This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/24fd15-22a9-4bd6-a232-8b36e9d063a1/1/iPNC3REnxnrxEWqx-ZfifLTIhOg.mft File: iPNC3REnxnrxEWqx-ZfifLTIhOg.mft (raw, json) Hash identifier: pzWlp8Ge7vFNDgHYKY8OW4pvQvXAoroc8S7cV/vsYbM= Subject key identifier: 2E:66:FE:09:70:20:4D:52:86:2F:29:6B:9C:20:AA:5E:D8:B0:15:4A Authority key identifier: 88:F3:42:DD:11:27:C6:7A:F1:11:6A:B1:F9:97:E2:7C:B4:C8:84:E8 Certificate issuer: /CN=88f342dd1127c67af1116ab1f997e27cb4c884e8 Certificate serial: 019AF98B7A5811D51F0F5D2C92CFFB68C5C5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iPNC3REnxnrxEWqx-ZfifLTIhOg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/24fd15-22a9-4bd6-a232-8b36e9d063a1/1/iPNC3REnxnrxEWqx-ZfifLTIhOg.mft Manifest number: 1766 Signing time: Sun 07 Dec 2025 16:00:58 +0000 Manifest this update: Sun 07 Dec 2025 16:00:58 +0000 Manifest next update: Mon 08 Dec 2025 16:00:58 +0000 Files and hashes: 1: 0tVPRt7zVqUIIvmXairhGKRXv0U.roa (hash: dhSo1lkIbUUIXrPA3/k2AFZiXI7dxBUbTf590V+gQts=) 2: iPNC3REnxnrxEWqx-ZfifLTIhOg.crl (hash: sqxk9Z1sOTsOJjPGGVqqFxDJviYmDxndLYFUSNsjP4E=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/24fd15-22a9-4bd6-a232-8b36e9d063a1/1/iPNC3REnxnrxEWqx-ZfifLTIhOg.crl rsync://rpki.ripe.net/repository/DEFAULT/2d/24fd15-22a9-4bd6-a232-8b36e9d063a1/1/iPNC3REnxnrxEWqx-ZfifLTIhOg.mft rsync://rpki.ripe.net/repository/DEFAULT/iPNC3REnxnrxEWqx-ZfifLTIhOg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 08 Dec 2025 16:00:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f9:8b:7a:58:11:d5:1f:0f:5d:2c:92:cf:fb:68:c5:c5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=88f342dd1127c67af1116ab1f997e27cb4c884e8 Validity Not Before: Dec 7 16:00:58 2025 GMT Not After : Dec 8 16:00:58 2025 GMT Subject: CN=2e66fe0970204d52862f296b9c20aa5ed8b0154a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:a0:3a:1d:56:8c:f9:b2:2c:9f:bb:df:93:b2: 4b:9b:ed:d2:16:f2:2c:1b:d9:09:54:a1:d3:76:67: f7:00:ad:dd:d1:8d:9f:6c:e8:cc:e1:d3:5b:43:f6: 88:f4:cd:3c:ff:4f:36:f8:b5:75:9c:2e:84:36:8f: 25:04:73:99:c4:6f:73:4e:98:2c:3e:dc:90:7f:e6: 98:7b:7b:dc:80:f4:ae:88:76:43:17:71:66:11:9d: c7:57:e3:32:66:63:07:1d:c2:36:7c:3a:a0:68:87: 9f:68:cb:6f:e1:a4:b0:7f:a9:95:e8:83:73:e5:b9: e3:61:f7:74:4d:c9:b2:64:f7:bd:6b:5c:41:28:63: b0:d8:e4:41:95:c0:80:3d:e8:9d:06:8c:2d:7c:3a: 52:7c:2b:42:94:4b:a2:e5:51:a5:4a:94:49:fd:37: af:48:d6:89:63:f7:37:58:2b:00:61:b4:77:4f:4a: 00:ba:15:0f:ef:4b:55:12:59:12:66:0b:12:a9:71: 1f:61:52:25:da:5a:de:31:28:eb:09:01:10:e0:29: 13:69:32:85:98:19:85:01:a4:75:b7:5d:6a:7c:24: 17:99:f2:4f:09:56:b9:2b:6b:ee:ff:b8:30:e6:02: de:bc:13:88:c9:f8:2d:44:df:2f:e2:12:f5:30:09: c8:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:66:FE:09:70:20:4D:52:86:2F:29:6B:9C:20:AA:5E:D8:B0:15:4A X509v3 Authority Key Identifier: keyid:88:F3:42:DD:11:27:C6:7A:F1:11:6A:B1:F9:97:E2:7C:B4:C8:84:E8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iPNC3REnxnrxEWqx-ZfifLTIhOg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/24fd15-22a9-4bd6-a232-8b36e9d063a1/1/iPNC3REnxnrxEWqx-ZfifLTIhOg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/24fd15-22a9-4bd6-a232-8b36e9d063a1/1/iPNC3REnxnrxEWqx-ZfifLTIhOg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a6:65:e8:41:d3:b9:7d:c3:d8:6d:c1:77:8e:50:5e:76:08:02: c7:3f:6f:d8:f1:72:92:ac:1b:cc:3d:67:ba:77:09:8b:fd:59: b5:e5:31:8e:64:f0:e8:62:62:5f:e3:72:ec:f8:e6:da:cf:cb: 84:93:ca:a7:e3:5e:b2:2f:5d:79:d0:66:1c:ff:1e:0e:cc:a6: 72:85:7d:4f:85:fc:27:04:45:f0:26:4a:c7:47:a3:1b:88:a3: f5:21:ea:dd:44:90:fa:84:28:60:da:75:86:6c:70:d4:76:12: e5:9e:0c:4a:91:23:8b:a0:6e:51:5b:80:42:14:9f:12:d8:81: fb:84:3f:02:04:46:fe:04:50:a4:57:40:8e:7c:2e:d9:c8:9f: 0d:d1:fd:40:32:a6:4e:46:c7:15:5b:c5:6e:e5:1c:b0:b2:fe: 20:2e:28:0d:1c:45:e4:03:05:88:28:1e:2a:54:7b:ab:1b:6e: c5:ca:43:4e:93:1e:dd:62:fc:a6:62:48:26:d7:6c:c1:24:f8: 3b:98:61:f7:17:87:3c:05:39:24:bf:b5:8e:84:22:de:43:65: 1a:48:c6:66:97:41:d5:56:97:d7:dd:bf:5c:a6:dd:ec:58:00: 47:c8:0a:97:71:e7:f9:15:5c:6e:fa:64:7e:10:79:c7:87:49: 59:79:ae:d9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr5i3pYEdUfD10sks/7aMXFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg4ZjM0MmRkMTEyN2M2N2FmMTExNmFiMWY5OTdlMjdjYjRj ODg0ZTgwHhcNMjUxMjA3MTYwMDU4WhcNMjUxMjA4MTYwMDU4WjAzMTEwLwYDVQQD EygyZTY2ZmUwOTcwMjA0ZDUyODYyZjI5NmI5YzIwYWE1ZWQ4YjAxNTRhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt6A6HVaM+bIsn7vfk7JLm+3SFvIs G9kJVKHTdmf3AK3d0Y2fbOjM4dNbQ/aI9M08/082+LV1nC6ENo8lBHOZxG9zTpgs PtyQf+aYe3vcgPSuiHZDF3FmEZ3HV+MyZmMHHcI2fDqgaIefaMtv4aSwf6mV6INz 5bnjYfd0TcmyZPe9a1xBKGOw2ORBlcCAPeidBowtfDpSfCtClEui5VGlSpRJ/Tev SNaJY/c3WCsAYbR3T0oAuhUP70tVElkSZgsSqXEfYVIl2lreMSjrCQEQ4CkTaTKF mBmFAaR1t11qfCQXmfJPCVa5K2vu/7gw5gLevBOIyfgtRN8v4hL1MAnIuQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFC5m/glwIE1Shi8pa5wgql7YsBVKMB8GA1UdIwQY MBaAFIjzQt0RJ8Z68RFqsfmX4ny0yIToMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaVBOQzNSRW54bnJ4RVdxeC1aZmlmTFRJaE9nLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZC8yNGZkMTUtMjJhOS00YmQ2LWEyMzIt OGIzNmU5ZDA2M2ExLzEvaVBOQzNSRW54bnJ4RVdxeC1aZmlmTFRJaE9nLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZC8yNGZkMTUtMjJhOS00YmQ2LWEyMzItOGIzNmU5ZDA2M2Ex LzEvaVBOQzNSRW54bnJ4RVdxeC1aZmlmTFRJaE9nLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApmXoQdO5 fcPYbcF3jlBedggCxz9v2PFykqwbzD1nuncJi/1ZteUxjmTw6GJiX+Ny7Pjm2s/L hJPKp+Nesi9dedBmHP8eDsymcoV9T4X8JwRF8CZKx0ejG4ij9SHq3USQ+oQoYNp1 hmxw1HYS5Z4MSpEji6BuUVuAQhSfEtiB+4Q/AgRG/gRQpFdAjnwu2cifDdH9QDKm TkbHFVvFbuUcsLL+IC4oDRxF5AMFiCgeKlR7qxtuxcpDTpMe3WL8pmJIJtdswST4 O5hh9xeHPAU5JL+1joQi3kNlGkjGZpdB1VaX192/XKbd7FgAR8gKl3Hn+RVcbvpk fhB5x4dJWXmu2Q== -----END CERTIFICATE-----Generated at Sun Dec 7 21:32:49 2025 by rpki-client