This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/e13b32-1ba9-4db9-a569-4aca09564fa8/1/ieXrHhIJiXh0XVQNypbP8N5HBNo.mft File: ieXrHhIJiXh0XVQNypbP8N5HBNo.mft (raw, json) Hash identifier: cEYIn5FpA6OpkhHGrSiAv2v6XdMpQccysoVltXxrg2A= Subject key identifier: 2C:D7:B8:5F:DB:66:0F:99:46:9B:49:AB:39:E5:2C:92:F8:C6:C0:9D Authority key identifier: 89:E5:EB:1E:12:09:89:78:74:5D:54:0D:CA:96:CF:F0:DE:47:04:DA Certificate issuer: /CN=89e5eb1e12098978745d540dca96cff0de4704da Certificate serial: 019B2F3010AB8AA7BA7423C3D3D1A103EDC6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ieXrHhIJiXh0XVQNypbP8N5HBNo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/e13b32-1ba9-4db9-a569-4aca09564fa8/1/ieXrHhIJiXh0XVQNypbP8N5HBNo.mft Manifest number: 0BF6 Signing time: Thu 18 Dec 2025 02:00:37 +0000 Manifest this update: Thu 18 Dec 2025 02:00:37 +0000 Manifest next update: Fri 19 Dec 2025 02:00:37 +0000 Files and hashes: 1: ieXrHhIJiXh0XVQNypbP8N5HBNo.crl (hash: caLqlPu19ppVf7NCE7eMd2j2lcJNHoKXNCcBekFSeB8=) 2: l-HFEGYP57VmF8aDDh7--ZbJBDw.roa (hash: z6foBKVqU7T5Yu/Dwks8ZalWU/MYlRsXoQCU7GPCUOE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/e13b32-1ba9-4db9-a569-4aca09564fa8/1/ieXrHhIJiXh0XVQNypbP8N5HBNo.crl rsync://rpki.ripe.net/repository/DEFAULT/48/e13b32-1ba9-4db9-a569-4aca09564fa8/1/ieXrHhIJiXh0XVQNypbP8N5HBNo.mft rsync://rpki.ripe.net/repository/DEFAULT/ieXrHhIJiXh0XVQNypbP8N5HBNo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 19:00:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2f:30:10:ab:8a:a7:ba:74:23:c3:d3:d1:a1:03:ed:c6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89e5eb1e12098978745d540dca96cff0de4704da Validity Not Before: Dec 18 02:00:37 2025 GMT Not After : Dec 19 02:00:37 2025 GMT Subject: CN=2cd7b85fdb660f99469b49ab39e52c92f8c6c09d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:30:db:48:a4:36:46:7b:55:86:28:86:a4:82: e6:f4:a5:20:4e:07:d0:36:68:2e:19:b2:96:59:68: ce:df:5d:1a:16:9b:9f:4a:e8:52:ae:a5:cd:22:ca: d5:90:8c:b1:b5:f2:b3:5d:83:56:3c:42:e5:13:8f: 28:b1:5f:71:4c:86:5b:35:f7:f0:6c:52:2d:c0:d1: bd:73:7a:8c:91:7b:a7:cb:b3:9f:96:8c:92:c0:92: 1f:5c:19:cd:8f:15:b3:5e:d0:7c:15:98:bf:0d:01: 14:b2:90:53:f0:4a:95:32:8d:c1:1a:70:ac:ac:70: c3:a7:90:d6:d2:f1:8c:c4:70:d0:3d:28:8a:c0:e1: 6e:33:69:a0:60:d3:1e:f0:a6:ee:f1:66:33:5d:44: 26:2c:df:e6:bc:46:9a:fb:3c:2e:6f:5d:fb:40:9e: 13:a3:44:17:90:f3:10:2a:74:a1:36:10:b4:5f:22: fc:37:57:50:88:5c:ed:32:96:68:0a:a6:2a:ac:10: cf:26:37:ff:47:e9:20:9b:a4:d5:05:0b:43:b7:5a: be:f8:7f:74:c8:6a:bf:6b:e8:cc:9e:3c:90:54:01: ab:00:a4:6a:4c:64:60:87:20:2e:ff:06:3c:04:6e: 0d:6b:91:ea:75:e8:77:9e:e4:fd:06:c5:d2:e3:8b: fa:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:D7:B8:5F:DB:66:0F:99:46:9B:49:AB:39:E5:2C:92:F8:C6:C0:9D X509v3 Authority Key Identifier: keyid:89:E5:EB:1E:12:09:89:78:74:5D:54:0D:CA:96:CF:F0:DE:47:04:DA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ieXrHhIJiXh0XVQNypbP8N5HBNo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/e13b32-1ba9-4db9-a569-4aca09564fa8/1/ieXrHhIJiXh0XVQNypbP8N5HBNo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/48/e13b32-1ba9-4db9-a569-4aca09564fa8/1/ieXrHhIJiXh0XVQNypbP8N5HBNo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5d:35:2a:8e:c7:6d:1c:e2:8b:ae:0d:4e:b0:fd:0c:03:e5:b9: ee:33:9d:39:9d:f4:4a:fb:d0:72:cd:ae:f9:37:9d:d7:42:27: 9e:00:fe:6f:39:3d:e9:35:59:85:cf:54:d5:70:2b:af:61:a7: a4:f7:c9:9a:a6:3f:32:77:4d:da:79:7e:a8:7f:31:2d:4d:ea: 4b:ca:b5:59:ac:1c:db:1c:3d:27:a1:4a:51:3a:24:da:47:57: 60:ff:ac:cc:f1:34:83:87:76:7f:51:f2:67:ef:cb:b3:54:99: a7:63:18:d9:85:14:a0:42:ae:ad:72:72:e0:81:ef:39:91:cd: 86:72:02:ad:03:79:68:56:02:09:d1:61:75:2e:ef:03:ec:f2: 31:68:48:1f:4b:0b:c6:13:aa:07:52:6f:51:58:a8:19:98:b9: 82:4a:61:f5:21:83:f5:51:7e:da:38:29:53:b5:06:2c:2c:52: 79:db:25:3f:53:cb:8d:0a:fa:a4:1f:df:a8:49:ab:d4:ed:1c: df:d8:49:12:26:f5:4a:0d:dc:72:61:b5:11:86:47:29:6a:4c: 9c:51:3a:58:80:b6:10:fa:29:15:1e:de:aa:49:a6:f5:08:f5: f8:52:36:20:ce:b4:ad:8c:99:61:71:74:73:dd:3a:91:42:ea: 8e:aa:d8:e2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsvMBCriqe6dCPD09GhA+3GMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg5ZTVlYjFlMTIwOTg5Nzg3NDVkNTQwZGNhOTZjZmYwZGU0 NzA0ZGEwHhcNMjUxMjE4MDIwMDM3WhcNMjUxMjE5MDIwMDM3WjAzMTEwLwYDVQQD EygyY2Q3Yjg1ZmRiNjYwZjk5NDY5YjQ5YWIzOWU1MmM5MmY4YzZjMDlkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoTDbSKQ2RntVhiiGpILm9KUgTgfQ NmguGbKWWWjO310aFpufSuhSrqXNIsrVkIyxtfKzXYNWPELlE48osV9xTIZbNffw bFItwNG9c3qMkXuny7OfloySwJIfXBnNjxWzXtB8FZi/DQEUspBT8EqVMo3BGnCs rHDDp5DW0vGMxHDQPSiKwOFuM2mgYNMe8Kbu8WYzXUQmLN/mvEaa+zwub137QJ4T o0QXkPMQKnShNhC0XyL8N1dQiFztMpZoCqYqrBDPJjf/R+kgm6TVBQtDt1q++H90 yGq/a+jMnjyQVAGrAKRqTGRghyAu/wY8BG4Na5Hqdeh3nuT9BsXS44v6XQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCzXuF/bZg+ZRptJqznlLJL4xsCdMB8GA1UdIwQY MBaAFInl6x4SCYl4dF1UDcqWz/DeRwTaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaWVYckhoSUppWGgwWFZRTnlwYlA4TjVIQk5vLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OC9lMTNiMzItMWJhOS00ZGI5LWE1Njkt NGFjYTA5NTY0ZmE4LzEvaWVYckhoSUppWGgwWFZRTnlwYlA4TjVIQk5vLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80OC9lMTNiMzItMWJhOS00ZGI5LWE1NjktNGFjYTA5NTY0ZmE4 LzEvaWVYckhoSUppWGgwWFZRTnlwYlA4TjVIQk5vLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXTUqjsdt HOKLrg1OsP0MA+W57jOdOZ30SvvQcs2u+Ted10InngD+bzk96TVZhc9U1XArr2Gn pPfJmqY/MndN2nl+qH8xLU3qS8q1Wawc2xw9J6FKUTok2kdXYP+szPE0g4d2f1Hy Z+/Ls1SZp2MY2YUUoEKurXJy4IHvOZHNhnICrQN5aFYCCdFhdS7vA+zyMWhIH0sL xhOqB1JvUVioGZi5gkph9SGD9VF+2jgpU7UGLCxSedslP1PLjQr6pB/fqEmr1O0c 39hJEib1Sg3ccmG1EYZHKWpMnFE6WIC2EPopFR7eqkmm9Qj1+FI2IM60rYyZYXF0 c906kULqjqrY4g== -----END CERTIFICATE-----Generated at Thu Dec 18 05:44:51 2025 by rpki-client