This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/7e18f0-af1d-47c1-8db5-5a5233dc0ce0/1/iTr8bv5imQomky9A4VCyfu1TnEs.mft File: iTr8bv5imQomky9A4VCyfu1TnEs.mft (raw, json) Hash identifier: 3wGvWrLWnH+7iga0qMu3ztsAZO2WWpRp9bJYhoI/hNs= Subject key identifier: 11:12:95:FF:8E:48:55:05:23:8D:42:9F:5F:AC:B7:42:2E:F3:D5:E9 Authority key identifier: 89:3A:FC:6E:FE:62:99:0A:26:93:2F:40:E1:50:B2:7E:ED:53:9C:4B Certificate issuer: /CN=893afc6efe62990a26932f40e150b27eed539c4b Certificate serial: 019AF27733CD68E2511C6FBE55BFA1F06BC2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iTr8bv5imQomky9A4VCyfu1TnEs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/7e18f0-af1d-47c1-8db5-5a5233dc0ce0/1/iTr8bv5imQomky9A4VCyfu1TnEs.mft Manifest number: 175F Signing time: Sat 06 Dec 2025 07:01:29 +0000 Manifest this update: Sat 06 Dec 2025 07:01:29 +0000 Manifest next update: Sun 07 Dec 2025 07:01:29 +0000 Files and hashes: 1: UvkgBounMtuI2EY4VakFPmSVVf8.roa (hash: B8b+cAv47Fq4zMohD+Ikbfg+w/maMgI605v1qgGvxbU=) 2: aMP60-6kIcycfPRX1mrnGq3rKu4.roa (hash: 3JfLcJd1nqn3CbGO/VzxfaF4cayveMgFQoD5eZc253E=) 3: iTr8bv5imQomky9A4VCyfu1TnEs.crl (hash: b4byhik0TMsKiiivotQRl3A3Oygdd2RSihONhyOZUCk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/7e18f0-af1d-47c1-8db5-5a5233dc0ce0/1/iTr8bv5imQomky9A4VCyfu1TnEs.crl rsync://rpki.ripe.net/repository/DEFAULT/ff/7e18f0-af1d-47c1-8db5-5a5233dc0ce0/1/iTr8bv5imQomky9A4VCyfu1TnEs.mft rsync://rpki.ripe.net/repository/DEFAULT/iTr8bv5imQomky9A4VCyfu1TnEs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 07:01:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:77:33:cd:68:e2:51:1c:6f:be:55:bf:a1:f0:6b:c2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=893afc6efe62990a26932f40e150b27eed539c4b Validity Not Before: Dec 6 07:01:29 2025 GMT Not After : Dec 7 07:01:29 2025 GMT Subject: CN=111295ff8e485505238d429f5facb7422ef3d5e9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:0f:aa:43:b6:d0:09:00:a6:92:b6:df:0f:03: 5b:ae:6a:2a:71:27:e4:43:2c:79:78:cb:51:39:d3: 0b:d5:57:36:64:12:14:75:4f:8f:86:0b:f9:f0:eb: e3:26:da:09:e5:bf:8f:dc:34:dd:64:cc:dc:b0:73: 95:9e:69:d8:de:59:1b:2c:e7:c5:fa:f9:e4:89:08: 14:c1:ac:88:fa:35:15:23:db:61:b1:d0:b1:e8:a8: df:0a:9f:00:ad:a3:28:5b:80:f5:05:7a:17:2c:44: 76:37:63:e1:5c:0d:a3:ec:5e:75:78:70:e0:17:f9: 8d:82:8b:b7:56:ca:f0:6b:7f:6f:88:dd:a9:99:33: c9:80:a6:69:19:d6:0a:db:dd:8c:d8:0d:a6:28:12: 71:ab:02:76:b8:4c:88:d3:11:9f:14:46:c0:4f:f2: 2e:fa:13:2d:6b:fc:4d:2f:fa:e7:e6:13:88:3a:3c: 33:71:54:4d:4e:fa:02:e5:08:1a:45:9c:74:e0:e3: b9:02:88:3c:ee:d8:3e:d8:af:1f:ab:17:f3:4e:6e: a6:ce:57:87:4e:80:bf:a3:dc:23:20:2f:24:40:ec: 2f:1a:9e:4a:ba:6b:de:6b:4f:89:55:73:49:02:4f: 44:52:8a:88:b8:7f:04:e0:1e:e3:2a:c2:1c:41:bd: e3:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:12:95:FF:8E:48:55:05:23:8D:42:9F:5F:AC:B7:42:2E:F3:D5:E9 X509v3 Authority Key Identifier: keyid:89:3A:FC:6E:FE:62:99:0A:26:93:2F:40:E1:50:B2:7E:ED:53:9C:4B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iTr8bv5imQomky9A4VCyfu1TnEs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/7e18f0-af1d-47c1-8db5-5a5233dc0ce0/1/iTr8bv5imQomky9A4VCyfu1TnEs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/7e18f0-af1d-47c1-8db5-5a5233dc0ce0/1/iTr8bv5imQomky9A4VCyfu1TnEs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ba:a7:61:e7:22:6f:4c:17:e4:5e:d5:c6:86:89:d2:58:70:89: 62:f4:d5:6d:2f:9a:6b:47:1e:72:eb:e4:6d:93:91:24:e1:11: 70:ce:2b:49:8c:7d:49:23:ff:3e:bc:29:d6:90:f3:03:40:50: a1:3d:9b:eb:84:3e:07:ed:fe:2a:f2:05:37:52:d7:6d:fc:1c: b8:0a:48:d8:67:5f:47:32:fc:8a:fd:29:60:70:2b:12:30:46: cd:00:75:fa:95:2c:60:19:3e:66:5e:b5:31:f7:81:f7:dc:ac: d1:18:a4:fa:9e:02:ef:de:67:45:25:86:18:ac:ac:19:34:91: 53:72:71:23:dd:61:60:cb:fb:6d:25:1c:be:cb:c9:5d:0b:ff: 7a:de:59:32:c9:12:d7:e8:be:20:30:87:47:a8:55:de:d8:78: db:dd:45:b8:98:3d:68:c0:63:81:a1:e5:12:1e:df:d1:ea:66: dd:42:8e:ce:ce:76:e8:b0:e5:36:6a:4f:39:7d:c9:cd:99:46: ab:59:51:fa:74:9a:58:cb:d0:d1:45:88:b8:3b:d7:d2:33:e1: d7:9d:34:0a:90:d0:89:cb:4a:38:44:95:1f:6f:e8:47:d2:c3: 54:17:f1:ea:b1:0e:2a:4e:09:31:60:cf:56:6f:6c:89:f0:f5: d2:29:be:bf -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrydzPNaOJRHG++Vb+h8GvCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg5M2FmYzZlZmU2Mjk5MGEyNjkzMmY0MGUxNTBiMjdlZWQ1 MzljNGIwHhcNMjUxMjA2MDcwMTI5WhcNMjUxMjA3MDcwMTI5WjAzMTEwLwYDVQQD EygxMTEyOTVmZjhlNDg1NTA1MjM4ZDQyOWY1ZmFjYjc0MjJlZjNkNWU5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArg+qQ7bQCQCmkrbfDwNbrmoqcSfk Qyx5eMtROdML1Vc2ZBIUdU+Phgv58OvjJtoJ5b+P3DTdZMzcsHOVnmnY3lkbLOfF +vnkiQgUwayI+jUVI9thsdCx6KjfCp8AraMoW4D1BXoXLER2N2PhXA2j7F51eHDg F/mNgou3Vsrwa39viN2pmTPJgKZpGdYK292M2A2mKBJxqwJ2uEyI0xGfFEbAT/Iu +hMta/xNL/rn5hOIOjwzcVRNTvoC5QgaRZx04OO5Aog87tg+2K8fqxfzTm6mzleH ToC/o9wjIC8kQOwvGp5Kumvea0+JVXNJAk9EUoqIuH8E4B7jKsIcQb3jBwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBESlf+OSFUFI41Cn1+st0Iu89XpMB8GA1UdIwQY MBaAFIk6/G7+YpkKJpMvQOFQsn7tU5xLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaVRyOGJ2NWltUW9ta3k5QTRWQ3lmdTFUbkVzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZi83ZTE4ZjAtYWYxZC00N2MxLThkYjUt NWE1MjMzZGMwY2UwLzEvaVRyOGJ2NWltUW9ta3k5QTRWQ3lmdTFUbkVzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZi83ZTE4ZjAtYWYxZC00N2MxLThkYjUtNWE1MjMzZGMwY2Uw LzEvaVRyOGJ2NWltUW9ta3k5QTRWQ3lmdTFUbkVzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAuqdh5yJv TBfkXtXGhonSWHCJYvTVbS+aa0cecuvkbZORJOERcM4rSYx9SSP/Prwp1pDzA0BQ oT2b64Q+B+3+KvIFN1LXbfwcuApI2GdfRzL8iv0pYHArEjBGzQB1+pUsYBk+Zl61 MfeB99ys0Rik+p4C795nRSWGGKysGTSRU3JxI91hYMv7bSUcvsvJXQv/et5ZMskS 1+i+IDCHR6hV3th4291FuJg9aMBjgaHlEh7f0epm3UKOzs526LDlNmpPOX3JzZlG q1lR+nSaWMvQ0UWIuDvX0jPh1500CpDQictKOESVH2/oR9LDVBfx6rEOKk4JMWDP Vm9sifD10im+vw== -----END CERTIFICATE-----Generated at Sat Dec 6 16:08:49 2025 by rpki-client