This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/5360e7-f02a-4737-99c7-febb64b5e164/1/IvNEpj3LcOiQV9644nYdxFFliBo.mft File: IvNEpj3LcOiQV9644nYdxFFliBo.mft (raw, json) Hash identifier: Wsil1jjVvpyFG1K2otJ3VirigUhMGkVeC5iCfC4suDo= Subject key identifier: 5E:E3:B5:AE:01:B3:8E:EE:33:F4:CC:B0:C3:C2:9C:72:EF:A7:29:9F Authority key identifier: 22:F3:44:A6:3D:CB:70:E8:90:57:DE:B8:E2:76:1D:C4:51:65:88:1A Certificate issuer: /CN=22f344a63dcb70e89057deb8e2761dc45165881a Certificate serial: 019AF163EC9119E78EA8C4DE7BB89C9220AD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IvNEpj3LcOiQV9644nYdxFFliBo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/5360e7-f02a-4737-99c7-febb64b5e164/1/IvNEpj3LcOiQV9644nYdxFFliBo.mft Manifest number: 133A Signing time: Sat 06 Dec 2025 02:00:48 +0000 Manifest this update: Sat 06 Dec 2025 02:00:48 +0000 Manifest next update: Sun 07 Dec 2025 02:00:48 +0000 Files and hashes: 1: 1LZHe8Ty2Ecrf76DoSxkwAbV2Ec.roa (hash: z+MqJylNHYWp3NqFgOzBgiG5CjCUL0P0np/w7hgCYN0=) 2: AEoJBTXGdbNGEHCG2xrZYkY-m48.roa (hash: wcifUjqJ1L+wv580+2agiHMA4f6pyHuaF1nnabsyT3o=) 3: B2yHxHbEm9GmCNVxvcrZFxarDHM.roa (hash: bgz2Ull5wnGI0goKFONDZrQdSvmkexqh99prCGIqdUQ=) 4: IvNEpj3LcOiQV9644nYdxFFliBo.crl (hash: oOyccOLc/t1XzrUluxvmwEkVq0seJhqTEOz/hfOSlG8=) 5: K2GN8Q4wuI9TOv_O5rPOY6UOVuw.roa (hash: x81e2mavHKbR2e6iStjfXJXmlwyjRYwbRrSYSDYjLu8=) 6: Rqg6__jB0I59YqNi0V3OG_MGBp8.roa (hash: dXgwdC+H6aPwaIuzA6ajakpboy2/DkMtHCDvVma8C2I=) 7: Tj6608f-1a6fYqa_z-5d8FeCzjM.roa (hash: anRpP2NDSpzZ3SrjHh0tnQVCsHbMwvsJQ4PMBnavsdk=) 8: btDz2u-l_wj6W8KIfCMAlnW0P24.roa (hash: sfK0ptsNBV2+LnneQNYSIHQ7XVoVHUaME+qXGkJagVw=) 9: d-S7YgetzEwMrrxbSdTzmhWIDOU.roa (hash: 3G/Eu15jWX5wqv+LVcJ9iVdKlsYAltsvYTFwqOC6jKg=) 10: f6GDqb9nJIgj_F1z2AEUbY6YnmQ.roa (hash: jKya+L5/uP3Dz7PfxR54wCUY1sMiu+aWWncKs50X+nY=) 11: hI0tUC415NEH9XUX9W5_NYjc6b0.roa (hash: vIUGWL+jywzP4nOG3s5yRhGXD3r26uV/UoGJVBb5x6o=) 12: xXfwL3nXnXFEEVcYcv_dc6Fb5P4.roa (hash: sO38IVaxxxNJ8+o5mB4XNWptxay9N15BzuBDzJ2RLLI=) 13: y72ioZ9vcp7DqGWY8rVyBxu728s.roa (hash: PbIGmtWe0+HcZ3GBbrnUP6pZwodFKUDC/Q3NIX5q6Jg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/5360e7-f02a-4737-99c7-febb64b5e164/1/IvNEpj3LcOiQV9644nYdxFFliBo.crl rsync://rpki.ripe.net/repository/DEFAULT/b6/5360e7-f02a-4737-99c7-febb64b5e164/1/IvNEpj3LcOiQV9644nYdxFFliBo.mft rsync://rpki.ripe.net/repository/DEFAULT/IvNEpj3LcOiQV9644nYdxFFliBo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:63:ec:91:19:e7:8e:a8:c4:de:7b:b8:9c:92:20:ad Signature Algorithm: sha256WithRSAEncryption Issuer: CN=22f344a63dcb70e89057deb8e2761dc45165881a Validity Not Before: Dec 6 02:00:48 2025 GMT Not After : Dec 7 02:00:48 2025 GMT Subject: CN=5ee3b5ae01b38eee33f4ccb0c3c29c72efa7299f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:56:a0:19:89:65:fe:ac:07:a9:3f:50:c5:8e: 54:d2:f8:04:77:8c:74:fe:b8:99:ac:62:28:ed:f8: 89:f2:ec:b4:18:b9:b3:52:ce:7e:f3:38:62:7a:e9: 9f:8f:82:a8:1d:be:df:76:5e:a9:cc:4d:38:cb:de: 78:da:65:5b:71:b6:a8:73:98:05:94:86:a1:71:15: 20:65:42:09:0c:94:16:24:6d:0d:75:a3:75:27:30: ac:79:63:a4:16:76:f4:35:f1:e6:0e:d7:70:97:8e: 3d:82:53:1f:a8:1b:71:b2:49:59:ec:d7:8f:54:8c: fa:9a:e1:d7:f1:67:99:00:40:23:a0:c1:d6:56:e5: f2:1d:ec:62:42:55:d4:3d:b9:f2:71:71:f1:e1:b9: e2:d4:52:0a:da:c5:09:7d:a0:e1:9d:f8:cf:e9:48: 52:30:3d:6d:f2:35:f7:76:92:da:cd:ad:b2:5b:3a: 74:d9:68:76:fa:b4:ec:8a:b3:aa:fa:9e:71:1a:dc: b0:2e:45:0f:b2:e6:19:da:62:05:61:89:2f:b4:8d: 0c:7f:7a:52:d9:2a:5b:b1:6d:3c:4c:96:08:fa:5d: 33:0a:e2:f9:15:62:f2:e4:12:1c:df:8d:0d:cc:55: b1:0e:0b:bb:e9:9e:f6:92:16:e9:e8:fc:52:a2:99: ac:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:E3:B5:AE:01:B3:8E:EE:33:F4:CC:B0:C3:C2:9C:72:EF:A7:29:9F X509v3 Authority Key Identifier: keyid:22:F3:44:A6:3D:CB:70:E8:90:57:DE:B8:E2:76:1D:C4:51:65:88:1A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IvNEpj3LcOiQV9644nYdxFFliBo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/5360e7-f02a-4737-99c7-febb64b5e164/1/IvNEpj3LcOiQV9644nYdxFFliBo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/5360e7-f02a-4737-99c7-febb64b5e164/1/IvNEpj3LcOiQV9644nYdxFFliBo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1b:4b:75:f1:4d:c6:3b:c4:49:cc:4d:79:2a:90:4c:53:07:7b: 08:a3:11:f4:0a:27:c5:36:46:bb:56:0d:09:d0:89:06:d9:da: ff:93:d5:d6:0a:b6:65:f6:9b:d3:13:fa:4b:89:b7:25:18:64: a4:95:59:4e:75:e7:91:13:b8:cf:18:80:cf:24:58:be:59:e8: 83:c0:9a:5b:78:eb:48:84:78:7a:f1:61:1d:e4:72:9f:03:e9: ac:fb:87:c8:7f:eb:be:51:39:40:6a:78:0d:b1:b8:86:cc:07: bb:72:58:90:37:18:6c:fd:4c:16:46:a0:56:f4:de:60:13:c5: 6c:93:72:3d:9c:25:b9:76:b3:78:67:84:df:ae:97:29:30:e0: e4:8c:f5:38:7c:09:ec:f1:68:46:a2:80:60:c9:a1:71:a6:39: 7d:db:1d:e7:0e:6b:4f:88:02:c8:c8:97:51:29:6b:86:f5:c9: b0:9e:3b:09:f9:e1:c8:85:ec:35:a4:27:b1:3f:95:f0:85:7a: 3e:a2:9e:d7:c3:25:a1:8d:81:77:b9:75:8f:98:09:4d:51:28: ec:2d:38:c6:b9:e4:d6:83:b8:14:13:fa:5d:4f:4b:0e:95:16: 6a:a3:55:36:bb:e3:0e:bb:ee:ac:95:07:a5:2c:d0:36:e9:0d: 94:58:0f:21 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxY+yRGeeOqMTee7ickiCtMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIyZjM0NGE2M2RjYjcwZTg5MDU3ZGViOGUyNzYxZGM0NTE2 NTg4MWEwHhcNMjUxMjA2MDIwMDQ4WhcNMjUxMjA3MDIwMDQ4WjAzMTEwLwYDVQQD Eyg1ZWUzYjVhZTAxYjM4ZWVlMzNmNGNjYjBjM2MyOWM3MmVmYTcyOTlmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwFagGYll/qwHqT9QxY5U0vgEd4x0 /riZrGIo7fiJ8uy0GLmzUs5+8zhieumfj4KoHb7fdl6pzE04y9542mVbcbaoc5gF lIahcRUgZUIJDJQWJG0NdaN1JzCseWOkFnb0NfHmDtdwl449glMfqBtxsklZ7NeP VIz6muHX8WeZAEAjoMHWVuXyHexiQlXUPbnycXHx4bni1FIK2sUJfaDhnfjP6UhS MD1t8jX3dpLaza2yWzp02Wh2+rTsirOq+p5xGtywLkUPsuYZ2mIFYYkvtI0Mf3pS 2SpbsW08TJYI+l0zCuL5FWLy5BIc340NzFWxDgu76Z72khbp6PxSopmsDQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFF7jta4Bs47uM/TMsMPCnHLvpymfMB8GA1UdIwQY MBaAFCLzRKY9y3DokFfeuOJ2HcRRZYgaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSXZORXBqM0xjT2lRVjk2NDRuWWR4RkZsaUJvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNi81MzYwZTctZjAyYS00NzM3LTk5Yzct ZmViYjY0YjVlMTY0LzEvSXZORXBqM0xjT2lRVjk2NDRuWWR4RkZsaUJvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNi81MzYwZTctZjAyYS00NzM3LTk5YzctZmViYjY0YjVlMTY0 LzEvSXZORXBqM0xjT2lRVjk2NDRuWWR4RkZsaUJvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAG0t18U3G O8RJzE15KpBMUwd7CKMR9AonxTZGu1YNCdCJBtna/5PV1gq2Zfab0xP6S4m3JRhk pJVZTnXnkRO4zxiAzyRYvlnog8CaW3jrSIR4evFhHeRynwPprPuHyH/rvlE5QGp4 DbG4hswHu3JYkDcYbP1MFkagVvTeYBPFbJNyPZwluXazeGeE366XKTDg5Iz1OHwJ 7PFoRqKAYMmhcaY5fdsd5w5rT4gCyMiXUSlrhvXJsJ47CfnhyIXsNaQnsT+V8IV6 PqKe18MloY2Bd7l1j5gJTVEo7C04xrnk1oO4FBP6XU9LDpUWaqNVNrvjDrvurJUH pSzQNukNlFgPIQ== -----END CERTIFICATE-----Generated at Sat Dec 6 07:53:32 2025 by rpki-client