This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/922bcd-f1ad-4d63-8243-294b1aa14866/1/iVNk3Y_3MKkIsJtfmRPBU_wWqjw.mft File: iVNk3Y_3MKkIsJtfmRPBU_wWqjw.mft (raw, json) Hash identifier: RbQYbov5Kmul57GoWZsD0B820gptDafZ44+b0RBypLI= Subject key identifier: F8:B6:3B:86:DA:AF:87:63:11:99:E0:30:D5:1E:50:CA:36:6E:95:BE Authority key identifier: 89:53:64:DD:8F:F7:30:A9:08:B0:9B:5F:99:13:C1:53:FC:16:AA:3C Certificate issuer: /CN=895364dd8ff730a908b09b5f9913c153fc16aa3c Certificate serial: 019B38A1C4D1C1206EDC2B26412A09AB9925 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iVNk3Y_3MKkIsJtfmRPBU_wWqjw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/922bcd-f1ad-4d63-8243-294b1aa14866/1/iVNk3Y_3MKkIsJtfmRPBU_wWqjw.mft Manifest number: 1789 Signing time: Fri 19 Dec 2025 22:01:24 +0000 Manifest this update: Fri 19 Dec 2025 22:01:24 +0000 Manifest next update: Sat 20 Dec 2025 22:01:24 +0000 Files and hashes: 1: iVNk3Y_3MKkIsJtfmRPBU_wWqjw.crl (hash: KUcK1YjQxG1vxExXvmZMPhvcBJpZfdseKxzj10JDeSE=) 2: vZncObou1n1Gou3XB_i7Ru4V5WA.roa (hash: iik1zhTFoCIgqbBLWbxX8UR2ffHIMvhG03bvL/Xp/YU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/922bcd-f1ad-4d63-8243-294b1aa14866/1/iVNk3Y_3MKkIsJtfmRPBU_wWqjw.crl rsync://rpki.ripe.net/repository/DEFAULT/b7/922bcd-f1ad-4d63-8243-294b1aa14866/1/iVNk3Y_3MKkIsJtfmRPBU_wWqjw.mft rsync://rpki.ripe.net/repository/DEFAULT/iVNk3Y_3MKkIsJtfmRPBU_wWqjw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 22:01:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:38:a1:c4:d1:c1:20:6e:dc:2b:26:41:2a:09:ab:99:25 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=895364dd8ff730a908b09b5f9913c153fc16aa3c Validity Not Before: Dec 19 22:01:24 2025 GMT Not After : Dec 20 22:01:24 2025 GMT Subject: CN=f8b63b86daaf87631199e030d51e50ca366e95be Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:5f:d9:83:14:8a:b1:25:e2:c2:41:00:61:a8: 91:97:92:a3:68:8d:07:4c:97:a0:c1:5b:42:7d:a4: 44:2e:68:63:00:48:0d:07:1c:c3:ed:2d:83:29:e3: ba:df:33:9c:72:2c:08:c0:e7:60:be:03:71:a4:62: 13:8f:a4:04:93:ce:51:d9:62:ee:41:04:bb:5d:91: 46:6b:92:d1:f9:ef:93:50:2c:90:28:3a:1b:05:8b: 85:40:c7:e1:2e:f6:77:2c:21:d8:18:64:33:63:eb: b7:b4:9a:e2:51:ed:3a:3d:56:50:88:bb:71:b8:6f: 1d:85:f8:bc:6e:9e:56:5e:e1:1d:80:b6:e2:d9:ee: 35:3e:94:1c:fc:89:5c:1e:27:bb:fd:4e:78:c8:92: 85:5e:16:57:60:aa:fc:b0:ec:98:0f:85:59:b4:18: 71:c8:d5:95:3e:65:fe:9b:6d:8d:3f:e8:a4:20:6d: d8:ce:01:7c:55:f7:25:9b:01:58:a7:f8:3c:e4:34: 8e:2b:02:3c:4f:75:b2:9a:8c:97:fb:7a:0a:bb:f1: f7:0f:31:8e:67:f6:b6:88:f3:70:f9:c5:50:ab:47: aa:67:8a:fe:9c:f2:f3:ad:53:ce:6e:7e:c1:ad:d2: 29:0d:f7:15:ef:f9:3f:24:31:c0:50:0e:37:c8:2e: 89:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:B6:3B:86:DA:AF:87:63:11:99:E0:30:D5:1E:50:CA:36:6E:95:BE X509v3 Authority Key Identifier: keyid:89:53:64:DD:8F:F7:30:A9:08:B0:9B:5F:99:13:C1:53:FC:16:AA:3C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iVNk3Y_3MKkIsJtfmRPBU_wWqjw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/922bcd-f1ad-4d63-8243-294b1aa14866/1/iVNk3Y_3MKkIsJtfmRPBU_wWqjw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/922bcd-f1ad-4d63-8243-294b1aa14866/1/iVNk3Y_3MKkIsJtfmRPBU_wWqjw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 79:a8:4d:5d:c1:22:37:d5:03:7d:d6:d0:49:48:63:aa:a6:3a: db:1b:09:fc:74:87:5d:88:86:64:71:21:1c:55:2e:c0:77:b7: b6:75:fb:a9:44:11:62:82:90:7b:bf:1c:c7:16:bf:a3:11:34: fd:a3:36:b3:65:82:b0:b6:a2:d5:7c:95:2b:a8:77:c1:c5:10: 02:a6:3e:94:df:5e:5b:0f:2b:63:d4:75:9d:d4:70:2f:be:f4: a8:db:56:ce:41:fc:0c:41:cd:92:5f:6e:70:1d:0b:b8:a3:f2: e7:2d:44:eb:6f:17:56:a6:19:03:c7:bf:26:74:37:b7:8c:47: b5:ef:3b:58:0f:a5:a6:99:07:66:d2:37:36:99:4a:6e:fa:f1: 40:5b:ed:0c:51:a7:52:67:f9:aa:fa:f3:7f:e9:40:f6:f4:cc: 5b:14:82:81:d3:39:df:61:1f:7a:f4:71:40:7d:0b:a1:e5:72: 31:04:5d:cb:90:b5:3a:a6:1c:9b:b9:74:6f:d0:5d:53:83:95: 8b:f6:b3:a1:04:e6:46:50:99:23:35:94:7a:8a:d0:bf:62:0d: 87:69:29:1e:47:9e:94:98:11:6c:1c:79:aa:49:03:f6:e2:76: 11:d4:65:b5:39:22:a8:44:e5:b6:b4:7e:e2:68:d1:e1:c9:b1: eb:df:73:83 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs4ocTRwSBu3CsmQSoJq5klMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg5NTM2NGRkOGZmNzMwYTkwOGIwOWI1Zjk5MTNjMTUzZmMx NmFhM2MwHhcNMjUxMjE5MjIwMTI0WhcNMjUxMjIwMjIwMTI0WjAzMTEwLwYDVQQD EyhmOGI2M2I4NmRhYWY4NzYzMTE5OWUwMzBkNTFlNTBjYTM2NmU5NWJlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmF/ZgxSKsSXiwkEAYaiRl5KjaI0H TJegwVtCfaRELmhjAEgNBxzD7S2DKeO63zOcciwIwOdgvgNxpGITj6QEk85R2WLu QQS7XZFGa5LR+e+TUCyQKDobBYuFQMfhLvZ3LCHYGGQzY+u3tJriUe06PVZQiLtx uG8dhfi8bp5WXuEdgLbi2e41PpQc/IlcHie7/U54yJKFXhZXYKr8sOyYD4VZtBhx yNWVPmX+m22NP+ikIG3YzgF8VfclmwFYp/g85DSOKwI8T3WymoyX+3oKu/H3DzGO Z/a2iPNw+cVQq0eqZ4r+nPLzrVPObn7BrdIpDfcV7/k/JDHAUA43yC6JXwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPi2O4bar4djEZngMNUeUMo2bpW+MB8GA1UdIwQY MBaAFIlTZN2P9zCpCLCbX5kTwVP8Fqo8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaVZOazNZXzNNS2tJc0p0Zm1SUEJVX3dXcWp3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNy85MjJiY2QtZjFhZC00ZDYzLTgyNDMt Mjk0YjFhYTE0ODY2LzEvaVZOazNZXzNNS2tJc0p0Zm1SUEJVX3dXcWp3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNy85MjJiY2QtZjFhZC00ZDYzLTgyNDMtMjk0YjFhYTE0ODY2 LzEvaVZOazNZXzNNS2tJc0p0Zm1SUEJVX3dXcWp3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeahNXcEi N9UDfdbQSUhjqqY62xsJ/HSHXYiGZHEhHFUuwHe3tnX7qUQRYoKQe78cxxa/oxE0 /aM2s2WCsLai1XyVK6h3wcUQAqY+lN9eWw8rY9R1ndRwL770qNtWzkH8DEHNkl9u cB0LuKPy5y1E628XVqYZA8e/JnQ3t4xHte87WA+lppkHZtI3NplKbvrxQFvtDFGn Umf5qvrzf+lA9vTMWxSCgdM532EfevRxQH0LoeVyMQRdy5C1OqYcm7l0b9BdU4OV i/azoQTmRlCZIzWUeorQv2INh2kpHkeelJgRbBx5qkkD9uJ2EdRltTkiqETltrR+ 4mjR4cmx699zgw== -----END CERTIFICATE-----Generated at Sat Dec 20 07:34:01 2025 by rpki-client