This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/c9ebb2-851d-4578-a879-c29bf25d266e/1/iIiBjE7PHV3rTqk2Z0cKehFNmgc.mft File: iIiBjE7PHV3rTqk2Z0cKehFNmgc.mft (raw, json) Hash identifier: UZyniqv9AU6yQaT56TqKWGSO2n6AOWB2yVu4RC9ZfOw= Subject key identifier: 64:B2:3E:30:62:8B:2D:4A:97:C2:F2:2E:26:C3:98:29:90:9C:26:51 Authority key identifier: 88:88:81:8C:4E:CF:1D:5D:EB:4E:A9:36:67:47:0A:7A:11:4D:9A:07 Certificate issuer: /CN=8888818c4ecf1d5deb4ea93667470a7a114d9a07 Certificate serial: 019AF12E8AC3E441166F06C342D68C2AD168 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iIiBjE7PHV3rTqk2Z0cKehFNmgc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/c9ebb2-851d-4578-a879-c29bf25d266e/1/iIiBjE7PHV3rTqk2Z0cKehFNmgc.mft Manifest number: 16F4 Signing time: Sat 06 Dec 2025 01:02:30 +0000 Manifest this update: Sat 06 Dec 2025 01:02:30 +0000 Manifest next update: Sun 07 Dec 2025 01:02:30 +0000 Files and hashes: 1: KYtWtlgqE5B9oPVpa5XtMWrTy2s.roa (hash: S7OWPBmD/em3aOMLq183MKVqtbhQIKvOUTkiCEiDOio=) 2: iIiBjE7PHV3rTqk2Z0cKehFNmgc.crl (hash: 3paV7MPZva2+npIXo3U6VvCDQXeM2xOJvaq1rfnmfWw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/c9ebb2-851d-4578-a879-c29bf25d266e/1/iIiBjE7PHV3rTqk2Z0cKehFNmgc.crl rsync://rpki.ripe.net/repository/DEFAULT/85/c9ebb2-851d-4578-a879-c29bf25d266e/1/iIiBjE7PHV3rTqk2Z0cKehFNmgc.mft rsync://rpki.ripe.net/repository/DEFAULT/iIiBjE7PHV3rTqk2Z0cKehFNmgc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:02:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2e:8a:c3:e4:41:16:6f:06:c3:42:d6:8c:2a:d1:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8888818c4ecf1d5deb4ea93667470a7a114d9a07 Validity Not Before: Dec 6 01:02:30 2025 GMT Not After : Dec 7 01:02:30 2025 GMT Subject: CN=64b23e30628b2d4a97c2f22e26c39829909c2651 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:5e:e6:05:65:ee:5e:7f:35:1e:79:00:d8:d9: a8:56:93:ad:d2:c0:74:a1:7c:fb:13:3b:32:02:44: ab:30:ea:07:58:b2:05:35:85:99:93:86:49:12:5a: d9:b6:02:39:e4:65:4d:77:3f:b7:35:7d:ac:de:a4: e9:dd:63:75:d6:16:4d:88:1f:3d:f8:44:0a:1e:a4: 4b:7d:d1:d5:6e:6e:a1:24:65:0b:f9:58:83:77:f9: 8b:3a:ca:1b:cf:09:78:02:58:51:a6:34:eb:3f:d2: 42:6a:02:79:4a:ae:ad:4e:b2:0c:4b:96:63:ba:b1: f0:62:95:a9:e6:28:51:83:5f:9d:7f:b7:9c:cf:cf: 14:e1:6b:80:60:37:99:ec:f0:83:08:15:37:3d:dc: 46:a8:94:15:db:3b:29:2a:ae:13:28:23:bf:c1:3d: 8d:4a:81:e0:28:27:bb:43:2b:30:ea:ee:6e:b2:71: 48:17:fa:dc:36:48:62:50:69:50:2d:4a:61:06:15: a3:e4:aa:05:d8:3b:15:b1:67:7e:c6:0b:45:b3:b8: d6:33:6a:2b:bc:fe:99:e9:6d:4a:9d:a6:61:ac:bb: dd:22:33:02:78:94:77:ef:2d:10:8b:d3:aa:f9:14: 85:1b:8b:2c:22:31:9e:f5:72:0a:61:c0:2b:19:5e: ba:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:B2:3E:30:62:8B:2D:4A:97:C2:F2:2E:26:C3:98:29:90:9C:26:51 X509v3 Authority Key Identifier: keyid:88:88:81:8C:4E:CF:1D:5D:EB:4E:A9:36:67:47:0A:7A:11:4D:9A:07 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iIiBjE7PHV3rTqk2Z0cKehFNmgc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/c9ebb2-851d-4578-a879-c29bf25d266e/1/iIiBjE7PHV3rTqk2Z0cKehFNmgc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/85/c9ebb2-851d-4578-a879-c29bf25d266e/1/iIiBjE7PHV3rTqk2Z0cKehFNmgc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 12:d8:40:19:96:a3:a9:75:7f:a3:0a:b0:b4:69:09:68:d9:f7: 31:59:69:e6:7d:fd:a2:67:bb:82:d3:ec:a2:20:61:37:78:28: 41:30:f3:e3:9f:31:a0:db:2a:5c:7c:74:9a:1f:f9:98:89:41: 15:96:92:ca:bd:52:80:48:99:87:f9:b2:49:2c:42:4b:1e:d3: d0:b7:17:a7:68:0b:a0:ee:84:53:39:33:24:7b:38:fd:f0:0c: 7e:b9:11:10:47:1d:da:dc:1a:7b:42:66:0c:d6:cc:12:10:66: 2d:54:55:af:a8:37:4f:5d:59:e8:78:53:0e:e4:9b:1f:58:f5: 28:21:5d:01:39:f9:c2:0c:67:e4:4c:f5:4c:08:e1:39:f6:da: e0:9d:0d:ca:d3:00:10:f1:5d:c3:42:b4:79:55:a5:17:04:ac: dd:ce:8c:ca:ca:29:64:03:fd:7f:c7:e7:c3:fb:e8:37:7c:78: 28:52:39:d4:04:75:52:87:57:a0:f3:f3:50:fe:83:a0:ab:32: b7:71:d8:f9:77:df:43:e5:0b:4b:db:55:45:f3:53:35:36:d9: 82:ac:92:a6:98:a4:b9:36:49:40:85:06:1b:7b:45:13:95:37: 84:f6:f7:27:bd:06:3f:5c:91:22:eb:72:79:e4:3f:ae:1e:31: 4d:ce:9b:70 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLorD5EEWbwbDQtaMKtFoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg4ODg4MThjNGVjZjFkNWRlYjRlYTkzNjY3NDcwYTdhMTE0 ZDlhMDcwHhcNMjUxMjA2MDEwMjMwWhcNMjUxMjA3MDEwMjMwWjAzMTEwLwYDVQQD Eyg2NGIyM2UzMDYyOGIyZDRhOTdjMmYyMmUyNmMzOTgyOTkwOWMyNjUxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt17mBWXuXn81HnkA2NmoVpOt0sB0 oXz7EzsyAkSrMOoHWLIFNYWZk4ZJElrZtgI55GVNdz+3NX2s3qTp3WN11hZNiB89 +EQKHqRLfdHVbm6hJGUL+ViDd/mLOsobzwl4AlhRpjTrP9JCagJ5Sq6tTrIMS5Zj urHwYpWp5ihRg1+df7ecz88U4WuAYDeZ7PCDCBU3PdxGqJQV2zspKq4TKCO/wT2N SoHgKCe7Qysw6u5usnFIF/rcNkhiUGlQLUphBhWj5KoF2DsVsWd+xgtFs7jWM2or vP6Z6W1KnaZhrLvdIjMCeJR37y0Qi9Oq+RSFG4ssIjGe9XIKYcArGV66oQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGSyPjBiiy1Kl8LyLibDmCmQnCZRMB8GA1UdIwQY MBaAFIiIgYxOzx1d606pNmdHCnoRTZoHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaUlpQmpFN1BIVjNyVHFrMlowY0tlaEZObWdjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NS9jOWViYjItODUxZC00NTc4LWE4Nzkt YzI5YmYyNWQyNjZlLzEvaUlpQmpFN1BIVjNyVHFrMlowY0tlaEZObWdjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84NS9jOWViYjItODUxZC00NTc4LWE4NzktYzI5YmYyNWQyNjZl LzEvaUlpQmpFN1BIVjNyVHFrMlowY0tlaEZObWdjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEthAGZaj qXV/owqwtGkJaNn3MVlp5n39ome7gtPsoiBhN3goQTDz458xoNsqXHx0mh/5mIlB FZaSyr1SgEiZh/mySSxCSx7T0LcXp2gLoO6EUzkzJHs4/fAMfrkREEcd2twae0Jm DNbMEhBmLVRVr6g3T11Z6HhTDuSbH1j1KCFdATn5wgxn5Ez1TAjhOfba4J0NytMA EPFdw0K0eVWlFwSs3c6MysopZAP9f8fnw/voN3x4KFI51AR1UodXoPPzUP6DoKsy t3HY+XffQ+ULS9tVRfNTNTbZgqySppikuTZJQIUGG3tFE5U3hPb3J70GP1yRIuty eeQ/rh4xTc6bcA== -----END CERTIFICATE-----Generated at Sat Dec 6 09:23:11 2025 by rpki-client