This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/6eb54e-e709-4b7a-ade9-a9aeb485d592/1/IwqhYKbohsED2tvkSyPCd3YFc5E.mft File: IwqhYKbohsED2tvkSyPCd3YFc5E.mft (raw, json) Hash identifier: WxuVh5/GytNzxOGGyUy4c2QEHGicRn7CTXZIrYNdyN0= Subject key identifier: 41:41:88:18:86:7F:44:94:AC:8E:3A:C2:78:3D:38:B0:75:22:64:A1 Authority key identifier: 23:0A:A1:60:A6:E8:86:C1:03:DA:DB:E4:4B:23:C2:77:76:05:73:91 Certificate issuer: /CN=230aa160a6e886c103dadbe44b23c27776057391 Certificate serial: 019AF2ADD4176D3D2528C5F08D1F3980606B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IwqhYKbohsED2tvkSyPCd3YFc5E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/6eb54e-e709-4b7a-ade9-a9aeb485d592/1/IwqhYKbohsED2tvkSyPCd3YFc5E.mft Manifest number: 0F01 Signing time: Sat 06 Dec 2025 08:01:09 +0000 Manifest this update: Sat 06 Dec 2025 08:01:09 +0000 Manifest next update: Sun 07 Dec 2025 08:01:09 +0000 Files and hashes: 1: 1H3wr9EMEu_9kf6Zl38WrkoAkBU.roa (hash: FprWo0wu1rkhWTeCTL4oYKvIo6iA1oIZ1p0P+xAQYGs=) 2: IwqhYKbohsED2tvkSyPCd3YFc5E.crl (hash: K7CwHv8pPiG5109NChtToIsVVKI9k5fFbjcep8DDa9I=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/6eb54e-e709-4b7a-ade9-a9aeb485d592/1/IwqhYKbohsED2tvkSyPCd3YFc5E.crl rsync://rpki.ripe.net/repository/DEFAULT/15/6eb54e-e709-4b7a-ade9-a9aeb485d592/1/IwqhYKbohsED2tvkSyPCd3YFc5E.mft rsync://rpki.ripe.net/repository/DEFAULT/IwqhYKbohsED2tvkSyPCd3YFc5E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:ad:d4:17:6d:3d:25:28:c5:f0:8d:1f:39:80:60:6b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=230aa160a6e886c103dadbe44b23c27776057391 Validity Not Before: Dec 6 08:01:09 2025 GMT Not After : Dec 7 08:01:09 2025 GMT Subject: CN=41418818867f4494ac8e3ac2783d38b0752264a1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:f3:97:de:5e:71:74:37:2e:54:ee:7c:19:f5: 65:b2:51:2d:5c:79:be:85:c3:6c:5e:04:46:f5:bd: 55:4b:a9:05:6f:e5:ca:62:c1:97:91:f3:04:06:b7: 61:eb:c0:3e:e3:53:85:4c:81:47:02:82:a0:d9:1e: c7:97:d7:81:73:b0:b8:8f:2b:04:07:a4:04:d8:a1: 0b:ba:ec:ed:6f:68:ad:5e:52:e3:7b:b6:a6:73:53: e1:14:43:20:c7:96:7a:6f:fe:3f:a4:57:f7:16:d5: 49:2e:28:99:73:68:22:f3:c5:6d:7a:4e:1e:be:49: 2e:7b:c1:74:9e:95:11:f7:3a:b3:bc:9d:9a:56:6c: 18:2b:30:94:2a:47:2a:c9:fc:35:ce:be:e9:aa:a2: e0:54:08:98:90:4d:a6:13:05:0c:12:1e:2b:ca:d1: ff:6c:7f:0f:b4:f3:85:0b:28:1e:66:6e:eb:98:2f: a1:a4:c5:17:4a:f4:92:c8:49:59:ab:c1:00:17:88: d2:2a:09:e5:99:c5:b1:f7:88:ba:6e:2f:73:f4:95: 44:cf:ae:b9:a1:0e:a7:6a:ab:16:73:9c:a3:4f:09: 2c:9c:ac:91:ac:6c:5b:92:bf:be:65:45:9a:67:11: ac:24:7f:30:6e:4d:ad:05:26:16:87:34:19:5b:74: 89:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:41:88:18:86:7F:44:94:AC:8E:3A:C2:78:3D:38:B0:75:22:64:A1 X509v3 Authority Key Identifier: keyid:23:0A:A1:60:A6:E8:86:C1:03:DA:DB:E4:4B:23:C2:77:76:05:73:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IwqhYKbohsED2tvkSyPCd3YFc5E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/6eb54e-e709-4b7a-ade9-a9aeb485d592/1/IwqhYKbohsED2tvkSyPCd3YFc5E.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/15/6eb54e-e709-4b7a-ade9-a9aeb485d592/1/IwqhYKbohsED2tvkSyPCd3YFc5E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption af:fe:31:72:db:86:4b:04:1b:88:b8:61:4a:a3:a0:70:70:10: ae:a6:aa:4a:65:d3:f9:a2:e0:d3:af:09:d1:f0:96:6b:ff:96: ef:dd:d3:c6:af:b0:6c:f3:74:36:80:86:9b:72:55:36:9a:ef: df:f3:f4:e7:34:e4:39:dc:fe:7d:53:2b:83:da:cc:74:06:57: 27:6e:2d:92:78:43:69:f3:ec:02:97:ee:04:f0:73:c3:96:82: 39:41:83:bc:35:37:2e:52:23:62:28:51:84:15:26:40:aa:73: 20:cd:7d:d4:9f:d9:bf:28:51:d5:2f:f4:e2:24:b9:43:31:97: 29:b5:14:e8:1a:76:d5:dd:b9:32:83:5a:23:7c:87:e9:a7:97: 3f:27:85:99:17:bb:31:91:6d:98:91:8e:6f:50:f2:de:3a:ff: e0:e0:87:3c:5e:7f:fe:e4:81:cf:ff:89:15:bd:32:4f:91:80: 86:d2:6c:0b:d5:8a:2e:21:53:0a:3e:ac:f1:fe:2d:be:2d:35: 24:ae:cb:3c:c7:89:1f:e5:59:25:31:ec:8d:f5:03:ab:7e:96: c0:88:d8:de:fd:22:93:df:dc:74:8d:1a:6e:8e:65:ac:b7:fb: 17:e9:e5:d4:08:24:2c:a7:40:73:18:81:aa:81:65:e7:88:a5: b4:3d:62:ef -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryrdQXbT0lKMXwjR85gGBrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIzMGFhMTYwYTZlODg2YzEwM2RhZGJlNDRiMjNjMjc3NzYw NTczOTEwHhcNMjUxMjA2MDgwMTA5WhcNMjUxMjA3MDgwMTA5WjAzMTEwLwYDVQQD Eyg0MTQxODgxODg2N2Y0NDk0YWM4ZTNhYzI3ODNkMzhiMDc1MjI2NGExMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsPOX3l5xdDcuVO58GfVlslEtXHm+ hcNsXgRG9b1VS6kFb+XKYsGXkfMEBrdh68A+41OFTIFHAoKg2R7Hl9eBc7C4jysE B6QE2KELuuztb2itXlLje7amc1PhFEMgx5Z6b/4/pFf3FtVJLiiZc2gi88Vtek4e vkkue8F0npUR9zqzvJ2aVmwYKzCUKkcqyfw1zr7pqqLgVAiYkE2mEwUMEh4rytH/ bH8PtPOFCygeZm7rmC+hpMUXSvSSyElZq8EAF4jSKgnlmcWx94i6bi9z9JVEz665 oQ6naqsWc5yjTwksnKyRrGxbkr++ZUWaZxGsJH8wbk2tBSYWhzQZW3SJoQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEFBiBiGf0SUrI46wng9OLB1ImShMB8GA1UdIwQY MBaAFCMKoWCm6IbBA9rb5Esjwnd2BXORMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSXdxaFlLYm9oc0VEMnR2a1N5UENkM1lGYzVFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNS82ZWI1NGUtZTcwOS00YjdhLWFkZTkt YTlhZWI0ODVkNTkyLzEvSXdxaFlLYm9oc0VEMnR2a1N5UENkM1lGYzVFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNS82ZWI1NGUtZTcwOS00YjdhLWFkZTktYTlhZWI0ODVkNTky LzEvSXdxaFlLYm9oc0VEMnR2a1N5UENkM1lGYzVFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAr/4xctuG SwQbiLhhSqOgcHAQrqaqSmXT+aLg068J0fCWa/+W793Txq+wbPN0NoCGm3JVNprv 3/P05zTkOdz+fVMrg9rMdAZXJ24tknhDafPsApfuBPBzw5aCOUGDvDU3LlIjYihR hBUmQKpzIM191J/ZvyhR1S/04iS5QzGXKbUU6Bp21d25MoNaI3yH6aeXPyeFmRe7 MZFtmJGOb1Dy3jr/4OCHPF5//uSBz/+JFb0yT5GAhtJsC9WKLiFTCj6s8f4tvi01 JK7LPMeJH+VZJTHsjfUDq36WwIjY3v0ik9/cdI0abo5lrLf7F+nl1AgkLKdAcxiB qoFl54iltD1i7w== -----END CERTIFICATE-----Generated at Sat Dec 6 12:48:20 2025 by rpki-client