This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/eb4fc7-b414-4798-b756-1a0e5048632a/1/ikisPvcnnA9rw5CPJ-2wkbWmWsU.mft File: ikisPvcnnA9rw5CPJ-2wkbWmWsU.mft (raw, json) Hash identifier: KPP/mQKjNG64YgnG7bIhy1sb+oBJVF04CkL4eon7oqY= Subject key identifier: BC:B7:83:1C:0B:61:E6:B6:4A:72:5A:B3:83:70:7A:02:65:E9:DA:16 Authority key identifier: 8A:48:AC:3E:F7:27:9C:0F:6B:C3:90:8F:27:ED:B0:91:B5:A6:5A:C5 Certificate issuer: /CN=8a48ac3ef7279c0f6bc3908f27edb091b5a65ac5 Certificate serial: 019B0E2523A7EDCFA7E8D3658C94275600F2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ikisPvcnnA9rw5CPJ-2wkbWmWsU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/eb4fc7-b414-4798-b756-1a0e5048632a/1/ikisPvcnnA9rw5CPJ-2wkbWmWsU.mft Manifest number: 1770 Signing time: Thu 11 Dec 2025 16:01:13 +0000 Manifest this update: Thu 11 Dec 2025 16:01:13 +0000 Manifest next update: Fri 12 Dec 2025 16:01:13 +0000 Files and hashes: 1: Y5SHLkym5EnCD8MfwTIMclhP_Hk.roa (hash: 4DOa2lF9/Fyb4YOZbeBJmTOtFtNcdwU9BIHDAS+IUPA=) 2: ZyyMUpD8BracjmDLdZi2eYsV3GA.roa (hash: kndWXz3QPBLyWguASqaNYsH4u94S2FJubqWiONIhSqU=) 3: ikisPvcnnA9rw5CPJ-2wkbWmWsU.crl (hash: Ut9mSaQ2fgkxhKKOMqSIasjUlsC7GG4y1JxpuhXiRx4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/eb4fc7-b414-4798-b756-1a0e5048632a/1/ikisPvcnnA9rw5CPJ-2wkbWmWsU.crl rsync://rpki.ripe.net/repository/DEFAULT/fb/eb4fc7-b414-4798-b756-1a0e5048632a/1/ikisPvcnnA9rw5CPJ-2wkbWmWsU.mft rsync://rpki.ripe.net/repository/DEFAULT/ikisPvcnnA9rw5CPJ-2wkbWmWsU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 16:01:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0e:25:23:a7:ed:cf:a7:e8:d3:65:8c:94:27:56:00:f2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8a48ac3ef7279c0f6bc3908f27edb091b5a65ac5 Validity Not Before: Dec 11 16:01:13 2025 GMT Not After : Dec 12 16:01:13 2025 GMT Subject: CN=bcb7831c0b61e6b64a725ab383707a0265e9da16 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:88:c8:12:ad:53:dc:a7:8f:0d:c1:15:77:ff: a9:97:66:d9:c3:21:cb:fe:29:31:b4:51:3d:6b:49: 11:07:41:3e:56:2d:59:9c:0b:39:bf:4a:77:fc:29: 20:f9:43:29:2f:9f:dc:98:45:68:fe:9b:ae:10:77: 7b:01:fd:50:46:0e:d9:d4:87:3a:5f:b7:25:1c:fd: d9:72:6f:6d:76:de:5e:2a:60:19:95:1b:fb:a7:1d: 46:f1:a5:52:94:43:24:6b:82:61:ca:b9:a9:b6:1d: f9:66:24:35:21:b8:32:43:cd:af:65:38:be:36:9e: c1:78:76:76:21:08:d1:a9:11:b5:c8:93:88:7e:de: ec:99:97:67:11:bd:da:68:de:78:3d:70:b9:a8:0a: 9a:e3:dc:7e:6d:d5:99:ca:28:17:b4:87:55:c9:20: db:75:9c:84:56:c9:60:7d:e8:82:c1:db:b7:ca:c1: bc:0b:0f:dd:31:33:bb:a0:32:7e:5e:98:25:27:af: 47:9a:16:78:5a:ea:e3:9c:73:18:a3:8e:08:be:19: 8c:f6:27:28:db:fc:fe:99:2e:a3:c6:a9:84:d1:22: bc:85:82:07:c0:f1:57:f6:67:6d:de:15:43:cf:bf: a4:21:b9:86:32:47:52:9d:77:62:c0:b8:ca:df:cd: d7:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:B7:83:1C:0B:61:E6:B6:4A:72:5A:B3:83:70:7A:02:65:E9:DA:16 X509v3 Authority Key Identifier: keyid:8A:48:AC:3E:F7:27:9C:0F:6B:C3:90:8F:27:ED:B0:91:B5:A6:5A:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ikisPvcnnA9rw5CPJ-2wkbWmWsU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/eb4fc7-b414-4798-b756-1a0e5048632a/1/ikisPvcnnA9rw5CPJ-2wkbWmWsU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/eb4fc7-b414-4798-b756-1a0e5048632a/1/ikisPvcnnA9rw5CPJ-2wkbWmWsU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 43:eb:f4:a1:fc:27:1e:95:db:4f:00:f2:fa:18:36:e8:9a:cb: f6:9c:b2:d6:ef:db:7f:74:c5:66:14:8d:18:72:a8:32:5e:ee: 6a:b3:18:ca:30:5d:49:f4:c6:0d:3f:48:8a:a0:6c:80:a3:c1: 0e:43:ae:4a:ff:02:3e:37:1f:15:cd:e1:5c:2c:c8:af:3c:68: b8:dd:3c:67:60:48:47:7d:30:7b:64:97:9f:5c:b4:d1:0e:7e: d4:48:be:84:48:3f:75:e2:02:dd:fd:7f:da:75:b4:9c:51:4c: 6b:e1:37:1e:04:71:04:77:83:b9:ec:1d:3d:58:67:40:7c:2b: 97:1d:2f:f4:70:01:e7:1d:c1:a6:7b:88:e2:9b:4c:b9:cd:6f: 59:9e:9d:56:23:23:6a:5b:87:07:d1:4a:0c:21:8c:86:58:48: b7:fb:2c:d2:35:6e:51:85:bb:f5:54:72:9f:be:b7:9c:47:ab: 46:f9:cb:8f:44:b2:5e:51:7d:08:49:7e:18:4c:32:20:d4:88: 79:16:4e:7f:0d:c6:77:c5:36:65:37:41:c7:3a:2f:73:68:a2: 40:95:40:af:73:3c:f3:d5:14:ba:32:8e:69:b5:94:37:74:91: 72:68:d5:72:c1:e9:52:fb:0e:50:a8:5d:ad:91:3f:b8:fe:e4: c9:8c:ea:4e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsOJSOn7c+n6NNljJQnVgDyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhhNDhhYzNlZjcyNzljMGY2YmMzOTA4ZjI3ZWRiMDkxYjVh NjVhYzUwHhcNMjUxMjExMTYwMTEzWhcNMjUxMjEyMTYwMTEzWjAzMTEwLwYDVQQD EyhiY2I3ODMxYzBiNjFlNmI2NGE3MjVhYjM4MzcwN2EwMjY1ZTlkYTE2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6ojIEq1T3KePDcEVd/+pl2bZwyHL /ikxtFE9a0kRB0E+Vi1ZnAs5v0p3/Ckg+UMpL5/cmEVo/puuEHd7Af1QRg7Z1Ic6 X7clHP3Zcm9tdt5eKmAZlRv7px1G8aVSlEMka4Jhyrmpth35ZiQ1IbgyQ82vZTi+ Np7BeHZ2IQjRqRG1yJOIft7smZdnEb3aaN54PXC5qAqa49x+bdWZyigXtIdVySDb dZyEVslgfeiCwdu3ysG8Cw/dMTO7oDJ+XpglJ69HmhZ4WurjnHMYo44IvhmM9ico 2/z+mS6jxqmE0SK8hYIHwPFX9mdt3hVDz7+kIbmGMkdSnXdiwLjK383XQQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLy3gxwLYea2SnJas4NwegJl6doWMB8GA1UdIwQY MBaAFIpIrD73J5wPa8OQjyftsJG1plrFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaWtpc1B2Y25uQTlydzVDUEotMndrYldtV3NVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYi9lYjRmYzctYjQxNC00Nzk4LWI3NTYt MWEwZTUwNDg2MzJhLzEvaWtpc1B2Y25uQTlydzVDUEotMndrYldtV3NVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYi9lYjRmYzctYjQxNC00Nzk4LWI3NTYtMWEwZTUwNDg2MzJh LzEvaWtpc1B2Y25uQTlydzVDUEotMndrYldtV3NVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQ+v0ofwn HpXbTwDy+hg26JrL9pyy1u/bf3TFZhSNGHKoMl7uarMYyjBdSfTGDT9IiqBsgKPB DkOuSv8CPjcfFc3hXCzIrzxouN08Z2BIR30we2SXn1y00Q5+1Ei+hEg/deIC3f1/ 2nW0nFFMa+E3HgRxBHeDuewdPVhnQHwrlx0v9HAB5x3BpnuI4ptMuc1vWZ6dViMj aluHB9FKDCGMhlhIt/ss0jVuUYW79VRyn763nEerRvnLj0SyXlF9CEl+GEwyINSI eRZOfw3Gd8U2ZTdBxzovc2iiQJVAr3M889UUujKOabWUN3SRcmjVcsHpUvsOUKhd rZE/uP7kyYzqTg== -----END CERTIFICATE-----Generated at Fri Dec 12 01:24:16 2025 by rpki-client