This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/f86013-fe1d-41be-afe8-c8fc6163942b/1/IEY2c5AiSgdoTXl3-RZaCVDwPVQ.mft File: IEY2c5AiSgdoTXl3-RZaCVDwPVQ.mft (raw, json) Hash identifier: 8cz4uOXTK/QivUL1BxkSY5kaFTLubxrrOicV3+0dVKQ= Subject key identifier: 82:E9:8A:59:FC:7E:22:DF:B7:14:15:B0:6E:DA:EB:00:80:E1:2D:6C Authority key identifier: 20:46:36:73:90:22:4A:07:68:4D:79:77:F9:16:5A:09:50:F0:3D:54 Certificate issuer: /CN=2046367390224a07684d7977f9165a0950f03d54 Certificate serial: 019B3042F5514CA2BC4A34B7723624EC6321 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IEY2c5AiSgdoTXl3-RZaCVDwPVQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/f86013-fe1d-41be-afe8-c8fc6163942b/1/IEY2c5AiSgdoTXl3-RZaCVDwPVQ.mft Manifest number: 148E Signing time: Thu 18 Dec 2025 07:00:52 +0000 Manifest this update: Thu 18 Dec 2025 07:00:52 +0000 Manifest next update: Fri 19 Dec 2025 07:00:52 +0000 Files and hashes: 1: ICVbUtHfbHYJwV7ucXI2K_14ylU.roa (hash: d0or5/9y3dY5/PzUShTK41fVXw4MjWFCN4HTk7PqBCg=) 2: IEY2c5AiSgdoTXl3-RZaCVDwPVQ.crl (hash: I6k9Kq+1ylG2RlynaU1/mwKMh4pKtF3tF0HMEjFPNPE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/f86013-fe1d-41be-afe8-c8fc6163942b/1/IEY2c5AiSgdoTXl3-RZaCVDwPVQ.crl rsync://rpki.ripe.net/repository/DEFAULT/b0/f86013-fe1d-41be-afe8-c8fc6163942b/1/IEY2c5AiSgdoTXl3-RZaCVDwPVQ.mft rsync://rpki.ripe.net/repository/DEFAULT/IEY2c5AiSgdoTXl3-RZaCVDwPVQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 07:00:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:30:42:f5:51:4c:a2:bc:4a:34:b7:72:36:24:ec:63:21 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2046367390224a07684d7977f9165a0950f03d54 Validity Not Before: Dec 18 07:00:52 2025 GMT Not After : Dec 19 07:00:52 2025 GMT Subject: CN=82e98a59fc7e22dfb71415b06edaeb0080e12d6c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:51:38:89:22:52:a8:5b:67:cc:5e:1b:28:89: 6f:27:42:78:43:f7:8d:b0:01:fb:4c:3e:81:6c:0b: d2:de:8c:55:c0:34:de:e1:5b:53:be:aa:59:82:56: d7:bf:77:6b:4f:bf:20:a8:b4:2d:30:3b:08:14:f7: ee:c0:68:79:eb:ca:91:cd:f9:d4:b2:9d:03:60:cc: 4e:22:d9:d8:80:25:33:a1:f1:8e:bb:e6:3a:bb:4e: 75:95:75:4b:93:18:40:71:ed:a2:64:4f:7e:bf:0d: e5:3c:db:f2:f6:75:09:d6:58:a4:6e:2e:30:b8:3f: 73:9e:c5:bf:91:da:65:60:ca:9f:5a:ca:33:a7:66: 27:db:6f:bc:39:e5:86:6a:91:7c:42:98:37:80:81: 0b:8f:c6:ec:c8:e0:56:f7:7a:ac:d1:50:34:3b:e3: 87:3f:92:38:ad:73:09:7e:cf:20:dd:4f:ac:6e:26: 4f:be:86:c1:a1:d4:38:cb:87:4a:1d:2f:9a:d2:2b: 9b:ff:36:17:e4:a2:6c:2c:6f:b1:b0:94:ab:0d:10: 5f:40:65:55:ce:04:c5:70:c7:3a:4f:b4:0e:ec:6c: 0a:72:15:4b:b4:1b:e5:da:30:cb:20:46:f5:d0:ac: d9:28:63:00:eb:0c:62:6e:ed:1a:14:49:ef:26:fe: d5:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:E9:8A:59:FC:7E:22:DF:B7:14:15:B0:6E:DA:EB:00:80:E1:2D:6C X509v3 Authority Key Identifier: keyid:20:46:36:73:90:22:4A:07:68:4D:79:77:F9:16:5A:09:50:F0:3D:54 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IEY2c5AiSgdoTXl3-RZaCVDwPVQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/f86013-fe1d-41be-afe8-c8fc6163942b/1/IEY2c5AiSgdoTXl3-RZaCVDwPVQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/f86013-fe1d-41be-afe8-c8fc6163942b/1/IEY2c5AiSgdoTXl3-RZaCVDwPVQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 18:7b:30:70:87:b0:af:af:21:3d:ae:75:d5:83:1a:bc:e3:4f: 80:ec:bb:0a:88:74:75:88:32:ef:75:6f:1e:46:ab:03:eb:ee: 45:40:39:b4:02:52:20:20:96:39:f9:e7:e8:1c:9e:9a:c7:c8: e6:d1:6c:c9:76:e3:5e:e6:ee:be:04:ba:4c:84:53:82:fe:0f: f2:ca:db:d9:37:94:a3:14:be:46:cb:8c:af:77:df:4b:75:31: 64:2a:5f:c4:08:ea:cd:56:fc:82:9f:cc:fe:80:cf:b3:ea:50: 81:c7:fd:25:9c:83:56:9d:22:4f:ca:ae:0b:85:b4:25:de:20: c1:a9:d4:ce:b0:bc:65:1f:b9:ff:a2:fd:2d:84:73:74:24:0b: 6b:3b:b4:7c:b5:5a:49:a6:02:97:53:c1:0f:db:d6:95:66:eb: 61:78:c9:ad:19:80:a7:c0:d9:51:63:0f:04:ef:8b:47:27:2a: 39:4d:2f:70:2a:5f:8b:4c:1f:7d:ec:13:08:95:2a:53:41:06: ef:50:e3:1a:44:c9:c1:4e:9e:e7:89:4a:3f:b0:aa:bc:81:74: 68:5b:12:ed:5a:76:e9:2b:8a:f8:7a:db:95:6e:17:d6:6f:e5: f3:66:f8:6b:49:4c:70:44:55:d7:32:6b:4c:c0:d9:02:fa:89: 97:3b:2b:11 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZswQvVRTKK8SjS3cjYk7GMhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIwNDYzNjczOTAyMjRhMDc2ODRkNzk3N2Y5MTY1YTA5NTBm MDNkNTQwHhcNMjUxMjE4MDcwMDUyWhcNMjUxMjE5MDcwMDUyWjAzMTEwLwYDVQQD Eyg4MmU5OGE1OWZjN2UyMmRmYjcxNDE1YjA2ZWRhZWIwMDgwZTEyZDZjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwFE4iSJSqFtnzF4bKIlvJ0J4Q/eN sAH7TD6BbAvS3oxVwDTe4VtTvqpZglbXv3drT78gqLQtMDsIFPfuwGh568qRzfnU sp0DYMxOItnYgCUzofGOu+Y6u051lXVLkxhAce2iZE9+vw3lPNvy9nUJ1likbi4w uD9znsW/kdplYMqfWsozp2Yn22+8OeWGapF8Qpg3gIELj8bsyOBW93qs0VA0O+OH P5I4rXMJfs8g3U+sbiZPvobBodQ4y4dKHS+a0iub/zYX5KJsLG+xsJSrDRBfQGVV zgTFcMc6T7QO7GwKchVLtBvl2jDLIEb10KzZKGMA6wxibu0aFEnvJv7VTwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFILpiln8fiLftxQVsG7a6wCA4S1sMB8GA1UdIwQY MBaAFCBGNnOQIkoHaE15d/kWWglQ8D1UMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSUVZMmM1QWlTZ2RvVFhsMy1SWmFDVkR3UFZRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC9mODYwMTMtZmUxZC00MWJlLWFmZTgt YzhmYzYxNjM5NDJiLzEvSUVZMmM1QWlTZ2RvVFhsMy1SWmFDVkR3UFZRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMC9mODYwMTMtZmUxZC00MWJlLWFmZTgtYzhmYzYxNjM5NDJi LzEvSUVZMmM1QWlTZ2RvVFhsMy1SWmFDVkR3UFZRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGHswcIew r68hPa511YMavONPgOy7Coh0dYgy73VvHkarA+vuRUA5tAJSICCWOfnn6ByemsfI 5tFsyXbjXubuvgS6TIRTgv4P8srb2TeUoxS+RsuMr3ffS3UxZCpfxAjqzVb8gp/M /oDPs+pQgcf9JZyDVp0iT8quC4W0Jd4gwanUzrC8ZR+5/6L9LYRzdCQLazu0fLVa SaYCl1PBD9vWlWbrYXjJrRmAp8DZUWMPBO+LRycqOU0vcCpfi0wffewTCJUqU0EG 71DjGkTJwU6e54lKP7CqvIF0aFsS7Vp26SuK+HrblW4X1m/l82b4a0lMcERV1zJr TMDZAvqJlzsrEQ== -----END CERTIFICATE-----Generated at Thu Dec 18 14:55:05 2025 by rpki-client