This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/129a5b-b7f6-49d0-95c2-12f9cb0a2118/1/iDa9j605PlExoCNykxWzVgFOZjc.mft File: iDa9j605PlExoCNykxWzVgFOZjc.mft (raw, json) Hash identifier: ZkZB1ZZvxbVnVnehTklJEJu7KZ1JY5UgDtWI8g3p/QI= Subject key identifier: 41:5C:EE:4C:B6:97:32:2E:DD:6B:7E:55:43:CC:5F:A8:44:84:09:DC Authority key identifier: 88:36:BD:8F:AD:39:3E:51:31:A0:23:72:93:15:B3:56:01:4E:66:37 Certificate issuer: /CN=8836bd8fad393e5131a023729315b356014e6637 Certificate serial: 019AF051571CC4304CDDD6C9D449B32A9415 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iDa9j605PlExoCNykxWzVgFOZjc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/129a5b-b7f6-49d0-95c2-12f9cb0a2118/1/iDa9j605PlExoCNykxWzVgFOZjc.mft Manifest number: 1760 Signing time: Fri 05 Dec 2025 21:00:53 +0000 Manifest this update: Fri 05 Dec 2025 21:00:53 +0000 Manifest next update: Sat 06 Dec 2025 21:00:53 +0000 Files and hashes: 1: UKX34TFCd0figIbF32wm6M0tdxE.roa (hash: BFLvjvBRECITaOdgL/U7OU6npGQVInzdalw4vhrK37A=) 2: iDa9j605PlExoCNykxWzVgFOZjc.crl (hash: qFq1CyPqakMKAVqb2b03krGvMstLxA4A+Z6Vtxek8Tg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/129a5b-b7f6-49d0-95c2-12f9cb0a2118/1/iDa9j605PlExoCNykxWzVgFOZjc.crl rsync://rpki.ripe.net/repository/DEFAULT/fb/129a5b-b7f6-49d0-95c2-12f9cb0a2118/1/iDa9j605PlExoCNykxWzVgFOZjc.mft rsync://rpki.ripe.net/repository/DEFAULT/iDa9j605PlExoCNykxWzVgFOZjc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 21:00:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:51:57:1c:c4:30:4c:dd:d6:c9:d4:49:b3:2a:94:15 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8836bd8fad393e5131a023729315b356014e6637 Validity Not Before: Dec 5 21:00:53 2025 GMT Not After : Dec 6 21:00:53 2025 GMT Subject: CN=415cee4cb697322edd6b7e5543cc5fa8448409dc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:7a:7a:43:b2:96:dd:13:3e:18:1a:cc:bb:13: bd:49:af:8b:b4:4d:ed:42:eb:8d:f7:4d:a2:03:53: d6:bf:ec:95:df:50:13:b1:0c:16:7c:95:ed:17:0e: c8:ab:cc:0b:6b:38:a1:25:0f:ff:c1:a6:05:6a:f4: d4:b5:1b:ca:99:cb:bf:1a:8e:35:48:58:19:52:b0: 50:1d:58:45:e1:50:df:dd:ce:7c:06:df:9c:5e:aa: 31:40:26:17:48:a8:16:94:8b:67:6f:f9:c2:36:06: 29:b3:22:de:f3:50:cd:cb:85:f9:af:a1:a6:a8:83: eb:6a:6f:c4:32:db:ed:56:8c:f1:40:1f:a0:4f:7b: 44:98:07:35:05:af:95:a9:b9:80:07:8c:61:d5:43: d7:97:ad:ed:d3:f9:9b:a9:1b:e5:89:0a:4c:26:f5: 50:a2:c8:d4:41:21:1f:75:a9:2f:ef:b2:84:ee:7a: e6:14:e3:4a:3b:ca:43:4d:ea:6e:41:d7:dd:04:19: d2:af:41:b1:31:40:63:50:68:8b:6c:84:b5:cd:fb: cb:d1:e0:63:e6:c9:a5:1b:b4:85:50:56:50:27:fd: 9a:ff:63:b8:e4:ca:01:37:8b:94:a0:16:60:a7:c6: 54:26:e2:c9:3f:0e:66:c8:0e:1f:6d:77:85:75:46: 32:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:5C:EE:4C:B6:97:32:2E:DD:6B:7E:55:43:CC:5F:A8:44:84:09:DC X509v3 Authority Key Identifier: keyid:88:36:BD:8F:AD:39:3E:51:31:A0:23:72:93:15:B3:56:01:4E:66:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iDa9j605PlExoCNykxWzVgFOZjc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/129a5b-b7f6-49d0-95c2-12f9cb0a2118/1/iDa9j605PlExoCNykxWzVgFOZjc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/129a5b-b7f6-49d0-95c2-12f9cb0a2118/1/iDa9j605PlExoCNykxWzVgFOZjc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 97:80:eb:28:46:f7:03:0a:31:7d:ea:e9:16:ea:08:61:0a:0b: f4:1e:b0:ad:bb:8e:4f:9b:78:07:bc:08:27:98:1d:3a:f4:ff: 11:9e:8c:58:9b:8d:19:cc:e1:42:bd:87:98:5d:c4:8f:b8:38: a0:20:c4:14:47:06:22:d8:66:4b:6a:32:ff:22:b4:18:e2:a0: be:74:d9:34:f3:42:7e:f0:06:ae:a8:4b:9c:58:b0:b3:d8:14: 30:f0:e9:b0:3c:a0:cd:9d:6c:75:2b:3a:a3:58:a3:0f:ec:26: 4a:26:fd:88:1f:2c:d7:cd:c2:9f:94:a5:94:2e:48:81:08:f4: 97:11:40:7d:38:14:04:d4:b1:ce:d3:fe:6e:8b:e2:17:3a:2a: 09:08:c2:ab:4b:fc:59:49:2c:e2:0e:93:43:5d:a5:cb:7b:bc: 24:b3:b4:bb:73:6d:41:0c:c7:27:ef:f3:2f:a4:83:90:c0:45: 65:b5:a4:df:1b:d5:e7:21:76:e1:e2:00:f3:07:a5:93:05:92: de:d6:71:80:f7:72:b0:81:58:f3:d6:9c:d8:63:f9:81:2a:f0: b8:90:24:3c:7b:b4:3e:f9:38:5d:78:89:93:b6:ff:23:a9:09: 6b:27:9b:58:3a:6f:7f:88:1c:64:45:ac:67:a8:51:ce:63:63: d5:0b:2c:26 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrwUVccxDBM3dbJ1EmzKpQVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg4MzZiZDhmYWQzOTNlNTEzMWEwMjM3MjkzMTViMzU2MDE0 ZTY2MzcwHhcNMjUxMjA1MjEwMDUzWhcNMjUxMjA2MjEwMDUzWjAzMTEwLwYDVQQD Eyg0MTVjZWU0Y2I2OTczMjJlZGQ2YjdlNTU0M2NjNWZhODQ0ODQwOWRjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArXp6Q7KW3RM+GBrMuxO9Sa+LtE3t QuuN902iA1PWv+yV31ATsQwWfJXtFw7Iq8wLazihJQ//waYFavTUtRvKmcu/Go41 SFgZUrBQHVhF4VDf3c58Bt+cXqoxQCYXSKgWlItnb/nCNgYpsyLe81DNy4X5r6Gm qIPram/EMtvtVozxQB+gT3tEmAc1Ba+VqbmAB4xh1UPXl63t0/mbqRvliQpMJvVQ osjUQSEfdakv77KE7nrmFONKO8pDTepuQdfdBBnSr0GxMUBjUGiLbIS1zfvL0eBj 5smlG7SFUFZQJ/2a/2O45MoBN4uUoBZgp8ZUJuLJPw5myA4fbXeFdUYyPQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEFc7ky2lzIu3Wt+VUPMX6hEhAncMB8GA1UdIwQY MBaAFIg2vY+tOT5RMaAjcpMVs1YBTmY3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaURhOWo2MDVQbEV4b0NOeWt4V3pWZ0ZPWmpjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYi8xMjlhNWItYjdmNi00OWQwLTk1YzIt MTJmOWNiMGEyMTE4LzEvaURhOWo2MDVQbEV4b0NOeWt4V3pWZ0ZPWmpjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYi8xMjlhNWItYjdmNi00OWQwLTk1YzItMTJmOWNiMGEyMTE4 LzEvaURhOWo2MDVQbEV4b0NOeWt4V3pWZ0ZPWmpjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAl4DrKEb3 AwoxferpFuoIYQoL9B6wrbuOT5t4B7wIJ5gdOvT/EZ6MWJuNGczhQr2HmF3Ej7g4 oCDEFEcGIthmS2oy/yK0GOKgvnTZNPNCfvAGrqhLnFiws9gUMPDpsDygzZ1sdSs6 o1ijD+wmSib9iB8s183Cn5SllC5IgQj0lxFAfTgUBNSxztP+boviFzoqCQjCq0v8 WUks4g6TQ12ly3u8JLO0u3NtQQzHJ+/zL6SDkMBFZbWk3xvV5yF24eIA8welkwWS 3tZxgPdysIFY89ac2GP5gSrwuJAkPHu0Pvk4XXiJk7b/I6kJayebWDpvf4gcZEWs Z6hRzmNj1QssJg== -----END CERTIFICATE-----Generated at Sat Dec 6 07:14:25 2025 by rpki-client