This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/760452-f63c-48aa-a3e0-38d0cf8fb8b8/1/iNCLhhV8ayjmrJguDD_rGj7DKBA.mft File: iNCLhhV8ayjmrJguDD_rGj7DKBA.mft (raw, json) Hash identifier: GwJW6G2+3vS9TQ1LHjYjzhbRPCFzHayiYl4F2ayFUQU= Subject key identifier: 10:A6:EC:61:B2:4E:FA:E1:72:C6:72:F7:47:58:29:E5:2B:14:21:25 Authority key identifier: 88:D0:8B:86:15:7C:6B:28:E6:AC:98:2E:0C:3F:EB:1A:3E:C3:28:10 Certificate issuer: /CN=88d08b86157c6b28e6ac982e0c3feb1a3ec32810 Certificate serial: 019AF08899FECC85F1F2EC44E7C3C4157AB9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iNCLhhV8ayjmrJguDD_rGj7DKBA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/760452-f63c-48aa-a3e0-38d0cf8fb8b8/1/iNCLhhV8ayjmrJguDD_rGj7DKBA.mft Manifest number: 0661 Signing time: Fri 05 Dec 2025 22:01:15 +0000 Manifest this update: Fri 05 Dec 2025 22:01:15 +0000 Manifest next update: Sat 06 Dec 2025 22:01:15 +0000 Files and hashes: 1: Ajbz3OGkwZMEFq0jmclXR5Gr8N4.roa (hash: VyX/vNC7tiH5t3Mk3m61yLf9U3OPk8ttEhnvx5R6lEc=) 2: iNCLhhV8ayjmrJguDD_rGj7DKBA.crl (hash: Yc9sgXLMpZ5+V0KPzzgn6XOwbJBLzEzeJm93AiwuZeY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/760452-f63c-48aa-a3e0-38d0cf8fb8b8/1/iNCLhhV8ayjmrJguDD_rGj7DKBA.crl rsync://rpki.ripe.net/repository/DEFAULT/63/760452-f63c-48aa-a3e0-38d0cf8fb8b8/1/iNCLhhV8ayjmrJguDD_rGj7DKBA.mft rsync://rpki.ripe.net/repository/DEFAULT/iNCLhhV8ayjmrJguDD_rGj7DKBA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 22:01:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:88:99:fe:cc:85:f1:f2:ec:44:e7:c3:c4:15:7a:b9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=88d08b86157c6b28e6ac982e0c3feb1a3ec32810 Validity Not Before: Dec 5 22:01:15 2025 GMT Not After : Dec 6 22:01:15 2025 GMT Subject: CN=10a6ec61b24efae172c672f7475829e52b142125 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:3f:16:57:11:a9:ec:b0:03:c2:df:0c:c4:01: 25:be:4b:ae:b2:cb:2f:29:a4:77:b9:17:a7:89:2f: 2c:d2:73:80:b1:9a:0f:45:14:c4:e6:9c:ce:d5:99: 2b:4f:e6:26:bd:52:81:04:0f:f8:24:79:d4:c4:c3: ff:ba:87:9e:47:ff:ab:d3:11:da:f3:ce:a2:02:bb: 83:e7:5b:23:b8:31:0d:1d:0b:39:92:c2:2b:ae:f6: 8c:11:1e:35:3d:a6:a8:fc:e8:f1:be:13:ab:89:b1: 18:46:64:d9:11:c6:93:cd:10:a2:d9:68:a8:d2:79: d6:72:83:2a:cc:57:cc:ce:2d:1a:6c:7d:05:9a:d4: 4b:51:87:41:f2:d4:be:95:fe:1c:f5:ca:ff:1a:3a: 29:8e:40:3c:65:ea:ec:af:d3:b4:ad:e2:a3:18:b2: 39:0c:06:c2:c8:80:a1:ca:a8:d9:bf:e9:59:bb:a7: 01:2f:69:9f:17:a5:33:dc:8d:45:c0:09:45:84:af: 55:2c:6a:66:86:85:40:66:36:47:8d:a3:48:37:b9: ee:61:80:81:d5:3c:8a:0f:df:0f:83:b5:e4:35:ec: 63:d1:42:e7:4e:7a:4f:78:eb:a6:05:db:ee:de:21: 2d:88:7e:3e:f1:85:06:36:7e:af:01:ec:1f:97:ef: 57:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:A6:EC:61:B2:4E:FA:E1:72:C6:72:F7:47:58:29:E5:2B:14:21:25 X509v3 Authority Key Identifier: keyid:88:D0:8B:86:15:7C:6B:28:E6:AC:98:2E:0C:3F:EB:1A:3E:C3:28:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iNCLhhV8ayjmrJguDD_rGj7DKBA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/760452-f63c-48aa-a3e0-38d0cf8fb8b8/1/iNCLhhV8ayjmrJguDD_rGj7DKBA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/63/760452-f63c-48aa-a3e0-38d0cf8fb8b8/1/iNCLhhV8ayjmrJguDD_rGj7DKBA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption dc:22:3d:06:02:c2:fe:ed:f5:87:1c:03:94:58:a6:41:01:02: 74:07:c8:c8:b8:42:da:0a:a1:93:ed:e2:34:96:05:4c:a4:92: b9:6d:7a:e4:47:a9:4c:c8:89:93:09:73:57:7c:b4:d0:19:12: 23:f7:e0:57:02:cd:28:2b:5c:40:7c:a9:4d:66:5f:c2:8b:b1: e0:24:8f:31:64:38:f4:a7:22:4a:b5:60:4c:58:49:e0:f2:3e: 40:1f:8f:c7:49:4c:05:24:b1:a3:65:0b:1c:b8:92:aa:e9:23: a9:be:b2:8a:3c:5b:0f:72:9e:25:04:73:01:22:6e:8a:28:dd: 56:4b:81:e7:6b:54:c7:4c:3d:91:67:0d:62:22:17:4a:14:0b: 71:e2:40:89:5f:0c:2b:0d:b6:40:a6:09:ad:eb:76:87:3b:93: e3:a2:dd:6a:4a:27:9b:3e:96:bf:8c:46:40:6c:2c:12:90:e0: 33:01:de:f3:72:dd:7a:90:73:03:55:c1:02:21:4f:a6:28:01: ef:cd:02:a5:be:6c:ef:76:61:51:12:63:b1:f0:22:2c:77:02: e4:36:4a:7c:a0:f5:be:36:aa:fb:f1:fc:85:e9:74:41:b2:87: a0:36:14:bc:fb:e8:02:71:27:58:a3:02:44:8a:9e:a9:3c:08: 71:86:42:91 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrwiJn+zIXx8uxE58PEFXq5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg4ZDA4Yjg2MTU3YzZiMjhlNmFjOTgyZTBjM2ZlYjFhM2Vj MzI4MTAwHhcNMjUxMjA1MjIwMTE1WhcNMjUxMjA2MjIwMTE1WjAzMTEwLwYDVQQD EygxMGE2ZWM2MWIyNGVmYWUxNzJjNjcyZjc0NzU4MjllNTJiMTQyMTI1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmj8WVxGp7LADwt8MxAElvkuusssv KaR3uReniS8s0nOAsZoPRRTE5pzO1ZkrT+YmvVKBBA/4JHnUxMP/uoeeR/+r0xHa 886iAruD51sjuDENHQs5ksIrrvaMER41Paao/OjxvhOribEYRmTZEcaTzRCi2Wio 0nnWcoMqzFfMzi0abH0FmtRLUYdB8tS+lf4c9cr/GjopjkA8Zersr9O0reKjGLI5 DAbCyIChyqjZv+lZu6cBL2mfF6Uz3I1FwAlFhK9VLGpmhoVAZjZHjaNIN7nuYYCB 1TyKD98Pg7XkNexj0ULnTnpPeOumBdvu3iEtiH4+8YUGNn6vAewfl+9XYwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBCm7GGyTvrhcsZy90dYKeUrFCElMB8GA1UdIwQY MBaAFIjQi4YVfGso5qyYLgw/6xo+wygQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaU5DTGhoVjhheWptckpndUREX3JHajdES0JBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82My83NjA0NTItZjYzYy00OGFhLWEzZTAt MzhkMGNmOGZiOGI4LzEvaU5DTGhoVjhheWptckpndUREX3JHajdES0JBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82My83NjA0NTItZjYzYy00OGFhLWEzZTAtMzhkMGNmOGZiOGI4 LzEvaU5DTGhoVjhheWptckpndUREX3JHajdES0JBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA3CI9BgLC /u31hxwDlFimQQECdAfIyLhC2gqhk+3iNJYFTKSSuW165EepTMiJkwlzV3y00BkS I/fgVwLNKCtcQHypTWZfwoux4CSPMWQ49KciSrVgTFhJ4PI+QB+Px0lMBSSxo2UL HLiSqukjqb6yijxbD3KeJQRzASJuiijdVkuB52tUx0w9kWcNYiIXShQLceJAiV8M Kw22QKYJret2hzuT46Ldakonmz6Wv4xGQGwsEpDgMwHe83LdepBzA1XBAiFPpigB 780Cpb5s73ZhURJjsfAiLHcC5DZKfKD1vjaq+/H8hel0QbKHoDYUvPvoAnEnWKMC RIqeqTwIcYZCkQ== -----END CERTIFICATE-----Generated at Sat Dec 6 07:11:07 2025 by rpki-client