This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/075bc1-2b55-40b1-990e-23bb4203eb57/1/ieS_WYd6Oy7xT18SCmdQ3BSTnGs.mft File: ieS_WYd6Oy7xT18SCmdQ3BSTnGs.mft (raw, json) Hash identifier: xhhveSpVWVdynmBDPbU/JgxWd1a9rcItZsvrpIbGuFQ= Subject key identifier: 69:F0:B2:32:31:CB:41:6D:DA:A0:68:E6:6E:4F:38:34:E2:AA:35:2C Authority key identifier: 89:E4:BF:59:87:7A:3B:2E:F1:4F:5F:12:0A:67:50:DC:14:93:9C:6B Certificate issuer: /CN=89e4bf59877a3b2ef14f5f120a6750dc14939c6b Certificate serial: 019AF19B6287564E4E40951EF50142C8B9B6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ieS_WYd6Oy7xT18SCmdQ3BSTnGs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/075bc1-2b55-40b1-990e-23bb4203eb57/1/ieS_WYd6Oy7xT18SCmdQ3BSTnGs.mft Manifest number: 11EC Signing time: Sat 06 Dec 2025 03:01:23 +0000 Manifest this update: Sat 06 Dec 2025 03:01:23 +0000 Manifest next update: Sun 07 Dec 2025 03:01:23 +0000 Files and hashes: 1: 50v4LzlHhYMKbD4_ZkEJUgTdzZ8.roa (hash: 1zEQgnD6BlkobEHrpf54y5TDCgcpHnLxK3nKztK1TZQ=) 2: ieS_WYd6Oy7xT18SCmdQ3BSTnGs.crl (hash: k4jIqTagAb6iiZ5EUA/TS0lSHmICEJKJKY/prHtEDiw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/075bc1-2b55-40b1-990e-23bb4203eb57/1/ieS_WYd6Oy7xT18SCmdQ3BSTnGs.crl rsync://rpki.ripe.net/repository/DEFAULT/2f/075bc1-2b55-40b1-990e-23bb4203eb57/1/ieS_WYd6Oy7xT18SCmdQ3BSTnGs.mft rsync://rpki.ripe.net/repository/DEFAULT/ieS_WYd6Oy7xT18SCmdQ3BSTnGs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 03:01:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9b:62:87:56:4e:4e:40:95:1e:f5:01:42:c8:b9:b6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89e4bf59877a3b2ef14f5f120a6750dc14939c6b Validity Not Before: Dec 6 03:01:23 2025 GMT Not After : Dec 7 03:01:23 2025 GMT Subject: CN=69f0b23231cb416ddaa068e66e4f3834e2aa352c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:2e:9e:ef:0e:b4:13:dc:a9:68:eb:ab:e4:2b: 89:73:b8:9c:83:5c:5c:8a:b8:60:5d:6a:65:99:d2: 43:dc:f3:b9:03:51:b7:f2:e3:21:56:8b:73:fb:7e: 65:56:fc:37:63:dc:2b:e7:6c:4a:ba:47:a9:7b:b9: 99:3d:dd:ae:d6:f2:96:7c:f4:63:c3:f5:46:1d:a2: d7:e9:f9:ac:f8:de:45:9b:9f:93:fd:f1:d0:8f:71: a1:7f:15:6a:a4:9d:52:03:01:2d:09:d4:65:a8:3d: 6f:c4:90:eb:ff:54:f4:56:32:ef:b7:40:d2:c3:74: 1a:d8:09:dc:1b:3c:8a:7a:98:57:c4:f7:53:10:1a: c2:69:75:f2:f0:ae:75:2c:8f:68:84:51:31:da:44: 8c:51:6f:fa:0b:82:fb:e5:c7:9a:d2:51:f9:7a:5f: c8:81:c8:36:84:84:a6:9c:64:8b:d9:47:e9:3e:e9: d4:af:b0:5b:ab:e0:d8:88:fd:34:11:84:f2:5b:59: 40:46:a1:17:7f:b9:64:e2:0c:84:ee:92:9d:80:a9: 69:43:76:ff:d9:84:f8:0b:44:82:3b:b0:f4:4b:0f: 0d:30:74:b8:2d:b4:dc:b3:40:8b:d3:82:0b:4f:50: 3b:4e:7f:4d:ba:01:36:df:c4:ed:41:c1:2f:cf:fd: c4:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:F0:B2:32:31:CB:41:6D:DA:A0:68:E6:6E:4F:38:34:E2:AA:35:2C X509v3 Authority Key Identifier: keyid:89:E4:BF:59:87:7A:3B:2E:F1:4F:5F:12:0A:67:50:DC:14:93:9C:6B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ieS_WYd6Oy7xT18SCmdQ3BSTnGs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/075bc1-2b55-40b1-990e-23bb4203eb57/1/ieS_WYd6Oy7xT18SCmdQ3BSTnGs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/075bc1-2b55-40b1-990e-23bb4203eb57/1/ieS_WYd6Oy7xT18SCmdQ3BSTnGs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption cb:25:38:59:6d:3e:78:d3:39:05:b8:8e:f3:60:8a:6c:4f:46: 4b:c5:1c:bb:d6:0e:24:c9:5e:e2:db:ca:b9:de:8c:8f:7e:2e: 8a:f9:64:9f:06:ca:3b:cf:3c:84:18:fc:a2:09:3e:ed:97:33: c6:e8:17:22:16:33:27:b9:f3:9e:52:72:4b:e0:1e:de:a0:3a: aa:f4:90:bd:b4:d7:c0:b0:29:cf:c4:9a:57:9c:36:03:70:4d: ff:99:84:f4:ba:a4:3d:d4:c2:89:2c:53:61:d5:6a:3a:7b:23: 95:9b:16:02:65:26:87:b7:cb:f9:bd:de:7f:ad:ed:39:a7:3b: e6:29:aa:6f:fc:b8:e5:9b:52:a1:e7:a4:db:48:3d:9e:c6:bb: dd:fc:4a:f8:c2:f2:c9:90:fe:7a:d5:66:e2:6a:5f:1f:71:fa: 3e:d5:47:b1:65:ae:c6:23:ec:67:db:8c:f3:e0:01:68:c2:9a: 4a:2f:f8:06:34:41:5f:25:2d:fc:c4:0c:a9:49:5b:e6:f1:1f: 2d:c6:41:c1:bf:11:81:6f:b3:9a:bc:c4:f2:80:74:92:51:73: 02:7c:13:4e:65:7a:f9:b6:ff:7c:6f:3d:82:b1:a6:5d:26:5d: df:47:d7:8e:0f:fd:87:3a:ec:7a:4b:78:7d:6f:47:86:96:9c: ca:cc:e4:f5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxm2KHVk5OQJUe9QFCyLm2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg5ZTRiZjU5ODc3YTNiMmVmMTRmNWYxMjBhNjc1MGRjMTQ5 MzljNmIwHhcNMjUxMjA2MDMwMTIzWhcNMjUxMjA3MDMwMTIzWjAzMTEwLwYDVQQD Eyg2OWYwYjIzMjMxY2I0MTZkZGFhMDY4ZTY2ZTRmMzgzNGUyYWEzNTJjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqy6e7w60E9ypaOur5CuJc7icg1xc irhgXWplmdJD3PO5A1G38uMhVotz+35lVvw3Y9wr52xKukepe7mZPd2u1vKWfPRj w/VGHaLX6fms+N5Fm5+T/fHQj3GhfxVqpJ1SAwEtCdRlqD1vxJDr/1T0VjLvt0DS w3Qa2AncGzyKephXxPdTEBrCaXXy8K51LI9ohFEx2kSMUW/6C4L75cea0lH5el/I gcg2hISmnGSL2UfpPunUr7Bbq+DYiP00EYTyW1lARqEXf7lk4gyE7pKdgKlpQ3b/ 2YT4C0SCO7D0Sw8NMHS4LbTcs0CL04ILT1A7Tn9NugE238TtQcEvz/3EqwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGnwsjIxy0Ft2qBo5m5PODTiqjUsMB8GA1UdIwQY MBaAFInkv1mHejsu8U9fEgpnUNwUk5xrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaWVTX1dZZDZPeTd4VDE4U0NtZFEzQlNUbkdzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZi8wNzViYzEtMmI1NS00MGIxLTk5MGUt MjNiYjQyMDNlYjU3LzEvaWVTX1dZZDZPeTd4VDE4U0NtZFEzQlNUbkdzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZi8wNzViYzEtMmI1NS00MGIxLTk5MGUtMjNiYjQyMDNlYjU3 LzEvaWVTX1dZZDZPeTd4VDE4U0NtZFEzQlNUbkdzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAyyU4WW0+ eNM5BbiO82CKbE9GS8Ucu9YOJMle4tvKud6Mj34uivlknwbKO888hBj8ogk+7Zcz xugXIhYzJ7nznlJyS+Ae3qA6qvSQvbTXwLApz8SaV5w2A3BN/5mE9LqkPdTCiSxT YdVqOnsjlZsWAmUmh7fL+b3ef63tOac75imqb/y45ZtSoeek20g9nsa73fxK+MLy yZD+etVm4mpfH3H6PtVHsWWuxiPsZ9uM8+ABaMKaSi/4BjRBXyUt/MQMqUlb5vEf LcZBwb8RgW+zmrzE8oB0klFzAnwTTmV6+bb/fG89grGmXSZd30fXjg/9hzrsekt4 fW9Hhpacyszk9Q== -----END CERTIFICATE-----Generated at Sat Dec 6 12:07:48 2025 by rpki-client