This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/b203f4-8271-46e7-8a4a-f9e2c2fdbf35/1/iuE5rwiZ9da1syWBNz7aMDfqMMA.mft File: iuE5rwiZ9da1syWBNz7aMDfqMMA.mft (raw, json) Hash identifier: 7eWpQotY1ohQqlYIf3INCPyZLvQ7DjfzkWQ+n34NTBA= Subject key identifier: E3:75:28:41:35:48:2B:B0:DB:40:8A:E2:79:AD:60:D1:CB:01:A2:FD Authority key identifier: 8A:E1:39:AF:08:99:F5:D6:B5:B3:25:81:37:3E:DA:30:37:EA:30:C0 Certificate issuer: /CN=8ae139af0899f5d6b5b32581373eda3037ea30c0 Certificate serial: 019AF31B6C6D6DED03AA5E7049CA5017C862 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iuE5rwiZ9da1syWBNz7aMDfqMMA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/b203f4-8271-46e7-8a4a-f9e2c2fdbf35/1/iuE5rwiZ9da1syWBNz7aMDfqMMA.mft Manifest number: 0E19 Signing time: Sat 06 Dec 2025 10:00:51 +0000 Manifest this update: Sat 06 Dec 2025 10:00:51 +0000 Manifest next update: Sun 07 Dec 2025 10:00:51 +0000 Files and hashes: 1: NGjcJESkWKoe17DLj5CiFkjFkhs.roa (hash: GPilr/syUwSnDgvatxbmfR2uNG9m+2J2hRVuK9V/K4A=) 2: iuE5rwiZ9da1syWBNz7aMDfqMMA.crl (hash: a98nTwOm2/8KL5Ag7mMoMKcvydP3+HoPrDeQ19oEY+g=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/b203f4-8271-46e7-8a4a-f9e2c2fdbf35/1/iuE5rwiZ9da1syWBNz7aMDfqMMA.crl rsync://rpki.ripe.net/repository/DEFAULT/17/b203f4-8271-46e7-8a4a-f9e2c2fdbf35/1/iuE5rwiZ9da1syWBNz7aMDfqMMA.mft rsync://rpki.ripe.net/repository/DEFAULT/iuE5rwiZ9da1syWBNz7aMDfqMMA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1b:6c:6d:6d:ed:03:aa:5e:70:49:ca:50:17:c8:62 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8ae139af0899f5d6b5b32581373eda3037ea30c0 Validity Not Before: Dec 6 10:00:51 2025 GMT Not After : Dec 7 10:00:51 2025 GMT Subject: CN=e375284135482bb0db408ae279ad60d1cb01a2fd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:a2:31:a2:6f:5e:25:94:c6:8f:f5:b7:40:66: 06:2b:98:31:6b:01:c9:18:0f:34:8c:a1:b1:0b:6b: 14:99:d3:31:05:4a:37:e4:82:c9:4e:04:00:06:23: fd:51:34:de:1f:b6:1e:26:32:71:82:ca:c8:09:50: 1a:3d:9c:bd:22:43:f2:b4:c3:e0:76:e3:88:02:9a: d6:7f:aa:cd:9c:6b:e9:e5:06:b0:04:e8:43:7e:88: 4c:30:a3:04:31:f7:f4:63:dd:d9:8f:69:dc:73:a8: 89:79:fb:8a:fc:23:9a:26:db:a5:0d:a5:a8:de:92: 97:95:d7:b5:e6:e4:fe:89:cf:55:7c:05:cd:a0:24: 5e:e3:6e:89:4d:92:5e:d8:4a:9c:95:f3:96:92:c4: 8f:38:1f:d5:2c:6a:06:53:de:bd:50:f1:4a:e0:fb: 84:5e:3b:d4:f9:9d:71:73:d5:44:57:4d:75:2f:a5: 8d:97:ba:ec:46:a8:f2:2d:92:73:44:52:84:78:ef: 13:5f:f0:34:d5:41:75:7c:c6:e2:75:f9:04:a7:2f: 51:fc:22:8b:59:63:64:47:24:0d:dc:55:6f:81:88: ce:6b:bf:95:ad:92:02:ac:6c:e0:6f:e2:aa:1a:66: b5:8c:7a:90:ad:81:da:09:db:ce:63:12:24:94:84: e6:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:75:28:41:35:48:2B:B0:DB:40:8A:E2:79:AD:60:D1:CB:01:A2:FD X509v3 Authority Key Identifier: keyid:8A:E1:39:AF:08:99:F5:D6:B5:B3:25:81:37:3E:DA:30:37:EA:30:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iuE5rwiZ9da1syWBNz7aMDfqMMA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/b203f4-8271-46e7-8a4a-f9e2c2fdbf35/1/iuE5rwiZ9da1syWBNz7aMDfqMMA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/17/b203f4-8271-46e7-8a4a-f9e2c2fdbf35/1/iuE5rwiZ9da1syWBNz7aMDfqMMA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 49:fc:ba:8e:4e:65:dc:5d:e4:3a:65:07:a8:44:e3:11:91:bc: c2:ae:5d:ac:5f:92:bf:c7:c4:31:9c:8e:b3:2c:3c:12:f1:83: f4:23:c8:43:0f:dc:09:cf:51:5d:a7:79:26:c7:17:53:87:7b: 18:d4:36:d5:59:04:41:13:e8:86:f4:58:24:38:59:91:3a:eb: b7:80:49:61:43:b7:51:cd:eb:48:a4:ef:d9:1a:19:ab:bc:db: f4:f5:6f:7f:e1:4f:4a:46:11:fb:d9:fa:0f:0f:af:dc:12:73: b0:23:ea:9f:3d:30:0b:0f:3d:32:56:c8:ab:91:cb:a1:02:c7: 40:be:63:91:05:0b:d6:30:0e:6a:b3:24:91:bd:c9:fc:dd:e2: 5e:d6:a6:6c:8f:39:2b:28:68:55:de:fa:48:db:59:af:0b:c6: ac:ce:ac:51:a5:33:d3:50:3a:68:2c:95:d7:62:05:44:bd:d7: 99:da:c1:35:de:f2:ec:9b:39:5a:39:ef:be:fd:ee:0d:3e:b0: 19:76:bf:fd:0b:41:35:da:d2:d9:08:49:4f:73:8d:12:1e:2b: 2b:05:c5:3a:59:fc:e9:fe:c5:1f:34:1a:6f:06:42:a0:8a:28: ad:53:9d:72:e9:1d:37:1e:ce:78:20:c7:d5:da:da:0d:49:87: 84:6f:37:fd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzG2xtbe0Dql5wScpQF8hiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhhZTEzOWFmMDg5OWY1ZDZiNWIzMjU4MTM3M2VkYTMwMzdl YTMwYzAwHhcNMjUxMjA2MTAwMDUxWhcNMjUxMjA3MTAwMDUxWjAzMTEwLwYDVQQD EyhlMzc1Mjg0MTM1NDgyYmIwZGI0MDhhZTI3OWFkNjBkMWNiMDFhMmZkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsqIxom9eJZTGj/W3QGYGK5gxawHJ GA80jKGxC2sUmdMxBUo35ILJTgQABiP9UTTeH7YeJjJxgsrICVAaPZy9IkPytMPg duOIAprWf6rNnGvp5QawBOhDfohMMKMEMff0Y93Zj2ncc6iJefuK/COaJtulDaWo 3pKXlde15uT+ic9VfAXNoCRe426JTZJe2EqclfOWksSPOB/VLGoGU969UPFK4PuE XjvU+Z1xc9VEV011L6WNl7rsRqjyLZJzRFKEeO8TX/A01UF1fMbidfkEpy9R/CKL WWNkRyQN3FVvgYjOa7+VrZICrGzgb+KqGma1jHqQrYHaCdvOYxIklITmlwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFON1KEE1SCuw20CK4nmtYNHLAaL9MB8GA1UdIwQY MBaAFIrhOa8ImfXWtbMlgTc+2jA36jDAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaXVFNXJ3aVo5ZGExc3lXQk56N2FNRGZxTU1BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy9iMjAzZjQtODI3MS00NmU3LThhNGEt ZjllMmMyZmRiZjM1LzEvaXVFNXJ3aVo5ZGExc3lXQk56N2FNRGZxTU1BLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNy9iMjAzZjQtODI3MS00NmU3LThhNGEtZjllMmMyZmRiZjM1 LzEvaXVFNXJ3aVo5ZGExc3lXQk56N2FNRGZxTU1BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASfy6jk5l 3F3kOmUHqETjEZG8wq5drF+Sv8fEMZyOsyw8EvGD9CPIQw/cCc9RXad5JscXU4d7 GNQ21VkEQRPohvRYJDhZkTrrt4BJYUO3Uc3rSKTv2RoZq7zb9PVvf+FPSkYR+9n6 Dw+v3BJzsCPqnz0wCw89MlbIq5HLoQLHQL5jkQUL1jAOarMkkb3J/N3iXtambI85 KyhoVd76SNtZrwvGrM6sUaUz01A6aCyV12IFRL3XmdrBNd7y7Js5Wjnvvv3uDT6w GXa//QtBNdrS2QhJT3ONEh4rKwXFOln86f7FHzQabwZCoIoorVOdcukdNx7OeCDH 1draDUmHhG83/Q== -----END CERTIFICATE-----Generated at Sat Dec 6 13:48:34 2025 by rpki-client