This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/e251dc-8b2b-4f3d-b636-15422478800b/1/IEoJZQTNu58vt_0OZkBtUm_hC1o.mft File: IEoJZQTNu58vt_0OZkBtUm_hC1o.mft (raw, json) Hash identifier: E5Jad2UlNDI4l/v6fEigLxS9wNUiICLwqnx9PUh5QRo= Subject key identifier: 7A:9B:64:DB:14:A8:40:D8:A6:3A:D9:2B:45:E0:5E:33:EC:98:8C:41 Authority key identifier: 20:4A:09:65:04:CD:BB:9F:2F:B7:FD:0E:66:40:6D:52:6F:E1:0B:5A Certificate issuer: /CN=204a096504cdbb9f2fb7fd0e66406d526fe10b5a Certificate serial: 019B1E7425467793A33BC7A5578837F1FC4F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IEoJZQTNu58vt_0OZkBtUm_hC1o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/e251dc-8b2b-4f3d-b636-15422478800b/1/IEoJZQTNu58vt_0OZkBtUm_hC1o.mft Manifest number: 1534 Signing time: Sun 14 Dec 2025 20:01:26 +0000 Manifest this update: Sun 14 Dec 2025 20:01:26 +0000 Manifest next update: Mon 15 Dec 2025 20:01:26 +0000 Files and hashes: 1: IEoJZQTNu58vt_0OZkBtUm_hC1o.crl (hash: BbQMPcBNZ+xzAuMb5Uw0DDeBYniG2R+fbXDnX/xxDcM=) 2: ZCDIooS_ImzZeN5QrbFaFhO5dyA.roa (hash: TP421izhVwKSZitQyZKTA1SgQgPy6vE7WxBJa4Db6y0=) 3: xOQ7AmZa9_C69z9KUz6w5PLIpQA.roa (hash: 8+VSRj7tw2mCh7Z/e6KhYhg5OTkoPLOgLEVa0Q5ZizM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/e251dc-8b2b-4f3d-b636-15422478800b/1/IEoJZQTNu58vt_0OZkBtUm_hC1o.crl rsync://rpki.ripe.net/repository/DEFAULT/c5/e251dc-8b2b-4f3d-b636-15422478800b/1/IEoJZQTNu58vt_0OZkBtUm_hC1o.mft rsync://rpki.ripe.net/repository/DEFAULT/IEoJZQTNu58vt_0OZkBtUm_hC1o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 15 Dec 2025 14:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:1e:74:25:46:77:93:a3:3b:c7:a5:57:88:37:f1:fc:4f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=204a096504cdbb9f2fb7fd0e66406d526fe10b5a Validity Not Before: Dec 14 20:01:26 2025 GMT Not After : Dec 15 20:01:26 2025 GMT Subject: CN=7a9b64db14a840d8a63ad92b45e05e33ec988c41 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:a4:fd:95:09:d8:a9:85:1b:15:53:48:15:87: 32:0e:39:b4:ec:95:03:bb:99:f7:4b:b0:56:4b:20: ef:58:17:ec:d3:43:0d:13:d1:9c:de:bf:dd:b8:82: d6:69:5e:e6:42:3f:46:8a:c7:79:89:9c:98:d9:24: 93:fc:43:00:91:69:a9:80:d0:1f:17:8b:46:b8:07: d1:b9:59:dd:64:14:47:4a:19:32:48:c0:8e:77:f8: 64:eb:dd:4b:69:7a:d4:22:36:0a:c8:2f:9b:4d:09: 13:5f:3a:17:52:25:53:44:82:36:97:1e:4a:2f:9c: d1:9f:8f:cc:3c:de:55:5a:e9:9e:a4:ba:01:a1:34: f6:4f:a0:54:34:18:84:4b:bc:47:dd:41:a9:9f:7a: 33:bf:40:b2:47:6d:48:65:34:d1:4e:b0:7c:2a:58: a5:d0:b3:fd:64:c2:b2:c5:50:95:d1:de:60:dd:8c: 6c:38:21:67:77:ef:62:0a:7d:1b:8d:09:4b:b9:b3: b5:f7:1d:b7:ee:5d:f7:6c:19:cb:3a:4e:01:ca:84: 01:7a:8b:2c:6b:1c:b2:6f:fb:63:ef:21:df:e9:2e: 4b:3c:55:06:bb:f0:ba:a9:ff:d1:3b:f0:54:fc:cb: 40:ae:8d:a2:f2:16:a2:07:af:d6:e4:84:c8:48:f9: 40:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:9B:64:DB:14:A8:40:D8:A6:3A:D9:2B:45:E0:5E:33:EC:98:8C:41 X509v3 Authority Key Identifier: keyid:20:4A:09:65:04:CD:BB:9F:2F:B7:FD:0E:66:40:6D:52:6F:E1:0B:5A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IEoJZQTNu58vt_0OZkBtUm_hC1o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/e251dc-8b2b-4f3d-b636-15422478800b/1/IEoJZQTNu58vt_0OZkBtUm_hC1o.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/e251dc-8b2b-4f3d-b636-15422478800b/1/IEoJZQTNu58vt_0OZkBtUm_hC1o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 34:cb:4f:02:b9:23:97:45:f8:68:1f:dd:00:85:17:10:05:bc: 04:f1:36:be:2a:39:25:01:9e:06:9d:eb:b7:e2:6e:e2:ac:88: f6:89:e0:6e:f8:4e:ba:f8:ec:0e:f2:e7:ab:55:63:ca:17:69: b5:47:1a:27:ac:6a:05:a6:1c:a7:30:68:b0:68:6b:68:cc:2f: ee:eb:4e:05:d4:d7:54:cf:2f:81:c0:68:9f:10:82:62:5a:a2: d0:29:1b:f3:5e:86:c2:1b:e9:d3:fc:f4:80:9b:08:f3:62:f7: 56:57:9e:cd:b9:ac:ea:e1:7d:0e:ff:a3:eb:2f:82:32:53:a9: 91:a2:08:57:ce:06:ca:63:b4:d3:aa:8c:61:45:1a:85:85:d1: 19:11:d0:27:81:35:63:06:be:78:30:3b:ab:d4:82:11:ae:bf: d5:9d:12:7f:87:06:31:6e:96:ba:80:2d:df:01:cc:83:8e:ae: c5:a1:da:fc:9c:e6:ca:cd:0e:a2:c7:28:e7:ce:1a:ce:b8:b9: 35:1c:e8:60:fc:db:42:5b:16:c5:81:a1:a3:35:1d:56:d6:a1: 0a:5c:42:8f:6d:66:02:5f:c6:df:83:78:cf:fa:69:b9:80:34: a5:79:9b:0d:44:ca:97:77:aa:b0:3e:46:af:6e:13:68:5a:ee: ad:e9:27:ff -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsedCVGd5OjO8elV4g38fxPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIwNGEwOTY1MDRjZGJiOWYyZmI3ZmQwZTY2NDA2ZDUyNmZl MTBiNWEwHhcNMjUxMjE0MjAwMTI2WhcNMjUxMjE1MjAwMTI2WjAzMTEwLwYDVQQD Eyg3YTliNjRkYjE0YTg0MGQ4YTYzYWQ5MmI0NWUwNWUzM2VjOTg4YzQxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuaT9lQnYqYUbFVNIFYcyDjm07JUD u5n3S7BWSyDvWBfs00MNE9Gc3r/duILWaV7mQj9Gisd5iZyY2SST/EMAkWmpgNAf F4tGuAfRuVndZBRHShkySMCOd/hk691LaXrUIjYKyC+bTQkTXzoXUiVTRII2lx5K L5zRn4/MPN5VWumepLoBoTT2T6BUNBiES7xH3UGpn3ozv0CyR21IZTTRTrB8Klil 0LP9ZMKyxVCV0d5g3YxsOCFnd+9iCn0bjQlLubO19x237l33bBnLOk4ByoQBeoss axyyb/tj7yHf6S5LPFUGu/C6qf/RO/BU/MtAro2i8haiB6/W5ITISPlApwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHqbZNsUqEDYpjrZK0XgXjPsmIxBMB8GA1UdIwQY MBaAFCBKCWUEzbufL7f9DmZAbVJv4QtaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSUVvSlpRVE51NTh2dF8wT1prQnRVbV9oQzFvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNS9lMjUxZGMtOGIyYi00ZjNkLWI2MzYt MTU0MjI0Nzg4MDBiLzEvSUVvSlpRVE51NTh2dF8wT1prQnRVbV9oQzFvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNS9lMjUxZGMtOGIyYi00ZjNkLWI2MzYtMTU0MjI0Nzg4MDBi LzEvSUVvSlpRVE51NTh2dF8wT1prQnRVbV9oQzFvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANMtPArkj l0X4aB/dAIUXEAW8BPE2vio5JQGeBp3rt+Ju4qyI9ongbvhOuvjsDvLnq1Vjyhdp tUcaJ6xqBaYcpzBosGhraMwv7utOBdTXVM8vgcBonxCCYlqi0Ckb816Gwhvp0/z0 gJsI82L3Vleezbms6uF9Dv+j6y+CMlOpkaIIV84GymO006qMYUUahYXRGRHQJ4E1 Ywa+eDA7q9SCEa6/1Z0Sf4cGMW6WuoAt3wHMg46uxaHa/Jzmys0Oosco584azri5 NRzoYPzbQlsWxYGhozUdVtahClxCj21mAl/G34N4z/ppuYA0pXmbDUTKl3eqsD5G r24TaFrurekn/w== -----END CERTIFICATE-----Generated at Sun Dec 14 22:56:34 2025 by rpki-client