This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/6c3d9f-8a4f-4a6c-8579-e92ece4d3cb3/1/IaAAgM0ssbsHOQOzKyWtZgo2ZIY.mft File: IaAAgM0ssbsHOQOzKyWtZgo2ZIY.mft (raw, json) Hash identifier: PveryD59AWuyP0Sz+L0tZ6mxAMrFogPSKe3C+9klYuM= Subject key identifier: CA:00:BD:5E:D0:EC:26:15:45:E5:CE:2C:A1:4E:98:33:92:18:04:1E Authority key identifier: 21:A0:00:80:CD:2C:B1:BB:07:39:03:B3:2B:25:AD:66:0A:36:64:86 Certificate issuer: /CN=21a00080cd2cb1bb073903b32b25ad660a366486 Certificate serial: 019AF1646BFC22B7504CE1B9DBF1A1CB69CD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IaAAgM0ssbsHOQOzKyWtZgo2ZIY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/6c3d9f-8a4f-4a6c-8579-e92ece4d3cb3/1/IaAAgM0ssbsHOQOzKyWtZgo2ZIY.mft Manifest number: 1636 Signing time: Sat 06 Dec 2025 02:01:21 +0000 Manifest this update: Sat 06 Dec 2025 02:01:21 +0000 Manifest next update: Sun 07 Dec 2025 02:01:21 +0000 Files and hashes: 1: 1KLC3gBk4V8UlL1q34VPnUxHzZY.roa (hash: PpTqyE9jhdplaM4jeC6bew/Mkzc7lRGupafDYfql5k0=) 2: IaAAgM0ssbsHOQOzKyWtZgo2ZIY.crl (hash: SsoJ2Fh92MT93B+/3+gMyv4SV8OYUuuBdIC/adzRAsk=) 3: QdEJ7zpCJnQlkbu72Bn_JyCb_EM.roa (hash: uicaL7GuC1Mghzq3VpHhej/MKa/9KriBzrxlFVoCpcc=) 4: WylnrO-wU58E26AefCAQ7nrb79w.roa (hash: y1OWdCLTeRgES3w6dtbyOUz1ZW2NZGMx2qqGlzUOOl8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/6c3d9f-8a4f-4a6c-8579-e92ece4d3cb3/1/IaAAgM0ssbsHOQOzKyWtZgo2ZIY.crl rsync://rpki.ripe.net/repository/DEFAULT/c7/6c3d9f-8a4f-4a6c-8579-e92ece4d3cb3/1/IaAAgM0ssbsHOQOzKyWtZgo2ZIY.mft rsync://rpki.ripe.net/repository/DEFAULT/IaAAgM0ssbsHOQOzKyWtZgo2ZIY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:64:6b:fc:22:b7:50:4c:e1:b9:db:f1:a1:cb:69:cd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=21a00080cd2cb1bb073903b32b25ad660a366486 Validity Not Before: Dec 6 02:01:21 2025 GMT Not After : Dec 7 02:01:21 2025 GMT Subject: CN=ca00bd5ed0ec261545e5ce2ca14e98339218041e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:df:db:e1:26:c2:59:41:ed:ec:50:e8:ea:53: 35:cf:7a:9e:7d:17:e9:87:30:f8:fa:57:6d:c9:43: 92:bf:7a:a6:4e:b1:1c:09:bf:f3:2e:19:17:cc:75: 1c:7d:38:a5:a2:75:e9:73:af:ae:4c:c5:fd:78:c1: 0d:78:fc:50:a0:f9:bc:86:8b:ff:55:b9:b6:c0:88: e6:0f:d4:16:b1:8c:b9:34:5b:d5:b4:12:67:bc:86: e6:f8:65:8b:87:27:c1:37:0e:c5:2e:bf:a8:d6:82: 03:1f:03:05:43:3a:86:cf:76:90:1d:6e:fb:15:50: ce:34:84:2d:ae:5c:26:13:e4:cd:aa:b0:6e:b8:52: 28:98:78:34:dd:d1:d8:c9:05:34:ba:ae:b8:22:cf: 5c:34:a1:90:b4:85:df:9f:40:72:2f:1e:d5:b2:01: fb:dc:0a:97:64:b3:1d:13:90:86:42:8a:c5:00:1e: 77:ae:4d:c3:26:0e:2b:4c:a0:f3:73:9c:a2:59:33: fa:e2:95:31:8a:31:76:b7:4d:6f:c5:9b:f3:32:2b: ad:54:82:bd:8b:fe:d2:c6:fe:89:b0:30:e7:d4:56: 5c:e6:58:55:e5:57:fa:72:0d:64:32:a5:cc:59:f1: 15:21:f1:f4:9f:be:25:8e:ca:1c:64:7c:b1:b4:ce: 6c:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:00:BD:5E:D0:EC:26:15:45:E5:CE:2C:A1:4E:98:33:92:18:04:1E X509v3 Authority Key Identifier: keyid:21:A0:00:80:CD:2C:B1:BB:07:39:03:B3:2B:25:AD:66:0A:36:64:86 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IaAAgM0ssbsHOQOzKyWtZgo2ZIY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/6c3d9f-8a4f-4a6c-8579-e92ece4d3cb3/1/IaAAgM0ssbsHOQOzKyWtZgo2ZIY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/6c3d9f-8a4f-4a6c-8579-e92ece4d3cb3/1/IaAAgM0ssbsHOQOzKyWtZgo2ZIY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 48:b2:fc:64:f0:db:93:e3:ad:2e:ba:c7:52:f6:2e:e0:d2:df: db:f4:19:1d:d2:cd:68:89:f8:2a:8d:71:7f:03:ae:8f:58:8d: 11:e0:47:d6:31:a3:66:3e:b6:5b:91:24:01:e1:81:aa:df:ba: 4b:7a:a4:8d:35:2c:55:f1:f9:b5:de:3c:85:68:d2:81:38:b4: 57:9b:2c:7e:71:e9:b4:62:1e:d1:1b:09:a3:80:08:08:ca:11: 7d:df:52:db:5e:49:cb:66:5f:5b:a7:79:7c:f5:4e:58:fc:fc: 8f:04:5c:28:c2:c4:59:6d:b6:a6:fd:3a:d7:7a:f9:fb:fb:f6: 21:71:92:d7:b5:2c:07:15:47:20:96:d5:e2:71:cb:c8:42:b3: c4:0f:d6:c6:62:cd:9f:7f:bb:05:32:f5:02:76:71:96:d2:ac: d5:a3:53:68:7f:7d:4b:72:d1:31:17:e4:5a:59:86:af:3f:ad: d1:40:9a:1b:24:30:b4:fa:96:17:ab:f9:87:6b:51:e6:28:4b: 7b:04:4e:6c:e7:17:76:3e:7e:52:3d:5b:7c:2e:be:02:70:7b: 87:99:3a:d3:3e:f4:0a:8e:d6:c9:99:24:30:21:ac:44:c2:23: f1:36:51:20:b0:5f:9a:30:74:28:3d:a4:c5:38:96:7e:57:3b: 3a:0b:d0:15 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxZGv8IrdQTOG52/Ghy2nNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIxYTAwMDgwY2QyY2IxYmIwNzM5MDNiMzJiMjVhZDY2MGEz NjY0ODYwHhcNMjUxMjA2MDIwMTIxWhcNMjUxMjA3MDIwMTIxWjAzMTEwLwYDVQQD EyhjYTAwYmQ1ZWQwZWMyNjE1NDVlNWNlMmNhMTRlOTgzMzkyMTgwNDFlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtt/b4SbCWUHt7FDo6lM1z3qefRfp hzD4+ldtyUOSv3qmTrEcCb/zLhkXzHUcfTilonXpc6+uTMX9eMENePxQoPm8hov/ Vbm2wIjmD9QWsYy5NFvVtBJnvIbm+GWLhyfBNw7FLr+o1oIDHwMFQzqGz3aQHW77 FVDONIQtrlwmE+TNqrBuuFIomHg03dHYyQU0uq64Is9cNKGQtIXfn0ByLx7VsgH7 3AqXZLMdE5CGQorFAB53rk3DJg4rTKDzc5yiWTP64pUxijF2t01vxZvzMiutVIK9 i/7Sxv6JsDDn1FZc5lhV5Vf6cg1kMqXMWfEVIfH0n74ljsocZHyxtM5sIQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMoAvV7Q7CYVReXOLKFOmDOSGAQeMB8GA1UdIwQY MBaAFCGgAIDNLLG7BzkDsyslrWYKNmSGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSWFBQWdNMHNzYnNIT1FPekt5V3RaZ28yWklZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy82YzNkOWYtOGE0Zi00YTZjLTg1Nzkt ZTkyZWNlNGQzY2IzLzEvSWFBQWdNMHNzYnNIT1FPekt5V3RaZ28yWklZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNy82YzNkOWYtOGE0Zi00YTZjLTg1NzktZTkyZWNlNGQzY2Iz LzEvSWFBQWdNMHNzYnNIT1FPekt5V3RaZ28yWklZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASLL8ZPDb k+OtLrrHUvYu4NLf2/QZHdLNaIn4Ko1xfwOuj1iNEeBH1jGjZj62W5EkAeGBqt+6 S3qkjTUsVfH5td48hWjSgTi0V5ssfnHptGIe0RsJo4AICMoRfd9S215Jy2ZfW6d5 fPVOWPz8jwRcKMLEWW22pv0613r5+/v2IXGS17UsBxVHIJbV4nHLyEKzxA/WxmLN n3+7BTL1AnZxltKs1aNTaH99S3LRMRfkWlmGrz+t0UCaGyQwtPqWF6v5h2tR5ihL ewRObOcXdj5+Uj1bfC6+AnB7h5k60z70Co7WyZkkMCGsRMIj8TZRILBfmjB0KD2k xTiWflc7OgvQFQ== -----END CERTIFICATE-----Generated at Sat Dec 6 09:19:51 2025 by rpki-client