This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/a10ddf-bb6e-4bb0-beff-0e68000b3537/1/iZOf8Sk7fiJ3n8VbTIPxPlLpRCg.mft File: iZOf8Sk7fiJ3n8VbTIPxPlLpRCg.mft (raw, json) Hash identifier: cWJ2XwSl8cYTKEJuyM6QbpFuATZGFiWKZ4F9WjsuTz4= Subject key identifier: 1D:A2:3C:EC:F9:CC:A8:E6:7D:10:6F:2A:D9:BE:DC:BD:4C:04:C6:FB Authority key identifier: 89:93:9F:F1:29:3B:7E:22:77:9F:C5:5B:4C:83:F1:3E:52:E9:44:28 Certificate issuer: /CN=89939ff1293b7e22779fc55b4c83f13e52e94428 Certificate serial: 019B24E3D3DD9F27BF0F67F4B2243279A06E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iZOf8Sk7fiJ3n8VbTIPxPlLpRCg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/a10ddf-bb6e-4bb0-beff-0e68000b3537/1/iZOf8Sk7fiJ3n8VbTIPxPlLpRCg.mft Manifest number: 1752 Signing time: Tue 16 Dec 2025 02:01:09 +0000 Manifest this update: Tue 16 Dec 2025 02:01:09 +0000 Manifest next update: Wed 17 Dec 2025 02:01:09 +0000 Files and hashes: 1: QdF_t5GM6hFZDI7Ycz1kPbhRE0s.roa (hash: gZA+5nFU0e3J+dZOb0p/gBtvIfB/51rVDEOTe4nlfP8=) 2: iZOf8Sk7fiJ3n8VbTIPxPlLpRCg.crl (hash: GexiIdek/vVhUmKdCBnO15Et3oLh5CrtJPVch1z/vE8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/a10ddf-bb6e-4bb0-beff-0e68000b3537/1/iZOf8Sk7fiJ3n8VbTIPxPlLpRCg.crl rsync://rpki.ripe.net/repository/DEFAULT/55/a10ddf-bb6e-4bb0-beff-0e68000b3537/1/iZOf8Sk7fiJ3n8VbTIPxPlLpRCg.mft rsync://rpki.ripe.net/repository/DEFAULT/iZOf8Sk7fiJ3n8VbTIPxPlLpRCg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:24:e3:d3:dd:9f:27:bf:0f:67:f4:b2:24:32:79:a0:6e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89939ff1293b7e22779fc55b4c83f13e52e94428 Validity Not Before: Dec 16 02:01:09 2025 GMT Not After : Dec 17 02:01:09 2025 GMT Subject: CN=1da23cecf9cca8e67d106f2ad9bedcbd4c04c6fb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:f4:17:8a:fe:cd:9a:96:35:81:3d:c6:9d:83: 31:7e:06:a1:ef:39:b7:9e:d4:f5:cf:4f:4f:a3:d4: 3b:c2:6d:aa:8b:89:a5:91:77:3a:26:76:23:94:18: f5:ee:95:75:db:7d:6f:6f:7f:c2:db:0c:f0:20:14: 30:e6:74:54:bd:f3:4c:c1:1c:12:e4:66:64:d4:c5: b2:00:7f:65:82:08:75:c0:ab:6d:b4:26:40:70:72: 29:87:c7:03:74:fb:0b:22:f3:0d:54:40:44:a0:0d: 5f:5e:74:2f:ef:c5:b8:2f:c5:6b:09:04:ee:d9:21: 66:05:af:77:a3:1c:bd:4f:59:0f:42:88:bc:99:64: d1:dd:a0:91:d7:8d:da:06:82:1f:06:98:3a:b9:2c: bc:c3:9c:db:58:c4:e4:05:6c:67:b2:d6:2b:67:42: 00:84:e2:e0:0f:89:72:75:bf:00:ea:ea:5b:52:69: a7:36:ef:b3:83:63:e8:02:64:96:d7:14:ec:0b:a7: f2:5c:57:ff:c8:4f:bf:74:ff:6d:fc:97:be:0b:da: a9:b5:9c:75:19:3e:cb:10:6f:5a:05:35:f8:51:31: 27:24:68:8a:61:50:68:9d:6f:f9:08:7b:d9:ab:fb: 06:19:ac:e3:95:3d:dd:dd:ca:7e:6e:11:73:a3:67: 2c:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:A2:3C:EC:F9:CC:A8:E6:7D:10:6F:2A:D9:BE:DC:BD:4C:04:C6:FB X509v3 Authority Key Identifier: keyid:89:93:9F:F1:29:3B:7E:22:77:9F:C5:5B:4C:83:F1:3E:52:E9:44:28 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iZOf8Sk7fiJ3n8VbTIPxPlLpRCg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/a10ddf-bb6e-4bb0-beff-0e68000b3537/1/iZOf8Sk7fiJ3n8VbTIPxPlLpRCg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/55/a10ddf-bb6e-4bb0-beff-0e68000b3537/1/iZOf8Sk7fiJ3n8VbTIPxPlLpRCg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3b:e5:86:db:1d:58:56:2c:96:a5:66:f4:b4:72:a9:fe:1a:e3: de:07:c0:3a:ca:3f:90:f2:b8:11:53:3e:cc:e7:b5:e1:8d:27: 42:7f:b2:fa:29:f7:f6:ce:72:6d:b5:c1:33:c2:7a:e8:e8:a0: 22:91:72:f6:68:6a:e4:80:ae:45:0f:e5:29:d1:61:2c:3e:06: 71:dc:a8:ae:73:3c:b9:e7:63:56:e9:ce:33:81:ff:e5:74:07: 6a:28:1f:d6:85:9c:a9:7e:10:bb:a2:1c:a9:86:7f:56:50:34: 30:be:00:ed:6f:95:2b:7b:69:7a:69:ce:dd:b8:7b:79:3d:61: 02:1b:56:17:bd:fd:8c:bb:c8:5a:9f:4f:f9:34:a7:a1:c2:0f: 26:e5:51:d0:a7:7d:9a:4d:d9:8d:69:e8:d5:37:68:93:5c:3f: a0:de:43:0d:a9:45:9c:87:36:61:0c:82:63:1d:d8:16:bf:49: a0:c3:75:88:ad:95:1b:84:0c:97:83:44:73:09:43:35:fb:18: da:0d:3b:06:b7:81:42:97:cd:aa:d8:41:19:20:55:37:62:0a: 5a:0e:b6:5f:21:9d:25:31:3d:fd:1f:32:90:bd:13:89:fa:5a: 7b:40:59:d3:d0:ac:eb:00:76:16:1c:c7:2c:c6:db:30:b7:42: 99:2c:85:ac -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsk49Pdnye/D2f0siQyeaBuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg5OTM5ZmYxMjkzYjdlMjI3NzlmYzU1YjRjODNmMTNlNTJl OTQ0MjgwHhcNMjUxMjE2MDIwMTA5WhcNMjUxMjE3MDIwMTA5WjAzMTEwLwYDVQQD EygxZGEyM2NlY2Y5Y2NhOGU2N2QxMDZmMmFkOWJlZGNiZDRjMDRjNmZiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1PQXiv7NmpY1gT3GnYMxfgah7zm3 ntT1z09Po9Q7wm2qi4mlkXc6JnYjlBj17pV1231vb3/C2wzwIBQw5nRUvfNMwRwS 5GZk1MWyAH9lggh1wKtttCZAcHIph8cDdPsLIvMNVEBEoA1fXnQv78W4L8VrCQTu 2SFmBa93oxy9T1kPQoi8mWTR3aCR143aBoIfBpg6uSy8w5zbWMTkBWxnstYrZ0IA hOLgD4lydb8A6upbUmmnNu+zg2PoAmSW1xTsC6fyXFf/yE+/dP9t/Je+C9qptZx1 GT7LEG9aBTX4UTEnJGiKYVBonW/5CHvZq/sGGazjlT3d3cp+bhFzo2csDwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFB2iPOz5zKjmfRBvKtm+3L1MBMb7MB8GA1UdIwQY MBaAFImTn/EpO34id5/FW0yD8T5S6UQoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaVpPZjhTazdmaUozbjhWYlRJUHhQbExwUkNnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS9hMTBkZGYtYmI2ZS00YmIwLWJlZmYt MGU2ODAwMGIzNTM3LzEvaVpPZjhTazdmaUozbjhWYlRJUHhQbExwUkNnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81NS9hMTBkZGYtYmI2ZS00YmIwLWJlZmYtMGU2ODAwMGIzNTM3 LzEvaVpPZjhTazdmaUozbjhWYlRJUHhQbExwUkNnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAO+WG2x1Y ViyWpWb0tHKp/hrj3gfAOso/kPK4EVM+zOe14Y0nQn+y+in39s5ybbXBM8J66Oig IpFy9mhq5ICuRQ/lKdFhLD4GcdyornM8uedjVunOM4H/5XQHaigf1oWcqX4Qu6Ic qYZ/VlA0ML4A7W+VK3tpemnO3bh7eT1hAhtWF739jLvIWp9P+TSnocIPJuVR0Kd9 mk3ZjWno1Tdok1w/oN5DDalFnIc2YQyCYx3YFr9JoMN1iK2VG4QMl4NEcwlDNfsY 2g07BreBQpfNqthBGSBVN2IKWg62XyGdJTE9/R8ykL0Tifpae0BZ09Cs6wB2FhzH LMbbMLdCmSyFrA== -----END CERTIFICATE-----Generated at Tue Dec 16 06:44:05 2025 by rpki-client