This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/fc9f2b-7f2f-4238-aa19-98cba8ff2ca3/1/IHeZAnMp8iaCdkVzryEV2pWp9r8.mft File: IHeZAnMp8iaCdkVzryEV2pWp9r8.mft (raw, json) Hash identifier: CfrIkf6BcfnDdqiVMvzjl00eHkD6lZYtcZ9hDu+If1A= Subject key identifier: 55:A5:B9:F3:95:2F:6C:86:A6:64:4A:DD:69:5E:C0:82:8F:4B:33:7C Authority key identifier: 20:77:99:02:73:29:F2:26:82:76:45:73:AF:21:15:DA:95:A9:F6:BF Certificate issuer: /CN=207799027329f22682764573af2115da95a9f6bf Certificate serial: 019AF50AD61BFA72E93861D0EE1241FABB12 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IHeZAnMp8iaCdkVzryEV2pWp9r8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/fc9f2b-7f2f-4238-aa19-98cba8ff2ca3/1/IHeZAnMp8iaCdkVzryEV2pWp9r8.mft Manifest number: 1062 Signing time: Sat 06 Dec 2025 19:01:59 +0000 Manifest this update: Sat 06 Dec 2025 19:01:59 +0000 Manifest next update: Sun 07 Dec 2025 19:01:59 +0000 Files and hashes: 1: 8EaewYTyFly5jEaj4gZEqMNcVMk.roa (hash: gqxj+841N8d9uy4L59oEcZudU4ge+IzVBr1jzF4wgjc=) 2: IHeZAnMp8iaCdkVzryEV2pWp9r8.crl (hash: LM6zCiDS0dhOq/clYY5ZIbI4+w/22NEanTfsDiUSaNQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/fc9f2b-7f2f-4238-aa19-98cba8ff2ca3/1/IHeZAnMp8iaCdkVzryEV2pWp9r8.crl rsync://rpki.ripe.net/repository/DEFAULT/4e/fc9f2b-7f2f-4238-aa19-98cba8ff2ca3/1/IHeZAnMp8iaCdkVzryEV2pWp9r8.mft rsync://rpki.ripe.net/repository/DEFAULT/IHeZAnMp8iaCdkVzryEV2pWp9r8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:0a:d6:1b:fa:72:e9:38:61:d0:ee:12:41:fa:bb:12 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=207799027329f22682764573af2115da95a9f6bf Validity Not Before: Dec 6 19:01:59 2025 GMT Not After : Dec 7 19:01:59 2025 GMT Subject: CN=55a5b9f3952f6c86a6644add695ec0828f4b337c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:8a:8d:02:e5:41:10:a0:2d:d1:5a:c0:28:32: 20:0e:de:b8:67:91:05:2d:4d:8f:db:ba:3e:2c:b1: dc:93:49:55:ba:38:ea:03:f0:04:53:52:bb:a2:77: 38:3a:59:b5:6c:10:38:69:b8:3e:60:7c:67:6c:98: e2:a7:54:bd:c3:eb:09:98:dd:b9:3a:5d:64:3d:0c: 7a:28:08:ad:df:3d:7f:7f:f4:ef:53:bf:7d:3f:46: e1:ea:15:81:77:af:b7:4e:c4:f1:dc:09:55:a1:62: ec:0c:fc:ef:dc:40:2b:5f:be:80:4c:75:90:08:d9: 20:db:46:0f:14:77:42:ab:89:ec:45:67:2d:c6:fe: 29:27:aa:ce:9e:20:ff:c4:ac:75:f7:8e:c7:c8:c6: ea:a4:f0:cb:12:00:9e:39:0d:e0:17:5f:08:97:7f: 45:4f:7e:51:4e:73:00:b9:eb:db:19:1c:8b:a8:f7: 1d:88:85:c4:b9:9d:7a:0f:8d:59:66:86:41:bf:d9: e2:e9:70:b3:d6:94:33:6b:ec:1c:dc:c2:78:b9:11: 6c:7d:2c:ae:bb:97:3b:80:e9:58:d2:23:01:79:c1: be:b1:89:1f:68:70:b9:8a:23:f8:fc:1b:88:f2:72: 5a:36:a9:91:57:2c:bc:59:68:fc:c0:5c:56:03:b9: d8:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:A5:B9:F3:95:2F:6C:86:A6:64:4A:DD:69:5E:C0:82:8F:4B:33:7C X509v3 Authority Key Identifier: keyid:20:77:99:02:73:29:F2:26:82:76:45:73:AF:21:15:DA:95:A9:F6:BF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IHeZAnMp8iaCdkVzryEV2pWp9r8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/fc9f2b-7f2f-4238-aa19-98cba8ff2ca3/1/IHeZAnMp8iaCdkVzryEV2pWp9r8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/fc9f2b-7f2f-4238-aa19-98cba8ff2ca3/1/IHeZAnMp8iaCdkVzryEV2pWp9r8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7c:69:e1:5d:75:fd:6c:bc:f3:15:70:6a:e1:47:88:0b:2a:65: 46:82:4e:e4:ec:30:61:78:2e:6a:ad:9e:a0:e5:eb:ef:97:49: 2d:0d:c5:aa:ba:ef:4b:9c:67:79:f7:8e:66:04:9a:cd:b0:41: 94:24:bc:de:f7:2a:45:3b:a4:58:ff:fe:32:d9:d0:69:52:dc: 2b:b8:8e:83:b5:e3:5b:d3:84:0f:f1:fe:41:d2:81:57:92:97: 1f:bc:74:44:ba:b5:1d:7e:33:2b:f9:88:4d:28:a1:fb:5a:86: 13:6b:9e:97:cc:71:b4:d0:d8:92:1f:fc:d7:3c:4f:c1:17:3c: 32:92:5b:b8:d7:8c:b1:e4:df:e2:ac:34:a6:41:5d:2c:a7:e5: 4e:78:c1:67:58:fa:6c:62:60:35:9e:bc:5e:1f:d2:12:b3:8b: e5:c1:bc:02:f5:dc:45:fb:53:bd:d6:90:4c:a7:d2:a4:71:d3: 7c:db:ed:fa:6b:fe:db:38:df:17:cb:e7:bd:dd:db:04:99:f6: 8f:eb:d6:53:f2:4c:05:6a:07:0f:52:a5:25:e1:bf:16:74:57: 59:94:06:cc:eb:9d:8a:3a:7c:ec:06:f9:23:97:48:77:c7:45: 90:1d:ef:f4:66:20:43:76:7b:eb:e2:92:59:d6:ac:94:55:f9: 43:d8:48:07 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1CtYb+nLpOGHQ7hJB+rsSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIwNzc5OTAyNzMyOWYyMjY4Mjc2NDU3M2FmMjExNWRhOTVh OWY2YmYwHhcNMjUxMjA2MTkwMTU5WhcNMjUxMjA3MTkwMTU5WjAzMTEwLwYDVQQD Eyg1NWE1YjlmMzk1MmY2Yzg2YTY2NDRhZGQ2OTVlYzA4MjhmNGIzMzdjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqYqNAuVBEKAt0VrAKDIgDt64Z5EF LU2P27o+LLHck0lVujjqA/AEU1K7onc4Olm1bBA4abg+YHxnbJjip1S9w+sJmN25 Ol1kPQx6KAit3z1/f/TvU799P0bh6hWBd6+3TsTx3AlVoWLsDPzv3EArX76ATHWQ CNkg20YPFHdCq4nsRWctxv4pJ6rOniD/xKx1947HyMbqpPDLEgCeOQ3gF18Il39F T35RTnMAuevbGRyLqPcdiIXEuZ16D41ZZoZBv9ni6XCz1pQza+wc3MJ4uRFsfSyu u5c7gOlY0iMBecG+sYkfaHC5iiP4/BuI8nJaNqmRVyy8WWj8wFxWA7nYbQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFWlufOVL2yGpmRK3WlewIKPSzN8MB8GA1UdIwQY MBaAFCB3mQJzKfImgnZFc68hFdqVqfa/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSUhlWkFuTXA4aWFDZGtWenJ5RVYycFdwOXI4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZS9mYzlmMmItN2YyZi00MjM4LWFhMTkt OThjYmE4ZmYyY2EzLzEvSUhlWkFuTXA4aWFDZGtWenJ5RVYycFdwOXI4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80ZS9mYzlmMmItN2YyZi00MjM4LWFhMTktOThjYmE4ZmYyY2Ez LzEvSUhlWkFuTXA4aWFDZGtWenJ5RVYycFdwOXI4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfGnhXXX9 bLzzFXBq4UeICyplRoJO5OwwYXguaq2eoOXr75dJLQ3FqrrvS5xnefeOZgSazbBB lCS83vcqRTukWP/+MtnQaVLcK7iOg7XjW9OED/H+QdKBV5KXH7x0RLq1HX4zK/mI TSih+1qGE2uel8xxtNDYkh/81zxPwRc8MpJbuNeMseTf4qw0pkFdLKflTnjBZ1j6 bGJgNZ68Xh/SErOL5cG8AvXcRftTvdaQTKfSpHHTfNvt+mv+2zjfF8vnvd3bBJn2 j+vWU/JMBWoHD1KlJeG/FnRXWZQGzOudijp87Ab5I5dId8dFkB3v9GYgQ3Z76+KS WdaslFX5Q9hIBw== -----END CERTIFICATE-----Generated at Sat Dec 6 21:41:23 2025 by rpki-client