This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/9073ba-88e2-4a45-9daf-5a0a1d0ac58c/1/iEZAW_zHgGbFGSyz6-csRDxVcog.mft File: iEZAW_zHgGbFGSyz6-csRDxVcog.mft (raw, json) Hash identifier: eP41nLNIFmQDlBv9+qNMR68h+gZt8hk4cxhW2jZmDwA= Subject key identifier: 24:96:1E:F4:34:E5:CF:94:F1:F8:C1:44:64:8E:33:D4:2D:55:AA:4D Authority key identifier: 88:46:40:5B:FC:C7:80:66:C5:19:2C:B3:EB:E7:2C:44:3C:55:72:88 Certificate issuer: /CN=8846405bfcc78066c5192cb3ebe72c443c557288 Certificate serial: 019AF208BB8DA200D23A72483BBB9D49542C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iEZAW_zHgGbFGSyz6-csRDxVcog.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/9073ba-88e2-4a45-9daf-5a0a1d0ac58c/1/iEZAW_zHgGbFGSyz6-csRDxVcog.mft Manifest number: 1761 Signing time: Sat 06 Dec 2025 05:00:49 +0000 Manifest this update: Sat 06 Dec 2025 05:00:49 +0000 Manifest next update: Sun 07 Dec 2025 05:00:49 +0000 Files and hashes: 1: 1wukbEM_Z2cOLmS317mkgQWPtlY.roa (hash: mynvXYceF8nnYoZdEmhOk8iYDpjkXUz62HUCHGcK8Wc=) 2: iEZAW_zHgGbFGSyz6-csRDxVcog.crl (hash: optPQ4wE36tPOBlftkqzNsIas+MnTKn0LRAMnf9qObk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/9073ba-88e2-4a45-9daf-5a0a1d0ac58c/1/iEZAW_zHgGbFGSyz6-csRDxVcog.crl rsync://rpki.ripe.net/repository/DEFAULT/8c/9073ba-88e2-4a45-9daf-5a0a1d0ac58c/1/iEZAW_zHgGbFGSyz6-csRDxVcog.mft rsync://rpki.ripe.net/repository/DEFAULT/iEZAW_zHgGbFGSyz6-csRDxVcog.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:08:bb:8d:a2:00:d2:3a:72:48:3b:bb:9d:49:54:2c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8846405bfcc78066c5192cb3ebe72c443c557288 Validity Not Before: Dec 6 05:00:49 2025 GMT Not After : Dec 7 05:00:49 2025 GMT Subject: CN=24961ef434e5cf94f1f8c144648e33d42d55aa4d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:8c:73:65:ad:b3:01:8e:97:73:31:2e:33:63: 12:91:56:a6:2c:71:b9:d7:39:76:54:af:2b:cd:53: 91:0b:2f:61:9c:d2:91:71:15:a9:6e:75:0f:be:3f: c6:bd:7a:86:d2:1f:a7:85:91:84:19:72:21:68:dd: 75:04:2e:c6:0d:9c:2a:63:20:4b:b9:5b:60:17:d3: a2:ff:1b:13:1e:53:de:f2:04:94:2a:d4:93:1e:12: f2:4b:80:16:38:97:81:6e:e3:65:cd:1e:38:0b:ff: 79:b4:84:f6:c0:52:eb:73:e8:49:52:86:f2:2b:8a: e4:8c:94:cc:df:72:a0:bd:d2:88:83:14:7c:8d:b0: c0:3b:53:2c:9a:47:21:b9:c3:4c:8d:23:6e:7d:16: 2b:d5:49:fc:bb:56:0f:17:38:29:33:b8:88:60:e8: 41:21:29:04:cc:94:f9:ce:4b:2a:6f:82:06:e0:d4: 7a:bb:88:d5:54:64:43:ea:63:6a:5a:8f:9e:52:c2: 2f:26:32:b7:5b:92:12:d6:54:b1:37:ed:59:d6:dd: f1:15:fe:d8:ef:a2:cd:6e:7f:16:7a:12:13:cc:93: 45:d7:9f:69:ad:1d:ae:11:57:d3:88:6b:e1:ec:a9: 90:ee:ac:04:d9:e9:ab:2f:0b:f8:5c:e1:6e:8f:01: c9:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:96:1E:F4:34:E5:CF:94:F1:F8:C1:44:64:8E:33:D4:2D:55:AA:4D X509v3 Authority Key Identifier: keyid:88:46:40:5B:FC:C7:80:66:C5:19:2C:B3:EB:E7:2C:44:3C:55:72:88 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iEZAW_zHgGbFGSyz6-csRDxVcog.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/9073ba-88e2-4a45-9daf-5a0a1d0ac58c/1/iEZAW_zHgGbFGSyz6-csRDxVcog.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/9073ba-88e2-4a45-9daf-5a0a1d0ac58c/1/iEZAW_zHgGbFGSyz6-csRDxVcog.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a3:5b:67:e1:38:56:de:5b:d2:7b:4a:ed:67:e3:a3:e3:0b:b8: 57:f8:dd:51:90:91:c5:16:3e:29:ae:55:6d:49:40:6c:a6:13: 2c:9f:fd:ac:fe:db:ec:15:4f:65:61:02:c0:6e:72:71:a9:92: 93:c8:35:b8:fe:e7:94:e7:9a:14:ad:fb:fa:83:5e:b3:54:30: 82:56:a1:d2:e2:0d:64:82:d1:3f:31:63:a1:1d:7c:45:3d:83: 2d:40:46:6a:0e:9c:db:5a:59:76:90:8a:e8:36:ac:c0:22:83: 30:e1:00:40:bc:88:16:bc:5d:2f:41:b3:c4:14:9a:a6:0e:6e: 86:36:6c:9b:fe:89:08:5a:d6:50:b2:54:26:60:60:d6:a3:c6: f3:2c:82:bb:5f:ff:a6:c9:30:f4:42:92:c9:af:4d:26:9b:6d: 05:1f:11:c4:17:6f:bd:c2:80:e0:29:a0:d7:10:5d:ca:e2:ba: e6:02:92:a6:cc:77:7a:0f:5b:a3:c5:06:ec:0d:91:26:86:18: ad:76:1a:ff:a9:4e:be:32:5e:21:b6:e1:57:6d:42:5f:15:f7: 00:58:b0:77:1f:cc:4e:01:0b:9e:b4:5a:de:c4:35:bc:7d:e8: e8:85:51:01:0d:df:f3:42:57:d8:7b:ae:f8:e2:fc:b7:23:f9: 43:22:7a:71 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCLuNogDSOnJIO7udSVQsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg4NDY0MDViZmNjNzgwNjZjNTE5MmNiM2ViZTcyYzQ0M2M1 NTcyODgwHhcNMjUxMjA2MDUwMDQ5WhcNMjUxMjA3MDUwMDQ5WjAzMTEwLwYDVQQD EygyNDk2MWVmNDM0ZTVjZjk0ZjFmOGMxNDQ2NDhlMzNkNDJkNTVhYTRkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs4xzZa2zAY6XczEuM2MSkVamLHG5 1zl2VK8rzVORCy9hnNKRcRWpbnUPvj/GvXqG0h+nhZGEGXIhaN11BC7GDZwqYyBL uVtgF9Oi/xsTHlPe8gSUKtSTHhLyS4AWOJeBbuNlzR44C/95tIT2wFLrc+hJUoby K4rkjJTM33KgvdKIgxR8jbDAO1MsmkchucNMjSNufRYr1Un8u1YPFzgpM7iIYOhB ISkEzJT5zksqb4IG4NR6u4jVVGRD6mNqWo+eUsIvJjK3W5IS1lSxN+1Z1t3xFf7Y 76LNbn8WehITzJNF159prR2uEVfTiGvh7KmQ7qwE2emrLwv4XOFujwHJKQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCSWHvQ05c+U8fjBRGSOM9QtVapNMB8GA1UdIwQY MBaAFIhGQFv8x4BmxRkss+vnLEQ8VXKIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaUVaQVdfekhnR2JGR1N5ejYtY3NSRHhWY29nLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yy85MDczYmEtODhlMi00YTQ1LTlkYWYt NWEwYTFkMGFjNThjLzEvaUVaQVdfekhnR2JGR1N5ejYtY3NSRHhWY29nLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Yy85MDczYmEtODhlMi00YTQ1LTlkYWYtNWEwYTFkMGFjNThj LzEvaUVaQVdfekhnR2JGR1N5ejYtY3NSRHhWY29nLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAo1tn4ThW 3lvSe0rtZ+Oj4wu4V/jdUZCRxRY+Ka5VbUlAbKYTLJ/9rP7b7BVPZWECwG5ycamS k8g1uP7nlOeaFK37+oNes1Qwglah0uINZILRPzFjoR18RT2DLUBGag6c21pZdpCK 6DaswCKDMOEAQLyIFrxdL0GzxBSapg5uhjZsm/6JCFrWULJUJmBg1qPG8yyCu1// pskw9EKSya9NJpttBR8RxBdvvcKA4Cmg1xBdyuK65gKSpsx3eg9bo8UG7A2RJoYY rXYa/6lOvjJeIbbhV21CXxX3AFiwdx/MTgELnrRa3sQ1vH3o6IVRAQ3f80JX2Huu +OL8tyP5QyJ6cQ== -----END CERTIFICATE-----Generated at Sat Dec 6 15:01:20 2025 by rpki-client