This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/f8237c-e04a-4ddd-8ceb-d0f249bc3fed/1/irCobN7x1oVdGd50F1Nzzcga78w.mft File: irCobN7x1oVdGd50F1Nzzcga78w.mft (raw, json) Hash identifier: oa1qEJ9m1lkqVjIdYTtO3nNVjlZrIADsqaWlIeonnQs= Subject key identifier: 5A:A9:F7:BD:30:1F:C3:65:11:69:BC:82:5F:6A:22:1D:ED:B4:86:6A Authority key identifier: 8A:B0:A8:6C:DE:F1:D6:85:5D:19:DE:74:17:53:73:CD:C8:1A:EF:CC Certificate issuer: /CN=8ab0a86cdef1d6855d19de74175373cdc81aefcc Certificate serial: 019AF12E568BA8112122EF2E3A68CC88AC13 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/irCobN7x1oVdGd50F1Nzzcga78w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/f8237c-e04a-4ddd-8ceb-d0f249bc3fed/1/irCobN7x1oVdGd50F1Nzzcga78w.mft Manifest number: 0216 Signing time: Sat 06 Dec 2025 01:02:17 +0000 Manifest this update: Sat 06 Dec 2025 01:02:17 +0000 Manifest next update: Sun 07 Dec 2025 01:02:17 +0000 Files and hashes: 1: iDD0dIi8FZu6HOhyS7tjvaUtgQE.roa (hash: 0JHKcL5Vnxkq7EPVZmPbz9exzTMRAeW5CIg2FGWWjPE=) 2: irCobN7x1oVdGd50F1Nzzcga78w.crl (hash: bRS8i5AeddRGsBpMGWNObUIMAqA9+xYlJFmRwWuBL2w=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/f8237c-e04a-4ddd-8ceb-d0f249bc3fed/1/irCobN7x1oVdGd50F1Nzzcga78w.crl rsync://rpki.ripe.net/repository/DEFAULT/d9/f8237c-e04a-4ddd-8ceb-d0f249bc3fed/1/irCobN7x1oVdGd50F1Nzzcga78w.mft rsync://rpki.ripe.net/repository/DEFAULT/irCobN7x1oVdGd50F1Nzzcga78w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:02:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2e:56:8b:a8:11:21:22:ef:2e:3a:68:cc:88:ac:13 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8ab0a86cdef1d6855d19de74175373cdc81aefcc Validity Not Before: Dec 6 01:02:17 2025 GMT Not After : Dec 7 01:02:17 2025 GMT Subject: CN=5aa9f7bd301fc3651169bc825f6a221dedb4866a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:27:2f:36:07:7e:b5:dd:fb:a8:4b:db:1c:03: b3:b9:e5:d0:a3:71:3c:fb:9a:80:2c:e5:51:3e:62: 05:92:76:b7:e0:67:f3:a1:20:00:cf:ba:ba:a7:72: e3:ed:ea:cc:d0:68:d9:0f:bc:08:10:4c:01:22:67: 90:55:bf:69:71:b4:f3:6d:0b:c4:1e:72:b6:a7:9e: ce:05:c6:aa:25:6c:57:95:e7:49:f0:75:50:f0:fc: 59:6c:d1:44:26:c9:48:58:e9:83:54:68:80:1b:8e: ad:58:81:a4:2d:14:89:b8:ff:f5:2f:3f:4e:5d:ca: 47:c3:b0:07:3a:e1:78:14:09:27:3f:88:d6:3f:79: 0f:7a:f2:10:7e:e8:c8:ea:ba:70:f8:23:13:ad:cb: 21:8b:d2:0b:6f:a2:d0:55:54:49:93:b8:21:59:2b: e7:96:6b:7f:82:c3:ba:3f:80:dc:2a:9b:7c:60:98: f5:27:7f:7c:ae:49:8f:ac:8f:b3:53:ae:c6:43:42: a3:8b:a7:6a:37:5a:61:52:60:80:62:f9:07:9c:b4: 1e:f8:e2:1c:33:f8:f5:06:c5:46:5f:90:60:f9:c1: 64:18:3f:51:3e:42:c3:04:b9:72:4e:19:af:94:69: 20:69:ee:c9:eb:68:43:fc:02:dd:3c:23:8d:2b:de: 86:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:A9:F7:BD:30:1F:C3:65:11:69:BC:82:5F:6A:22:1D:ED:B4:86:6A X509v3 Authority Key Identifier: keyid:8A:B0:A8:6C:DE:F1:D6:85:5D:19:DE:74:17:53:73:CD:C8:1A:EF:CC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/irCobN7x1oVdGd50F1Nzzcga78w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/f8237c-e04a-4ddd-8ceb-d0f249bc3fed/1/irCobN7x1oVdGd50F1Nzzcga78w.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/f8237c-e04a-4ddd-8ceb-d0f249bc3fed/1/irCobN7x1oVdGd50F1Nzzcga78w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 13:cc:de:8d:8d:cd:fb:57:7f:ff:eb:92:c2:90:82:36:25:96: 3c:25:11:e5:75:73:e4:ce:68:69:97:38:d2:0d:07:d3:84:e4: b1:fc:9a:21:0a:48:01:40:fc:0c:23:64:d5:c9:c6:c5:b8:e1: 17:a2:64:c1:f3:1c:c5:5b:52:d6:bb:60:e4:6f:e6:1f:cc:ed: 43:73:65:c2:4e:fb:40:22:27:45:27:6f:d3:43:1a:94:c1:78: e8:b2:16:e4:81:6b:e6:23:81:e8:d2:e2:11:a4:b9:b9:55:fa: b9:42:7f:d6:72:3b:e3:86:f1:6e:93:1f:6b:ad:2d:74:d2:1e: 96:48:31:d9:08:3e:db:3e:a3:c5:e9:84:82:a7:4f:e9:72:6f: 2a:54:9b:53:de:a5:98:63:c6:d0:7a:e9:83:b3:6a:1d:73:a9: 55:69:8c:ca:d2:d6:b9:1b:ce:48:a9:be:e6:57:5c:18:cf:29: fe:01:23:0c:44:27:62:44:44:7d:62:7c:ad:4f:fc:d0:7d:fe: c7:73:68:90:c2:3a:08:22:f8:3b:23:30:69:c0:7e:00:37:75: 55:45:58:8e:80:c7:31:29:e9:d3:f2:ca:ae:34:dc:99:c3:3a: ba:a5:b2:e5:7d:e1:7e:34:33:de:e7:c4:19:cc:1c:35:73:75: 46:c2:35:62 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLlaLqBEhIu8uOmjMiKwTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhhYjBhODZjZGVmMWQ2ODU1ZDE5ZGU3NDE3NTM3M2NkYzgx YWVmY2MwHhcNMjUxMjA2MDEwMjE3WhcNMjUxMjA3MDEwMjE3WjAzMTEwLwYDVQQD Eyg1YWE5ZjdiZDMwMWZjMzY1MTE2OWJjODI1ZjZhMjIxZGVkYjQ4NjZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3ycvNgd+td37qEvbHAOzueXQo3E8 +5qALOVRPmIFkna34GfzoSAAz7q6p3Lj7erM0GjZD7wIEEwBImeQVb9pcbTzbQvE HnK2p57OBcaqJWxXledJ8HVQ8PxZbNFEJslIWOmDVGiAG46tWIGkLRSJuP/1Lz9O XcpHw7AHOuF4FAknP4jWP3kPevIQfujI6rpw+CMTrcshi9ILb6LQVVRJk7ghWSvn lmt/gsO6P4DcKpt8YJj1J398rkmPrI+zU67GQ0Kji6dqN1phUmCAYvkHnLQe+OIc M/j1BsVGX5Bg+cFkGD9RPkLDBLlyThmvlGkgae7J62hD/ALdPCONK96GuwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFqp970wH8NlEWm8gl9qIh3ttIZqMB8GA1UdIwQY MBaAFIqwqGze8daFXRnedBdTc83IGu/MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaXJDb2JON3gxb1ZkR2Q1MEYxTnp6Y2dhNzh3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS9mODIzN2MtZTA0YS00ZGRkLThjZWIt ZDBmMjQ5YmMzZmVkLzEvaXJDb2JON3gxb1ZkR2Q1MEYxTnp6Y2dhNzh3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kOS9mODIzN2MtZTA0YS00ZGRkLThjZWItZDBmMjQ5YmMzZmVk LzEvaXJDb2JON3gxb1ZkR2Q1MEYxTnp6Y2dhNzh3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAE8zejY3N +1d//+uSwpCCNiWWPCUR5XVz5M5oaZc40g0H04TksfyaIQpIAUD8DCNk1cnGxbjh F6JkwfMcxVtS1rtg5G/mH8ztQ3Nlwk77QCInRSdv00MalMF46LIW5IFr5iOB6NLi EaS5uVX6uUJ/1nI744bxbpMfa60tdNIelkgx2Qg+2z6jxemEgqdP6XJvKlSbU96l mGPG0Hrpg7NqHXOpVWmMytLWuRvOSKm+5ldcGM8p/gEjDEQnYkREfWJ8rU/80H3+ x3NokMI6CCL4OyMwacB+ADd1VUVYjoDHMSnp0/LKrjTcmcM6uqWy5X3hfjQz3ufE GcwcNXN1RsI1Yg== -----END CERTIFICATE-----Generated at Sat Dec 6 08:06:47 2025 by rpki-client