This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/476fd0-b8a6-461f-b4c5-38c2c2a79c35/1/iIFmRjoaMByltuuYvd0H45cJGYY.mft File: iIFmRjoaMByltuuYvd0H45cJGYY.mft (raw, json) Hash identifier: lc/3uE+0e86vgYPiKcW+sn0p0/ZFVoYDlJIbnU3+nt0= Subject key identifier: 12:A0:07:04:0A:AB:AE:BA:12:9E:BE:63:57:78:60:97:99:D6:D8:BA Authority key identifier: 88:81:66:46:3A:1A:30:1C:A5:B6:EB:98:BD:DD:07:E3:97:09:19:86 Certificate issuer: /CN=888166463a1a301ca5b6eb98bddd07e397091986 Certificate serial: 019AF49C18CC6F9E33360C8C995FA4188D72 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iIFmRjoaMByltuuYvd0H45cJGYY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/476fd0-b8a6-461f-b4c5-38c2c2a79c35/1/iIFmRjoaMByltuuYvd0H45cJGYY.mft Manifest number: 123C Signing time: Sat 06 Dec 2025 17:01:01 +0000 Manifest this update: Sat 06 Dec 2025 17:01:01 +0000 Manifest next update: Sun 07 Dec 2025 17:01:01 +0000 Files and hashes: 1: iIFmRjoaMByltuuYvd0H45cJGYY.crl (hash: XRanxkXoeTb6gVQI0KNmSXj6IatcEjQuKv5WY8B8lgY=) 2: rw7mvGsBN1ywLg0aU0WOnuWPa30.roa (hash: Kkop8VBeWFXHnSavZNOMJQZHo1FfDtxgbSsG84Nc5jo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/476fd0-b8a6-461f-b4c5-38c2c2a79c35/1/iIFmRjoaMByltuuYvd0H45cJGYY.crl rsync://rpki.ripe.net/repository/DEFAULT/2f/476fd0-b8a6-461f-b4c5-38c2c2a79c35/1/iIFmRjoaMByltuuYvd0H45cJGYY.mft rsync://rpki.ripe.net/repository/DEFAULT/iIFmRjoaMByltuuYvd0H45cJGYY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 17:01:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:9c:18:cc:6f:9e:33:36:0c:8c:99:5f:a4:18:8d:72 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=888166463a1a301ca5b6eb98bddd07e397091986 Validity Not Before: Dec 6 17:01:01 2025 GMT Not After : Dec 7 17:01:01 2025 GMT Subject: CN=12a007040aabaeba129ebe635778609799d6d8ba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:97:87:d1:d7:38:c9:84:3e:f2:a8:8c:71:7e: fb:f6:53:e5:28:23:72:5e:51:12:29:0b:e4:fa:4b: bc:72:fb:68:e1:e1:10:15:21:1a:60:0b:9c:fe:1f: ba:c7:18:5a:5d:cd:d3:96:c0:60:7b:31:5d:7f:c0: e6:ab:fb:da:72:18:b0:2a:ba:9f:38:36:66:1f:6c: f7:73:ab:2a:52:a6:0c:7e:76:7c:ca:b5:55:ad:b5: 63:32:39:40:b8:10:69:07:6e:02:14:7f:30:7d:1e: 30:ff:d2:f8:cb:9c:df:1c:08:64:7c:fa:bf:56:3c: a4:f9:53:b4:cd:6b:0a:d2:5f:6b:e8:18:15:66:65: 58:14:88:8f:27:52:e6:ab:1a:9f:a0:9c:df:5d:06: f5:27:85:b3:e6:18:1b:74:00:35:f1:cd:8c:11:1d: 93:c7:a3:5c:cc:39:e9:8c:4e:a9:f7:ba:77:fa:9b: de:73:a8:f9:03:3a:10:38:a3:c5:c9:cd:e1:1d:90: ba:b6:02:61:5a:b7:4e:e1:2c:a0:98:11:9e:c8:11: 00:35:69:b5:2e:da:19:99:18:5b:83:db:d3:00:68: 1d:2d:47:79:e8:aa:33:4d:7e:20:4a:a3:b1:81:af: 82:7d:49:fe:7c:79:e2:49:31:00:f9:70:9d:dd:ba: 2f:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:A0:07:04:0A:AB:AE:BA:12:9E:BE:63:57:78:60:97:99:D6:D8:BA X509v3 Authority Key Identifier: keyid:88:81:66:46:3A:1A:30:1C:A5:B6:EB:98:BD:DD:07:E3:97:09:19:86 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iIFmRjoaMByltuuYvd0H45cJGYY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/476fd0-b8a6-461f-b4c5-38c2c2a79c35/1/iIFmRjoaMByltuuYvd0H45cJGYY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/476fd0-b8a6-461f-b4c5-38c2c2a79c35/1/iIFmRjoaMByltuuYvd0H45cJGYY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0e:17:d9:72:00:37:aa:a8:2c:16:0f:96:a1:70:09:3a:09:c9: 09:5b:27:ff:d0:34:98:16:5d:fd:f7:41:84:c4:4d:6c:c6:c7: 99:75:df:e8:e6:b2:0c:5e:52:a2:87:35:2d:e8:52:07:5d:fb: 35:1a:61:da:8e:23:85:6a:98:2e:fa:25:16:fc:7f:f9:8b:a5: a8:65:7d:f0:d0:fa:b8:6b:a4:d5:4c:ca:7c:2b:55:d5:28:51: b8:64:ed:4d:d6:06:b0:6d:fa:9c:43:ba:ac:ff:42:75:2e:ec: 4e:09:bd:9a:6d:47:b1:90:6b:63:a2:8b:80:9f:61:24:3b:ec: ce:f4:99:5e:9e:14:27:28:6b:a8:d5:c9:68:e1:77:12:7b:49: 7b:e8:9a:7b:eb:e8:dc:04:75:ec:7e:41:10:8e:19:f1:f7:33: c3:d6:89:00:7f:5a:90:1b:d4:1b:6b:4e:dd:fd:b0:d2:c6:39: 07:a5:b6:81:09:9e:e8:46:ea:07:3f:07:9a:7d:8f:d7:4d:f8: 3a:50:99:91:02:33:2d:22:dc:9a:d0:a2:31:10:f9:27:f7:85: be:11:63:d7:0d:b5:9e:1d:88:e5:bc:87:3d:1f:80:c5:85:ab: 79:bd:7e:f5:6e:af:a6:71:0d:f5:df:34:d4:ee:ed:5c:5f:02: a9:e9:99:2d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr0nBjMb54zNgyMmV+kGI1yMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg4ODE2NjQ2M2ExYTMwMWNhNWI2ZWI5OGJkZGQwN2UzOTcw OTE5ODYwHhcNMjUxMjA2MTcwMTAxWhcNMjUxMjA3MTcwMTAxWjAzMTEwLwYDVQQD EygxMmEwMDcwNDBhYWJhZWJhMTI5ZWJlNjM1Nzc4NjA5Nzk5ZDZkOGJhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkJeH0dc4yYQ+8qiMcX779lPlKCNy XlESKQvk+ku8cvto4eEQFSEaYAuc/h+6xxhaXc3TlsBgezFdf8Dmq/vachiwKrqf ODZmH2z3c6sqUqYMfnZ8yrVVrbVjMjlAuBBpB24CFH8wfR4w/9L4y5zfHAhkfPq/ Vjyk+VO0zWsK0l9r6BgVZmVYFIiPJ1LmqxqfoJzfXQb1J4Wz5hgbdAA18c2MER2T x6NczDnpjE6p97p3+pvec6j5AzoQOKPFyc3hHZC6tgJhWrdO4SygmBGeyBEANWm1 LtoZmRhbg9vTAGgdLUd56KozTX4gSqOxga+CfUn+fHniSTEA+XCd3bovyQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBKgBwQKq666Ep6+Y1d4YJeZ1ti6MB8GA1UdIwQY MBaAFIiBZkY6GjAcpbbrmL3dB+OXCRmGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaUlGbVJqb2FNQnlsdHV1WXZkMEg0NWNKR1lZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZi80NzZmZDAtYjhhNi00NjFmLWI0YzUt MzhjMmMyYTc5YzM1LzEvaUlGbVJqb2FNQnlsdHV1WXZkMEg0NWNKR1lZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZi80NzZmZDAtYjhhNi00NjFmLWI0YzUtMzhjMmMyYTc5YzM1 LzEvaUlGbVJqb2FNQnlsdHV1WXZkMEg0NWNKR1lZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADhfZcgA3 qqgsFg+WoXAJOgnJCVsn/9A0mBZd/fdBhMRNbMbHmXXf6OayDF5Sooc1LehSB137 NRph2o4jhWqYLvolFvx/+YulqGV98ND6uGuk1UzKfCtV1ShRuGTtTdYGsG36nEO6 rP9CdS7sTgm9mm1HsZBrY6KLgJ9hJDvszvSZXp4UJyhrqNXJaOF3EntJe+iae+vo 3AR17H5BEI4Z8fczw9aJAH9akBvUG2tO3f2w0sY5B6W2gQme6EbqBz8Hmn2P1034 OlCZkQIzLSLcmtCiMRD5J/eFvhFj1w21nh2I5byHPR+AxYWreb1+9W6vpnEN9d80 1O7tXF8CqemZLQ== -----END CERTIFICATE-----Generated at Sun Dec 7 02:07:09 2025 by rpki-client