This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/7fb381-fc44-44f6-a385-f8a469d4e2b2/1/IacXNhMJ0pOTUcnYuiFz24MZqI8.mft File: IacXNhMJ0pOTUcnYuiFz24MZqI8.mft (raw, json) Hash identifier: VtK9ldGfrvz4667+eOGYv6K2WKxAnThAOi4L1MSSLjg= Subject key identifier: FA:85:E3:1A:6B:09:0E:1B:5D:B7:BE:09:B4:0F:F5:B2:BA:20:71:D1 Authority key identifier: 21:A7:17:36:13:09:D2:93:93:51:C9:D8:BA:21:73:DB:83:19:A8:8F Certificate issuer: /CN=21a717361309d2939351c9d8ba2173db8319a88f Certificate serial: 019B39465271C53DC16D823A112ED48EFC3C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IacXNhMJ0pOTUcnYuiFz24MZqI8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/7fb381-fc44-44f6-a385-f8a469d4e2b2/1/IacXNhMJ0pOTUcnYuiFz24MZqI8.mft Manifest number: 0FA3 Signing time: Sat 20 Dec 2025 01:01:08 +0000 Manifest this update: Sat 20 Dec 2025 01:01:08 +0000 Manifest next update: Sun 21 Dec 2025 01:01:08 +0000 Files and hashes: 1: IacXNhMJ0pOTUcnYuiFz24MZqI8.crl (hash: sve2HGBGGMk5dZ1eXInZmpIJhw6dYIksOrQUqdJaXjw=) 2: PeD0qOPxUYxeVA81pP9--xNVIzU.roa (hash: fJvgODfg2m2y6FUhDf+GL6D88mfLwM4rg59sQSq2L84=) 3: qwmmpmJft8mwuiEXYTlzhJQuep0.roa (hash: Q0Z/E8v8Q7W2fm0rXhwdPc4pFVbeDlufQTIsqxx5ZeE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/7fb381-fc44-44f6-a385-f8a469d4e2b2/1/IacXNhMJ0pOTUcnYuiFz24MZqI8.crl rsync://rpki.ripe.net/repository/DEFAULT/67/7fb381-fc44-44f6-a385-f8a469d4e2b2/1/IacXNhMJ0pOTUcnYuiFz24MZqI8.mft rsync://rpki.ripe.net/repository/DEFAULT/IacXNhMJ0pOTUcnYuiFz24MZqI8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:39:46:52:71:c5:3d:c1:6d:82:3a:11:2e:d4:8e:fc:3c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=21a717361309d2939351c9d8ba2173db8319a88f Validity Not Before: Dec 20 01:01:08 2025 GMT Not After : Dec 21 01:01:08 2025 GMT Subject: CN=fa85e31a6b090e1b5db7be09b40ff5b2ba2071d1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:be:6d:9a:eb:06:c2:ac:b0:69:b4:36:f9:de: 73:73:b4:1f:f7:95:51:64:18:15:f8:5d:9d:58:46: 73:48:e9:b5:67:d5:93:f2:a7:42:70:4f:44:1d:4c: 55:80:57:ff:5d:c5:99:f9:40:62:53:9b:46:f6:0c: 31:33:27:1b:1d:cb:bf:ce:ee:ab:a5:50:ed:9b:d1: 43:2d:ab:57:01:64:2b:4f:7a:c5:3c:eb:4a:7b:40: 97:5c:94:0d:44:78:cd:0a:e9:4d:54:cf:8f:80:60: 54:dc:e9:a6:7b:3e:ff:7f:0b:51:22:90:cf:0a:be: ba:fa:0d:aa:ff:7a:ed:9b:00:d8:12:60:57:98:4e: d5:80:97:6a:b7:16:89:84:af:15:9c:8f:29:53:74: 69:8d:e5:c7:35:82:5e:d2:3e:27:d1:78:c9:30:e7: f0:0a:87:e2:74:ca:98:c8:8f:4f:2f:90:3c:8f:da: 11:f6:cc:6a:26:50:95:5c:db:a5:e9:dd:5e:3b:fb: 08:7f:73:90:ed:2b:17:58:cf:1f:0d:c5:85:a6:0a: 18:96:cd:f0:2d:90:d0:d4:d0:75:e6:26:79:9e:61: df:b0:ca:36:4f:a4:ed:32:e4:3f:cb:f3:9a:80:ec: 21:29:c0:35:f0:6c:a9:ac:75:9d:1b:c6:f4:c1:3b: ad:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:85:E3:1A:6B:09:0E:1B:5D:B7:BE:09:B4:0F:F5:B2:BA:20:71:D1 X509v3 Authority Key Identifier: keyid:21:A7:17:36:13:09:D2:93:93:51:C9:D8:BA:21:73:DB:83:19:A8:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IacXNhMJ0pOTUcnYuiFz24MZqI8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/7fb381-fc44-44f6-a385-f8a469d4e2b2/1/IacXNhMJ0pOTUcnYuiFz24MZqI8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/67/7fb381-fc44-44f6-a385-f8a469d4e2b2/1/IacXNhMJ0pOTUcnYuiFz24MZqI8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3c:a8:4f:f3:d4:96:34:19:09:b4:e4:bb:f5:e6:58:7f:51:48: ae:1d:f4:bb:e5:6d:93:37:fa:5d:ad:ef:89:da:c2:4c:02:a8: 1e:7a:47:25:42:ef:72:04:77:e9:3a:81:f2:04:69:98:a7:c3: 38:a6:73:ba:b1:d5:86:49:47:28:50:05:e3:f2:92:04:7c:d8: 9b:83:d7:19:0c:c6:5d:7f:9f:35:9c:a3:20:c4:26:f0:1c:bf: 94:78:2d:60:0d:40:8f:3f:61:79:3e:e8:40:87:23:07:89:ed: eb:a1:f0:a2:ba:5e:b1:6c:b7:74:54:77:4d:5f:93:42:6f:9c: e4:16:d1:30:2d:20:96:1f:85:05:6f:38:c9:c3:32:0f:f1:18: 03:be:e6:0a:dc:35:bf:f9:15:86:52:0d:57:ed:ec:b8:3a:ea: f8:9c:0d:9f:8b:70:cd:44:cb:26:57:7b:0a:30:4e:61:a0:d2: 4a:83:67:24:ce:a4:92:df:86:a1:c3:d8:7a:f6:4e:d8:ad:6d: 89:46:6c:b5:7d:11:dd:d9:7a:57:5c:93:ac:9d:fc:1f:33:0c: 2c:ce:1f:8c:c3:aa:fd:aa:c4:01:ef:d8:08:9e:c2:15:da:3b: fa:5f:55:ef:0b:85:49:11:de:12:6f:ce:b0:73:aa:1d:11:34: 7e:b1:9a:81 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs5RlJxxT3BbYI6ES7Ujvw8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIxYTcxNzM2MTMwOWQyOTM5MzUxYzlkOGJhMjE3M2RiODMx OWE4OGYwHhcNMjUxMjIwMDEwMTA4WhcNMjUxMjIxMDEwMTA4WjAzMTEwLwYDVQQD EyhmYTg1ZTMxYTZiMDkwZTFiNWRiN2JlMDliNDBmZjViMmJhMjA3MWQxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA375tmusGwqywabQ2+d5zc7Qf95VR ZBgV+F2dWEZzSOm1Z9WT8qdCcE9EHUxVgFf/XcWZ+UBiU5tG9gwxMycbHcu/zu6r pVDtm9FDLatXAWQrT3rFPOtKe0CXXJQNRHjNCulNVM+PgGBU3Ommez7/fwtRIpDP Cr66+g2q/3rtmwDYEmBXmE7VgJdqtxaJhK8VnI8pU3RpjeXHNYJe0j4n0XjJMOfw CofidMqYyI9PL5A8j9oR9sxqJlCVXNul6d1eO/sIf3OQ7SsXWM8fDcWFpgoYls3w LZDQ1NB15iZ5nmHfsMo2T6TtMuQ/y/OagOwhKcA18GyprHWdG8b0wTuteQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPqF4xprCQ4bXbe+CbQP9bK6IHHRMB8GA1UdIwQY MBaAFCGnFzYTCdKTk1HJ2Lohc9uDGaiPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSWFjWE5oTUowcE9UVWNuWXVpRnoyNE1acUk4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ny83ZmIzODEtZmM0NC00NGY2LWEzODUt ZjhhNDY5ZDRlMmIyLzEvSWFjWE5oTUowcE9UVWNuWXVpRnoyNE1acUk4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Ny83ZmIzODEtZmM0NC00NGY2LWEzODUtZjhhNDY5ZDRlMmIy LzEvSWFjWE5oTUowcE9UVWNuWXVpRnoyNE1acUk4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPKhP89SW NBkJtOS79eZYf1FIrh30u+Vtkzf6Xa3vidrCTAKoHnpHJULvcgR36TqB8gRpmKfD OKZzurHVhklHKFAF4/KSBHzYm4PXGQzGXX+fNZyjIMQm8By/lHgtYA1Ajz9heT7o QIcjB4nt66HworpesWy3dFR3TV+TQm+c5BbRMC0glh+FBW84ycMyD/EYA77mCtw1 v/kVhlINV+3suDrq+JwNn4twzUTLJld7CjBOYaDSSoNnJM6kkt+GocPYevZO2K1t iUZstX0R3dl6V1yTrJ38HzMMLM4fjMOq/arEAe/YCJ7CFdo7+l9V7wuFSRHeEm/O sHOqHRE0frGagQ== -----END CERTIFICATE-----Generated at Sat Dec 20 04:59:44 2025 by rpki-client