This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/1d4b2c-945d-4f39-b233-3e6b7025b65e/1/IeQhptlumdY_fPtJnKcRfIIwTqo.mft File: IeQhptlumdY_fPtJnKcRfIIwTqo.mft (raw, json) Hash identifier: VmKBFLjNnSLph7HqP36trz0dYt/t0YUMCPGmyergFhc= Subject key identifier: 68:31:59:1B:98:20:50:E2:1A:99:07:FD:64:60:0A:47:E1:53:E7:57 Authority key identifier: 21:E4:21:A6:D9:6E:99:D6:3F:7C:FB:49:9C:A7:11:7C:82:30:4E:AA Certificate issuer: /CN=21e421a6d96e99d63f7cfb499ca7117c82304eaa Certificate serial: 019AF0BF603C44A8BF95C00A7FFFAD57F62B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IeQhptlumdY_fPtJnKcRfIIwTqo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/1d4b2c-945d-4f39-b233-3e6b7025b65e/1/IeQhptlumdY_fPtJnKcRfIIwTqo.mft Manifest number: 175F Signing time: Fri 05 Dec 2025 23:01:05 +0000 Manifest this update: Fri 05 Dec 2025 23:01:05 +0000 Manifest next update: Sat 06 Dec 2025 23:01:05 +0000 Files and hashes: 1: 1-6OkkXT7C4FLfpQRzLeEPIkuUNA.roa (hash: D8MJaVpCwQ0fVODdot0Xw5y5hbPJWv55WnQMX0Z/dxE=) 2: IeQhptlumdY_fPtJnKcRfIIwTqo.crl (hash: gN6hrq/YXBW5oMb0dY/DZ5EhuJTNFOvxFjpj1NyZwjQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/1d4b2c-945d-4f39-b233-3e6b7025b65e/1/IeQhptlumdY_fPtJnKcRfIIwTqo.crl rsync://rpki.ripe.net/repository/DEFAULT/77/1d4b2c-945d-4f39-b233-3e6b7025b65e/1/IeQhptlumdY_fPtJnKcRfIIwTqo.mft rsync://rpki.ripe.net/repository/DEFAULT/IeQhptlumdY_fPtJnKcRfIIwTqo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 23:01:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:bf:60:3c:44:a8:bf:95:c0:0a:7f:ff:ad:57:f6:2b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=21e421a6d96e99d63f7cfb499ca7117c82304eaa Validity Not Before: Dec 5 23:01:05 2025 GMT Not After : Dec 6 23:01:05 2025 GMT Subject: CN=6831591b982050e21a9907fd64600a47e153e757 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:59:75:07:b6:a5:13:9d:71:6f:10:86:02:ba: f0:c4:7b:be:dd:ee:58:eb:90:c5:9c:35:95:9c:31: 00:a3:ae:10:91:44:f8:f9:b3:f1:eb:5c:7e:45:46: ba:74:6e:89:4a:41:71:8f:3d:5e:3a:98:fd:10:c2: de:2a:2a:66:78:f2:1a:b9:fd:f9:62:06:8d:5e:ff: 13:38:97:ed:95:3a:04:6a:6c:28:ad:ee:9e:3b:07: 5e:62:c5:5d:6f:16:86:85:98:62:a7:9f:32:6e:35: 47:db:91:c3:c5:82:87:e1:28:16:f6:cc:c0:4f:73: 94:0c:9f:b0:77:88:42:cf:18:7c:ee:23:86:8a:b8: 50:4d:32:3d:61:5a:f4:01:cb:68:47:f0:b9:6e:a6: e7:6d:43:e8:96:fd:1c:33:81:3e:ff:57:56:3b:30: b9:49:66:70:3d:6e:6c:12:8c:4e:b9:7c:4b:b3:af: 82:a1:00:4f:20:c9:7a:83:e8:53:d7:f6:1f:6d:63: 07:88:1c:75:eb:fe:83:53:fc:26:91:d6:ee:a4:f7: 8c:42:5c:58:f7:a1:1e:f4:c7:ab:89:e7:94:f4:42: 51:9d:69:14:a6:33:d4:d6:3c:6d:c0:a6:5f:a3:c9: 53:73:5a:c8:c3:dc:50:78:c5:bc:ec:93:a0:b2:6e: 3b:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:31:59:1B:98:20:50:E2:1A:99:07:FD:64:60:0A:47:E1:53:E7:57 X509v3 Authority Key Identifier: keyid:21:E4:21:A6:D9:6E:99:D6:3F:7C:FB:49:9C:A7:11:7C:82:30:4E:AA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IeQhptlumdY_fPtJnKcRfIIwTqo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/1d4b2c-945d-4f39-b233-3e6b7025b65e/1/IeQhptlumdY_fPtJnKcRfIIwTqo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/77/1d4b2c-945d-4f39-b233-3e6b7025b65e/1/IeQhptlumdY_fPtJnKcRfIIwTqo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 26:f7:62:a6:67:14:b7:20:b0:74:65:6a:86:73:ad:06:68:aa: 25:f6:c0:84:c6:2e:5a:c1:e6:5d:4b:44:e9:a8:a9:98:62:4f: cc:26:f4:33:72:eb:11:fa:6a:8e:32:d8:26:d3:bc:d4:85:54: cc:5f:e9:5c:47:6d:5e:e5:bc:1f:bb:22:d5:87:ad:e7:9c:a5: d4:f8:45:0c:a4:58:0c:ba:d9:2f:bb:e5:18:15:47:8a:a1:45: 34:31:df:aa:ce:7d:0f:f7:9d:c5:a1:e6:1b:12:5f:62:24:4c: 22:e6:48:7e:1a:01:cf:de:e4:aa:a8:86:e2:20:5e:d1:c9:33: 14:b2:16:11:96:7b:e3:76:da:e0:4a:c0:25:28:d8:63:76:f6: 99:11:10:ed:a4:b8:48:fd:5a:23:30:22:15:33:ed:85:49:80: 73:33:23:9c:9f:1a:92:a8:82:3e:d2:39:11:16:84:5b:44:06: 73:20:b4:36:d8:25:0e:a1:ee:7d:c9:e7:81:31:93:88:0a:de: 48:8c:14:e0:de:5e:fb:c3:0b:b9:1f:8f:47:20:f3:36:45:7d: 3d:ce:16:85:0e:cd:b0:d5:1a:2a:5b:a6:1f:fb:a2:c9:26:6e: 78:9d:53:56:67:29:f3:f9:dc:ed:a1:3b:09:0c:22:1f:7b:c6: 4b:3a:29:da -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrwv2A8RKi/lcAKf/+tV/YrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIxZTQyMWE2ZDk2ZTk5ZDYzZjdjZmI0OTljYTcxMTdjODIz MDRlYWEwHhcNMjUxMjA1MjMwMTA1WhcNMjUxMjA2MjMwMTA1WjAzMTEwLwYDVQQD Eyg2ODMxNTkxYjk4MjA1MGUyMWE5OTA3ZmQ2NDYwMGE0N2UxNTNlNzU3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtll1B7alE51xbxCGArrwxHu+3e5Y 65DFnDWVnDEAo64QkUT4+bPx61x+RUa6dG6JSkFxjz1eOpj9EMLeKipmePIauf35 YgaNXv8TOJftlToEamwore6eOwdeYsVdbxaGhZhip58ybjVH25HDxYKH4SgW9szA T3OUDJ+wd4hCzxh87iOGirhQTTI9YVr0ActoR/C5bqbnbUPolv0cM4E+/1dWOzC5 SWZwPW5sEoxOuXxLs6+CoQBPIMl6g+hT1/YfbWMHiBx16/6DU/wmkdbupPeMQlxY 96Ee9MerieeU9EJRnWkUpjPU1jxtwKZfo8lTc1rIw9xQeMW87JOgsm47zQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGgxWRuYIFDiGpkH/WRgCkfhU+dXMB8GA1UdIwQY MBaAFCHkIabZbpnWP3z7SZynEXyCME6qMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSWVRaHB0bHVtZFlfZlB0Sm5LY1JmSUl3VHFvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ny8xZDRiMmMtOTQ1ZC00ZjM5LWIyMzMt M2U2YjcwMjViNjVlLzEvSWVRaHB0bHVtZFlfZlB0Sm5LY1JmSUl3VHFvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Ny8xZDRiMmMtOTQ1ZC00ZjM5LWIyMzMtM2U2YjcwMjViNjVl LzEvSWVRaHB0bHVtZFlfZlB0Sm5LY1JmSUl3VHFvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJvdipmcU tyCwdGVqhnOtBmiqJfbAhMYuWsHmXUtE6aipmGJPzCb0M3LrEfpqjjLYJtO81IVU zF/pXEdtXuW8H7si1Yet55yl1PhFDKRYDLrZL7vlGBVHiqFFNDHfqs59D/edxaHm GxJfYiRMIuZIfhoBz97kqqiG4iBe0ckzFLIWEZZ743ba4ErAJSjYY3b2mREQ7aS4 SP1aIzAiFTPthUmAczMjnJ8akqiCPtI5ERaEW0QGcyC0NtglDqHufcnngTGTiAre SIwU4N5e+8MLuR+PRyDzNkV9Pc4WhQ7NsNUaKlumH/uiySZueJ1TVmcp8/nc7aE7 CQwiH3vGSzop2g== -----END CERTIFICATE-----Generated at Sat Dec 6 08:07:31 2025 by rpki-client