This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/d6db46-85b1-420c-8ce7-f7dabb0d2787/1/Iet_m1iVK56Ar897vboysmo00KE.mft File: Iet_m1iVK56Ar897vboysmo00KE.mft (raw, json) Hash identifier: kz25jd9MhmhkK8RU0h3V9YwosaDsf4tZENdyyJtiwjg= Subject key identifier: 8A:CC:83:19:64:E5:98:8C:10:1E:59:AD:60:77:53:C3:9B:D6:D8:04 Authority key identifier: 21:EB:7F:9B:58:95:2B:9E:80:AF:CF:7B:BD:BA:32:B2:6A:34:D0:A1 Certificate issuer: /CN=21eb7f9b58952b9e80afcf7bbdba32b26a34d0a1 Certificate serial: 019AF3F72BBA3B1FC53FE78BFA36E82E319C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Iet_m1iVK56Ar897vboysmo00KE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/d6db46-85b1-420c-8ce7-f7dabb0d2787/1/Iet_m1iVK56Ar897vboysmo00KE.mft Manifest number: 1436 Signing time: Sat 06 Dec 2025 14:00:53 +0000 Manifest this update: Sat 06 Dec 2025 14:00:53 +0000 Manifest next update: Sun 07 Dec 2025 14:00:53 +0000 Files and hashes: 1: Iet_m1iVK56Ar897vboysmo00KE.crl (hash: 0u7NpKyNXq3/Bp8PePbIrb7vxbdg7etT5f21rkbA4Ys=) 2: awEUUsb69K1CqabOYZXpO61MCTg.roa (hash: 9PPvHVQ3Mjg4T1Rer/rBY6hN8ex1RSBq3SwkRV1OUrQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/d6db46-85b1-420c-8ce7-f7dabb0d2787/1/Iet_m1iVK56Ar897vboysmo00KE.crl rsync://rpki.ripe.net/repository/DEFAULT/86/d6db46-85b1-420c-8ce7-f7dabb0d2787/1/Iet_m1iVK56Ar897vboysmo00KE.mft rsync://rpki.ripe.net/repository/DEFAULT/Iet_m1iVK56Ar897vboysmo00KE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:f7:2b:ba:3b:1f:c5:3f:e7:8b:fa:36:e8:2e:31:9c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=21eb7f9b58952b9e80afcf7bbdba32b26a34d0a1 Validity Not Before: Dec 6 14:00:53 2025 GMT Not After : Dec 7 14:00:53 2025 GMT Subject: CN=8acc831964e5988c101e59ad607753c39bd6d804 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:b4:61:0b:bb:57:d6:4f:df:ed:6a:e5:e0:93: 9c:53:3f:b3:32:4a:ca:ef:65:75:97:40:2a:9d:6b: 30:e1:b6:e4:0f:48:a1:7a:b8:8d:cc:59:a0:87:5d: eb:5c:6f:21:bb:3b:c4:59:85:bf:b7:19:41:37:48: 95:b1:77:1e:dd:42:4f:27:eb:b5:ea:79:bd:7b:ce: 78:c0:3f:e9:bd:64:79:e2:49:ec:96:02:07:8a:12: 9a:7a:14:22:1f:d2:49:bd:76:91:4a:cf:1e:d0:2f: 69:21:d8:08:27:64:f0:2b:49:ac:d4:24:96:a6:96: a7:c6:23:7a:9e:fa:05:bc:63:3d:2e:4e:9f:2f:97: fa:a8:ee:68:e0:d5:9f:15:6e:b4:a9:d5:dd:f8:d4: e4:8f:46:3f:dc:cb:c9:36:b5:85:67:be:f6:8a:02: 9c:c7:a6:60:8c:4e:f0:07:b1:68:98:f7:51:87:5f: 16:6c:e1:5a:d5:ce:9a:5d:c7:81:03:74:f5:35:9a: 82:43:38:5b:48:28:0d:ed:34:49:b6:9d:89:7f:68: 9d:2b:64:70:57:b8:e7:3c:28:06:1e:b4:03:c1:68: 1a:e3:44:9b:27:2c:a6:ba:fb:dd:fb:90:c0:f6:bc: f2:ca:93:9e:43:0c:19:4a:58:dc:5a:eb:12:7e:35: 7c:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:CC:83:19:64:E5:98:8C:10:1E:59:AD:60:77:53:C3:9B:D6:D8:04 X509v3 Authority Key Identifier: keyid:21:EB:7F:9B:58:95:2B:9E:80:AF:CF:7B:BD:BA:32:B2:6A:34:D0:A1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Iet_m1iVK56Ar897vboysmo00KE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/d6db46-85b1-420c-8ce7-f7dabb0d2787/1/Iet_m1iVK56Ar897vboysmo00KE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/86/d6db46-85b1-420c-8ce7-f7dabb0d2787/1/Iet_m1iVK56Ar897vboysmo00KE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3d:9a:72:cd:2f:90:b5:cf:5f:16:8d:54:42:79:22:41:00:49: 30:93:12:05:9f:20:6d:7e:d9:54:4f:01:6d:1c:09:b1:dc:38: e5:de:f7:73:1d:21:05:60:12:2a:35:05:57:11:ad:0a:32:7a: 2e:99:bf:d9:f5:85:69:2e:01:20:dc:23:15:71:e0:80:80:55: 8e:bc:87:95:0d:82:78:a8:55:68:38:35:be:6c:8f:71:34:a6: fa:1a:67:fc:5d:59:85:81:c3:79:7d:4a:9c:ed:73:cd:f3:67: 4a:18:a8:3e:3b:c8:1d:68:23:12:bf:64:ab:36:8c:a2:ce:d4: 44:ff:52:a2:df:06:69:29:6e:74:a4:bf:c0:23:87:0a:a0:a6: de:a6:eb:32:cb:61:5e:c4:bf:38:62:78:47:3d:c6:f8:b5:47: cc:87:76:6b:4f:c6:75:81:2a:13:46:fa:5f:8f:3b:7b:53:06: a6:cc:3d:84:fa:3b:2c:3e:7f:c2:ff:75:40:64:13:6b:a0:a2: 9e:63:97:7c:b9:d5:22:fb:53:17:53:47:af:6e:d8:7c:e0:68: 58:25:fc:e6:b6:e0:1b:90:ad:0c:f2:ac:7b:10:57:92:75:99: e3:ec:c9:2f:f5:4d:0d:c0:66:3c:d3:fe:fe:86:c3:81:ac:5f: ca:a0:77:70 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrz9yu6Ox/FP+eL+jboLjGcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIxZWI3ZjliNTg5NTJiOWU4MGFmY2Y3YmJkYmEzMmIyNmEz NGQwYTEwHhcNMjUxMjA2MTQwMDUzWhcNMjUxMjA3MTQwMDUzWjAzMTEwLwYDVQQD Eyg4YWNjODMxOTY0ZTU5ODhjMTAxZTU5YWQ2MDc3NTNjMzliZDZkODA0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqbRhC7tX1k/f7Wrl4JOcUz+zMkrK 72V1l0AqnWsw4bbkD0iheriNzFmgh13rXG8huzvEWYW/txlBN0iVsXce3UJPJ+u1 6nm9e854wD/pvWR54knslgIHihKaehQiH9JJvXaRSs8e0C9pIdgIJ2TwK0ms1CSW ppanxiN6nvoFvGM9Lk6fL5f6qO5o4NWfFW60qdXd+NTkj0Y/3MvJNrWFZ772igKc x6ZgjE7wB7FomPdRh18WbOFa1c6aXceBA3T1NZqCQzhbSCgN7TRJtp2Jf2idK2Rw V7jnPCgGHrQDwWga40SbJyymuvvd+5DA9rzyypOeQwwZSljcWusSfjV8bwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIrMgxlk5ZiMEB5ZrWB3U8Ob1tgEMB8GA1UdIwQY MBaAFCHrf5tYlSuegK/Pe726MrJqNNChMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSWV0X20xaVZLNTZBcjg5N3Zib3lzbW8wMEtFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ni9kNmRiNDYtODViMS00MjBjLThjZTct ZjdkYWJiMGQyNzg3LzEvSWV0X20xaVZLNTZBcjg5N3Zib3lzbW8wMEtFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Ni9kNmRiNDYtODViMS00MjBjLThjZTctZjdkYWJiMGQyNzg3 LzEvSWV0X20xaVZLNTZBcjg5N3Zib3lzbW8wMEtFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPZpyzS+Q tc9fFo1UQnkiQQBJMJMSBZ8gbX7ZVE8BbRwJsdw45d73cx0hBWASKjUFVxGtCjJ6 Lpm/2fWFaS4BINwjFXHggIBVjryHlQ2CeKhVaDg1vmyPcTSm+hpn/F1ZhYHDeX1K nO1zzfNnShioPjvIHWgjEr9kqzaMos7URP9Sot8GaSludKS/wCOHCqCm3qbrMsth XsS/OGJ4Rz3G+LVHzId2a0/GdYEqE0b6X487e1MGpsw9hPo7LD5/wv91QGQTa6Ci nmOXfLnVIvtTF1NHr27YfOBoWCX85rbgG5CtDPKsexBXknWZ4+zJL/VNDcBmPNP+ /obDgaxfyqB3cA== -----END CERTIFICATE-----Generated at Sat Dec 6 15:56:09 2025 by rpki-client