This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/406991-5be3-4a05-acb2-1ad47ccd2d9a/1/ieIaK4oluXG9t0GgquMlmSMEGU4.mft File: ieIaK4oluXG9t0GgquMlmSMEGU4.mft (raw, json) Hash identifier: Y0L9I123h9uhZKCBvZZyvZv72L8k7f09kBBWP9vbiYg= Subject key identifier: 64:16:A6:F5:6E:E3:F1:0A:79:BF:70:0B:67:E7:11:56:7C:10:06:03 Authority key identifier: 89:E2:1A:2B:8A:25:B9:71:BD:B7:41:A0:AA:E3:25:99:23:04:19:4E Certificate issuer: /CN=89e21a2b8a25b971bdb741a0aae325992304194e Certificate serial: 019AF38A1CFC027BC08408D4FA7FB774588C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ieIaK4oluXG9t0GgquMlmSMEGU4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/406991-5be3-4a05-acb2-1ad47ccd2d9a/1/ieIaK4oluXG9t0GgquMlmSMEGU4.mft Manifest number: 1772 Signing time: Sat 06 Dec 2025 12:01:45 +0000 Manifest this update: Sat 06 Dec 2025 12:01:45 +0000 Manifest next update: Sun 07 Dec 2025 12:01:45 +0000 Files and hashes: 1: 1jV2xqilASPXHu5Grr3x0X0ICp8.roa (hash: 8Jrll8bHg095WBKUtpaKs7HT5xMgUtd6Q0GjYhqobro=) 2: JHsea8ldAse1CeGI2SumLCiOnDc.roa (hash: VKEuoq4G9HXNJupJnEjoPZw8yd6ADu3vGNugbT7oOUM=) 3: R-7dmcw3c20-6mUEaV6t8HKtYR8.roa (hash: 0JAMHSeaJgJlarzLGa/qydN1dZySJoZZ59FCJPt3tQ0=) 4: ieIaK4oluXG9t0GgquMlmSMEGU4.crl (hash: r/Jkf1ZbeNhQMwH8aV9HSvOU0OVF8x/igT3TXG9v150=) 5: zV9LNmGcv52EaJiYnvcEchkoyS4.roa (hash: 7+tk5OKGsDgPRtMzzmdAb84WHEzjIJ3n9hyI8CnIig8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/406991-5be3-4a05-acb2-1ad47ccd2d9a/1/ieIaK4oluXG9t0GgquMlmSMEGU4.crl rsync://rpki.ripe.net/repository/DEFAULT/7f/406991-5be3-4a05-acb2-1ad47ccd2d9a/1/ieIaK4oluXG9t0GgquMlmSMEGU4.mft rsync://rpki.ripe.net/repository/DEFAULT/ieIaK4oluXG9t0GgquMlmSMEGU4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:8a:1c:fc:02:7b:c0:84:08:d4:fa:7f:b7:74:58:8c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89e21a2b8a25b971bdb741a0aae325992304194e Validity Not Before: Dec 6 12:01:45 2025 GMT Not After : Dec 7 12:01:45 2025 GMT Subject: CN=6416a6f56ee3f10a79bf700b67e711567c100603 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:3b:a5:58:02:20:c9:98:de:10:79:4b:8e:a6: 6f:60:52:9a:e2:47:e7:74:49:c1:10:f4:e9:75:12: 84:27:f4:ce:92:69:1a:ad:c6:eb:dc:6b:15:9e:5e: 30:13:7b:ae:03:81:86:a0:58:72:7e:cd:88:9e:6c: 45:21:ca:10:c7:31:6b:b9:4e:55:cc:13:6c:27:4d: fe:de:b2:04:2c:53:da:9b:d9:41:27:36:2e:1e:d9: e0:81:51:3d:c4:e2:5a:16:d5:3e:0b:19:b5:ae:23: f4:0a:31:1a:77:5a:cf:6f:ac:e0:7a:e0:f8:ec:d8: f8:f0:5d:da:0b:fd:0b:24:8e:14:4e:8c:92:08:9a: d6:ea:65:10:cb:31:27:6d:be:19:4c:c0:f6:94:cc: 4a:b8:cc:30:65:e8:8d:f6:1c:a3:62:fa:e3:e8:79: fb:d9:9f:cb:fa:f3:ec:b5:7d:d0:12:25:54:15:44: 3e:ea:e4:29:c8:c0:0f:24:27:c1:13:22:23:01:81: de:e5:7f:f8:c4:94:b1:30:e4:28:6e:65:c4:b5:e1: da:52:76:31:85:f8:ad:6a:26:14:2b:a5:f1:78:18: 14:63:f6:6a:30:99:d0:c7:f9:d4:19:4b:9a:98:b6: 67:33:75:15:82:3b:ed:b7:ec:d1:7e:31:35:cd:e2: 1e:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:16:A6:F5:6E:E3:F1:0A:79:BF:70:0B:67:E7:11:56:7C:10:06:03 X509v3 Authority Key Identifier: keyid:89:E2:1A:2B:8A:25:B9:71:BD:B7:41:A0:AA:E3:25:99:23:04:19:4E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ieIaK4oluXG9t0GgquMlmSMEGU4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/406991-5be3-4a05-acb2-1ad47ccd2d9a/1/ieIaK4oluXG9t0GgquMlmSMEGU4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/406991-5be3-4a05-acb2-1ad47ccd2d9a/1/ieIaK4oluXG9t0GgquMlmSMEGU4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 95:63:53:e6:72:39:31:0e:ff:90:b0:7e:0f:ba:3b:5a:d5:9e: 9b:9f:a1:cb:c7:57:82:44:73:c4:9c:1e:d7:7b:c5:a7:69:91: f3:3e:f7:b1:bf:7b:4f:38:e9:89:70:9d:f5:b0:c6:a6:48:3b: 66:c3:80:12:b1:04:6a:ff:53:71:87:5d:27:d4:60:a8:bb:c4: 9e:32:21:01:19:44:94:df:95:99:f8:e3:d8:1b:f7:c2:07:b5: 91:2d:e9:bc:a5:83:24:81:72:01:58:e8:06:5a:e5:a5:0d:81: b6:c7:79:ea:2d:40:25:87:65:8c:3f:3c:8b:50:d8:c5:79:48: 4c:2f:c4:ec:c9:e2:f9:82:a4:71:55:73:01:4d:07:30:5a:b3: 34:4d:ff:c4:50:02:fb:a6:c1:93:24:f4:69:41:1e:25:10:c8: f2:ca:53:59:3f:fd:ae:78:c5:c1:4d:42:2d:5a:0b:c1:ba:09: a5:ff:c2:e1:41:10:65:f3:ba:9c:d4:30:a4:26:5f:62:3b:a1: 20:18:09:f1:2a:96:e0:9c:d8:27:38:ad:d6:37:ea:88:ec:e2: 16:0c:5f:16:88:9a:af:f9:ae:5a:94:fa:2b:02:a3:24:90:d3: c8:68:98:1e:1e:7f:b4:0e:94:d3:f2:49:f3:a5:5c:27:75:78: 58:4b:73:df -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzihz8AnvAhAjU+n+3dFiMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg5ZTIxYTJiOGEyNWI5NzFiZGI3NDFhMGFhZTMyNTk5MjMw NDE5NGUwHhcNMjUxMjA2MTIwMTQ1WhcNMjUxMjA3MTIwMTQ1WjAzMTEwLwYDVQQD Eyg2NDE2YTZmNTZlZTNmMTBhNzliZjcwMGI2N2U3MTE1NjdjMTAwNjAzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkDulWAIgyZjeEHlLjqZvYFKa4kfn dEnBEPTpdRKEJ/TOkmkarcbr3GsVnl4wE3uuA4GGoFhyfs2InmxFIcoQxzFruU5V zBNsJ03+3rIELFPam9lBJzYuHtnggVE9xOJaFtU+Cxm1riP0CjEad1rPb6zgeuD4 7Nj48F3aC/0LJI4UToySCJrW6mUQyzEnbb4ZTMD2lMxKuMwwZeiN9hyjYvrj6Hn7 2Z/L+vPstX3QEiVUFUQ+6uQpyMAPJCfBEyIjAYHe5X/4xJSxMOQobmXEteHaUnYx hfitaiYUK6XxeBgUY/ZqMJnQx/nUGUuamLZnM3UVgjvtt+zRfjE1zeIekQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGQWpvVu4/EKeb9wC2fnEVZ8EAYDMB8GA1UdIwQY MBaAFIniGiuKJblxvbdBoKrjJZkjBBlOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaWVJYUs0b2x1WEc5dDBHZ3F1TWxtU01FR1U0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Zi80MDY5OTEtNWJlMy00YTA1LWFjYjIt MWFkNDdjY2QyZDlhLzEvaWVJYUs0b2x1WEc5dDBHZ3F1TWxtU01FR1U0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Zi80MDY5OTEtNWJlMy00YTA1LWFjYjItMWFkNDdjY2QyZDlh LzEvaWVJYUs0b2x1WEc5dDBHZ3F1TWxtU01FR1U0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlWNT5nI5 MQ7/kLB+D7o7WtWem5+hy8dXgkRzxJwe13vFp2mR8z73sb97TzjpiXCd9bDGpkg7 ZsOAErEEav9TcYddJ9RgqLvEnjIhARlElN+Vmfjj2Bv3wge1kS3pvKWDJIFyAVjo BlrlpQ2Btsd56i1AJYdljD88i1DYxXlITC/E7Mni+YKkcVVzAU0HMFqzNE3/xFAC +6bBkyT0aUEeJRDI8spTWT/9rnjFwU1CLVoLwboJpf/C4UEQZfO6nNQwpCZfYjuh IBgJ8SqW4JzYJzit1jfqiOziFgxfFoiar/muWpT6KwKjJJDTyGiYHh5/tA6U0/JJ 86VcJ3V4WEtz3w== -----END CERTIFICATE-----Generated at Sat Dec 6 14:44:54 2025 by rpki-client