This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/febb2e-f0da-4d74-b547-f7401b4e4b4a/1/iH0wEZNRUA8lmlfi_2hQeX0bTho.mft File: iH0wEZNRUA8lmlfi_2hQeX0bTho.mft (raw, json) Hash identifier: ago9sWLQyd7vWhxBrLf6kniorP2oM9AJhrKOjbyBvIg= Subject key identifier: 2D:89:F4:71:C8:7E:78:5E:47:5C:28:B5:B5:F3:E9:FF:A0:95:82:FA Authority key identifier: 88:7D:30:11:93:51:50:0F:25:9A:57:E2:FF:68:50:79:7D:1B:4E:1A Certificate issuer: /CN=887d30119351500f259a57e2ff6850797d1b4e1a Certificate serial: 019AF12E485C0BAD51CE504760F7D2208231 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iH0wEZNRUA8lmlfi_2hQeX0bTho.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/febb2e-f0da-4d74-b547-f7401b4e4b4a/1/iH0wEZNRUA8lmlfi_2hQeX0bTho.mft Manifest number: 1763 Signing time: Sat 06 Dec 2025 01:02:13 +0000 Manifest this update: Sat 06 Dec 2025 01:02:13 +0000 Manifest next update: Sun 07 Dec 2025 01:02:13 +0000 Files and hashes: 1: iH0wEZNRUA8lmlfi_2hQeX0bTho.crl (hash: Q3Fv4uDxjweAXwAY5TWwaIgbhkuPI7PBYUYYnVX0iZ8=) 2: qABhsOLWjcCV2-NCnGtwC8QlYyU.roa (hash: md9z/89P3sn3nXo5h/larqHDUL4eXCPfvLewxfl/iTY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/febb2e-f0da-4d74-b547-f7401b4e4b4a/1/iH0wEZNRUA8lmlfi_2hQeX0bTho.crl rsync://rpki.ripe.net/repository/DEFAULT/68/febb2e-f0da-4d74-b547-f7401b4e4b4a/1/iH0wEZNRUA8lmlfi_2hQeX0bTho.mft rsync://rpki.ripe.net/repository/DEFAULT/iH0wEZNRUA8lmlfi_2hQeX0bTho.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:02:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2e:48:5c:0b:ad:51:ce:50:47:60:f7:d2:20:82:31 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=887d30119351500f259a57e2ff6850797d1b4e1a Validity Not Before: Dec 6 01:02:13 2025 GMT Not After : Dec 7 01:02:13 2025 GMT Subject: CN=2d89f471c87e785e475c28b5b5f3e9ffa09582fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f5:3b:63:89:30:87:99:3a:99:25:d2:d2:63:5d: 7b:b9:e5:9b:8f:ad:d0:44:84:6d:ce:2e:d1:75:81: 08:af:5b:c5:d8:00:00:21:09:52:70:9a:d9:16:ca: 2c:cd:eb:14:d6:3f:f5:cb:f2:df:8b:e3:86:93:1b: bc:d2:df:b9:ea:96:ec:88:5c:48:2b:aa:e8:47:85: fa:3b:c9:ee:ee:10:e3:7c:64:93:cc:46:f3:8e:f8: 76:7b:a9:58:f6:45:5f:b8:03:a3:ed:1b:e7:a2:ed: 79:ca:75:9f:e9:6a:03:d4:32:d3:9a:49:4d:7e:1d: 15:02:1e:eb:91:0d:be:43:e0:7d:ce:9d:4a:5a:b8: 10:7b:22:9d:2a:5a:47:4a:dc:47:31:73:94:ff:3d: eb:b2:9b:44:41:4d:79:90:ea:05:2d:42:38:9e:98: 91:46:50:15:92:59:64:4a:71:45:b4:35:4e:e5:9f: 3f:39:1f:04:94:fa:9d:2e:f1:c8:4c:e9:12:b8:23: 6e:18:7e:c4:4e:dc:1c:25:46:f0:53:32:fb:a3:de: 8e:01:ec:8c:33:0b:c3:ac:d9:2b:c3:f1:83:02:ec: 04:d2:90:59:1a:80:62:84:c5:08:1f:63:ce:f0:3c: f1:c0:88:e3:dd:ff:76:2b:d2:3b:14:2d:38:8d:7f: a3:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:89:F4:71:C8:7E:78:5E:47:5C:28:B5:B5:F3:E9:FF:A0:95:82:FA X509v3 Authority Key Identifier: keyid:88:7D:30:11:93:51:50:0F:25:9A:57:E2:FF:68:50:79:7D:1B:4E:1A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iH0wEZNRUA8lmlfi_2hQeX0bTho.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/febb2e-f0da-4d74-b547-f7401b4e4b4a/1/iH0wEZNRUA8lmlfi_2hQeX0bTho.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/68/febb2e-f0da-4d74-b547-f7401b4e4b4a/1/iH0wEZNRUA8lmlfi_2hQeX0bTho.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 38:74:0e:42:88:93:16:1c:d7:dd:43:3c:a5:ba:0a:be:53:2b: 01:2b:5e:7d:71:53:cb:3e:f3:5d:31:ed:2a:1b:61:b4:06:22: 96:84:0e:fe:7f:ff:9c:75:5d:b6:3f:b5:7b:f5:ab:af:57:d5: 51:7c:10:7c:fe:4e:77:bb:ec:6a:f2:e2:2b:b0:35:79:14:e1: b8:90:87:f9:75:a8:e8:8f:6d:d9:6a:db:74:c5:a6:9d:6f:b5: 1d:61:64:e8:f3:b3:65:b2:7c:ff:53:8b:94:8b:4c:2d:75:a9: 45:ab:df:90:f2:33:78:34:26:ae:e2:32:e5:1f:9b:68:76:1c: 4e:40:bc:67:ce:d8:2c:e9:92:42:e4:63:b5:1c:24:60:49:40: c2:2b:96:13:38:55:32:23:2f:1b:71:6e:13:36:55:9a:f7:98: d8:19:79:99:03:b7:c3:dc:c9:67:cd:52:58:11:65:86:c6:a1: 1d:fb:aa:0a:f8:bf:68:b1:f8:85:48:47:e0:10:2e:a7:4b:25: b3:3c:bf:6c:b9:a5:85:83:c8:b7:08:d3:1b:03:5e:df:5d:a4: e3:7a:4d:86:9d:67:90:39:64:38:dc:4a:9c:a1:ac:41:e3:41: ce:69:84:99:01:3e:1f:98:f2:2e:18:96:50:12:b1:7e:4c:9c: c0:28:50:21 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLkhcC61RzlBHYPfSIIIxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg4N2QzMDExOTM1MTUwMGYyNTlhNTdlMmZmNjg1MDc5N2Qx YjRlMWEwHhcNMjUxMjA2MDEwMjEzWhcNMjUxMjA3MDEwMjEzWjAzMTEwLwYDVQQD EygyZDg5ZjQ3MWM4N2U3ODVlNDc1YzI4YjViNWYzZTlmZmEwOTU4MmZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9TtjiTCHmTqZJdLSY117ueWbj63Q RIRtzi7RdYEIr1vF2AAAIQlScJrZFsoszesU1j/1y/Lfi+OGkxu80t+56pbsiFxI K6roR4X6O8nu7hDjfGSTzEbzjvh2e6lY9kVfuAOj7Rvnou15ynWf6WoD1DLTmklN fh0VAh7rkQ2+Q+B9zp1KWrgQeyKdKlpHStxHMXOU/z3rsptEQU15kOoFLUI4npiR RlAVkllkSnFFtDVO5Z8/OR8ElPqdLvHITOkSuCNuGH7ETtwcJUbwUzL7o96OAeyM MwvDrNkrw/GDAuwE0pBZGoBihMUIH2PO8DzxwIjj3f92K9I7FC04jX+j5wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFC2J9HHIfnheR1wotbXz6f+glYL6MB8GA1UdIwQY MBaAFIh9MBGTUVAPJZpX4v9oUHl9G04aMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaUgwd0VaTlJVQThsbWxmaV8yaFFlWDBiVGhvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OC9mZWJiMmUtZjBkYS00ZDc0LWI1NDct Zjc0MDFiNGU0YjRhLzEvaUgwd0VaTlJVQThsbWxmaV8yaFFlWDBiVGhvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82OC9mZWJiMmUtZjBkYS00ZDc0LWI1NDctZjc0MDFiNGU0YjRh LzEvaUgwd0VaTlJVQThsbWxmaV8yaFFlWDBiVGhvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOHQOQoiT FhzX3UM8pboKvlMrAStefXFTyz7zXTHtKhthtAYiloQO/n//nHVdtj+1e/Wrr1fV UXwQfP5Od7vsavLiK7A1eRThuJCH+XWo6I9t2WrbdMWmnW+1HWFk6POzZbJ8/1OL lItMLXWpRavfkPIzeDQmruIy5R+baHYcTkC8Z87YLOmSQuRjtRwkYElAwiuWEzhV MiMvG3FuEzZVmveY2Bl5mQO3w9zJZ81SWBFlhsahHfuqCvi/aLH4hUhH4BAup0sl szy/bLmlhYPItwjTGwNe312k43pNhp1nkDlkONxKnKGsQeNBzmmEmQE+H5jyLhiW UBKxfkycwChQIQ== -----END CERTIFICATE-----Generated at Sat Dec 6 09:30:53 2025 by rpki-client