This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/850e96-191f-4dcb-9edb-cd58fa2014dd/1/Iv0bWdXKr3UGvA1cNPMMIVmwQ5g.mft File: Iv0bWdXKr3UGvA1cNPMMIVmwQ5g.mft (raw, json) Hash identifier: 5nVhT78+4QNTP4w55PPve+DYqYdD8Vdlh+DLBc6PKBs= Subject key identifier: F5:CF:E8:25:21:F5:E3:E8:CA:24:F6:28:D1:0B:E4:70:02:84:66:D7 Authority key identifier: 22:FD:1B:59:D5:CA:AF:75:06:BC:0D:5C:34:F3:0C:21:59:B0:43:98 Certificate issuer: /CN=22fd1b59d5caaf7506bc0d5c34f30c2159b04398 Certificate serial: 019AF389B46F274F53F1A45AE547DDDE06E0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Iv0bWdXKr3UGvA1cNPMMIVmwQ5g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/850e96-191f-4dcb-9edb-cd58fa2014dd/1/Iv0bWdXKr3UGvA1cNPMMIVmwQ5g.mft Manifest number: 0E4C Signing time: Sat 06 Dec 2025 12:01:19 +0000 Manifest this update: Sat 06 Dec 2025 12:01:19 +0000 Manifest next update: Sun 07 Dec 2025 12:01:19 +0000 Files and hashes: 1: 5h9N95WR6G3ZttKnfAaRL_2XfKs.roa (hash: Wu3zPxSXCsayNSHW7YvNoHAYtN3gQjTl9ho9qfJB69k=) 2: Iv0bWdXKr3UGvA1cNPMMIVmwQ5g.crl (hash: Weh19XFOMmeSn+VY8bz/0BmLvgbVlwmwsug5xdlGL5g=) 3: mWDbGVVpCQ84rC7Zv5fGnlAS0IM.roa (hash: p+WC5acLc9Vp8ZBrdZrqWpaCEJthWpQv4NHUQY+p8+s=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/850e96-191f-4dcb-9edb-cd58fa2014dd/1/Iv0bWdXKr3UGvA1cNPMMIVmwQ5g.crl rsync://rpki.ripe.net/repository/DEFAULT/20/850e96-191f-4dcb-9edb-cd58fa2014dd/1/Iv0bWdXKr3UGvA1cNPMMIVmwQ5g.mft rsync://rpki.ripe.net/repository/DEFAULT/Iv0bWdXKr3UGvA1cNPMMIVmwQ5g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 12:01:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:89:b4:6f:27:4f:53:f1:a4:5a:e5:47:dd:de:06:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=22fd1b59d5caaf7506bc0d5c34f30c2159b04398 Validity Not Before: Dec 6 12:01:19 2025 GMT Not After : Dec 7 12:01:19 2025 GMT Subject: CN=f5cfe82521f5e3e8ca24f628d10be470028466d7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:9a:68:88:3b:ee:32:e3:88:8c:20:57:16:c4: d3:01:59:e7:4a:d9:6e:6d:8b:04:e8:b9:e9:96:1d: d9:87:5e:d7:40:60:7c:fe:18:e8:e4:60:5c:3c:50: c5:89:04:54:f1:b9:3e:7a:cf:c9:bf:5a:05:e8:52: 3a:de:86:ef:73:50:f6:12:56:b6:94:da:05:3c:ab: 3b:2b:cb:60:a3:d6:62:76:68:8d:1e:0d:a3:c7:6a: 03:56:43:be:7a:15:e3:45:d1:39:44:de:f6:01:a9: 5f:18:68:0b:2e:5d:20:0f:5b:a3:1d:ad:62:36:22: 14:ad:9b:fb:4f:f0:76:91:b2:ab:04:26:3d:51:50: 99:e6:57:8b:33:c1:d7:06:9f:83:0d:77:5a:71:fe: e1:35:c4:44:54:b0:6b:fc:b6:cd:38:1c:08:58:07: e9:81:eb:38:a4:5e:c4:cd:18:ab:f1:5a:8c:c9:58: 2f:57:7e:a0:fc:01:cb:2c:99:f2:52:65:97:f9:2a: ad:e4:38:19:85:8b:a9:4d:90:34:02:9a:7b:e8:34: fe:fc:94:77:70:8c:ad:d3:9c:08:ab:ca:f5:7e:d4: 40:0b:62:8e:8e:eb:42:81:95:93:f5:15:3a:a4:9a: 11:a1:a1:6a:80:41:98:1e:16:cd:21:fa:9f:1d:a8: 0b:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:CF:E8:25:21:F5:E3:E8:CA:24:F6:28:D1:0B:E4:70:02:84:66:D7 X509v3 Authority Key Identifier: keyid:22:FD:1B:59:D5:CA:AF:75:06:BC:0D:5C:34:F3:0C:21:59:B0:43:98 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Iv0bWdXKr3UGvA1cNPMMIVmwQ5g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/850e96-191f-4dcb-9edb-cd58fa2014dd/1/Iv0bWdXKr3UGvA1cNPMMIVmwQ5g.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/20/850e96-191f-4dcb-9edb-cd58fa2014dd/1/Iv0bWdXKr3UGvA1cNPMMIVmwQ5g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a9:f3:0e:88:09:92:f2:59:0e:4f:b7:3d:a6:76:27:88:52:96: 2c:e3:0c:15:ff:cf:92:38:47:4d:6f:bd:c3:07:26:4b:bb:6f: ee:c1:ad:91:11:94:b4:48:2c:bd:82:9a:27:c9:27:b3:20:af: 7f:07:20:69:df:51:ba:4a:03:87:c7:78:ac:bf:06:0f:78:0e: c9:7a:f3:5d:72:df:48:2b:42:77:7b:85:5f:82:39:93:7b:bc: da:3d:c5:41:59:2b:97:e6:ec:3a:8c:48:b0:c3:53:30:e4:e3: 70:da:26:02:dc:d8:2a:1b:c7:04:75:9f:ed:66:8c:15:bd:bb: ca:dd:3e:30:6e:5b:2d:3e:db:4f:40:6d:29:36:a2:c2:2c:db: a6:6f:1f:95:e3:62:9a:3c:83:9e:df:6c:03:5a:90:89:7f:c5: 12:e0:e7:eb:dd:98:7f:04:b1:ae:d7:8c:4f:9e:6b:48:86:7a: ba:cf:8c:c8:75:2d:13:5b:df:7e:0b:b6:66:c0:7b:2f:6a:bf: 63:f7:3e:f5:4f:70:14:28:54:c7:d0:01:d3:05:25:61:de:e5: 95:ad:e0:d3:af:22:49:91:40:a5:f9:68:93:9c:7e:12:ea:21: a9:bb:e6:da:6a:1e:29:ca:63:f0:de:19:01:9e:ae:9a:c3:ae: e2:0e:2d:51 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzibRvJ09T8aRa5Ufd3gbgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIyZmQxYjU5ZDVjYWFmNzUwNmJjMGQ1YzM0ZjMwYzIxNTli MDQzOTgwHhcNMjUxMjA2MTIwMTE5WhcNMjUxMjA3MTIwMTE5WjAzMTEwLwYDVQQD EyhmNWNmZTgyNTIxZjVlM2U4Y2EyNGY2MjhkMTBiZTQ3MDAyODQ2NmQ3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmppoiDvuMuOIjCBXFsTTAVnnStlu bYsE6Lnplh3Zh17XQGB8/hjo5GBcPFDFiQRU8bk+es/Jv1oF6FI63obvc1D2Ela2 lNoFPKs7K8tgo9ZidmiNHg2jx2oDVkO+ehXjRdE5RN72AalfGGgLLl0gD1ujHa1i NiIUrZv7T/B2kbKrBCY9UVCZ5leLM8HXBp+DDXdacf7hNcREVLBr/LbNOBwIWAfp ges4pF7EzRir8VqMyVgvV36g/AHLLJnyUmWX+Sqt5DgZhYupTZA0App76DT+/JR3 cIyt05wIq8r1ftRAC2KOjutCgZWT9RU6pJoRoaFqgEGYHhbNIfqfHagLrQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPXP6CUh9ePoyiT2KNEL5HAChGbXMB8GA1UdIwQY MBaAFCL9G1nVyq91BrwNXDTzDCFZsEOYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSXYwYldkWEtyM1VHdkExY05QTU1JVm13UTVnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMC84NTBlOTYtMTkxZi00ZGNiLTllZGIt Y2Q1OGZhMjAxNGRkLzEvSXYwYldkWEtyM1VHdkExY05QTU1JVm13UTVnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMC84NTBlOTYtMTkxZi00ZGNiLTllZGItY2Q1OGZhMjAxNGRk LzEvSXYwYldkWEtyM1VHdkExY05QTU1JVm13UTVnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqfMOiAmS 8lkOT7c9pnYniFKWLOMMFf/PkjhHTW+9wwcmS7tv7sGtkRGUtEgsvYKaJ8knsyCv fwcgad9RukoDh8d4rL8GD3gOyXrzXXLfSCtCd3uFX4I5k3u82j3FQVkrl+bsOoxI sMNTMOTjcNomAtzYKhvHBHWf7WaMFb27yt0+MG5bLT7bT0BtKTaiwizbpm8fleNi mjyDnt9sA1qQiX/FEuDn692YfwSxrteMT55rSIZ6us+MyHUtE1vffgu2ZsB7L2q/ Y/c+9U9wFChUx9AB0wUlYd7lla3g068iSZFApflok5x+Euohqbvm2moeKcpj8N4Z AZ6umsOu4g4tUQ== -----END CERTIFICATE-----Generated at Sat Dec 6 16:41:09 2025 by rpki-client