This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/e90f51-89aa-49eb-9ea6-fbe8bc5a29fa/1/ia7Sz_jOMbM0-DoLMF_u8B1x2nU.mft File: ia7Sz_jOMbM0-DoLMF_u8B1x2nU.mft (raw, json) Hash identifier: 6nLW8WLpQWVD6iEteAbELFOVsW1E2zkMvE1zw+LTE9A= Subject key identifier: 4E:C0:BD:D9:2D:B3:CF:69:28:07:9E:39:7A:D2:DF:65:05:4C:FA:39 Authority key identifier: 89:AE:D2:CF:F8:CE:31:B3:34:F8:3A:0B:30:5F:EE:F0:1D:71:DA:75 Certificate issuer: /CN=89aed2cff8ce31b334f83a0b305feef01d71da75 Certificate serial: 019AF509B44B8AFF9A864848510861598AB5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ia7Sz_jOMbM0-DoLMF_u8B1x2nU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/e90f51-89aa-49eb-9ea6-fbe8bc5a29fa/1/ia7Sz_jOMbM0-DoLMF_u8B1x2nU.mft Manifest number: 171D Signing time: Sat 06 Dec 2025 19:00:44 +0000 Manifest this update: Sat 06 Dec 2025 19:00:44 +0000 Manifest next update: Sun 07 Dec 2025 19:00:44 +0000 Files and hashes: 1: TuA6dq5RUfQK0g-nhGPwelxAp8s.roa (hash: A068hT4+Hwiukpw4NAI0ekcWki3f2qgAy0smH/qbl44=) 2: ia7Sz_jOMbM0-DoLMF_u8B1x2nU.crl (hash: 4K/VeXAf6kc07+fTda6rsuLH9UlET+8EON44Rycu4hw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/e90f51-89aa-49eb-9ea6-fbe8bc5a29fa/1/ia7Sz_jOMbM0-DoLMF_u8B1x2nU.crl rsync://rpki.ripe.net/repository/DEFAULT/d2/e90f51-89aa-49eb-9ea6-fbe8bc5a29fa/1/ia7Sz_jOMbM0-DoLMF_u8B1x2nU.mft rsync://rpki.ripe.net/repository/DEFAULT/ia7Sz_jOMbM0-DoLMF_u8B1x2nU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 19:00:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:09:b4:4b:8a:ff:9a:86:48:48:51:08:61:59:8a:b5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89aed2cff8ce31b334f83a0b305feef01d71da75 Validity Not Before: Dec 6 19:00:44 2025 GMT Not After : Dec 7 19:00:44 2025 GMT Subject: CN=4ec0bdd92db3cf6928079e397ad2df65054cfa39 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:45:6d:4d:b1:7b:c2:b8:37:a3:80:10:c6:9e: 8a:b4:da:7a:6e:1d:e6:5c:71:a6:66:d4:56:0a:e4: 5a:87:cc:59:fe:54:76:92:08:ed:29:81:6a:cb:d0: 6a:31:24:d0:14:4f:e5:77:94:f1:98:44:62:73:a4: f6:77:1c:7c:d4:1c:cb:af:4b:16:c8:4d:eb:91:61: 35:69:e8:f0:dd:fd:d2:91:37:20:00:1a:b8:69:9c: 0a:60:f2:c4:63:63:c2:c1:e8:db:1c:7c:b9:88:3f: 06:8f:a2:3c:9d:b1:9f:a8:af:43:fc:04:bf:82:32: a9:3b:2b:bb:06:5c:30:34:62:9f:7b:6f:4c:76:4c: 26:da:91:40:53:2f:c2:fd:99:31:e7:43:37:98:e9: ae:e5:15:ad:4c:b7:56:64:24:db:ef:68:b7:ab:a3: fa:c6:3f:44:81:c4:4e:1b:af:4c:cb:1a:7c:32:f6: 97:63:5c:c8:dd:d1:0b:91:ac:6f:ab:ed:fa:86:33: de:6c:51:2f:2c:9e:8e:41:a2:67:07:1e:8b:e8:25: a8:3a:80:ec:9d:7f:30:7a:c2:9c:65:39:81:95:51: 61:5c:e2:c2:93:e9:4c:32:cc:bd:9c:d2:83:e4:23: fe:d1:01:58:43:2f:c2:17:21:8d:63:94:33:ef:f8: 96:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:C0:BD:D9:2D:B3:CF:69:28:07:9E:39:7A:D2:DF:65:05:4C:FA:39 X509v3 Authority Key Identifier: keyid:89:AE:D2:CF:F8:CE:31:B3:34:F8:3A:0B:30:5F:EE:F0:1D:71:DA:75 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ia7Sz_jOMbM0-DoLMF_u8B1x2nU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/e90f51-89aa-49eb-9ea6-fbe8bc5a29fa/1/ia7Sz_jOMbM0-DoLMF_u8B1x2nU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/e90f51-89aa-49eb-9ea6-fbe8bc5a29fa/1/ia7Sz_jOMbM0-DoLMF_u8B1x2nU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 60:69:d6:6d:29:05:ee:98:d9:70:39:2b:56:a3:2a:31:75:c1: 86:ab:ce:0c:64:70:fb:05:cf:4e:57:b6:41:47:3a:c9:6d:0d: b6:d8:06:97:db:f6:49:bb:48:f5:a0:59:9f:14:d7:1b:aa:6d: 6a:a5:13:b4:23:b9:25:71:7b:40:30:05:5c:da:b3:3d:57:4f: b2:65:62:34:d5:91:5a:cd:d9:37:de:9e:57:81:c7:5c:43:51: 1c:40:d6:33:1d:74:f6:27:07:cc:84:01:7f:68:02:2b:94:da: 51:ba:da:8c:86:58:ca:1c:dd:45:61:2d:b2:65:ba:b1:db:db: 3b:83:08:f1:1b:b1:2b:93:1c:95:3b:df:cb:fc:fc:fe:07:48: 16:d3:17:35:9b:05:02:9f:e9:a5:ae:67:9b:9e:2c:d0:e7:fe: 55:00:1f:d4:c1:80:23:a0:52:7a:11:42:ac:96:55:bb:63:b3: a3:16:da:eb:b2:a3:93:5e:59:98:1b:15:e5:31:6f:58:c9:9b: fe:a8:37:ca:08:99:cb:ed:56:6f:37:20:ca:51:cf:27:3b:0e: 9a:7d:58:0c:d2:5d:9e:c5:72:6a:ba:e4:d9:a6:5c:33:07:90: ea:d8:e7:69:50:b7:7a:0f:d8:9b:e5:75:e4:88:ce:72:6e:4a: d3:a9:31:91 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1CbRLiv+ahkhIUQhhWYq1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg5YWVkMmNmZjhjZTMxYjMzNGY4M2EwYjMwNWZlZWYwMWQ3 MWRhNzUwHhcNMjUxMjA2MTkwMDQ0WhcNMjUxMjA3MTkwMDQ0WjAzMTEwLwYDVQQD Eyg0ZWMwYmRkOTJkYjNjZjY5MjgwNzllMzk3YWQyZGY2NTA1NGNmYTM5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAukVtTbF7wrg3o4AQxp6KtNp6bh3m XHGmZtRWCuRah8xZ/lR2kgjtKYFqy9BqMSTQFE/ld5TxmERic6T2dxx81BzLr0sW yE3rkWE1aejw3f3SkTcgABq4aZwKYPLEY2PCwejbHHy5iD8Gj6I8nbGfqK9D/AS/ gjKpOyu7BlwwNGKfe29Mdkwm2pFAUy/C/Zkx50M3mOmu5RWtTLdWZCTb72i3q6P6 xj9EgcROG69Myxp8MvaXY1zI3dELkaxvq+36hjPebFEvLJ6OQaJnBx6L6CWoOoDs nX8wesKcZTmBlVFhXOLCk+lMMsy9nNKD5CP+0QFYQy/CFyGNY5Qz7/iWCQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFE7Avdkts89pKAeeOXrS32UFTPo5MB8GA1UdIwQY MBaAFImu0s/4zjGzNPg6CzBf7vAdcdp1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaWE3U3pfak9NYk0wLURvTE1GX3U4QjF4Mm5VLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMi9lOTBmNTEtODlhYS00OWViLTllYTYt ZmJlOGJjNWEyOWZhLzEvaWE3U3pfak9NYk0wLURvTE1GX3U4QjF4Mm5VLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMi9lOTBmNTEtODlhYS00OWViLTllYTYtZmJlOGJjNWEyOWZh LzEvaWE3U3pfak9NYk0wLURvTE1GX3U4QjF4Mm5VLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYGnWbSkF 7pjZcDkrVqMqMXXBhqvODGRw+wXPTle2QUc6yW0NttgGl9v2SbtI9aBZnxTXG6pt aqUTtCO5JXF7QDAFXNqzPVdPsmViNNWRWs3ZN96eV4HHXENRHEDWMx109icHzIQB f2gCK5TaUbrajIZYyhzdRWEtsmW6sdvbO4MI8RuxK5MclTvfy/z8/gdIFtMXNZsF Ap/ppa5nm54s0Of+VQAf1MGAI6BSehFCrJZVu2Ozoxba67Kjk15ZmBsV5TFvWMmb /qg3ygiZy+1WbzcgylHPJzsOmn1YDNJdnsVyarrk2aZcMweQ6tjnaVC3eg/Ym+V1 5IjOcm5K06kxkQ== -----END CERTIFICATE-----Generated at Sun Dec 7 00:53:15 2025 by rpki-client