This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/64c431-5330-437b-b207-28fecc63398c/1/irW5qTaHl6hrrryB9iOz9OeG9Ro.mft File: irW5qTaHl6hrrryB9iOz9OeG9Ro.mft (raw, json) Hash identifier: LcFrMy7AHlWpcmF4kMtCkp179Cjv9cB5135g54uQgK4= Subject key identifier: 8A:E4:3C:97:A8:12:10:24:76:64:8A:7D:A4:9C:FA:54:69:48:85:80 Authority key identifier: 8A:B5:B9:A9:36:87:97:A8:6B:AE:BC:81:F6:23:B3:F4:E7:86:F5:1A Certificate issuer: /CN=8ab5b9a9368797a86baebc81f623b3f4e786f51a Certificate serial: 019AF209163A82786C15D2033983B291C717 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/irW5qTaHl6hrrryB9iOz9OeG9Ro.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/64c431-5330-437b-b207-28fecc63398c/1/irW5qTaHl6hrrryB9iOz9OeG9Ro.mft Manifest number: 0BB9 Signing time: Sat 06 Dec 2025 05:01:13 +0000 Manifest this update: Sat 06 Dec 2025 05:01:13 +0000 Manifest next update: Sun 07 Dec 2025 05:01:13 +0000 Files and hashes: 1: 8Ztwq8Ff-jJd_sBf28s8lvQ9SqU.roa (hash: QWa/HtnKYiYQsWevU25s3knaSRBSQ+SLuyEHZRqaj0Q=) 2: irW5qTaHl6hrrryB9iOz9OeG9Ro.crl (hash: pEnUQGwMlj/Llhb9bpycpwzjuEysKRWDJuX17OOeXzk=) 3: rXdrQXveU3qj0FGkRcK0QMl-LXw.roa (hash: MqIHKMdtZYEs0bc9AhyZZKGumnTYkeuiPOOBSx8nfws=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/64c431-5330-437b-b207-28fecc63398c/1/irW5qTaHl6hrrryB9iOz9OeG9Ro.crl rsync://rpki.ripe.net/repository/DEFAULT/ac/64c431-5330-437b-b207-28fecc63398c/1/irW5qTaHl6hrrryB9iOz9OeG9Ro.mft rsync://rpki.ripe.net/repository/DEFAULT/irW5qTaHl6hrrryB9iOz9OeG9Ro.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:09:16:3a:82:78:6c:15:d2:03:39:83:b2:91:c7:17 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8ab5b9a9368797a86baebc81f623b3f4e786f51a Validity Not Before: Dec 6 05:01:13 2025 GMT Not After : Dec 7 05:01:13 2025 GMT Subject: CN=8ae43c97a812102476648a7da49cfa5469488580 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:d7:da:fa:22:98:ff:76:c1:11:01:b6:64:15: 02:47:e8:d3:e5:6a:cf:d8:9c:0c:d1:b6:3e:04:95: 43:96:ea:49:40:46:e6:c0:6c:be:20:d9:2b:3f:b3: 42:83:66:67:e2:e2:11:31:ff:b4:67:ca:40:45:16: 5a:91:d0:5f:a8:7f:2a:59:d5:79:76:31:11:6d:7a: 1f:2f:93:87:04:ee:33:3f:34:ea:c4:41:e6:de:80: 24:05:55:5a:fd:b6:99:fe:8d:87:51:03:85:a8:86: 05:c6:c4:fe:ce:a2:ad:86:f4:21:bc:4e:f1:65:00: 8d:f0:af:73:f7:1d:d1:bc:c8:bd:33:52:45:82:64: 38:e6:d2:41:4f:52:9d:39:5f:54:8f:63:22:f0:e4: d8:2f:f3:1b:09:25:25:f8:c2:b4:6f:bb:5a:b0:89: c1:16:28:97:d6:fa:a9:9e:ee:6c:a0:8e:f4:65:57: 00:38:3c:f9:72:70:7d:4c:b6:94:09:86:38:e0:f2: e6:f6:32:95:6a:e0:4f:e8:c4:87:e8:be:91:58:ce: 96:1f:04:42:a0:a3:82:dc:f4:4d:7c:96:57:31:87: 5b:09:e1:d8:d9:19:bb:9c:3a:ef:65:16:28:f8:d7: f1:5d:e6:5d:6a:4a:db:8e:66:35:b6:bc:f9:6a:81: 37:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:E4:3C:97:A8:12:10:24:76:64:8A:7D:A4:9C:FA:54:69:48:85:80 X509v3 Authority Key Identifier: keyid:8A:B5:B9:A9:36:87:97:A8:6B:AE:BC:81:F6:23:B3:F4:E7:86:F5:1A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/irW5qTaHl6hrrryB9iOz9OeG9Ro.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/64c431-5330-437b-b207-28fecc63398c/1/irW5qTaHl6hrrryB9iOz9OeG9Ro.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/64c431-5330-437b-b207-28fecc63398c/1/irW5qTaHl6hrrryB9iOz9OeG9Ro.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6d:4d:43:93:6f:40:bd:a1:56:4b:b3:0a:01:87:03:80:a8:43: b7:d1:59:a3:08:a2:1e:a3:b4:83:19:0c:96:25:6a:f9:2e:d6: 1f:59:84:c2:e7:1a:70:0f:5d:8e:99:9c:30:c6:b3:bd:5c:36: 24:ec:54:60:39:23:17:67:51:0b:b1:df:6c:ff:b0:ae:95:43: 0b:88:a9:30:9d:40:4b:77:36:80:23:1f:f5:33:c5:dd:00:08: 2a:31:c3:24:43:54:d7:b6:e9:97:94:5a:a1:e9:68:96:be:29: 77:0b:7f:4c:ac:d1:53:dc:aa:3a:47:9c:ca:52:a3:b1:9b:64: 20:09:05:b9:3f:8e:ee:bc:72:34:fd:22:c6:8a:27:d0:40:6e: da:8f:6c:44:7c:5f:b4:08:ff:88:57:dc:b6:3c:5c:60:31:58: 39:29:7e:4d:f5:d1:5b:b2:89:ad:48:11:0d:85:70:36:f9:36: 2f:23:d5:47:dc:07:f1:ec:10:81:94:6d:aa:b7:80:b7:6f:55: e9:da:40:79:10:6c:55:4b:27:db:28:98:e7:8e:1b:8e:42:c7: c9:b5:88:af:75:56:b1:b7:0d:17:1e:5c:a0:ab:ec:7b:d8:24: 17:db:4a:87:94:6c:5c:aa:08:f2:46:9c:00:05:f3:c7:1d:3e: 04:00:df:a5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCRY6gnhsFdIDOYOykccXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhhYjViOWE5MzY4Nzk3YTg2YmFlYmM4MWY2MjNiM2Y0ZTc4 NmY1MWEwHhcNMjUxMjA2MDUwMTEzWhcNMjUxMjA3MDUwMTEzWjAzMTEwLwYDVQQD Eyg4YWU0M2M5N2E4MTIxMDI0NzY2NDhhN2RhNDljZmE1NDY5NDg4NTgwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqNfa+iKY/3bBEQG2ZBUCR+jT5WrP 2JwM0bY+BJVDlupJQEbmwGy+INkrP7NCg2Zn4uIRMf+0Z8pARRZakdBfqH8qWdV5 djERbXofL5OHBO4zPzTqxEHm3oAkBVVa/baZ/o2HUQOFqIYFxsT+zqKthvQhvE7x ZQCN8K9z9x3RvMi9M1JFgmQ45tJBT1KdOV9Uj2Mi8OTYL/MbCSUl+MK0b7tasInB FiiX1vqpnu5soI70ZVcAODz5cnB9TLaUCYY44PLm9jKVauBP6MSH6L6RWM6WHwRC oKOC3PRNfJZXMYdbCeHY2Rm7nDrvZRYo+NfxXeZdakrbjmY1trz5aoE3qQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIrkPJeoEhAkdmSKfaSc+lRpSIWAMB8GA1UdIwQY MBaAFIq1uak2h5eoa668gfYjs/TnhvUaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaXJXNXFUYUhsNmhycnJ5QjlpT3o5T2VHOVJvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYy82NGM0MzEtNTMzMC00MzdiLWIyMDct MjhmZWNjNjMzOThjLzEvaXJXNXFUYUhsNmhycnJ5QjlpT3o5T2VHOVJvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYy82NGM0MzEtNTMzMC00MzdiLWIyMDctMjhmZWNjNjMzOThj LzEvaXJXNXFUYUhsNmhycnJ5QjlpT3o5T2VHOVJvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbU1Dk29A vaFWS7MKAYcDgKhDt9FZowiiHqO0gxkMliVq+S7WH1mEwucacA9djpmcMMazvVw2 JOxUYDkjF2dRC7HfbP+wrpVDC4ipMJ1AS3c2gCMf9TPF3QAIKjHDJENU17bpl5Ra oelolr4pdwt/TKzRU9yqOkecylKjsZtkIAkFuT+O7rxyNP0ixoon0EBu2o9sRHxf tAj/iFfctjxcYDFYOSl+TfXRW7KJrUgRDYVwNvk2LyPVR9wH8ewQgZRtqreAt29V 6dpAeRBsVUsn2yiY544bjkLHybWIr3VWsbcNFx5coKvse9gkF9tKh5RsXKoI8kac AAXzxx0+BADfpQ== -----END CERTIFICATE-----Generated at Sat Dec 6 07:26:14 2025 by rpki-client