This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/1d312f-be9e-4a27-b22c-2f21f4524683/1/iP6ysFDVCtjOEMHC9Qf9uKUtAow.mft File: iP6ysFDVCtjOEMHC9Qf9uKUtAow.mft (raw, json) Hash identifier: Ci/4Yi7Hf3/k3Kv+uYK7gegyHY41V+DI2uR0JJRUB9U= Subject key identifier: C4:AB:26:F3:0E:8B:BF:12:22:F5:8D:73:6C:07:B4:03:50:F6:0F:65 Authority key identifier: 88:FE:B2:B0:50:D5:0A:D8:CE:10:C1:C2:F5:07:FD:B8:A5:2D:02:8C Certificate issuer: /CN=88feb2b050d50ad8ce10c1c2f507fdb8a52d028c Certificate serial: 019AF1640FB330FE6C3941335518990E2AF3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iP6ysFDVCtjOEMHC9Qf9uKUtAow.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/1d312f-be9e-4a27-b22c-2f21f4524683/1/iP6ysFDVCtjOEMHC9Qf9uKUtAow.mft Manifest number: 1470 Signing time: Sat 06 Dec 2025 02:00:57 +0000 Manifest this update: Sat 06 Dec 2025 02:00:57 +0000 Manifest next update: Sun 07 Dec 2025 02:00:57 +0000 Files and hashes: 1: PMwAzTvxWSjXFX28MV2s8k9HrhI.roa (hash: t71gV8OtnRcF1xNLqmy1I40UHYgIb7svkEMIzmfxErA=) 2: iP6ysFDVCtjOEMHC9Qf9uKUtAow.crl (hash: O8d9Z75FVMPPAnMc2hzgShOLZtKbkxrGCj/nD65uelo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/1d312f-be9e-4a27-b22c-2f21f4524683/1/iP6ysFDVCtjOEMHC9Qf9uKUtAow.crl rsync://rpki.ripe.net/repository/DEFAULT/af/1d312f-be9e-4a27-b22c-2f21f4524683/1/iP6ysFDVCtjOEMHC9Qf9uKUtAow.mft rsync://rpki.ripe.net/repository/DEFAULT/iP6ysFDVCtjOEMHC9Qf9uKUtAow.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:64:0f:b3:30:fe:6c:39:41:33:55:18:99:0e:2a:f3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=88feb2b050d50ad8ce10c1c2f507fdb8a52d028c Validity Not Before: Dec 6 02:00:57 2025 GMT Not After : Dec 7 02:00:57 2025 GMT Subject: CN=c4ab26f30e8bbf1222f58d736c07b40350f60f65 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:83:57:02:ee:df:62:0a:74:6e:22:b5:7b:67: e1:9a:37:14:5b:26:52:03:91:67:33:91:c6:22:54: 5d:4f:b8:a0:33:50:66:53:55:48:72:dc:c4:af:3b: e9:12:96:81:5d:4f:9a:71:f3:37:3b:dd:ed:93:9c: 6d:7f:d7:5e:11:51:8a:80:c1:63:ba:16:11:91:b4: db:c6:f6:11:5c:2e:ed:06:1f:98:f8:01:48:08:7b: 0e:c0:08:fe:9c:5c:bd:7f:8a:9b:0b:cd:c1:d6:4b: a1:ca:56:bf:ce:db:24:43:1f:ad:3e:4a:55:39:75: 0c:99:86:ae:13:ed:2b:28:d9:78:c5:7d:4b:85:c1: 69:75:a3:59:ea:3b:96:68:49:33:89:05:e1:2e:d5: be:45:65:06:ab:dc:c1:6a:94:29:62:e9:47:aa:b9: 7c:35:84:0d:7d:14:0a:d8:4b:93:fd:8f:7c:a1:1d: 36:93:88:04:1c:0e:cf:50:31:db:7f:d4:ef:c6:ac: 75:4d:f6:a7:97:fb:e4:ff:ee:e6:48:ba:ce:a8:d2: b9:f7:c8:f6:ac:7a:11:6a:e7:a9:d3:22:7e:6f:45: 79:8c:8b:b4:6c:b6:8e:ba:73:53:3c:7d:a0:dd:1f: b4:b1:85:3f:49:c4:84:a2:2c:a4:9a:74:20:0c:b3: c9:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:AB:26:F3:0E:8B:BF:12:22:F5:8D:73:6C:07:B4:03:50:F6:0F:65 X509v3 Authority Key Identifier: keyid:88:FE:B2:B0:50:D5:0A:D8:CE:10:C1:C2:F5:07:FD:B8:A5:2D:02:8C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iP6ysFDVCtjOEMHC9Qf9uKUtAow.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/1d312f-be9e-4a27-b22c-2f21f4524683/1/iP6ysFDVCtjOEMHC9Qf9uKUtAow.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/af/1d312f-be9e-4a27-b22c-2f21f4524683/1/iP6ysFDVCtjOEMHC9Qf9uKUtAow.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 26:ee:25:35:95:f3:32:0a:f5:b8:67:d9:c2:73:01:c3:52:26: 3e:19:40:a4:bc:98:c1:18:09:42:aa:78:88:55:64:4c:bd:4a: 08:a7:59:2f:81:74:ba:39:33:8f:00:f8:9e:62:3f:9e:d8:5e: 04:35:e3:a9:40:b9:c8:06:75:42:1c:99:0d:9c:a5:3e:b5:ef: c3:b4:fe:00:9b:67:43:bd:a2:83:d5:61:d5:d6:ef:74:3e:8f: 5a:73:41:55:10:06:a0:7c:17:52:ee:a2:44:2c:fd:7a:c2:c9: eb:3b:10:89:c0:ac:03:c2:57:9a:15:4a:a4:65:e6:32:80:58: c2:df:a0:4d:5c:2b:20:30:b8:17:f1:c2:cf:19:dc:e4:a4:f4: 58:56:42:94:ed:e0:24:a7:f5:47:ba:eb:b9:c6:39:05:6b:4f: 85:3c:f5:c6:a8:1b:91:70:b8:89:1c:52:2c:79:58:aa:95:7f: eb:10:3c:b5:54:8a:28:68:e8:a2:3e:00:59:f1:90:ea:93:c9: 9b:f5:d4:b1:57:aa:cd:88:0a:52:0d:fa:0d:d1:5f:04:6d:7d: c0:00:7a:22:a8:37:b0:0d:07:c7:30:b0:b3:b8:87:5a:69:18: a6:47:94:d0:29:55:44:6e:72:48:04:d6:f5:7b:fc:49:b6:08: f6:24:85:cc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxZA+zMP5sOUEzVRiZDirzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg4ZmViMmIwNTBkNTBhZDhjZTEwYzFjMmY1MDdmZGI4YTUy ZDAyOGMwHhcNMjUxMjA2MDIwMDU3WhcNMjUxMjA3MDIwMDU3WjAzMTEwLwYDVQQD EyhjNGFiMjZmMzBlOGJiZjEyMjJmNThkNzM2YzA3YjQwMzUwZjYwZjY1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuYNXAu7fYgp0biK1e2fhmjcUWyZS A5FnM5HGIlRdT7igM1BmU1VIctzErzvpEpaBXU+acfM3O93tk5xtf9deEVGKgMFj uhYRkbTbxvYRXC7tBh+Y+AFICHsOwAj+nFy9f4qbC83B1kuhyla/ztskQx+tPkpV OXUMmYauE+0rKNl4xX1LhcFpdaNZ6juWaEkziQXhLtW+RWUGq9zBapQpYulHqrl8 NYQNfRQK2EuT/Y98oR02k4gEHA7PUDHbf9Tvxqx1Tfanl/vk/+7mSLrOqNK598j2 rHoRauep0yJ+b0V5jIu0bLaOunNTPH2g3R+0sYU/ScSEoiykmnQgDLPJlwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMSrJvMOi78SIvWNc2wHtANQ9g9lMB8GA1UdIwQY MBaAFIj+srBQ1QrYzhDBwvUH/bilLQKMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaVA2eXNGRFZDdGpPRU1IQzlRZjl1S1V0QW93LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZi8xZDMxMmYtYmU5ZS00YTI3LWIyMmMt MmYyMWY0NTI0NjgzLzEvaVA2eXNGRFZDdGpPRU1IQzlRZjl1S1V0QW93Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZi8xZDMxMmYtYmU5ZS00YTI3LWIyMmMtMmYyMWY0NTI0Njgz LzEvaVA2eXNGRFZDdGpPRU1IQzlRZjl1S1V0QW93LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJu4lNZXz Mgr1uGfZwnMBw1ImPhlApLyYwRgJQqp4iFVkTL1KCKdZL4F0ujkzjwD4nmI/nthe BDXjqUC5yAZ1QhyZDZylPrXvw7T+AJtnQ72ig9Vh1dbvdD6PWnNBVRAGoHwXUu6i RCz9esLJ6zsQicCsA8JXmhVKpGXmMoBYwt+gTVwrIDC4F/HCzxnc5KT0WFZClO3g JKf1R7rrucY5BWtPhTz1xqgbkXC4iRxSLHlYqpV/6xA8tVSKKGjooj4AWfGQ6pPJ m/XUsVeqzYgKUg36DdFfBG19wAB6Iqg3sA0HxzCws7iHWmkYpkeU0ClVRG5ySATW 9Xv8SbYI9iSFzA== -----END CERTIFICATE-----Generated at Sat Dec 6 11:05:25 2025 by rpki-client