This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/559e8c-3825-493d-a8c7-fb893e3908d2/1/iydIPcFsMY5a__gyKTDIF_0ZLJE.mft File: iydIPcFsMY5a__gyKTDIF_0ZLJE.mft (raw, json) Hash identifier: fPH9N4/wiqrP3GuI7WEb5m97IcEpIJVm37/y+7OM3ZE= Subject key identifier: 61:C7:C7:AF:57:0A:A3:11:05:90:46:EF:95:04:6A:5C:9B:A4:1E:1B Authority key identifier: 8B:27:48:3D:C1:6C:31:8E:5A:FF:F8:32:29:30:C8:17:FD:19:2C:91 Certificate issuer: /CN=8b27483dc16c318e5afff8322930c817fd192c91 Certificate serial: 019AF20911A6E369EF7F4A93BC8C065DA49E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iydIPcFsMY5a__gyKTDIF_0ZLJE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/559e8c-3825-493d-a8c7-fb893e3908d2/1/iydIPcFsMY5a__gyKTDIF_0ZLJE.mft Manifest number: 0AC1 Signing time: Sat 06 Dec 2025 05:01:11 +0000 Manifest this update: Sat 06 Dec 2025 05:01:11 +0000 Manifest next update: Sun 07 Dec 2025 05:01:11 +0000 Files and hashes: 1: WG1KTWwRB1pYbj2P1y-YbJWElMQ.roa (hash: /RcbZ2ujStzbSPjPDGEz6Qg57WsDieIVmjOcowRraSQ=) 2: iydIPcFsMY5a__gyKTDIF_0ZLJE.crl (hash: WKYR7cc26+XI8Zpw1jBhtPik0BmKg4ZKRa5lh8dIikE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/559e8c-3825-493d-a8c7-fb893e3908d2/1/iydIPcFsMY5a__gyKTDIF_0ZLJE.crl rsync://rpki.ripe.net/repository/DEFAULT/3d/559e8c-3825-493d-a8c7-fb893e3908d2/1/iydIPcFsMY5a__gyKTDIF_0ZLJE.mft rsync://rpki.ripe.net/repository/DEFAULT/iydIPcFsMY5a__gyKTDIF_0ZLJE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:09:11:a6:e3:69:ef:7f:4a:93:bc:8c:06:5d:a4:9e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8b27483dc16c318e5afff8322930c817fd192c91 Validity Not Before: Dec 6 05:01:11 2025 GMT Not After : Dec 7 05:01:11 2025 GMT Subject: CN=61c7c7af570aa311059046ef95046a5c9ba41e1b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:05:5c:a0:a0:ab:42:a9:5b:0f:c9:0a:23:74: f5:8a:4e:3d:f6:2c:8f:e2:df:b6:c5:a5:69:0d:a8: d4:25:c2:09:68:16:46:5e:19:b6:af:a2:f2:68:b7: 67:14:0c:c6:00:56:8f:5e:5f:d2:bb:2a:3f:53:91: fe:66:3c:99:38:a9:b2:1d:20:cc:1c:0b:2f:88:50: 5b:b4:2c:f3:aa:b6:51:4c:67:44:67:d7:d6:bb:8b: 25:c9:b9:d0:6a:6f:36:fd:b6:0a:f3:0c:76:19:91: 18:ab:3a:c9:20:3b:bc:44:88:c6:58:be:71:72:db: 1b:ac:d4:27:43:26:57:ef:5b:85:31:00:c9:c1:65: 29:f5:ad:92:37:58:37:50:71:85:61:25:93:ce:50: f0:9d:08:ac:8e:df:86:a2:ed:c7:2a:d1:11:94:56: 2b:c2:fd:eb:30:04:89:eb:f7:a8:93:16:e5:d6:e5: 4e:f4:84:3e:49:7f:34:c3:24:8f:59:2a:8e:b3:5d: 21:f4:c5:e4:cf:0e:81:ff:31:8f:eb:90:47:64:d5: 74:a1:07:36:f5:87:aa:75:b9:2f:7c:77:c4:4a:8c: 8c:e2:2f:39:a6:1b:01:cf:6a:c3:45:0b:ca:f4:57: 1a:d4:2a:07:b7:8a:33:43:bb:7b:81:54:7e:52:fd: 46:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:C7:C7:AF:57:0A:A3:11:05:90:46:EF:95:04:6A:5C:9B:A4:1E:1B X509v3 Authority Key Identifier: keyid:8B:27:48:3D:C1:6C:31:8E:5A:FF:F8:32:29:30:C8:17:FD:19:2C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iydIPcFsMY5a__gyKTDIF_0ZLJE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/559e8c-3825-493d-a8c7-fb893e3908d2/1/iydIPcFsMY5a__gyKTDIF_0ZLJE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/559e8c-3825-493d-a8c7-fb893e3908d2/1/iydIPcFsMY5a__gyKTDIF_0ZLJE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 25:f2:26:af:99:79:46:92:48:e3:bd:42:a9:be:25:dc:7e:b2: da:85:77:0e:a3:de:9a:d3:ba:8f:99:eb:a6:20:e6:29:ea:8e: 20:6b:b6:db:5d:77:5e:54:1e:c2:0c:be:29:ea:15:89:22:97: 73:03:25:70:c7:c7:24:33:d0:3b:32:d6:4e:ad:aa:24:d9:0c: c1:17:11:68:ef:cb:77:c8:99:82:46:cf:0e:a9:8a:89:b3:05: c6:f5:de:db:70:ff:d0:77:54:02:54:d2:d3:9e:e4:04:4e:84: 09:c5:49:22:f9:b2:2d:0e:16:04:23:31:24:ab:9c:79:6f:b4: d5:20:ae:d1:02:24:e1:1c:62:8f:ae:89:6c:7c:da:0c:78:18: 97:49:3c:8b:db:02:f0:90:cd:76:9e:b4:bb:13:e1:28:bb:72: 29:48:ba:a5:d0:e4:3a:00:5a:ab:aa:d0:64:b2:ac:97:55:6b: 19:cd:2f:b3:13:6c:d8:94:95:01:36:90:b2:2b:cd:70:b9:ed: c2:ed:06:13:6f:a0:63:45:a7:58:4a:46:10:ea:22:66:14:09: c8:a8:b0:9b:b1:d4:c3:99:44:43:ff:64:0b:08:d2:33:c8:d2: 10:f6:e0:0b:e7:25:55:69:ba:0f:ee:64:3d:f5:e8:d8:65:a8: 14:29:e4:94 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCRGm42nvf0qTvIwGXaSeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhiMjc0ODNkYzE2YzMxOGU1YWZmZjgzMjI5MzBjODE3ZmQx OTJjOTEwHhcNMjUxMjA2MDUwMTExWhcNMjUxMjA3MDUwMTExWjAzMTEwLwYDVQQD Eyg2MWM3YzdhZjU3MGFhMzExMDU5MDQ2ZWY5NTA0NmE1YzliYTQxZTFiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3wVcoKCrQqlbD8kKI3T1ik499iyP 4t+2xaVpDajUJcIJaBZGXhm2r6LyaLdnFAzGAFaPXl/Suyo/U5H+ZjyZOKmyHSDM HAsviFBbtCzzqrZRTGdEZ9fWu4slybnQam82/bYK8wx2GZEYqzrJIDu8RIjGWL5x ctsbrNQnQyZX71uFMQDJwWUp9a2SN1g3UHGFYSWTzlDwnQisjt+Gou3HKtERlFYr wv3rMASJ6/eokxbl1uVO9IQ+SX80wySPWSqOs10h9MXkzw6B/zGP65BHZNV0oQc2 9YeqdbkvfHfESoyM4i85phsBz2rDRQvK9Fca1CoHt4ozQ7t7gVR+Uv1GNwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGHHx69XCqMRBZBG75UEalybpB4bMB8GA1UdIwQY MBaAFIsnSD3BbDGOWv/4MikwyBf9GSyRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaXlkSVBjRnNNWTVhX19neUtURElGXzBaTEpFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZC81NTllOGMtMzgyNS00OTNkLWE4Yzct ZmI4OTNlMzkwOGQyLzEvaXlkSVBjRnNNWTVhX19neUtURElGXzBaTEpFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZC81NTllOGMtMzgyNS00OTNkLWE4YzctZmI4OTNlMzkwOGQy LzEvaXlkSVBjRnNNWTVhX19neUtURElGXzBaTEpFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJfImr5l5 RpJI471Cqb4l3H6y2oV3DqPemtO6j5nrpiDmKeqOIGu22113XlQewgy+KeoViSKX cwMlcMfHJDPQOzLWTq2qJNkMwRcRaO/Ld8iZgkbPDqmKibMFxvXe23D/0HdUAlTS 057kBE6ECcVJIvmyLQ4WBCMxJKuceW+01SCu0QIk4Rxij66JbHzaDHgYl0k8i9sC 8JDNdp60uxPhKLtyKUi6pdDkOgBaq6rQZLKsl1VrGc0vsxNs2JSVATaQsivNcLnt wu0GE2+gY0WnWEpGEOoiZhQJyKiwm7HUw5lEQ/9kCwjSM8jSEPbgC+clVWm6D+5k PfXo2GWoFCnklA== -----END CERTIFICATE-----Generated at Sat Dec 6 14:56:20 2025 by rpki-client