This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/63a5bb-24d0-4db9-b510-f9973c576b03/1/Iaoo3iG8kfOdvy0BL9VS0i0PWqo.mft File: Iaoo3iG8kfOdvy0BL9VS0i0PWqo.mft (raw, json) Hash identifier: 5mlAHzIPosi3A7SuCquLaT55MldrKeiqhf5YPSPWBJU= Subject key identifier: 1B:94:8F:6C:4C:4A:6B:C2:7C:E0:F8:48:6D:B4:71:4F:38:97:B4:CF Authority key identifier: 21:AA:28:DE:21:BC:91:F3:9D:BF:2D:01:2F:D5:52:D2:2D:0F:5A:AA Certificate issuer: /CN=21aa28de21bc91f39dbf2d012fd552d22d0f5aaa Certificate serial: 019B2DE6C16ABB1B2E7AFE951F0CAA114829 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Iaoo3iG8kfOdvy0BL9VS0i0PWqo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/63a5bb-24d0-4db9-b510-f9973c576b03/1/Iaoo3iG8kfOdvy0BL9VS0i0PWqo.mft Manifest number: 1783 Signing time: Wed 17 Dec 2025 20:00:56 +0000 Manifest this update: Wed 17 Dec 2025 20:00:56 +0000 Manifest next update: Thu 18 Dec 2025 20:00:56 +0000 Files and hashes: 1: Iaoo3iG8kfOdvy0BL9VS0i0PWqo.crl (hash: +u2qCLwIuVbSmr/5+VdfItW4+CBqNplgVDbHdYrpYuA=) 2: ZUnY6DcgMFOkn5YPuY63h16XVew.roa (hash: j75VTgwm6ax4o8jG9UYWYEtlaoF5sYfNI7iKEcRNxJM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/63a5bb-24d0-4db9-b510-f9973c576b03/1/Iaoo3iG8kfOdvy0BL9VS0i0PWqo.crl rsync://rpki.ripe.net/repository/DEFAULT/e1/63a5bb-24d0-4db9-b510-f9973c576b03/1/Iaoo3iG8kfOdvy0BL9VS0i0PWqo.mft rsync://rpki.ripe.net/repository/DEFAULT/Iaoo3iG8kfOdvy0BL9VS0i0PWqo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 19:00:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2d:e6:c1:6a:bb:1b:2e:7a:fe:95:1f:0c:aa:11:48:29 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=21aa28de21bc91f39dbf2d012fd552d22d0f5aaa Validity Not Before: Dec 17 20:00:56 2025 GMT Not After : Dec 18 20:00:56 2025 GMT Subject: CN=1b948f6c4c4a6bc27ce0f8486db4714f3897b4cf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:60:45:81:db:3e:b0:42:73:62:2c:7e:fa:e9: f8:84:b5:46:6a:0a:f6:f5:1d:11:ec:13:e4:aa:e7: f7:e0:02:cb:42:90:89:d7:7d:6c:0a:d4:66:7b:bb: 92:e4:c1:a7:d8:e2:b2:0d:14:50:28:dc:1d:2f:22: ea:f7:bd:01:71:03:4d:d8:2a:6e:0d:29:2e:f4:c9: 9b:98:70:c2:4c:23:f9:7e:c0:cb:30:c5:af:5e:69: 69:f5:5d:a8:43:24:00:e8:74:74:64:30:f3:71:c5: 9e:05:6d:9c:97:f6:60:05:f4:3d:ec:47:fc:b4:98: 54:8d:b1:fb:31:de:1c:9e:06:0c:ea:06:a1:46:8a: 9c:96:40:3b:66:27:85:e8:b5:bc:96:9f:6a:3c:84: 97:da:44:93:74:7a:b4:f9:d9:dd:33:e7:64:11:a8: 37:4e:26:51:eb:7c:ad:a7:10:42:3a:72:61:63:9a: e1:ca:ff:51:f5:a6:58:cf:39:dc:33:47:c4:ab:61: ed:4d:ff:93:c8:d1:68:76:f4:2e:59:d3:1b:32:cd: 88:10:7d:46:c8:33:ea:2f:c3:6a:ed:ef:2d:4d:6c: 12:e5:f5:2e:37:5f:07:d0:d9:fd:7d:ce:6d:fa:a2: a5:65:c5:f5:88:e2:64:5b:dd:38:c4:01:db:70:d6: 4d:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:94:8F:6C:4C:4A:6B:C2:7C:E0:F8:48:6D:B4:71:4F:38:97:B4:CF X509v3 Authority Key Identifier: keyid:21:AA:28:DE:21:BC:91:F3:9D:BF:2D:01:2F:D5:52:D2:2D:0F:5A:AA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Iaoo3iG8kfOdvy0BL9VS0i0PWqo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/63a5bb-24d0-4db9-b510-f9973c576b03/1/Iaoo3iG8kfOdvy0BL9VS0i0PWqo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/63a5bb-24d0-4db9-b510-f9973c576b03/1/Iaoo3iG8kfOdvy0BL9VS0i0PWqo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3e:aa:f0:57:f6:90:ea:79:77:6f:88:27:72:38:87:3a:d1:81: e4:12:61:c8:2c:4a:c4:50:47:56:1c:de:f2:f2:1d:50:a2:17: 14:ae:1a:9b:da:eb:e2:7e:6d:71:73:22:d6:a2:a9:3f:3d:14: 33:2c:e5:5b:22:84:3e:a7:0d:0b:1a:f0:a1:3d:71:ad:4f:38: f5:29:cd:62:76:dc:94:e6:07:eb:46:b8:23:ef:47:9e:70:29: 1d:73:f0:b5:62:51:93:b0:c7:6d:1a:41:27:2c:eb:57:d3:ea: f6:42:f2:49:fb:fb:be:0d:a6:71:61:61:93:db:a7:e5:c2:9e: db:3b:85:5d:ff:c2:ba:fb:3a:5a:4a:73:c3:99:8e:39:04:0b: 4f:06:0b:90:e8:aa:c3:e2:fa:f5:84:40:e5:a2:32:97:52:e0: 70:26:db:5f:9d:b1:04:d2:99:5b:f7:7d:7a:b8:d6:3f:ba:81: 25:77:bb:c1:75:d5:6b:51:14:f0:e7:2f:e5:72:11:df:74:fb: 7c:09:85:67:05:13:85:ef:ac:99:84:53:7a:0e:6e:85:83:44: c1:fc:43:5d:75:d0:95:a6:ad:42:79:f9:f1:89:e4:42:4a:67: 46:0e:3b:d9:c7:49:9a:84:2f:83:b4:d5:47:05:31:e2:cf:98: 06:4c:ea:31 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZst5sFquxsuev6VHwyqEUgpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIxYWEyOGRlMjFiYzkxZjM5ZGJmMmQwMTJmZDU1MmQyMmQw ZjVhYWEwHhcNMjUxMjE3MjAwMDU2WhcNMjUxMjE4MjAwMDU2WjAzMTEwLwYDVQQD EygxYjk0OGY2YzRjNGE2YmMyN2NlMGY4NDg2ZGI0NzE0ZjM4OTdiNGNmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9GBFgds+sEJzYix++un4hLVGagr2 9R0R7BPkquf34ALLQpCJ131sCtRme7uS5MGn2OKyDRRQKNwdLyLq970BcQNN2Cpu DSku9MmbmHDCTCP5fsDLMMWvXmlp9V2oQyQA6HR0ZDDzccWeBW2cl/ZgBfQ97Ef8 tJhUjbH7Md4cngYM6gahRoqclkA7ZieF6LW8lp9qPISX2kSTdHq0+dndM+dkEag3 TiZR63ytpxBCOnJhY5rhyv9R9aZYzzncM0fEq2HtTf+TyNFodvQuWdMbMs2IEH1G yDPqL8Nq7e8tTWwS5fUuN18H0Nn9fc5t+qKlZcX1iOJkW904xAHbcNZNpQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBuUj2xMSmvCfOD4SG20cU84l7TPMB8GA1UdIwQY MBaAFCGqKN4hvJHznb8tAS/VUtItD1qqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSWFvbzNpRzhrZk9kdnkwQkw5VlMwaTBQV3FvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMS82M2E1YmItMjRkMC00ZGI5LWI1MTAt Zjk5NzNjNTc2YjAzLzEvSWFvbzNpRzhrZk9kdnkwQkw5VlMwaTBQV3FvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMS82M2E1YmItMjRkMC00ZGI5LWI1MTAtZjk5NzNjNTc2YjAz LzEvSWFvbzNpRzhrZk9kdnkwQkw5VlMwaTBQV3FvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPqrwV/aQ 6nl3b4gncjiHOtGB5BJhyCxKxFBHVhze8vIdUKIXFK4am9rr4n5tcXMi1qKpPz0U MyzlWyKEPqcNCxrwoT1xrU849SnNYnbclOYH60a4I+9HnnApHXPwtWJRk7DHbRpB JyzrV9Pq9kLySfv7vg2mcWFhk9un5cKe2zuFXf/Cuvs6Wkpzw5mOOQQLTwYLkOiq w+L69YRA5aIyl1LgcCbbX52xBNKZW/d9erjWP7qBJXe7wXXVa1EU8Ocv5XIR33T7 fAmFZwUThe+smYRTeg5uhYNEwfxDXXXQlaatQnn58YnkQkpnRg472cdJmoQvg7TV RwUx4s+YBkzqMQ== -----END CERTIFICATE-----Generated at Thu Dec 18 02:12:17 2025 by rpki-client