This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/e79b87-d51b-4f15-8a32-99e780bf3b98/1/iZJBoANIMVwCwOKpFQuGMIfRyFc.mft File: iZJBoANIMVwCwOKpFQuGMIfRyFc.mft (raw, json) Hash identifier: NTJeUm//qI7lXq9Tdwxj5bHsWMpBl09wdUv964SY3rQ= Subject key identifier: BF:95:45:C1:32:11:92:C1:F7:4B:09:81:CA:6A:0C:82:E7:64:61:0D Authority key identifier: 89:92:41:A0:03:48:31:5C:02:C0:E2:A9:15:0B:86:30:87:D1:C8:57 Certificate issuer: /CN=899241a00348315c02c0e2a9150b863087d1c857 Certificate serial: 019B262D8284A067B7B6CB0D23F10997CB2C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iZJBoANIMVwCwOKpFQuGMIfRyFc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/e79b87-d51b-4f15-8a32-99e780bf3b98/1/iZJBoANIMVwCwOKpFQuGMIfRyFc.mft Manifest number: 05AF Signing time: Tue 16 Dec 2025 08:01:15 +0000 Manifest this update: Tue 16 Dec 2025 08:01:15 +0000 Manifest next update: Wed 17 Dec 2025 08:01:15 +0000 Files and hashes: 1: 4ttxHqG59duZ5ALfvPB_x9iVGCs.roa (hash: fJvQbvQakJgNuM3dzhqnbPVFRMsvp98NzyW7hIi8pio=) 2: NhicUss_-kBiNIFBTBFdbugxZaU.roa (hash: x3eOaLcQnmMrFRkUTb/8DthAE9edvP0YO/DPYux9zTE=) 3: UZiFFztRfeKmfRhqu-DMXiBHSwY.roa (hash: LxeETqbIhKu+XVMzaqPP2mnLDNqdpGhRBtoYHWGJNkY=) 4: WDn1mbHRkiQwKXkGzlfqrEUF0Pw.roa (hash: L1bh3lJQlQbB+0euiek2LnVAf5GTLk4lwBwlyM5cRJ0=) 5: eeMUvhikn7BcQGcUG3J_KumqmI0.roa (hash: rMyPtHGXVd59N7ATnOyDSnVnrrZL6fZtXGf2fhRBUW8=) 6: iZJBoANIMVwCwOKpFQuGMIfRyFc.crl (hash: jNX1Xzi2jc+tZplEgySGvdiZR0TDDgN5ZVwxpzmVgCw=) 7: yHRWciFFOnDT7mIADGdvOTHOJRI.roa (hash: OaAq5TmHl/2ctslO8/QJcZi4nuJ1WFnqWLqN1q7rq1k=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/e79b87-d51b-4f15-8a32-99e780bf3b98/1/iZJBoANIMVwCwOKpFQuGMIfRyFc.crl rsync://rpki.ripe.net/repository/DEFAULT/6e/e79b87-d51b-4f15-8a32-99e780bf3b98/1/iZJBoANIMVwCwOKpFQuGMIfRyFc.mft rsync://rpki.ripe.net/repository/DEFAULT/iZJBoANIMVwCwOKpFQuGMIfRyFc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 08:01:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:26:2d:82:84:a0:67:b7:b6:cb:0d:23:f1:09:97:cb:2c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=899241a00348315c02c0e2a9150b863087d1c857 Validity Not Before: Dec 16 08:01:15 2025 GMT Not After : Dec 17 08:01:15 2025 GMT Subject: CN=bf9545c1321192c1f74b0981ca6a0c82e764610d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:52:3d:42:1f:51:0e:ad:5b:6f:b6:ed:74:a1: 95:f3:02:5b:0e:b8:87:3d:e2:d8:46:ce:82:ae:71: 01:ca:e1:2e:81:bf:0d:d4:1f:ad:35:05:e0:f1:c9: dc:20:44:12:b0:02:f1:05:00:43:04:ef:95:b5:1d: 8e:ab:c7:ff:13:fa:be:41:78:96:01:b5:5d:0f:f9: ce:70:6c:b4:2c:ce:9f:2b:d8:50:77:33:22:e8:04: 2e:1c:eb:39:f6:5b:a2:cc:72:d1:93:f5:05:43:5c: b3:d3:90:ec:10:b7:b2:09:a4:5d:91:82:cb:68:e0: 11:62:9d:f1:41:37:2b:d5:cb:db:48:f6:cb:7d:32: 19:4b:8a:30:cf:90:aa:86:3d:b2:ae:5b:7c:0b:d2: 66:74:97:31:de:a1:d5:56:36:ce:01:db:cb:91:46: a8:26:17:d6:46:8a:eb:35:7a:0a:14:cc:e5:68:fd: e6:e9:5a:cc:db:7c:e8:98:87:ac:a2:a2:b9:d6:88: 56:fa:24:2d:aa:af:e1:7c:6f:c7:58:5f:5d:d3:c2: 58:81:7b:ec:63:cc:7f:76:ff:17:87:04:08:52:8f: 44:cd:4c:f1:48:fe:cf:9d:09:29:88:53:0f:34:c1: 9b:8b:1a:45:b8:c2:c2:ce:78:d9:fc:08:50:58:1a: 4d:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:95:45:C1:32:11:92:C1:F7:4B:09:81:CA:6A:0C:82:E7:64:61:0D X509v3 Authority Key Identifier: keyid:89:92:41:A0:03:48:31:5C:02:C0:E2:A9:15:0B:86:30:87:D1:C8:57 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iZJBoANIMVwCwOKpFQuGMIfRyFc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/e79b87-d51b-4f15-8a32-99e780bf3b98/1/iZJBoANIMVwCwOKpFQuGMIfRyFc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/e79b87-d51b-4f15-8a32-99e780bf3b98/1/iZJBoANIMVwCwOKpFQuGMIfRyFc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6d:78:88:6e:f7:07:63:aa:5b:c0:e0:94:22:29:a9:72:e6:82: b8:47:bd:6d:3c:22:13:a1:f1:d9:c2:c8:63:fb:16:90:75:d2: d3:fe:fb:a4:42:3d:f2:e9:7e:b5:66:3d:2a:ee:c2:e9:4f:92: 2d:d6:32:e9:4a:79:59:dc:67:20:a7:60:8c:37:2d:a8:06:9c: 5c:c2:16:2d:92:da:6c:b4:12:a9:21:61:50:7c:c4:1b:8f:8b: 98:56:55:03:d5:7e:aa:d5:6e:4c:1c:01:6b:52:67:e7:4e:b7: 5e:b0:e1:9e:61:88:d4:d9:e9:4a:92:3b:4e:79:d6:94:b5:f3: 35:5d:e2:3c:ad:82:10:fb:7a:0a:39:0f:80:5a:dc:51:a5:6f: 22:af:1c:69:13:97:01:7b:50:a4:9f:d2:02:4b:35:b7:fc:49: 32:81:0b:5c:cb:bf:04:a4:35:a5:aa:a7:b5:8b:ee:8e:fd:c2: 09:b7:b1:be:92:9c:1e:0b:43:7a:47:b1:7d:e3:10:48:76:01: 9b:72:30:96:c9:22:be:d7:83:76:b0:93:bd:06:f8:56:30:7e: fe:64:a5:ac:23:65:cc:fc:cf:10:5d:cf:90:9e:7c:40:96:54: df:a9:79:f1:25:a5:5c:02:ee:ac:37:62:3f:13:99:fd:ac:25: 9b:5f:a1:30 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsmLYKEoGe3tssNI/EJl8ssMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg5OTI0MWEwMDM0ODMxNWMwMmMwZTJhOTE1MGI4NjMwODdk MWM4NTcwHhcNMjUxMjE2MDgwMTE1WhcNMjUxMjE3MDgwMTE1WjAzMTEwLwYDVQQD EyhiZjk1NDVjMTMyMTE5MmMxZjc0YjA5ODFjYTZhMGM4MmU3NjQ2MTBkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3FI9Qh9RDq1bb7btdKGV8wJbDriH PeLYRs6CrnEByuEugb8N1B+tNQXg8cncIEQSsALxBQBDBO+VtR2Oq8f/E/q+QXiW AbVdD/nOcGy0LM6fK9hQdzMi6AQuHOs59luizHLRk/UFQ1yz05DsELeyCaRdkYLL aOARYp3xQTcr1cvbSPbLfTIZS4owz5Cqhj2yrlt8C9JmdJcx3qHVVjbOAdvLkUao JhfWRorrNXoKFMzlaP3m6VrM23zomIesoqK51ohW+iQtqq/hfG/HWF9d08JYgXvs Y8x/dv8XhwQIUo9EzUzxSP7PnQkpiFMPNMGbixpFuMLCznjZ/AhQWBpNpwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFL+VRcEyEZLB90sJgcpqDILnZGENMB8GA1UdIwQY MBaAFImSQaADSDFcAsDiqRULhjCH0chXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaVpKQm9BTklNVndDd09LcEZRdUdNSWZSeUZjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZS9lNzliODctZDUxYi00ZjE1LThhMzIt OTllNzgwYmYzYjk4LzEvaVpKQm9BTklNVndDd09LcEZRdUdNSWZSeUZjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82ZS9lNzliODctZDUxYi00ZjE1LThhMzItOTllNzgwYmYzYjk4 LzEvaVpKQm9BTklNVndDd09LcEZRdUdNSWZSeUZjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbXiIbvcH Y6pbwOCUIimpcuaCuEe9bTwiE6Hx2cLIY/sWkHXS0/77pEI98ul+tWY9Ku7C6U+S LdYy6Up5WdxnIKdgjDctqAacXMIWLZLabLQSqSFhUHzEG4+LmFZVA9V+qtVuTBwB a1Jn5063XrDhnmGI1NnpSpI7TnnWlLXzNV3iPK2CEPt6CjkPgFrcUaVvIq8caROX AXtQpJ/SAks1t/xJMoELXMu/BKQ1paqntYvujv3CCbexvpKcHgtDekexfeMQSHYB m3IwlskivteDdrCTvQb4VjB+/mSlrCNlzPzPEF3PkJ58QJZU36l58SWlXALurDdi PxOZ/awlm1+hMA== -----END CERTIFICATE-----Generated at Tue Dec 16 17:54:55 2025 by rpki-client