This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/70e678-8495-46ae-96d7-29c5176902c6/1/iuS5P-tx3eKCO3DH27eeD5m1bBs.mft File: iuS5P-tx3eKCO3DH27eeD5m1bBs.mft (raw, json) Hash identifier: FBy02JRveL3Rk0EydjkGKW9Chu23FaHaLiK3X6T/Q0I= Subject key identifier: 7D:F5:61:12:F6:3F:79:D2:21:61:62:4F:CE:7C:5A:55:9D:03:50:8E Authority key identifier: 8A:E4:B9:3F:EB:71:DD:E2:82:3B:70:C7:DB:B7:9E:0F:99:B5:6C:1B Certificate issuer: /CN=8ae4b93feb71dde2823b70c7dbb79e0f99b56c1b Certificate serial: 019B3B3541AFC2D879084590F002A3ED7901 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iuS5P-tx3eKCO3DH27eeD5m1bBs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/70e678-8495-46ae-96d7-29c5176902c6/1/iuS5P-tx3eKCO3DH27eeD5m1bBs.mft Manifest number: 0A9F Signing time: Sat 20 Dec 2025 10:01:44 +0000 Manifest this update: Sat 20 Dec 2025 10:01:44 +0000 Manifest next update: Sun 21 Dec 2025 10:01:44 +0000 Files and hashes: 1: J2gFJxTXec_tCl5fYmT5ueu90dA.roa (hash: eqh0jr48WZnOgc9VcsakSv2fxPv1f923UQBSwi0u554=) 2: iuS5P-tx3eKCO3DH27eeD5m1bBs.crl (hash: +Ni+ofmkf5ZXt3kHfjBLixyZmK8pHlt7aRyXcACbsQY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/70e678-8495-46ae-96d7-29c5176902c6/1/iuS5P-tx3eKCO3DH27eeD5m1bBs.crl rsync://rpki.ripe.net/repository/DEFAULT/84/70e678-8495-46ae-96d7-29c5176902c6/1/iuS5P-tx3eKCO3DH27eeD5m1bBs.mft rsync://rpki.ripe.net/repository/DEFAULT/iuS5P-tx3eKCO3DH27eeD5m1bBs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 09:56:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3b:35:41:af:c2:d8:79:08:45:90:f0:02:a3:ed:79:01 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8ae4b93feb71dde2823b70c7dbb79e0f99b56c1b Validity Not Before: Dec 20 10:01:44 2025 GMT Not After : Dec 21 10:01:44 2025 GMT Subject: CN=7df56112f63f79d22161624fce7c5a559d03508e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:9a:37:40:7f:3b:2b:e2:38:cb:bb:d2:af:95: 38:57:d5:bc:8e:ee:3e:27:07:93:b5:e4:66:0e:6b: a9:41:28:f8:9f:2d:9d:b1:95:f8:cd:8a:a9:d3:91: f4:bd:4b:dc:83:06:d3:8c:c8:35:b5:38:55:a0:7a: 0d:ca:40:02:2c:46:bb:17:de:d7:43:1b:8b:e0:d0: 9a:d1:71:73:88:28:1e:69:d8:fb:6e:76:fb:1a:ff: e6:a2:83:b7:db:19:6f:6c:db:05:2c:66:7f:b6:89: 37:4b:7e:72:06:0b:85:e8:0a:2f:77:45:4b:f2:92: 29:7d:d5:36:15:6d:b2:d1:43:95:5b:d7:96:9a:a9: d4:83:d6:b1:04:c0:e3:57:83:50:71:ee:66:e6:12: 84:b9:a9:23:3b:a7:b6:62:09:7c:53:c0:f9:62:b2: a2:bc:c4:67:35:68:fd:cc:6e:c1:09:ef:40:ac:4e: c2:74:13:16:85:8a:0b:21:fe:a3:7a:d8:ea:ee:d5: 6c:69:25:84:df:54:78:48:f9:72:18:f6:5e:b2:a0: 4a:e2:11:2b:4a:88:32:65:6d:62:89:c0:bc:2f:32: 0a:35:be:39:13:45:cf:46:28:33:32:9f:c0:43:8c: 5f:84:2c:a4:90:91:05:b4:49:74:e4:d7:ae:c5:b3: 70:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:F5:61:12:F6:3F:79:D2:21:61:62:4F:CE:7C:5A:55:9D:03:50:8E X509v3 Authority Key Identifier: keyid:8A:E4:B9:3F:EB:71:DD:E2:82:3B:70:C7:DB:B7:9E:0F:99:B5:6C:1B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iuS5P-tx3eKCO3DH27eeD5m1bBs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/70e678-8495-46ae-96d7-29c5176902c6/1/iuS5P-tx3eKCO3DH27eeD5m1bBs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/84/70e678-8495-46ae-96d7-29c5176902c6/1/iuS5P-tx3eKCO3DH27eeD5m1bBs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 62:36:48:6d:95:a5:b2:34:74:1f:b0:2f:a7:86:3b:8b:9f:fb: a5:2a:8e:73:b7:89:79:a7:82:8d:54:f5:e2:15:af:df:66:dd: 09:bf:84:b7:9b:56:f7:25:33:fa:56:52:65:0f:f1:c5:a5:d9: 81:42:86:39:65:7b:66:97:9f:53:b8:7e:ff:bc:80:29:34:8e: b4:0a:98:be:22:28:8b:5c:28:c4:19:32:c7:16:c8:a3:c0:a9: 43:2b:05:ea:d7:e2:6b:7f:0b:90:30:cc:83:b9:d9:8d:b1:bf: 4d:4a:f2:18:fc:51:1d:2b:74:4a:6c:28:a0:ae:0b:84:d7:59: b7:1a:c8:27:2f:a5:8e:26:47:23:b6:06:61:f8:56:25:f6:d9: 21:0d:22:b3:84:d5:33:00:e8:56:62:07:bd:7d:87:f6:0c:78: f9:a8:81:10:64:9e:7e:97:af:a8:36:1c:90:cc:a4:02:f9:4b: f2:4a:04:e9:50:58:1b:23:df:ac:9a:68:56:f8:3f:ad:2c:b7: e7:7c:a8:bf:ba:d4:46:47:db:42:a6:1c:68:c1:0d:e8:af:34: f3:1c:41:a7:0e:b8:77:39:55:02:57:af:1c:37:84:35:f7:f9: b4:44:28:96:5f:56:a0:f0:26:84:8b:94:d9:cc:61:c2:bc:48: 1d:fb:e5:67 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs7NUGvwth5CEWQ8AKj7XkBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhhZTRiOTNmZWI3MWRkZTI4MjNiNzBjN2RiYjc5ZTBmOTli NTZjMWIwHhcNMjUxMjIwMTAwMTQ0WhcNMjUxMjIxMTAwMTQ0WjAzMTEwLwYDVQQD Eyg3ZGY1NjExMmY2M2Y3OWQyMjE2MTYyNGZjZTdjNWE1NTlkMDM1MDhlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvpo3QH87K+I4y7vSr5U4V9W8ju4+ JweTteRmDmupQSj4ny2dsZX4zYqp05H0vUvcgwbTjMg1tThVoHoNykACLEa7F97X QxuL4NCa0XFziCgeadj7bnb7Gv/mooO32xlvbNsFLGZ/tok3S35yBguF6Aovd0VL 8pIpfdU2FW2y0UOVW9eWmqnUg9axBMDjV4NQce5m5hKEuakjO6e2Ygl8U8D5YrKi vMRnNWj9zG7BCe9ArE7CdBMWhYoLIf6jetjq7tVsaSWE31R4SPlyGPZesqBK4hEr SogyZW1iicC8LzIKNb45E0XPRigzMp/AQ4xfhCykkJEFtEl05NeuxbNwgwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFH31YRL2P3nSIWFiT858WlWdA1COMB8GA1UdIwQY MBaAFIrkuT/rcd3igjtwx9u3ng+ZtWwbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaXVTNVAtdHgzZUtDTzNESDI3ZWVENW0xYkJzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NC83MGU2NzgtODQ5NS00NmFlLTk2ZDct MjljNTE3NjkwMmM2LzEvaXVTNVAtdHgzZUtDTzNESDI3ZWVENW0xYkJzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84NC83MGU2NzgtODQ5NS00NmFlLTk2ZDctMjljNTE3NjkwMmM2 LzEvaXVTNVAtdHgzZUtDTzNESDI3ZWVENW0xYkJzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYjZIbZWl sjR0H7Avp4Y7i5/7pSqOc7eJeaeCjVT14hWv32bdCb+Et5tW9yUz+lZSZQ/xxaXZ gUKGOWV7ZpefU7h+/7yAKTSOtAqYviIoi1woxBkyxxbIo8CpQysF6tfia38LkDDM g7nZjbG/TUryGPxRHSt0SmwooK4LhNdZtxrIJy+ljiZHI7YGYfhWJfbZIQ0is4TV MwDoVmIHvX2H9gx4+aiBEGSefpevqDYckMykAvlL8koE6VBYGyPfrJpoVvg/rSy3 53yov7rURkfbQqYcaMEN6K808xxBpw64dzlVAlevHDeENff5tEQoll9WoPAmhIuU 2cxhwrxIHfvlZw== -----END CERTIFICATE-----Generated at Sat Dec 20 12:24:11 2025 by rpki-client