This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/ccbf7a-ec38-44e6-b2eb-7187977e057e/1/iIx7lGQtLku_uVg62UH1HrjEVkA.mft File: iIx7lGQtLku_uVg62UH1HrjEVkA.mft (raw, json) Hash identifier: yAnKEEVQBe1zVguo/TgE4s5BbFcMEsABPwoJpKJDiV8= Subject key identifier: 5D:4F:48:B4:6E:A1:80:E7:4E:31:9F:3D:C4:82:D3:C0:F4:ED:AF:31 Authority key identifier: 88:8C:7B:94:64:2D:2E:4B:BF:B9:58:3A:D9:41:F5:1E:B8:C4:56:40 Certificate issuer: /CN=888c7b94642d2e4bbfb9583ad941f51eb8c45640 Certificate serial: 019B25BFE5624C57879DC7D042718CCA1251 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iIx7lGQtLku_uVg62UH1HrjEVkA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/ccbf7a-ec38-44e6-b2eb-7187977e057e/1/iIx7lGQtLku_uVg62UH1HrjEVkA.mft Manifest number: 1177 Signing time: Tue 16 Dec 2025 06:01:31 +0000 Manifest this update: Tue 16 Dec 2025 06:01:31 +0000 Manifest next update: Wed 17 Dec 2025 06:01:31 +0000 Files and hashes: 1: cuExqJqxDerCAtylcJmCrVbgef4.roa (hash: 598WR0Sv6MZYZg5mTZECmrWO2D4wIr/fUZ49xt8Yu9Q=) 2: iIx7lGQtLku_uVg62UH1HrjEVkA.crl (hash: zUS5XhcZ6PQF8ltSTnS8ZILvrCVUi9SpyT5RAr4ruEQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/ccbf7a-ec38-44e6-b2eb-7187977e057e/1/iIx7lGQtLku_uVg62UH1HrjEVkA.crl rsync://rpki.ripe.net/repository/DEFAULT/25/ccbf7a-ec38-44e6-b2eb-7187977e057e/1/iIx7lGQtLku_uVg62UH1HrjEVkA.mft rsync://rpki.ripe.net/repository/DEFAULT/iIx7lGQtLku_uVg62UH1HrjEVkA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 06:01:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:25:bf:e5:62:4c:57:87:9d:c7:d0:42:71:8c:ca:12:51 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=888c7b94642d2e4bbfb9583ad941f51eb8c45640 Validity Not Before: Dec 16 06:01:31 2025 GMT Not After : Dec 17 06:01:31 2025 GMT Subject: CN=5d4f48b46ea180e74e319f3dc482d3c0f4edaf31 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:76:1c:f5:2e:f9:c0:a3:a5:ce:84:27:94:f7: af:ad:97:bf:18:ed:0c:6e:d1:bc:f9:4e:ea:46:e0: e4:af:85:d1:23:87:df:f5:da:3e:27:96:53:5c:0d: 2b:9d:7a:0f:68:7c:e6:40:fb:21:ee:60:86:97:17: 66:45:02:58:f0:f7:9a:fc:79:93:d3:97:46:d3:87: 20:3c:08:84:0a:28:56:60:d4:26:db:39:6e:6c:1b: f5:99:74:cc:2b:78:38:b4:15:f2:ef:f7:67:07:cb: d4:f7:a5:b0:f2:a9:0a:63:06:05:eb:95:f7:d5:1d: 25:d0:88:42:5c:5c:8c:ad:e3:71:6e:d7:b4:9b:45: 7c:c8:16:a4:67:ea:f0:60:11:14:07:d6:3b:70:b3: 00:73:b0:ee:91:bb:61:2e:89:ef:98:d3:bc:0b:be: e3:16:98:d9:00:ee:5a:cd:26:d6:fa:89:87:c4:fd: 44:e8:f4:fd:37:03:db:87:9d:7a:af:e1:d7:94:41: db:14:f5:2d:8f:29:86:b5:0e:50:3f:1c:29:a1:1e: 09:cd:51:1d:d3:bf:c3:f4:fc:a6:66:49:61:e3:b6: de:b3:08:63:bb:60:eb:a4:1b:99:6e:aa:14:51:3d: 93:b7:fc:3c:2d:9a:5f:e9:40:2e:7c:6d:a3:cd:e4: 66:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:4F:48:B4:6E:A1:80:E7:4E:31:9F:3D:C4:82:D3:C0:F4:ED:AF:31 X509v3 Authority Key Identifier: keyid:88:8C:7B:94:64:2D:2E:4B:BF:B9:58:3A:D9:41:F5:1E:B8:C4:56:40 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iIx7lGQtLku_uVg62UH1HrjEVkA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/ccbf7a-ec38-44e6-b2eb-7187977e057e/1/iIx7lGQtLku_uVg62UH1HrjEVkA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/25/ccbf7a-ec38-44e6-b2eb-7187977e057e/1/iIx7lGQtLku_uVg62UH1HrjEVkA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ba:40:da:7a:c4:40:9e:a1:b6:3d:f3:8e:35:97:47:fb:97:49: 33:f9:d7:b8:f9:44:0b:d5:13:49:ef:16:ba:27:d6:4b:ab:ac: e4:8c:ef:bb:5d:47:5a:a9:c8:03:dc:5a:81:92:68:eb:1f:b6: d6:11:36:bc:0f:5c:34:cd:10:9a:9d:ec:7c:41:92:75:7b:98: 24:f1:b3:46:3f:22:f8:4a:e1:fb:66:d1:e8:5a:73:33:55:47: 81:e2:c0:31:15:f6:06:fe:07:14:5e:79:6f:91:ff:bf:f2:33: de:bb:4e:52:18:d1:45:ba:f4:84:5b:52:ce:b5:1a:6c:58:54: 7e:3e:44:2c:01:28:c9:9a:6e:0f:c5:7f:ad:e8:b7:04:4a:a7: 78:ed:b2:64:af:43:a3:c2:e7:a0:1b:69:09:da:ce:dd:9a:65: 6c:93:b6:28:fe:48:5b:4b:ab:d3:f6:53:b0:e2:b6:13:5c:52: df:77:e4:48:ce:bd:26:45:d6:1a:bb:53:e7:7f:31:cd:3b:1c: cd:fe:7e:37:b6:19:59:87:83:75:e1:7c:de:17:7e:4f:90:79: 6b:02:a2:bb:5e:79:59:e9:a7:25:68:02:34:02:08:3a:4c:3c: b2:35:80:70:b7:a0:84:f5:f1:bd:2f:cb:11:dc:81:66:51:37: 29:0c:37:be -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZslv+ViTFeHncfQQnGMyhJRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg4OGM3Yjk0NjQyZDJlNGJiZmI5NTgzYWQ5NDFmNTFlYjhj NDU2NDAwHhcNMjUxMjE2MDYwMTMxWhcNMjUxMjE3MDYwMTMxWjAzMTEwLwYDVQQD Eyg1ZDRmNDhiNDZlYTE4MGU3NGUzMTlmM2RjNDgyZDNjMGY0ZWRhZjMxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApnYc9S75wKOlzoQnlPevrZe/GO0M btG8+U7qRuDkr4XRI4ff9do+J5ZTXA0rnXoPaHzmQPsh7mCGlxdmRQJY8Pea/HmT 05dG04cgPAiECihWYNQm2zlubBv1mXTMK3g4tBXy7/dnB8vU96Ww8qkKYwYF65X3 1R0l0IhCXFyMreNxbte0m0V8yBakZ+rwYBEUB9Y7cLMAc7DukbthLonvmNO8C77j FpjZAO5azSbW+omHxP1E6PT9NwPbh516r+HXlEHbFPUtjymGtQ5QPxwpoR4JzVEd 07/D9PymZklh47beswhju2DrpBuZbqoUUT2Tt/w8LZpf6UAufG2jzeRmBQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFF1PSLRuoYDnTjGfPcSC08D07a8xMB8GA1UdIwQY MBaAFIiMe5RkLS5Lv7lYOtlB9R64xFZAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaUl4N2xHUXRMa3VfdVZnNjJVSDFIcmpFVmtBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS9jY2JmN2EtZWMzOC00NGU2LWIyZWIt NzE4Nzk3N2UwNTdlLzEvaUl4N2xHUXRMa3VfdVZnNjJVSDFIcmpFVmtBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNS9jY2JmN2EtZWMzOC00NGU2LWIyZWItNzE4Nzk3N2UwNTdl LzEvaUl4N2xHUXRMa3VfdVZnNjJVSDFIcmpFVmtBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAukDaesRA nqG2PfOONZdH+5dJM/nXuPlEC9UTSe8WuifWS6us5Izvu11HWqnIA9xagZJo6x+2 1hE2vA9cNM0Qmp3sfEGSdXuYJPGzRj8i+Erh+2bR6FpzM1VHgeLAMRX2Bv4HFF55 b5H/v/Iz3rtOUhjRRbr0hFtSzrUabFhUfj5ELAEoyZpuD8V/rei3BEqneO2yZK9D o8LnoBtpCdrO3ZplbJO2KP5IW0ur0/ZTsOK2E1xS33fkSM69JkXWGrtT538xzTsc zf5+N7YZWYeDdeF83hd+T5B5awKiu155WemnJWgCNAIIOkw8sjWAcLeghPXxvS/L EdyBZlE3KQw3vg== -----END CERTIFICATE-----Generated at Tue Dec 16 16:06:12 2025 by rpki-client