This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/b458ee-f6a5-4e2c-8118-de6644c3daed/1/IrJ6sNVfiuDdqG_e8cNXJOGIXk8.mft File: IrJ6sNVfiuDdqG_e8cNXJOGIXk8.mft (raw, json) Hash identifier: 8Nq+TPE2VVDlxjby/ioOLwvdj4P9gOybzRY+Qh8mxhY= Subject key identifier: 7E:90:DB:E5:3D:C3:C0:C5:71:EF:1D:1D:B1:B8:5E:65:58:98:36:79 Authority key identifier: 22:B2:7A:B0:D5:5F:8A:E0:DD:A8:6F:DE:F1:C3:57:24:E1:88:5E:4F Certificate issuer: /CN=22b27ab0d55f8ae0dda86fdef1c35724e1885e4f Certificate serial: 019AF1D1959A9E27E37A11EA05072D03CB32 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IrJ6sNVfiuDdqG_e8cNXJOGIXk8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/b458ee-f6a5-4e2c-8118-de6644c3daed/1/IrJ6sNVfiuDdqG_e8cNXJOGIXk8.mft Manifest number: 06E2 Signing time: Sat 06 Dec 2025 04:00:35 +0000 Manifest this update: Sat 06 Dec 2025 04:00:35 +0000 Manifest next update: Sun 07 Dec 2025 04:00:35 +0000 Files and hashes: 1: IrJ6sNVfiuDdqG_e8cNXJOGIXk8.crl (hash: JmV4atkub3fOERCeJJuvXFL2bt+pAq8AwVtCfnhl24E=) 2: zXLMwVTkvtRtqBEEK8m7kFIV-bU.roa (hash: t9hVNP/nAzK1Dyce9djTLoexqpTbWSAapAI0vD+z2PE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/b458ee-f6a5-4e2c-8118-de6644c3daed/1/IrJ6sNVfiuDdqG_e8cNXJOGIXk8.crl rsync://rpki.ripe.net/repository/DEFAULT/39/b458ee-f6a5-4e2c-8118-de6644c3daed/1/IrJ6sNVfiuDdqG_e8cNXJOGIXk8.mft rsync://rpki.ripe.net/repository/DEFAULT/IrJ6sNVfiuDdqG_e8cNXJOGIXk8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d1:95:9a:9e:27:e3:7a:11:ea:05:07:2d:03:cb:32 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=22b27ab0d55f8ae0dda86fdef1c35724e1885e4f Validity Not Before: Dec 6 04:00:35 2025 GMT Not After : Dec 7 04:00:35 2025 GMT Subject: CN=7e90dbe53dc3c0c571ef1d1db1b85e6558983679 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:24:6d:4a:35:68:7a:34:d6:2a:6b:46:f6:b7: 8b:ca:fd:54:4d:3a:b5:15:ab:98:96:ff:d5:f3:a8: 9d:ed:b9:65:6e:3d:bc:25:04:9f:e3:48:6e:df:c8: d9:15:04:d1:f8:e9:2a:94:ff:d0:0d:1c:80:f9:e0: 8d:9a:8a:72:97:bd:60:66:6e:aa:01:b4:1d:14:28: bf:08:f7:e5:cf:30:00:c0:c2:f4:f1:b8:39:8c:d9: 5d:b0:3d:ad:95:27:c8:16:3b:a0:01:9f:9b:3c:72: b4:7f:82:11:e6:d1:08:f6:4b:53:8b:aa:30:c8:4a: ce:fe:39:cc:f1:ab:f8:75:c3:e8:0b:45:39:b3:cf: ee:ff:e6:1a:96:65:81:cf:43:f4:e1:71:07:e8:9b: ec:65:b9:50:5c:9a:7f:3a:f6:c7:77:2f:f1:d8:5c: eb:f8:47:13:60:35:42:3c:14:0c:81:d8:4b:a5:0d: d3:55:51:33:13:c2:f5:6c:50:4b:63:5b:a9:9c:fc: 13:0f:e7:34:b8:11:5f:78:35:5e:d4:ee:96:0b:e4: c7:2e:49:2c:00:39:c4:b6:7c:f0:ac:65:98:42:4d: 3f:2c:90:52:1b:18:5d:1a:a3:88:ec:16:68:72:70: 64:3f:a5:76:9c:a9:15:7b:37:4f:63:2a:4c:0e:f1: 80:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:90:DB:E5:3D:C3:C0:C5:71:EF:1D:1D:B1:B8:5E:65:58:98:36:79 X509v3 Authority Key Identifier: keyid:22:B2:7A:B0:D5:5F:8A:E0:DD:A8:6F:DE:F1:C3:57:24:E1:88:5E:4F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IrJ6sNVfiuDdqG_e8cNXJOGIXk8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/b458ee-f6a5-4e2c-8118-de6644c3daed/1/IrJ6sNVfiuDdqG_e8cNXJOGIXk8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/39/b458ee-f6a5-4e2c-8118-de6644c3daed/1/IrJ6sNVfiuDdqG_e8cNXJOGIXk8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a8:1f:e3:ab:3d:de:01:68:67:62:16:0e:4b:43:75:91:81:47: 20:d6:5b:43:e7:98:0e:cb:b0:a8:88:af:ef:bd:6b:b6:c6:c0: 0d:46:07:2f:e1:88:b8:27:c1:1e:86:c8:90:bf:16:ed:57:95: 81:04:e0:5e:91:66:4e:24:d3:bf:5d:2b:48:d0:50:86:64:d8: c2:73:0e:c1:89:75:d2:6b:8e:18:4c:06:73:8e:38:58:ab:08: 51:4a:af:82:c7:77:a8:28:72:fe:69:24:f8:f3:62:32:bb:27: 82:ac:b0:a5:4a:49:9b:93:af:01:dd:d0:e0:8e:94:03:dd:37: b3:d7:ef:d0:c0:3e:21:60:ed:b3:f3:b1:c8:81:3c:f7:00:75: 6d:80:ab:dd:d1:ab:3e:50:b2:78:3d:65:00:d8:1e:cd:34:a9: cc:75:66:2a:bf:8c:6b:b8:46:be:b3:0d:e1:0e:94:3a:83:e8: 45:24:c1:25:28:c7:b9:fb:cf:ce:6b:76:d9:4c:98:2c:44:bc: 78:af:43:51:6b:33:b0:56:63:a1:c1:d9:61:93:f5:a2:9f:92: cb:fb:13:ac:49:7f:40:10:47:40:7c:b3:cc:35:fb:c2:f4:57: 50:15:54:d5:0f:61:08:71:e3:b1:d0:0a:cf:fb:a9:14:12:c2: b0:bf:1f:f2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0ZWanifjehHqBQctA8syMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIyYjI3YWIwZDU1ZjhhZTBkZGE4NmZkZWYxYzM1NzI0ZTE4 ODVlNGYwHhcNMjUxMjA2MDQwMDM1WhcNMjUxMjA3MDQwMDM1WjAzMTEwLwYDVQQD Eyg3ZTkwZGJlNTNkYzNjMGM1NzFlZjFkMWRiMWI4NWU2NTU4OTgzNjc5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxCRtSjVoejTWKmtG9reLyv1UTTq1 FauYlv/V86id7bllbj28JQSf40hu38jZFQTR+OkqlP/QDRyA+eCNmopyl71gZm6q AbQdFCi/CPflzzAAwML08bg5jNldsD2tlSfIFjugAZ+bPHK0f4IR5tEI9ktTi6ow yErO/jnM8av4dcPoC0U5s8/u/+YalmWBz0P04XEH6JvsZblQXJp/OvbHdy/x2Fzr +EcTYDVCPBQMgdhLpQ3TVVEzE8L1bFBLY1upnPwTD+c0uBFfeDVe1O6WC+THLkks ADnEtnzwrGWYQk0/LJBSGxhdGqOI7BZocnBkP6V2nKkVezdPYypMDvGAMwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFH6Q2+U9w8DFce8dHbG4XmVYmDZ5MB8GA1UdIwQY MBaAFCKyerDVX4rg3ahv3vHDVyThiF5PMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSXJKNnNOVmZpdURkcUdfZThjTlhKT0dJWGs4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOS9iNDU4ZWUtZjZhNS00ZTJjLTgxMTgt ZGU2NjQ0YzNkYWVkLzEvSXJKNnNOVmZpdURkcUdfZThjTlhKT0dJWGs4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zOS9iNDU4ZWUtZjZhNS00ZTJjLTgxMTgtZGU2NjQ0YzNkYWVk LzEvSXJKNnNOVmZpdURkcUdfZThjTlhKT0dJWGs4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqB/jqz3e AWhnYhYOS0N1kYFHINZbQ+eYDsuwqIiv771rtsbADUYHL+GIuCfBHobIkL8W7VeV gQTgXpFmTiTTv10rSNBQhmTYwnMOwYl10muOGEwGc444WKsIUUqvgsd3qChy/mkk +PNiMrsngqywpUpJm5OvAd3Q4I6UA903s9fv0MA+IWDts/OxyIE89wB1bYCr3dGr PlCyeD1lANgezTSpzHVmKr+Ma7hGvrMN4Q6UOoPoRSTBJSjHufvPzmt22UyYLES8 eK9DUWszsFZjocHZYZP1op+Sy/sTrEl/QBBHQHyzzDX7wvRXUBVU1Q9hCHHjsdAK z/upFBLCsL8f8g== -----END CERTIFICATE-----Generated at Sat Dec 6 10:18:49 2025 by rpki-client