This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/571244-9c9a-43ac-930c-370c80769831/1/iJiSZOUPOa6IiuMnYQm7qALkWAE.mft File: iJiSZOUPOa6IiuMnYQm7qALkWAE.mft (raw, json) Hash identifier: Dadhw9BBS5NL23IWSl3u724rxndvSq2FJyNGIuM+Xbo= Subject key identifier: A5:3F:7F:A0:92:98:A0:C7:68:45:90:9E:14:04:4A:40:7A:07:C4:66 Authority key identifier: 88:98:92:64:E5:0F:39:AE:88:8A:E3:27:61:09:BB:A8:02:E4:58:01 Certificate issuer: /CN=88989264e50f39ae888ae3276109bba802e45801 Certificate serial: 019AF653174F3FE5B92818951570D3F51F66 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iJiSZOUPOa6IiuMnYQm7qALkWAE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/571244-9c9a-43ac-930c-370c80769831/1/iJiSZOUPOa6IiuMnYQm7qALkWAE.mft Manifest number: 03FB Signing time: Sun 07 Dec 2025 01:00:31 +0000 Manifest this update: Sun 07 Dec 2025 01:00:31 +0000 Manifest next update: Mon 08 Dec 2025 01:00:31 +0000 Files and hashes: 1: e7H9B5-pB3ikZ5-oh15fm0ggCqI.roa (hash: We6P0vvIkU060wWseVebnunaD4trxKPA+u+6dudIhmU=) 2: iJiSZOUPOa6IiuMnYQm7qALkWAE.crl (hash: igXe9VPUuCCFI0jiumQ3Y00NYATvgIjZ0KYa6bNdp1A=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/571244-9c9a-43ac-930c-370c80769831/1/iJiSZOUPOa6IiuMnYQm7qALkWAE.crl rsync://rpki.ripe.net/repository/DEFAULT/da/571244-9c9a-43ac-930c-370c80769831/1/iJiSZOUPOa6IiuMnYQm7qALkWAE.mft rsync://rpki.ripe.net/repository/DEFAULT/iJiSZOUPOa6IiuMnYQm7qALkWAE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 21:29:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f6:53:17:4f:3f:e5:b9:28:18:95:15:70:d3:f5:1f:66 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=88989264e50f39ae888ae3276109bba802e45801 Validity Not Before: Dec 7 01:00:31 2025 GMT Not After : Dec 8 01:00:31 2025 GMT Subject: CN=a53f7fa09298a0c76845909e14044a407a07c466 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:1d:f3:b5:a2:51:74:f9:20:32:6f:26:46:56: 61:23:de:ed:63:6e:7d:d7:8e:8d:2b:d0:32:f3:e9: e5:94:b4:f2:12:18:d7:87:b7:2b:5e:8f:a0:c7:e6: 85:07:a0:33:87:2b:2a:f1:90:46:69:a7:99:39:c5: 39:a2:3d:5b:52:51:93:35:1b:f5:1f:5e:05:00:c4: 8c:b3:ea:94:37:c9:d5:7d:1a:4e:51:51:fb:38:6c: 15:ba:b4:91:49:19:b2:2c:60:12:f1:31:ed:77:f9: c1:8e:8c:ae:ad:43:8b:c3:ff:94:b0:ec:ba:c5:d4: 06:47:c6:85:66:85:2f:4f:f6:09:66:4d:0a:5e:d1: 52:88:50:17:b5:2b:1d:17:45:5a:76:4d:9c:04:fd: 91:1f:b1:1a:29:86:d1:03:7c:c8:63:bc:8e:ba:2b: 35:59:53:49:f5:e7:21:36:a1:71:8b:87:83:6c:63: e4:f6:90:c6:26:fb:79:a0:a1:9f:0e:8f:63:9c:8a: 08:5e:bc:bc:0e:54:49:0a:b3:18:ca:b5:df:bd:9d: 93:83:17:9d:54:f2:b4:98:98:c5:49:3e:a0:e1:87: d7:2d:6b:7c:39:45:54:5e:e7:57:d1:31:d4:27:13: 8d:1b:76:3f:c5:bb:e7:fa:ea:da:b7:3c:c8:ff:26: 50:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:3F:7F:A0:92:98:A0:C7:68:45:90:9E:14:04:4A:40:7A:07:C4:66 X509v3 Authority Key Identifier: keyid:88:98:92:64:E5:0F:39:AE:88:8A:E3:27:61:09:BB:A8:02:E4:58:01 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iJiSZOUPOa6IiuMnYQm7qALkWAE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/571244-9c9a-43ac-930c-370c80769831/1/iJiSZOUPOa6IiuMnYQm7qALkWAE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/da/571244-9c9a-43ac-930c-370c80769831/1/iJiSZOUPOa6IiuMnYQm7qALkWAE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 51:ed:86:3e:2c:c4:36:1a:36:5e:9e:2f:82:34:03:21:58:30: 8e:9b:a2:6d:a9:d0:0e:5f:f4:48:c0:4f:4c:4a:63:15:00:9f: 55:84:1c:db:b0:dc:38:24:09:a9:53:f7:d8:63:03:65:ec:90: 17:ce:05:d4:1a:03:af:07:b4:08:9d:21:44:79:cf:c9:b4:d4: 5d:de:d6:40:54:31:cc:36:be:27:21:a1:e1:19:b9:ea:91:94: 82:47:f8:c7:f7:ae:b8:38:33:cb:8b:93:0e:86:c4:cf:3f:a9: 83:95:1c:b5:23:c9:40:a7:3a:80:6a:01:8a:39:cf:a0:20:1d: 62:b3:37:47:e8:90:22:7f:eb:8f:f7:42:b0:96:3f:b4:cf:da: df:62:02:12:58:88:27:c6:51:99:8c:58:5b:6a:49:c1:45:e6: 44:3a:81:e4:ec:40:89:3a:af:87:12:27:f0:79:1f:5d:7c:0a: a5:f1:c3:d6:1d:61:0c:40:b4:d7:e5:10:08:69:53:98:19:37: 0f:21:d5:68:18:66:9b:6d:d0:60:07:c9:c1:62:9f:ee:fd:d3: d4:1c:ba:0e:e2:a0:25:fa:f5:d7:21:47:75:d4:ca:07:7e:5e: 05:3f:09:51:28:e3:08:ce:3f:94:9c:92:0d:b3:c4:b0:07:da: 88:fc:d3:f3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr2UxdPP+W5KBiVFXDT9R9mMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg4OTg5MjY0ZTUwZjM5YWU4ODhhZTMyNzYxMDliYmE4MDJl NDU4MDEwHhcNMjUxMjA3MDEwMDMxWhcNMjUxMjA4MDEwMDMxWjAzMTEwLwYDVQQD EyhhNTNmN2ZhMDkyOThhMGM3Njg0NTkwOWUxNDA0NGE0MDdhMDdjNDY2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnR3ztaJRdPkgMm8mRlZhI97tY259 146NK9Ay8+nllLTyEhjXh7crXo+gx+aFB6Azhysq8ZBGaaeZOcU5oj1bUlGTNRv1 H14FAMSMs+qUN8nVfRpOUVH7OGwVurSRSRmyLGAS8THtd/nBjoyurUOLw/+UsOy6 xdQGR8aFZoUvT/YJZk0KXtFSiFAXtSsdF0Vadk2cBP2RH7EaKYbRA3zIY7yOuis1 WVNJ9echNqFxi4eDbGPk9pDGJvt5oKGfDo9jnIoIXry8DlRJCrMYyrXfvZ2Tgxed VPK0mJjFST6g4YfXLWt8OUVUXudX0THUJxONG3Y/xbvn+uratzzI/yZQaQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKU/f6CSmKDHaEWQnhQESkB6B8RmMB8GA1UdIwQY MBaAFIiYkmTlDzmuiIrjJ2EJu6gC5FgBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaUppU1pPVVBPYTZJaXVNbllRbTdxQUxrV0FFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYS81NzEyNDQtOWM5YS00M2FjLTkzMGMt MzcwYzgwNzY5ODMxLzEvaUppU1pPVVBPYTZJaXVNbllRbTdxQUxrV0FFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYS81NzEyNDQtOWM5YS00M2FjLTkzMGMtMzcwYzgwNzY5ODMx LzEvaUppU1pPVVBPYTZJaXVNbllRbTdxQUxrV0FFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUe2GPizE Nho2Xp4vgjQDIVgwjpuibanQDl/0SMBPTEpjFQCfVYQc27DcOCQJqVP32GMDZeyQ F84F1BoDrwe0CJ0hRHnPybTUXd7WQFQxzDa+JyGh4Rm56pGUgkf4x/euuDgzy4uT DobEzz+pg5UctSPJQKc6gGoBijnPoCAdYrM3R+iQIn/rj/dCsJY/tM/a32ICEliI J8ZRmYxYW2pJwUXmRDqB5OxAiTqvhxIn8HkfXXwKpfHD1h1hDEC01+UQCGlTmBk3 DyHVaBhmm23QYAfJwWKf7v3T1By6DuKgJfr11yFHddTKB35eBT8JUSjjCM4/lJyS DbPEsAfaiPzT8w== -----END CERTIFICATE-----Generated at Sun Dec 7 02:59:15 2025 by rpki-client