This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/981816-8860-4c2e-adf6-0d0bf2b56d59/1/iXO4_LiuetyaeZnhNn25WphaweY.mft File: iXO4_LiuetyaeZnhNn25WphaweY.mft (raw, json) Hash identifier: 6LrrTDsHH1A/CItNuo3UN02pkVvMeKNcmPDqRZehIiU= Subject key identifier: 6F:37:B9:3E:31:FB:4C:57:7A:63:78:68:4E:5B:32:70:61:0C:60:D1 Authority key identifier: 89:73:B8:FC:B8:AE:7A:DC:9A:79:99:E1:36:7D:B9:5A:98:5A:C1:E6 Certificate issuer: /CN=8973b8fcb8ae7adc9a7999e1367db95a985ac1e6 Certificate serial: 019AF2767A609484AA96D16741159B5DC3BB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iXO4_LiuetyaeZnhNn25WphaweY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/981816-8860-4c2e-adf6-0d0bf2b56d59/1/iXO4_LiuetyaeZnhNn25WphaweY.mft Manifest number: 16F3 Signing time: Sat 06 Dec 2025 07:00:42 +0000 Manifest this update: Sat 06 Dec 2025 07:00:42 +0000 Manifest next update: Sun 07 Dec 2025 07:00:42 +0000 Files and hashes: 1: h4rlWsGQyp7l9eg6oqaTJSAFMT8.roa (hash: uarWJUMCX+17tjbtXPupyY/SCv5UIEMVh4slAsONpPQ=) 2: iXO4_LiuetyaeZnhNn25WphaweY.crl (hash: m7WqmXHJhEZbZXZ15kIXji7Sx7ZBw+iTTVAvIQAYOHM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/981816-8860-4c2e-adf6-0d0bf2b56d59/1/iXO4_LiuetyaeZnhNn25WphaweY.crl rsync://rpki.ripe.net/repository/DEFAULT/d0/981816-8860-4c2e-adf6-0d0bf2b56d59/1/iXO4_LiuetyaeZnhNn25WphaweY.mft rsync://rpki.ripe.net/repository/DEFAULT/iXO4_LiuetyaeZnhNn25WphaweY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:76:7a:60:94:84:aa:96:d1:67:41:15:9b:5d:c3:bb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8973b8fcb8ae7adc9a7999e1367db95a985ac1e6 Validity Not Before: Dec 6 07:00:42 2025 GMT Not After : Dec 7 07:00:42 2025 GMT Subject: CN=6f37b93e31fb4c577a6378684e5b3270610c60d1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:c7:ee:32:bf:f9:57:ee:64:9e:ff:30:5c:dd: 3b:fd:8d:42:5e:4f:bc:f0:cb:76:09:b2:d1:10:02: 6a:c6:16:98:c5:ba:f8:d3:0b:3f:bf:06:f6:af:2c: c7:83:c5:e9:1e:fd:bd:5b:4b:e2:10:2f:9b:90:ca: 0b:dc:66:87:51:6a:68:a1:90:29:b5:bb:46:c3:0d: 7d:ca:de:b5:77:04:cf:89:b7:79:a7:3b:67:74:0d: 10:37:f7:59:d2:1b:63:b3:67:48:22:2c:57:2a:47: d1:90:ed:db:25:a3:20:af:df:8d:8a:e8:ab:54:b6: 95:81:7f:bf:9a:7c:22:e8:8a:70:71:90:8b:e1:87: fa:45:60:e2:88:27:f8:71:e5:08:a2:a0:98:86:e2: 61:9e:07:26:22:3b:74:eb:36:b7:13:ee:73:64:e1: 08:5d:7c:77:d1:ad:fd:63:08:5f:b2:89:ba:cc:c1: 84:46:a0:2c:9e:96:21:4a:ba:32:c1:e3:7b:36:c0: 40:63:0b:1c:83:58:d5:16:7f:d9:f5:4f:89:90:81: b5:9c:7e:51:fa:43:3a:07:87:e4:d9:4f:47:9e:4d: a5:37:81:4a:c6:56:1a:a7:b3:fb:e2:c5:fb:44:1d: 59:b3:9d:a4:52:e9:a5:5d:48:24:86:67:79:ce:2f: bb:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:37:B9:3E:31:FB:4C:57:7A:63:78:68:4E:5B:32:70:61:0C:60:D1 X509v3 Authority Key Identifier: keyid:89:73:B8:FC:B8:AE:7A:DC:9A:79:99:E1:36:7D:B9:5A:98:5A:C1:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iXO4_LiuetyaeZnhNn25WphaweY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/981816-8860-4c2e-adf6-0d0bf2b56d59/1/iXO4_LiuetyaeZnhNn25WphaweY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/981816-8860-4c2e-adf6-0d0bf2b56d59/1/iXO4_LiuetyaeZnhNn25WphaweY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 77:3f:fe:80:32:a5:ad:87:ae:ee:17:76:1c:98:69:33:5b:d4: c4:ea:4c:0b:18:2e:7b:f1:0b:21:84:07:50:62:82:a9:5b:b7: 12:94:ab:63:67:69:be:3a:09:a1:c2:a0:03:0a:ec:2c:6f:2b: 77:21:bf:12:23:58:01:9c:74:a5:ca:71:84:be:0e:8a:8b:25: 7b:ff:0d:57:44:1f:9b:d4:1e:2b:0c:c7:e7:34:1d:04:bb:2e: 7c:06:75:34:7c:21:2f:d8:b3:dc:49:f9:5a:87:29:cb:7c:ed: d1:16:8d:31:a0:1a:b9:6f:6a:4b:b9:c7:ad:54:ec:d8:c4:1a: 56:2d:88:0e:96:ba:a4:14:12:55:9a:23:1b:c4:91:d3:d6:5b: d7:53:43:ff:4e:1b:cf:14:40:2b:54:df:1d:ab:11:60:48:5d: 39:3c:d3:ef:7f:db:9e:cf:82:07:4b:e7:e0:e5:47:48:ce:e7: c0:88:ed:a5:51:81:c9:4b:1e:57:fd:38:0e:20:30:a1:d1:17: ac:3c:d1:79:f0:06:97:42:62:a8:9b:f0:ac:f8:a7:4b:10:f1: 08:f7:38:a9:fe:22:f5:7b:55:f5:1d:86:6f:2a:bc:b8:a5:c7: ee:1d:0b:52:c0:c6:56:de:ab:0c:29:0d:a6:0b:25:9b:f7:d8: 73:c3:36:da -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrydnpglISqltFnQRWbXcO7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg5NzNiOGZjYjhhZTdhZGM5YTc5OTllMTM2N2RiOTVhOTg1 YWMxZTYwHhcNMjUxMjA2MDcwMDQyWhcNMjUxMjA3MDcwMDQyWjAzMTEwLwYDVQQD Eyg2ZjM3YjkzZTMxZmI0YzU3N2E2Mzc4Njg0ZTViMzI3MDYxMGM2MGQxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqMfuMr/5V+5knv8wXN07/Y1CXk+8 8Mt2CbLREAJqxhaYxbr40ws/vwb2ryzHg8XpHv29W0viEC+bkMoL3GaHUWpooZAp tbtGww19yt61dwTPibd5pztndA0QN/dZ0htjs2dIIixXKkfRkO3bJaMgr9+Niuir VLaVgX+/mnwi6IpwcZCL4Yf6RWDiiCf4ceUIoqCYhuJhngcmIjt06za3E+5zZOEI XXx30a39Ywhfsom6zMGERqAsnpYhSroyweN7NsBAYwscg1jVFn/Z9U+JkIG1nH5R +kM6B4fk2U9Hnk2lN4FKxlYap7P74sX7RB1Zs52kUumlXUgkhmd5zi+7cQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFG83uT4x+0xXemN4aE5bMnBhDGDRMB8GA1UdIwQY MBaAFIlzuPy4rnrcmnmZ4TZ9uVqYWsHmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaVhPNF9MaXVldHlhZVpuaE5uMjVXcGhhd2VZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC85ODE4MTYtODg2MC00YzJlLWFkZjYt MGQwYmYyYjU2ZDU5LzEvaVhPNF9MaXVldHlhZVpuaE5uMjVXcGhhd2VZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMC85ODE4MTYtODg2MC00YzJlLWFkZjYtMGQwYmYyYjU2ZDU5 LzEvaVhPNF9MaXVldHlhZVpuaE5uMjVXcGhhd2VZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdz/+gDKl rYeu7hd2HJhpM1vUxOpMCxgue/ELIYQHUGKCqVu3EpSrY2dpvjoJocKgAwrsLG8r dyG/EiNYAZx0pcpxhL4Oiosle/8NV0Qfm9QeKwzH5zQdBLsufAZ1NHwhL9iz3En5 Wocpy3zt0RaNMaAauW9qS7nHrVTs2MQaVi2IDpa6pBQSVZojG8SR09Zb11ND/04b zxRAK1TfHasRYEhdOTzT73/bns+CB0vn4OVHSM7nwIjtpVGByUseV/04DiAwodEX rDzRefAGl0JiqJvwrPinSxDxCPc4qf4i9XtV9R2Gbyq8uKXH7h0LUsDGVt6rDCkN pgslm/fYc8M22g== -----END CERTIFICATE-----Generated at Sat Dec 6 12:12:17 2025 by rpki-client