This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/99a4cc-4720-4a64-aa06-1f924495fcdd/1/iabNn0vrewwE0x_-XGdKh6dznSE.mft File: iabNn0vrewwE0x_-XGdKh6dznSE.mft (raw, json) Hash identifier: +7E7WS+fm8l2nMT2jPIPNAyVTX9h0T7QsSEqMT+cSgE= Subject key identifier: 94:FF:68:75:A2:E8:12:AA:5E:86:72:1D:04:13:E8:E3:8D:7E:DD:CD Authority key identifier: 89:A6:CD:9F:4B:EB:7B:0C:04:D3:1F:FE:5C:67:4A:87:A7:73:9D:21 Certificate issuer: /CN=89a6cd9f4beb7b0c04d31ffe5c674a87a7739d21 Certificate serial: 019AF12E52371D04790341BABAD791467D1B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iabNn0vrewwE0x_-XGdKh6dznSE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/99a4cc-4720-4a64-aa06-1f924495fcdd/1/iabNn0vrewwE0x_-XGdKh6dznSE.mft Manifest number: 1765 Signing time: Sat 06 Dec 2025 01:02:15 +0000 Manifest this update: Sat 06 Dec 2025 01:02:15 +0000 Manifest next update: Sun 07 Dec 2025 01:02:15 +0000 Files and hashes: 1: 1AVD6_mgeoD7QDUZJl7EDizwiPA.roa (hash: cX/v9qqSG1teaYFoFOKsa3bn2RyT9qsyhWH8nkdQ7JA=) 2: 8nPu7g_10GykuOn6hB7ddpZ32pc.roa (hash: PE7yr9seUogU++GGlz15g0vomylBpNKOs5X1aqyCFXY=) 3: FuyO4nKRxR39tBuC6eKFQfxQwrc.roa (hash: GUrm17XZGeWFCxLew8/dow89FusnPuSqgk9j0BnqmKQ=) 4: IRm19nOK5U99-KFgT6Iyqb6FLRs.roa (hash: il+0ahEt0jHE3mPTA9QCPGv0irQio4DzrHv3lezN4EI=) 5: OCZT2CotgRCIuoB7CyLdArI0Xq4.roa (hash: 2KavfbQ9/xCmCPRw2wyEJR9Q6ABQMSBcOd2DtqJChbQ=) 6: QCfiaxU0-L0V2BF9e1C_GwYnzP4.roa (hash: VRlfNE6x9/KNibY36WnSc/VobsG0jDrCOQJvdKNN4i4=) 7: TrekbKofwJJgypIh3djYyzsCUwU.roa (hash: TCCyZiFHD9x34gvfVDyLYWKAPcQuU4dBBXrQhqnIl2k=) 8: hR_O6orQ7VIoQZRz0Ft_rQtrjmE.roa (hash: ufdueV5sW54kE98qc2NMXNaVclJV1tmEIBRjswSFBHQ=) 9: iabNn0vrewwE0x_-XGdKh6dznSE.crl (hash: tqEWXh1/vGzRe7kD4gyviZ3pDAsflluQfJAL5PVuLeo=) 10: mmf39HAPu66pAhfk5t6hl32At34.roa (hash: v8H+MR6QM0GWin6TVlCN7PLO5Ye9iX/HYlHyOCGTDCY=) 11: poQ9sY-40mE5OkfYNESkcevxBo8.roa (hash: t3e6WnaTkGCDqI4QgZzs43WxvQ36SKjt1xL670t+gp8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/99a4cc-4720-4a64-aa06-1f924495fcdd/1/iabNn0vrewwE0x_-XGdKh6dznSE.crl rsync://rpki.ripe.net/repository/DEFAULT/76/99a4cc-4720-4a64-aa06-1f924495fcdd/1/iabNn0vrewwE0x_-XGdKh6dznSE.mft rsync://rpki.ripe.net/repository/DEFAULT/iabNn0vrewwE0x_-XGdKh6dznSE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:02:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2e:52:37:1d:04:79:03:41:ba:ba:d7:91:46:7d:1b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89a6cd9f4beb7b0c04d31ffe5c674a87a7739d21 Validity Not Before: Dec 6 01:02:15 2025 GMT Not After : Dec 7 01:02:15 2025 GMT Subject: CN=94ff6875a2e812aa5e86721d0413e8e38d7eddcd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:17:6d:b7:8e:ea:de:c9:90:f1:ea:76:1e:84: 0f:58:37:c7:1a:67:31:d2:3c:6d:eb:d7:cd:c1:0f: 79:9c:d9:35:a6:82:ad:57:f1:b4:e8:1c:be:67:82: 9b:fa:e3:e1:02:15:5e:60:ad:54:34:3f:36:9b:40: 0b:a4:45:96:66:a8:dd:c5:12:46:31:ea:f5:f7:84: 56:16:08:e6:52:e5:96:e3:d5:fa:b0:97:df:42:e9: 5b:06:de:2e:20:a2:2b:36:3f:92:a2:23:39:40:2a: bd:cf:af:0c:6a:08:8e:0a:07:5f:81:93:dd:08:19: aa:e0:e2:53:9d:7e:d6:6b:62:94:c0:c0:ad:80:e0: 14:b3:ce:67:b1:40:6f:37:18:44:d2:27:f6:d0:38: 24:35:da:06:e2:92:c1:02:cf:d6:08:a7:d2:57:ef: 6b:f6:e4:7c:ae:4d:0b:fc:f4:a2:59:f0:2d:a3:eb: 4f:27:14:5d:fa:8d:9e:63:8a:94:67:2d:6e:17:4e: 7f:ab:71:3f:cf:1e:67:d2:2a:45:59:40:07:c8:c0: 1b:43:51:54:41:f9:72:d0:df:01:46:bd:00:96:ff: 43:04:f9:dd:a9:00:75:08:29:01:88:ae:67:de:50: a9:aa:f6:c4:f6:25:18:8a:b3:42:db:5a:d8:3b:b5: d4:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:FF:68:75:A2:E8:12:AA:5E:86:72:1D:04:13:E8:E3:8D:7E:DD:CD X509v3 Authority Key Identifier: keyid:89:A6:CD:9F:4B:EB:7B:0C:04:D3:1F:FE:5C:67:4A:87:A7:73:9D:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iabNn0vrewwE0x_-XGdKh6dznSE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/99a4cc-4720-4a64-aa06-1f924495fcdd/1/iabNn0vrewwE0x_-XGdKh6dznSE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/76/99a4cc-4720-4a64-aa06-1f924495fcdd/1/iabNn0vrewwE0x_-XGdKh6dznSE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 02:1f:f6:69:fa:5b:86:7b:16:ff:c5:01:8a:33:f2:30:ce:c0: 81:64:ac:aa:92:a2:2c:b6:56:ef:d1:5c:44:51:a0:f1:11:33: 77:86:de:ca:c1:f9:8e:a2:db:a3:7e:e6:f3:27:d5:7e:2d:31: 68:4b:09:31:af:07:10:cf:ab:56:b9:7c:71:c1:9e:96:61:bd: 1e:96:bf:7c:ae:fb:74:50:86:3f:2d:d5:fa:f0:eb:c3:d4:01: f2:db:69:5f:9f:4a:5b:0e:51:fa:1f:09:bb:40:ac:07:5f:1f: 1c:9b:36:50:5e:3d:35:98:dd:dd:95:f9:da:2b:97:c6:34:69: b0:e7:7f:a9:58:78:70:cb:28:8b:de:36:b3:90:de:2a:35:b1: a4:b4:56:e2:a2:f9:e0:8f:27:4b:b4:6f:e0:cb:fa:fd:2b:4b: 08:7d:5c:ff:42:b4:9e:b2:23:16:65:cc:f2:be:00:c2:12:5f: b1:e8:d5:46:2b:b3:5a:ff:11:df:10:39:95:77:6d:c5:6c:49: 2d:04:89:cf:43:2f:44:da:2e:97:c1:22:98:72:d8:c4:e4:11: a3:99:77:26:8d:9a:3d:83:01:38:55:bb:1c:51:9f:9b:57:66: 4f:71:24:3d:dd:0c:6e:4f:37:fe:eb:d6:83:f7:37:86:fc:8c: 65:ea:76:1c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLlI3HQR5A0G6uteRRn0bMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg5YTZjZDlmNGJlYjdiMGMwNGQzMWZmZTVjNjc0YTg3YTc3 MzlkMjEwHhcNMjUxMjA2MDEwMjE1WhcNMjUxMjA3MDEwMjE1WjAzMTEwLwYDVQQD Eyg5NGZmNjg3NWEyZTgxMmFhNWU4NjcyMWQwNDEzZThlMzhkN2VkZGNkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmRdtt47q3smQ8ep2HoQPWDfHGmcx 0jxt69fNwQ95nNk1poKtV/G06By+Z4Kb+uPhAhVeYK1UND82m0ALpEWWZqjdxRJG Mer194RWFgjmUuWW49X6sJffQulbBt4uIKIrNj+SoiM5QCq9z68MagiOCgdfgZPd CBmq4OJTnX7Wa2KUwMCtgOAUs85nsUBvNxhE0if20DgkNdoG4pLBAs/WCKfSV+9r 9uR8rk0L/PSiWfAto+tPJxRd+o2eY4qUZy1uF05/q3E/zx5n0ipFWUAHyMAbQ1FU Qfly0N8BRr0Alv9DBPndqQB1CCkBiK5n3lCpqvbE9iUYirNC21rYO7XUTwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJT/aHWi6BKqXoZyHQQT6OONft3NMB8GA1UdIwQY MBaAFImmzZ9L63sMBNMf/lxnSoenc50hMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaWFiTm4wdnJld3dFMHhfLVhHZEtoNmR6blNFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ni85OWE0Y2MtNDcyMC00YTY0LWFhMDYt MWY5MjQ0OTVmY2RkLzEvaWFiTm4wdnJld3dFMHhfLVhHZEtoNmR6blNFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Ni85OWE0Y2MtNDcyMC00YTY0LWFhMDYtMWY5MjQ0OTVmY2Rk LzEvaWFiTm4wdnJld3dFMHhfLVhHZEtoNmR6blNFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAh/2afpb hnsW/8UBijPyMM7AgWSsqpKiLLZW79FcRFGg8REzd4beysH5jqLbo37m8yfVfi0x aEsJMa8HEM+rVrl8ccGelmG9Hpa/fK77dFCGPy3V+vDrw9QB8ttpX59KWw5R+h8J u0CsB18fHJs2UF49NZjd3ZX52iuXxjRpsOd/qVh4cMsoi942s5DeKjWxpLRW4qL5 4I8nS7Rv4Mv6/StLCH1c/0K0nrIjFmXM8r4AwhJfsejVRiuzWv8R3xA5lXdtxWxJ LQSJz0MvRNoul8EimHLYxOQRo5l3Jo2aPYMBOFW7HFGfm1dmT3EkPd0Mbk83/uvW g/c3hvyMZep2HA== -----END CERTIFICATE-----Generated at Sat Dec 6 07:06:19 2025 by rpki-client