This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/1d312f-be9e-4a27-b22c-2f21f4524683/1/iP6ysFDVCtjOEMHC9Qf9uKUtAow.mft File: iP6ysFDVCtjOEMHC9Qf9uKUtAow.mft (raw, json) Hash identifier: 9EUGb3yjo0H/Ul8Uq4IsgwdI548ojzwj8rM7y4BzRF0= Subject key identifier: C7:6C:54:6A:BD:F4:80:DA:92:72:E2:A9:58:A0:00:EB:8E:8D:9A:F5 Authority key identifier: 88:FE:B2:B0:50:D5:0A:D8:CE:10:C1:C2:F5:07:FD:B8:A5:2D:02:8C Certificate issuer: /CN=88feb2b050d50ad8ce10c1c2f507fdb8a52d028c Certificate serial: 019B21ABB12930BA35DA71A59686309141FE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iP6ysFDVCtjOEMHC9Qf9uKUtAow.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/1d312f-be9e-4a27-b22c-2f21f4524683/1/iP6ysFDVCtjOEMHC9Qf9uKUtAow.mft Manifest number: 1489 Signing time: Mon 15 Dec 2025 11:00:58 +0000 Manifest this update: Mon 15 Dec 2025 11:00:58 +0000 Manifest next update: Tue 16 Dec 2025 11:00:58 +0000 Files and hashes: 1: PMwAzTvxWSjXFX28MV2s8k9HrhI.roa (hash: t71gV8OtnRcF1xNLqmy1I40UHYgIb7svkEMIzmfxErA=) 2: iP6ysFDVCtjOEMHC9Qf9uKUtAow.crl (hash: tHBkt2DqNbdPj3+AhxbdmSMke0+192qGWQ97bgX3TCA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/1d312f-be9e-4a27-b22c-2f21f4524683/1/iP6ysFDVCtjOEMHC9Qf9uKUtAow.crl rsync://rpki.ripe.net/repository/DEFAULT/af/1d312f-be9e-4a27-b22c-2f21f4524683/1/iP6ysFDVCtjOEMHC9Qf9uKUtAow.mft rsync://rpki.ripe.net/repository/DEFAULT/iP6ysFDVCtjOEMHC9Qf9uKUtAow.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 08:00:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:21:ab:b1:29:30:ba:35:da:71:a5:96:86:30:91:41:fe Signature Algorithm: sha256WithRSAEncryption Issuer: CN=88feb2b050d50ad8ce10c1c2f507fdb8a52d028c Validity Not Before: Dec 15 11:00:58 2025 GMT Not After : Dec 16 11:00:58 2025 GMT Subject: CN=c76c546abdf480da9272e2a958a000eb8e8d9af5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:37:3c:6a:aa:2f:4e:b6:80:87:d5:f2:fe:3a: 7d:0b:76:10:24:be:f8:58:95:05:e7:6f:9b:62:70: 84:29:f3:67:bc:74:71:3d:b4:6a:36:55:3f:a4:31: 10:cc:5c:1f:53:02:29:72:e3:21:39:40:73:5e:50: 35:ad:b7:07:24:ea:95:04:8a:2f:a1:48:f7:fd:6f: 2f:62:83:bb:2a:f0:95:33:d7:be:52:14:03:09:c8: dc:c3:a7:6c:88:2c:80:99:92:41:08:2b:41:37:e1: cb:d2:28:17:cf:f5:49:71:57:e1:ad:f9:19:97:bb: bc:e0:c5:9d:45:e0:d2:b1:ff:dc:41:31:74:17:77: 76:a5:b0:81:28:ae:f1:91:ba:2e:b3:af:88:9a:f2: 71:48:0f:d1:3a:da:18:d7:72:43:1f:04:ab:27:ea: 5e:d8:a2:c8:5a:68:44:76:14:75:85:00:5d:9b:40: 34:e7:89:e7:54:f7:e2:12:ce:9b:b1:a9:49:8d:9a: d6:21:63:b0:7b:41:c8:4a:d1:c1:62:2d:3e:60:c2: 29:03:0a:a0:b2:2f:eb:97:ee:05:31:0e:4e:99:b5: 80:15:6d:f9:8c:14:fd:4f:f8:ce:6a:49:a2:fe:67: 40:97:c7:75:d7:67:90:e6:06:15:de:56:a7:02:10: 2e:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:6C:54:6A:BD:F4:80:DA:92:72:E2:A9:58:A0:00:EB:8E:8D:9A:F5 X509v3 Authority Key Identifier: keyid:88:FE:B2:B0:50:D5:0A:D8:CE:10:C1:C2:F5:07:FD:B8:A5:2D:02:8C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iP6ysFDVCtjOEMHC9Qf9uKUtAow.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/1d312f-be9e-4a27-b22c-2f21f4524683/1/iP6ysFDVCtjOEMHC9Qf9uKUtAow.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/af/1d312f-be9e-4a27-b22c-2f21f4524683/1/iP6ysFDVCtjOEMHC9Qf9uKUtAow.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 41:b4:07:dc:9a:85:f4:e8:7f:4d:eb:eb:19:0e:a6:88:f5:cc: 9e:a8:5d:20:1d:58:35:8a:de:ab:1b:0b:c1:c4:8f:a4:90:8f: f8:b0:bc:af:c0:08:31:66:c4:78:fb:53:1e:f4:8d:cb:86:38: 84:07:01:87:aa:9d:78:0e:87:1c:12:71:15:94:51:43:a3:78: e4:ba:09:77:e5:e4:9b:47:0e:63:cd:ec:bd:10:27:b7:2c:76: 2c:ca:40:3c:13:bd:01:d3:f1:ec:2b:af:28:0a:e4:06:c0:50: 78:74:3f:c3:a8:6e:8e:fc:92:af:a0:0d:3b:97:e6:ae:ae:ba: 50:2c:50:f3:e6:77:b1:0b:b8:72:a0:7d:3a:39:5a:14:02:9a: eb:97:19:f3:1c:33:16:e9:40:b4:3a:6e:39:4a:ef:e0:4e:4c: 42:ee:23:fb:46:70:f5:e8:83:35:b5:20:8e:50:5d:19:ff:70: 6d:b4:fd:5e:28:75:1d:77:3a:58:ce:ef:4e:6b:94:3a:31:b7: 43:7c:b7:27:41:50:6f:d0:a6:bf:41:b9:e3:e5:9d:5d:86:af: 29:33:ee:ee:72:6b:a6:3e:0b:07:c2:02:49:90:d2:52:70:c8: 0b:f9:e1:64:f5:37:16:60:d8:28:ef:69:3a:74:da:f5:53:0a: 60:16:6c:12 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZshq7EpMLo12nGlloYwkUH+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg4ZmViMmIwNTBkNTBhZDhjZTEwYzFjMmY1MDdmZGI4YTUy ZDAyOGMwHhcNMjUxMjE1MTEwMDU4WhcNMjUxMjE2MTEwMDU4WjAzMTEwLwYDVQQD EyhjNzZjNTQ2YWJkZjQ4MGRhOTI3MmUyYTk1OGEwMDBlYjhlOGQ5YWY1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3zc8aqovTraAh9Xy/jp9C3YQJL74 WJUF52+bYnCEKfNnvHRxPbRqNlU/pDEQzFwfUwIpcuMhOUBzXlA1rbcHJOqVBIov oUj3/W8vYoO7KvCVM9e+UhQDCcjcw6dsiCyAmZJBCCtBN+HL0igXz/VJcVfhrfkZ l7u84MWdReDSsf/cQTF0F3d2pbCBKK7xkbous6+ImvJxSA/ROtoY13JDHwSrJ+pe 2KLIWmhEdhR1hQBdm0A054nnVPfiEs6bsalJjZrWIWOwe0HIStHBYi0+YMIpAwqg si/rl+4FMQ5OmbWAFW35jBT9T/jOakmi/mdAl8d112eQ5gYV3lanAhAuXwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMdsVGq99IDaknLiqVigAOuOjZr1MB8GA1UdIwQY MBaAFIj+srBQ1QrYzhDBwvUH/bilLQKMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaVA2eXNGRFZDdGpPRU1IQzlRZjl1S1V0QW93LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZi8xZDMxMmYtYmU5ZS00YTI3LWIyMmMt MmYyMWY0NTI0NjgzLzEvaVA2eXNGRFZDdGpPRU1IQzlRZjl1S1V0QW93Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZi8xZDMxMmYtYmU5ZS00YTI3LWIyMmMtMmYyMWY0NTI0Njgz LzEvaVA2eXNGRFZDdGpPRU1IQzlRZjl1S1V0QW93LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQbQH3JqF 9Oh/TevrGQ6miPXMnqhdIB1YNYreqxsLwcSPpJCP+LC8r8AIMWbEePtTHvSNy4Y4 hAcBh6qdeA6HHBJxFZRRQ6N45LoJd+Xkm0cOY83svRAntyx2LMpAPBO9AdPx7Cuv KArkBsBQeHQ/w6hujvySr6ANO5fmrq66UCxQ8+Z3sQu4cqB9OjlaFAKa65cZ8xwz FulAtDpuOUrv4E5MQu4j+0Zw9eiDNbUgjlBdGf9wbbT9Xih1HXc6WM7vTmuUOjG3 Q3y3J0FQb9Cmv0G54+WdXYavKTPu7nJrpj4LB8ICSZDSUnDIC/nhZPU3FmDYKO9p OnTa9VMKYBZsEg== -----END CERTIFICATE-----Generated at Mon Dec 15 15:32:36 2025 by rpki-client