This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/45a9c5-2cc1-4f45-ba80-ad58189de754/1/ira9Zf4qhv1C-cT1BOHu1YVw-T0.mft File: ira9Zf4qhv1C-cT1BOHu1YVw-T0.mft (raw, json) Hash identifier: oyU38PLylrdpILd8pLiqvy/Jlpz0p+a68UtjDo/GfP0= Subject key identifier: 3A:B4:36:E0:D7:07:9A:EC:33:57:4E:F7:08:46:BF:75:7C:00:4A:A5 Authority key identifier: 8A:B6:BD:65:FE:2A:86:FD:42:F9:C4:F5:04:E1:EE:D5:85:70:F9:3D Certificate issuer: /CN=8ab6bd65fe2a86fd42f9c4f504e1eed58570f93d Certificate serial: 019AF19B79C0CD34CA5F4ECCB72FBA9C2FF5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ira9Zf4qhv1C-cT1BOHu1YVw-T0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/45a9c5-2cc1-4f45-ba80-ad58189de754/1/ira9Zf4qhv1C-cT1BOHu1YVw-T0.mft Manifest number: 08A5 Signing time: Sat 06 Dec 2025 03:01:29 +0000 Manifest this update: Sat 06 Dec 2025 03:01:29 +0000 Manifest next update: Sun 07 Dec 2025 03:01:29 +0000 Files and hashes: 1: 46cUFKURmF9XnPH8sSx3t3pgjTo.roa (hash: 0QimrSPj6EgGm2B8/lr6EDBnOBJIibCqv64JLqj1ceI=) 2: ira9Zf4qhv1C-cT1BOHu1YVw-T0.crl (hash: WgEViXQTLNaGe3nVSIxmpsnX9ILbA8zMydwyINTtj9I=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/45a9c5-2cc1-4f45-ba80-ad58189de754/1/ira9Zf4qhv1C-cT1BOHu1YVw-T0.crl rsync://rpki.ripe.net/repository/DEFAULT/27/45a9c5-2cc1-4f45-ba80-ad58189de754/1/ira9Zf4qhv1C-cT1BOHu1YVw-T0.mft rsync://rpki.ripe.net/repository/DEFAULT/ira9Zf4qhv1C-cT1BOHu1YVw-T0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9b:79:c0:cd:34:ca:5f:4e:cc:b7:2f:ba:9c:2f:f5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8ab6bd65fe2a86fd42f9c4f504e1eed58570f93d Validity Not Before: Dec 6 03:01:29 2025 GMT Not After : Dec 7 03:01:29 2025 GMT Subject: CN=3ab436e0d7079aec33574ef70846bf757c004aa5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:fe:f9:36:14:67:fe:38:f0:1e:a0:d3:be:46: cc:c6:4f:61:ed:8a:f0:f8:4f:58:3c:c2:e3:b2:a0: ab:42:d8:ab:cb:a8:9a:5f:af:fb:5f:5f:25:3e:d2: 66:b6:7c:c7:bc:11:41:ee:b8:e6:fe:0a:d6:c2:38: 6f:10:52:63:9c:68:50:10:df:a6:9b:91:78:1d:0c: f5:97:e1:29:ae:8d:e6:43:03:29:71:d7:a0:03:c6: 52:ec:15:a9:35:cf:9d:51:bd:56:eb:ad:11:cf:c4: 30:4e:9f:ba:c2:d5:b7:71:55:e6:1b:f7:06:22:0f: f0:eb:c6:30:2d:40:61:ff:1a:c9:04:13:a8:ea:81: fb:9f:87:9b:6d:c9:eb:c2:21:92:c3:8a:e7:02:0c: 0a:b1:43:f0:79:f6:63:ce:b4:58:34:98:34:48:8d: 92:28:75:26:59:eb:e0:9b:6f:5e:dd:9d:95:4e:bc: b6:51:10:08:c1:13:dd:62:62:28:8b:eb:e3:c8:b5: ea:ae:4b:e5:db:59:30:09:3c:bd:9d:7d:fe:75:5c: f0:72:99:e5:ea:05:ab:ab:7a:76:cc:5f:04:02:6d: f4:72:b8:fd:bc:80:8e:e5:53:c7:c4:46:3e:8b:80: d3:cf:25:7b:cd:a9:5d:cf:64:06:63:7d:87:60:fe: 33:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:B4:36:E0:D7:07:9A:EC:33:57:4E:F7:08:46:BF:75:7C:00:4A:A5 X509v3 Authority Key Identifier: keyid:8A:B6:BD:65:FE:2A:86:FD:42:F9:C4:F5:04:E1:EE:D5:85:70:F9:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ira9Zf4qhv1C-cT1BOHu1YVw-T0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/45a9c5-2cc1-4f45-ba80-ad58189de754/1/ira9Zf4qhv1C-cT1BOHu1YVw-T0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/27/45a9c5-2cc1-4f45-ba80-ad58189de754/1/ira9Zf4qhv1C-cT1BOHu1YVw-T0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 95:13:32:66:fb:4b:c9:0a:05:40:a3:ec:7e:4e:83:0a:a8:09: e5:bb:24:21:01:31:1f:34:9f:26:29:f9:3c:1b:6f:ae:42:43: 4e:46:88:ba:0b:68:57:a6:88:bc:26:e6:5e:51:3d:43:6c:c1: b7:9c:16:19:5e:c7:59:bb:cf:81:30:10:e2:a4:ea:00:99:b9: 2e:d4:9e:4a:ed:a8:f0:0d:2e:64:77:d7:e2:52:27:3b:19:83: ef:92:b9:0c:b1:58:79:2d:df:4d:56:65:ec:5e:cb:da:a0:dd: 5c:8e:5b:ce:7a:a1:9c:4a:b3:b4:e4:72:ba:5e:0b:e7:bc:78: 79:b0:40:7a:e1:ec:96:e3:a2:4b:4f:c4:8d:07:2d:a2:58:9c: 20:85:a1:6a:24:13:40:06:08:34:86:ee:d5:32:77:cf:0b:c3: eb:88:f2:22:1e:2f:1d:4c:39:40:66:87:a8:8f:a9:87:b9:9b: da:3e:07:bb:31:81:15:44:8f:f0:19:18:6c:d2:5e:75:37:9f: 8a:9d:48:94:67:dc:11:a4:01:45:a4:c7:bc:70:2f:62:35:ee: c4:72:47:07:2c:e9:f6:26:ed:81:cf:d6:a5:68:d0:a4:7f:e1: c5:ef:f4:a0:a0:01:c1:1a:b9:ee:80:e4:7b:ce:f4:7f:bb:9e: 9c:8a:6a:3f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxm3nAzTTKX07Mty+6nC/1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhhYjZiZDY1ZmUyYTg2ZmQ0MmY5YzRmNTA0ZTFlZWQ1ODU3 MGY5M2QwHhcNMjUxMjA2MDMwMTI5WhcNMjUxMjA3MDMwMTI5WjAzMTEwLwYDVQQD EygzYWI0MzZlMGQ3MDc5YWVjMzM1NzRlZjcwODQ2YmY3NTdjMDA0YWE1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoP75NhRn/jjwHqDTvkbMxk9h7Yrw +E9YPMLjsqCrQtiry6iaX6/7X18lPtJmtnzHvBFB7rjm/grWwjhvEFJjnGhQEN+m m5F4HQz1l+Epro3mQwMpcdegA8ZS7BWpNc+dUb1W660Rz8QwTp+6wtW3cVXmG/cG Ig/w68YwLUBh/xrJBBOo6oH7n4ebbcnrwiGSw4rnAgwKsUPwefZjzrRYNJg0SI2S KHUmWevgm29e3Z2VTry2URAIwRPdYmIoi+vjyLXqrkvl21kwCTy9nX3+dVzwcpnl 6gWrq3p2zF8EAm30crj9vICO5VPHxEY+i4DTzyV7zaldz2QGY32HYP4zUQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDq0NuDXB5rsM1dO9whGv3V8AEqlMB8GA1UdIwQY MBaAFIq2vWX+Kob9QvnE9QTh7tWFcPk9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaXJhOVpmNHFodjFDLWNUMUJPSHUxWVZ3LVQwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNy80NWE5YzUtMmNjMS00ZjQ1LWJhODAt YWQ1ODE4OWRlNzU0LzEvaXJhOVpmNHFodjFDLWNUMUJPSHUxWVZ3LVQwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNy80NWE5YzUtMmNjMS00ZjQ1LWJhODAtYWQ1ODE4OWRlNzU0 LzEvaXJhOVpmNHFodjFDLWNUMUJPSHUxWVZ3LVQwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlRMyZvtL yQoFQKPsfk6DCqgJ5bskIQExHzSfJin5PBtvrkJDTkaIugtoV6aIvCbmXlE9Q2zB t5wWGV7HWbvPgTAQ4qTqAJm5LtSeSu2o8A0uZHfX4lInOxmD75K5DLFYeS3fTVZl 7F7L2qDdXI5bznqhnEqztORyul4L57x4ebBAeuHsluOiS0/EjQctolicIIWhaiQT QAYINIbu1TJ3zwvD64jyIh4vHUw5QGaHqI+ph7mb2j4HuzGBFUSP8BkYbNJedTef ip1IlGfcEaQBRaTHvHAvYjXuxHJHByzp9ibtgc/WpWjQpH/hxe/0oKABwRq57oDk e870f7uenIpqPw== -----END CERTIFICATE-----Generated at Sat Dec 6 07:14:01 2025 by rpki-client