This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/e60a31-1d76-4d9f-800a-21348484ff1b/1/iaQ4np9NXMjEhtaCK-8fRO987UI.mft File: iaQ4np9NXMjEhtaCK-8fRO987UI.mft (raw, json) Hash identifier: oAYGIkTpmNIaiiG9zxd0Qnd+yFL6AFVCzkWNFjgDZcc= Subject key identifier: C2:2E:4A:2D:5A:D2:7C:C6:6A:70:90:02:97:35:03:51:2E:F9:18:4A Authority key identifier: 89:A4:38:9E:9F:4D:5C:C8:C4:86:D6:82:2B:EF:1F:44:EF:7C:ED:42 Certificate issuer: /CN=89a4389e9f4d5cc8c486d6822bef1f44ef7ced42 Certificate serial: 019AF19AFF7F3ED864DB1E994CDB7E55BDEA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iaQ4np9NXMjEhtaCK-8fRO987UI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/e60a31-1d76-4d9f-800a-21348484ff1b/1/iaQ4np9NXMjEhtaCK-8fRO987UI.mft Manifest number: 026F Signing time: Sat 06 Dec 2025 03:00:58 +0000 Manifest this update: Sat 06 Dec 2025 03:00:58 +0000 Manifest next update: Sun 07 Dec 2025 03:00:58 +0000 Files and hashes: 1: 8ZpplWrhbVda_aSYHx2pbbAdBWI.roa (hash: KC0Osg8WEd8lVzUhmWMq6YDl/x9/ZL2h5Pd6qvq9PbE=) 2: iaQ4np9NXMjEhtaCK-8fRO987UI.crl (hash: jySolMKhyaDTQwX666xr+jFLbnEtmqyl/JBrvP/FKnE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/e60a31-1d76-4d9f-800a-21348484ff1b/1/iaQ4np9NXMjEhtaCK-8fRO987UI.crl rsync://rpki.ripe.net/repository/DEFAULT/82/e60a31-1d76-4d9f-800a-21348484ff1b/1/iaQ4np9NXMjEhtaCK-8fRO987UI.mft rsync://rpki.ripe.net/repository/DEFAULT/iaQ4np9NXMjEhtaCK-8fRO987UI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 03:00:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9a:ff:7f:3e:d8:64:db:1e:99:4c:db:7e:55:bd:ea Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89a4389e9f4d5cc8c486d6822bef1f44ef7ced42 Validity Not Before: Dec 6 03:00:58 2025 GMT Not After : Dec 7 03:00:58 2025 GMT Subject: CN=c22e4a2d5ad27cc66a709002973503512ef9184a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:ac:c5:c2:cf:a5:3b:1b:b9:4f:0c:50:01:ce: f0:15:40:dc:c4:b7:5a:63:58:df:43:ce:66:62:41: 9f:e0:74:2f:3c:0d:6f:39:5a:5c:eb:2e:cf:a7:54: ce:e8:95:3b:21:00:65:16:3a:26:b6:3a:85:b0:67: f0:93:db:88:70:36:ae:92:c7:c9:da:8d:3a:a0:21: cf:ab:1c:1b:94:32:33:18:e9:18:4b:df:f4:ce:62: 12:df:cd:b0:2c:0f:13:ea:a0:e3:3f:62:b3:68:a4: b4:15:3e:a5:b1:72:7e:d7:4e:2c:c4:3e:3c:7e:93: 7b:4b:4c:60:12:f0:68:75:ae:27:52:58:1e:08:6f: b3:f3:02:0c:bf:31:9f:d1:b6:01:5a:c0:c6:67:16: e0:66:8e:c1:91:d4:38:66:36:49:96:93:a7:2b:ca: 42:8a:f8:f4:59:f4:ee:7b:f4:4b:e2:d3:df:99:a3: cc:39:9d:64:76:5d:16:d0:c4:65:f0:83:fe:60:32: a3:1c:85:3a:76:60:43:fe:08:85:b8:ff:8a:db:94: 97:18:41:cd:41:e1:df:f8:40:9b:2b:5a:ae:b5:af: 29:8a:2b:23:d2:ae:66:e3:3e:15:10:2a:f8:9c:be: b8:20:27:23:bf:72:4b:bb:15:5e:b9:33:33:89:38: 54:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:2E:4A:2D:5A:D2:7C:C6:6A:70:90:02:97:35:03:51:2E:F9:18:4A X509v3 Authority Key Identifier: keyid:89:A4:38:9E:9F:4D:5C:C8:C4:86:D6:82:2B:EF:1F:44:EF:7C:ED:42 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iaQ4np9NXMjEhtaCK-8fRO987UI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/e60a31-1d76-4d9f-800a-21348484ff1b/1/iaQ4np9NXMjEhtaCK-8fRO987UI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/82/e60a31-1d76-4d9f-800a-21348484ff1b/1/iaQ4np9NXMjEhtaCK-8fRO987UI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 95:76:8d:18:0a:ba:1e:b2:fa:18:de:26:31:05:c6:a0:7c:2a: d0:c1:fb:b8:2e:8b:dc:00:23:56:a9:57:52:4f:c4:44:09:9a: c8:5b:da:52:d8:e9:22:37:61:38:24:19:dd:a7:3b:ce:06:9f: a5:5f:2a:c4:ec:a2:c0:1a:0e:e5:f9:eb:75:bb:9a:d5:91:d7: 3c:79:dd:8c:46:32:bc:06:f9:b1:67:43:1e:3c:9e:b6:f1:15: b9:35:9e:10:cd:ab:ed:1b:aa:3f:ab:7d:08:ae:18:3d:b1:35: e0:e5:31:34:a0:a7:8f:22:46:c4:32:27:44:8e:f3:07:73:bd: 88:49:8c:cb:39:c0:c0:28:ce:d3:78:53:5e:30:df:16:b9:e6: 3d:77:51:82:7b:a0:2b:f9:7e:0f:10:43:8e:06:a7:7c:82:50: cf:0f:f8:15:38:90:4e:9f:e4:75:9f:c6:b4:35:bd:00:5e:62: fb:3b:26:7b:87:4e:2c:62:f9:49:62:3d:46:20:6a:89:ec:71: 27:9d:df:3f:1e:69:29:da:1a:1e:a4:61:c1:7d:39:ef:d1:36: d2:9e:e2:63:b4:0e:bd:72:c3:72:32:82:ae:4c:cf:f1:b6:0d: 1e:51:49:23:19:fc:0f:e5:fc:83:c4:65:fa:87:01:5f:24:16: 93:5b:1e:ce -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxmv9/Pthk2x6ZTNt+Vb3qMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg5YTQzODllOWY0ZDVjYzhjNDg2ZDY4MjJiZWYxZjQ0ZWY3 Y2VkNDIwHhcNMjUxMjA2MDMwMDU4WhcNMjUxMjA3MDMwMDU4WjAzMTEwLwYDVQQD EyhjMjJlNGEyZDVhZDI3Y2M2NmE3MDkwMDI5NzM1MDM1MTJlZjkxODRhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsqzFws+lOxu5TwxQAc7wFUDcxLda Y1jfQ85mYkGf4HQvPA1vOVpc6y7Pp1TO6JU7IQBlFjomtjqFsGfwk9uIcDauksfJ 2o06oCHPqxwblDIzGOkYS9/0zmIS382wLA8T6qDjP2KzaKS0FT6lsXJ+104sxD48 fpN7S0xgEvBoda4nUlgeCG+z8wIMvzGf0bYBWsDGZxbgZo7BkdQ4ZjZJlpOnK8pC ivj0WfTue/RL4tPfmaPMOZ1kdl0W0MRl8IP+YDKjHIU6dmBD/giFuP+K25SXGEHN QeHf+ECbK1quta8piisj0q5m4z4VECr4nL64ICcjv3JLuxVeuTMziThUkwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMIuSi1a0nzGanCQApc1A1Eu+RhKMB8GA1UdIwQY MBaAFImkOJ6fTVzIxIbWgivvH0TvfO1CMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaWFRNG5wOU5YTWpFaHRhQ0stOGZSTzk4N1VJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Mi9lNjBhMzEtMWQ3Ni00ZDlmLTgwMGEt MjEzNDg0ODRmZjFiLzEvaWFRNG5wOU5YTWpFaHRhQ0stOGZSTzk4N1VJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Mi9lNjBhMzEtMWQ3Ni00ZDlmLTgwMGEtMjEzNDg0ODRmZjFi LzEvaWFRNG5wOU5YTWpFaHRhQ0stOGZSTzk4N1VJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlXaNGAq6 HrL6GN4mMQXGoHwq0MH7uC6L3AAjVqlXUk/ERAmayFvaUtjpIjdhOCQZ3ac7zgaf pV8qxOyiwBoO5fnrdbua1ZHXPHndjEYyvAb5sWdDHjyetvEVuTWeEM2r7RuqP6t9 CK4YPbE14OUxNKCnjyJGxDInRI7zB3O9iEmMyznAwCjO03hTXjDfFrnmPXdRgnug K/l+DxBDjganfIJQzw/4FTiQTp/kdZ/GtDW9AF5i+zsme4dOLGL5SWI9RiBqiexx J53fPx5pKdoaHqRhwX0579E20p7iY7QOvXLDcjKCrkzP8bYNHlFJIxn8D+X8g8Rl +ocBXyQWk1sezg== -----END CERTIFICATE-----Generated at Sat Dec 6 13:38:32 2025 by rpki-client