This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/b27bd0-3d39-4d78-aa2c-1f3ccfa61aac/1/ikAAEBrTk8rff8j9Y9qtPG2uEk8.mft File: ikAAEBrTk8rff8j9Y9qtPG2uEk8.mft (raw, json) Hash identifier: zPlumBe1jfDELoNLRnphmjh3NkD8Qa5psH1/9tt50/s= Subject key identifier: E3:29:38:6A:2D:44:CD:C4:8A:ED:A8:47:66:A5:11:CB:42:A2:FF:EB Authority key identifier: 8A:40:00:10:1A:D3:93:CA:DF:7F:C8:FD:63:DA:AD:3C:6D:AE:12:4F Certificate issuer: /CN=8a4000101ad393cadf7fc8fd63daad3c6dae124f Certificate serial: 019AF5AF2568B4AFB9AE3BDEDE48FA5D2024 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ikAAEBrTk8rff8j9Y9qtPG2uEk8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/b27bd0-3d39-4d78-aa2c-1f3ccfa61aac/1/ikAAEBrTk8rff8j9Y9qtPG2uEk8.mft Manifest number: 1766 Signing time: Sat 06 Dec 2025 22:01:27 +0000 Manifest this update: Sat 06 Dec 2025 22:01:27 +0000 Manifest next update: Sun 07 Dec 2025 22:01:27 +0000 Files and hashes: 1: JZepDg8cmhIm-UJF3a4q9oRFbaM.roa (hash: wTv/4wR5ugYke9BGCLmcTg7vZIIrGydt69pX/2ie8SQ=) 2: ikAAEBrTk8rff8j9Y9qtPG2uEk8.crl (hash: tZEE7fqQIxx8zVIV7dLq6ZkkNDtB77b9exIB+nNOTrE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/b27bd0-3d39-4d78-aa2c-1f3ccfa61aac/1/ikAAEBrTk8rff8j9Y9qtPG2uEk8.crl rsync://rpki.ripe.net/repository/DEFAULT/6c/b27bd0-3d39-4d78-aa2c-1f3ccfa61aac/1/ikAAEBrTk8rff8j9Y9qtPG2uEk8.mft rsync://rpki.ripe.net/repository/DEFAULT/ikAAEBrTk8rff8j9Y9qtPG2uEk8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 21:29:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:af:25:68:b4:af:b9:ae:3b:de:de:48:fa:5d:20:24 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8a4000101ad393cadf7fc8fd63daad3c6dae124f Validity Not Before: Dec 6 22:01:27 2025 GMT Not After : Dec 7 22:01:27 2025 GMT Subject: CN=e329386a2d44cdc48aeda84766a511cb42a2ffeb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:20:f7:95:e5:2e:25:da:15:7e:0a:1a:4f:56: 4a:f8:9e:3a:1c:64:0f:d3:0a:a0:80:f9:3d:5d:e7: d7:30:00:f8:ac:8f:a0:a8:7b:3e:00:28:f0:09:62: 03:0d:e3:62:3c:18:e2:88:e5:0d:c8:f3:d7:7d:b7: fd:20:6d:5b:77:aa:f6:6a:ee:a5:24:6d:a5:09:ea: 15:ec:e3:33:d6:32:b0:58:f6:94:6c:fb:af:e4:97: cf:13:ba:85:91:5b:df:dd:e9:46:05:64:11:82:f2: aa:7d:da:f9:cb:27:74:b4:a8:7f:5a:49:5e:25:1a: c7:8a:47:d2:3b:bd:8e:11:88:1e:60:e9:28:80:62: 71:b7:20:14:2f:aa:ef:a8:f7:d7:a6:c7:9b:94:10: b5:0b:d5:08:11:88:53:78:8f:52:b5:04:be:ee:9c: b1:5f:76:c7:4b:74:16:a3:ff:52:13:e1:c6:f7:53: e6:f6:a7:dc:e6:2d:93:5b:7c:aa:92:df:2d:9f:03: 37:a2:a6:f1:89:ea:31:8c:c9:11:66:79:a6:73:6e: 56:66:f9:c7:f5:a1:c8:91:da:fd:19:91:cf:8a:32: 3a:ee:d4:a0:c7:32:6f:f7:97:4d:2c:be:a8:66:4e: f6:e0:ab:e2:bc:85:0d:b8:b9:e4:2d:51:e5:c3:df: 7f:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:29:38:6A:2D:44:CD:C4:8A:ED:A8:47:66:A5:11:CB:42:A2:FF:EB X509v3 Authority Key Identifier: keyid:8A:40:00:10:1A:D3:93:CA:DF:7F:C8:FD:63:DA:AD:3C:6D:AE:12:4F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ikAAEBrTk8rff8j9Y9qtPG2uEk8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/b27bd0-3d39-4d78-aa2c-1f3ccfa61aac/1/ikAAEBrTk8rff8j9Y9qtPG2uEk8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/b27bd0-3d39-4d78-aa2c-1f3ccfa61aac/1/ikAAEBrTk8rff8j9Y9qtPG2uEk8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 96:b7:0b:4e:44:06:32:63:27:61:f9:87:bf:c7:42:58:78:50: eb:c2:b3:a5:77:e7:de:7b:0d:c8:38:11:69:7c:fc:00:ad:0d: 64:ab:c5:f7:57:be:ca:0d:8d:12:f1:f3:ec:32:18:16:1c:b4: 4d:29:2a:17:db:a0:31:12:d9:0c:21:eb:e5:59:20:27:5a:07: cc:21:f3:0c:ef:17:3e:19:f8:4d:96:f5:98:4d:aa:b0:9f:ac: 28:c0:ae:15:99:a9:be:16:5b:74:6a:7a:61:45:29:a7:92:25: 1e:81:d8:1f:f8:e1:81:d1:7e:c2:be:d1:e4:37:b3:52:68:63: f8:75:c5:ed:ab:1b:e9:20:74:d2:de:76:6a:d3:f5:17:0b:e2: b9:38:d6:1a:3b:6c:34:01:df:4b:72:83:a1:61:16:ba:66:f3: ee:39:f7:34:86:06:34:2d:cf:4b:5e:11:d1:ec:6e:a7:e4:7c: 8c:71:6d:89:a4:8c:38:c8:5e:ef:5c:2a:c3:8e:3e:e4:ae:79: 78:e3:ae:a8:84:0d:e6:e5:09:76:fd:36:05:c8:fd:67:9f:f2: 7a:fa:a7:93:33:4f:b7:3e:04:e8:31:cb:fd:7d:20:d0:65:64: 89:80:31:78:1d:63:a5:1c:92:67:16:58:6a:87:f4:e4:fc:59: a6:a6:8e:1d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1ryVotK+5rjve3kj6XSAkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhhNDAwMDEwMWFkMzkzY2FkZjdmYzhmZDYzZGFhZDNjNmRh ZTEyNGYwHhcNMjUxMjA2MjIwMTI3WhcNMjUxMjA3MjIwMTI3WjAzMTEwLwYDVQQD EyhlMzI5Mzg2YTJkNDRjZGM0OGFlZGE4NDc2NmE1MTFjYjQyYTJmZmViMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqyD3leUuJdoVfgoaT1ZK+J46HGQP 0wqggPk9XefXMAD4rI+gqHs+ACjwCWIDDeNiPBjiiOUNyPPXfbf9IG1bd6r2au6l JG2lCeoV7OMz1jKwWPaUbPuv5JfPE7qFkVvf3elGBWQRgvKqfdr5yyd0tKh/Wkle JRrHikfSO72OEYgeYOkogGJxtyAUL6rvqPfXpseblBC1C9UIEYhTeI9StQS+7pyx X3bHS3QWo/9SE+HG91Pm9qfc5i2TW3yqkt8tnwM3oqbxieoxjMkRZnmmc25WZvnH 9aHIkdr9GZHPijI67tSgxzJv95dNLL6oZk724KvivIUNuLnkLVHlw99/NQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOMpOGotRM3Eiu2oR2alEctCov/rMB8GA1UdIwQY MBaAFIpAABAa05PK33/I/WParTxtrhJPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaWtBQUVCclRrOHJmZjhqOVk5cXRQRzJ1RWs4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yy9iMjdiZDAtM2QzOS00ZDc4LWFhMmMt MWYzY2NmYTYxYWFjLzEvaWtBQUVCclRrOHJmZjhqOVk5cXRQRzJ1RWs4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Yy9iMjdiZDAtM2QzOS00ZDc4LWFhMmMtMWYzY2NmYTYxYWFj LzEvaWtBQUVCclRrOHJmZjhqOVk5cXRQRzJ1RWs4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlrcLTkQG MmMnYfmHv8dCWHhQ68KzpXfn3nsNyDgRaXz8AK0NZKvF91e+yg2NEvHz7DIYFhy0 TSkqF9ugMRLZDCHr5VkgJ1oHzCHzDO8XPhn4TZb1mE2qsJ+sKMCuFZmpvhZbdGp6 YUUpp5IlHoHYH/jhgdF+wr7R5DezUmhj+HXF7asb6SB00t52atP1FwviuTjWGjts NAHfS3KDoWEWumbz7jn3NIYGNC3PS14R0exup+R8jHFtiaSMOMhe71wqw44+5K55 eOOuqIQN5uUJdv02Bcj9Z5/yevqnkzNPtz4E6DHL/X0g0GVkiYAxeB1jpRySZxZY aof05PxZpqaOHQ== -----END CERTIFICATE-----Generated at Sun Dec 7 01:46:27 2025 by rpki-client