This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/a80963-3089-4ac4-af4f-3c8717414d80/1/IhMAdZZJOAL7k6Mmcx_TMp6uLaw.mft File: IhMAdZZJOAL7k6Mmcx_TMp6uLaw.mft (raw, json) Hash identifier: ieKyeBek2hd1WHbOJ3qsNEZYPSXuoJQ0C3Er5vnHyxs= Subject key identifier: 4F:4B:3A:DD:2C:AA:43:15:1B:1F:2E:B1:8A:D3:FB:AC:76:C0:BA:BA Authority key identifier: 22:13:00:75:96:49:38:02:FB:93:A3:26:73:1F:D3:32:9E:AE:2D:AC Certificate issuer: /CN=2213007596493802fb93a326731fd3329eae2dac Certificate serial: 019AF12D4B4C590C7C439AD06D012A1DCDA6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IhMAdZZJOAL7k6Mmcx_TMp6uLaw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/a80963-3089-4ac4-af4f-3c8717414d80/1/IhMAdZZJOAL7k6Mmcx_TMp6uLaw.mft Manifest number: 1761 Signing time: Sat 06 Dec 2025 01:01:08 +0000 Manifest this update: Sat 06 Dec 2025 01:01:08 +0000 Manifest next update: Sun 07 Dec 2025 01:01:08 +0000 Files and hashes: 1: DjsbeUScAR9EUfRE070QFYOZXx0.roa (hash: Jj0CL6iZxJ5XW4ZpctnqFGBbj6Ygbs9fspzlTAigxwY=) 2: IhMAdZZJOAL7k6Mmcx_TMp6uLaw.crl (hash: esjDOyyt/HqiBzfORirJeKBujsZ/MwXf+f5e/BjrJ4g=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/a80963-3089-4ac4-af4f-3c8717414d80/1/IhMAdZZJOAL7k6Mmcx_TMp6uLaw.crl rsync://rpki.ripe.net/repository/DEFAULT/f6/a80963-3089-4ac4-af4f-3c8717414d80/1/IhMAdZZJOAL7k6Mmcx_TMp6uLaw.mft rsync://rpki.ripe.net/repository/DEFAULT/IhMAdZZJOAL7k6Mmcx_TMp6uLaw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:01:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2d:4b:4c:59:0c:7c:43:9a:d0:6d:01:2a:1d:cd:a6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2213007596493802fb93a326731fd3329eae2dac Validity Not Before: Dec 6 01:01:08 2025 GMT Not After : Dec 7 01:01:08 2025 GMT Subject: CN=4f4b3add2caa43151b1f2eb18ad3fbac76c0baba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:d4:78:95:5e:11:3d:7f:c1:0a:d3:68:85:92: 9a:a9:05:b9:27:56:2f:bd:9a:77:98:98:11:4a:97: da:55:1d:cb:43:ec:3f:38:74:41:dc:ef:ff:96:62: b9:1e:be:6f:e0:39:92:dc:04:63:a5:b9:a2:fe:7d: 58:ff:f2:b4:b2:21:1b:a8:ac:ca:d6:0c:f8:4b:8e: 95:24:a8:7e:11:a3:d7:bf:85:2d:b8:7f:ef:83:c3: 58:01:12:85:e8:a7:ac:86:9f:7a:89:93:2b:39:31: 2f:c5:d1:a0:b1:94:03:74:a9:93:83:6c:3c:a2:c5: 42:c7:33:47:a1:6b:f6:c4:43:df:7d:0e:18:38:aa: b1:90:27:59:be:53:bc:71:c1:8b:86:20:29:51:6a: 32:39:ac:59:13:a5:66:a7:37:86:01:67:d5:ff:65: 50:95:5c:3a:77:fa:9f:1e:7a:61:eb:c0:48:bb:dd: 7a:75:f3:fa:22:28:8b:c2:93:aa:85:84:2f:b7:6b: 67:51:01:b4:27:c3:e2:59:97:87:c5:f3:84:7b:ee: e8:6e:f1:7b:93:ef:a4:e6:d5:ab:df:21:1b:bf:bb: e6:ca:16:3f:18:fc:47:74:52:2e:f5:a4:d0:63:31: 6e:28:d8:91:d3:f1:7b:3e:3e:87:b1:34:38:09:d5: 44:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:4B:3A:DD:2C:AA:43:15:1B:1F:2E:B1:8A:D3:FB:AC:76:C0:BA:BA X509v3 Authority Key Identifier: keyid:22:13:00:75:96:49:38:02:FB:93:A3:26:73:1F:D3:32:9E:AE:2D:AC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IhMAdZZJOAL7k6Mmcx_TMp6uLaw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/a80963-3089-4ac4-af4f-3c8717414d80/1/IhMAdZZJOAL7k6Mmcx_TMp6uLaw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/a80963-3089-4ac4-af4f-3c8717414d80/1/IhMAdZZJOAL7k6Mmcx_TMp6uLaw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5b:af:70:b7:e1:f8:ba:92:cc:03:8e:90:5d:6e:0d:ae:9f:d7: 3c:e9:d2:85:bf:37:cf:40:85:14:f0:e6:aa:7f:81:39:21:5d: f6:41:80:c1:50:68:c6:16:df:39:ac:68:3d:b7:13:d6:d8:c4: 3a:77:a8:51:3d:ab:ff:81:aa:68:c8:a1:df:74:04:59:e9:b9: 73:73:c9:fd:a3:08:14:ff:db:13:69:c0:d5:32:55:f9:eb:1b: 4d:0a:b6:22:a1:3b:81:49:e7:dd:b9:68:f8:6b:43:ce:54:c1: f1:37:78:ea:53:17:a4:3f:9f:52:84:11:2d:04:ec:74:cb:35: b1:32:79:a2:e7:da:d0:c9:a2:07:91:23:bd:0c:05:d0:06:a8: 63:e7:eb:24:48:96:00:20:a9:69:cb:a8:e2:7f:12:08:28:4e: 77:bc:43:04:c9:eb:bc:91:d6:b8:9f:1c:2d:a7:81:b9:7a:ac: 85:f2:8f:d8:49:19:bb:d3:99:61:1d:a3:c8:8b:be:ba:03:cf: 8c:34:83:eb:49:60:75:cb:e5:c6:d8:52:0d:a7:f6:4a:8e:97: 37:d6:5e:4f:f0:46:b3:8a:dd:2c:79:d5:20:0d:38:e2:53:74: f0:a9:96:e8:b4:b5:f9:a9:35:97:98:00:b1:33:21:85:59:7f: 95:aa:fa:e4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLUtMWQx8Q5rQbQEqHc2mMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIyMTMwMDc1OTY0OTM4MDJmYjkzYTMyNjczMWZkMzMyOWVh ZTJkYWMwHhcNMjUxMjA2MDEwMTA4WhcNMjUxMjA3MDEwMTA4WjAzMTEwLwYDVQQD Eyg0ZjRiM2FkZDJjYWE0MzE1MWIxZjJlYjE4YWQzZmJhYzc2YzBiYWJhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkNR4lV4RPX/BCtNohZKaqQW5J1Yv vZp3mJgRSpfaVR3LQ+w/OHRB3O//lmK5Hr5v4DmS3ARjpbmi/n1Y//K0siEbqKzK 1gz4S46VJKh+EaPXv4UtuH/vg8NYARKF6Keshp96iZMrOTEvxdGgsZQDdKmTg2w8 osVCxzNHoWv2xEPffQ4YOKqxkCdZvlO8ccGLhiApUWoyOaxZE6VmpzeGAWfV/2VQ lVw6d/qfHnph68BIu916dfP6IiiLwpOqhYQvt2tnUQG0J8PiWZeHxfOEe+7obvF7 k++k5tWr3yEbv7vmyhY/GPxHdFIu9aTQYzFuKNiR0/F7Pj6HsTQ4CdVEuwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFE9LOt0sqkMVGx8usYrT+6x2wLq6MB8GA1UdIwQY MBaAFCITAHWWSTgC+5OjJnMf0zKeri2sMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSWhNQWRaWkpPQUw3azZNbWN4X1RNcDZ1TGF3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNi9hODA5NjMtMzA4OS00YWM0LWFmNGYt M2M4NzE3NDE0ZDgwLzEvSWhNQWRaWkpPQUw3azZNbWN4X1RNcDZ1TGF3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNi9hODA5NjMtMzA4OS00YWM0LWFmNGYtM2M4NzE3NDE0ZDgw LzEvSWhNQWRaWkpPQUw3azZNbWN4X1RNcDZ1TGF3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAW69wt+H4 upLMA46QXW4Nrp/XPOnShb83z0CFFPDmqn+BOSFd9kGAwVBoxhbfOaxoPbcT1tjE OneoUT2r/4GqaMih33QEWem5c3PJ/aMIFP/bE2nA1TJV+esbTQq2IqE7gUnn3blo +GtDzlTB8Td46lMXpD+fUoQRLQTsdMs1sTJ5oufa0MmiB5EjvQwF0AaoY+frJEiW ACCpacuo4n8SCChOd7xDBMnrvJHWuJ8cLaeBuXqshfKP2EkZu9OZYR2jyIu+ugPP jDSD60lgdcvlxthSDaf2So6XN9ZeT/BGs4rdLHnVIA044lN08KmW6LS1+ak1l5gA sTMhhVl/lar65A== -----END CERTIFICATE-----Generated at Sat Dec 6 09:20:53 2025 by rpki-client