This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/a6cffc-be64-4d08-94a6-a15f0e78a5a9/1/Iz44KEEbr6sAbnX9DdX1-e9V7CU.mft File: Iz44KEEbr6sAbnX9DdX1-e9V7CU.mft (raw, json) Hash identifier: Vu5beFrXwheRprTGqN8O/Gplym7rka2fpvnD7HAFlJQ= Subject key identifier: 1B:1F:1B:A7:FA:1F:D2:AB:2F:13:FF:77:B7:EF:62:20:B2:ED:BA:D1 Authority key identifier: 23:3E:38:28:41:1B:AF:AB:00:6E:75:FD:0D:D5:F5:F9:EF:55:EC:25 Certificate issuer: /CN=233e3828411bafab006e75fd0dd5f5f9ef55ec25 Certificate serial: 019AF464D7525FF352155D381D1E3FD753D3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Iz44KEEbr6sAbnX9DdX1-e9V7CU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/a6cffc-be64-4d08-94a6-a15f0e78a5a9/1/Iz44KEEbr6sAbnX9DdX1-e9V7CU.mft Manifest number: 1410 Signing time: Sat 06 Dec 2025 16:00:40 +0000 Manifest this update: Sat 06 Dec 2025 16:00:40 +0000 Manifest next update: Sun 07 Dec 2025 16:00:40 +0000 Files and hashes: 1: Iz44KEEbr6sAbnX9DdX1-e9V7CU.crl (hash: 6ApSphiKV0mb5236cA2lpbj2mGEdOcJNEeB651a+iPM=) 2: NCoehdmUvbF9hjrmMyI6BY_y1Tg.roa (hash: oKUbCP0RxT560oSwid+jhRboIkVkQAnDdP+HNoQNqUU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/a6cffc-be64-4d08-94a6-a15f0e78a5a9/1/Iz44KEEbr6sAbnX9DdX1-e9V7CU.crl rsync://rpki.ripe.net/repository/DEFAULT/ba/a6cffc-be64-4d08-94a6-a15f0e78a5a9/1/Iz44KEEbr6sAbnX9DdX1-e9V7CU.mft rsync://rpki.ripe.net/repository/DEFAULT/Iz44KEEbr6sAbnX9DdX1-e9V7CU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 16:00:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:64:d7:52:5f:f3:52:15:5d:38:1d:1e:3f:d7:53:d3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=233e3828411bafab006e75fd0dd5f5f9ef55ec25 Validity Not Before: Dec 6 16:00:40 2025 GMT Not After : Dec 7 16:00:40 2025 GMT Subject: CN=1b1f1ba7fa1fd2ab2f13ff77b7ef6220b2edbad1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:1b:a2:2b:c9:8f:9e:8c:49:97:05:3f:9b:dd: 21:86:6e:2a:5b:ed:dc:b9:cb:70:4c:35:ed:31:db: aa:1f:32:aa:04:9d:47:d5:96:a8:29:e0:73:13:c6: ad:f4:66:15:71:4e:c5:6b:66:41:6d:5b:a9:9e:5f: 9a:e3:fc:63:c8:9f:75:02:c9:d8:f6:f2:04:b0:14: c1:17:6f:47:90:52:99:1c:02:b3:35:a7:f2:da:01: 53:52:3e:ef:a2:54:75:fd:fe:b0:d1:e6:8f:32:e6: 81:11:2e:c7:29:19:c0:32:eb:44:ab:e4:8e:c1:b0: 07:22:50:7e:60:58:34:74:30:ce:c2:ee:d7:fe:1b: d8:65:af:d1:74:2a:8e:d3:c0:f3:ba:61:ac:b1:7d: 9f:47:7c:f5:1c:c9:de:3f:c8:31:60:70:fc:f6:65: 51:6f:29:1f:50:b7:50:10:f0:ff:4d:88:1e:55:57: ae:1c:24:fa:74:2c:01:94:6d:10:85:b0:93:0a:65: bb:0e:f0:17:8a:a1:9e:a1:81:30:57:60:9a:27:29: f6:2e:4e:72:e3:d9:f2:42:9c:67:a4:cf:1b:5d:b9: 5b:40:f6:cc:80:14:86:fb:e2:8a:a0:68:c6:51:18: 29:d6:38:d0:bf:1d:2c:a2:3f:d0:98:ec:d2:f8:c8: 8a:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:1F:1B:A7:FA:1F:D2:AB:2F:13:FF:77:B7:EF:62:20:B2:ED:BA:D1 X509v3 Authority Key Identifier: keyid:23:3E:38:28:41:1B:AF:AB:00:6E:75:FD:0D:D5:F5:F9:EF:55:EC:25 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Iz44KEEbr6sAbnX9DdX1-e9V7CU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/a6cffc-be64-4d08-94a6-a15f0e78a5a9/1/Iz44KEEbr6sAbnX9DdX1-e9V7CU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/a6cffc-be64-4d08-94a6-a15f0e78a5a9/1/Iz44KEEbr6sAbnX9DdX1-e9V7CU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 75:2a:fd:ec:a5:31:ea:53:b6:b0:dd:fa:d0:c9:f3:2d:fb:f5: 91:05:3f:d5:fc:5d:18:d9:43:eb:1f:24:3f:ff:48:50:3f:56: a9:8c:a8:6e:64:9d:3c:d7:9b:5f:f7:a0:68:08:df:d6:c4:f6: 1c:d2:88:f7:ae:0b:14:8e:16:db:4b:0c:c1:fd:5f:1c:4f:91: 19:97:04:b4:00:0d:ed:a7:c8:a4:5d:30:9e:c5:83:5f:fc:0b: 9a:e5:9f:c2:ee:eb:94:ec:56:d0:3f:6c:03:48:ca:33:66:90: 8a:0c:23:ae:a0:6a:37:61:df:09:46:0a:fc:f0:5f:6b:fa:fc: f9:f3:11:c3:71:f5:80:37:97:8a:03:3d:54:80:97:3f:0d:80: ac:c7:9d:76:21:c0:2f:8a:55:58:bc:f4:08:a4:3d:9d:d6:e1: 5b:72:76:09:85:12:97:80:7b:af:5a:32:db:f2:18:75:7d:7f: 20:fc:52:c7:71:61:62:e0:34:57:d0:32:83:48:f3:56:96:c6: fc:31:63:53:49:7c:3f:9d:3f:67:ae:2f:0e:d2:ca:f9:9e:b6: ce:d9:3c:66:67:72:98:9c:02:c7:99:36:af:76:3c:60:f9:20: 4d:20:86:3e:d4:93:2e:bb:4c:47:5d:ae:0b:9b:30:5c:ff:a1: 62:90:f2:78 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr0ZNdSX/NSFV04HR4/11PTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIzM2UzODI4NDExYmFmYWIwMDZlNzVmZDBkZDVmNWY5ZWY1 NWVjMjUwHhcNMjUxMjA2MTYwMDQwWhcNMjUxMjA3MTYwMDQwWjAzMTEwLwYDVQQD EygxYjFmMWJhN2ZhMWZkMmFiMmYxM2ZmNzdiN2VmNjIyMGIyZWRiYWQxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuxuiK8mPnoxJlwU/m90hhm4qW+3c uctwTDXtMduqHzKqBJ1H1ZaoKeBzE8at9GYVcU7Fa2ZBbVupnl+a4/xjyJ91AsnY 9vIEsBTBF29HkFKZHAKzNafy2gFTUj7volR1/f6w0eaPMuaBES7HKRnAMutEq+SO wbAHIlB+YFg0dDDOwu7X/hvYZa/RdCqO08DzumGssX2fR3z1HMneP8gxYHD89mVR bykfULdQEPD/TYgeVVeuHCT6dCwBlG0QhbCTCmW7DvAXiqGeoYEwV2CaJyn2Lk5y 49nyQpxnpM8bXblbQPbMgBSG++KKoGjGURgp1jjQvx0soj/QmOzS+MiKPQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBsfG6f6H9KrLxP/d7fvYiCy7brRMB8GA1UdIwQY MBaAFCM+OChBG6+rAG51/Q3V9fnvVewlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSXo0NEtFRWJyNnNBYm5YOURkWDEtZTlWN0NVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYS9hNmNmZmMtYmU2NC00ZDA4LTk0YTYt YTE1ZjBlNzhhNWE5LzEvSXo0NEtFRWJyNnNBYm5YOURkWDEtZTlWN0NVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYS9hNmNmZmMtYmU2NC00ZDA4LTk0YTYtYTE1ZjBlNzhhNWE5 LzEvSXo0NEtFRWJyNnNBYm5YOURkWDEtZTlWN0NVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdSr97KUx 6lO2sN360MnzLfv1kQU/1fxdGNlD6x8kP/9IUD9WqYyobmSdPNebX/egaAjf1sT2 HNKI964LFI4W20sMwf1fHE+RGZcEtAAN7afIpF0wnsWDX/wLmuWfwu7rlOxW0D9s A0jKM2aQigwjrqBqN2HfCUYK/PBfa/r8+fMRw3H1gDeXigM9VICXPw2ArMeddiHA L4pVWLz0CKQ9ndbhW3J2CYUSl4B7r1oy2/IYdX1/IPxSx3FhYuA0V9Ayg0jzVpbG /DFjU0l8P50/Z64vDtLK+Z62ztk8ZmdymJwCx5k2r3Y8YPkgTSCGPtSTLrtMR12u C5swXP+hYpDyeA== -----END CERTIFICATE-----Generated at Sun Dec 7 01:21:01 2025 by rpki-client