This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/dcf559-afb4-46b9-b2d5-937dcff51e2d/1/iYbiVoMwLDgnDQ-QxKrRUZOT1UU.mft File: iYbiVoMwLDgnDQ-QxKrRUZOT1UU.mft (raw, json) Hash identifier: mlHlkZPdxVyYODlcnOGJzcm2tnwADuqpoBWXPpRlDBA= Subject key identifier: 67:6C:23:76:47:ED:F1:3C:E1:33:B8:66:85:8D:B5:B0:34:56:23:6A Authority key identifier: 89:86:E2:56:83:30:2C:38:27:0D:0F:90:C4:AA:D1:51:93:93:D5:45 Certificate issuer: /CN=8986e25683302c38270d0f90c4aad1519393d545 Certificate serial: 019AF12EDC452747353281AD37D62F044EBD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iYbiVoMwLDgnDQ-QxKrRUZOT1UU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/dcf559-afb4-46b9-b2d5-937dcff51e2d/1/iYbiVoMwLDgnDQ-QxKrRUZOT1UU.mft Manifest number: 1373 Signing time: Sat 06 Dec 2025 01:02:51 +0000 Manifest this update: Sat 06 Dec 2025 01:02:51 +0000 Manifest next update: Sun 07 Dec 2025 01:02:51 +0000 Files and hashes: 1: hBtuYA8NQ04R8tq6jZPsM1-BvhU.roa (hash: K70nTdo1e1FCrO48Dr3FeEO2IPCXhYeBeZlKIyFXxPc=) 2: iYbiVoMwLDgnDQ-QxKrRUZOT1UU.crl (hash: KO/EaUREKfBzxgJR9Aoddnat0TKABr4S+lKTE6Px4h0=) 3: yYfUODDume9xFNHrgw8kXHPMP18.roa (hash: X3WTz4JdrFUIjxDVjaUEhmRWKqzFmlYHhSjsH9h5dXQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/dcf559-afb4-46b9-b2d5-937dcff51e2d/1/iYbiVoMwLDgnDQ-QxKrRUZOT1UU.crl rsync://rpki.ripe.net/repository/DEFAULT/14/dcf559-afb4-46b9-b2d5-937dcff51e2d/1/iYbiVoMwLDgnDQ-QxKrRUZOT1UU.mft rsync://rpki.ripe.net/repository/DEFAULT/iYbiVoMwLDgnDQ-QxKrRUZOT1UU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:02:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2e:dc:45:27:47:35:32:81:ad:37:d6:2f:04:4e:bd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8986e25683302c38270d0f90c4aad1519393d545 Validity Not Before: Dec 6 01:02:51 2025 GMT Not After : Dec 7 01:02:51 2025 GMT Subject: CN=676c237647edf13ce133b866858db5b03456236a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:2a:68:11:1f:e8:e5:69:8a:ba:91:8f:f6:6c: 13:d7:91:0e:8f:b9:78:9d:f6:ca:2a:d6:7c:1d:27: bf:d3:0b:69:46:62:0d:6a:69:0f:2e:a3:a1:d3:05: fb:74:1b:00:54:83:27:3c:75:4f:ad:c7:ca:a5:f2: 75:a7:c2:fd:22:c9:dd:cb:7c:ce:cc:30:d9:c0:65: 71:35:88:4d:32:fb:a3:a3:22:87:57:95:2a:28:5e: 4c:d6:22:2b:c9:28:1b:a8:57:a3:3d:d0:5f:5a:22: 28:b2:a1:e8:1e:45:17:e0:4d:d7:2e:85:d8:08:48: d5:75:d5:74:08:27:dc:9f:75:c0:66:d1:9a:16:07: 3b:f2:95:51:b6:5c:f4:ec:5b:f3:eb:23:04:33:91: 96:42:9d:ef:9a:11:14:b1:de:2f:17:b9:00:3d:34: 6d:6f:8f:41:ea:8b:39:d9:97:cc:8b:00:88:79:7f: 31:10:21:25:45:cd:18:aa:dd:c8:ed:19:32:f2:5f: 37:99:56:5c:b6:66:c2:cc:40:3c:8a:6d:e9:a5:56: aa:de:b5:fc:90:67:db:bd:3d:0e:90:22:09:99:7b: 7e:dc:0b:32:c4:2d:c1:76:57:d8:ed:12:33:2b:0f: c5:ab:19:79:1e:0a:25:69:f3:75:81:c1:3c:87:f5: 7b:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:6C:23:76:47:ED:F1:3C:E1:33:B8:66:85:8D:B5:B0:34:56:23:6A X509v3 Authority Key Identifier: keyid:89:86:E2:56:83:30:2C:38:27:0D:0F:90:C4:AA:D1:51:93:93:D5:45 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iYbiVoMwLDgnDQ-QxKrRUZOT1UU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/dcf559-afb4-46b9-b2d5-937dcff51e2d/1/iYbiVoMwLDgnDQ-QxKrRUZOT1UU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/14/dcf559-afb4-46b9-b2d5-937dcff51e2d/1/iYbiVoMwLDgnDQ-QxKrRUZOT1UU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 76:54:2b:e2:22:bb:d2:9b:64:a5:12:f2:a8:4d:93:11:eb:cf: 48:d3:ea:bc:68:25:9d:51:46:c0:48:d4:6b:a6:55:ad:6a:f8: 72:1a:92:07:3a:de:4a:3e:99:9e:3e:d2:95:2a:34:16:b8:98: 93:39:d9:04:16:da:62:ce:2c:18:e8:40:8c:1a:f8:ff:25:54: ae:02:3c:c8:02:37:0f:ff:44:25:ac:4b:34:91:60:3a:6e:a0: f3:bf:35:5f:69:93:61:42:a0:8a:1b:39:b2:55:4c:f7:f4:75: 69:e0:cf:62:50:6e:7e:f0:a8:2f:59:f1:e5:8e:d4:61:32:d8: 42:7a:ca:ef:3c:10:7c:ab:b4:d9:cf:97:10:6f:f5:00:97:66: fc:5d:6a:63:24:ee:7f:55:c3:a0:bb:52:8f:81:a3:31:95:ce: 8b:4d:ee:42:9b:c4:03:89:5e:e3:b7:6f:a7:01:96:4c:d8:3f: 97:f4:66:d4:c5:fd:76:36:3f:3e:0f:a7:ab:9e:29:2c:28:9f: 4e:3a:9e:b9:8a:39:27:e5:cf:4b:80:14:fd:d8:81:e5:4b:73: 86:1e:5b:40:41:66:af:8b:c3:b2:4c:5f:66:e8:4f:26:b9:9d: b5:58:7f:eb:33:c5:21:92:6c:36:64:01:38:00:66:0c:8c:8e: e8:93:29:c1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLtxFJ0c1MoGtN9YvBE69MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg5ODZlMjU2ODMzMDJjMzgyNzBkMGY5MGM0YWFkMTUxOTM5 M2Q1NDUwHhcNMjUxMjA2MDEwMjUxWhcNMjUxMjA3MDEwMjUxWjAzMTEwLwYDVQQD Eyg2NzZjMjM3NjQ3ZWRmMTNjZTEzM2I4NjY4NThkYjViMDM0NTYyMzZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoSpoER/o5WmKupGP9mwT15EOj7l4 nfbKKtZ8HSe/0wtpRmINamkPLqOh0wX7dBsAVIMnPHVPrcfKpfJ1p8L9Isndy3zO zDDZwGVxNYhNMvujoyKHV5UqKF5M1iIrySgbqFejPdBfWiIosqHoHkUX4E3XLoXY CEjVddV0CCfcn3XAZtGaFgc78pVRtlz07Fvz6yMEM5GWQp3vmhEUsd4vF7kAPTRt b49B6os52ZfMiwCIeX8xECElRc0Yqt3I7Rky8l83mVZctmbCzEA8im3ppVaq3rX8 kGfbvT0OkCIJmXt+3AsyxC3BdlfY7RIzKw/Fqxl5HgolafN1gcE8h/V7pQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGdsI3ZH7fE84TO4ZoWNtbA0ViNqMB8GA1UdIwQY MBaAFImG4laDMCw4Jw0PkMSq0VGTk9VFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaVliaVZvTXdMRGduRFEtUXhLclJVWk9UMVVVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNC9kY2Y1NTktYWZiNC00NmI5LWIyZDUt OTM3ZGNmZjUxZTJkLzEvaVliaVZvTXdMRGduRFEtUXhLclJVWk9UMVVVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNC9kY2Y1NTktYWZiNC00NmI5LWIyZDUtOTM3ZGNmZjUxZTJk LzEvaVliaVZvTXdMRGduRFEtUXhLclJVWk9UMVVVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdlQr4iK7 0ptkpRLyqE2TEevPSNPqvGglnVFGwEjUa6ZVrWr4chqSBzreSj6Znj7SlSo0FriY kznZBBbaYs4sGOhAjBr4/yVUrgI8yAI3D/9EJaxLNJFgOm6g8781X2mTYUKgihs5 slVM9/R1aeDPYlBufvCoL1nx5Y7UYTLYQnrK7zwQfKu02c+XEG/1AJdm/F1qYyTu f1XDoLtSj4GjMZXOi03uQpvEA4le47dvpwGWTNg/l/Rm1MX9djY/Pg+nq54pLCif TjqeuYo5J+XPS4AU/diB5Utzhh5bQEFmr4vDskxfZuhPJrmdtVh/6zPFIZJsNmQB OABmDIyO6JMpwQ== -----END CERTIFICATE-----Generated at Sat Dec 6 07:55:49 2025 by rpki-client