This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/fdf296-75e5-4635-9546-cea75d0cd671/1/iEeqkbBtjGuHKE8_RaIdwoH3ulU.mft File: iEeqkbBtjGuHKE8_RaIdwoH3ulU.mft (raw, json) Hash identifier: kJhoT5MFRTDimLyxDOwVsOwcKgpnTZ+oSuLGGHOrh4A= Subject key identifier: 51:B9:A2:5B:34:FF:EB:29:4C:47:BC:8D:65:CC:0E:FE:B4:5B:5B:D8 Authority key identifier: 88:47:AA:91:B0:6D:8C:6B:87:28:4F:3F:45:A2:1D:C2:81:F7:BA:55 Certificate issuer: /CN=8847aa91b06d8c6b87284f3f45a21dc281f7ba55 Certificate serial: 019AF5411C86A97C051DAD897BEE8BFD2382 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iEeqkbBtjGuHKE8_RaIdwoH3ulU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/fdf296-75e5-4635-9546-cea75d0cd671/1/iEeqkbBtjGuHKE8_RaIdwoH3ulU.mft Manifest number: 1811 Signing time: Sat 06 Dec 2025 20:01:16 +0000 Manifest this update: Sat 06 Dec 2025 20:01:16 +0000 Manifest next update: Sun 07 Dec 2025 20:01:16 +0000 Files and hashes: 1: 5jyvM7zUsDe1Lex0DtFpG8BBbZo.roa (hash: PCMtayIHrF6LrkVGhI1nprpYM2aF/ClvU/EhrY1JrmQ=) 2: Dv5aKJ2pDNq6PQejY9KYLcZgexI.roa (hash: LTTZywdBBEaru6D3i2kCVgDeRzQz8voiBDF73OfU/U0=) 3: WeiKZlrZMWBmHmFyIba_qVs-J6c.roa (hash: QeA2Crhl6GOiBpaxxnH+m2YNQAEe2rgEWLu15CjW2Bs=) 4: iEeqkbBtjGuHKE8_RaIdwoH3ulU.crl (hash: B1N/RoEWhCYieShgiaoQBHhTikn4/uYdVirWTfGtMDM=) 5: pd06xiSADpx6OPCHaHoDbZicX-c.roa (hash: 7rPwvwkbz2GM/1gSKgNiQpZdIpeLCjqX9IgRZrEoaZ4=) 6: twVpvlgGcn2wMFxLET5jabKj7lE.roa (hash: 6O74RoMA1Bml+kLutB1Hui+CE3ATKHf//KCCsZVvIEI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/fdf296-75e5-4635-9546-cea75d0cd671/1/iEeqkbBtjGuHKE8_RaIdwoH3ulU.crl rsync://rpki.ripe.net/repository/DEFAULT/b8/fdf296-75e5-4635-9546-cea75d0cd671/1/iEeqkbBtjGuHKE8_RaIdwoH3ulU.mft rsync://rpki.ripe.net/repository/DEFAULT/iEeqkbBtjGuHKE8_RaIdwoH3ulU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 20:01:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:41:1c:86:a9:7c:05:1d:ad:89:7b:ee:8b:fd:23:82 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8847aa91b06d8c6b87284f3f45a21dc281f7ba55 Validity Not Before: Dec 6 20:01:16 2025 GMT Not After : Dec 7 20:01:16 2025 GMT Subject: CN=51b9a25b34ffeb294c47bc8d65cc0efeb45b5bd8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:63:d6:3d:1e:93:50:24:bf:f9:5c:e2:51:a9: c2:be:33:50:de:84:91:c9:d0:a0:63:e3:13:00:a9: 65:68:b0:54:ad:ec:3c:41:b2:49:a0:d0:34:72:34: 7a:9f:60:a3:90:90:67:c5:39:39:2f:2b:cf:c3:55: 48:e9:c9:34:10:81:60:2a:90:2f:3e:cc:28:14:ab: 37:a7:83:9f:8e:4f:9a:24:6c:bc:d8:e3:46:31:b3: 79:f9:3a:d7:a4:50:b3:1b:ac:78:14:98:47:25:5b: 0d:aa:10:1c:b0:e4:e4:72:83:1a:2b:0e:4d:8e:b9: 47:72:02:2c:ff:bc:2f:b6:2b:86:a3:be:6b:13:ff: df:3f:e9:b6:46:2b:9e:c3:98:68:77:f5:11:10:57: e5:0c:d3:1f:4e:25:2d:d2:ac:a0:56:c8:76:9b:02: cc:86:b0:ca:90:c5:db:5a:0f:74:f5:9b:b9:da:b7: 67:82:53:be:88:99:fb:b2:ea:71:65:33:15:5a:8e: 5d:ed:55:77:ca:99:25:9d:ed:d7:0b:2b:37:d1:bd: e0:18:35:eb:ac:3f:c0:dd:6d:f8:a9:6b:be:ac:f0: cb:2d:6f:a4:45:d2:7b:93:0d:d3:0d:f2:ef:86:78: 07:f2:10:2d:10:14:98:25:ed:ba:ce:43:aa:5a:1c: af:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:B9:A2:5B:34:FF:EB:29:4C:47:BC:8D:65:CC:0E:FE:B4:5B:5B:D8 X509v3 Authority Key Identifier: keyid:88:47:AA:91:B0:6D:8C:6B:87:28:4F:3F:45:A2:1D:C2:81:F7:BA:55 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iEeqkbBtjGuHKE8_RaIdwoH3ulU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/fdf296-75e5-4635-9546-cea75d0cd671/1/iEeqkbBtjGuHKE8_RaIdwoH3ulU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/fdf296-75e5-4635-9546-cea75d0cd671/1/iEeqkbBtjGuHKE8_RaIdwoH3ulU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4c:94:0c:10:28:6c:6e:2f:cc:9d:30:b4:0b:88:fc:07:18:77: 4c:ac:f4:4c:f6:76:23:ea:8c:e8:9f:f3:35:85:6c:a1:47:db: 4b:b3:ab:39:f0:6d:9e:de:bf:e2:fc:37:45:26:fe:03:c4:f0: cd:37:b3:31:72:08:25:ba:c4:70:c4:1b:d8:be:0f:2e:4f:e9: 9b:9e:41:f5:1f:34:39:02:8a:29:36:c2:16:8f:d5:26:68:69: 21:aa:ee:38:e1:ba:d3:34:4a:1e:6a:44:18:99:19:ad:b9:b4: 53:18:9d:fd:56:6c:8b:78:ab:81:27:6a:e5:55:71:b8:82:4b: 79:b1:8b:15:6d:2d:6a:86:09:a9:bf:d2:fa:3f:8c:25:ec:25: 58:b4:ac:b4:77:e4:b9:36:62:23:e3:5c:4e:55:da:56:f1:7d: 87:99:5e:4a:63:2b:4f:fe:72:c9:56:e5:dc:cf:2e:4b:8c:62: 7e:fd:fe:00:f0:20:cd:7e:92:0d:17:b7:c2:67:6a:94:c5:03: 3e:e2:f8:d7:28:f6:e9:6f:61:ec:17:b4:f6:70:51:d9:ef:2e: 44:56:5a:23:82:fc:4d:90:74:9b:dc:0d:bb:e0:45:5a:6e:6d: d0:e5:9e:0f:e7:4d:6d:4c:2b:a4:dd:01:37:5c:b5:68:e7:43: 52:d7:af:fc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1QRyGqXwFHa2Je+6L/SOCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg4NDdhYTkxYjA2ZDhjNmI4NzI4NGYzZjQ1YTIxZGMyODFm N2JhNTUwHhcNMjUxMjA2MjAwMTE2WhcNMjUxMjA3MjAwMTE2WjAzMTEwLwYDVQQD Eyg1MWI5YTI1YjM0ZmZlYjI5NGM0N2JjOGQ2NWNjMGVmZWI0NWI1YmQ4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyGPWPR6TUCS/+VziUanCvjNQ3oSR ydCgY+MTAKllaLBUrew8QbJJoNA0cjR6n2CjkJBnxTk5LyvPw1VI6ck0EIFgKpAv PswoFKs3p4Ofjk+aJGy82ONGMbN5+TrXpFCzG6x4FJhHJVsNqhAcsOTkcoMaKw5N jrlHcgIs/7wvtiuGo75rE//fP+m2Riuew5hod/UREFflDNMfTiUt0qygVsh2mwLM hrDKkMXbWg909Zu52rdnglO+iJn7supxZTMVWo5d7VV3ypklne3XCys30b3gGDXr rD/A3W34qWu+rPDLLW+kRdJ7kw3TDfLvhngH8hAtEBSYJe26zkOqWhyvUwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFG5ols0/+spTEe8jWXMDv60W1vYMB8GA1UdIwQY MBaAFIhHqpGwbYxrhyhPP0WiHcKB97pVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaUVlcWtiQnRqR3VIS0U4X1JhSWR3b0gzdWxVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOC9mZGYyOTYtNzVlNS00NjM1LTk1NDYt Y2VhNzVkMGNkNjcxLzEvaUVlcWtiQnRqR3VIS0U4X1JhSWR3b0gzdWxVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iOC9mZGYyOTYtNzVlNS00NjM1LTk1NDYtY2VhNzVkMGNkNjcx LzEvaUVlcWtiQnRqR3VIS0U4X1JhSWR3b0gzdWxVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATJQMEChs bi/MnTC0C4j8Bxh3TKz0TPZ2I+qM6J/zNYVsoUfbS7OrOfBtnt6/4vw3RSb+A8Tw zTezMXIIJbrEcMQb2L4PLk/pm55B9R80OQKKKTbCFo/VJmhpIaruOOG60zRKHmpE GJkZrbm0Uxid/VZsi3irgSdq5VVxuIJLebGLFW0taoYJqb/S+j+MJewlWLSstHfk uTZiI+NcTlXaVvF9h5leSmMrT/5yyVbl3M8uS4xifv3+APAgzX6SDRe3wmdqlMUD PuL41yj26W9h7Be09nBR2e8uRFZaI4L8TZB0m9wNu+BFWm5t0OWeD+dNbUwrpN0B N1y1aOdDUtev/A== -----END CERTIFICATE-----Generated at Sun Dec 7 04:46:10 2025 by rpki-client