This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/68cd10-e5cc-4f47-84a9-15a0207d4609/1/iKWrZp-r5y3sLoN4R2p-kVwk7c8.mft File: iKWrZp-r5y3sLoN4R2p-kVwk7c8.mft (raw, json) Hash identifier: 1AvecJWQQD6nAucLh/U/iToid/FdvcAOcczhebWXkqU= Subject key identifier: EE:7E:23:1C:86:C5:67:E4:00:56:83:55:E8:15:C5:1C:BB:52:EC:71 Authority key identifier: 88:A5:AB:66:9F:AB:E7:2D:EC:2E:83:78:47:6A:7E:91:5C:24:ED:CF Certificate issuer: /CN=88a5ab669fabe72dec2e8378476a7e915c24edcf Certificate serial: 019B0E254C71CC8EDF97CF9E3B32E3C8024B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iKWrZp-r5y3sLoN4R2p-kVwk7c8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/68cd10-e5cc-4f47-84a9-15a0207d4609/1/iKWrZp-r5y3sLoN4R2p-kVwk7c8.mft Manifest number: 0DDD Signing time: Thu 11 Dec 2025 16:01:23 +0000 Manifest this update: Thu 11 Dec 2025 16:01:23 +0000 Manifest next update: Fri 12 Dec 2025 16:01:23 +0000 Files and hashes: 1: 8l1JGPKaxK0LdzidLYE5O7KO7uc.roa (hash: iLVJNEHjRSQZgufW9Xco39laNybFCSoPb4TytjD2nas=) 2: ZaUvqR58Anq8vLQipN0wr5eky28.roa (hash: SPNO6fIwJVYF/onFgsSackS0wfwUe38bLzIxAklnkrs=) 3: dXGr5BqS128mRLd0J3At49a2qzg.roa (hash: wuoQDj1SJzE/S7y91rkdzuUmyIzNX+hGJtJoYwKPBvU=) 4: iKWrZp-r5y3sLoN4R2p-kVwk7c8.crl (hash: R/Fw/ZT2/2FVcyXV8E96Y3SNhcmH3T/XxTVf7j9P4LU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/68cd10-e5cc-4f47-84a9-15a0207d4609/1/iKWrZp-r5y3sLoN4R2p-kVwk7c8.crl rsync://rpki.ripe.net/repository/DEFAULT/3c/68cd10-e5cc-4f47-84a9-15a0207d4609/1/iKWrZp-r5y3sLoN4R2p-kVwk7c8.mft rsync://rpki.ripe.net/repository/DEFAULT/iKWrZp-r5y3sLoN4R2p-kVwk7c8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 14:45:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0e:25:4c:71:cc:8e:df:97:cf:9e:3b:32:e3:c8:02:4b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=88a5ab669fabe72dec2e8378476a7e915c24edcf Validity Not Before: Dec 11 16:01:23 2025 GMT Not After : Dec 12 16:01:23 2025 GMT Subject: CN=ee7e231c86c567e400568355e815c51cbb52ec71 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:4d:99:48:74:28:3c:ba:03:45:86:e3:77:e2: 99:73:96:c8:3c:23:57:c9:9c:6f:b3:43:64:90:f1: 50:b0:91:2f:d0:cd:a5:9c:c7:3f:be:72:c7:dc:89: d5:f5:6e:64:dd:4c:02:4a:c6:c3:f2:e7:bc:c7:68: 26:f8:8e:bb:5c:f0:f2:50:9e:a4:ef:22:55:9f:2f: d9:ef:41:8b:09:25:53:eb:92:0e:49:dc:a4:15:60: 0f:b5:a3:35:b6:58:99:50:f7:9f:73:22:e3:92:51: 55:37:bf:0c:56:20:8d:57:dc:e4:51:1a:f1:41:e1: e5:29:b8:50:bf:bc:29:0c:65:48:50:c1:3d:d1:f3: 02:c3:c5:fc:ca:37:e8:41:eb:b9:b4:cf:9e:ed:d1: 76:94:5a:bd:9b:c9:ba:47:c5:0e:25:f3:1d:19:89: 27:22:3e:d4:ca:00:22:c5:f3:ea:cc:c3:1b:13:b6: 3c:77:fa:31:fa:6e:9e:a8:ef:c2:fb:69:06:e4:bb: 67:64:09:30:99:02:7d:b8:e6:05:42:9d:53:54:00: 5d:52:d4:f8:aa:71:e4:ad:34:66:c9:05:28:b1:28: 42:be:90:c5:7e:ac:99:1d:d4:15:b1:87:cb:b6:ed: 9b:d1:22:ba:d6:b5:83:33:24:6e:a9:51:3b:03:0d: b6:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:7E:23:1C:86:C5:67:E4:00:56:83:55:E8:15:C5:1C:BB:52:EC:71 X509v3 Authority Key Identifier: keyid:88:A5:AB:66:9F:AB:E7:2D:EC:2E:83:78:47:6A:7E:91:5C:24:ED:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iKWrZp-r5y3sLoN4R2p-kVwk7c8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/68cd10-e5cc-4f47-84a9-15a0207d4609/1/iKWrZp-r5y3sLoN4R2p-kVwk7c8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/68cd10-e5cc-4f47-84a9-15a0207d4609/1/iKWrZp-r5y3sLoN4R2p-kVwk7c8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 25:1e:29:60:99:ff:8e:e1:2c:ca:25:47:22:f0:11:05:62:e4: 42:8c:95:30:97:ec:10:d8:11:57:0f:b0:e8:9c:23:09:f3:42: 20:6b:3c:49:17:ff:1b:b9:50:ca:ac:47:e1:78:9c:86:ac:49: 09:ce:c1:f8:18:b6:3c:53:83:7a:01:b7:3d:63:06:5a:d4:5f: 83:b1:ca:45:75:ce:10:30:8d:6e:ce:9e:ff:23:f2:38:7e:45: 07:6f:c0:09:d6:92:dd:cf:8a:b3:2e:ad:b4:a4:1d:ed:0e:b1: 4c:6e:5a:36:cc:cc:14:2d:20:77:2b:7b:6a:3e:6b:6a:3f:9a: 6e:ed:27:df:d6:16:e1:32:16:42:bd:e1:16:66:ef:59:6d:c3: 69:5a:ba:47:d7:80:ec:fd:e3:74:13:03:6a:6e:c3:69:5a:01: 6e:5a:50:4c:83:d2:ae:d8:71:1f:08:cc:43:18:bc:19:3e:f8: 67:56:51:3a:eb:9e:4d:66:a5:52:6a:d5:a6:bd:df:93:38:38: f5:08:52:a0:64:44:66:fb:ea:29:5b:b5:2f:08:34:8c:bf:fb: 6d:50:ff:34:df:ee:7a:88:97:8e:51:66:d9:98:3c:da:14:a2: 29:79:44:33:dc:52:ec:d7:43:09:ba:a2:cf:4c:55:ef:3a:86: 25:b3:c8:d4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsOJUxxzI7fl8+eOzLjyAJLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg4YTVhYjY2OWZhYmU3MmRlYzJlODM3ODQ3NmE3ZTkxNWMy NGVkY2YwHhcNMjUxMjExMTYwMTIzWhcNMjUxMjEyMTYwMTIzWjAzMTEwLwYDVQQD EyhlZTdlMjMxYzg2YzU2N2U0MDA1NjgzNTVlODE1YzUxY2JiNTJlYzcxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwU2ZSHQoPLoDRYbjd+KZc5bIPCNX yZxvs0NkkPFQsJEv0M2lnMc/vnLH3InV9W5k3UwCSsbD8ue8x2gm+I67XPDyUJ6k 7yJVny/Z70GLCSVT65IOSdykFWAPtaM1tliZUPefcyLjklFVN78MViCNV9zkURrx QeHlKbhQv7wpDGVIUME90fMCw8X8yjfoQeu5tM+e7dF2lFq9m8m6R8UOJfMdGYkn Ij7UygAixfPqzMMbE7Y8d/ox+m6eqO/C+2kG5LtnZAkwmQJ9uOYFQp1TVABdUtT4 qnHkrTRmyQUosShCvpDFfqyZHdQVsYfLtu2b0SK61rWDMyRuqVE7Aw22LwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFO5+IxyGxWfkAFaDVegVxRy7UuxxMB8GA1UdIwQY MBaAFIilq2afq+ct7C6DeEdqfpFcJO3PMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaUtXclpwLXI1eTNzTG9ONFIycC1rVndrN2M4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYy82OGNkMTAtZTVjYy00ZjQ3LTg0YTkt MTVhMDIwN2Q0NjA5LzEvaUtXclpwLXI1eTNzTG9ONFIycC1rVndrN2M4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYy82OGNkMTAtZTVjYy00ZjQ3LTg0YTktMTVhMDIwN2Q0NjA5 LzEvaUtXclpwLXI1eTNzTG9ONFIycC1rVndrN2M4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJR4pYJn/ juEsyiVHIvARBWLkQoyVMJfsENgRVw+w6JwjCfNCIGs8SRf/G7lQyqxH4XichqxJ Cc7B+Bi2PFODegG3PWMGWtRfg7HKRXXOEDCNbs6e/yPyOH5FB2/ACdaS3c+Ksy6t tKQd7Q6xTG5aNszMFC0gdyt7aj5raj+abu0n39YW4TIWQr3hFmbvWW3DaVq6R9eA 7P3jdBMDam7DaVoBblpQTIPSrthxHwjMQxi8GT74Z1ZROuueTWalUmrVpr3fkzg4 9QhSoGREZvvqKVu1Lwg0jL/7bVD/NN/ueoiXjlFm2Zg82hSiKXlEM9xS7NdDCbqi z0xV7zqGJbPI1A== -----END CERTIFICATE-----Generated at Thu Dec 11 23:57:08 2025 by rpki-client