This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/945305-0a63-4c2f-aaff-cb220b719e78/1/IFlFRDxbJeTc9iA_BhrATTaHFVQ.mft File: IFlFRDxbJeTc9iA_BhrATTaHFVQ.mft (raw, json) Hash identifier: hgfJoTi465DiVYWsLm0Bb4Uc0U8MOmXvJA1wWjOod2g= Subject key identifier: 86:6B:00:F9:14:3F:D9:89:B3:34:06:D1:F3:83:E2:8E:AC:49:AC:7E Authority key identifier: 20:59:45:44:3C:5B:25:E4:DC:F6:20:3F:06:1A:C0:4D:36:87:15:54 Certificate issuer: /CN=205945443c5b25e4dcf6203f061ac04d36871554 Certificate serial: 019B25F66441A8679077BEE5DC945F1C7D4B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IFlFRDxbJeTc9iA_BhrATTaHFVQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/945305-0a63-4c2f-aaff-cb220b719e78/1/IFlFRDxbJeTc9iA_BhrATTaHFVQ.mft Manifest number: 177E Signing time: Tue 16 Dec 2025 07:01:03 +0000 Manifest this update: Tue 16 Dec 2025 07:01:03 +0000 Manifest next update: Wed 17 Dec 2025 07:01:03 +0000 Files and hashes: 1: IFlFRDxbJeTc9iA_BhrATTaHFVQ.crl (hash: GImEprBl3W9Xan5F3oV5wgNeIsnvzCpzzrDPL9RxQWw=) 2: vwwOJsNwZhQ7jXxQBO6C3CzaqW4.roa (hash: PgsS8twf0GYuOEotT5Wskvo1GlMh/1Ykh+edTuYgZgU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/945305-0a63-4c2f-aaff-cb220b719e78/1/IFlFRDxbJeTc9iA_BhrATTaHFVQ.crl rsync://rpki.ripe.net/repository/DEFAULT/d0/945305-0a63-4c2f-aaff-cb220b719e78/1/IFlFRDxbJeTc9iA_BhrATTaHFVQ.mft rsync://rpki.ripe.net/repository/DEFAULT/IFlFRDxbJeTc9iA_BhrATTaHFVQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 07:01:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:25:f6:64:41:a8:67:90:77:be:e5:dc:94:5f:1c:7d:4b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=205945443c5b25e4dcf6203f061ac04d36871554 Validity Not Before: Dec 16 07:01:03 2025 GMT Not After : Dec 17 07:01:03 2025 GMT Subject: CN=866b00f9143fd989b33406d1f383e28eac49ac7e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:66:d4:33:d1:47:a7:4e:e2:d9:33:02:8f:68: c4:4e:73:86:06:8a:50:8f:7c:bc:32:0a:c6:19:aa: c4:ec:06:76:28:12:18:13:e3:6c:43:96:62:79:3a: 63:1b:e4:5d:8c:7c:94:03:27:14:6a:fd:e6:15:02: 7c:19:8d:cf:2b:4b:7b:48:9f:61:51:3a:72:60:db: 1d:96:ff:33:9f:d8:66:00:b9:42:4c:8d:6c:71:6c: 5a:59:5f:9d:88:99:31:c2:ff:a2:e9:84:63:51:79: c2:13:5e:c7:5b:7c:15:8f:01:94:f2:d1:84:98:3b: 44:18:db:1e:da:c3:d5:f2:2e:ae:79:a1:2c:f2:d0: 3c:92:74:53:85:1b:b5:67:9f:1d:5f:27:cb:ae:c6: 7d:9f:53:56:e8:7d:78:0f:24:a7:ca:50:08:f4:a7: 53:4b:6e:5e:c5:20:14:fb:13:cc:9a:35:32:bd:5c: 57:5a:f4:bd:90:e8:48:8f:fa:d9:a3:06:df:ae:ea: b2:1d:c3:2d:f5:67:88:b2:6a:77:75:1d:e7:13:50: 72:ed:77:5a:b4:29:0e:ee:df:af:89:64:61:36:4c: 90:d6:4f:9f:7f:37:90:b3:a5:76:2e:b4:36:79:e9: e9:34:db:25:6c:4f:6f:02:76:cb:64:80:13:e4:6a: ea:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:6B:00:F9:14:3F:D9:89:B3:34:06:D1:F3:83:E2:8E:AC:49:AC:7E X509v3 Authority Key Identifier: keyid:20:59:45:44:3C:5B:25:E4:DC:F6:20:3F:06:1A:C0:4D:36:87:15:54 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IFlFRDxbJeTc9iA_BhrATTaHFVQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/945305-0a63-4c2f-aaff-cb220b719e78/1/IFlFRDxbJeTc9iA_BhrATTaHFVQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/945305-0a63-4c2f-aaff-cb220b719e78/1/IFlFRDxbJeTc9iA_BhrATTaHFVQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0a:ea:3a:05:ce:3a:a9:10:c4:2e:a1:9f:40:9a:93:bb:eb:85: 13:45:e5:d9:13:3f:8d:cb:a7:55:a8:20:7b:89:ac:e1:a3:55: 2a:f4:7a:99:a4:7b:27:88:41:25:28:0e:0b:64:56:da:25:82: fc:6a:1c:12:0b:d8:17:0b:5d:ba:60:9a:bb:89:4e:72:42:52: 23:3d:7a:c8:71:4a:61:49:b0:b6:44:a2:8c:72:3e:4f:07:da: 88:ac:f9:4c:ae:88:8c:a2:02:97:92:80:6a:68:95:97:90:d8: 5a:74:41:d9:4e:9e:71:d6:0a:00:9a:c8:e8:b9:b2:c0:0b:f5: 42:bd:d4:50:e2:cd:09:48:95:e2:52:73:5b:4e:18:06:52:63: 55:fc:93:c2:df:ba:6d:f0:7e:67:89:5c:a5:8a:79:73:ca:da: 96:e9:d4:64:c7:ba:d6:87:02:d8:70:35:96:03:4d:c0:56:8c: 90:29:17:f4:0d:f3:8f:c1:55:59:16:b2:f6:33:99:b9:6a:04: 9b:a1:09:60:03:7c:5f:b4:dd:23:58:4e:01:ff:b5:d2:9c:6d: 53:47:9e:c4:31:43:0b:39:97:65:ee:64:63:69:7f:3d:ce:f8: 79:cf:6e:a6:a6:9c:bc:22:2b:03:92:ba:c6:b7:c0:a3:8e:c1: 45:ae:f9:6e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsl9mRBqGeQd77l3JRfHH1LMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIwNTk0NTQ0M2M1YjI1ZTRkY2Y2MjAzZjA2MWFjMDRkMzY4 NzE1NTQwHhcNMjUxMjE2MDcwMTAzWhcNMjUxMjE3MDcwMTAzWjAzMTEwLwYDVQQD Eyg4NjZiMDBmOTE0M2ZkOTg5YjMzNDA2ZDFmMzgzZTI4ZWFjNDlhYzdlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsmbUM9FHp07i2TMCj2jETnOGBopQ j3y8MgrGGarE7AZ2KBIYE+NsQ5ZieTpjG+RdjHyUAycUav3mFQJ8GY3PK0t7SJ9h UTpyYNsdlv8zn9hmALlCTI1scWxaWV+diJkxwv+i6YRjUXnCE17HW3wVjwGU8tGE mDtEGNse2sPV8i6ueaEs8tA8knRThRu1Z58dXyfLrsZ9n1NW6H14DySnylAI9KdT S25exSAU+xPMmjUyvVxXWvS9kOhIj/rZowbfruqyHcMt9WeIsmp3dR3nE1By7Xda tCkO7t+viWRhNkyQ1k+ffzeQs6V2LrQ2eenpNNslbE9vAnbLZIAT5GrqHQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIZrAPkUP9mJszQG0fOD4o6sSax+MB8GA1UdIwQY MBaAFCBZRUQ8WyXk3PYgPwYawE02hxVUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSUZsRlJEeGJKZVRjOWlBX0JockFUVGFIRlZRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC85NDUzMDUtMGE2My00YzJmLWFhZmYt Y2IyMjBiNzE5ZTc4LzEvSUZsRlJEeGJKZVRjOWlBX0JockFUVGFIRlZRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMC85NDUzMDUtMGE2My00YzJmLWFhZmYtY2IyMjBiNzE5ZTc4 LzEvSUZsRlJEeGJKZVRjOWlBX0JockFUVGFIRlZRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACuo6Bc46 qRDELqGfQJqTu+uFE0Xl2RM/jcunVagge4ms4aNVKvR6maR7J4hBJSgOC2RW2iWC /GocEgvYFwtdumCau4lOckJSIz16yHFKYUmwtkSijHI+TwfaiKz5TK6IjKICl5KA amiVl5DYWnRB2U6ecdYKAJrI6LmywAv1Qr3UUOLNCUiV4lJzW04YBlJjVfyTwt+6 bfB+Z4lcpYp5c8ralunUZMe61ocC2HA1lgNNwFaMkCkX9A3zj8FVWRay9jOZuWoE m6EJYAN8X7TdI1hOAf+10pxtU0eexDFDCzmXZe5kY2l/Pc74ec9upqacvCIrA5K6 xrfAo47BRa75bg== -----END CERTIFICATE-----Generated at Tue Dec 16 11:48:00 2025 by rpki-client