This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/5a9a99-43c2-4cc8-a37b-49501a7694c4/1/idvHFWpO58Z9nmhHZ6L0uvijW6s.mft File: idvHFWpO58Z9nmhHZ6L0uvijW6s.mft (raw, json) Hash identifier: HKRq0Psdy+R2eyvgifjqZTllXRGdYAxT2tRVdCmHO90= Subject key identifier: C6:79:37:20:61:C4:73:2D:A0:E2:59:99:BF:11:49:70:17:FD:BD:1C Authority key identifier: 89:DB:C7:15:6A:4E:E7:C6:7D:9E:68:47:67:A2:F4:BA:F8:A3:5B:AB Certificate issuer: /CN=89dbc7156a4ee7c67d9e684767a2f4baf8a35bab Certificate serial: 019AF19A917577D5FFAB2B6ED77CA02E460B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/idvHFWpO58Z9nmhHZ6L0uvijW6s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/5a9a99-43c2-4cc8-a37b-49501a7694c4/1/idvHFWpO58Z9nmhHZ6L0uvijW6s.mft Manifest number: 1767 Signing time: Sat 06 Dec 2025 03:00:30 +0000 Manifest this update: Sat 06 Dec 2025 03:00:30 +0000 Manifest next update: Sun 07 Dec 2025 03:00:30 +0000 Files and hashes: 1: 0CdqlW01ACbv3EQD2O6eNsK9tUw.asa (hash: 9WhwZoBfEGd5k4zvC4ZA/vr5vp3EXDon/OkKYutAIU0=) 2: gFSAApK2GHEW9co-hPvID0_Xbj0.roa (hash: 4lamTHM9SOHzvbwgysIOqInF+Jmi38B32pNkhrQEyFY=) 3: idvHFWpO58Z9nmhHZ6L0uvijW6s.crl (hash: I2S5lwGXpQ1uwcL7BCPYQn51gnOOgQPmK7UBQxNqaeQ=) 4: w6qd6pimXzyzbq_lL6bL0qIFcDY.roa (hash: GP3E0Fs4zdkA4yRQSv2WM00GvN6yRlAiiaArkHkviSI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/5a9a99-43c2-4cc8-a37b-49501a7694c4/1/idvHFWpO58Z9nmhHZ6L0uvijW6s.crl rsync://rpki.ripe.net/repository/DEFAULT/3c/5a9a99-43c2-4cc8-a37b-49501a7694c4/1/idvHFWpO58Z9nmhHZ6L0uvijW6s.mft rsync://rpki.ripe.net/repository/DEFAULT/idvHFWpO58Z9nmhHZ6L0uvijW6s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 20:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9a:91:75:77:d5:ff:ab:2b:6e:d7:7c:a0:2e:46:0b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89dbc7156a4ee7c67d9e684767a2f4baf8a35bab Validity Not Before: Dec 6 03:00:30 2025 GMT Not After : Dec 7 03:00:30 2025 GMT Subject: CN=c679372061c4732da0e25999bf11497017fdbd1c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:5e:41:cd:d1:1f:ea:83:f9:82:18:14:9a:fe: 75:0a:7e:1c:ae:22:26:d5:af:97:16:b7:c0:e1:26: be:5f:d2:19:4b:a2:13:89:ea:85:88:6c:d3:c0:5b: d8:81:e2:71:66:be:51:7b:cc:3d:ee:e0:26:48:30: 73:d4:9a:bb:17:3c:70:0a:82:31:d3:dd:93:2a:8c: c4:d3:1b:b7:52:0d:92:5c:4a:02:0a:26:99:0e:22: 8c:97:67:ae:df:c2:f7:17:fe:33:88:8c:bd:c2:c7: 24:77:86:53:39:93:bd:96:12:a8:45:31:6f:f8:65: 73:5d:6c:cf:f2:2c:d1:26:60:8b:c0:89:f4:4f:1e: 21:5b:59:3c:57:e6:cc:a7:95:4e:9e:fd:89:c7:2d: 30:1f:d5:d8:22:25:42:ad:c4:46:cf:6d:0e:1d:44: 30:78:cd:89:1d:b7:d3:9f:b0:1a:f3:59:21:0a:c3: 74:d7:ad:79:ac:64:37:f9:d0:83:aa:20:68:d0:c9: fb:bf:c0:63:e4:e8:71:be:85:d6:0b:d2:ff:b7:d6: fe:7e:24:60:b0:2f:29:81:d2:02:4a:67:26:29:2a: 32:f6:56:98:52:bb:8c:ed:40:80:58:c1:e5:5f:db: 9b:78:72:54:4d:ad:d6:7b:52:5d:cb:b1:c2:0b:c0: c5:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:79:37:20:61:C4:73:2D:A0:E2:59:99:BF:11:49:70:17:FD:BD:1C X509v3 Authority Key Identifier: keyid:89:DB:C7:15:6A:4E:E7:C6:7D:9E:68:47:67:A2:F4:BA:F8:A3:5B:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/idvHFWpO58Z9nmhHZ6L0uvijW6s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/5a9a99-43c2-4cc8-a37b-49501a7694c4/1/idvHFWpO58Z9nmhHZ6L0uvijW6s.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/5a9a99-43c2-4cc8-a37b-49501a7694c4/1/idvHFWpO58Z9nmhHZ6L0uvijW6s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ba:11:47:1f:c6:ce:f6:d7:c0:1d:fd:9d:42:b8:ff:d3:7f:9c: b4:c7:77:b2:fb:e8:92:4f:d0:0b:b5:33:29:09:b7:9e:ce:d0: 1a:b6:48:34:02:8d:d1:0e:7e:f3:36:55:b4:97:e6:20:8f:67: 70:6c:5a:7b:3b:50:b6:b8:f0:82:90:70:47:dc:62:d2:c6:08: b7:e9:d7:66:fe:c4:56:af:41:c0:3b:6d:f3:d7:57:82:9e:6c: c6:65:81:6c:39:62:e5:fe:6a:c2:8d:a7:ba:6e:22:42:51:a3: 25:44:19:be:ae:65:f8:e1:6a:0c:ca:9a:ec:59:61:e1:01:aa: de:c2:df:87:d3:7c:2d:b7:6a:57:59:b0:d3:01:5c:52:3f:99: 99:b7:e3:7f:0c:c4:ff:ad:26:40:c3:9c:09:1f:ca:32:13:61: 6e:e5:08:38:ba:40:f4:59:ba:15:6f:09:9b:9c:f3:b7:70:df: a1:20:bb:36:78:3a:ef:de:3e:04:6f:26:85:88:fc:9b:50:e7: 09:d5:75:45:ad:dc:d8:2e:ff:36:f2:92:e3:44:f6:fb:5e:bb: 8b:f8:2f:46:fe:18:7a:47:f2:e5:f5:66:d2:7c:17:16:73:b7: 85:b4:7b:ec:b3:83:81:d9:80:7c:b0:46:87:d5:9b:c4:89:24: 26:36:a0:b7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxmpF1d9X/qytu13ygLkYLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg5ZGJjNzE1NmE0ZWU3YzY3ZDllNjg0NzY3YTJmNGJhZjhh MzViYWIwHhcNMjUxMjA2MDMwMDMwWhcNMjUxMjA3MDMwMDMwWjAzMTEwLwYDVQQD EyhjNjc5MzcyMDYxYzQ3MzJkYTBlMjU5OTliZjExNDk3MDE3ZmRiZDFjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA015BzdEf6oP5ghgUmv51Cn4criIm 1a+XFrfA4Sa+X9IZS6ITieqFiGzTwFvYgeJxZr5Re8w97uAmSDBz1Jq7FzxwCoIx 092TKozE0xu3Ug2SXEoCCiaZDiKMl2eu38L3F/4ziIy9wsckd4ZTOZO9lhKoRTFv +GVzXWzP8izRJmCLwIn0Tx4hW1k8V+bMp5VOnv2Jxy0wH9XYIiVCrcRGz20OHUQw eM2JHbfTn7Aa81khCsN01615rGQ3+dCDqiBo0Mn7v8Bj5OhxvoXWC9L/t9b+fiRg sC8pgdICSmcmKSoy9laYUruM7UCAWMHlX9ubeHJUTa3We1Jdy7HCC8DFNwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMZ5NyBhxHMtoOJZmb8RSXAX/b0cMB8GA1UdIwQY MBaAFInbxxVqTufGfZ5oR2ei9Lr4o1urMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaWR2SEZXcE81OFo5bm1oSFo2TDB1dmlqVzZzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYy81YTlhOTktNDNjMi00Y2M4LWEzN2It NDk1MDFhNzY5NGM0LzEvaWR2SEZXcE81OFo5bm1oSFo2TDB1dmlqVzZzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYy81YTlhOTktNDNjMi00Y2M4LWEzN2ItNDk1MDFhNzY5NGM0 LzEvaWR2SEZXcE81OFo5bm1oSFo2TDB1dmlqVzZzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAuhFHH8bO 9tfAHf2dQrj/03+ctMd3svvokk/QC7UzKQm3ns7QGrZINAKN0Q5+8zZVtJfmII9n cGxaeztQtrjwgpBwR9xi0sYIt+nXZv7EVq9BwDtt89dXgp5sxmWBbDli5f5qwo2n um4iQlGjJUQZvq5l+OFqDMqa7Flh4QGq3sLfh9N8LbdqV1mw0wFcUj+ZmbfjfwzE /60mQMOcCR/KMhNhbuUIOLpA9Fm6FW8Jm5zzt3DfoSC7Nng6794+BG8mhYj8m1Dn CdV1Ra3c2C7/NvKS40T2+167i/gvRv4Yekfy5fVm0nwXFnO3hbR77LODgdmAfLBG h9WbxIkkJjagtw== -----END CERTIFICATE-----Generated at Sat Dec 6 05:53:57 2025 by rpki-client