This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/797390-81d4-4c5d-ab71-7088568c51c0/1/iq94tpd0pVUH3qv4xMlpQunvDSA.mft File: iq94tpd0pVUH3qv4xMlpQunvDSA.mft (raw, json) Hash identifier: nODC8tiy9/Kx9RqRigZyyBBdH5Muyccu3rZq4nJbFII= Subject key identifier: AC:BA:FE:31:B8:32:1C:CE:3C:92:92:B1:0D:6B:21:27:0E:05:D2:9C Authority key identifier: 8A:AF:78:B6:97:74:A5:55:07:DE:AB:F8:C4:C9:69:42:E9:EF:0D:20 Certificate issuer: /CN=8aaf78b69774a55507deabf8c4c96942e9ef0d20 Certificate serial: 019AF653116A806A4A8E55087A04A4BA99C4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iq94tpd0pVUH3qv4xMlpQunvDSA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/797390-81d4-4c5d-ab71-7088568c51c0/1/iq94tpd0pVUH3qv4xMlpQunvDSA.mft Manifest number: 0E5F Signing time: Sun 07 Dec 2025 01:00:30 +0000 Manifest this update: Sun 07 Dec 2025 01:00:30 +0000 Manifest next update: Mon 08 Dec 2025 01:00:30 +0000 Files and hashes: 1: JQCJu_zj_dBb25hVe1CPLuILo-c.roa (hash: ppq/kkdZOhkWPFmrOFoKNIk30mkp2cJ+7oYbrYYHQUY=) 2: iq94tpd0pVUH3qv4xMlpQunvDSA.crl (hash: 5VszeUGj7sAIijbsT7dSZWik8nbISqCgj4/UQztxWdY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/797390-81d4-4c5d-ab71-7088568c51c0/1/iq94tpd0pVUH3qv4xMlpQunvDSA.crl rsync://rpki.ripe.net/repository/DEFAULT/8e/797390-81d4-4c5d-ab71-7088568c51c0/1/iq94tpd0pVUH3qv4xMlpQunvDSA.mft rsync://rpki.ripe.net/repository/DEFAULT/iq94tpd0pVUH3qv4xMlpQunvDSA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 23:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f6:53:11:6a:80:6a:4a:8e:55:08:7a:04:a4:ba:99:c4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8aaf78b69774a55507deabf8c4c96942e9ef0d20 Validity Not Before: Dec 7 01:00:30 2025 GMT Not After : Dec 8 01:00:30 2025 GMT Subject: CN=acbafe31b8321cce3c9292b10d6b21270e05d29c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:7e:b5:31:3f:f5:91:63:5f:82:18:32:55:9e: de:0a:c7:a5:cc:c3:0e:01:31:0f:05:37:d6:ea:d3: db:28:41:55:1a:45:01:e1:29:36:8f:16:d8:63:9d: b7:10:78:da:7e:44:84:5b:6d:70:22:e8:18:25:8b: 19:40:d7:85:63:07:58:7b:50:ad:98:36:44:03:6a: b4:3d:4b:4e:c0:52:7a:70:98:92:5c:9c:a1:3f:8d: 68:ac:c5:4b:77:54:4b:e0:78:1e:8b:a9:f3:20:bf: 1c:7f:b3:b4:ec:ab:06:03:9a:74:2c:1d:40:4b:d4: 25:60:4a:c1:9d:2d:16:00:3f:4b:ff:93:3f:d1:cd: 3a:f3:cb:be:b1:ae:92:b6:7e:46:08:35:94:9a:87: 91:99:43:54:17:c5:c6:98:13:21:54:6a:52:ca:58: b1:f6:9e:68:c1:ec:b2:90:8d:bf:02:1a:70:f7:2f: 26:fd:1c:05:fe:ef:84:11:77:c7:91:6c:ad:66:7d: 0a:d6:97:25:40:a9:df:19:21:b0:05:ad:ce:83:17: cc:93:f6:54:6f:f8:f3:3f:fc:6a:42:88:82:1d:ff: 9d:14:75:a0:1a:73:cd:69:12:53:c7:45:23:5f:70: fb:fc:52:a3:b9:f4:52:07:7f:3a:a2:37:1d:84:d9: ac:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:BA:FE:31:B8:32:1C:CE:3C:92:92:B1:0D:6B:21:27:0E:05:D2:9C X509v3 Authority Key Identifier: keyid:8A:AF:78:B6:97:74:A5:55:07:DE:AB:F8:C4:C9:69:42:E9:EF:0D:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iq94tpd0pVUH3qv4xMlpQunvDSA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/797390-81d4-4c5d-ab71-7088568c51c0/1/iq94tpd0pVUH3qv4xMlpQunvDSA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/797390-81d4-4c5d-ab71-7088568c51c0/1/iq94tpd0pVUH3qv4xMlpQunvDSA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 82:4d:bc:14:b6:af:0f:fb:83:dd:73:fb:fb:81:ed:9a:84:34: b2:27:25:09:1e:f7:a8:d1:7b:47:36:2f:e2:11:0d:07:f6:bf: 4a:a5:7b:e9:28:e7:cd:63:a7:ee:fc:b7:73:c9:c8:76:8d:eb: 23:05:8b:00:67:71:5d:97:7d:c6:7e:29:df:18:db:ba:1d:fa: 55:5c:7d:28:c9:19:bc:be:3f:62:5b:4a:19:c8:6d:c8:0a:8a: 32:72:d3:8e:b4:88:34:32:73:a6:86:c4:df:6a:1a:e3:82:38: e6:30:2b:d5:70:37:db:e9:f3:ca:b3:06:ce:04:22:8f:4e:26: 86:1d:87:ce:bf:16:45:42:43:f6:f5:09:ef:e8:bd:b5:26:b7: b0:c6:d9:0f:dc:24:9b:4b:02:e9:ba:b2:b3:8e:e6:e2:0b:07: c1:b2:b6:07:44:ca:83:93:0f:74:4c:20:6f:dc:bc:1f:c9:3d: de:d0:c4:e1:4b:73:c1:9a:8a:f2:a7:1a:4f:c7:d6:23:25:c6: ce:4f:0c:ac:37:38:1a:eb:1b:5c:27:ab:66:83:3f:ca:01:8d: 6b:24:2b:d4:e4:4b:ea:d8:f4:3e:6b:5c:b0:9d:d9:d2:13:f6: 5a:02:40:d6:f3:17:84:87:11:a2:8b:41:29:e7:65:b2:66:d4: 32:ec:79:50 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr2UxFqgGpKjlUIegSkupnEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhhYWY3OGI2OTc3NGE1NTUwN2RlYWJmOGM0Yzk2OTQyZTll ZjBkMjAwHhcNMjUxMjA3MDEwMDMwWhcNMjUxMjA4MDEwMDMwWjAzMTEwLwYDVQQD EyhhY2JhZmUzMWI4MzIxY2NlM2M5MjkyYjEwZDZiMjEyNzBlMDVkMjljMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqH61MT/1kWNfghgyVZ7eCselzMMO ATEPBTfW6tPbKEFVGkUB4Sk2jxbYY523EHjafkSEW21wIugYJYsZQNeFYwdYe1Ct mDZEA2q0PUtOwFJ6cJiSXJyhP41orMVLd1RL4Hgei6nzIL8cf7O07KsGA5p0LB1A S9QlYErBnS0WAD9L/5M/0c0688u+sa6Stn5GCDWUmoeRmUNUF8XGmBMhVGpSylix 9p5oweyykI2/Ahpw9y8m/RwF/u+EEXfHkWytZn0K1pclQKnfGSGwBa3OgxfMk/ZU b/jzP/xqQoiCHf+dFHWgGnPNaRJTx0UjX3D7/FKjufRSB386ojcdhNmsfQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKy6/jG4MhzOPJKSsQ1rIScOBdKcMB8GA1UdIwQY MBaAFIqveLaXdKVVB96r+MTJaULp7w0gMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaXE5NHRwZDBwVlVIM3F2NHhNbHBRdW52RFNBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS83OTczOTAtODFkNC00YzVkLWFiNzEt NzA4ODU2OGM1MWMwLzEvaXE5NHRwZDBwVlVIM3F2NHhNbHBRdW52RFNBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZS83OTczOTAtODFkNC00YzVkLWFiNzEtNzA4ODU2OGM1MWMw LzEvaXE5NHRwZDBwVlVIM3F2NHhNbHBRdW52RFNBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgk28FLav D/uD3XP7+4HtmoQ0siclCR73qNF7RzYv4hENB/a/SqV76SjnzWOn7vy3c8nIdo3r IwWLAGdxXZd9xn4p3xjbuh36VVx9KMkZvL4/YltKGchtyAqKMnLTjrSINDJzpobE 32oa44I45jAr1XA32+nzyrMGzgQij04mhh2Hzr8WRUJD9vUJ7+i9tSa3sMbZD9wk m0sC6bqys47m4gsHwbK2B0TKg5MPdEwgb9y8H8k93tDE4UtzwZqK8qcaT8fWIyXG zk8MrDc4GusbXCerZoM/ygGNayQr1ORL6tj0PmtcsJ3Z0hP2WgJA1vMXhIcRootB KedlsmbUMux5UA== -----END CERTIFICATE-----Generated at Sun Dec 7 08:46:15 2025 by rpki-client