This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/5a9a99-43c2-4cc8-a37b-49501a7694c4/1/idvHFWpO58Z9nmhHZ6L0uvijW6s.mft File: idvHFWpO58Z9nmhHZ6L0uvijW6s.mft (raw, json) Hash identifier: 61MurgxecE+R/qx0rNUQEb0V0nLl7ARCnqwgWH8MeuY= Subject key identifier: 6B:02:AB:10:A0:06:7F:73:67:69:7E:9D:6C:90:EF:AB:DF:0E:E6:FF Authority key identifier: 89:DB:C7:15:6A:4E:E7:C6:7D:9E:68:47:67:A2:F4:BA:F8:A3:5B:AB Certificate issuer: /CN=89dbc7156a4ee7c67d9e684767a2f4baf8a35bab Certificate serial: 019B3343A928346170BBEDA617B0888262EC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/idvHFWpO58Z9nmhHZ6L0uvijW6s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/5a9a99-43c2-4cc8-a37b-49501a7694c4/1/idvHFWpO58Z9nmhHZ6L0uvijW6s.mft Manifest number: 1789 Signing time: Thu 18 Dec 2025 21:00:30 +0000 Manifest this update: Thu 18 Dec 2025 21:00:30 +0000 Manifest next update: Fri 19 Dec 2025 21:00:30 +0000 Files and hashes: 1: 0CdqlW01ACbv3EQD2O6eNsK9tUw.asa (hash: 9WhwZoBfEGd5k4zvC4ZA/vr5vp3EXDon/OkKYutAIU0=) 2: gFSAApK2GHEW9co-hPvID0_Xbj0.roa (hash: 4lamTHM9SOHzvbwgysIOqInF+Jmi38B32pNkhrQEyFY=) 3: idvHFWpO58Z9nmhHZ6L0uvijW6s.crl (hash: yu6lcMXwShPqNnVkVHb6mI7oEMq9IibdtsIVFlV6pVQ=) 4: w6qd6pimXzyzbq_lL6bL0qIFcDY.roa (hash: GP3E0Fs4zdkA4yRQSv2WM00GvN6yRlAiiaArkHkviSI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/5a9a99-43c2-4cc8-a37b-49501a7694c4/1/idvHFWpO58Z9nmhHZ6L0uvijW6s.crl rsync://rpki.ripe.net/repository/DEFAULT/3c/5a9a99-43c2-4cc8-a37b-49501a7694c4/1/idvHFWpO58Z9nmhHZ6L0uvijW6s.mft rsync://rpki.ripe.net/repository/DEFAULT/idvHFWpO58Z9nmhHZ6L0uvijW6s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 20:16:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:33:43:a9:28:34:61:70:bb:ed:a6:17:b0:88:82:62:ec Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89dbc7156a4ee7c67d9e684767a2f4baf8a35bab Validity Not Before: Dec 18 21:00:30 2025 GMT Not After : Dec 19 21:00:30 2025 GMT Subject: CN=6b02ab10a0067f7367697e9d6c90efabdf0ee6ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:a3:8e:26:22:4d:55:4c:03:d5:40:5a:0f:26: 27:8b:b6:8d:4f:4a:c5:87:76:0c:b0:6b:4c:33:f2: 71:f8:8f:f2:33:41:fa:41:2f:74:29:be:77:16:3a: 15:ec:8a:d6:3c:fd:65:bd:c7:19:29:15:85:77:0e: d4:09:9d:19:70:dc:ee:19:49:9e:d7:f9:08:01:16: 65:aa:be:d5:bb:20:05:f0:6c:cc:c7:41:83:65:de: 67:b4:63:ec:26:f8:d7:29:53:e6:96:3f:f5:bd:a6: 7c:8e:66:d9:2f:9f:d5:cb:a0:da:14:5f:44:31:fe: c9:8e:c8:19:58:e4:f2:0e:2b:86:43:61:6e:f4:be: c8:98:69:14:2f:ca:cc:03:6a:2c:5e:72:fb:e0:4d: 1b:b3:26:cf:a8:2a:18:f4:48:b8:b3:0a:39:e7:3b: 18:fe:b7:99:4b:db:d8:43:d3:04:cf:15:d5:b5:1a: 65:89:d2:71:7a:0a:7a:b5:1b:9c:c8:fd:46:5b:19: bb:0b:1a:f2:19:66:d5:a2:64:9a:91:62:46:ad:c5: 75:30:19:4f:65:95:9f:a5:87:04:fc:63:f6:cf:35: f2:df:87:d8:56:55:7b:a3:10:14:27:af:f2:15:5e: f9:c3:8e:2d:a1:ca:ea:1f:bf:8e:4c:cb:a0:52:4f: 16:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:02:AB:10:A0:06:7F:73:67:69:7E:9D:6C:90:EF:AB:DF:0E:E6:FF X509v3 Authority Key Identifier: keyid:89:DB:C7:15:6A:4E:E7:C6:7D:9E:68:47:67:A2:F4:BA:F8:A3:5B:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/idvHFWpO58Z9nmhHZ6L0uvijW6s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/5a9a99-43c2-4cc8-a37b-49501a7694c4/1/idvHFWpO58Z9nmhHZ6L0uvijW6s.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/5a9a99-43c2-4cc8-a37b-49501a7694c4/1/idvHFWpO58Z9nmhHZ6L0uvijW6s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 93:f6:69:d5:d8:3b:57:16:1c:8b:41:43:c4:a1:30:32:5d:70: 67:37:e2:8c:d2:5f:39:4a:06:a6:59:48:c6:a0:64:8e:35:38: 2f:4e:d9:3b:b0:c0:3c:02:2e:7b:4c:b5:eb:a3:16:4f:d4:26: 1e:c9:e0:c7:b9:90:ea:4c:20:7b:4e:0b:35:47:55:81:0f:c3: 5a:ee:9e:f1:5b:68:32:72:b0:36:24:b1:72:51:99:9e:33:bf: d9:01:84:d5:a8:ce:70:e3:58:cc:07:4b:6b:a8:4a:1c:cd:4d: 56:40:db:ac:2c:ca:27:89:f5:c5:98:28:31:fc:ad:54:07:61: 42:9c:fb:fe:97:46:67:cb:f6:b3:be:a6:aa:62:d8:40:b3:c5: 60:ec:eb:82:37:33:e6:78:ee:9d:5b:40:ee:18:c2:0f:81:11: 9e:75:34:ba:85:7e:78:9f:f3:19:9b:84:11:9b:9d:4c:8a:12: d4:08:c0:bb:10:47:68:23:39:9d:b2:ff:6b:d9:66:6a:ae:96: 4b:0b:fa:95:e8:87:65:5a:90:32:19:ad:29:78:9b:3d:c9:16: 41:68:9b:d8:b0:91:90:72:47:3f:e2:ab:88:89:38:54:60:3c: 51:60:20:a7:bb:fd:f0:0e:55:e8:41:e2:5d:bb:b7:80:b6:b6: a6:2f:31:b1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZszQ6koNGFwu+2mF7CIgmLsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg5ZGJjNzE1NmE0ZWU3YzY3ZDllNjg0NzY3YTJmNGJhZjhh MzViYWIwHhcNMjUxMjE4MjEwMDMwWhcNMjUxMjE5MjEwMDMwWjAzMTEwLwYDVQQD Eyg2YjAyYWIxMGEwMDY3ZjczNjc2OTdlOWQ2YzkwZWZhYmRmMGVlNmZmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0KOOJiJNVUwD1UBaDyYni7aNT0rF h3YMsGtMM/Jx+I/yM0H6QS90Kb53FjoV7IrWPP1lvccZKRWFdw7UCZ0ZcNzuGUme 1/kIARZlqr7VuyAF8GzMx0GDZd5ntGPsJvjXKVPmlj/1vaZ8jmbZL5/Vy6DaFF9E Mf7JjsgZWOTyDiuGQ2Fu9L7ImGkUL8rMA2osXnL74E0bsybPqCoY9Ei4swo55zsY /reZS9vYQ9MEzxXVtRplidJxegp6tRucyP1GWxm7CxryGWbVomSakWJGrcV1MBlP ZZWfpYcE/GP2zzXy34fYVlV7oxAUJ6/yFV75w44tocrqH7+OTMugUk8WCwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGsCqxCgBn9zZ2l+nWyQ76vfDub/MB8GA1UdIwQY MBaAFInbxxVqTufGfZ5oR2ei9Lr4o1urMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaWR2SEZXcE81OFo5bm1oSFo2TDB1dmlqVzZzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYy81YTlhOTktNDNjMi00Y2M4LWEzN2It NDk1MDFhNzY5NGM0LzEvaWR2SEZXcE81OFo5bm1oSFo2TDB1dmlqVzZzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYy81YTlhOTktNDNjMi00Y2M4LWEzN2ItNDk1MDFhNzY5NGM0 LzEvaWR2SEZXcE81OFo5bm1oSFo2TDB1dmlqVzZzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAk/Zp1dg7 VxYci0FDxKEwMl1wZzfijNJfOUoGpllIxqBkjjU4L07ZO7DAPAIue0y166MWT9Qm Hsngx7mQ6kwge04LNUdVgQ/DWu6e8VtoMnKwNiSxclGZnjO/2QGE1ajOcONYzAdL a6hKHM1NVkDbrCzKJ4n1xZgoMfytVAdhQpz7/pdGZ8v2s76mqmLYQLPFYOzrgjcz 5njunVtA7hjCD4ERnnU0uoV+eJ/zGZuEEZudTIoS1AjAuxBHaCM5nbL/a9lmaq6W Swv6leiHZVqQMhmtKXibPckWQWib2LCRkHJHP+KriIk4VGA8UWAgp7v98A5V6EHi Xbu3gLa2pi8xsQ== -----END CERTIFICATE-----Generated at Fri Dec 19 02:02:01 2025 by rpki-client