This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/83f631-8977-4d2e-8523-888c07f2153f/1/irYGzqebWr6BaDpjN5s5KJssq5M.mft File: irYGzqebWr6BaDpjN5s5KJssq5M.mft (raw, json) Hash identifier: g6FZj211dBBd7MLBB1m4KUmitk0BsyQBp9tmKY3Kk+0= Subject key identifier: 9A:1C:5A:25:66:A6:54:2F:CF:86:3B:04:9A:0D:FB:33:8A:41:B4:5B Authority key identifier: 8A:B6:06:CE:A7:9B:5A:BE:81:68:3A:63:37:9B:39:28:9B:2C:AB:93 Certificate issuer: /CN=8ab606cea79b5abe81683a63379b39289b2cab93 Certificate serial: 019B3F7F8457D38B68F2C854A33B3E0814CD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/irYGzqebWr6BaDpjN5s5KJssq5M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/83f631-8977-4d2e-8523-888c07f2153f/1/irYGzqebWr6BaDpjN5s5KJssq5M.mft Manifest number: 090D Signing time: Sun 21 Dec 2025 06:01:20 +0000 Manifest this update: Sun 21 Dec 2025 06:01:20 +0000 Manifest next update: Mon 22 Dec 2025 06:01:20 +0000 Files and hashes: 1: Ol66WOHM5O0qZSOG9y7yOIgJsCo.roa (hash: tBXkTjKhKw+qp8WtoR3ZkzeeWQpNfDqudYVdDHWc62c=) 2: irYGzqebWr6BaDpjN5s5KJssq5M.crl (hash: F1S6Q5ArdoAFgHMeHCHmiWjuTmHvoSU7ZuP7P5LDrAs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/83f631-8977-4d2e-8523-888c07f2153f/1/irYGzqebWr6BaDpjN5s5KJssq5M.crl rsync://rpki.ripe.net/repository/DEFAULT/8f/83f631-8977-4d2e-8523-888c07f2153f/1/irYGzqebWr6BaDpjN5s5KJssq5M.mft rsync://rpki.ripe.net/repository/DEFAULT/irYGzqebWr6BaDpjN5s5KJssq5M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 04:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3f:7f:84:57:d3:8b:68:f2:c8:54:a3:3b:3e:08:14:cd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8ab606cea79b5abe81683a63379b39289b2cab93 Validity Not Before: Dec 21 06:01:20 2025 GMT Not After : Dec 22 06:01:20 2025 GMT Subject: CN=9a1c5a2566a6542fcf863b049a0dfb338a41b45b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:5b:3a:17:0c:7f:f1:bd:00:7a:be:aa:7a:c3: b9:73:6a:df:ef:8b:a4:13:9d:82:9c:16:a4:ce:c2: ba:87:04:c4:61:55:91:cc:69:cd:c1:f1:3b:9e:c4: 9e:2d:24:b3:ee:ed:48:a0:58:eb:0c:29:8b:3c:51: 69:7e:ce:3c:a8:d1:0e:86:9a:9d:53:91:46:3f:6b: 5d:5c:6e:21:6d:32:23:bc:ca:82:b1:d5:a8:d4:1f: b2:96:88:fa:25:02:b4:6c:4b:68:01:be:e0:49:01: d1:31:96:ba:ee:13:e0:6b:bf:81:b9:e8:a8:fe:af: e5:2e:1c:72:b3:5f:96:57:d2:69:80:5e:c8:9f:b3: a9:e7:68:36:8a:dd:19:71:d6:98:6a:e7:e7:a0:1a: 31:2b:00:e6:0a:75:5d:97:d8:3f:ef:a5:3c:08:42: 04:98:64:e6:53:4e:fb:ff:45:8a:82:d0:94:95:16: 08:99:79:07:f0:93:9c:c7:7d:67:80:05:fd:7a:f8: 95:0f:b8:ea:18:26:5b:42:eb:af:f8:31:49:1b:b2: cd:77:fe:89:4d:08:fb:55:cf:9f:2c:15:a0:52:44: 79:c2:b3:57:73:a5:45:85:07:16:a6:22:00:a9:5e: ba:a8:d9:d8:9b:b8:e1:21:6f:34:37:d0:a8:55:6d: ed:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:1C:5A:25:66:A6:54:2F:CF:86:3B:04:9A:0D:FB:33:8A:41:B4:5B X509v3 Authority Key Identifier: keyid:8A:B6:06:CE:A7:9B:5A:BE:81:68:3A:63:37:9B:39:28:9B:2C:AB:93 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/irYGzqebWr6BaDpjN5s5KJssq5M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/83f631-8977-4d2e-8523-888c07f2153f/1/irYGzqebWr6BaDpjN5s5KJssq5M.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/83f631-8977-4d2e-8523-888c07f2153f/1/irYGzqebWr6BaDpjN5s5KJssq5M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 14:63:f6:26:87:6f:f5:f7:d1:48:f3:83:d7:95:b8:cd:98:7a: 72:c1:dc:e7:d6:34:b6:4b:9f:4b:10:db:84:92:6b:e9:ae:64: 2e:13:22:3b:f3:cd:80:d0:38:38:05:a4:a1:d1:34:85:49:ac: d4:22:c9:4a:68:02:ac:24:41:f1:e3:52:a6:24:28:30:f1:85: a2:72:43:86:b7:ac:01:fa:a5:d3:79:eb:26:59:ed:ac:89:5f: 70:0b:dd:57:44:86:30:a3:98:1b:9c:7e:be:2a:5d:cf:6d:18: 0b:66:f4:88:95:a8:c3:b8:2c:7f:b5:ca:d4:11:c0:26:4e:e0: df:de:36:5a:c6:f1:b9:9e:3b:06:51:37:01:4e:ab:80:06:16: c6:1c:7e:8e:22:b7:b6:1e:b0:90:54:3a:c0:53:2f:d9:1d:50: 8b:c4:4e:82:3d:bb:3b:29:9a:a6:ea:1e:bc:c2:df:02:07:10: 53:bb:75:2e:c6:0a:c7:5d:40:35:9d:8e:34:3e:43:5e:74:61: f3:dd:20:98:52:8b:5f:c6:26:0c:ff:dd:02:4c:c0:e8:77:ed: 90:a3:42:67:15:5a:ba:bf:56:88:c5:c3:2c:fb:ac:03:46:d7: 73:ff:a0:b5:13:b1:c9:ce:43:22:3c:ec:24:2d:f7:1a:04:7c: c0:f3:eb:97 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs/f4RX04to8shUozs+CBTNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhhYjYwNmNlYTc5YjVhYmU4MTY4M2E2MzM3OWIzOTI4OWIy Y2FiOTMwHhcNMjUxMjIxMDYwMTIwWhcNMjUxMjIyMDYwMTIwWjAzMTEwLwYDVQQD Eyg5YTFjNWEyNTY2YTY1NDJmY2Y4NjNiMDQ5YTBkZmIzMzhhNDFiNDViMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoFs6Fwx/8b0Aer6qesO5c2rf74uk E52CnBakzsK6hwTEYVWRzGnNwfE7nsSeLSSz7u1IoFjrDCmLPFFpfs48qNEOhpqd U5FGP2tdXG4hbTIjvMqCsdWo1B+yloj6JQK0bEtoAb7gSQHRMZa67hPga7+Bueio /q/lLhxys1+WV9JpgF7In7Op52g2it0ZcdaYaufnoBoxKwDmCnVdl9g/76U8CEIE mGTmU077/0WKgtCUlRYImXkH8JOcx31ngAX9eviVD7jqGCZbQuuv+DFJG7LNd/6J TQj7Vc+fLBWgUkR5wrNXc6VFhQcWpiIAqV66qNnYm7jhIW80N9CoVW3tRwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJocWiVmplQvz4Y7BJoN+zOKQbRbMB8GA1UdIwQY MBaAFIq2Bs6nm1q+gWg6YzebOSibLKuTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaXJZR3pxZWJXcjZCYURwak41czVLSnNzcTVNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Zi84M2Y2MzEtODk3Ny00ZDJlLTg1MjMt ODg4YzA3ZjIxNTNmLzEvaXJZR3pxZWJXcjZCYURwak41czVLSnNzcTVNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Zi84M2Y2MzEtODk3Ny00ZDJlLTg1MjMtODg4YzA3ZjIxNTNm LzEvaXJZR3pxZWJXcjZCYURwak41czVLSnNzcTVNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFGP2Jodv 9ffRSPOD15W4zZh6csHc59Y0tkufSxDbhJJr6a5kLhMiO/PNgNA4OAWkodE0hUms 1CLJSmgCrCRB8eNSpiQoMPGFonJDhresAfql03nrJlntrIlfcAvdV0SGMKOYG5x+ vipdz20YC2b0iJWow7gsf7XK1BHAJk7g3942WsbxuZ47BlE3AU6rgAYWxhx+jiK3 th6wkFQ6wFMv2R1Qi8ROgj27OymapuoevMLfAgcQU7t1LsYKx11ANZ2OND5DXnRh 890gmFKLX8YmDP/dAkzA6HftkKNCZxVaur9WiMXDLPusA0bXc/+gtROxyc5DIjzs JC33GgR8wPPrlw== -----END CERTIFICATE-----Generated at Sun Dec 21 11:15:18 2025 by rpki-client