This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/eef035-2629-4e3e-bebc-15a0dddd749c/1/iKYs-BAOjBtHVEP9lM1Y2O8qM64.mft File: iKYs-BAOjBtHVEP9lM1Y2O8qM64.mft (raw, json) Hash identifier: zQ3H00c4ehaUZx0E1wrhRcDYKiH63GMCeXeOVWx9D+8= Subject key identifier: 9B:BE:89:49:97:8F:D9:29:AD:2E:66:17:97:BB:4C:3B:FD:A3:FC:7C Authority key identifier: 88:A6:2C:F8:10:0E:8C:1B:47:54:43:FD:94:CD:58:D8:EF:2A:33:AE Certificate issuer: /CN=88a62cf8100e8c1b475443fd94cd58d8ef2a33ae Certificate serial: 019AF12E8C96611A79D0CE1F1FD17A5A591A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iKYs-BAOjBtHVEP9lM1Y2O8qM64.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/eef035-2629-4e3e-bebc-15a0dddd749c/1/iKYs-BAOjBtHVEP9lM1Y2O8qM64.mft Manifest number: 1760 Signing time: Sat 06 Dec 2025 01:02:30 +0000 Manifest this update: Sat 06 Dec 2025 01:02:30 +0000 Manifest next update: Sun 07 Dec 2025 01:02:30 +0000 Files and hashes: 1: iKYs-BAOjBtHVEP9lM1Y2O8qM64.crl (hash: naJwDdbC8Nno234oS0uzBCRhv/u7uIww5QXocjRagvI=) 2: qvYpsZQGhS3eiJYFcpoDInx2DkE.roa (hash: AzKXVpJ7rQhInqcKxYMIE20bjXuo9eJ0x8CLUXTV+A0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/eef035-2629-4e3e-bebc-15a0dddd749c/1/iKYs-BAOjBtHVEP9lM1Y2O8qM64.crl rsync://rpki.ripe.net/repository/DEFAULT/7c/eef035-2629-4e3e-bebc-15a0dddd749c/1/iKYs-BAOjBtHVEP9lM1Y2O8qM64.mft rsync://rpki.ripe.net/repository/DEFAULT/iKYs-BAOjBtHVEP9lM1Y2O8qM64.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:02:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2e:8c:96:61:1a:79:d0:ce:1f:1f:d1:7a:5a:59:1a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=88a62cf8100e8c1b475443fd94cd58d8ef2a33ae Validity Not Before: Dec 6 01:02:30 2025 GMT Not After : Dec 7 01:02:30 2025 GMT Subject: CN=9bbe8949978fd929ad2e661797bb4c3bfda3fc7c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:d4:81:cd:63:c3:7a:39:fd:85:24:7b:cb:73: c9:22:7f:b5:e8:f7:bf:24:fe:d7:34:29:89:2f:b5: 39:6d:7d:a1:d1:da:9d:75:02:13:fc:5f:31:ad:ba: ff:d9:e3:16:f8:0a:a3:f4:ae:c9:35:86:8d:72:cb: 7b:80:b7:02:20:37:96:b6:c9:6c:47:4c:8c:ba:f5: 2a:7c:d7:8f:e4:ed:43:fc:63:f2:18:2c:79:0b:eb: 13:ea:53:b9:d2:1d:6c:48:30:9b:84:fd:27:8e:d7: 68:f4:63:d2:a7:74:f8:a7:ef:22:5e:d9:d1:f7:50: c0:60:0e:ff:96:71:ef:a8:ce:83:7c:86:a3:ba:f8: 5f:47:a7:f8:03:89:45:51:fa:d9:df:53:60:71:4e: 06:e1:5d:4c:ae:ff:23:50:3e:c5:ed:eb:b4:fd:27: 96:2a:b3:3a:92:7c:2a:37:05:31:85:fd:63:77:5c: 12:1a:7f:75:af:1c:88:a7:13:08:98:1a:92:25:57: 33:26:19:b6:e3:97:da:57:e0:c9:62:6f:eb:6f:2a: 5b:cb:dc:42:62:07:b1:a2:8d:65:f6:fe:5b:71:5f: 98:0e:04:ea:fd:a1:93:a3:8b:39:d5:79:3b:ef:d2: 41:bf:6d:49:9b:63:ed:26:46:23:e8:68:ea:86:46: 31:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:BE:89:49:97:8F:D9:29:AD:2E:66:17:97:BB:4C:3B:FD:A3:FC:7C X509v3 Authority Key Identifier: keyid:88:A6:2C:F8:10:0E:8C:1B:47:54:43:FD:94:CD:58:D8:EF:2A:33:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iKYs-BAOjBtHVEP9lM1Y2O8qM64.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/eef035-2629-4e3e-bebc-15a0dddd749c/1/iKYs-BAOjBtHVEP9lM1Y2O8qM64.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/eef035-2629-4e3e-bebc-15a0dddd749c/1/iKYs-BAOjBtHVEP9lM1Y2O8qM64.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 35:5e:02:43:19:65:6a:00:bf:9b:61:00:c1:99:b2:dc:dc:65: c9:ff:23:38:f3:a2:47:f8:47:bf:75:05:d9:92:ad:5b:e2:89: a1:d6:08:39:0a:1e:1b:56:d2:93:20:2a:67:af:24:9d:f7:5d: 68:b5:83:71:14:83:30:33:0d:89:7c:6e:4e:38:65:d0:c4:f4: e5:1c:f7:d8:f8:47:5c:33:8c:fd:8d:00:ea:ea:67:68:e1:db: 47:d0:04:a9:c3:60:ed:fc:ee:9b:a8:b1:6d:5d:0d:5c:70:32: 21:95:14:de:b2:98:40:f4:76:90:b7:9b:36:3a:8e:7d:9d:6c: 33:3f:e4:46:3f:67:d3:71:8b:da:c1:5d:d7:d4:aa:83:90:f5: 64:bd:71:16:31:34:92:01:2c:bc:93:74:65:77:fe:52:b7:e6: 6d:a8:f8:46:89:3d:e2:5e:c6:52:8c:b0:c2:9b:02:01:2e:6e: 2f:a7:e2:f9:c6:fb:9c:1a:4e:58:b8:94:ed:8a:bf:28:44:12: 2e:59:15:83:6b:74:ac:06:36:60:b0:90:1d:ba:8e:0e:6c:4f: a2:a2:ea:25:61:24:f2:20:b0:ae:a4:5a:cc:da:0e:cb:a0:ae: ae:33:22:93:66:74:41:a8:e7:8e:e4:9b:70:9e:84:2f:24:16: cd:4f:0f:d2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLoyWYRp50M4fH9F6WlkaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg4YTYyY2Y4MTAwZThjMWI0NzU0NDNmZDk0Y2Q1OGQ4ZWYy YTMzYWUwHhcNMjUxMjA2MDEwMjMwWhcNMjUxMjA3MDEwMjMwWjAzMTEwLwYDVQQD Eyg5YmJlODk0OTk3OGZkOTI5YWQyZTY2MTc5N2JiNGMzYmZkYTNmYzdjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4tSBzWPDejn9hSR7y3PJIn+16Pe/ JP7XNCmJL7U5bX2h0dqddQIT/F8xrbr/2eMW+Aqj9K7JNYaNcst7gLcCIDeWtsls R0yMuvUqfNeP5O1D/GPyGCx5C+sT6lO50h1sSDCbhP0njtdo9GPSp3T4p+8iXtnR 91DAYA7/lnHvqM6DfIajuvhfR6f4A4lFUfrZ31NgcU4G4V1Mrv8jUD7F7eu0/SeW KrM6knwqNwUxhf1jd1wSGn91rxyIpxMImBqSJVczJhm245faV+DJYm/rbypby9xC Ygexoo1l9v5bcV+YDgTq/aGTo4s51Xk779JBv21Jm2PtJkYj6GjqhkYxowIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJu+iUmXj9kprS5mF5e7TDv9o/x8MB8GA1UdIwQY MBaAFIimLPgQDowbR1RD/ZTNWNjvKjOuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaUtZcy1CQU9qQnRIVkVQOWxNMVkyTzhxTTY0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yy9lZWYwMzUtMjYyOS00ZTNlLWJlYmMt MTVhMGRkZGQ3NDljLzEvaUtZcy1CQU9qQnRIVkVQOWxNMVkyTzhxTTY0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Yy9lZWYwMzUtMjYyOS00ZTNlLWJlYmMtMTVhMGRkZGQ3NDlj LzEvaUtZcy1CQU9qQnRIVkVQOWxNMVkyTzhxTTY0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANV4CQxll agC/m2EAwZmy3Nxlyf8jOPOiR/hHv3UF2ZKtW+KJodYIOQoeG1bSkyAqZ68knfdd aLWDcRSDMDMNiXxuTjhl0MT05Rz32PhHXDOM/Y0A6upnaOHbR9AEqcNg7fzum6ix bV0NXHAyIZUU3rKYQPR2kLebNjqOfZ1sMz/kRj9n03GL2sFd19Sqg5D1ZL1xFjE0 kgEsvJN0ZXf+Urfmbaj4Rok94l7GUoywwpsCAS5uL6fi+cb7nBpOWLiU7Yq/KEQS LlkVg2t0rAY2YLCQHbqODmxPoqLqJWEk8iCwrqRazNoOy6CurjMik2Z0QajnjuSb cJ6ELyQWzU8P0g== -----END CERTIFICATE-----Generated at Sat Dec 6 11:23:29 2025 by rpki-client