This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/eb3e03-3968-4db2-bf80-43f6ae520b1a/1/iXwaiMnImulCVOIkHHiOl8H_Pkg.mft File: iXwaiMnImulCVOIkHHiOl8H_Pkg.mft (raw, json) Hash identifier: lM8vmsaUp77j3eg/50aThirnsKY0E4w9wzf+cXYM2FQ= Subject key identifier: A6:DB:79:AC:9F:05:6B:15:4A:13:8B:A1:A1:9B:F1:CE:04:01:B5:0D Authority key identifier: 89:7C:1A:88:C9:C8:9A:E9:42:54:E2:24:1C:78:8E:97:C1:FF:3E:48 Certificate issuer: /CN=897c1a88c9c89ae94254e2241c788e97c1ff3e48 Certificate serial: 019AF20916E6866761D92A56E58E6063A1F6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iXwaiMnImulCVOIkHHiOl8H_Pkg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/eb3e03-3968-4db2-bf80-43f6ae520b1a/1/iXwaiMnImulCVOIkHHiOl8H_Pkg.mft Manifest number: 1761 Signing time: Sat 06 Dec 2025 05:01:13 +0000 Manifest this update: Sat 06 Dec 2025 05:01:13 +0000 Manifest next update: Sun 07 Dec 2025 05:01:13 +0000 Files and hashes: 1: ZHIJTLjmcUW3hsvKL30OKexctZ0.roa (hash: N5O/J+YUvC2PM4XmYzKt8UEzZ7cELw7jbsW94bDC90o=) 2: iXwaiMnImulCVOIkHHiOl8H_Pkg.crl (hash: xY2wrIwyk81yjPLJ2hoVpw7YEnCDKiK3cr/pjIQGTqU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/eb3e03-3968-4db2-bf80-43f6ae520b1a/1/iXwaiMnImulCVOIkHHiOl8H_Pkg.crl rsync://rpki.ripe.net/repository/DEFAULT/55/eb3e03-3968-4db2-bf80-43f6ae520b1a/1/iXwaiMnImulCVOIkHHiOl8H_Pkg.mft rsync://rpki.ripe.net/repository/DEFAULT/iXwaiMnImulCVOIkHHiOl8H_Pkg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:09:16:e6:86:67:61:d9:2a:56:e5:8e:60:63:a1:f6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=897c1a88c9c89ae94254e2241c788e97c1ff3e48 Validity Not Before: Dec 6 05:01:13 2025 GMT Not After : Dec 7 05:01:13 2025 GMT Subject: CN=a6db79ac9f056b154a138ba1a19bf1ce0401b50d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:07:81:61:f8:a5:ee:68:26:1e:58:07:c0:26: 19:03:20:72:8e:7d:6b:01:1b:45:23:fb:98:e6:a0: 5e:08:29:5d:81:33:d4:82:88:67:d1:86:f6:e7:83: 15:4a:1d:f5:1b:03:9f:a9:5b:be:78:4b:9e:80:ec: e5:28:f6:ca:af:d1:ac:32:e1:fd:e7:2a:9b:c2:73: 9a:95:29:97:93:69:fa:39:8b:0e:b0:37:34:2d:77: a0:06:3e:83:0c:27:95:cc:76:b7:15:3a:19:ab:6d: 51:39:43:e2:5a:4f:1e:4b:82:55:78:38:99:91:4a: 3e:3f:07:70:19:06:09:41:d8:6d:9e:28:9b:1a:83: 0b:12:a5:84:93:47:a7:a8:a6:8b:f0:bf:40:04:83: 1d:1b:42:d9:8d:80:b5:55:5a:89:88:c5:2b:d2:b3: 42:67:0d:d7:b7:ed:74:18:3f:48:06:87:81:d2:62: 64:51:bf:17:26:71:18:9f:18:d0:00:7b:d6:49:43: 8b:22:2e:ca:d7:2a:40:eb:66:a6:6f:1e:2b:9b:6f: 96:c8:44:ae:2f:11:a8:c1:e4:16:d4:1a:68:45:ae: f0:56:1f:0a:80:a1:0c:c2:1a:a5:03:e8:54:84:4e: bc:8b:51:cd:03:95:cc:0c:1a:26:57:6c:3b:43:24: 33:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:DB:79:AC:9F:05:6B:15:4A:13:8B:A1:A1:9B:F1:CE:04:01:B5:0D X509v3 Authority Key Identifier: keyid:89:7C:1A:88:C9:C8:9A:E9:42:54:E2:24:1C:78:8E:97:C1:FF:3E:48 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iXwaiMnImulCVOIkHHiOl8H_Pkg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/eb3e03-3968-4db2-bf80-43f6ae520b1a/1/iXwaiMnImulCVOIkHHiOl8H_Pkg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/55/eb3e03-3968-4db2-bf80-43f6ae520b1a/1/iXwaiMnImulCVOIkHHiOl8H_Pkg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5e:0e:2d:14:e0:31:a0:59:b5:46:3a:06:c8:e0:ab:b3:98:c2: 16:d8:6c:ac:13:5c:25:66:6d:ea:cc:fb:5e:6e:b2:8a:12:50: 1d:e1:a9:b7:e0:76:80:f7:9f:13:2a:7d:5b:39:d4:be:b8:28: 9b:95:1d:56:d8:42:d2:32:59:5a:42:98:fe:0a:cf:22:cc:bf: 66:7a:83:d9:b3:e8:e2:5d:d9:18:42:7a:45:b3:ee:7f:b4:86: 2c:c6:50:39:0b:f7:d8:2a:bf:16:f7:34:ec:f1:7f:a5:45:b6: ee:54:dd:36:62:de:83:3b:ba:e5:ef:b6:13:5b:59:a8:c6:67: f1:b6:f3:78:cd:0e:2b:98:56:ce:6a:5b:85:e4:4b:b0:7c:3f: 35:32:cc:90:c1:aa:79:2e:28:30:4a:b8:5d:37:be:61:d6:0d: 65:e4:a0:d8:de:6c:4d:88:9c:ae:80:d3:7d:4e:81:33:07:c4: 01:41:53:82:b2:cd:78:20:27:59:8c:35:0a:b1:95:1f:19:e7: b0:b7:49:5e:84:f1:29:0d:5c:b2:73:42:7d:20:b6:9e:f8:49: bd:e9:35:b1:ba:2c:fe:19:7b:88:e0:3b:4d:19:80:dd:ff:f7: 97:a6:5f:88:54:9e:6e:2b:05:38:03:a8:54:08:ce:82:cb:ca: 9c:4c:fd:c9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCRbmhmdh2SpW5Y5gY6H2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg5N2MxYTg4YzljODlhZTk0MjU0ZTIyNDFjNzg4ZTk3YzFm ZjNlNDgwHhcNMjUxMjA2MDUwMTEzWhcNMjUxMjA3MDUwMTEzWjAzMTEwLwYDVQQD EyhhNmRiNzlhYzlmMDU2YjE1NGExMzhiYTFhMTliZjFjZTA0MDFiNTBkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqQeBYfil7mgmHlgHwCYZAyByjn1r ARtFI/uY5qBeCCldgTPUgohn0Yb254MVSh31GwOfqVu+eEuegOzlKPbKr9GsMuH9 5yqbwnOalSmXk2n6OYsOsDc0LXegBj6DDCeVzHa3FToZq21ROUPiWk8eS4JVeDiZ kUo+PwdwGQYJQdhtniibGoMLEqWEk0enqKaL8L9ABIMdG0LZjYC1VVqJiMUr0rNC Zw3Xt+10GD9IBoeB0mJkUb8XJnEYnxjQAHvWSUOLIi7K1ypA62ambx4rm2+WyESu LxGoweQW1BpoRa7wVh8KgKEMwhqlA+hUhE68i1HNA5XMDBomV2w7QyQzpQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKbbeayfBWsVShOLoaGb8c4EAbUNMB8GA1UdIwQY MBaAFIl8GojJyJrpQlTiJBx4jpfB/z5IMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaVh3YWlNbkltdWxDVk9Ja0hIaU9sOEhfUGtnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS9lYjNlMDMtMzk2OC00ZGIyLWJmODAt NDNmNmFlNTIwYjFhLzEvaVh3YWlNbkltdWxDVk9Ja0hIaU9sOEhfUGtnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81NS9lYjNlMDMtMzk2OC00ZGIyLWJmODAtNDNmNmFlNTIwYjFh LzEvaVh3YWlNbkltdWxDVk9Ja0hIaU9sOEhfUGtnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXg4tFOAx oFm1RjoGyOCrs5jCFthsrBNcJWZt6sz7Xm6yihJQHeGpt+B2gPefEyp9WznUvrgo m5UdVthC0jJZWkKY/grPIsy/ZnqD2bPo4l3ZGEJ6RbPuf7SGLMZQOQv32Cq/Fvc0 7PF/pUW27lTdNmLegzu65e+2E1tZqMZn8bbzeM0OK5hWzmpbheRLsHw/NTLMkMGq eS4oMEq4XTe+YdYNZeSg2N5sTYicroDTfU6BMwfEAUFTgrLNeCAnWYw1CrGVHxnn sLdJXoTxKQ1csnNCfSC2nvhJvek1sbos/hl7iOA7TRmA3f/3l6ZfiFSebisFOAOo VAjOgsvKnEz9yQ== -----END CERTIFICATE-----Generated at Sat Dec 6 07:22:11 2025 by rpki-client