This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/9145cb-02bd-47e6-b04b-0871152a1aa3/1/iaWq49f3LuzoOWtBSSIIrdUhhDU.mft File: iaWq49f3LuzoOWtBSSIIrdUhhDU.mft (raw, json) Hash identifier: tTUBtadKQ+JSYMM8HVNq47IkvVKq5KYXOV+ovm26WBM= Subject key identifier: F6:47:F5:DB:D3:34:CF:42:1F:56:E4:1B:C1:2E:90:5B:D7:7D:34:03 Authority key identifier: 89:A5:AA:E3:D7:F7:2E:EC:E8:39:6B:41:49:22:08:AD:D5:21:84:35 Certificate issuer: /CN=89a5aae3d7f72eece8396b41492208add5218435 Certificate serial: 019AF2095D8B4A4C1061EA8BF7F88EC7473E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iaWq49f3LuzoOWtBSSIIrdUhhDU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/9145cb-02bd-47e6-b04b-0871152a1aa3/1/iaWq49f3LuzoOWtBSSIIrdUhhDU.mft Manifest number: 1652 Signing time: Sat 06 Dec 2025 05:01:31 +0000 Manifest this update: Sat 06 Dec 2025 05:01:31 +0000 Manifest next update: Sun 07 Dec 2025 05:01:31 +0000 Files and hashes: 1: iaWq49f3LuzoOWtBSSIIrdUhhDU.crl (hash: Kyu3HtOqkTiLr+xsDFj+qruUt3WLQ92gawABPU2FOnM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/9145cb-02bd-47e6-b04b-0871152a1aa3/1/iaWq49f3LuzoOWtBSSIIrdUhhDU.crl rsync://rpki.ripe.net/repository/DEFAULT/c3/9145cb-02bd-47e6-b04b-0871152a1aa3/1/iaWq49f3LuzoOWtBSSIIrdUhhDU.mft rsync://rpki.ripe.net/repository/DEFAULT/iaWq49f3LuzoOWtBSSIIrdUhhDU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:09:5d:8b:4a:4c:10:61:ea:8b:f7:f8:8e:c7:47:3e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89a5aae3d7f72eece8396b41492208add5218435 Validity Not Before: Dec 6 05:01:31 2025 GMT Not After : Dec 7 05:01:31 2025 GMT Subject: CN=f647f5dbd334cf421f56e41bc12e905bd77d3403 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:9c:7a:18:32:f7:ab:6c:a8:ce:97:fd:ad:f6: 6e:ad:f3:f3:8d:4a:b6:76:84:c6:73:ce:81:6e:9f: ae:9a:25:9d:20:ee:1c:9e:09:8e:19:08:fb:de:19: be:48:40:f2:f0:b7:f3:f3:57:fe:49:98:e3:7a:01: d6:56:2d:9c:39:89:26:8a:fc:c2:9a:8b:0e:f8:74: 3e:84:7b:c6:be:7f:9f:04:44:6c:e3:c8:70:dc:2b: c9:6d:40:a0:a1:79:9a:5c:69:ed:d9:a4:37:6f:d7: 1a:5f:80:24:82:44:65:9a:50:3d:84:3d:69:5c:85: bf:9f:1f:c0:af:26:90:e8:ec:3a:04:0c:87:ee:33: 8f:54:25:0b:13:3a:be:94:60:97:cc:d9:27:92:5e: f2:38:31:81:66:96:17:cc:ab:c7:5b:aa:ed:cb:3e: 92:ae:17:7c:90:59:b5:86:8b:73:1f:96:af:1d:e3: 7e:18:60:ce:82:47:1d:f3:4f:62:21:48:a5:1d:da: 12:74:bb:d7:94:01:12:93:d1:ec:7d:15:a2:23:28: 0f:e5:ae:80:c5:89:04:0a:9a:b5:8b:af:9f:29:18: b7:c5:36:5f:42:1f:7b:84:fe:ad:7b:43:78:c2:65: c6:5b:2e:d3:b5:ce:9c:d9:7e:a4:df:d2:c5:59:36: 69:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:47:F5:DB:D3:34:CF:42:1F:56:E4:1B:C1:2E:90:5B:D7:7D:34:03 X509v3 Authority Key Identifier: keyid:89:A5:AA:E3:D7:F7:2E:EC:E8:39:6B:41:49:22:08:AD:D5:21:84:35 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iaWq49f3LuzoOWtBSSIIrdUhhDU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/9145cb-02bd-47e6-b04b-0871152a1aa3/1/iaWq49f3LuzoOWtBSSIIrdUhhDU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/9145cb-02bd-47e6-b04b-0871152a1aa3/1/iaWq49f3LuzoOWtBSSIIrdUhhDU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5f:fe:59:ca:f0:8b:21:bc:52:67:16:d3:d9:f2:6d:ac:68:ba: a5:fa:ba:1a:05:92:4f:86:41:ba:c8:e6:f1:f5:b4:e2:5c:e0: c8:65:45:46:50:55:68:a4:e8:91:a2:d2:f9:d0:3d:a8:cf:42: 8f:4e:9f:b5:0a:f3:b6:97:7d:b0:ca:cc:d7:bb:78:71:b7:ee: 04:f2:81:90:8d:a5:9c:2c:84:74:84:ac:22:ea:4b:8d:83:e3: ba:b2:fa:c5:20:74:f3:ca:20:5c:a1:c2:d5:51:eb:4b:dd:12: 98:68:32:73:6b:04:32:a2:33:5f:f8:df:2f:84:ad:b3:13:17: ec:3d:f3:64:f1:12:dc:1d:53:79:a3:8b:6a:f7:c0:f2:fc:95: ec:cf:de:54:9f:92:01:a7:02:24:ac:df:27:ff:2c:1b:9f:53: 1a:68:a6:73:d0:b8:42:77:46:e2:23:f0:06:cb:02:1f:39:04: d4:c7:e1:82:ba:fc:d4:d6:cb:ff:0e:b3:86:6d:61:5e:a9:65: fa:50:d9:38:6a:14:47:f5:50:d6:73:5b:85:77:82:bb:05:b8: 23:ee:ac:1b:5f:55:02:19:ad:a3:e9:5c:a8:f7:d1:a5:7a:91: 44:68:b1:8c:10:53:ed:80:5e:96:0e:d3:0f:de:68:67:5c:6f: 5c:dd:a7:25 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCV2LSkwQYeqL9/iOx0c+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg5YTVhYWUzZDdmNzJlZWNlODM5NmI0MTQ5MjIwOGFkZDUy MTg0MzUwHhcNMjUxMjA2MDUwMTMxWhcNMjUxMjA3MDUwMTMxWjAzMTEwLwYDVQQD EyhmNjQ3ZjVkYmQzMzRjZjQyMWY1NmU0MWJjMTJlOTA1YmQ3N2QzNDAzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA05x6GDL3q2yozpf9rfZurfPzjUq2 doTGc86Bbp+umiWdIO4cngmOGQj73hm+SEDy8Lfz81f+SZjjegHWVi2cOYkmivzC mosO+HQ+hHvGvn+fBERs48hw3CvJbUCgoXmaXGnt2aQ3b9caX4AkgkRlmlA9hD1p XIW/nx/AryaQ6Ow6BAyH7jOPVCULEzq+lGCXzNknkl7yODGBZpYXzKvHW6rtyz6S rhd8kFm1hotzH5avHeN+GGDOgkcd809iIUilHdoSdLvXlAESk9HsfRWiIygP5a6A xYkECpq1i6+fKRi3xTZfQh97hP6te0N4wmXGWy7Ttc6c2X6k39LFWTZp1QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPZH9dvTNM9CH1bkG8EukFvXfTQDMB8GA1UdIwQY MBaAFImlquPX9y7s6DlrQUkiCK3VIYQ1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaWFXcTQ5ZjNMdXpvT1d0QlNTSUlyZFVoaERVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy85MTQ1Y2ItMDJiZC00N2U2LWIwNGIt MDg3MTE1MmExYWEzLzEvaWFXcTQ5ZjNMdXpvT1d0QlNTSUlyZFVoaERVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMy85MTQ1Y2ItMDJiZC00N2U2LWIwNGItMDg3MTE1MmExYWEz LzEvaWFXcTQ5ZjNMdXpvT1d0QlNTSUlyZFVoaERVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAX/5ZyvCL IbxSZxbT2fJtrGi6pfq6GgWST4ZBusjm8fW04lzgyGVFRlBVaKTokaLS+dA9qM9C j06ftQrztpd9sMrM17t4cbfuBPKBkI2lnCyEdISsIupLjYPjurL6xSB088ogXKHC 1VHrS90SmGgyc2sEMqIzX/jfL4StsxMX7D3zZPES3B1TeaOLavfA8vyV7M/eVJ+S AacCJKzfJ/8sG59TGmimc9C4QndG4iPwBssCHzkE1Mfhgrr81NbL/w6zhm1hXqll +lDZOGoUR/VQ1nNbhXeCuwW4I+6sG19VAhmto+lcqPfRpXqRRGixjBBT7YBelg7T D95oZ1xvXN2nJQ== -----END CERTIFICATE-----Generated at Sat Dec 6 07:45:33 2025 by rpki-client