This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/a92eb2-b2ba-4efd-bd09-6abb1ccb6153/1/k--iv5CiNyiFJyfxJu3mUobDymc.mft File: k--iv5CiNyiFJyfxJu3mUobDymc.mft (raw, json) Hash identifier: d3aPsP9gzcGX+ZnjJE30wO9DUecKj4jt7nwT55sJbaM= Subject key identifier: DF:53:F7:81:3B:FC:02:A2:AB:92:0A:0A:B6:D8:75:96:72:6F:D6:08 Authority key identifier: 93:EF:A2:BF:90:A2:37:28:85:27:27:F1:26:ED:E6:52:86:C3:CA:67 Certificate issuer: /CN=93efa2bf90a23728852727f126ede65286c3ca67 Certificate serial: 019AE33AC80C35BF772E1299C328F5E09286 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k--iv5CiNyiFJyfxJu3mUobDymc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/a92eb2-b2ba-4efd-bd09-6abb1ccb6153/1/k--iv5CiNyiFJyfxJu3mUobDymc.mft Manifest number: 0526 Signing time: Wed 03 Dec 2025 08:01:11 +0000 Manifest this update: Wed 03 Dec 2025 08:01:11 +0000 Manifest next update: Thu 04 Dec 2025 08:01:11 +0000 Files and hashes: 1: 4s48aLOiVD4PAJlQi3evZjtsYHM.roa (hash: +jROjw0Y1Zl0VbxjrP2tZzucpLOm1pI3G+f+iJEafys=) 2: NfNAqOER9wuwQxKBNjji8NI0Rzg.roa (hash: 2u3dViZZEapET44foaIhQWMMbpM15mq1lfjKgtwOpEg=) 3: ZBxfDXEpCG0ayZxuToVasoI1ik8.roa (hash: B1VklKE9rrrVpqvXpbmoyfKWWVu36iKetX1MZELROAo=) 4: k--iv5CiNyiFJyfxJu3mUobDymc.crl (hash: 4K9VF2XXktAQxGmtEbXg6KdU+qSyG2z9JeqkPzi5SgM=) 5: qxvHfNjR31d0glTSIY-mgfrIS_A.roa (hash: xq+U0zDak1nk6R/C5yECXTx597LdOEIOL8DRV04FkGM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/a92eb2-b2ba-4efd-bd09-6abb1ccb6153/1/k--iv5CiNyiFJyfxJu3mUobDymc.crl rsync://rpki.ripe.net/repository/DEFAULT/f2/a92eb2-b2ba-4efd-bd09-6abb1ccb6153/1/k--iv5CiNyiFJyfxJu3mUobDymc.mft rsync://rpki.ripe.net/repository/DEFAULT/k--iv5CiNyiFJyfxJu3mUobDymc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 04 Dec 2025 08:01:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:e3:3a:c8:0c:35:bf:77:2e:12:99:c3:28:f5:e0:92:86 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=93efa2bf90a23728852727f126ede65286c3ca67 Validity Not Before: Dec 3 08:01:11 2025 GMT Not After : Dec 4 08:01:11 2025 GMT Subject: CN=df53f7813bfc02a2ab920a0ab6d87596726fd608 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:c1:ad:0b:ba:99:ec:57:b6:2b:9b:ca:37:7e: be:27:8b:c2:97:ad:13:12:20:79:7e:f2:e5:6b:bf: be:94:92:5e:ee:89:0d:45:85:2d:cf:a1:34:8c:7f: 8c:d0:78:3e:60:a9:50:3b:7a:48:26:78:a6:f5:c3: 21:54:11:db:04:b1:d3:f4:73:32:04:77:f6:0a:17: c7:ca:ff:97:88:55:c4:89:b2:d2:89:95:a5:25:e1: 56:86:9c:b8:bd:68:f8:41:6c:2c:52:c0:27:21:d3: 2e:65:5e:17:b7:82:b0:2e:f0:5a:2b:2a:32:9b:3a: 74:2f:a4:af:b6:5f:d8:41:4a:ed:89:f9:e2:40:da: 82:d8:b4:52:4d:6f:0d:ce:90:7b:36:3a:f3:b4:87: a7:7b:3d:78:a6:98:30:f1:bb:8a:db:df:aa:89:4e: 1c:dd:c8:f7:c7:c8:13:b4:38:01:7f:9a:d7:f6:a9: 81:df:0f:ef:22:d9:91:38:e9:12:1b:ce:f2:a0:3d: 45:70:7d:70:04:96:75:47:85:8c:9e:35:d0:00:bb: 4a:d2:2f:ca:4e:5f:ad:d6:a9:ac:87:e8:b4:36:64: c1:d6:f3:c9:d3:01:86:75:a8:56:04:d3:4a:bd:bd: 6d:99:d0:cd:25:59:04:83:c0:77:a1:87:59:63:1f: e1:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:53:F7:81:3B:FC:02:A2:AB:92:0A:0A:B6:D8:75:96:72:6F:D6:08 X509v3 Authority Key Identifier: keyid:93:EF:A2:BF:90:A2:37:28:85:27:27:F1:26:ED:E6:52:86:C3:CA:67 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k--iv5CiNyiFJyfxJu3mUobDymc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/a92eb2-b2ba-4efd-bd09-6abb1ccb6153/1/k--iv5CiNyiFJyfxJu3mUobDymc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/a92eb2-b2ba-4efd-bd09-6abb1ccb6153/1/k--iv5CiNyiFJyfxJu3mUobDymc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0b:ff:04:48:20:3a:be:1b:91:4b:68:52:5d:8c:4a:a6:d0:ec: 92:01:da:8d:3e:e9:09:05:df:8e:63:bc:38:0c:72:04:a3:16: 7f:06:7e:99:85:8d:14:21:8a:a5:73:78:68:e1:49:b0:f4:54: e1:0b:69:43:19:29:f5:d6:22:6d:60:01:e2:1e:05:8e:3c:3f: 32:21:64:35:d0:98:32:39:93:25:72:18:a5:ef:73:a1:59:0c: 58:f9:31:26:69:e8:de:70:b9:75:20:0b:e7:f0:91:8e:6c:4a: 2f:82:7e:87:b7:a1:56:2a:4d:2c:d6:4c:5a:b6:7a:45:e1:97: 3c:35:ac:e2:16:20:eb:c2:fa:2d:9d:51:c2:23:46:fd:6d:51: 08:58:f9:02:73:d8:2d:31:da:19:e1:b8:9b:8d:1c:10:ca:16: 1f:23:1b:10:bc:e4:00:d7:16:3f:f2:09:07:5d:21:76:b0:64: 23:91:2c:66:59:70:ac:39:92:ec:57:ba:c6:08:bc:d1:2f:00: 83:f4:35:02:5f:7b:b6:c6:64:e4:59:b0:87:1d:39:ea:9e:3a: 60:7d:68:3b:df:aa:8e:f5:58:7d:d7:0b:d9:74:43:b8:93:88: de:87:d2:ab:97:0c:9d:b9:2a:05:90:86:32:e9:55:55:bf:fa: 8c:85:ed:8c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrjOsgMNb93LhKZwyj14JKGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkzZWZhMmJmOTBhMjM3Mjg4NTI3MjdmMTI2ZWRlNjUyODZj M2NhNjcwHhcNMjUxMjAzMDgwMTExWhcNMjUxMjA0MDgwMTExWjAzMTEwLwYDVQQD EyhkZjUzZjc4MTNiZmMwMmEyYWI5MjBhMGFiNmQ4NzU5NjcyNmZkNjA4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwMGtC7qZ7Fe2K5vKN36+J4vCl60T EiB5fvLla7++lJJe7okNRYUtz6E0jH+M0Hg+YKlQO3pIJnim9cMhVBHbBLHT9HMy BHf2ChfHyv+XiFXEibLSiZWlJeFWhpy4vWj4QWwsUsAnIdMuZV4Xt4KwLvBaKyoy mzp0L6Svtl/YQUrtifniQNqC2LRSTW8NzpB7NjrztIenez14ppgw8buK29+qiU4c 3cj3x8gTtDgBf5rX9qmB3w/vItmROOkSG87yoD1FcH1wBJZ1R4WMnjXQALtK0i/K Tl+t1qmsh+i0NmTB1vPJ0wGGdahWBNNKvb1tmdDNJVkEg8B3oYdZYx/hEwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFN9T94E7/AKiq5IKCrbYdZZyb9YIMB8GA1UdIwQY MBaAFJPvor+QojcohScn8Sbt5lKGw8pnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvay0taXY1Q2lOeWlGSnlmeEp1M21Vb2JEeW1jLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMi9hOTJlYjItYjJiYS00ZWZkLWJkMDkt NmFiYjFjY2I2MTUzLzEvay0taXY1Q2lOeWlGSnlmeEp1M21Vb2JEeW1jLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMi9hOTJlYjItYjJiYS00ZWZkLWJkMDktNmFiYjFjY2I2MTUz LzEvay0taXY1Q2lOeWlGSnlmeEp1M21Vb2JEeW1jLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAC/8ESCA6 vhuRS2hSXYxKptDskgHajT7pCQXfjmO8OAxyBKMWfwZ+mYWNFCGKpXN4aOFJsPRU 4QtpQxkp9dYibWAB4h4Fjjw/MiFkNdCYMjmTJXIYpe9zoVkMWPkxJmno3nC5dSAL 5/CRjmxKL4J+h7ehVipNLNZMWrZ6ReGXPDWs4hYg68L6LZ1RwiNG/W1RCFj5AnPY LTHaGeG4m40cEMoWHyMbELzkANcWP/IJB10hdrBkI5EsZllwrDmS7Fe6xgi80S8A g/Q1Al97tsZk5Fmwhx056p46YH1oO9+qjvVYfdcL2XRDuJOI3ofSq5cMnbkqBZCG MulVVb/6jIXtjA== -----END CERTIFICATE-----Generated at Wed Dec 3 11:47:39 2025 by rpki-client