This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/2a55a5-3304-4108-8d92-4d8e90e0333b/1/ia6mmISBzqS5W2UTHMSYhPPtDj8.mft File: ia6mmISBzqS5W2UTHMSYhPPtDj8.mft (raw, json) Hash identifier: DdsoPdG5DBEwBGeSpy8IN0YWb99TNe8iPC0t1aVE7jw= Subject key identifier: 1C:C6:EF:2E:48:7F:2A:6D:8F:22:8F:7E:50:C4:E5:32:C2:28:23:0C Authority key identifier: 89:AE:A6:98:84:81:CE:A4:B9:5B:65:13:1C:C4:98:84:F3:ED:0E:3F Certificate issuer: /CN=89aea6988481cea4b95b65131cc49884f3ed0e3f Certificate serial: 019AF163E0A5E6122C98EACB55133275E5C6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ia6mmISBzqS5W2UTHMSYhPPtDj8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/2a55a5-3304-4108-8d92-4d8e90e0333b/1/ia6mmISBzqS5W2UTHMSYhPPtDj8.mft Manifest number: 1761 Signing time: Sat 06 Dec 2025 02:00:45 +0000 Manifest this update: Sat 06 Dec 2025 02:00:45 +0000 Manifest next update: Sun 07 Dec 2025 02:00:45 +0000 Files and hashes: 1: Fl6pOlPLU-YJzCc-HkB3wwedcd0.roa (hash: jlDQ+VkQoTEiq8ZQ7EeJUmtKUn70x3pUuA4q7simdPM=) 2: ia6mmISBzqS5W2UTHMSYhPPtDj8.crl (hash: Yc+AAQOxC8+3/kIgj+3LEpkszbCcXbPLlLP4kNcDY/I=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/2a55a5-3304-4108-8d92-4d8e90e0333b/1/ia6mmISBzqS5W2UTHMSYhPPtDj8.crl rsync://rpki.ripe.net/repository/DEFAULT/e4/2a55a5-3304-4108-8d92-4d8e90e0333b/1/ia6mmISBzqS5W2UTHMSYhPPtDj8.mft rsync://rpki.ripe.net/repository/DEFAULT/ia6mmISBzqS5W2UTHMSYhPPtDj8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:63:e0:a5:e6:12:2c:98:ea:cb:55:13:32:75:e5:c6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89aea6988481cea4b95b65131cc49884f3ed0e3f Validity Not Before: Dec 6 02:00:45 2025 GMT Not After : Dec 7 02:00:45 2025 GMT Subject: CN=1cc6ef2e487f2a6d8f228f7e50c4e532c228230c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:55:64:83:a0:55:d8:64:24:99:63:7f:4e:1f: c5:b6:0f:8c:94:68:4b:f8:bd:03:62:d2:1c:46:72: b2:71:17:78:e8:3a:5e:d0:38:73:87:8d:31:67:15: fd:0a:38:f3:d7:5a:73:18:0b:58:7b:c1:3b:51:9c: 42:5e:4a:ca:2a:2c:f9:d2:fc:83:13:19:5a:ad:82: 52:11:47:13:db:ac:6e:8d:ec:98:b7:25:16:1c:01: e6:1a:70:4a:34:dd:0b:d3:f0:cf:0c:b8:e3:43:44: aa:1d:a4:96:6b:65:62:88:bf:d1:2c:6f:6e:29:95: 0f:ce:5e:9c:e1:ff:2b:33:10:3a:f2:86:1d:b6:3d: 36:ae:bb:7d:78:48:43:60:bf:34:36:91:65:ab:99: a6:24:0b:2f:9c:2c:03:4b:e2:ad:6b:41:9a:5d:ea: 5c:1c:dc:55:e3:a4:e3:20:90:cd:d6:82:7e:18:2b: 4b:7a:4d:c7:10:85:d6:02:87:3f:b7:54:34:e3:79: 70:70:44:0d:54:ee:cf:69:5c:ef:39:7d:9b:c1:fa: b3:70:1a:53:c1:16:fd:83:b6:0e:db:51:ef:7d:30: 67:b3:98:39:ba:cb:c4:76:af:ce:dd:74:39:36:90: a9:e9:51:06:e0:43:d9:c5:7c:a5:e5:34:9b:d2:cd: 8c:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:C6:EF:2E:48:7F:2A:6D:8F:22:8F:7E:50:C4:E5:32:C2:28:23:0C X509v3 Authority Key Identifier: keyid:89:AE:A6:98:84:81:CE:A4:B9:5B:65:13:1C:C4:98:84:F3:ED:0E:3F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ia6mmISBzqS5W2UTHMSYhPPtDj8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/2a55a5-3304-4108-8d92-4d8e90e0333b/1/ia6mmISBzqS5W2UTHMSYhPPtDj8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/2a55a5-3304-4108-8d92-4d8e90e0333b/1/ia6mmISBzqS5W2UTHMSYhPPtDj8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 39:91:b8:c1:a9:e5:55:3a:49:93:ec:8e:84:32:57:8e:8c:26: 00:9f:1f:32:f8:c5:c0:c8:3f:24:61:d2:1f:57:d0:b8:47:1e: 26:da:3c:7d:f7:c4:98:a0:a9:7a:37:1f:13:e6:fa:48:bd:70: 4b:67:7d:cd:b9:2f:18:46:74:2f:50:65:e8:fb:b0:61:17:ad: 86:e9:07:a5:fb:02:f0:21:ae:d3:01:3c:0a:a2:dc:b0:af:d9: de:83:6b:56:05:09:63:97:3f:01:36:90:fa:3b:9f:c3:88:49: 82:c4:e2:7a:47:da:a5:88:e7:9c:eb:21:a9:0b:83:d7:d9:7f: c6:f2:bc:2e:b5:df:a9:95:57:7f:25:f8:ca:91:ac:f3:09:19: e9:cb:a4:ca:0a:0d:6c:9f:10:9a:11:f6:09:5e:30:81:ef:2c: 38:ec:09:43:93:c4:94:5e:c3:33:34:9e:5c:e4:04:92:b1:0d: 02:0c:5c:83:79:2e:db:28:93:4c:d0:49:4a:f2:36:7e:11:5f: 3f:9e:86:e7:46:cf:9b:1b:0f:7f:64:7f:26:59:a6:69:7e:72: 56:b9:2a:87:ed:c2:bd:15:9e:ec:71:cf:a1:61:a4:bb:78:8a: a7:88:0d:34:de:0f:cf:1f:50:37:ed:32:7b:1e:47:6e:ab:26: f0:62:7e:14 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxY+Cl5hIsmOrLVRMydeXGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg5YWVhNjk4ODQ4MWNlYTRiOTViNjUxMzFjYzQ5ODg0ZjNl ZDBlM2YwHhcNMjUxMjA2MDIwMDQ1WhcNMjUxMjA3MDIwMDQ1WjAzMTEwLwYDVQQD EygxY2M2ZWYyZTQ4N2YyYTZkOGYyMjhmN2U1MGM0ZTUzMmMyMjgyMzBjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2FVkg6BV2GQkmWN/Th/Ftg+MlGhL +L0DYtIcRnKycRd46Dpe0Dhzh40xZxX9Cjjz11pzGAtYe8E7UZxCXkrKKiz50vyD ExlarYJSEUcT26xujeyYtyUWHAHmGnBKNN0L0/DPDLjjQ0SqHaSWa2ViiL/RLG9u KZUPzl6c4f8rMxA68oYdtj02rrt9eEhDYL80NpFlq5mmJAsvnCwDS+Kta0GaXepc HNxV46TjIJDN1oJ+GCtLek3HEIXWAoc/t1Q043lwcEQNVO7PaVzvOX2bwfqzcBpT wRb9g7YO21HvfTBns5g5usvEdq/O3XQ5NpCp6VEG4EPZxXyl5TSb0s2MjQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBzG7y5IfyptjyKPflDE5TLCKCMMMB8GA1UdIwQY MBaAFImuppiEgc6kuVtlExzEmITz7Q4/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaWE2bW1JU0J6cVM1VzJVVEhNU1loUFB0RGo4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNC8yYTU1YTUtMzMwNC00MTA4LThkOTIt NGQ4ZTkwZTAzMzNiLzEvaWE2bW1JU0J6cVM1VzJVVEhNU1loUFB0RGo4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNC8yYTU1YTUtMzMwNC00MTA4LThkOTItNGQ4ZTkwZTAzMzNi LzEvaWE2bW1JU0J6cVM1VzJVVEhNU1loUFB0RGo4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOZG4wanl VTpJk+yOhDJXjowmAJ8fMvjFwMg/JGHSH1fQuEceJto8fffEmKCpejcfE+b6SL1w S2d9zbkvGEZ0L1Bl6PuwYRethukHpfsC8CGu0wE8CqLcsK/Z3oNrVgUJY5c/ATaQ +jufw4hJgsTiekfapYjnnOshqQuD19l/xvK8LrXfqZVXfyX4ypGs8wkZ6cukygoN bJ8QmhH2CV4wge8sOOwJQ5PElF7DMzSeXOQEkrENAgxcg3ku2yiTTNBJSvI2fhFf P56G50bPmxsPf2R/JlmmaX5yVrkqh+3CvRWe7HHPoWGku3iKp4gNNN4Pzx9QN+0y ex5Hbqsm8GJ+FA== -----END CERTIFICATE-----Generated at Sat Dec 6 09:03:30 2025 by rpki-client