This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/64c431-5330-437b-b207-28fecc63398c/1/irW5qTaHl6hrrryB9iOz9OeG9Ro.mft File: irW5qTaHl6hrrryB9iOz9OeG9Ro.mft (raw, json) Hash identifier: a3k9z8YJo7r5V37h5V3h2Vu1y24Dtk5SYg9NGB5E5Bg= Subject key identifier: 04:86:2E:AE:5B:15:CC:75:ED:2F:C3:D3:06:35:B9:3C:46:56:0B:65 Authority key identifier: 8A:B5:B9:A9:36:87:97:A8:6B:AE:BC:81:F6:23:B3:F4:E7:86:F5:1A Certificate issuer: /CN=8ab5b9a9368797a86baebc81f623b3f4e786f51a Certificate serial: 019B0F00965C5471A37D293FA7F6F2A2A480 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/irW5qTaHl6hrrryB9iOz9OeG9Ro.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/64c431-5330-437b-b207-28fecc63398c/1/irW5qTaHl6hrrryB9iOz9OeG9Ro.mft Manifest number: 0BC8 Signing time: Thu 11 Dec 2025 20:00:55 +0000 Manifest this update: Thu 11 Dec 2025 20:00:55 +0000 Manifest next update: Fri 12 Dec 2025 20:00:55 +0000 Files and hashes: 1: 8Ztwq8Ff-jJd_sBf28s8lvQ9SqU.roa (hash: QWa/HtnKYiYQsWevU25s3knaSRBSQ+SLuyEHZRqaj0Q=) 2: irW5qTaHl6hrrryB9iOz9OeG9Ro.crl (hash: sqQQnJZs8q6ET8+62PVtGbnqY7fZPasWMEBBFCPcIGU=) 3: rXdrQXveU3qj0FGkRcK0QMl-LXw.roa (hash: MqIHKMdtZYEs0bc9AhyZZKGumnTYkeuiPOOBSx8nfws=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/64c431-5330-437b-b207-28fecc63398c/1/irW5qTaHl6hrrryB9iOz9OeG9Ro.crl rsync://rpki.ripe.net/repository/DEFAULT/ac/64c431-5330-437b-b207-28fecc63398c/1/irW5qTaHl6hrrryB9iOz9OeG9Ro.mft rsync://rpki.ripe.net/repository/DEFAULT/irW5qTaHl6hrrryB9iOz9OeG9Ro.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 19:27:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0f:00:96:5c:54:71:a3:7d:29:3f:a7:f6:f2:a2:a4:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8ab5b9a9368797a86baebc81f623b3f4e786f51a Validity Not Before: Dec 11 20:00:55 2025 GMT Not After : Dec 12 20:00:55 2025 GMT Subject: CN=04862eae5b15cc75ed2fc3d30635b93c46560b65 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:e2:2e:b0:46:1d:45:2e:fb:41:e6:94:9a:99: 4f:83:dc:78:f3:22:a9:fa:62:a0:1f:e0:6c:24:37: 86:98:e1:d9:9e:82:bd:e6:51:2c:c4:30:b1:a1:3b: c1:de:9f:7b:e3:c7:e5:41:59:2d:29:ad:65:ac:4f: 70:2e:04:01:ca:af:c3:26:cb:bf:22:77:ad:af:70: e0:bd:d2:a3:71:08:62:54:66:18:b5:37:e3:41:f3: 89:01:30:9e:e9:26:cd:04:7b:a0:e3:c8:ea:a2:a2: 56:b5:d7:62:d1:16:20:a0:ea:18:b1:99:0d:1c:5e: 93:34:e3:63:00:66:91:a7:68:53:08:11:bf:01:99: 81:ea:ee:e3:61:34:6b:74:64:48:c0:a2:8b:1c:9b: fb:b1:ad:f4:02:af:97:b8:32:e4:43:48:a2:97:56: b0:03:08:8a:db:f4:43:41:d9:52:b1:c7:b8:03:f8: 7f:ff:d7:81:b6:ff:fc:2b:9b:c7:99:ca:cb:ea:7e: 73:5f:f9:3a:18:1e:79:11:f0:02:d8:47:95:6f:1a: 20:63:0d:0f:fa:30:7f:b7:8d:6e:89:13:83:93:4e: e4:11:6e:23:37:68:74:ae:6c:46:67:04:8e:20:4b: f2:ff:97:d9:80:2a:07:f2:24:0a:51:a5:cc:4a:52: 9a:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:86:2E:AE:5B:15:CC:75:ED:2F:C3:D3:06:35:B9:3C:46:56:0B:65 X509v3 Authority Key Identifier: keyid:8A:B5:B9:A9:36:87:97:A8:6B:AE:BC:81:F6:23:B3:F4:E7:86:F5:1A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/irW5qTaHl6hrrryB9iOz9OeG9Ro.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/64c431-5330-437b-b207-28fecc63398c/1/irW5qTaHl6hrrryB9iOz9OeG9Ro.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/64c431-5330-437b-b207-28fecc63398c/1/irW5qTaHl6hrrryB9iOz9OeG9Ro.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c3:dc:84:f2:c3:0b:01:74:44:be:dd:70:23:72:45:59:94:fb: 54:f6:bc:61:fd:d2:7e:14:35:b3:de:e7:24:03:2f:f7:73:de: d2:5a:9e:43:b3:53:2a:22:c3:07:d9:39:eb:80:9d:19:b7:94: ef:c4:aa:d5:e9:ac:03:8c:55:d5:dd:bd:df:15:c2:ac:7b:43: e9:5c:af:1d:e9:b8:53:c2:a8:20:9c:02:b1:50:1f:75:48:bb: d9:61:6e:73:cb:5e:6b:4e:fa:ea:c8:89:50:94:f6:2a:d5:a2: 45:f4:d6:80:03:d3:c2:e3:52:f2:b8:2a:7d:51:ec:76:3a:10: 0a:f7:5f:6e:e0:ce:2e:64:19:48:ee:f7:89:af:07:50:20:07: d0:fb:25:69:54:b9:35:4b:53:22:b3:eb:56:91:53:8e:83:95: 55:53:8e:69:83:58:ff:ef:40:74:6d:45:f1:93:92:76:33:52: 0b:cd:9b:d5:c2:c0:20:9c:aa:32:92:5f:2a:7c:eb:44:15:ca: 70:37:3b:41:be:a7:c1:fa:02:71:c9:f4:24:5b:26:bb:f5:02: 26:67:ee:2c:6e:f0:8b:3b:58:b2:0c:67:80:38:02:d8:ca:91: 1c:37:78:75:0c:0e:72:c2:b8:9f:c8:e0:0e:5b:aa:67:1e:b3: 7b:23:1e:31 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsPAJZcVHGjfSk/p/byoqSAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhhYjViOWE5MzY4Nzk3YTg2YmFlYmM4MWY2MjNiM2Y0ZTc4 NmY1MWEwHhcNMjUxMjExMjAwMDU1WhcNMjUxMjEyMjAwMDU1WjAzMTEwLwYDVQQD EygwNDg2MmVhZTViMTVjYzc1ZWQyZmMzZDMwNjM1YjkzYzQ2NTYwYjY1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzOIusEYdRS77QeaUmplPg9x48yKp +mKgH+BsJDeGmOHZnoK95lEsxDCxoTvB3p9748flQVktKa1lrE9wLgQByq/DJsu/ Inetr3DgvdKjcQhiVGYYtTfjQfOJATCe6SbNBHug48jqoqJWtddi0RYgoOoYsZkN HF6TNONjAGaRp2hTCBG/AZmB6u7jYTRrdGRIwKKLHJv7sa30Aq+XuDLkQ0iil1aw AwiK2/RDQdlSsce4A/h//9eBtv/8K5vHmcrL6n5zX/k6GB55EfAC2EeVbxogYw0P +jB/t41uiRODk07kEW4jN2h0rmxGZwSOIEvy/5fZgCoH8iQKUaXMSlKaywIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFASGLq5bFcx17S/D0wY1uTxGVgtlMB8GA1UdIwQY MBaAFIq1uak2h5eoa668gfYjs/TnhvUaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaXJXNXFUYUhsNmhycnJ5QjlpT3o5T2VHOVJvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYy82NGM0MzEtNTMzMC00MzdiLWIyMDct MjhmZWNjNjMzOThjLzEvaXJXNXFUYUhsNmhycnJ5QjlpT3o5T2VHOVJvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYy82NGM0MzEtNTMzMC00MzdiLWIyMDctMjhmZWNjNjMzOThj LzEvaXJXNXFUYUhsNmhycnJ5QjlpT3o5T2VHOVJvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAw9yE8sML AXREvt1wI3JFWZT7VPa8Yf3SfhQ1s97nJAMv93Pe0lqeQ7NTKiLDB9k564CdGbeU 78Sq1emsA4xV1d293xXCrHtD6VyvHem4U8KoIJwCsVAfdUi72WFuc8tea0766siJ UJT2KtWiRfTWgAPTwuNS8rgqfVHsdjoQCvdfbuDOLmQZSO73ia8HUCAH0PslaVS5 NUtTIrPrVpFTjoOVVVOOaYNY/+9AdG1F8ZOSdjNSC82b1cLAIJyqMpJfKnzrRBXK cDc7Qb6nwfoCccn0JFsmu/UCJmfuLG7wiztYsgxngDgC2MqRHDd4dQwOcsK4n8jg DluqZx6zeyMeMQ== -----END CERTIFICATE-----Generated at Fri Dec 12 01:34:42 2025 by rpki-client