This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/eaf2e2-1817-40a8-9be8-2507db32c1c4/1/iP9O5iPY-rc8kB0Mvck6Mh6cz7c.mft File: iP9O5iPY-rc8kB0Mvck6Mh6cz7c.mft (raw, json) Hash identifier: 1zO/J7RjMgI16/uX/YNoiqigb8iXeX7EcgjbfNaF/cs= Subject key identifier: 7D:A3:08:60:5C:C6:B8:B9:9C:81:53:C5:85:84:79:15:2B:E6:EF:DA Authority key identifier: 88:FF:4E:E6:23:D8:FA:B7:3C:90:1D:0C:BD:C9:3A:32:1E:9C:CF:B7 Certificate issuer: /CN=88ff4ee623d8fab73c901d0cbdc93a321e9ccfb7 Certificate serial: 019B262D3C3E40869F4C77DAB626DB2F4844 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iP9O5iPY-rc8kB0Mvck6Mh6cz7c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/eaf2e2-1817-40a8-9be8-2507db32c1c4/1/iP9O5iPY-rc8kB0Mvck6Mh6cz7c.mft Manifest number: 0B16 Signing time: Tue 16 Dec 2025 08:00:57 +0000 Manifest this update: Tue 16 Dec 2025 08:00:57 +0000 Manifest next update: Wed 17 Dec 2025 08:00:57 +0000 Files and hashes: 1: 11w9K2dCR0A6XsEVx-Vg9m7G5bM.roa (hash: hj3QFv3Y2FaAu9Oijuk6KKEMBTD9UQTUqjejPr1gs7c=) 2: MR9ZuC-IL_jZ4767dS-IkZgCrJw.roa (hash: Vi7lFCDHTrpEyk68a6k87cSkUHM4wyPXzIO5RtGzU1U=) 3: iP9O5iPY-rc8kB0Mvck6Mh6cz7c.crl (hash: esnZhvkSiK/Sl7FV4cnvb6i0EYN6l0yBMT7G6qd1mo4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/eaf2e2-1817-40a8-9be8-2507db32c1c4/1/iP9O5iPY-rc8kB0Mvck6Mh6cz7c.crl rsync://rpki.ripe.net/repository/DEFAULT/db/eaf2e2-1817-40a8-9be8-2507db32c1c4/1/iP9O5iPY-rc8kB0Mvck6Mh6cz7c.mft rsync://rpki.ripe.net/repository/DEFAULT/iP9O5iPY-rc8kB0Mvck6Mh6cz7c.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 08:00:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:26:2d:3c:3e:40:86:9f:4c:77:da:b6:26:db:2f:48:44 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=88ff4ee623d8fab73c901d0cbdc93a321e9ccfb7 Validity Not Before: Dec 16 08:00:57 2025 GMT Not After : Dec 17 08:00:57 2025 GMT Subject: CN=7da308605cc6b8b99c8153c5858479152be6efda Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:ef:ca:91:ef:5c:17:ea:35:90:de:cb:bb:dc: ce:4f:52:7a:bf:1b:73:e0:20:b7:f5:9b:c3:57:59: 2c:83:0e:39:13:47:59:2c:df:cb:60:7a:62:6e:30: ef:28:a8:e9:1b:73:32:0e:17:16:0e:52:f3:1d:bc: 08:8d:48:cc:23:ba:b0:f3:20:1b:d6:eb:eb:08:58: 80:81:e0:24:8c:48:1b:87:8d:4a:9c:f8:cb:e6:21: 13:4e:1b:93:c6:47:ee:e1:ae:4e:aa:31:b8:5f:91: 5e:73:24:49:97:38:6c:9c:07:0d:76:31:48:5c:5f: 77:48:e7:93:fb:a2:5d:73:60:b3:0a:a2:bb:97:68: 5b:a9:25:b5:0e:5c:77:1c:59:1d:5b:a6:75:4e:e8: 4e:89:99:90:75:e1:53:ee:13:70:e6:eb:3c:d4:c0: 88:c7:62:96:13:e4:a1:8a:6c:4b:45:3a:da:4b:bc: 58:f6:3f:35:eb:4c:61:35:a4:14:19:94:d9:10:b6: 76:6f:21:2d:9c:3d:1f:59:54:ff:5a:80:c0:71:8d: 95:80:9d:c7:84:c8:64:1c:00:9e:1c:d0:ea:75:42: 84:8b:6f:de:72:01:e1:ee:21:b6:d2:c1:24:0f:60: da:5a:e7:d1:67:e2:1b:19:6a:53:26:9d:df:e8:91: ab:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:A3:08:60:5C:C6:B8:B9:9C:81:53:C5:85:84:79:15:2B:E6:EF:DA X509v3 Authority Key Identifier: keyid:88:FF:4E:E6:23:D8:FA:B7:3C:90:1D:0C:BD:C9:3A:32:1E:9C:CF:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iP9O5iPY-rc8kB0Mvck6Mh6cz7c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/eaf2e2-1817-40a8-9be8-2507db32c1c4/1/iP9O5iPY-rc8kB0Mvck6Mh6cz7c.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/db/eaf2e2-1817-40a8-9be8-2507db32c1c4/1/iP9O5iPY-rc8kB0Mvck6Mh6cz7c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 36:e0:0c:3f:5e:ba:a6:ef:dc:11:0e:fa:46:2b:cc:2d:34:97: 66:e5:f2:6b:55:1c:fb:30:77:05:08:9a:fd:a0:96:3d:a8:d1: 97:19:83:66:1a:7e:38:79:93:68:6f:b5:8d:be:92:ba:72:64: e9:32:5b:a9:5b:7c:6a:f2:d8:69:8b:6d:ba:7c:8d:5c:b0:09: f4:bf:c4:f0:00:a3:2e:50:83:31:ea:63:16:bf:35:6f:ce:a1: 17:e8:d1:7f:e8:1a:53:32:c1:77:8d:bd:b0:5d:46:61:5e:4e: c0:b2:3b:27:0b:b2:ee:27:7c:9f:a3:46:94:73:ef:35:08:80: 5e:20:31:80:1e:1f:5b:96:ae:9e:01:a8:f3:0a:e3:fb:12:f5: df:fc:2f:b9:6f:8f:35:5f:31:59:9f:c4:dc:c4:d7:2a:97:f9: 6a:ed:2e:0b:e5:5d:a7:c1:1f:7b:c2:64:d7:df:7d:9e:c0:c8: 33:6f:d8:dc:69:b7:ae:cd:8c:a3:78:06:5d:f4:6a:28:37:a0: 9f:4d:d3:3f:fe:02:33:bc:7f:98:cf:25:ea:12:a8:55:2c:b8: 15:9c:29:fd:3f:c7:42:a4:8a:e4:9a:af:4b:ed:46:4d:cc:f2: 9c:b0:a6:c2:52:11:7c:f8:32:cd:cc:e7:f3:0d:9d:25:60:e5: 12:2e:6f:fe -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsmLTw+QIafTHfatibbL0hEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg4ZmY0ZWU2MjNkOGZhYjczYzkwMWQwY2JkYzkzYTMyMWU5 Y2NmYjcwHhcNMjUxMjE2MDgwMDU3WhcNMjUxMjE3MDgwMDU3WjAzMTEwLwYDVQQD Eyg3ZGEzMDg2MDVjYzZiOGI5OWM4MTUzYzU4NTg0NzkxNTJiZTZlZmRhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtO/Kke9cF+o1kN7Lu9zOT1J6vxtz 4CC39ZvDV1ksgw45E0dZLN/LYHpibjDvKKjpG3MyDhcWDlLzHbwIjUjMI7qw8yAb 1uvrCFiAgeAkjEgbh41KnPjL5iETThuTxkfu4a5OqjG4X5FecyRJlzhsnAcNdjFI XF93SOeT+6Jdc2CzCqK7l2hbqSW1Dlx3HFkdW6Z1TuhOiZmQdeFT7hNw5us81MCI x2KWE+ShimxLRTraS7xY9j8160xhNaQUGZTZELZ2byEtnD0fWVT/WoDAcY2VgJ3H hMhkHACeHNDqdUKEi2/ecgHh7iG20sEkD2DaWufRZ+IbGWpTJp3f6JGrwQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFH2jCGBcxri5nIFTxYWEeRUr5u/aMB8GA1UdIwQY MBaAFIj/TuYj2Pq3PJAdDL3JOjIenM+3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaVA5TzVpUFktcmM4a0IwTXZjazZNaDZjejdjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi9lYWYyZTItMTgxNy00MGE4LTliZTgt MjUwN2RiMzJjMWM0LzEvaVA5TzVpUFktcmM4a0IwTXZjazZNaDZjejdjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYi9lYWYyZTItMTgxNy00MGE4LTliZTgtMjUwN2RiMzJjMWM0 LzEvaVA5TzVpUFktcmM4a0IwTXZjazZNaDZjejdjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANuAMP166 pu/cEQ76RivMLTSXZuXya1Uc+zB3BQia/aCWPajRlxmDZhp+OHmTaG+1jb6SunJk 6TJbqVt8avLYaYttunyNXLAJ9L/E8ACjLlCDMepjFr81b86hF+jRf+gaUzLBd429 sF1GYV5OwLI7Jwuy7id8n6NGlHPvNQiAXiAxgB4fW5aungGo8wrj+xL13/wvuW+P NV8xWZ/E3MTXKpf5au0uC+Vdp8Efe8Jk1999nsDIM2/Y3Gm3rs2Mo3gGXfRqKDeg n03TP/4CM7x/mM8l6hKoVSy4FZwp/T/HQqSK5JqvS+1GTczynLCmwlIRfPgyzczn 8w2dJWDlEi5v/g== -----END CERTIFICATE-----Generated at Tue Dec 16 10:38:00 2025 by rpki-client