This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/765f62-e035-45da-bc64-4753efc8929d/1/Iu3w2IGu6i5ZmZuB0pdRE-FAVfU.mft File: Iu3w2IGu6i5ZmZuB0pdRE-FAVfU.mft (raw, json) Hash identifier: tTZX9/Gynte0PJgjkZ72w/JKy849LwweQVx7s5n3hnc= Subject key identifier: 40:CD:FB:89:6E:53:83:30:D7:02:B6:0F:A8:60:1D:D7:C3:98:6B:60 Authority key identifier: 22:ED:F0:D8:81:AE:EA:2E:59:99:9B:81:D2:97:51:13:E1:40:55:F5 Certificate issuer: /CN=22edf0d881aeea2e59999b81d2975113e14055f5 Certificate serial: 019AF27730D28C51E44E6F07C84DFFC48152 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Iu3w2IGu6i5ZmZuB0pdRE-FAVfU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/765f62-e035-45da-bc64-4753efc8929d/1/Iu3w2IGu6i5ZmZuB0pdRE-FAVfU.mft Manifest number: 0E81 Signing time: Sat 06 Dec 2025 07:01:28 +0000 Manifest this update: Sat 06 Dec 2025 07:01:28 +0000 Manifest next update: Sun 07 Dec 2025 07:01:28 +0000 Files and hashes: 1: Iu3w2IGu6i5ZmZuB0pdRE-FAVfU.crl (hash: tTRau+cwzZ3VU51kLFH75l+C0MIb85nxHumwrJYlstY=) 2: uJDTTmn4-4oW9k1wMlYj6SoOXQ4.roa (hash: pc1//08OK0uZCD5sEikyCqJI0sYd32Do1RYyDgm63AU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/765f62-e035-45da-bc64-4753efc8929d/1/Iu3w2IGu6i5ZmZuB0pdRE-FAVfU.crl rsync://rpki.ripe.net/repository/DEFAULT/ed/765f62-e035-45da-bc64-4753efc8929d/1/Iu3w2IGu6i5ZmZuB0pdRE-FAVfU.mft rsync://rpki.ripe.net/repository/DEFAULT/Iu3w2IGu6i5ZmZuB0pdRE-FAVfU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:77:30:d2:8c:51:e4:4e:6f:07:c8:4d:ff:c4:81:52 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=22edf0d881aeea2e59999b81d2975113e14055f5 Validity Not Before: Dec 6 07:01:28 2025 GMT Not After : Dec 7 07:01:28 2025 GMT Subject: CN=40cdfb896e538330d702b60fa8601dd7c3986b60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:51:f1:a5:ea:dd:d9:98:09:b6:02:1d:f1:e8: 26:39:99:6c:d8:08:8e:60:e2:e5:84:3e:3c:3e:fd: 91:6a:45:a4:f2:1b:30:07:5b:8f:e9:ad:81:86:78: d9:9c:e9:88:55:db:ad:aa:3a:0f:55:cf:ac:00:a3: 02:2e:8a:b0:19:cc:49:7d:86:9e:61:e3:68:60:ce: 5b:e7:ce:c1:b9:d9:d4:07:0c:46:58:21:36:02:2a: 88:2b:ca:84:e2:cc:54:64:bc:e9:18:df:07:ec:62: 28:2f:29:4b:86:4b:f3:0e:8e:1c:82:6b:f6:b0:07: 38:19:82:7b:98:5d:fb:ed:fe:63:df:3b:22:25:b7: 65:37:1b:75:db:b8:66:8b:91:ac:0c:60:a6:f4:81: 74:ad:7b:01:e3:f1:8c:d6:87:24:bf:b3:c3:97:6c: 94:d0:68:2e:d6:1d:8d:fc:c9:91:88:b8:99:b1:d2: 85:98:0e:aa:7d:64:45:3f:f0:27:1c:7e:f1:d1:72: 33:aa:11:44:77:8a:16:df:4c:a4:8b:19:49:80:07: 5b:8c:9b:34:5c:53:33:ba:d5:c3:a7:30:ef:c8:34: 00:24:39:60:3b:9e:f7:a2:d5:45:f0:23:ab:3e:9d: 6d:33:c3:4b:7b:da:ff:73:33:17:63:d3:99:e3:57: 72:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:CD:FB:89:6E:53:83:30:D7:02:B6:0F:A8:60:1D:D7:C3:98:6B:60 X509v3 Authority Key Identifier: keyid:22:ED:F0:D8:81:AE:EA:2E:59:99:9B:81:D2:97:51:13:E1:40:55:F5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Iu3w2IGu6i5ZmZuB0pdRE-FAVfU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/765f62-e035-45da-bc64-4753efc8929d/1/Iu3w2IGu6i5ZmZuB0pdRE-FAVfU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/765f62-e035-45da-bc64-4753efc8929d/1/Iu3w2IGu6i5ZmZuB0pdRE-FAVfU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 69:7a:62:46:e5:3d:66:75:99:66:6d:8c:6f:2c:29:45:5c:ef: 5c:38:2d:80:67:47:f3:36:e5:5a:95:41:4d:d1:6a:d7:2d:94: a4:d0:f6:fa:b6:c7:09:58:39:8b:12:c9:5e:11:f5:6e:86:52: 4a:d6:0c:4b:10:8a:bb:c2:83:d8:52:42:07:13:f4:5b:1c:58: 04:01:ef:c6:26:48:ff:90:90:b2:00:02:b4:f8:4b:40:48:9a: 7d:b2:7e:b8:53:81:d9:20:b6:76:71:90:97:b8:e3:de:78:2a: b6:26:42:c4:f4:28:21:c6:4c:24:9a:98:13:59:65:3b:69:d1: d4:3a:17:e7:32:24:13:7e:e9:5f:dc:5d:aa:db:42:c8:71:ff: b9:7f:c5:79:37:28:aa:5e:e4:24:09:85:9a:e2:61:87:06:f5: ea:cf:02:4c:a2:d9:6a:17:2a:bb:2c:82:8e:51:e7:ec:da:c6: e5:a9:4a:8a:24:71:b3:97:ca:99:37:d6:95:ca:66:6c:13:80: 7d:c8:4b:f0:e5:35:84:e6:4c:c8:d5:31:7c:4a:46:94:ce:b6: 7b:a5:ca:50:e5:c0:8f:a6:bd:2c:40:19:ba:a0:8f:b9:2b:91: 70:54:97:62:34:3b:fd:dc:a0:04:65:62:6f:aa:f2:ba:1b:82: 27:e9:1c:3f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrydzDSjFHkTm8HyE3/xIFSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIyZWRmMGQ4ODFhZWVhMmU1OTk5OWI4MWQyOTc1MTEzZTE0 MDU1ZjUwHhcNMjUxMjA2MDcwMTI4WhcNMjUxMjA3MDcwMTI4WjAzMTEwLwYDVQQD Eyg0MGNkZmI4OTZlNTM4MzMwZDcwMmI2MGZhODYwMWRkN2MzOTg2YjYwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArFHxperd2ZgJtgId8egmOZls2AiO YOLlhD48Pv2RakWk8hswB1uP6a2BhnjZnOmIVdutqjoPVc+sAKMCLoqwGcxJfYae YeNoYM5b587BudnUBwxGWCE2AiqIK8qE4sxUZLzpGN8H7GIoLylLhkvzDo4cgmv2 sAc4GYJ7mF377f5j3zsiJbdlNxt127hmi5GsDGCm9IF0rXsB4/GM1ockv7PDl2yU 0Ggu1h2N/MmRiLiZsdKFmA6qfWRFP/AnHH7x0XIzqhFEd4oW30ykixlJgAdbjJs0 XFMzutXDpzDvyDQAJDlgO573otVF8COrPp1tM8NLe9r/czMXY9OZ41dyJwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEDN+4luU4Mw1wK2D6hgHdfDmGtgMB8GA1UdIwQY MBaAFCLt8NiBruouWZmbgdKXURPhQFX1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSXUzdzJJR3U2aTVabVp1QjBwZFJFLUZBVmZVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZC83NjVmNjItZTAzNS00NWRhLWJjNjQt NDc1M2VmYzg5MjlkLzEvSXUzdzJJR3U2aTVabVp1QjBwZFJFLUZBVmZVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZC83NjVmNjItZTAzNS00NWRhLWJjNjQtNDc1M2VmYzg5Mjlk LzEvSXUzdzJJR3U2aTVabVp1QjBwZFJFLUZBVmZVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaXpiRuU9 ZnWZZm2MbywpRVzvXDgtgGdH8zblWpVBTdFq1y2UpND2+rbHCVg5ixLJXhH1boZS StYMSxCKu8KD2FJCBxP0WxxYBAHvxiZI/5CQsgACtPhLQEiafbJ+uFOB2SC2dnGQ l7jj3ngqtiZCxPQoIcZMJJqYE1llO2nR1DoX5zIkE37pX9xdqttCyHH/uX/FeTco ql7kJAmFmuJhhwb16s8CTKLZahcquyyCjlHn7NrG5alKiiRxs5fKmTfWlcpmbBOA fchL8OU1hOZMyNUxfEpGlM62e6XKUOXAj6a9LEAZuqCPuSuRcFSXYjQ7/dygBGVi b6ryuhuCJ+kcPw== -----END CERTIFICATE-----Generated at Sat Dec 6 09:17:49 2025 by rpki-client