad:2b:5b:50:cc:8b:ae:a7:52:68:82:dd:71:bf: fc:31:8f:aa:c3:57:7f:84:72:20:cf:16:65:8b:4e: e7:bc:f5:dd:0e:3e:ce:e6:34:d4:78:09:12:0b:63: 14:0f:91:a3:f2:d2:1e:ee:73:6a:23:e6:91:23:55: df:da:a4:43:fc:5e:dc:5f:8c:af:42:0b:a8:c6:ff: c2:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:4F:EC:09:5D:98:81:D8:33:5F:D3:7D:D0:2C:01:3F:39:CF:D5:B7 X509v3 Authority Key Identifier: keyid:8A:B6:BD:65:FE:2A:86:FD:42:F9:C4:F5:04:E1:EE:D5:85:70:F9:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ira9Zf4qhv1C-cT1BOHu1YVw-T0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/45a9c5-2cc1-4f45-ba80-ad58189de754/1/ira9Zf4qhv1C-cT1BOHu1YVw-T0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/27/45a9c5-2cc1-4f45-ba80-ad58189de754/1/ira9Zf4qhv1C-cT1BOHu1YVw-T0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 17:7f:61:90:01:cf:4b:b0:12:d2:bf:a6:90:82:f0:a2:af:d1: 49:0f:66:4b:b2:20:e8:ab:bd:f1:6c:dc:e8:fa:2b:ac:db:ab: 96:64:39:92:12:9e:bb:b9:1d:d5:23:80:11:36:4f:56:3f:f4: cc:15:e0:08:f1:d6:85:25:13:cb:72:5d:05:66:5f:3e:b7:8b: 1f:10:b6:c2:aa:32:df:34:ad:8f:3f:7a:54:cf:81:fa:9c:65: ee:a4:af:60:fa:a4:c4:6a:ae:48:10:51:ce:68:8f:86:48:fe: 7e:6d:17:02:71:ea:14:40:72:a4:e8:a2:2a:0d:08:71:4f:24: e9:fe:b8:7c:50:34:31:74:07:66:50:9a:4c:3e:3e:52:38:ae: c0:9d:4d:8b:72:8f:2b:ac:83:d7:30:c9:c6:f1:d8:78:4f:39: 9e:b5:58:fb:41:3e:a1:b5:c4:f1:15:d8:ed:a0:ac:fb:8c:e6: cf:b2:84:bf:61:08:5d:31:74:f7:57:56:11:51:9d:af:b1:74: 26:16:0d:97:84:85:46:4c:c3:c6:25:1d:7a:08:13:6a:bd:21: 00:47:45:41:7c:17:f1:a0:87:80:78:85:71:2d:0e:6a:a7:51: ec:76:7c:c1:1d:3f:fe:44:ed:76:ec:43:94:52:7d:a1:0c:76: dc:6a:1d:a6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtZ47IXLdlmk8i5WAcU4vEEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhhYjZiZDY1ZmUyYTg2ZmQ0MmY5YzRmNTA0ZTFlZWQ1ODU3 MGY5M2QwHhcNMjUxMjI2MDkwMDUzWhcNMjUxMjI3MDkwMDUzWjAzMTEwLwYDVQQD EyhmMjRmZWMwOTVkOTg4MWQ4MzM1ZmQzN2RkMDJjMDEzZjM5Y2ZkNWI3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9oW0rkYFPGBcT0TezbM6jxDUpkKI NYni4PIyvZK40zPtkXQYzUzY4oQJ+0epP0Xvd89Pd+3ouLlAJtQqF42KkvjD5pYF 2brUjxVQ18noHDiedYdQKgJ+uGaRsMJoC2s/Hg78v/o4snV7YDjPyLR5QdjuEn3q UI/TYKiBPa0YoSCB0a9VEYC3eTwvi1zkH2loyXCWlp35qcA+hE548uws10ClQQvv yPY60tX8F59lPuPoZW6yrStbUMyLrqdSaILdcb/8MY+qw1d/hHIgzxZli07nvPXd Dj7O5jTUeAkSC2MUD5Gj8tIe7nNqI+aRI1Xf2qRD/F7cX4yvQguoxv/CqwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPJP7AldmIHYM1/TfdAsAT85z9W3MB8GA1UdIwQY MBaAFIq2vWX+Kob9QvnE9QTh7tWFcPk9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaXJhOVpmNHFodjFDLWNUMUJPSHUxWVZ3LVQwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNy80NWE5YzUtMmNjMS00ZjQ1LWJhODAt YWQ1ODE4OWRlNzU0LzEvaXJhOVpmNHFodjFDLWNUMUJPSHUxWVZ3LVQwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNy80NWE5YzUtMmNjMS00ZjQ1LWJhODAtYWQ1ODE4OWRlNzU0 LzEvaXJhOVpmNHFodjFDLWNUMUJPSHUxWVZ3LVQwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAF39hkAHP S7AS0r+mkILwoq/RSQ9mS7Ig6Ku98Wzc6PorrNurlmQ5khKeu7kd1SOAETZPVj/0 zBXgCPHWhSUTy3JdBWZfPreLHxC2wqoy3zStjz96VM+B+pxl7qSvYPqkxGquSBBR zmiPhkj+fm0XAnHqFEBypOiiKg0IcU8k6f64fFA0MXQHZlCaTD4+UjiuwJ1Ni3KP K6yD1zDJxvHYeE85nrVY+0E+obXE8RXY7aCs+4zmz7KEv2EIXTF091dWEVGdr7F0 JhYNl4SFRkzDxiUdeggTar0hAEdFQXwX8aCHgHiFcS0OaqdR7HZ8wR0//kTtduxD lFJ9oQx23Godpg== -----END CERTIFICATE-----Generated at Fri Dec 26 16:03:50 2025 by rpki-client