This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/3b8a40-7610-4e4d-9b37-741fa4e10e36/1/ia4iC0do2m4nbmpi7dZ0bY_Dwfs.mft File: ia4iC0do2m4nbmpi7dZ0bY_Dwfs.mft (raw, json) Hash identifier: 7K6d/U6rCn78Gymho8/67kcrM8T6GcfCLpa8lOLNGxE= Subject key identifier: B1:DF:8C:3B:7E:D2:F5:BC:01:F5:3A:15:16:A7:AF:11:D6:88:7B:EB Authority key identifier: 89:AE:22:0B:47:68:DA:6E:27:6E:6A:62:ED:D6:74:6D:8F:C3:C1:FB Certificate issuer: /CN=89ae220b4768da6e276e6a62edd6746d8fc3c1fb Certificate serial: 019AF3C043A0F69854620C7E481CB641E413 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ia4iC0do2m4nbmpi7dZ0bY_Dwfs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/3b8a40-7610-4e4d-9b37-741fa4e10e36/1/ia4iC0do2m4nbmpi7dZ0bY_Dwfs.mft Manifest number: 0F17 Signing time: Sat 06 Dec 2025 13:00:54 +0000 Manifest this update: Sat 06 Dec 2025 13:00:54 +0000 Manifest next update: Sun 07 Dec 2025 13:00:54 +0000 Files and hashes: 1: ia4iC0do2m4nbmpi7dZ0bY_Dwfs.crl (hash: vVZWfw5nR3Fd3SE5u8/5Z038BoFgxUlaonyuWDx0t8E=) 2: qmO8Fiuuh9KuRm81yMzephu_U-o.roa (hash: JTX7Cj1zPyi8sR8Cn5QR+pzD+tvVds3MwvVGO5fjdhw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/3b8a40-7610-4e4d-9b37-741fa4e10e36/1/ia4iC0do2m4nbmpi7dZ0bY_Dwfs.crl rsync://rpki.ripe.net/repository/DEFAULT/c8/3b8a40-7610-4e4d-9b37-741fa4e10e36/1/ia4iC0do2m4nbmpi7dZ0bY_Dwfs.mft rsync://rpki.ripe.net/repository/DEFAULT/ia4iC0do2m4nbmpi7dZ0bY_Dwfs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:c0:43:a0:f6:98:54:62:0c:7e:48:1c:b6:41:e4:13 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89ae220b4768da6e276e6a62edd6746d8fc3c1fb Validity Not Before: Dec 6 13:00:54 2025 GMT Not After : Dec 7 13:00:54 2025 GMT Subject: CN=b1df8c3b7ed2f5bc01f53a1516a7af11d6887beb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:04:8f:7f:4f:af:e9:90:29:66:68:7e:ed:f4: 20:36:07:47:18:d0:e0:76:fd:e6:e3:59:0a:28:70: 24:96:9f:e7:26:ef:22:9b:8f:54:e7:f5:1e:a0:45: 38:01:15:ef:77:a0:e9:5f:1a:69:56:27:a9:99:34: e1:b0:df:c5:80:b7:15:36:af:0e:39:af:b5:b0:bc: 46:0b:b4:c2:75:08:d9:e4:f7:38:bb:9c:c0:5b:d3: f3:37:30:4b:b4:50:f8:1d:1a:96:4c:1b:73:e9:e2: b5:92:7e:5f:60:83:2f:db:d9:38:83:a6:ba:57:d8: 69:7b:c7:f5:17:05:c8:93:e3:c8:8c:1a:e1:a8:8e: a0:d8:76:b6:c1:c0:d1:80:9b:7c:91:fa:6a:84:ac: d5:80:31:3b:ad:e4:7d:74:6a:d8:09:c6:f9:64:49: 37:a6:59:ed:5e:75:b4:a7:b0:71:7c:9f:e9:75:4b: 39:25:90:83:cb:d7:69:eb:41:b2:56:04:19:e2:9f: 03:9d:a7:96:ef:23:bb:c8:42:45:12:0a:35:b1:93: 41:22:e0:2d:22:45:28:61:a3:10:c5:a8:f3:9d:ea: 5d:89:d3:96:ad:d0:08:b2:5c:3c:cc:5a:d1:bd:49: 7b:76:ec:d9:74:c1:01:c6:8d:68:c2:57:fd:4a:b7: d5:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:DF:8C:3B:7E:D2:F5:BC:01:F5:3A:15:16:A7:AF:11:D6:88:7B:EB X509v3 Authority Key Identifier: keyid:89:AE:22:0B:47:68:DA:6E:27:6E:6A:62:ED:D6:74:6D:8F:C3:C1:FB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ia4iC0do2m4nbmpi7dZ0bY_Dwfs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/3b8a40-7610-4e4d-9b37-741fa4e10e36/1/ia4iC0do2m4nbmpi7dZ0bY_Dwfs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/3b8a40-7610-4e4d-9b37-741fa4e10e36/1/ia4iC0do2m4nbmpi7dZ0bY_Dwfs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ba:bb:2a:70:4e:97:37:3d:1d:1b:a3:64:c6:33:fa:1d:fc:d2: 92:ad:1f:27:ef:79:4d:4f:01:d7:82:d0:41:59:03:b2:7f:ef: f0:40:3d:85:df:6b:1c:d2:b0:e1:b5:46:a5:ec:46:4c:bf:01: 1e:e7:16:7a:58:99:4f:72:4f:cf:5b:f9:dc:c4:28:89:ce:51: 30:b6:18:8e:bb:99:03:69:e3:b6:16:0d:41:4a:a6:af:ef:45: a4:f5:ac:d2:7e:34:8e:92:24:9e:54:f8:cc:38:19:84:2d:97: e8:a0:41:dd:96:f9:d0:f5:0d:57:a7:2d:07:c4:78:f7:24:a4: 4f:f9:f9:6d:47:ea:1f:0a:f8:7d:55:73:2d:c4:1e:84:81:3e: 7a:da:8c:38:f6:5a:3c:4b:65:70:47:0f:18:b2:89:69:d4:b6: 23:55:f7:aa:be:79:a6:4a:57:6a:29:41:6e:47:76:b1:ad:ca: 9e:3d:7e:73:1c:05:bf:40:36:b0:b7:15:4f:73:76:1e:83:1b: 4f:b8:d9:e4:d7:31:6e:63:c5:50:9a:ca:16:09:b8:d3:81:72: ee:15:83:ac:b9:f1:06:4b:10:b0:57:92:44:c2:fd:c0:6c:73: b0:f1:0b:32:7d:ab:ef:38:04:0a:6c:c4:60:fa:3f:ba:d2:e2: d6:bc:88:fa -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzwEOg9phUYgx+SBy2QeQTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg5YWUyMjBiNDc2OGRhNmUyNzZlNmE2MmVkZDY3NDZkOGZj M2MxZmIwHhcNMjUxMjA2MTMwMDU0WhcNMjUxMjA3MTMwMDU0WjAzMTEwLwYDVQQD EyhiMWRmOGMzYjdlZDJmNWJjMDFmNTNhMTUxNmE3YWYxMWQ2ODg3YmViMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzwSPf0+v6ZApZmh+7fQgNgdHGNDg dv3m41kKKHAklp/nJu8im49U5/UeoEU4ARXvd6DpXxppViepmTThsN/FgLcVNq8O Oa+1sLxGC7TCdQjZ5Pc4u5zAW9PzNzBLtFD4HRqWTBtz6eK1kn5fYIMv29k4g6a6 V9hpe8f1FwXIk+PIjBrhqI6g2Ha2wcDRgJt8kfpqhKzVgDE7reR9dGrYCcb5ZEk3 plntXnW0p7BxfJ/pdUs5JZCDy9dp60GyVgQZ4p8DnaeW7yO7yEJFEgo1sZNBIuAt IkUoYaMQxajznepdidOWrdAIslw8zFrRvUl7duzZdMEBxo1owlf9SrfVmQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLHfjDt+0vW8AfU6FRanrxHWiHvrMB8GA1UdIwQY MBaAFImuIgtHaNpuJ25qYu3WdG2Pw8H7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaWE0aUMwZG8ybTRuYm1waTdkWjBiWV9Ed2ZzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC8zYjhhNDAtNzYxMC00ZTRkLTliMzct NzQxZmE0ZTEwZTM2LzEvaWE0aUMwZG8ybTRuYm1waTdkWjBiWV9Ed2ZzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOC8zYjhhNDAtNzYxMC00ZTRkLTliMzctNzQxZmE0ZTEwZTM2 LzEvaWE0aUMwZG8ybTRuYm1waTdkWjBiWV9Ed2ZzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAursqcE6X Nz0dG6NkxjP6HfzSkq0fJ+95TU8B14LQQVkDsn/v8EA9hd9rHNKw4bVGpexGTL8B HucWeliZT3JPz1v53MQoic5RMLYYjruZA2njthYNQUqmr+9FpPWs0n40jpIknlT4 zDgZhC2X6KBB3Zb50PUNV6ctB8R49ySkT/n5bUfqHwr4fVVzLcQehIE+etqMOPZa PEtlcEcPGLKJadS2I1X3qr55pkpXailBbkd2sa3Knj1+cxwFv0A2sLcVT3N2HoMb T7jZ5NcxbmPFUJrKFgm404Fy7hWDrLnxBksQsFeSRML9wGxzsPELMn2r7zgECmzE YPo/utLi1ryI+g== -----END CERTIFICATE-----Generated at Sat Dec 6 21:35:01 2025 by rpki-client