This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/eb4fc7-b414-4798-b756-1a0e5048632a/1/ikisPvcnnA9rw5CPJ-2wkbWmWsU.mft File: ikisPvcnnA9rw5CPJ-2wkbWmWsU.mft (raw, json) Hash identifier: dCwrX5QbklBmt//aruYBKA5Dmv1Lfi3rcL5hztJdxwU= Subject key identifier: 53:DD:F1:26:AF:6B:A4:0D:5F:D0:48:D9:60:2D:15:A6:68:B8:95:35 Authority key identifier: 8A:48:AC:3E:F7:27:9C:0F:6B:C3:90:8F:27:ED:B0:91:B5:A6:5A:C5 Certificate issuer: /CN=8a48ac3ef7279c0f6bc3908f27edb091b5a65ac5 Certificate serial: 019AF31B771A5A85A63CC7FF91451D1E387E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ikisPvcnnA9rw5CPJ-2wkbWmWsU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/eb4fc7-b414-4798-b756-1a0e5048632a/1/ikisPvcnnA9rw5CPJ-2wkbWmWsU.mft Manifest number: 1762 Signing time: Sat 06 Dec 2025 10:00:54 +0000 Manifest this update: Sat 06 Dec 2025 10:00:54 +0000 Manifest next update: Sun 07 Dec 2025 10:00:54 +0000 Files and hashes: 1: Y5SHLkym5EnCD8MfwTIMclhP_Hk.roa (hash: 4DOa2lF9/Fyb4YOZbeBJmTOtFtNcdwU9BIHDAS+IUPA=) 2: ZyyMUpD8BracjmDLdZi2eYsV3GA.roa (hash: kndWXz3QPBLyWguASqaNYsH4u94S2FJubqWiONIhSqU=) 3: ikisPvcnnA9rw5CPJ-2wkbWmWsU.crl (hash: Tip5oPJSfEhlo5sQ9sa9sYQUoSaaSBnvxz4+UFCOgAg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/eb4fc7-b414-4798-b756-1a0e5048632a/1/ikisPvcnnA9rw5CPJ-2wkbWmWsU.crl rsync://rpki.ripe.net/repository/DEFAULT/fb/eb4fc7-b414-4798-b756-1a0e5048632a/1/ikisPvcnnA9rw5CPJ-2wkbWmWsU.mft rsync://rpki.ripe.net/repository/DEFAULT/ikisPvcnnA9rw5CPJ-2wkbWmWsU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1b:77:1a:5a:85:a6:3c:c7:ff:91:45:1d:1e:38:7e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8a48ac3ef7279c0f6bc3908f27edb091b5a65ac5 Validity Not Before: Dec 6 10:00:54 2025 GMT Not After : Dec 7 10:00:54 2025 GMT Subject: CN=53ddf126af6ba40d5fd048d9602d15a668b89535 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:25:d1:7c:50:ab:47:a4:a3:02:69:82:38:98: 58:cc:ca:35:70:eb:99:7a:e3:b1:80:62:d0:60:47: 81:70:3f:3b:b8:73:5e:79:c5:a1:67:68:9a:1b:3e: f4:6c:6f:36:3b:68:ca:6a:7d:f1:8d:b5:cb:65:ea: bc:62:09:de:08:91:cc:7e:08:e6:db:ab:0f:9d:ef: ec:4d:49:0b:1d:e3:1e:a3:9e:e2:18:ef:da:37:47: 46:26:34:84:e2:6c:8c:b3:08:e2:23:5a:f1:fd:9f: 3f:a5:ce:96:2a:6a:7e:8e:f7:06:2a:4d:97:64:ad: 94:f0:5a:28:5d:9c:3c:e4:ac:4a:22:7f:3b:28:d2: fa:12:9c:8a:88:6a:1b:07:73:08:a1:d3:ad:82:12: 9b:4a:47:76:42:2c:e8:6a:45:b4:ef:ba:6f:14:d9: 4c:b7:3e:10:63:83:48:e8:5e:e6:ce:70:a3:5c:13: 03:2e:e2:a5:42:8a:cd:0c:18:23:1f:05:46:06:6e: 85:65:a5:28:dc:63:47:73:66:12:5f:a4:1f:66:18: 30:2e:d5:11:2c:e9:c5:fc:e1:8e:c5:ac:72:59:e2: 5f:0c:99:d3:04:60:f8:91:17:41:49:ff:c7:21:02: 67:c2:31:fa:42:ec:3b:a9:ec:0e:2b:41:98:dc:10: 2e:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:DD:F1:26:AF:6B:A4:0D:5F:D0:48:D9:60:2D:15:A6:68:B8:95:35 X509v3 Authority Key Identifier: keyid:8A:48:AC:3E:F7:27:9C:0F:6B:C3:90:8F:27:ED:B0:91:B5:A6:5A:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ikisPvcnnA9rw5CPJ-2wkbWmWsU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/eb4fc7-b414-4798-b756-1a0e5048632a/1/ikisPvcnnA9rw5CPJ-2wkbWmWsU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/eb4fc7-b414-4798-b756-1a0e5048632a/1/ikisPvcnnA9rw5CPJ-2wkbWmWsU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0b:88:8a:da:79:b3:21:74:8f:d9:e5:70:b7:86:79:72:42:01: d8:41:93:f9:8a:e9:19:a6:c9:3d:91:69:d8:46:39:61:d5:91: 14:62:0c:78:dd:94:57:04:ac:f4:f2:48:7a:72:4b:f8:56:eb: 9c:ab:5f:e0:58:c3:a6:0c:13:ce:43:2c:67:81:8b:d4:20:a2: 7c:b0:3c:54:5b:0d:a3:6e:00:19:ae:54:c4:7e:c0:f0:60:ea: cf:b5:09:e1:d1:d3:fd:35:29:ce:3b:ec:d3:4b:83:62:b8:1c: 68:b0:05:9a:5f:7e:dd:89:44:67:cc:a4:be:ce:f6:9a:60:63: 85:01:c6:36:7a:85:8b:64:88:66:f8:a4:0c:10:c1:15:50:9e: b7:cb:a4:e7:9e:4a:5f:5a:16:b1:5d:05:da:ab:d7:b5:10:b4: 84:9e:f4:7b:60:e8:2d:8a:04:7c:b8:02:d7:a5:e1:74:a0:08: 1b:f5:8a:e8:a3:67:59:bf:2a:1b:3b:58:4e:84:8a:8c:94:70: 16:b1:de:9e:4b:e0:11:4e:59:65:34:21:b7:95:49:f2:7f:e9: 0c:c3:91:af:d3:4f:b1:18:70:55:66:69:06:3b:2d:3f:ee:9a: 6b:9c:cb:a8:69:c7:0d:2e:a7:82:21:98:bf:f6:86:54:75:d5: 02:03:4d:fb -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzG3caWoWmPMf/kUUdHjh+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhhNDhhYzNlZjcyNzljMGY2YmMzOTA4ZjI3ZWRiMDkxYjVh NjVhYzUwHhcNMjUxMjA2MTAwMDU0WhcNMjUxMjA3MTAwMDU0WjAzMTEwLwYDVQQD Eyg1M2RkZjEyNmFmNmJhNDBkNWZkMDQ4ZDk2MDJkMTVhNjY4Yjg5NTM1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjiXRfFCrR6SjAmmCOJhYzMo1cOuZ euOxgGLQYEeBcD87uHNeecWhZ2iaGz70bG82O2jKan3xjbXLZeq8YgneCJHMfgjm 26sPne/sTUkLHeMeo57iGO/aN0dGJjSE4myMswjiI1rx/Z8/pc6WKmp+jvcGKk2X ZK2U8FooXZw85KxKIn87KNL6EpyKiGobB3MIodOtghKbSkd2QizoakW077pvFNlM tz4QY4NI6F7mznCjXBMDLuKlQorNDBgjHwVGBm6FZaUo3GNHc2YSX6QfZhgwLtUR LOnF/OGOxaxyWeJfDJnTBGD4kRdBSf/HIQJnwjH6Quw7qewOK0GY3BAu3QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFPd8Sava6QNX9BI2WAtFaZouJU1MB8GA1UdIwQY MBaAFIpIrD73J5wPa8OQjyftsJG1plrFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaWtpc1B2Y25uQTlydzVDUEotMndrYldtV3NVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYi9lYjRmYzctYjQxNC00Nzk4LWI3NTYt MWEwZTUwNDg2MzJhLzEvaWtpc1B2Y25uQTlydzVDUEotMndrYldtV3NVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYi9lYjRmYzctYjQxNC00Nzk4LWI3NTYtMWEwZTUwNDg2MzJh LzEvaWtpc1B2Y25uQTlydzVDUEotMndrYldtV3NVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAC4iK2nmz IXSP2eVwt4Z5ckIB2EGT+YrpGabJPZFp2EY5YdWRFGIMeN2UVwSs9PJIenJL+Fbr nKtf4FjDpgwTzkMsZ4GL1CCifLA8VFsNo24AGa5UxH7A8GDqz7UJ4dHT/TUpzjvs 00uDYrgcaLAFml9+3YlEZ8ykvs72mmBjhQHGNnqFi2SIZvikDBDBFVCet8uk555K X1oWsV0F2qvXtRC0hJ70e2DoLYoEfLgC16XhdKAIG/WK6KNnWb8qGztYToSKjJRw FrHenkvgEU5ZZTQht5VJ8n/pDMORr9NPsRhwVWZpBjstP+6aa5zLqGnHDS6ngiGY v/aGVHXVAgNN+w== -----END CERTIFICATE-----Generated at Sat Dec 6 14:52:56 2025 by rpki-client