This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/9173a0-2884-4a79-8b3e-69a245095ab4/1/IYOyVqIVtNb-JhfRJitji_p9bUA.mft File: IYOyVqIVtNb-JhfRJitji_p9bUA.mft (raw, json) Hash identifier: c+q3fP3k/uU27XoFiFzwtFVHfE5YGWT+xmvLG1BFu/A= Subject key identifier: 73:A0:F2:EA:60:FA:BE:0D:92:49:8B:24:C4:C5:C5:D7:3C:A5:9F:B6 Authority key identifier: 21:83:B2:56:A2:15:B4:D6:FE:26:17:D1:26:2B:63:8B:FA:7D:6D:40 Certificate issuer: /CN=2183b256a215b4d6fe2617d1262b638bfa7d6d40 Certificate serial: 019AF5409D29DF225AC7D7B98961DC177704 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYOyVqIVtNb-JhfRJitji_p9bUA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/9173a0-2884-4a79-8b3e-69a245095ab4/1/IYOyVqIVtNb-JhfRJitji_p9bUA.mft Manifest number: 014F Signing time: Sat 06 Dec 2025 20:00:43 +0000 Manifest this update: Sat 06 Dec 2025 20:00:43 +0000 Manifest next update: Sun 07 Dec 2025 20:00:43 +0000 Files and hashes: 1: 44WqLxBoNN2QK30ATokBgtKLkeI.roa (hash: r1vcmWXJ0IlZk5aHbff1XD3Hg2Mieqe53U03waIk5x4=) 2: IYOyVqIVtNb-JhfRJitji_p9bUA.crl (hash: n/OUqdfdBTIb32rhrIOyIstbpaiv81Btwpw6hyQdHe4=) 3: RQGn1IVlE_4Qq709uXK_6OsLiXk.roa (hash: P0lwWTGt3C2Kl+U7DDbrCt9t+ME/jcoeCzRbUtSo834=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/9173a0-2884-4a79-8b3e-69a245095ab4/1/IYOyVqIVtNb-JhfRJitji_p9bUA.crl rsync://rpki.ripe.net/repository/DEFAULT/0c/9173a0-2884-4a79-8b3e-69a245095ab4/1/IYOyVqIVtNb-JhfRJitji_p9bUA.mft rsync://rpki.ripe.net/repository/DEFAULT/IYOyVqIVtNb-JhfRJitji_p9bUA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 20:00:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:40:9d:29:df:22:5a:c7:d7:b9:89:61:dc:17:77:04 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2183b256a215b4d6fe2617d1262b638bfa7d6d40 Validity Not Before: Dec 6 20:00:43 2025 GMT Not After : Dec 7 20:00:43 2025 GMT Subject: CN=73a0f2ea60fabe0d92498b24c4c5c5d73ca59fb6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:03:4e:f7:46:4b:c6:cf:13:d9:ad:27:cf:6e: cf:22:d5:89:39:f0:23:5e:2a:af:e5:71:1c:e2:b7: d0:5b:16:0a:e0:6b:1f:27:8d:69:02:cd:b6:8d:52: 55:dc:04:b7:f0:29:cd:7b:a0:ad:da:84:76:6e:e3: b0:64:6d:0f:93:cf:4a:ba:4f:e8:ad:ec:b3:16:6a: 47:9c:b1:66:ce:d3:b2:02:a8:50:a4:49:c4:2b:76: 56:f7:46:62:44:d2:08:43:7b:2d:29:62:cb:2e:ba: b8:65:31:09:fd:a1:c1:3f:0e:a5:e3:d4:0c:75:0a: d1:d9:45:85:c7:4c:20:a9:36:c5:d7:8e:35:ad:a6: 6b:db:ed:99:3f:43:78:df:87:23:74:05:98:d0:95: 7c:fd:85:3e:a2:56:1b:c1:d6:0e:80:9a:0d:7e:ba: 99:68:90:a4:d2:60:b1:eb:4c:57:fe:a5:44:4c:ec: 80:3b:f8:36:bf:6e:20:93:fb:d3:df:94:31:6a:05: fa:a3:67:60:72:ab:67:de:16:3c:14:af:30:75:88: ad:1b:3c:86:75:3b:83:39:20:10:57:78:c1:b9:f3: 4c:5b:6c:7c:24:95:c3:2b:d8:29:c9:c8:b4:dd:f9: 76:4c:63:26:f7:39:58:0f:93:3d:00:a9:ac:61:fa: 28:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:A0:F2:EA:60:FA:BE:0D:92:49:8B:24:C4:C5:C5:D7:3C:A5:9F:B6 X509v3 Authority Key Identifier: keyid:21:83:B2:56:A2:15:B4:D6:FE:26:17:D1:26:2B:63:8B:FA:7D:6D:40 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYOyVqIVtNb-JhfRJitji_p9bUA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/9173a0-2884-4a79-8b3e-69a245095ab4/1/IYOyVqIVtNb-JhfRJitji_p9bUA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/9173a0-2884-4a79-8b3e-69a245095ab4/1/IYOyVqIVtNb-JhfRJitji_p9bUA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 54:a1:1e:35:f6:65:96:4e:9b:0b:66:9f:23:a8:3d:61:93:29: 18:38:e0:3e:ad:17:07:50:da:96:e0:2d:2e:c1:e3:23:3b:45: f5:16:b6:44:f3:12:22:ff:68:eb:9b:c9:bd:c7:8d:df:3e:fd: 1d:32:39:5b:68:be:62:81:71:b8:5e:0c:b2:e2:d2:0e:c3:70: af:94:85:c9:ea:53:aa:2c:e3:db:f5:78:1a:33:72:63:a5:99: 4c:11:83:a9:f8:18:6c:53:d5:cf:c0:1a:39:12:de:ac:f3:10: 96:4c:21:71:15:fd:4a:8d:5e:cf:e2:b1:5e:9a:ff:0e:59:f2: 8d:96:1a:a4:89:03:be:ea:08:c6:4e:36:e3:34:4b:bc:c9:8c: 9b:46:2c:c5:bc:ae:63:21:7d:80:75:b4:a0:66:6c:f7:30:45: 1d:b8:6e:c2:9b:ec:4f:c8:4b:43:b5:8b:ec:23:5e:85:41:48: 5d:11:bc:35:f6:6e:4f:0f:35:b6:aa:d9:0c:b6:6f:4b:1e:32: e0:ec:3a:28:ba:c3:08:4d:3b:2e:9c:6f:70:76:4a:3d:24:66: 88:1b:96:18:d3:41:91:66:88:09:c8:ae:ea:b6:30:55:bb:81: 7c:38:4f:5d:5b:f1:6d:03:aa:56:ed:c1:42:07:f2:3a:55:e2: bf:05:9c:2d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1QJ0p3yJax9e5iWHcF3cEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIxODNiMjU2YTIxNWI0ZDZmZTI2MTdkMTI2MmI2MzhiZmE3 ZDZkNDAwHhcNMjUxMjA2MjAwMDQzWhcNMjUxMjA3MjAwMDQzWjAzMTEwLwYDVQQD Eyg3M2EwZjJlYTYwZmFiZTBkOTI0OThiMjRjNGM1YzVkNzNjYTU5ZmI2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2gNO90ZLxs8T2a0nz27PItWJOfAj Xiqv5XEc4rfQWxYK4GsfJ41pAs22jVJV3AS38CnNe6Ct2oR2buOwZG0Pk89Kuk/o reyzFmpHnLFmztOyAqhQpEnEK3ZW90ZiRNIIQ3stKWLLLrq4ZTEJ/aHBPw6l49QM dQrR2UWFx0wgqTbF1441raZr2+2ZP0N434cjdAWY0JV8/YU+olYbwdYOgJoNfrqZ aJCk0mCx60xX/qVETOyAO/g2v24gk/vT35QxagX6o2dgcqtn3hY8FK8wdYitGzyG dTuDOSAQV3jBufNMW2x8JJXDK9gpyci03fl2TGMm9zlYD5M9AKmsYfoo6QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHOg8upg+r4NkkmLJMTFxdc8pZ+2MB8GA1UdIwQY MBaAFCGDslaiFbTW/iYX0SYrY4v6fW1AMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSVlPeVZxSVZ0TmItSmhmUkppdGppX3A5YlVBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy85MTczYTAtMjg4NC00YTc5LThiM2Ut NjlhMjQ1MDk1YWI0LzEvSVlPeVZxSVZ0TmItSmhmUkppdGppX3A5YlVBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYy85MTczYTAtMjg4NC00YTc5LThiM2UtNjlhMjQ1MDk1YWI0 LzEvSVlPeVZxSVZ0TmItSmhmUkppdGppX3A5YlVBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVKEeNfZl lk6bC2afI6g9YZMpGDjgPq0XB1DaluAtLsHjIztF9Ra2RPMSIv9o65vJvceN3z79 HTI5W2i+YoFxuF4MsuLSDsNwr5SFyepTqizj2/V4GjNyY6WZTBGDqfgYbFPVz8Aa ORLerPMQlkwhcRX9So1ez+KxXpr/DlnyjZYapIkDvuoIxk424zRLvMmMm0Ysxbyu YyF9gHW0oGZs9zBFHbhuwpvsT8hLQ7WL7CNehUFIXRG8NfZuTw81tqrZDLZvSx4y 4Ow6KLrDCE07LpxvcHZKPSRmiBuWGNNBkWaICciu6rYwVbuBfDhPXVvxbQOqVu3B QgfyOlXivwWcLQ== -----END CERTIFICATE-----Generated at Sun Dec 7 05:09:24 2025 by rpki-client