This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/1d4b2c-945d-4f39-b233-3e6b7025b65e/1/IeQhptlumdY_fPtJnKcRfIIwTqo.mft File: IeQhptlumdY_fPtJnKcRfIIwTqo.mft (raw, json) Hash identifier: xyVncUeFi4pamfWc8nHHZIoEJ+xCzfXQQTsKWkJn8Lc= Subject key identifier: D8:A8:24:63:93:A2:79:C1:D2:42:3B:7B:BC:20:1A:4A:69:B0:3E:E6 Authority key identifier: 21:E4:21:A6:D9:6E:99:D6:3F:7C:FB:49:9C:A7:11:7C:82:30:4E:AA Certificate issuer: /CN=21e421a6d96e99d63f7cfb499ca7117c82304eaa Certificate serial: 019B1B3BA283D0CB3DE131D7F75FD4D3348C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IeQhptlumdY_fPtJnKcRfIIwTqo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/1d4b2c-945d-4f39-b233-3e6b7025b65e/1/IeQhptlumdY_fPtJnKcRfIIwTqo.mft Manifest number: 1775 Signing time: Sun 14 Dec 2025 05:00:51 +0000 Manifest this update: Sun 14 Dec 2025 05:00:51 +0000 Manifest next update: Mon 15 Dec 2025 05:00:51 +0000 Files and hashes: 1: 1-6OkkXT7C4FLfpQRzLeEPIkuUNA.roa (hash: D8MJaVpCwQ0fVODdot0Xw5y5hbPJWv55WnQMX0Z/dxE=) 2: IeQhptlumdY_fPtJnKcRfIIwTqo.crl (hash: 5uiUiRoCzCL1ZeAql6Q+qOooMo/a8UL+iQY0saescSo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/1d4b2c-945d-4f39-b233-3e6b7025b65e/1/IeQhptlumdY_fPtJnKcRfIIwTqo.crl rsync://rpki.ripe.net/repository/DEFAULT/77/1d4b2c-945d-4f39-b233-3e6b7025b65e/1/IeQhptlumdY_fPtJnKcRfIIwTqo.mft rsync://rpki.ripe.net/repository/DEFAULT/IeQhptlumdY_fPtJnKcRfIIwTqo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 15 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:1b:3b:a2:83:d0:cb:3d:e1:31:d7:f7:5f:d4:d3:34:8c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=21e421a6d96e99d63f7cfb499ca7117c82304eaa Validity Not Before: Dec 14 05:00:51 2025 GMT Not After : Dec 15 05:00:51 2025 GMT Subject: CN=d8a8246393a279c1d2423b7bbc201a4a69b03ee6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:68:a9:d7:be:17:ff:49:6d:33:01:84:a0:e2: 1d:ca:a8:6b:b9:bc:65:6b:3c:51:bd:2a:37:29:0f: 67:0c:7b:ed:4d:e9:67:1e:ac:41:0f:77:0b:e1:10: ad:28:bc:93:37:fd:9d:e7:e2:fd:d0:fe:46:04:78: e5:3a:39:60:a2:e2:84:09:87:3e:02:7f:d5:4c:22: 0f:13:8d:24:e2:c4:3f:90:16:e5:5b:7d:89:3f:a5: 82:08:14:e5:56:dd:bd:ca:b9:08:44:5f:18:79:73: 15:e8:d2:c2:4d:c3:83:18:f9:60:9c:d2:7e:44:42: fa:90:e7:60:ff:22:f9:3e:a4:3a:8c:22:dc:f9:22: 11:d6:04:ec:5d:90:e6:fb:58:0d:3c:b1:40:26:ae: 35:19:7e:c2:08:a7:eb:e7:25:01:08:b6:17:34:5b: 57:a3:36:0a:8f:af:d0:3e:7e:79:3f:dc:80:7b:02: e8:5f:13:98:65:29:d2:34:22:9a:b3:c2:9f:4d:1e: 18:c5:f1:43:39:ca:8f:ce:e9:6d:b0:7b:5f:01:12: 24:0a:ba:0a:58:3f:b0:f9:53:bc:f9:d9:b1:d7:55: 35:7b:ec:c3:e5:0f:fc:a6:f2:25:1a:fc:15:aa:8c: 4a:94:0f:e4:d9:a2:7e:da:a9:bc:d2:8c:1d:7d:7a: 17:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:A8:24:63:93:A2:79:C1:D2:42:3B:7B:BC:20:1A:4A:69:B0:3E:E6 X509v3 Authority Key Identifier: keyid:21:E4:21:A6:D9:6E:99:D6:3F:7C:FB:49:9C:A7:11:7C:82:30:4E:AA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IeQhptlumdY_fPtJnKcRfIIwTqo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/1d4b2c-945d-4f39-b233-3e6b7025b65e/1/IeQhptlumdY_fPtJnKcRfIIwTqo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/77/1d4b2c-945d-4f39-b233-3e6b7025b65e/1/IeQhptlumdY_fPtJnKcRfIIwTqo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b7:43:8f:07:e0:54:36:68:cd:47:5e:a5:54:eb:fe:73:52:71: ab:da:38:38:d1:35:ef:cc:a4:82:c5:b2:2e:c3:17:7a:39:41: bc:cc:60:14:27:5a:44:7c:d3:ef:fd:28:f9:0b:ca:c8:7d:03: dc:f8:7d:e8:37:49:0d:5c:9b:75:eb:1e:2c:18:70:f7:ab:c6: b2:98:d3:5f:0e:28:4e:2e:7e:ac:82:a6:c4:e9:44:93:d6:0a: 3d:f0:5f:3e:8b:da:bf:86:c5:4e:7f:81:56:32:34:ec:66:ef: 17:fa:1b:50:04:e9:4f:08:d5:4a:ec:f4:02:1b:a4:22:20:32: f7:4b:98:62:a0:a1:3f:37:e4:88:99:db:7c:09:6a:ff:05:b4: c5:ea:7e:89:10:15:25:33:fb:fe:b0:00:9f:16:2f:6a:75:ba: e9:02:00:f9:d0:4f:17:84:bc:b8:3d:7b:05:9f:50:16:f8:36: 5f:83:e0:24:fd:14:b7:81:b6:61:ba:6d:61:61:08:3f:66:eb: 2b:fc:b7:15:19:5c:49:f6:05:28:e5:07:e6:4b:75:1a:d7:ef: bf:b2:18:bd:1d:b6:e2:b1:f5:cc:44:c2:f7:7f:73:25:77:e0: 2f:be:e6:d4:5a:5c:76:74:2a:68:c1:c1:6a:4e:fd:2b:8f:78: 15:d3:03:76 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsbO6KD0Ms94THX91/U0zSMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIxZTQyMWE2ZDk2ZTk5ZDYzZjdjZmI0OTljYTcxMTdjODIz MDRlYWEwHhcNMjUxMjE0MDUwMDUxWhcNMjUxMjE1MDUwMDUxWjAzMTEwLwYDVQQD EyhkOGE4MjQ2MzkzYTI3OWMxZDI0MjNiN2JiYzIwMWE0YTY5YjAzZWU2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs2ip174X/0ltMwGEoOIdyqhrubxl azxRvSo3KQ9nDHvtTelnHqxBD3cL4RCtKLyTN/2d5+L90P5GBHjlOjlgouKECYc+ An/VTCIPE40k4sQ/kBblW32JP6WCCBTlVt29yrkIRF8YeXMV6NLCTcODGPlgnNJ+ REL6kOdg/yL5PqQ6jCLc+SIR1gTsXZDm+1gNPLFAJq41GX7CCKfr5yUBCLYXNFtX ozYKj6/QPn55P9yAewLoXxOYZSnSNCKas8KfTR4YxfFDOcqPzultsHtfARIkCroK WD+w+VO8+dmx11U1e+zD5Q/8pvIlGvwVqoxKlA/k2aJ+2qm80owdfXoXewIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNioJGOTonnB0kI7e7wgGkppsD7mMB8GA1UdIwQY MBaAFCHkIabZbpnWP3z7SZynEXyCME6qMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSWVRaHB0bHVtZFlfZlB0Sm5LY1JmSUl3VHFvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ny8xZDRiMmMtOTQ1ZC00ZjM5LWIyMzMt M2U2YjcwMjViNjVlLzEvSWVRaHB0bHVtZFlfZlB0Sm5LY1JmSUl3VHFvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Ny8xZDRiMmMtOTQ1ZC00ZjM5LWIyMzMtM2U2YjcwMjViNjVl LzEvSWVRaHB0bHVtZFlfZlB0Sm5LY1JmSUl3VHFvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAt0OPB+BU NmjNR16lVOv+c1Jxq9o4ONE178ykgsWyLsMXejlBvMxgFCdaRHzT7/0o+QvKyH0D 3Ph96DdJDVybdeseLBhw96vGspjTXw4oTi5+rIKmxOlEk9YKPfBfPovav4bFTn+B VjI07GbvF/obUATpTwjVSuz0AhukIiAy90uYYqChPzfkiJnbfAlq/wW0xep+iRAV JTP7/rAAnxYvanW66QIA+dBPF4S8uD17BZ9QFvg2X4PgJP0Ut4G2YbptYWEIP2br K/y3FRlcSfYFKOUH5kt1Gtfvv7IYvR224rH1zETC939zJXfgL77m1FpcdnQqaMHB ak79K494FdMDdg== -----END CERTIFICATE-----Generated at Sun Dec 14 07:46:07 2025 by rpki-client