This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/936cbb-bac4-4fde-8def-febc1ed3ceba/1/ie36QUlE0BCsae5b-yJ3OySyfvs.mft File: ie36QUlE0BCsae5b-yJ3OySyfvs.mft (raw, json) Hash identifier: K6l+jwYZyfoyk1jgKBby/BnoahbJv1RNykLYcusX1aU= Subject key identifier: 2E:42:E2:AB:89:1D:C5:BE:5A:43:17:40:81:42:34:6A:F9:A3:07:14 Authority key identifier: 89:ED:FA:41:49:44:D0:10:AC:69:EE:5B:FB:22:77:3B:24:B2:7E:FB Certificate issuer: /CN=89edfa414944d010ac69ee5bfb22773b24b27efb Certificate serial: 019B07103B5D3D89FCE7EA234EAB99080177 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ie36QUlE0BCsae5b-yJ3OySyfvs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/936cbb-bac4-4fde-8def-febc1ed3ceba/1/ie36QUlE0BCsae5b-yJ3OySyfvs.mft Manifest number: 0BE0 Signing time: Wed 10 Dec 2025 07:01:02 +0000 Manifest this update: Wed 10 Dec 2025 07:01:02 +0000 Manifest next update: Thu 11 Dec 2025 07:01:02 +0000 Files and hashes: 1: 2j_QBpsrLBBxs622BISyOZtEgFA.roa (hash: 32mbR7LJ1AvTIHIxhitKhF6+X6cgHFfdsLG9qjMakhU=) 2: ie36QUlE0BCsae5b-yJ3OySyfvs.crl (hash: gcBWe3mzbqbDb0UUx/GNVdYeLipypgQzeG7DPjNKzrs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/936cbb-bac4-4fde-8def-febc1ed3ceba/1/ie36QUlE0BCsae5b-yJ3OySyfvs.crl rsync://rpki.ripe.net/repository/DEFAULT/50/936cbb-bac4-4fde-8def-febc1ed3ceba/1/ie36QUlE0BCsae5b-yJ3OySyfvs.mft rsync://rpki.ripe.net/repository/DEFAULT/ie36QUlE0BCsae5b-yJ3OySyfvs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 11 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:07:10:3b:5d:3d:89:fc:e7:ea:23:4e:ab:99:08:01:77 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89edfa414944d010ac69ee5bfb22773b24b27efb Validity Not Before: Dec 10 07:01:02 2025 GMT Not After : Dec 11 07:01:02 2025 GMT Subject: CN=2e42e2ab891dc5be5a4317408142346af9a30714 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:b8:d4:4f:22:3b:8e:13:dd:73:ee:4d:61:8a: 49:9d:4b:8f:8b:a5:58:18:0e:00:82:8a:c3:6b:00: 40:73:24:58:4a:04:eb:86:56:31:e0:03:e4:cd:99: 0f:ba:fb:5b:e8:45:ae:a1:70:90:a7:db:af:7e:52: 51:5f:98:26:6e:d6:4f:d4:24:ab:4c:aa:f5:1c:8e: cd:35:1d:66:0e:f9:ab:f8:ff:f6:ae:6a:0b:63:77: 89:1a:f5:3f:4d:50:44:64:bf:53:46:75:fc:cc:03: 40:d4:cc:4d:cc:8d:c1:44:56:38:7c:d5:fe:e9:f2: 72:62:64:42:6e:3d:37:ed:5b:94:c5:1c:99:29:cd: 80:bb:f7:e9:30:07:0f:2a:c8:03:76:39:8e:8b:f3: 9f:82:f7:5a:50:04:6a:3a:e6:1c:a8:41:ae:02:88: fe:2a:89:1a:40:2e:ef:23:99:e4:0a:8c:1f:80:1b: e1:7c:8e:d1:37:07:d5:1f:d5:d7:81:9b:2b:3e:24: 31:48:74:eb:5a:a0:5e:0b:0d:c1:31:2d:98:ba:fb: 51:b2:ea:1e:03:1c:5e:fb:f9:b0:d8:6a:c0:ad:d4: f4:50:06:cd:f3:ed:c0:0e:13:e7:32:99:2f:eb:11: 41:ea:9b:4a:82:d9:8d:db:cb:8c:2d:5a:03:86:52: 61:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:42:E2:AB:89:1D:C5:BE:5A:43:17:40:81:42:34:6A:F9:A3:07:14 X509v3 Authority Key Identifier: keyid:89:ED:FA:41:49:44:D0:10:AC:69:EE:5B:FB:22:77:3B:24:B2:7E:FB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ie36QUlE0BCsae5b-yJ3OySyfvs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/936cbb-bac4-4fde-8def-febc1ed3ceba/1/ie36QUlE0BCsae5b-yJ3OySyfvs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/50/936cbb-bac4-4fde-8def-febc1ed3ceba/1/ie36QUlE0BCsae5b-yJ3OySyfvs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2c:08:31:6c:32:e3:30:f5:37:03:4b:67:fe:61:db:d0:2d:6a: 50:ad:c1:0b:15:f2:05:64:9d:ee:2a:22:e3:bc:65:5a:63:01: e0:d9:47:e2:6b:48:1f:0e:3a:51:ed:1a:b6:a8:a2:9b:76:5b: 2a:73:f8:bd:95:53:ef:87:b8:ec:06:2d:44:10:5b:6d:be:7d: 30:55:66:18:09:08:e0:76:6c:b5:03:c7:a8:7e:5f:57:c7:15: a0:f9:cc:f1:f4:99:ac:cf:72:95:d6:e1:00:a3:28:6e:52:ee: 5c:cc:b3:53:b6:95:7d:b5:71:a4:7d:a0:fc:cb:6d:85:b3:96: 16:8c:04:8c:e2:c5:23:bb:f9:89:b3:35:c9:16:41:7e:3b:33: 3d:07:3e:d9:ab:11:da:dc:71:f3:b5:76:af:81:cb:58:e6:d1: c4:38:91:fa:ae:ff:86:6e:93:a0:1b:68:fd:f0:e9:2f:55:a5: 47:48:62:b0:4f:1e:3e:cb:9b:b7:1d:6d:08:8b:19:27:25:0c: 4f:f2:a3:68:40:f3:c7:5a:f5:72:36:69:21:00:d0:b5:7d:ee: 91:c6:64:4f:f4:31:b0:b0:02:a2:17:d7:66:fd:5b:45:05:f4: fc:22:2d:22:f2:16:72:02:8e:5e:4f:90:7b:fd:27:c2:5c:5d: 01:c0:c7:b0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsHEDtdPYn85+ojTquZCAF3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg5ZWRmYTQxNDk0NGQwMTBhYzY5ZWU1YmZiMjI3NzNiMjRi MjdlZmIwHhcNMjUxMjEwMDcwMTAyWhcNMjUxMjExMDcwMTAyWjAzMTEwLwYDVQQD EygyZTQyZTJhYjg5MWRjNWJlNWE0MzE3NDA4MTQyMzQ2YWY5YTMwNzE0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7bjUTyI7jhPdc+5NYYpJnUuPi6VY GA4AgorDawBAcyRYSgTrhlYx4APkzZkPuvtb6EWuoXCQp9uvflJRX5gmbtZP1CSr TKr1HI7NNR1mDvmr+P/2rmoLY3eJGvU/TVBEZL9TRnX8zANA1MxNzI3BRFY4fNX+ 6fJyYmRCbj037VuUxRyZKc2Au/fpMAcPKsgDdjmOi/OfgvdaUARqOuYcqEGuAoj+ KokaQC7vI5nkCowfgBvhfI7RNwfVH9XXgZsrPiQxSHTrWqBeCw3BMS2YuvtRsuoe Axxe+/mw2GrArdT0UAbN8+3ADhPnMpkv6xFB6ptKgtmN28uMLVoDhlJh/wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFC5C4quJHcW+WkMXQIFCNGr5owcUMB8GA1UdIwQY MBaAFInt+kFJRNAQrGnuW/sidzsksn77MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaWUzNlFVbEUwQkNzYWU1Yi15SjNPeVN5ZnZzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MC85MzZjYmItYmFjNC00ZmRlLThkZWYt ZmViYzFlZDNjZWJhLzEvaWUzNlFVbEUwQkNzYWU1Yi15SjNPeVN5ZnZzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MC85MzZjYmItYmFjNC00ZmRlLThkZWYtZmViYzFlZDNjZWJh LzEvaWUzNlFVbEUwQkNzYWU1Yi15SjNPeVN5ZnZzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALAgxbDLj MPU3A0tn/mHb0C1qUK3BCxXyBWSd7ioi47xlWmMB4NlH4mtIHw46Ue0atqiim3Zb KnP4vZVT74e47AYtRBBbbb59MFVmGAkI4HZstQPHqH5fV8cVoPnM8fSZrM9yldbh AKMoblLuXMyzU7aVfbVxpH2g/MtthbOWFowEjOLFI7v5ibM1yRZBfjszPQc+2asR 2txx87V2r4HLWObRxDiR+q7/hm6ToBto/fDpL1WlR0hisE8ePsubtx1tCIsZJyUM T/KjaEDzx1r1cjZpIQDQtX3ukcZkT/QxsLACohfXZv1bRQX0/CItIvIWcgKOXk+Q e/0nwlxdAcDHsA== -----END CERTIFICATE-----Generated at Wed Dec 10 10:09:40 2025 by rpki-client