This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/281dfb-3293-4bab-ba22-1becb5dcd7aa/1/Iw0xH8GUY_3TCt7MkXtfAph0G0Q.mft File: Iw0xH8GUY_3TCt7MkXtfAph0G0Q.mft (raw, json) Hash identifier: /kQaMDERtvaSqhpv+3jIPRSvWU/2LlA6nzmIfHUw6Iw= Subject key identifier: 69:43:92:07:A3:E1:64:D0:DD:47:47:C2:65:76:57:5A:F4:FE:51:04 Authority key identifier: 23:0D:31:1F:C1:94:63:FD:D3:0A:DE:CC:91:7B:5F:02:98:74:1B:44 Certificate issuer: /CN=230d311fc19463fdd30adecc917b5f0298741b44 Certificate serial: 019AF2ADC7ABDCF5289D67B88FA4D59AA3E2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Iw0xH8GUY_3TCt7MkXtfAph0G0Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/281dfb-3293-4bab-ba22-1becb5dcd7aa/1/Iw0xH8GUY_3TCt7MkXtfAph0G0Q.mft Manifest number: 117E Signing time: Sat 06 Dec 2025 08:01:06 +0000 Manifest this update: Sat 06 Dec 2025 08:01:06 +0000 Manifest next update: Sun 07 Dec 2025 08:01:06 +0000 Files and hashes: 1: Iw0xH8GUY_3TCt7MkXtfAph0G0Q.crl (hash: G1UNPEZ2rSYWFuvrIdQQ82vG3qznf/Tc5k4Ha7FzJtE=) 2: qaZCGy8ImKVej6couAVTC--aSzI.roa (hash: dKUZq0YlDWheyPATDjfQQ4lypZzKgD8qgqRTkln0uKk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/281dfb-3293-4bab-ba22-1becb5dcd7aa/1/Iw0xH8GUY_3TCt7MkXtfAph0G0Q.crl rsync://rpki.ripe.net/repository/DEFAULT/c2/281dfb-3293-4bab-ba22-1becb5dcd7aa/1/Iw0xH8GUY_3TCt7MkXtfAph0G0Q.mft rsync://rpki.ripe.net/repository/DEFAULT/Iw0xH8GUY_3TCt7MkXtfAph0G0Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:ad:c7:ab:dc:f5:28:9d:67:b8:8f:a4:d5:9a:a3:e2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=230d311fc19463fdd30adecc917b5f0298741b44 Validity Not Before: Dec 6 08:01:06 2025 GMT Not After : Dec 7 08:01:06 2025 GMT Subject: CN=69439207a3e164d0dd4747c26576575af4fe5104 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:f7:1e:d2:e1:d6:b7:e4:8e:d9:1c:52:fa:16: 3f:96:a0:63:ca:7a:64:46:10:01:b8:52:77:08:9d: 61:70:38:17:bc:e1:7c:10:4e:8d:8a:20:56:5f:7b: a7:ef:a4:74:3b:1b:73:a0:c9:fd:d7:b2:5c:19:71: 3b:d8:6b:ef:db:cb:11:05:ed:a8:b4:c8:ba:dd:03: 6e:d0:70:ef:d1:17:4b:27:d2:ba:0d:8c:17:a8:59: 97:09:a3:79:c5:85:07:88:82:71:61:0e:27:0c:9e: fc:c1:b2:73:0b:d7:94:89:d9:76:9f:88:df:10:03: 1c:46:73:97:10:be:eb:77:16:64:6e:1a:b3:c2:29: c6:cf:3f:e1:c0:a4:d3:b0:ef:eb:cc:81:2f:e6:6a: 78:bf:77:0d:32:97:77:99:da:40:a1:00:e1:90:3d: ae:5e:5f:6f:6a:9b:c1:4a:63:72:eb:4b:9e:4a:33: 58:11:f1:b1:b7:23:1a:c7:58:e9:9a:50:14:55:c4: 61:13:78:4f:80:20:be:ad:4e:34:62:16:8d:7e:f9: 69:59:ba:71:60:af:d4:b8:80:7e:ff:63:53:1e:dd: d0:13:ef:31:bb:0d:f4:86:e6:97:e3:88:5a:ad:49: bc:b3:bc:9c:c2:c9:d6:7b:84:57:4d:44:b5:09:98: 14:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:43:92:07:A3:E1:64:D0:DD:47:47:C2:65:76:57:5A:F4:FE:51:04 X509v3 Authority Key Identifier: keyid:23:0D:31:1F:C1:94:63:FD:D3:0A:DE:CC:91:7B:5F:02:98:74:1B:44 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Iw0xH8GUY_3TCt7MkXtfAph0G0Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/281dfb-3293-4bab-ba22-1becb5dcd7aa/1/Iw0xH8GUY_3TCt7MkXtfAph0G0Q.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/281dfb-3293-4bab-ba22-1becb5dcd7aa/1/Iw0xH8GUY_3TCt7MkXtfAph0G0Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 79:2e:65:c6:f7:51:eb:56:ce:7c:de:ce:12:f2:b9:e8:5e:bb: ff:f5:73:47:e3:d6:d7:29:7a:57:f0:c0:94:41:58:56:fb:43: fd:0c:ae:d5:63:92:df:58:a1:47:b9:37:bc:c5:48:9b:29:36: a5:38:30:63:f4:78:cf:43:0e:b5:8d:7f:48:94:91:c3:7a:90: 70:22:c2:e7:4f:07:3b:1c:ca:71:c1:28:22:6a:2a:70:34:84: a4:a3:56:24:e6:30:4c:4f:ec:e8:ae:14:e7:f7:99:9c:a9:83: 2a:1b:81:0c:96:57:37:34:81:87:51:4b:e3:f8:b6:ca:a4:56: b2:56:e6:94:0a:5d:10:83:3a:04:49:74:3e:6d:1d:96:60:80: b5:ca:09:53:e9:e4:83:10:65:e8:ab:fc:97:6a:93:d7:f7:8c: 2c:dc:c4:a0:95:71:48:d4:7a:5b:e0:57:4a:ef:5c:7a:18:f1: 2f:44:b3:69:35:41:83:14:86:70:b9:ce:1f:46:47:eb:fb:75: 33:83:9d:20:af:fd:8a:fa:a8:56:6a:3f:c5:d1:26:57:29:32: eb:15:c8:fb:26:01:a3:78:cd:cb:b3:bc:4a:62:58:d6:24:45: de:90:28:40:c3:66:49:1a:64:e4:5d:84:40:78:40:9f:b5:6e: ad:aa:c1:24 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryrcer3PUonWe4j6TVmqPiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIzMGQzMTFmYzE5NDYzZmRkMzBhZGVjYzkxN2I1ZjAyOTg3 NDFiNDQwHhcNMjUxMjA2MDgwMTA2WhcNMjUxMjA3MDgwMTA2WjAzMTEwLwYDVQQD Eyg2OTQzOTIwN2EzZTE2NGQwZGQ0NzQ3YzI2NTc2NTc1YWY0ZmU1MTA0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0Pce0uHWt+SO2RxS+hY/lqBjynpk RhABuFJ3CJ1hcDgXvOF8EE6NiiBWX3un76R0OxtzoMn917JcGXE72Gvv28sRBe2o tMi63QNu0HDv0RdLJ9K6DYwXqFmXCaN5xYUHiIJxYQ4nDJ78wbJzC9eUidl2n4jf EAMcRnOXEL7rdxZkbhqzwinGzz/hwKTTsO/rzIEv5mp4v3cNMpd3mdpAoQDhkD2u Xl9vapvBSmNy60ueSjNYEfGxtyMax1jpmlAUVcRhE3hPgCC+rU40YhaNfvlpWbpx YK/UuIB+/2NTHt3QE+8xuw30huaX44harUm8s7ycwsnWe4RXTUS1CZgUcQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGlDkgej4WTQ3UdHwmV2V1r0/lEEMB8GA1UdIwQY MBaAFCMNMR/BlGP90wrezJF7XwKYdBtEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSXcweEg4R1VZXzNUQ3Q3TWtYdGZBcGgwRzBRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMi8yODFkZmItMzI5My00YmFiLWJhMjIt MWJlY2I1ZGNkN2FhLzEvSXcweEg4R1VZXzNUQ3Q3TWtYdGZBcGgwRzBRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMi8yODFkZmItMzI5My00YmFiLWJhMjItMWJlY2I1ZGNkN2Fh LzEvSXcweEg4R1VZXzNUQ3Q3TWtYdGZBcGgwRzBRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeS5lxvdR 61bOfN7OEvK56F67//VzR+PW1yl6V/DAlEFYVvtD/Qyu1WOS31ihR7k3vMVImyk2 pTgwY/R4z0MOtY1/SJSRw3qQcCLC508HOxzKccEoImoqcDSEpKNWJOYwTE/s6K4U 5/eZnKmDKhuBDJZXNzSBh1FL4/i2yqRWslbmlApdEIM6BEl0Pm0dlmCAtcoJU+nk gxBl6Kv8l2qT1/eMLNzEoJVxSNR6W+BXSu9cehjxL0SzaTVBgxSGcLnOH0ZH6/t1 M4OdIK/9ivqoVmo/xdEmVyky6xXI+yYBo3jNy7O8SmJY1iRF3pAoQMNmSRpk5F2E QHhAn7VurarBJA== -----END CERTIFICATE-----Generated at Sat Dec 6 10:26:51 2025 by rpki-client