This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/04ba26-f1b9-4285-b7fa-ee982a512f43/1/iVmuP0F3o83ZZo0MW4qJ-RhrW_w.mft File: iVmuP0F3o83ZZo0MW4qJ-RhrW_w.mft (raw, json) Hash identifier: zNPBD8cYCExz8AZ/Balfn15Q254rqaP8ACeR4J8pEBs= Subject key identifier: BF:B5:25:18:95:0E:91:DD:9E:06:6B:AE:92:4D:62:FA:01:59:D9:8E Authority key identifier: 89:59:AE:3F:41:77:A3:CD:D9:66:8D:0C:5B:8A:89:F9:18:6B:5B:FC Certificate issuer: /CN=8959ae3f4177a3cdd9668d0c5b8a89f9186b5bfc Certificate serial: 019AF61C329BA9B0BC19988DAECE005D134A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iVmuP0F3o83ZZo0MW4qJ-RhrW_w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/04ba26-f1b9-4285-b7fa-ee982a512f43/1/iVmuP0F3o83ZZo0MW4qJ-RhrW_w.mft Manifest number: 1762 Signing time: Sun 07 Dec 2025 00:00:33 +0000 Manifest this update: Sun 07 Dec 2025 00:00:33 +0000 Manifest next update: Mon 08 Dec 2025 00:00:33 +0000 Files and hashes: 1: iVmuP0F3o83ZZo0MW4qJ-RhrW_w.crl (hash: LdUB7Mi85Z0OtggK0hYCyJ27BnOmTlc0956lFqhRFlI=) 2: w8vjCf4MhWSno6arrBizV8hRGB0.roa (hash: u0VlJI61dIeh8T7++/kZccPzyKi9DwtmR02dU9ACLS8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/04ba26-f1b9-4285-b7fa-ee982a512f43/1/iVmuP0F3o83ZZo0MW4qJ-RhrW_w.crl rsync://rpki.ripe.net/repository/DEFAULT/84/04ba26-f1b9-4285-b7fa-ee982a512f43/1/iVmuP0F3o83ZZo0MW4qJ-RhrW_w.mft rsync://rpki.ripe.net/repository/DEFAULT/iVmuP0F3o83ZZo0MW4qJ-RhrW_w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 21:29:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f6:1c:32:9b:a9:b0:bc:19:98:8d:ae:ce:00:5d:13:4a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8959ae3f4177a3cdd9668d0c5b8a89f9186b5bfc Validity Not Before: Dec 7 00:00:33 2025 GMT Not After : Dec 8 00:00:33 2025 GMT Subject: CN=bfb52518950e91dd9e066bae924d62fa0159d98e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:74:0e:43:2d:ed:fe:1b:70:b6:ec:a3:d9:7a: fd:6f:71:9c:07:dd:42:a1:71:c2:41:cc:4c:12:aa: 2d:0c:69:7d:dc:fa:68:61:fb:35:02:83:af:fe:b6: 7f:4c:8e:70:a3:44:d5:f2:68:05:b1:c0:96:97:d6: 79:45:87:96:e4:84:68:54:68:3d:f4:2f:6a:03:c7: e1:bc:bf:41:3a:b6:46:02:fb:fb:75:49:81:ac:ed: 50:b6:26:f6:03:cb:8d:5a:c5:63:63:09:89:59:de: 57:eb:08:b1:6e:c4:9a:a1:4c:1b:04:62:0f:3b:74: 61:fc:22:3f:1b:48:8b:30:c9:7d:03:9f:99:33:44: 06:c3:71:32:51:de:da:91:dd:79:38:90:1f:3b:df: 55:14:5c:a0:8e:7a:d8:d2:da:db:28:af:27:3f:5d: e4:c8:2b:2d:64:87:18:93:14:c2:3d:d2:84:45:be: d6:5f:39:39:6d:61:f8:ed:a1:47:e8:2e:5c:a0:2e: 9c:b6:07:cd:65:b1:5d:fe:f5:17:5c:7c:52:9d:35: e7:39:f1:19:6a:b8:66:d2:25:36:08:75:8d:5b:d9: 35:de:91:b1:8e:25:f8:91:e1:a6:b0:69:9d:e9:5b: 19:b2:8c:a1:7b:dc:33:fe:1c:e4:e5:de:dc:f9:23: fc:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:B5:25:18:95:0E:91:DD:9E:06:6B:AE:92:4D:62:FA:01:59:D9:8E X509v3 Authority Key Identifier: keyid:89:59:AE:3F:41:77:A3:CD:D9:66:8D:0C:5B:8A:89:F9:18:6B:5B:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iVmuP0F3o83ZZo0MW4qJ-RhrW_w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/04ba26-f1b9-4285-b7fa-ee982a512f43/1/iVmuP0F3o83ZZo0MW4qJ-RhrW_w.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/84/04ba26-f1b9-4285-b7fa-ee982a512f43/1/iVmuP0F3o83ZZo0MW4qJ-RhrW_w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 69:41:d6:80:da:c6:9e:19:18:19:f0:50:39:6f:a0:11:5f:57: 3f:b2:50:86:fb:85:ba:94:5c:f6:17:a4:9f:d7:a0:51:37:fc: 71:eb:d3:69:1c:ae:e0:25:b3:15:16:b9:80:2b:b4:3d:03:b7: 86:61:ee:34:ba:30:15:65:b7:ee:ec:f0:9a:6f:34:f6:fa:5d: a7:37:24:90:49:5a:2b:69:4a:79:89:ff:1a:f7:08:c9:52:44: a3:e3:d4:1b:71:e2:a4:63:ba:fa:da:4e:5e:ad:85:ac:93:8b: c0:48:ef:ea:27:63:ee:f9:59:f7:12:91:0a:8e:44:b0:71:47: fb:c1:9c:91:29:2c:f8:7b:3d:4b:67:87:e2:ca:34:d2:16:aa: cf:8d:14:a6:aa:42:64:81:34:ac:7a:c3:8b:c9:cd:e2:12:29: 49:b9:06:61:e2:ac:7c:c2:ca:06:77:ac:0d:cb:87:0a:72:dd: b0:51:a9:57:66:77:42:0f:74:b4:28:c6:fd:4e:39:05:39:a2: 22:99:ba:84:12:68:4a:b6:7e:b9:5b:75:a4:84:b7:c4:35:63: f3:c7:51:20:f2:eb:18:cb:c0:df:30:dd:66:f4:4e:67:14:63: b2:56:3f:f7:c3:f0:19:83:a3:a0:5d:38:3d:40:8f:f4:6f:45: 35:01:de:e9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr2HDKbqbC8GZiNrs4AXRNKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg5NTlhZTNmNDE3N2EzY2RkOTY2OGQwYzViOGE4OWY5MTg2 YjViZmMwHhcNMjUxMjA3MDAwMDMzWhcNMjUxMjA4MDAwMDMzWjAzMTEwLwYDVQQD EyhiZmI1MjUxODk1MGU5MWRkOWUwNjZiYWU5MjRkNjJmYTAxNTlkOThlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA03QOQy3t/htwtuyj2Xr9b3GcB91C oXHCQcxMEqotDGl93PpoYfs1AoOv/rZ/TI5wo0TV8mgFscCWl9Z5RYeW5IRoVGg9 9C9qA8fhvL9BOrZGAvv7dUmBrO1Qtib2A8uNWsVjYwmJWd5X6wixbsSaoUwbBGIP O3Rh/CI/G0iLMMl9A5+ZM0QGw3EyUd7akd15OJAfO99VFFygjnrY0trbKK8nP13k yCstZIcYkxTCPdKERb7WXzk5bWH47aFH6C5coC6ctgfNZbFd/vUXXHxSnTXnOfEZ arhm0iU2CHWNW9k13pGxjiX4keGmsGmd6VsZsoyhe9wz/hzk5d7c+SP8rQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFL+1JRiVDpHdngZrrpJNYvoBWdmOMB8GA1UdIwQY MBaAFIlZrj9Bd6PN2WaNDFuKifkYa1v8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaVZtdVAwRjNvODNaWm8wTVc0cUotUmhyV193LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NC8wNGJhMjYtZjFiOS00Mjg1LWI3ZmEt ZWU5ODJhNTEyZjQzLzEvaVZtdVAwRjNvODNaWm8wTVc0cUotUmhyV193Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84NC8wNGJhMjYtZjFiOS00Mjg1LWI3ZmEtZWU5ODJhNTEyZjQz LzEvaVZtdVAwRjNvODNaWm8wTVc0cUotUmhyV193LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaUHWgNrG nhkYGfBQOW+gEV9XP7JQhvuFupRc9hekn9egUTf8cevTaRyu4CWzFRa5gCu0PQO3 hmHuNLowFWW37uzwmm809vpdpzckkElaK2lKeYn/GvcIyVJEo+PUG3HipGO6+tpO Xq2FrJOLwEjv6idj7vlZ9xKRCo5EsHFH+8GckSks+Hs9S2eH4so00haqz40UpqpC ZIE0rHrDi8nN4hIpSbkGYeKsfMLKBnesDcuHCnLdsFGpV2Z3Qg90tCjG/U45BTmi Ipm6hBJoSrZ+uVt1pIS3xDVj88dRIPLrGMvA3zDdZvROZxRjslY/98PwGYOjoF04 PUCP9G9FNQHe6Q== -----END CERTIFICATE-----Generated at Sun Dec 7 01:32:53 2025 by rpki-client