This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/24e3d0-b556-4888-9f6f-fbe68ff627b2/1/IH6Q1i3ixyfNRTmi8HDE6R3zK7Q.mft File: IH6Q1i3ixyfNRTmi8HDE6R3zK7Q.mft (raw, json) Hash identifier: NKh1LAMDb1/0w+1/iWLIzY0DR3hC50I9keCCkWxiXaU= Subject key identifier: 95:C8:EF:2B:D2:CF:37:93:17:33:D2:8A:CF:F4:60:D9:9E:1C:D7:FA Authority key identifier: 20:7E:90:D6:2D:E2:C7:27:CD:45:39:A2:F0:70:C4:E9:1D:F3:2B:B4 Certificate issuer: /CN=207e90d62de2c727cd4539a2f070c4e91df32bb4 Certificate serial: 019AF12DC93662A99E01F986F70E4B3DFFCE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IH6Q1i3ixyfNRTmi8HDE6R3zK7Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/24e3d0-b556-4888-9f6f-fbe68ff627b2/1/IH6Q1i3ixyfNRTmi8HDE6R3zK7Q.mft Manifest number: 03A5 Signing time: Sat 06 Dec 2025 01:01:40 +0000 Manifest this update: Sat 06 Dec 2025 01:01:40 +0000 Manifest next update: Sun 07 Dec 2025 01:01:40 +0000 Files and hashes: 1: IH6Q1i3ixyfNRTmi8HDE6R3zK7Q.crl (hash: T9OVCrjdeU5bZ4SKRPowWTyCAw8hIl+5UzTw1bLQc4k=) 2: QpNcCoA4Z5ottRskUsrVfwUI5R4.roa (hash: 3Ookyfb7wHO7/58EMfYEHBR9Z8xGK4lUfT1UByxh2SI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/24e3d0-b556-4888-9f6f-fbe68ff627b2/1/IH6Q1i3ixyfNRTmi8HDE6R3zK7Q.crl rsync://rpki.ripe.net/repository/DEFAULT/30/24e3d0-b556-4888-9f6f-fbe68ff627b2/1/IH6Q1i3ixyfNRTmi8HDE6R3zK7Q.mft rsync://rpki.ripe.net/repository/DEFAULT/IH6Q1i3ixyfNRTmi8HDE6R3zK7Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:01:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2d:c9:36:62:a9:9e:01:f9:86:f7:0e:4b:3d:ff:ce Signature Algorithm: sha256WithRSAEncryption Issuer: CN=207e90d62de2c727cd4539a2f070c4e91df32bb4 Validity Not Before: Dec 6 01:01:40 2025 GMT Not After : Dec 7 01:01:40 2025 GMT Subject: CN=95c8ef2bd2cf37931733d28acff460d99e1cd7fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:48:6a:ae:57:06:96:c9:d0:ed:f3:aa:7f:12: a7:31:83:8a:03:3b:a9:e5:d8:83:5c:77:ba:6f:5a: d3:7d:ca:d3:26:a4:60:70:a1:98:eb:e5:94:4e:56: 02:d7:27:a7:73:70:7b:49:90:b9:9a:ee:44:4b:3e: d0:3b:6a:54:db:92:86:61:a7:be:8f:34:8c:e1:3e: 45:2f:ba:ce:a7:1c:d7:3e:a8:e6:90:97:6a:9e:25: 9a:24:5f:76:dc:bc:16:11:27:eb:35:66:f6:e7:86: 42:c7:39:48:1f:ec:90:85:d9:63:15:fc:c1:53:92: da:44:75:16:59:ed:bf:ce:a8:0a:d5:c5:cf:7f:fb: 45:6c:95:26:2e:ef:de:2a:ee:f1:06:57:a8:0b:71: e2:b6:c2:16:c3:de:87:6f:35:1a:8f:eb:9f:fd:46: 15:f2:61:20:d3:7d:91:c8:64:0b:1d:16:f4:4b:e0: f8:f5:9e:9d:19:5f:b1:6c:aa:cd:b7:0b:06:2a:0f: 4d:b2:cc:25:05:86:fb:2c:4d:80:07:1a:90:77:20: 40:dd:00:f5:93:a9:f9:b8:3c:d8:44:64:ed:14:b5: 52:3a:a4:63:e8:6c:38:52:09:aa:b7:b4:51:77:6d: 7c:4d:89:cf:00:14:65:8e:70:0d:af:a2:13:4e:e6: b6:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:C8:EF:2B:D2:CF:37:93:17:33:D2:8A:CF:F4:60:D9:9E:1C:D7:FA X509v3 Authority Key Identifier: keyid:20:7E:90:D6:2D:E2:C7:27:CD:45:39:A2:F0:70:C4:E9:1D:F3:2B:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IH6Q1i3ixyfNRTmi8HDE6R3zK7Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/24e3d0-b556-4888-9f6f-fbe68ff627b2/1/IH6Q1i3ixyfNRTmi8HDE6R3zK7Q.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/30/24e3d0-b556-4888-9f6f-fbe68ff627b2/1/IH6Q1i3ixyfNRTmi8HDE6R3zK7Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 89:1e:39:3e:1b:08:01:0d:67:76:52:26:d5:04:ef:40:a5:5c: b2:b3:4c:86:bd:43:e3:9e:ea:1f:2c:70:49:e8:44:30:18:b7: 45:a2:28:6c:b3:0d:5f:08:9f:7d:29:0d:9d:37:67:11:7b:8d: 43:fb:49:16:41:a0:b0:cd:93:29:36:13:ce:03:15:b2:63:70: a7:39:64:7b:f2:db:7b:fd:0e:5b:b5:0d:9c:f8:c1:8a:d7:08: d6:52:87:0a:d7:96:1e:1d:4f:61:97:09:2b:9d:97:be:ef:43: f2:80:28:eb:f9:75:c5:83:b7:4e:c4:59:4d:6d:cd:a6:16:ec: 2e:07:0e:51:3f:98:f1:a0:ae:ad:f4:b9:71:bf:22:7f:34:1e: 29:c1:ab:6a:80:17:54:f6:32:81:aa:05:a7:3c:f6:43:ad:82: 6b:3e:37:de:0e:ed:18:93:82:e3:e6:48:ea:0b:37:f4:94:1f: e1:45:45:f1:36:ad:d8:25:6e:e1:e4:e3:cc:ff:df:c0:51:55: ee:80:6b:cf:92:df:63:23:9e:59:06:94:6a:fa:27:0b:d9:da: 00:a2:aa:4d:06:6c:29:f1:4c:84:9b:79:cf:eb:77:5a:88:86: 0c:b4:0b:01:cb:fc:49:c9:8a:0a:3a:8a:ec:48:1c:08:6a:be: c7:04:1d:e7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLck2YqmeAfmG9w5LPf/OMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIwN2U5MGQ2MmRlMmM3MjdjZDQ1MzlhMmYwNzBjNGU5MWRm MzJiYjQwHhcNMjUxMjA2MDEwMTQwWhcNMjUxMjA3MDEwMTQwWjAzMTEwLwYDVQQD Eyg5NWM4ZWYyYmQyY2YzNzkzMTczM2QyOGFjZmY0NjBkOTllMWNkN2ZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmUhqrlcGlsnQ7fOqfxKnMYOKAzup 5diDXHe6b1rTfcrTJqRgcKGY6+WUTlYC1yenc3B7SZC5mu5ESz7QO2pU25KGYae+ jzSM4T5FL7rOpxzXPqjmkJdqniWaJF923LwWESfrNWb254ZCxzlIH+yQhdljFfzB U5LaRHUWWe2/zqgK1cXPf/tFbJUmLu/eKu7xBleoC3HitsIWw96HbzUaj+uf/UYV 8mEg032RyGQLHRb0S+D49Z6dGV+xbKrNtwsGKg9NsswlBYb7LE2ABxqQdyBA3QD1 k6n5uDzYRGTtFLVSOqRj6Gw4Ugmqt7RRd218TYnPABRljnANr6ITTua2swIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJXI7yvSzzeTFzPSis/0YNmeHNf6MB8GA1UdIwQY MBaAFCB+kNYt4scnzUU5ovBwxOkd8yu0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSUg2UTFpM2l4eWZOUlRtaThIREU2UjN6SzdRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC8yNGUzZDAtYjU1Ni00ODg4LTlmNmYt ZmJlNjhmZjYyN2IyLzEvSUg2UTFpM2l4eWZOUlRtaThIREU2UjN6SzdRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMC8yNGUzZDAtYjU1Ni00ODg4LTlmNmYtZmJlNjhmZjYyN2Iy LzEvSUg2UTFpM2l4eWZOUlRtaThIREU2UjN6SzdRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiR45PhsI AQ1ndlIm1QTvQKVcsrNMhr1D457qHyxwSehEMBi3RaIobLMNXwiffSkNnTdnEXuN Q/tJFkGgsM2TKTYTzgMVsmNwpzlke/Lbe/0OW7UNnPjBitcI1lKHCteWHh1PYZcJ K52Xvu9D8oAo6/l1xYO3TsRZTW3NphbsLgcOUT+Y8aCurfS5cb8ifzQeKcGraoAX VPYygaoFpzz2Q62Caz433g7tGJOC4+ZI6gs39JQf4UVF8Tat2CVu4eTjzP/fwFFV 7oBrz5LfYyOeWQaUavonC9naAKKqTQZsKfFMhJt5z+t3WoiGDLQLAcv8ScmKCjqK 7EgcCGq+xwQd5w== -----END CERTIFICATE-----Generated at Sat Dec 6 07:16:49 2025 by rpki-client