This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/83f631-8977-4d2e-8523-888c07f2153f/1/irYGzqebWr6BaDpjN5s5KJssq5M.mft File: irYGzqebWr6BaDpjN5s5KJssq5M.mft (raw, json) Hash identifier: exGHLWJCj4fmrNVXsyCAjO7wmyMzmvjvRt4lLXHuKrU= Subject key identifier: 27:AF:FB:DE:B7:04:CF:5A:48:96:3D:65:15:E1:98:D5:61:01:4F:D9 Authority key identifier: 8A:B6:06:CE:A7:9B:5A:BE:81:68:3A:63:37:9B:39:28:9B:2C:AB:93 Certificate issuer: /CN=8ab606cea79b5abe81683a63379b39289b2cab93 Certificate serial: 019AF0513FF83AEF75220EA488AA1F2F0458 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/irYGzqebWr6BaDpjN5s5KJssq5M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/83f631-8977-4d2e-8523-888c07f2153f/1/irYGzqebWr6BaDpjN5s5KJssq5M.mft Manifest number: 08E4 Signing time: Fri 05 Dec 2025 21:00:47 +0000 Manifest this update: Fri 05 Dec 2025 21:00:47 +0000 Manifest next update: Sat 06 Dec 2025 21:00:47 +0000 Files and hashes: 1: Ol66WOHM5O0qZSOG9y7yOIgJsCo.roa (hash: tBXkTjKhKw+qp8WtoR3ZkzeeWQpNfDqudYVdDHWc62c=) 2: irYGzqebWr6BaDpjN5s5KJssq5M.crl (hash: nLNLZbzxOnZXw4YpzUdnC9ZraY4YvhqT6zxtDc4tcPM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/83f631-8977-4d2e-8523-888c07f2153f/1/irYGzqebWr6BaDpjN5s5KJssq5M.crl rsync://rpki.ripe.net/repository/DEFAULT/8f/83f631-8977-4d2e-8523-888c07f2153f/1/irYGzqebWr6BaDpjN5s5KJssq5M.mft rsync://rpki.ripe.net/repository/DEFAULT/irYGzqebWr6BaDpjN5s5KJssq5M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 21:00:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:51:3f:f8:3a:ef:75:22:0e:a4:88:aa:1f:2f:04:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8ab606cea79b5abe81683a63379b39289b2cab93 Validity Not Before: Dec 5 21:00:47 2025 GMT Not After : Dec 6 21:00:47 2025 GMT Subject: CN=27affbdeb704cf5a48963d6515e198d561014fd9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:4d:38:c2:e3:b8:b7:aa:cd:dc:3e:35:05:ad: 1e:3b:25:d4:21:39:6c:92:48:7e:f3:36:3f:3e:61: 0e:a3:1a:80:ce:3f:87:84:ae:9f:66:e9:02:b9:a6: 5e:62:91:71:0a:1a:d2:8a:b8:52:cf:c3:8c:fc:f0: 0c:f7:95:43:2b:e1:67:2c:6e:38:06:9b:ba:be:10: 67:69:c8:05:32:89:0d:88:6c:53:47:84:3d:8c:f0: 8a:c0:72:10:02:46:d6:14:f6:95:f1:08:ce:54:16: e8:1f:87:d0:2c:34:d5:93:1e:cc:41:9c:43:40:1c: 6a:5c:47:ac:57:51:79:91:81:8c:18:0b:6a:7f:25: c7:90:90:bb:de:5e:30:0a:ef:af:59:00:b3:04:83: e1:1c:bb:d5:d7:44:a8:32:33:4d:a8:53:29:73:c7: 5f:a5:5d:fc:5a:1d:86:7e:c3:33:52:11:8f:dc:e1: 42:ee:fa:7a:ec:c9:4a:af:ae:93:fe:45:d3:82:86: 5c:2b:95:14:f3:22:79:1e:d4:65:8a:4f:cf:02:ab: 0e:5e:44:02:5a:2a:a4:9b:45:cf:e4:4c:37:21:aa: 2c:4a:05:fc:c4:91:21:1f:cf:c9:f2:9c:5f:72:20: 5a:9d:b5:1d:7c:cf:bd:72:02:66:b5:a9:82:ab:04: 48:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:AF:FB:DE:B7:04:CF:5A:48:96:3D:65:15:E1:98:D5:61:01:4F:D9 X509v3 Authority Key Identifier: keyid:8A:B6:06:CE:A7:9B:5A:BE:81:68:3A:63:37:9B:39:28:9B:2C:AB:93 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/irYGzqebWr6BaDpjN5s5KJssq5M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/83f631-8977-4d2e-8523-888c07f2153f/1/irYGzqebWr6BaDpjN5s5KJssq5M.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/83f631-8977-4d2e-8523-888c07f2153f/1/irYGzqebWr6BaDpjN5s5KJssq5M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 30:f2:2f:db:3b:12:7f:93:24:8a:e9:aa:db:2e:d2:53:b5:aa: e5:63:24:ce:c8:e5:04:70:3d:37:e4:15:7f:09:c0:28:9f:3f: 04:2d:82:d6:e4:d5:c7:c3:68:6e:12:ff:4f:86:47:d0:85:7e: 7a:d3:21:fa:56:0e:c4:f0:26:30:52:f1:24:54:99:f1:ef:54: fc:f2:72:80:f2:a9:b3:2f:55:ae:b5:c6:80:f8:89:81:00:9d: 12:d0:ff:a6:bf:0e:3d:cc:3d:76:d0:08:17:53:4f:17:a9:a5: e3:14:5f:85:3e:43:0c:ac:36:74:fb:2a:e4:8b:19:45:50:41: a2:64:78:21:ea:a2:32:2e:c4:75:18:fe:2a:79:c1:f2:0a:18: 60:1b:fd:b3:90:1c:35:02:e0:55:fd:5f:3a:83:e9:0a:32:5d: 72:d4:3a:7d:8a:2b:84:4e:65:8a:ce:14:60:7c:78:e3:b4:5b: 23:c9:3e:cb:fe:0e:c8:b9:af:29:58:61:2d:aa:35:99:27:54: 73:18:69:af:91:20:69:07:12:f7:d2:88:19:3a:4d:c7:59:e7: d8:2f:c7:6d:66:f4:a0:fa:a0:cc:60:ca:66:1b:63:74:24:80: d4:7c:12:61:1b:bd:0c:af:60:2c:95:8f:47:97:03:da:eb:f2: 98:4e:3e:e6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrwUT/4Ou91Ig6kiKofLwRYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhhYjYwNmNlYTc5YjVhYmU4MTY4M2E2MzM3OWIzOTI4OWIy Y2FiOTMwHhcNMjUxMjA1MjEwMDQ3WhcNMjUxMjA2MjEwMDQ3WjAzMTEwLwYDVQQD EygyN2FmZmJkZWI3MDRjZjVhNDg5NjNkNjUxNWUxOThkNTYxMDE0ZmQ5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuU04wuO4t6rN3D41Ba0eOyXUITls kkh+8zY/PmEOoxqAzj+HhK6fZukCuaZeYpFxChrSirhSz8OM/PAM95VDK+FnLG44 Bpu6vhBnacgFMokNiGxTR4Q9jPCKwHIQAkbWFPaV8QjOVBboH4fQLDTVkx7MQZxD QBxqXEesV1F5kYGMGAtqfyXHkJC73l4wCu+vWQCzBIPhHLvV10SoMjNNqFMpc8df pV38Wh2GfsMzUhGP3OFC7vp67MlKr66T/kXTgoZcK5UU8yJ5HtRlik/PAqsOXkQC Wiqkm0XP5Ew3IaosSgX8xJEhH8/J8pxfciBanbUdfM+9cgJmtamCqwRIWQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCev+963BM9aSJY9ZRXhmNVhAU/ZMB8GA1UdIwQY MBaAFIq2Bs6nm1q+gWg6YzebOSibLKuTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaXJZR3pxZWJXcjZCYURwak41czVLSnNzcTVNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Zi84M2Y2MzEtODk3Ny00ZDJlLTg1MjMt ODg4YzA3ZjIxNTNmLzEvaXJZR3pxZWJXcjZCYURwak41czVLSnNzcTVNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Zi84M2Y2MzEtODk3Ny00ZDJlLTg1MjMtODg4YzA3ZjIxNTNm LzEvaXJZR3pxZWJXcjZCYURwak41czVLSnNzcTVNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMPIv2zsS f5Mkiumq2y7SU7Wq5WMkzsjlBHA9N+QVfwnAKJ8/BC2C1uTVx8NobhL/T4ZH0IV+ etMh+lYOxPAmMFLxJFSZ8e9U/PJygPKpsy9VrrXGgPiJgQCdEtD/pr8OPcw9dtAI F1NPF6ml4xRfhT5DDKw2dPsq5IsZRVBBomR4IeqiMi7EdRj+KnnB8goYYBv9s5Ac NQLgVf1fOoPpCjJdctQ6fYorhE5lis4UYHx447RbI8k+y/4OyLmvKVhhLao1mSdU cxhpr5EgaQcS99KIGTpNx1nn2C/HbWb0oPqgzGDKZhtjdCSA1HwSYRu9DK9gLJWP R5cD2uvymE4+5g== -----END CERTIFICATE-----Generated at Sat Dec 6 07:09:50 2025 by rpki-client