This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/936cbb-bac4-4fde-8def-febc1ed3ceba/1/ie36QUlE0BCsae5b-yJ3OySyfvs.mft File: ie36QUlE0BCsae5b-yJ3OySyfvs.mft (raw, json) Hash identifier: GM84Khg1dOF6yfvZwz+FSfpIc7Mu2F/kVuHFhDQZrlw= Subject key identifier: B6:D6:4C:C9:7A:F0:42:A1:74:44:25:B6:55:6E:D9:7D:9D:16:05:D4 Authority key identifier: 89:ED:FA:41:49:44:D0:10:AC:69:EE:5B:FB:22:77:3B:24:B2:7E:FB Certificate issuer: /CN=89edfa414944d010ac69ee5bfb22773b24b27efb Certificate serial: 019AF1D187FB03188A253A9602A4051027CF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ie36QUlE0BCsae5b-yJ3OySyfvs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/936cbb-bac4-4fde-8def-febc1ed3ceba/1/ie36QUlE0BCsae5b-yJ3OySyfvs.mft Manifest number: 0BD5 Signing time: Sat 06 Dec 2025 04:00:31 +0000 Manifest this update: Sat 06 Dec 2025 04:00:31 +0000 Manifest next update: Sun 07 Dec 2025 04:00:31 +0000 Files and hashes: 1: 2j_QBpsrLBBxs622BISyOZtEgFA.roa (hash: 32mbR7LJ1AvTIHIxhitKhF6+X6cgHFfdsLG9qjMakhU=) 2: ie36QUlE0BCsae5b-yJ3OySyfvs.crl (hash: +iDCU+x75xJmm+Vo/64ku33zXWMFl9oanxqu1UGiiQM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/936cbb-bac4-4fde-8def-febc1ed3ceba/1/ie36QUlE0BCsae5b-yJ3OySyfvs.crl rsync://rpki.ripe.net/repository/DEFAULT/50/936cbb-bac4-4fde-8def-febc1ed3ceba/1/ie36QUlE0BCsae5b-yJ3OySyfvs.mft rsync://rpki.ripe.net/repository/DEFAULT/ie36QUlE0BCsae5b-yJ3OySyfvs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 04:00:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d1:87:fb:03:18:8a:25:3a:96:02:a4:05:10:27:cf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89edfa414944d010ac69ee5bfb22773b24b27efb Validity Not Before: Dec 6 04:00:31 2025 GMT Not After : Dec 7 04:00:31 2025 GMT Subject: CN=b6d64cc97af042a1744425b6556ed97d9d1605d4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:b6:06:37:06:9c:0a:07:50:31:9b:65:86:11: 32:25:02:9b:5a:31:4a:11:23:f7:f3:71:3a:b0:c1: 66:d7:05:c9:97:63:e2:b6:04:db:4d:cd:45:1a:86: 02:94:77:8a:04:bf:38:b1:0b:12:1d:3e:ea:24:4e: df:2c:4e:df:33:8f:c6:a7:37:3a:a9:91:00:05:c8: 57:93:25:87:12:08:b1:d2:a6:bc:01:91:8f:4a:4e: 07:a1:d1:66:97:35:7a:38:ce:f2:d1:dc:50:0c:3c: 15:f5:61:1e:68:7c:13:94:32:d9:47:0c:2c:31:0c: 66:39:c2:9b:20:cd:37:6d:5a:f8:8e:81:c5:67:92: 65:a1:9f:33:fc:a5:b5:59:a0:5a:40:1d:80:e5:73: ce:63:bf:ca:92:41:64:97:a8:70:fc:9f:df:2c:92: 00:24:b9:39:96:d0:e4:f8:3b:a0:a6:96:95:00:81: 63:4f:ca:62:e8:bc:58:39:c8:ef:ba:67:60:cb:ab: 37:07:09:59:fe:3b:0e:38:c4:b3:df:2b:b0:de:d1: 9b:30:2a:8a:1f:69:91:16:36:68:4f:a6:19:7f:7f: ca:17:5a:e9:6e:08:82:fc:7f:ec:05:35:fb:72:bd: 07:58:0e:14:1b:23:36:14:6d:3d:c0:dc:bc:56:89: 44:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:D6:4C:C9:7A:F0:42:A1:74:44:25:B6:55:6E:D9:7D:9D:16:05:D4 X509v3 Authority Key Identifier: keyid:89:ED:FA:41:49:44:D0:10:AC:69:EE:5B:FB:22:77:3B:24:B2:7E:FB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ie36QUlE0BCsae5b-yJ3OySyfvs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/936cbb-bac4-4fde-8def-febc1ed3ceba/1/ie36QUlE0BCsae5b-yJ3OySyfvs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/50/936cbb-bac4-4fde-8def-febc1ed3ceba/1/ie36QUlE0BCsae5b-yJ3OySyfvs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 17:78:7d:2c:bf:3e:7d:90:6e:53:48:7e:a1:fb:6a:6d:b6:91: 83:cb:0a:30:8a:2d:95:bf:63:f9:b0:42:48:29:22:a1:ea:38: ac:85:13:4d:d6:7c:ec:1a:31:04:43:64:0d:18:65:72:04:ba: 1d:9d:9f:86:db:ca:95:08:d5:74:c8:18:09:13:6c:10:e6:d1: d7:dc:1a:ab:c9:7e:18:c0:e8:91:fd:81:3c:88:72:44:0e:a3: 2c:ed:b3:38:4a:8f:fb:ee:f6:6f:6d:7f:ab:c3:a5:5d:29:18: 3f:43:19:2e:d0:2c:d7:3a:2e:24:18:e0:fa:86:7e:b8:26:13: c2:c8:cc:3e:39:7f:38:78:02:d4:9b:99:0a:b2:c3:d7:8c:5b: 2e:8a:37:40:7a:7b:d3:05:83:34:df:d4:0e:63:94:bb:6d:14: 2e:00:e4:9a:19:02:a0:02:32:84:34:0f:ed:6b:ab:cf:a6:c1: 28:e4:82:52:af:f2:a0:f4:a8:bf:75:d5:0f:f9:80:3f:f7:5c: f6:ac:08:72:90:26:09:da:a8:f3:24:cb:25:ec:f9:fd:e4:0a: 6f:4e:ee:03:41:d3:55:ef:b4:ad:eb:8a:78:8c:53:99:97:5f: 52:a4:a3:46:84:50:7d:61:f3:4b:6d:ee:4f:8c:f7:a9:9f:14: fe:b7:a0:05 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0Yf7AxiKJTqWAqQFECfPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg5ZWRmYTQxNDk0NGQwMTBhYzY5ZWU1YmZiMjI3NzNiMjRi MjdlZmIwHhcNMjUxMjA2MDQwMDMxWhcNMjUxMjA3MDQwMDMxWjAzMTEwLwYDVQQD EyhiNmQ2NGNjOTdhZjA0MmExNzQ0NDI1YjY1NTZlZDk3ZDlkMTYwNWQ0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw7YGNwacCgdQMZtlhhEyJQKbWjFK ESP383E6sMFm1wXJl2PitgTbTc1FGoYClHeKBL84sQsSHT7qJE7fLE7fM4/Gpzc6 qZEABchXkyWHEgix0qa8AZGPSk4HodFmlzV6OM7y0dxQDDwV9WEeaHwTlDLZRwws MQxmOcKbIM03bVr4joHFZ5JloZ8z/KW1WaBaQB2A5XPOY7/KkkFkl6hw/J/fLJIA JLk5ltDk+DugppaVAIFjT8pi6LxYOcjvumdgy6s3BwlZ/jsOOMSz3yuw3tGbMCqK H2mRFjZoT6YZf3/KF1rpbgiC/H/sBTX7cr0HWA4UGyM2FG09wNy8VolEMQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLbWTMl68EKhdEQltlVu2X2dFgXUMB8GA1UdIwQY MBaAFInt+kFJRNAQrGnuW/sidzsksn77MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaWUzNlFVbEUwQkNzYWU1Yi15SjNPeVN5ZnZzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MC85MzZjYmItYmFjNC00ZmRlLThkZWYt ZmViYzFlZDNjZWJhLzEvaWUzNlFVbEUwQkNzYWU1Yi15SjNPeVN5ZnZzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MC85MzZjYmItYmFjNC00ZmRlLThkZWYtZmViYzFlZDNjZWJh LzEvaWUzNlFVbEUwQkNzYWU1Yi15SjNPeVN5ZnZzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAF3h9LL8+ fZBuU0h+oftqbbaRg8sKMIotlb9j+bBCSCkioeo4rIUTTdZ87BoxBENkDRhlcgS6 HZ2fhtvKlQjVdMgYCRNsEObR19waq8l+GMDokf2BPIhyRA6jLO2zOEqP++72b21/ q8OlXSkYP0MZLtAs1zouJBjg+oZ+uCYTwsjMPjl/OHgC1JuZCrLD14xbLoo3QHp7 0wWDNN/UDmOUu20ULgDkmhkCoAIyhDQP7Wurz6bBKOSCUq/yoPSov3XVD/mAP/dc 9qwIcpAmCdqo8yTLJez5/eQKb07uA0HTVe+0reuKeIxTmZdfUqSjRoRQfWHzS23u T4z3qZ8U/regBQ== -----END CERTIFICATE-----Generated at Sat Dec 6 12:36:09 2025 by rpki-client