This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/81b00a-f68d-44f4-8825-982736b45bdf/1/iMaZNJivBRiWLl9I1chG3BddGIQ.mft File: iMaZNJivBRiWLl9I1chG3BddGIQ.mft (raw, json) Hash identifier: EyrwIvx8brBkYEdHkdXzAFNjIQMHkqehui7oI6tDCY8= Subject key identifier: E8:A8:FB:48:DE:44:F5:F3:52:CC:44:44:3A:E6:98:B7:DD:8D:63:EA Authority key identifier: 88:C6:99:34:98:AF:05:18:96:2E:5F:48:D5:C8:46:DC:17:5D:18:84 Certificate issuer: /CN=88c6993498af0518962e5f48d5c846dc175d1884 Certificate serial: 019AF19ABB79D18D220D3B67F85BE2DF91D3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iMaZNJivBRiWLl9I1chG3BddGIQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/81b00a-f68d-44f4-8825-982736b45bdf/1/iMaZNJivBRiWLl9I1chG3BddGIQ.mft Manifest number: 175F Signing time: Sat 06 Dec 2025 03:00:40 +0000 Manifest this update: Sat 06 Dec 2025 03:00:40 +0000 Manifest next update: Sun 07 Dec 2025 03:00:40 +0000 Files and hashes: 1: iMaZNJivBRiWLl9I1chG3BddGIQ.crl (hash: wMZsGZUZDMbOZ8DkywgFwEOKBTfVuEBB8hfKWRsOyKo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/81b00a-f68d-44f4-8825-982736b45bdf/1/iMaZNJivBRiWLl9I1chG3BddGIQ.crl rsync://rpki.ripe.net/repository/DEFAULT/3d/81b00a-f68d-44f4-8825-982736b45bdf/1/iMaZNJivBRiWLl9I1chG3BddGIQ.mft rsync://rpki.ripe.net/repository/DEFAULT/iMaZNJivBRiWLl9I1chG3BddGIQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 03:00:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9a:bb:79:d1:8d:22:0d:3b:67:f8:5b:e2:df:91:d3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=88c6993498af0518962e5f48d5c846dc175d1884 Validity Not Before: Dec 6 03:00:40 2025 GMT Not After : Dec 7 03:00:40 2025 GMT Subject: CN=e8a8fb48de44f5f352cc44443ae698b7dd8d63ea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:f6:2d:19:9a:c4:2a:0d:4e:40:01:35:0b:34: af:83:61:23:66:6d:6b:85:09:76:63:d1:ec:a7:63: cb:10:50:14:ae:c6:f8:69:5b:d6:39:ff:a9:e0:c7: 85:7b:7b:1f:1a:53:65:b4:0b:01:30:f8:2a:e0:0e: 4f:f0:d7:97:4a:96:c8:41:76:3c:15:4c:73:6b:82: fb:ed:18:ce:46:3d:7e:62:90:0a:2e:96:b0:9c:aa: da:60:dd:88:6b:a4:ed:86:ab:34:0e:d4:de:30:ce: 04:21:bd:14:47:b8:da:3f:e6:13:df:5f:43:60:9f: 36:59:b2:36:ba:50:13:89:25:a9:28:0b:18:ec:7b: 89:9d:e4:d7:ac:38:aa:c2:e6:e0:99:d5:7a:f6:3a: c7:7c:4e:4b:1c:2f:18:81:45:11:9d:43:a8:94:95: eb:03:79:c9:2a:1e:94:24:78:d8:be:f8:ab:8e:50: 22:3b:6d:d9:75:25:28:71:c0:8e:b8:54:83:17:99: ce:1c:32:f0:a5:5b:9c:c7:7d:a5:46:17:fc:92:a4: 07:99:71:38:39:fd:9a:cc:61:77:ad:0d:27:ef:1b: 02:a6:1c:28:a1:70:38:c0:f2:09:6f:05:cd:c2:7e: fc:ba:2f:50:ec:c9:e2:2e:73:c8:d1:ca:e4:74:eb: 6a:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:A8:FB:48:DE:44:F5:F3:52:CC:44:44:3A:E6:98:B7:DD:8D:63:EA X509v3 Authority Key Identifier: keyid:88:C6:99:34:98:AF:05:18:96:2E:5F:48:D5:C8:46:DC:17:5D:18:84 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iMaZNJivBRiWLl9I1chG3BddGIQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/81b00a-f68d-44f4-8825-982736b45bdf/1/iMaZNJivBRiWLl9I1chG3BddGIQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/81b00a-f68d-44f4-8825-982736b45bdf/1/iMaZNJivBRiWLl9I1chG3BddGIQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 36:0b:cb:78:a3:3b:97:c7:a3:ca:69:85:22:0e:a9:d4:3a:bc: 43:14:71:e6:4a:14:62:b5:e5:91:be:eb:84:3e:72:d2:ba:14: 0f:8a:6b:3e:97:53:80:25:b9:4e:a3:37:ac:70:4c:24:7a:95: 62:53:b7:30:72:23:ce:e0:0b:3e:5e:67:7b:68:1a:de:1e:d6: a1:f2:54:fa:24:07:31:0c:13:e0:6a:4d:46:6e:87:f7:22:eb: da:25:46:8e:83:2e:db:94:bb:ef:c7:78:f0:15:1e:1c:f3:03: 79:ab:21:94:e2:48:39:eb:62:2d:fe:35:4a:49:95:01:d1:4b: b1:01:3d:13:d2:84:12:70:38:30:04:19:13:e9:0d:f9:95:01: 89:cc:b7:cf:41:00:54:0f:63:eb:cd:17:80:24:30:3a:f9:b2: 61:55:5c:b2:cd:85:06:bf:31:12:07:8c:88:41:9a:e5:2d:85: ab:1d:eb:b1:18:cf:86:42:9d:25:f3:31:e3:21:99:6d:dd:6d: 5e:b3:f7:32:04:8f:56:a7:b1:ac:0d:46:48:d6:4e:09:44:8f: d3:76:70:6e:75:31:25:85:cd:bc:79:cb:45:a7:c9:55:4b:87: fb:bd:33:f8:1b:5f:b6:3e:5a:b2:43:da:87:52:de:80:f3:bd: 6f:c4:a6:8f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxmrt50Y0iDTtn+Fvi35HTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg4YzY5OTM0OThhZjA1MTg5NjJlNWY0OGQ1Yzg0NmRjMTc1 ZDE4ODQwHhcNMjUxMjA2MDMwMDQwWhcNMjUxMjA3MDMwMDQwWjAzMTEwLwYDVQQD EyhlOGE4ZmI0OGRlNDRmNWYzNTJjYzQ0NDQzYWU2OThiN2RkOGQ2M2VhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx/YtGZrEKg1OQAE1CzSvg2EjZm1r hQl2Y9Hsp2PLEFAUrsb4aVvWOf+p4MeFe3sfGlNltAsBMPgq4A5P8NeXSpbIQXY8 FUxza4L77RjORj1+YpAKLpawnKraYN2Ia6Tthqs0DtTeMM4EIb0UR7jaP+YT319D YJ82WbI2ulATiSWpKAsY7HuJneTXrDiqwubgmdV69jrHfE5LHC8YgUURnUOolJXr A3nJKh6UJHjYvvirjlAiO23ZdSUoccCOuFSDF5nOHDLwpVucx32lRhf8kqQHmXE4 Of2azGF3rQ0n7xsCphwooXA4wPIJbwXNwn78ui9Q7MniLnPI0crkdOtqrQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOio+0jeRPXzUsxERDrmmLfdjWPqMB8GA1UdIwQY MBaAFIjGmTSYrwUYli5fSNXIRtwXXRiEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaU1hWk5KaXZCUmlXTGw5STFjaEczQmRkR0lRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZC84MWIwMGEtZjY4ZC00NGY0LTg4MjUt OTgyNzM2YjQ1YmRmLzEvaU1hWk5KaXZCUmlXTGw5STFjaEczQmRkR0lRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZC84MWIwMGEtZjY4ZC00NGY0LTg4MjUtOTgyNzM2YjQ1YmRm LzEvaU1hWk5KaXZCUmlXTGw5STFjaEczQmRkR0lRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANgvLeKM7 l8ejymmFIg6p1Dq8QxRx5koUYrXlkb7rhD5y0roUD4prPpdTgCW5TqM3rHBMJHqV YlO3MHIjzuALPl5ne2ga3h7WofJU+iQHMQwT4GpNRm6H9yLr2iVGjoMu25S778d4 8BUeHPMDeashlOJIOetiLf41SkmVAdFLsQE9E9KEEnA4MAQZE+kN+ZUBicy3z0EA VA9j680XgCQwOvmyYVVcss2FBr8xEgeMiEGa5S2Fqx3rsRjPhkKdJfMx4yGZbd1t XrP3MgSPVqexrA1GSNZOCUSP03ZwbnUxJYXNvHnLRafJVUuH+70z+Btftj5askPa h1LegPO9b8Smjw== -----END CERTIFICATE-----Generated at Sat Dec 6 11:25:33 2025 by rpki-client