This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/7dbe93-5df8-48a3-8613-293b62794850/1/iNXgmvgqlpGMhqZHtO3Njrsjgg0.mft File: iNXgmvgqlpGMhqZHtO3Njrsjgg0.mft (raw, json) Hash identifier: daNzy+s3n9yZId6lHtgCyWUlD0bT9iggmXF0PxXE3SU= Subject key identifier: 62:F5:B8:D6:6B:B0:FD:0C:EC:ED:0F:B1:73:3D:19:7F:ED:D1:6B:19 Authority key identifier: 88:D5:E0:9A:F8:2A:96:91:8C:86:A6:47:B4:ED:CD:8E:BB:23:82:0D Certificate issuer: /CN=88d5e09af82a96918c86a647b4edcd8ebb23820d Certificate serial: 019AF19B30D595B89A10377610F89C240E5D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iNXgmvgqlpGMhqZHtO3Njrsjgg0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/7dbe93-5df8-48a3-8613-293b62794850/1/iNXgmvgqlpGMhqZHtO3Njrsjgg0.mft Manifest number: 1760 Signing time: Sat 06 Dec 2025 03:01:10 +0000 Manifest this update: Sat 06 Dec 2025 03:01:10 +0000 Manifest next update: Sun 07 Dec 2025 03:01:10 +0000 Files and hashes: 1: RVfUxaKwVOxHFRtJ1M0yTsL4WXU.roa (hash: pKnXAopaFCsi1rLxZMLLXoTv9xoOBoXWRjgeegBslqw=) 2: iNXgmvgqlpGMhqZHtO3Njrsjgg0.crl (hash: q217B9FA1qioBudI04e6IqDek0p0TwjuskNlqVLJcwM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/7dbe93-5df8-48a3-8613-293b62794850/1/iNXgmvgqlpGMhqZHtO3Njrsjgg0.crl rsync://rpki.ripe.net/repository/DEFAULT/97/7dbe93-5df8-48a3-8613-293b62794850/1/iNXgmvgqlpGMhqZHtO3Njrsjgg0.mft rsync://rpki.ripe.net/repository/DEFAULT/iNXgmvgqlpGMhqZHtO3Njrsjgg0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9b:30:d5:95:b8:9a:10:37:76:10:f8:9c:24:0e:5d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=88d5e09af82a96918c86a647b4edcd8ebb23820d Validity Not Before: Dec 6 03:01:10 2025 GMT Not After : Dec 7 03:01:10 2025 GMT Subject: CN=62f5b8d66bb0fd0ceced0fb1733d197fedd16b19 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:41:c7:15:7e:96:50:d0:fa:83:da:54:c4:e6: ab:08:3e:f1:09:5c:e7:c4:b0:af:fc:f3:75:78:ea: 07:a7:f1:e3:40:2b:20:89:d3:bf:13:8c:5a:db:7d: a6:e9:6f:19:46:d7:1f:72:1f:c6:89:47:a6:a2:fa: 38:de:58:18:a6:1d:d9:10:1c:bf:f2:c8:74:09:6f: 5e:f4:cc:ae:1b:ef:48:35:db:78:21:b8:89:e9:c8: 34:17:db:aa:5b:d7:b5:7d:76:0e:27:85:76:0c:c9: 70:e9:5c:06:f6:7f:f5:f0:e2:4b:d2:2d:19:5d:2a: 82:96:f6:ed:11:12:54:3c:c3:65:f9:b2:ad:0c:35: 07:26:5d:d5:a2:a7:be:78:b1:4b:34:d6:37:84:f8: 47:df:bf:45:ce:1d:71:8c:1f:7e:3d:6b:54:3c:aa: 11:8d:7f:e8:94:ee:5a:7f:3c:e5:da:d1:e4:3d:77: ae:de:41:1b:ac:ad:6c:b3:8d:54:a5:2f:75:66:f5: 33:c4:60:d2:38:f0:af:61:ea:dd:f5:c7:e4:d4:03: 79:cc:62:60:e9:9e:15:60:8e:e8:2b:c8:8a:22:f8: 49:fb:d3:27:7f:9a:b1:e0:b9:2c:3d:51:3b:89:79: 41:a2:ec:ba:a5:51:ce:5a:dc:90:ab:10:3d:36:5a: a8:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:F5:B8:D6:6B:B0:FD:0C:EC:ED:0F:B1:73:3D:19:7F:ED:D1:6B:19 X509v3 Authority Key Identifier: keyid:88:D5:E0:9A:F8:2A:96:91:8C:86:A6:47:B4:ED:CD:8E:BB:23:82:0D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iNXgmvgqlpGMhqZHtO3Njrsjgg0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/7dbe93-5df8-48a3-8613-293b62794850/1/iNXgmvgqlpGMhqZHtO3Njrsjgg0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/97/7dbe93-5df8-48a3-8613-293b62794850/1/iNXgmvgqlpGMhqZHtO3Njrsjgg0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4e:57:0e:c3:18:30:71:48:a3:39:7e:21:e6:31:3f:0e:bf:a9: 38:91:5f:77:ee:02:11:59:89:b0:e2:ed:04:03:5a:f2:4a:b4: 0b:54:c4:6e:2d:91:ff:05:13:e3:58:a3:28:b7:a2:aa:76:44: 88:56:2f:5b:3d:d0:f5:29:cd:aa:f4:fa:e1:a7:40:30:0b:19: 6d:2e:c6:89:e8:2f:51:1e:09:18:51:6f:39:c0:f8:df:7b:fa: da:6b:4b:64:d9:45:2e:f6:51:bd:60:a0:f5:41:48:b5:f3:48: 1a:f2:72:33:b3:21:74:10:98:57:1a:18:bc:65:14:23:fd:e0: 4c:95:0d:f3:24:17:38:5d:1c:93:19:c2:c7:e0:26:aa:e3:bc: 7f:94:29:d9:43:b0:40:37:c0:20:e5:29:66:53:33:a5:fb:3f: ba:e4:b3:89:e9:e7:b4:12:b3:8b:b9:04:77:ea:ee:86:48:7a: 0d:2f:0e:6f:6a:c9:8f:64:02:ee:01:94:50:5c:a6:40:ca:6c: cd:4b:67:62:8e:e2:64:41:9d:88:be:4b:85:24:c7:ca:44:b8: fc:01:b1:b9:7d:8c:00:3b:e6:e0:41:41:ce:f2:41:e5:cd:76: 00:8a:c2:f5:2a:4c:b1:56:c6:92:17:5a:97:2f:92:7c:8a:a0: 68:4c:32:9b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxmzDVlbiaEDd2EPicJA5dMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg4ZDVlMDlhZjgyYTk2OTE4Yzg2YTY0N2I0ZWRjZDhlYmIy MzgyMGQwHhcNMjUxMjA2MDMwMTEwWhcNMjUxMjA3MDMwMTEwWjAzMTEwLwYDVQQD Eyg2MmY1YjhkNjZiYjBmZDBjZWNlZDBmYjE3MzNkMTk3ZmVkZDE2YjE5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4EHHFX6WUND6g9pUxOarCD7xCVzn xLCv/PN1eOoHp/HjQCsgidO/E4xa232m6W8ZRtcfch/GiUemovo43lgYph3ZEBy/ 8sh0CW9e9MyuG+9INdt4IbiJ6cg0F9uqW9e1fXYOJ4V2DMlw6VwG9n/18OJL0i0Z XSqClvbtERJUPMNl+bKtDDUHJl3Voqe+eLFLNNY3hPhH379Fzh1xjB9+PWtUPKoR jX/olO5afzzl2tHkPXeu3kEbrK1ss41UpS91ZvUzxGDSOPCvYerd9cfk1AN5zGJg 6Z4VYI7oK8iKIvhJ+9Mnf5qx4LksPVE7iXlBouy6pVHOWtyQqxA9NlqoDQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGL1uNZrsP0M7O0PsXM9GX/t0WsZMB8GA1UdIwQY MBaAFIjV4Jr4KpaRjIamR7TtzY67I4INMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaU5YZ212Z3FscEdNaHFaSHRPM05qcnNqZ2cwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ny83ZGJlOTMtNWRmOC00OGEzLTg2MTMt MjkzYjYyNzk0ODUwLzEvaU5YZ212Z3FscEdNaHFaSHRPM05qcnNqZ2cwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Ny83ZGJlOTMtNWRmOC00OGEzLTg2MTMtMjkzYjYyNzk0ODUw LzEvaU5YZ212Z3FscEdNaHFaSHRPM05qcnNqZ2cwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATlcOwxgw cUijOX4h5jE/Dr+pOJFfd+4CEVmJsOLtBANa8kq0C1TEbi2R/wUT41ijKLeiqnZE iFYvWz3Q9SnNqvT64adAMAsZbS7GiegvUR4JGFFvOcD433v62mtLZNlFLvZRvWCg 9UFItfNIGvJyM7MhdBCYVxoYvGUUI/3gTJUN8yQXOF0ckxnCx+AmquO8f5Qp2UOw QDfAIOUpZlMzpfs/uuSzienntBKzi7kEd+ruhkh6DS8Ob2rJj2QC7gGUUFymQMps zUtnYo7iZEGdiL5LhSTHykS4/AGxuX2MADvm4EFBzvJB5c12AIrC9SpMsVbGkhda ly+SfIqgaEwymw== -----END CERTIFICATE-----Generated at Sat Dec 6 07:22:15 2025 by rpki-client