This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/70e678-8495-46ae-96d7-29c5176902c6/1/iuS5P-tx3eKCO3DH27eeD5m1bBs.mft File: iuS5P-tx3eKCO3DH27eeD5m1bBs.mft (raw, json) Hash identifier: flAO4qMhq7ctvMZN6UE+eOWVqJ4Os+hxypAQKiu6uo4= Subject key identifier: 18:63:B5:A5:99:D7:1D:3F:87:41:A4:0A:76:F0:8E:BE:82:F0:BD:08 Authority key identifier: 8A:E4:B9:3F:EB:71:DD:E2:82:3B:70:C7:DB:B7:9E:0F:99:B5:6C:1B Certificate issuer: /CN=8ae4b93feb71dde2823b70c7dbb79e0f99b56c1b Certificate serial: 019AF3C0D302DF7451E868A5457452DB8B85 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iuS5P-tx3eKCO3DH27eeD5m1bBs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/70e678-8495-46ae-96d7-29c5176902c6/1/iuS5P-tx3eKCO3DH27eeD5m1bBs.mft Manifest number: 0A7A Signing time: Sat 06 Dec 2025 13:01:31 +0000 Manifest this update: Sat 06 Dec 2025 13:01:31 +0000 Manifest next update: Sun 07 Dec 2025 13:01:31 +0000 Files and hashes: 1: J2gFJxTXec_tCl5fYmT5ueu90dA.roa (hash: eqh0jr48WZnOgc9VcsakSv2fxPv1f923UQBSwi0u554=) 2: iuS5P-tx3eKCO3DH27eeD5m1bBs.crl (hash: 3ZkpO5Tx//0knzlLvsXdXAiE0GWetQCZF/e5my4gOmI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/70e678-8495-46ae-96d7-29c5176902c6/1/iuS5P-tx3eKCO3DH27eeD5m1bBs.crl rsync://rpki.ripe.net/repository/DEFAULT/84/70e678-8495-46ae-96d7-29c5176902c6/1/iuS5P-tx3eKCO3DH27eeD5m1bBs.mft rsync://rpki.ripe.net/repository/DEFAULT/iuS5P-tx3eKCO3DH27eeD5m1bBs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:01:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:c0:d3:02:df:74:51:e8:68:a5:45:74:52:db:8b:85 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8ae4b93feb71dde2823b70c7dbb79e0f99b56c1b Validity Not Before: Dec 6 13:01:31 2025 GMT Not After : Dec 7 13:01:31 2025 GMT Subject: CN=1863b5a599d71d3f8741a40a76f08ebe82f0bd08 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:1c:8a:2b:14:a0:8c:12:23:bf:c4:00:c2:ca: 86:06:e7:08:8b:89:bf:e3:c2:d2:46:7c:7d:72:28: 6e:d1:72:6f:39:00:02:a3:25:bc:a5:a7:6c:ec:c0: 39:ba:67:4e:0e:25:bf:41:df:cb:f9:5e:3f:e2:59: 4e:7c:4a:b9:b7:c4:56:0d:54:89:04:50:57:ed:70: eb:8e:12:8a:a4:0a:63:8f:57:58:e7:96:52:f0:2c: c7:64:71:2e:6b:8d:09:48:c3:21:a0:ae:87:66:c1: 6d:66:4d:85:a0:5b:8d:f6:8c:7a:99:d2:c8:01:7d: f8:01:ba:33:13:51:ea:7a:43:78:2a:e6:a7:51:d2: d8:ef:7b:65:56:d4:8f:72:ce:0a:5a:17:e8:3a:1e: df:23:42:d8:81:6d:c5:f1:b8:61:9d:9e:e2:83:32: a3:2d:a1:93:e6:18:61:65:15:bb:97:f4:2d:dd:7d: d1:1d:60:f5:eb:ce:e7:e7:a3:b2:a6:a4:a6:24:15: 29:38:e3:32:22:b9:2f:09:82:84:98:cf:5c:db:a8: e6:db:f5:b6:76:59:88:87:94:7e:5b:33:82:20:22: d2:d5:ff:30:f5:bd:05:ef:f5:74:d8:02:31:1b:c0: ec:02:48:dd:7b:d7:91:f2:d6:77:b3:a2:30:51:58: ea:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:63:B5:A5:99:D7:1D:3F:87:41:A4:0A:76:F0:8E:BE:82:F0:BD:08 X509v3 Authority Key Identifier: keyid:8A:E4:B9:3F:EB:71:DD:E2:82:3B:70:C7:DB:B7:9E:0F:99:B5:6C:1B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iuS5P-tx3eKCO3DH27eeD5m1bBs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/70e678-8495-46ae-96d7-29c5176902c6/1/iuS5P-tx3eKCO3DH27eeD5m1bBs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/84/70e678-8495-46ae-96d7-29c5176902c6/1/iuS5P-tx3eKCO3DH27eeD5m1bBs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 23:44:40:ab:c6:cf:25:cd:1e:02:68:95:d5:09:4b:76:ee:c0: ac:28:76:a6:19:d3:cf:c7:93:13:22:39:fe:c2:24:77:c5:e7: cb:e1:a4:cf:c0:51:fd:9b:b3:77:82:91:8f:e8:bb:5b:8c:53: 47:b1:19:5c:57:bc:22:c6:b0:c0:df:e2:7d:01:d7:40:9d:6d: 3f:54:0b:6b:f5:a5:9d:e3:e0:3a:0c:d1:5f:f9:08:cb:2c:21: bc:57:46:14:9f:0d:bc:2b:82:ff:4a:a2:37:28:c6:e6:00:b8: 52:0f:7e:0a:b2:9b:3f:42:4e:33:33:a9:ed:8f:36:84:29:5d: 45:dc:44:08:fe:00:71:d8:9c:06:c7:b8:f6:aa:ab:71:f8:3e: 1d:a3:f2:2a:62:03:13:e4:42:27:1a:36:4f:d2:2d:f8:b0:9b: 9f:d4:02:a5:40:21:9e:48:1a:3f:e8:35:12:06:4e:5e:ca:fc: 00:a2:23:57:71:73:dd:3f:24:f7:fa:8b:a7:7a:73:13:65:97: 08:63:08:e9:33:14:e1:3b:46:bb:85:71:80:43:ba:7e:3d:99: b3:f2:73:ae:82:4d:3d:ef:a3:70:ad:a8:fd:2e:3a:84:69:bf: 16:ea:7e:7c:76:cb:15:67:a4:aa:eb:6d:54:66:3f:16:26:e4: 6c:e3:48:d0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzwNMC33RR6GilRXRS24uFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhhZTRiOTNmZWI3MWRkZTI4MjNiNzBjN2RiYjc5ZTBmOTli NTZjMWIwHhcNMjUxMjA2MTMwMTMxWhcNMjUxMjA3MTMwMTMxWjAzMTEwLwYDVQQD EygxODYzYjVhNTk5ZDcxZDNmODc0MWE0MGE3NmYwOGViZTgyZjBiZDA4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxxyKKxSgjBIjv8QAwsqGBucIi4m/ 48LSRnx9cihu0XJvOQACoyW8pads7MA5umdODiW/Qd/L+V4/4llOfEq5t8RWDVSJ BFBX7XDrjhKKpApjj1dY55ZS8CzHZHEua40JSMMhoK6HZsFtZk2FoFuN9ox6mdLI AX34AbozE1HqekN4KuanUdLY73tlVtSPcs4KWhfoOh7fI0LYgW3F8bhhnZ7igzKj LaGT5hhhZRW7l/Qt3X3RHWD1687n56OypqSmJBUpOOMyIrkvCYKEmM9c26jm2/W2 dlmIh5R+WzOCICLS1f8w9b0F7/V02AIxG8DsAkjde9eR8tZ3s6IwUVjq4wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBhjtaWZ1x0/h0GkCnbwjr6C8L0IMB8GA1UdIwQY MBaAFIrkuT/rcd3igjtwx9u3ng+ZtWwbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaXVTNVAtdHgzZUtDTzNESDI3ZWVENW0xYkJzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NC83MGU2NzgtODQ5NS00NmFlLTk2ZDct MjljNTE3NjkwMmM2LzEvaXVTNVAtdHgzZUtDTzNESDI3ZWVENW0xYkJzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84NC83MGU2NzgtODQ5NS00NmFlLTk2ZDctMjljNTE3NjkwMmM2 LzEvaXVTNVAtdHgzZUtDTzNESDI3ZWVENW0xYkJzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAI0RAq8bP Jc0eAmiV1QlLdu7ArCh2phnTz8eTEyI5/sIkd8Xny+Gkz8BR/Zuzd4KRj+i7W4xT R7EZXFe8IsawwN/ifQHXQJ1tP1QLa/WlnePgOgzRX/kIyywhvFdGFJ8NvCuC/0qi NyjG5gC4Ug9+CrKbP0JOMzOp7Y82hCldRdxECP4AcdicBse49qqrcfg+HaPyKmID E+RCJxo2T9It+LCbn9QCpUAhnkgaP+g1EgZOXsr8AKIjV3Fz3T8k9/qLp3pzE2WX CGMI6TMU4TtGu4VxgEO6fj2Zs/JzroJNPe+jcK2o/S46hGm/Fup+fHbLFWekqutt VGY/FibkbONI0A== -----END CERTIFICATE-----Generated at Sat Dec 6 19:35:27 2025 by rpki-client