This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/6c3d9f-8a4f-4a6c-8579-e92ece4d3cb3/1/IaAAgM0ssbsHOQOzKyWtZgo2ZIY.mft File: IaAAgM0ssbsHOQOzKyWtZgo2ZIY.mft (raw, json) Hash identifier: 4z8XailqA/y1iDwTYvLuLWTZ9MCAJsNluo28kCg1mEQ= Subject key identifier: EC:37:8B:CF:C4:A1:6E:2F:13:1A:D8:E2:21:02:C8:3E:8E:B1:D0:C0 Authority key identifier: 21:A0:00:80:CD:2C:B1:BB:07:39:03:B3:2B:25:AD:66:0A:36:64:86 Certificate issuer: /CN=21a00080cd2cb1bb073903b32b25ad660a366486 Certificate serial: 019B2D420850CB6C7E517FE2A8AA29114E45 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IaAAgM0ssbsHOQOzKyWtZgo2ZIY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/6c3d9f-8a4f-4a6c-8579-e92ece4d3cb3/1/IaAAgM0ssbsHOQOzKyWtZgo2ZIY.mft Manifest number: 1655 Signing time: Wed 17 Dec 2025 17:01:00 +0000 Manifest this update: Wed 17 Dec 2025 17:01:00 +0000 Manifest next update: Thu 18 Dec 2025 17:01:00 +0000 Files and hashes: 1: 1KLC3gBk4V8UlL1q34VPnUxHzZY.roa (hash: PpTqyE9jhdplaM4jeC6bew/Mkzc7lRGupafDYfql5k0=) 2: IaAAgM0ssbsHOQOzKyWtZgo2ZIY.crl (hash: ORiHTjvpY6m5i88S6zlHnqkpuVk1uh3eJHPluijsUWE=) 3: QdEJ7zpCJnQlkbu72Bn_JyCb_EM.roa (hash: uicaL7GuC1Mghzq3VpHhej/MKa/9KriBzrxlFVoCpcc=) 4: WylnrO-wU58E26AefCAQ7nrb79w.roa (hash: y1OWdCLTeRgES3w6dtbyOUz1ZW2NZGMx2qqGlzUOOl8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/6c3d9f-8a4f-4a6c-8579-e92ece4d3cb3/1/IaAAgM0ssbsHOQOzKyWtZgo2ZIY.crl rsync://rpki.ripe.net/repository/DEFAULT/c7/6c3d9f-8a4f-4a6c-8579-e92ece4d3cb3/1/IaAAgM0ssbsHOQOzKyWtZgo2ZIY.mft rsync://rpki.ripe.net/repository/DEFAULT/IaAAgM0ssbsHOQOzKyWtZgo2ZIY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 17:01:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2d:42:08:50:cb:6c:7e:51:7f:e2:a8:aa:29:11:4e:45 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=21a00080cd2cb1bb073903b32b25ad660a366486 Validity Not Before: Dec 17 17:01:00 2025 GMT Not After : Dec 18 17:01:00 2025 GMT Subject: CN=ec378bcfc4a16e2f131ad8e22102c83e8eb1d0c0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:be:25:93:a6:d2:d4:78:92:87:68:ef:5d:36: ce:a4:04:37:e6:89:5a:0a:3c:82:3a:08:44:33:fd: 49:9f:c4:3e:52:bd:d3:76:aa:f2:43:9d:e5:25:63: 17:cc:5e:30:57:2d:25:6a:30:e5:0a:60:6b:72:1d: 6f:18:42:ac:0c:c1:95:e8:9c:43:db:0d:1d:ca:05: ff:36:4b:94:a8:12:85:c8:24:55:9d:b1:a0:fb:bf: 93:1b:5c:09:85:e7:4e:97:18:85:8f:5c:5b:7b:eb: 21:c8:d4:ab:30:6e:66:57:2f:8f:70:23:c7:74:12: 0d:34:72:ac:2f:b1:df:a6:86:0f:a1:95:a3:6b:51: c9:28:90:9f:e3:b8:79:4c:c2:40:ed:01:6d:3e:4c: 0a:98:49:29:e0:eb:aa:ce:05:42:4e:d7:f7:00:9e: 9c:61:12:80:c5:7c:c1:b0:bd:64:17:aa:a7:7f:81: 4d:78:07:f5:4e:31:57:f3:0a:a0:a7:79:a8:10:aa: 65:76:4c:2b:53:cd:3f:6a:d6:ba:95:be:2a:b0:62: 9f:7a:0a:26:f2:ec:45:6e:25:bc:77:2a:e1:e2:5c: 3b:3a:15:27:a1:30:69:b5:f0:9f:38:35:be:68:c7: f0:83:dc:b2:63:88:7f:4b:e5:e1:9d:e8:f0:58:8b: b6:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:37:8B:CF:C4:A1:6E:2F:13:1A:D8:E2:21:02:C8:3E:8E:B1:D0:C0 X509v3 Authority Key Identifier: keyid:21:A0:00:80:CD:2C:B1:BB:07:39:03:B3:2B:25:AD:66:0A:36:64:86 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IaAAgM0ssbsHOQOzKyWtZgo2ZIY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/6c3d9f-8a4f-4a6c-8579-e92ece4d3cb3/1/IaAAgM0ssbsHOQOzKyWtZgo2ZIY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/6c3d9f-8a4f-4a6c-8579-e92ece4d3cb3/1/IaAAgM0ssbsHOQOzKyWtZgo2ZIY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7b:c4:2b:20:39:59:a6:95:9c:7d:f0:7b:ac:8b:86:c3:62:56: 7e:24:9c:c2:4a:7b:59:a7:7a:b4:db:18:1b:bc:6f:9a:4c:0a: 08:50:78:c9:d4:0b:1f:0b:b1:16:a9:20:07:01:44:57:1f:81: 47:e2:3e:9e:8b:ae:0f:10:e3:de:55:fa:2a:09:8a:65:32:d5: 1b:f4:80:3f:8e:4c:e7:69:8a:62:63:06:76:f2:f1:8a:02:e5: b9:cd:b2:62:53:b5:49:d1:49:ec:f1:dc:e2:30:45:e8:de:81: 84:55:5d:a7:2f:6d:2b:c1:c3:4a:55:13:84:78:22:e0:30:59: 40:c6:6f:cc:ec:9b:7a:bd:06:8f:6e:b4:ca:4b:d9:ba:ec:54: 6b:2a:64:ec:38:85:19:5b:64:71:6b:b6:92:41:38:64:74:b7: e9:4a:65:ed:72:c9:b3:2c:85:6b:7a:9a:eb:70:21:b4:ee:1f: fc:c3:57:a9:aa:6a:7b:e9:7f:e3:64:81:81:39:2f:2b:c4:9a: 06:bc:74:90:97:30:d4:c6:21:85:13:9d:63:b0:6d:c1:5e:6d: c6:77:d1:6e:33:6f:60:85:01:06:7d:6e:ee:57:22:29:06:4f: 1b:63:23:7c:24:5c:84:2d:a5:18:91:86:91:21:8a:bf:ac:db: 6a:05:05:51 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZstQghQy2x+UX/iqKopEU5FMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIxYTAwMDgwY2QyY2IxYmIwNzM5MDNiMzJiMjVhZDY2MGEz NjY0ODYwHhcNMjUxMjE3MTcwMTAwWhcNMjUxMjE4MTcwMTAwWjAzMTEwLwYDVQQD EyhlYzM3OGJjZmM0YTE2ZTJmMTMxYWQ4ZTIyMTAyYzgzZThlYjFkMGMwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvL4lk6bS1HiSh2jvXTbOpAQ35ola CjyCOghEM/1Jn8Q+Ur3TdqryQ53lJWMXzF4wVy0lajDlCmBrch1vGEKsDMGV6JxD 2w0dygX/NkuUqBKFyCRVnbGg+7+TG1wJhedOlxiFj1xbe+shyNSrMG5mVy+PcCPH dBINNHKsL7HfpoYPoZWja1HJKJCf47h5TMJA7QFtPkwKmEkp4OuqzgVCTtf3AJ6c YRKAxXzBsL1kF6qnf4FNeAf1TjFX8wqgp3moEKpldkwrU80/ata6lb4qsGKfegom 8uxFbiW8dyrh4lw7OhUnoTBptfCfODW+aMfwg9yyY4h/S+XhnejwWIu2CwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOw3i8/EoW4vExrY4iECyD6OsdDAMB8GA1UdIwQY MBaAFCGgAIDNLLG7BzkDsyslrWYKNmSGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSWFBQWdNMHNzYnNIT1FPekt5V3RaZ28yWklZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy82YzNkOWYtOGE0Zi00YTZjLTg1Nzkt ZTkyZWNlNGQzY2IzLzEvSWFBQWdNMHNzYnNIT1FPekt5V3RaZ28yWklZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNy82YzNkOWYtOGE0Zi00YTZjLTg1NzktZTkyZWNlNGQzY2Iz LzEvSWFBQWdNMHNzYnNIT1FPekt5V3RaZ28yWklZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAe8QrIDlZ ppWcffB7rIuGw2JWfiScwkp7Wad6tNsYG7xvmkwKCFB4ydQLHwuxFqkgBwFEVx+B R+I+nouuDxDj3lX6KgmKZTLVG/SAP45M52mKYmMGdvLxigLluc2yYlO1SdFJ7PHc 4jBF6N6BhFVdpy9tK8HDSlUThHgi4DBZQMZvzOyber0Gj260ykvZuuxUaypk7DiF GVtkcWu2kkE4ZHS36Upl7XLJsyyFa3qa63AhtO4f/MNXqapqe+l/42SBgTkvK8Sa Brx0kJcw1MYhhROdY7BtwV5txnfRbjNvYIUBBn1u7lciKQZPG2MjfCRchC2lGJGG kSGKv6zbagUFUQ== -----END CERTIFICATE-----Generated at Wed Dec 17 21:06:50 2025 by rpki-client