This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/e251dc-8b2b-4f3d-b636-15422478800b/1/IEoJZQTNu58vt_0OZkBtUm_hC1o.mft File: IEoJZQTNu58vt_0OZkBtUm_hC1o.mft (raw, json) Hash identifier: 5ljcYkZyyot4cB6bP5d+jThGlSuzW6NIgMaAR7n5nyU= Subject key identifier: 50:EE:05:1B:93:C2:E7:71:C4:7B:50:6A:4B:EA:D6:E8:94:6E:34:DC Authority key identifier: 20:4A:09:65:04:CD:BB:9F:2F:B7:FD:0E:66:40:6D:52:6F:E1:0B:5A Certificate issuer: /CN=204a096504cdbb9f2fb7fd0e66406d526fe10b5a Certificate serial: 019AF208D9AC1F73C391451136F568E68DE3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IEoJZQTNu58vt_0OZkBtUm_hC1o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/e251dc-8b2b-4f3d-b636-15422478800b/1/IEoJZQTNu58vt_0OZkBtUm_hC1o.mft Manifest number: 151D Signing time: Sat 06 Dec 2025 05:00:57 +0000 Manifest this update: Sat 06 Dec 2025 05:00:57 +0000 Manifest next update: Sun 07 Dec 2025 05:00:57 +0000 Files and hashes: 1: IEoJZQTNu58vt_0OZkBtUm_hC1o.crl (hash: GONjS6qWBjC8M61w9ENL4dfN/PKEvAu0pkAL+Yyog/Q=) 2: ZCDIooS_ImzZeN5QrbFaFhO5dyA.roa (hash: TP421izhVwKSZitQyZKTA1SgQgPy6vE7WxBJa4Db6y0=) 3: xOQ7AmZa9_C69z9KUz6w5PLIpQA.roa (hash: 8+VSRj7tw2mCh7Z/e6KhYhg5OTkoPLOgLEVa0Q5ZizM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/e251dc-8b2b-4f3d-b636-15422478800b/1/IEoJZQTNu58vt_0OZkBtUm_hC1o.crl rsync://rpki.ripe.net/repository/DEFAULT/c5/e251dc-8b2b-4f3d-b636-15422478800b/1/IEoJZQTNu58vt_0OZkBtUm_hC1o.mft rsync://rpki.ripe.net/repository/DEFAULT/IEoJZQTNu58vt_0OZkBtUm_hC1o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:08:d9:ac:1f:73:c3:91:45:11:36:f5:68:e6:8d:e3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=204a096504cdbb9f2fb7fd0e66406d526fe10b5a Validity Not Before: Dec 6 05:00:57 2025 GMT Not After : Dec 7 05:00:57 2025 GMT Subject: CN=50ee051b93c2e771c47b506a4bead6e8946e34dc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:8d:69:37:e1:79:e6:b4:fe:39:6b:ed:0c:28: 38:91:7b:0e:54:31:fb:ee:b1:45:1c:3a:da:fa:54: b8:c7:9b:fa:79:49:0d:96:90:23:67:23:10:d0:d2: 01:6d:f4:c7:b5:57:01:83:2b:f7:aa:e2:15:46:46: 9a:6b:e8:5a:37:55:ee:60:9e:26:19:f7:cf:ae:70: 39:a0:7d:fa:c8:69:66:d9:d3:f0:fd:48:d4:8c:7b: 49:d8:93:c5:56:8d:20:23:a9:87:15:b1:d7:3d:79: 41:00:09:f2:f1:00:70:a1:49:5e:15:99:7c:33:99: 79:10:22:73:11:12:88:83:80:d0:4f:b3:b4:a2:36: 3f:d0:40:38:d9:5e:21:66:ff:fa:d6:d0:5b:8d:22: 1e:a9:cc:ed:66:46:42:47:f2:e7:7d:28:e6:93:f3: d9:1e:6f:5e:ae:71:4f:67:6d:cf:58:71:80:4c:e2: 78:fc:5d:83:13:2c:91:dc:00:2c:f3:32:43:9d:08: fe:74:9a:ee:ee:f4:20:27:09:e9:72:87:b9:50:52: eb:14:a6:fa:e6:dc:7e:24:4e:07:f3:af:6b:28:07: bd:e5:39:50:9e:fe:18:c9:33:49:3d:55:30:46:02: 72:e9:bd:a7:9b:7f:7a:26:e6:37:05:61:69:35:e0: db:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:EE:05:1B:93:C2:E7:71:C4:7B:50:6A:4B:EA:D6:E8:94:6E:34:DC X509v3 Authority Key Identifier: keyid:20:4A:09:65:04:CD:BB:9F:2F:B7:FD:0E:66:40:6D:52:6F:E1:0B:5A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IEoJZQTNu58vt_0OZkBtUm_hC1o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/e251dc-8b2b-4f3d-b636-15422478800b/1/IEoJZQTNu58vt_0OZkBtUm_hC1o.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/e251dc-8b2b-4f3d-b636-15422478800b/1/IEoJZQTNu58vt_0OZkBtUm_hC1o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4b:4f:ca:6f:b3:82:d1:53:31:d3:52:0f:9c:87:34:83:7e:c3: 94:a1:43:34:64:7d:df:e4:0b:38:d8:33:36:ab:ad:ad:b5:b9: 47:68:6f:b8:20:8b:5c:38:bb:9a:60:32:cf:2f:b5:f9:44:64: be:e0:12:52:72:7b:9f:03:73:2f:8a:d8:84:83:4f:89:70:24: cc:43:c5:c3:1d:41:b0:6a:82:45:42:a7:db:5c:5e:c0:03:dd: 26:50:81:db:3e:18:0f:b9:a6:2b:64:d0:d5:9a:04:4b:41:f9: fb:ce:0d:b3:cb:27:61:ab:ea:4e:17:f5:58:1d:a5:72:2e:17: 44:3f:01:a5:d5:c6:18:cd:0a:26:18:26:cd:b4:42:bb:4d:20: c1:fe:3c:76:e0:e7:3e:20:20:ad:b1:00:39:ea:67:27:8c:5e: c5:8b:fa:af:e2:30:ce:bc:37:63:1f:01:5d:e8:27:a8:0e:f2: e7:41:0b:d8:be:51:ac:49:07:33:53:b6:8a:bb:9c:83:bb:c2: 9d:cc:e0:2f:de:31:21:0c:75:76:f6:9b:65:6b:91:f4:e1:01: 71:d1:f4:0d:e4:17:0c:d4:7f:a0:2f:94:2c:96:b1:01:f3:46: 9f:9e:a6:86:af:1f:75:e3:ca:e4:c4:a0:e3:53:da:69:8e:89: 86:e4:0f:9d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCNmsH3PDkUURNvVo5o3jMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIwNGEwOTY1MDRjZGJiOWYyZmI3ZmQwZTY2NDA2ZDUyNmZl MTBiNWEwHhcNMjUxMjA2MDUwMDU3WhcNMjUxMjA3MDUwMDU3WjAzMTEwLwYDVQQD Eyg1MGVlMDUxYjkzYzJlNzcxYzQ3YjUwNmE0YmVhZDZlODk0NmUzNGRjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy41pN+F55rT+OWvtDCg4kXsOVDH7 7rFFHDra+lS4x5v6eUkNlpAjZyMQ0NIBbfTHtVcBgyv3quIVRkaaa+haN1XuYJ4m GffPrnA5oH36yGlm2dPw/UjUjHtJ2JPFVo0gI6mHFbHXPXlBAAny8QBwoUleFZl8 M5l5ECJzERKIg4DQT7O0ojY/0EA42V4hZv/61tBbjSIeqcztZkZCR/LnfSjmk/PZ Hm9ernFPZ23PWHGATOJ4/F2DEyyR3AAs8zJDnQj+dJru7vQgJwnpcoe5UFLrFKb6 5tx+JE4H869rKAe95TlQnv4YyTNJPVUwRgJy6b2nm396JuY3BWFpNeDbmQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFDuBRuTwudxxHtQakvq1uiUbjTcMB8GA1UdIwQY MBaAFCBKCWUEzbufL7f9DmZAbVJv4QtaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSUVvSlpRVE51NTh2dF8wT1prQnRVbV9oQzFvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNS9lMjUxZGMtOGIyYi00ZjNkLWI2MzYt MTU0MjI0Nzg4MDBiLzEvSUVvSlpRVE51NTh2dF8wT1prQnRVbV9oQzFvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNS9lMjUxZGMtOGIyYi00ZjNkLWI2MzYtMTU0MjI0Nzg4MDBi LzEvSUVvSlpRVE51NTh2dF8wT1prQnRVbV9oQzFvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAS0/Kb7OC 0VMx01IPnIc0g37DlKFDNGR93+QLONgzNqutrbW5R2hvuCCLXDi7mmAyzy+1+URk vuASUnJ7nwNzL4rYhINPiXAkzEPFwx1BsGqCRUKn21xewAPdJlCB2z4YD7mmK2TQ 1ZoES0H5+84Ns8snYavqThf1WB2lci4XRD8BpdXGGM0KJhgmzbRCu00gwf48duDn PiAgrbEAOepnJ4xexYv6r+Iwzrw3Yx8BXegnqA7y50EL2L5RrEkHM1O2irucg7vC nczgL94xIQx1dvabZWuR9OEBcdH0DeQXDNR/oC+ULJaxAfNGn56mhq8fdePK5MSg 41PaaY6JhuQPnQ== -----END CERTIFICATE-----Generated at Sat Dec 6 11:43:10 2025 by rpki-client