This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/2f6dd0-b76f-47d5-a4ab-32feeb566ee6/1/Iehv-Zc8k6vmOY8DGWbCnXWjuoY.mft File: Iehv-Zc8k6vmOY8DGWbCnXWjuoY.mft (raw, json) Hash identifier: 3nVGtgyVCMNm9xzWyq0cz2s2qe4vp3/e1nzd+qR3kRU= Subject key identifier: 7B:DA:64:A4:D3:B2:E4:01:36:38:42:62:25:E9:D7:EA:46:EF:37:06 Authority key identifier: 21:E8:6F:F9:97:3C:93:AB:E6:39:8F:03:19:66:C2:9D:75:A3:BA:86 Certificate issuer: /CN=21e86ff9973c93abe6398f031966c29d75a3ba86 Certificate serial: 019B341FFF5BAAE4DFC3DA952046A101CA3D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Iehv-Zc8k6vmOY8DGWbCnXWjuoY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/2f6dd0-b76f-47d5-a4ab-32feeb566ee6/1/Iehv-Zc8k6vmOY8DGWbCnXWjuoY.mft Manifest number: 162F Signing time: Fri 19 Dec 2025 01:01:10 +0000 Manifest this update: Fri 19 Dec 2025 01:01:10 +0000 Manifest next update: Sat 20 Dec 2025 01:01:10 +0000 Files and hashes: 1: 25GdIX8pGRrdAAaubJO0FxbYG-s.roa (hash: J7SjJPVMXuJzyuyQBNTx3E62SBRqK9gpWeifxFumUs0=) 2: 6WSzq5tklzrrb4CQ30LLV8NUx2g.roa (hash: UmnImARopszt+4WaNMMPCsufWGExd3hc37DvZdbg1tI=) 3: 8ROo1-f7zOJ7IGVOmN_RufzzbRg.roa (hash: 0g/v1GDnSb/mpf5pKYYz9HEAiGcoNER98ihb6wrQqWo=) 4: Iehv-Zc8k6vmOY8DGWbCnXWjuoY.crl (hash: vzk1C2zTepY4yLOOLp4i7K3qV0z/ZmcvAKyCTErOCT8=) 5: OREDNoQ0vwPI3XM_zRsW3yzoE_A.roa (hash: 1cT3zKRDrAQDDxV5Rq7SD/mINGk0AiyR89E6Ur7LkVA=) 6: mQQXMqosDbrfiBBQFe3pss-9NtQ.roa (hash: qAb1oy5TaR+lNTajDgndtpEVHAu7ZMdgoTop9g6Wh6Y=) 7: uSaVwi6W5g3viY9NscHN3tqDzCk.roa (hash: t4D+qU5YVF27z4TGr3wG3ucQjp23my4+sKI2eFqOYYg=) 8: uumQQQ1viq_-gfcaqAufH6g_C7w.roa (hash: AM9mJlfYhSa7Wcw8Wx9nTWnnL8T0GQwXceLp5ft6/NA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/2f6dd0-b76f-47d5-a4ab-32feeb566ee6/1/Iehv-Zc8k6vmOY8DGWbCnXWjuoY.crl rsync://rpki.ripe.net/repository/DEFAULT/52/2f6dd0-b76f-47d5-a4ab-32feeb566ee6/1/Iehv-Zc8k6vmOY8DGWbCnXWjuoY.mft rsync://rpki.ripe.net/repository/DEFAULT/Iehv-Zc8k6vmOY8DGWbCnXWjuoY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:34:1f:ff:5b:aa:e4:df:c3:da:95:20:46:a1:01:ca:3d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=21e86ff9973c93abe6398f031966c29d75a3ba86 Validity Not Before: Dec 19 01:01:10 2025 GMT Not After : Dec 20 01:01:10 2025 GMT Subject: CN=7bda64a4d3b2e4013638426225e9d7ea46ef3706 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:6e:ab:d1:b3:a0:c1:f4:ce:39:fe:99:4c:1d: 79:dd:ee:e4:d9:41:30:91:be:9e:16:b8:e8:c7:79: 95:b1:f5:8b:81:2f:c6:a3:30:f1:b6:11:49:3d:1c: ee:d3:35:22:97:83:43:e5:85:dc:88:e7:fc:07:ce: 52:2b:74:a8:10:f4:9a:ac:eb:92:c2:46:e3:99:2c: 74:53:a9:80:52:b9:7b:83:65:70:82:85:9f:68:e6: bd:8f:ce:69:bb:f0:bb:42:64:fb:08:3d:fd:32:54: 99:2c:0b:1f:37:ff:1b:47:fd:9b:4c:cc:bc:a7:13: 3e:f6:84:1a:45:51:49:7b:29:c2:11:4b:74:97:ca: f4:42:9a:10:e5:05:59:8c:28:3f:e5:e7:b1:37:70: d3:b2:56:81:36:59:d0:68:df:e0:ce:86:f5:d3:8d: 34:7d:b8:bc:40:56:fb:b8:f8:61:e8:9d:70:03:99: cb:f4:df:25:ea:1a:f2:31:cd:e0:8e:a7:31:0c:36: c7:93:b4:2b:c1:11:26:50:e0:89:79:17:74:db:28: 8b:a8:fc:18:7b:32:07:78:5a:fe:2c:d4:f9:0e:61: 56:a0:53:18:37:63:ae:80:22:6f:68:9d:55:46:f9: c3:cc:7a:4f:f5:d6:b4:9b:61:94:61:ca:01:8e:b8: 06:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:DA:64:A4:D3:B2:E4:01:36:38:42:62:25:E9:D7:EA:46:EF:37:06 X509v3 Authority Key Identifier: keyid:21:E8:6F:F9:97:3C:93:AB:E6:39:8F:03:19:66:C2:9D:75:A3:BA:86 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Iehv-Zc8k6vmOY8DGWbCnXWjuoY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/2f6dd0-b76f-47d5-a4ab-32feeb566ee6/1/Iehv-Zc8k6vmOY8DGWbCnXWjuoY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/52/2f6dd0-b76f-47d5-a4ab-32feeb566ee6/1/Iehv-Zc8k6vmOY8DGWbCnXWjuoY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 51:5b:8b:56:a4:4a:5d:06:25:5e:e0:4f:bd:35:75:9b:cd:3d: 14:31:3b:79:85:c8:a2:13:f0:26:a0:ab:72:ec:61:a2:a9:6f: 9a:22:b7:f9:ec:01:cd:1f:b7:83:28:04:99:4f:f7:35:b9:72: f4:dc:76:cf:6a:63:29:07:38:94:6d:e4:cb:79:f2:72:16:54: 92:54:97:fe:7c:17:e3:6c:31:7c:70:97:ad:2f:bd:9e:cd:16: 9a:30:70:4e:a2:ea:8d:71:43:20:d8:2d:bc:dc:ed:63:15:cf: d5:c8:ca:d7:f7:9c:19:5d:17:ec:99:47:29:0b:da:d7:d6:52: a5:c2:24:4b:2d:48:13:68:45:4b:cc:f9:26:e2:bb:c9:a9:66: 81:e4:e3:e2:37:bb:18:11:d4:d5:a4:38:06:80:fe:65:14:5e: 6a:b9:b4:6f:c3:dc:33:08:27:20:9a:da:5c:92:71:ef:47:9f: e6:bc:27:b1:a3:b8:03:eb:01:8f:9f:7b:a0:0b:57:e8:83:57: be:d2:7a:76:24:8c:7b:d8:c3:67:19:11:3e:b6:29:c7:bb:53: 0f:f5:12:8b:9a:b8:48:c1:30:47:ff:1d:7e:e3:3d:35:76:2e: 51:76:6a:b8:b9:2e:98:c5:31:5d:6d:a7:2e:a6:9a:7a:54:4b: 48:e9:57:8b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs0H/9bquTfw9qVIEahAco9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIxZTg2ZmY5OTczYzkzYWJlNjM5OGYwMzE5NjZjMjlkNzVh M2JhODYwHhcNMjUxMjE5MDEwMTEwWhcNMjUxMjIwMDEwMTEwWjAzMTEwLwYDVQQD Eyg3YmRhNjRhNGQzYjJlNDAxMzYzODQyNjIyNWU5ZDdlYTQ2ZWYzNzA2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvW6r0bOgwfTOOf6ZTB153e7k2UEw kb6eFrjox3mVsfWLgS/GozDxthFJPRzu0zUil4ND5YXciOf8B85SK3SoEPSarOuS wkbjmSx0U6mAUrl7g2VwgoWfaOa9j85pu/C7QmT7CD39MlSZLAsfN/8bR/2bTMy8 pxM+9oQaRVFJeynCEUt0l8r0QpoQ5QVZjCg/5eexN3DTslaBNlnQaN/gzob10400 fbi8QFb7uPhh6J1wA5nL9N8l6hryMc3gjqcxDDbHk7QrwREmUOCJeRd02yiLqPwY ezIHeFr+LNT5DmFWoFMYN2OugCJvaJ1VRvnDzHpP9da0m2GUYcoBjrgGxQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHvaZKTTsuQBNjhCYiXp1+pG7zcGMB8GA1UdIwQY MBaAFCHob/mXPJOr5jmPAxlmwp11o7qGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSWVodi1aYzhrNnZtT1k4REdXYkNuWFdqdW9ZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Mi8yZjZkZDAtYjc2Zi00N2Q1LWE0YWIt MzJmZWViNTY2ZWU2LzEvSWVodi1aYzhrNnZtT1k4REdXYkNuWFdqdW9ZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Mi8yZjZkZDAtYjc2Zi00N2Q1LWE0YWItMzJmZWViNTY2ZWU2 LzEvSWVodi1aYzhrNnZtT1k4REdXYkNuWFdqdW9ZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUVuLVqRK XQYlXuBPvTV1m809FDE7eYXIohPwJqCrcuxhoqlvmiK3+ewBzR+3gygEmU/3Nbly 9Nx2z2pjKQc4lG3ky3nychZUklSX/nwX42wxfHCXrS+9ns0WmjBwTqLqjXFDINgt vNztYxXP1cjK1/ecGV0X7JlHKQva19ZSpcIkSy1IE2hFS8z5JuK7yalmgeTj4je7 GBHU1aQ4BoD+ZRRearm0b8PcMwgnIJraXJJx70ef5rwnsaO4A+sBj597oAtX6INX vtJ6diSMe9jDZxkRPrYpx7tTD/USi5q4SMEwR/8dfuM9NXYuUXZquLkumMUxXW2n LqaaelRLSOlXiw== -----END CERTIFICATE-----Generated at Fri Dec 19 08:06:59 2025 by rpki-client