This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/907409-5e61-4c66-94e6-d69ea93cbafb/1/iRaqpdJS_ZAUX-2saDdi1uIHQVU.mft File: iRaqpdJS_ZAUX-2saDdi1uIHQVU.mft (raw, json) Hash identifier: K+G901/T+JeJp5QMe5lRmvk9BEN7kUw/t07wyLbiC1c= Subject key identifier: FD:F5:A0:57:58:66:FC:68:88:65:12:C3:DA:45:7C:19:57:91:D8:2E Authority key identifier: 89:16:AA:A5:D2:52:FD:90:14:5F:ED:AC:68:37:62:D6:E2:07:41:55 Certificate issuer: /CN=8916aaa5d252fd90145fedac683762d6e2074155 Certificate serial: 019B3A21B29962F3A17EA01B9A4D14DF51C2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iRaqpdJS_ZAUX-2saDdi1uIHQVU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/907409-5e61-4c66-94e6-d69ea93cbafb/1/iRaqpdJS_ZAUX-2saDdi1uIHQVU.mft Manifest number: 1787 Signing time: Sat 20 Dec 2025 05:00:45 +0000 Manifest this update: Sat 20 Dec 2025 05:00:45 +0000 Manifest next update: Sun 21 Dec 2025 05:00:45 +0000 Files and hashes: 1: EJO9ljE1s0Q84FuNpxDY98O5gUs.roa (hash: MidhZCUKLP8FjCtsor/fdefcfGoS6d1va0RAyvBU+x4=) 2: iRaqpdJS_ZAUX-2saDdi1uIHQVU.crl (hash: orsplAgI2lzWIoCTi8SiODkK1qhHPhMxEuO7+eb+jO0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/907409-5e61-4c66-94e6-d69ea93cbafb/1/iRaqpdJS_ZAUX-2saDdi1uIHQVU.crl rsync://rpki.ripe.net/repository/DEFAULT/01/907409-5e61-4c66-94e6-d69ea93cbafb/1/iRaqpdJS_ZAUX-2saDdi1uIHQVU.mft rsync://rpki.ripe.net/repository/DEFAULT/iRaqpdJS_ZAUX-2saDdi1uIHQVU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3a:21:b2:99:62:f3:a1:7e:a0:1b:9a:4d:14:df:51:c2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8916aaa5d252fd90145fedac683762d6e2074155 Validity Not Before: Dec 20 05:00:45 2025 GMT Not After : Dec 21 05:00:45 2025 GMT Subject: CN=fdf5a0575866fc68886512c3da457c195791d82e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:7b:80:f3:35:ff:7f:a1:d3:ba:71:73:20:53: b5:5a:0c:29:90:11:d2:a6:9f:d9:bc:47:ec:e2:a2: 1c:2c:58:4e:ab:5e:57:e6:0d:59:f4:c1:53:91:c5: 73:1b:38:39:57:8f:87:74:c7:c4:1a:d7:ff:b2:86: 2e:90:2c:f4:e0:41:b2:09:59:bf:3b:18:0a:1a:eb: 73:8e:ff:c7:17:63:71:d7:29:03:dc:5f:8d:6a:9e: 35:f7:52:4e:65:0c:81:79:5c:87:a6:d4:66:95:7f: 41:66:f9:da:ef:38:f8:1c:29:6c:43:d4:ee:c8:4d: d3:af:a4:81:0c:b7:d3:95:13:11:27:53:72:f7:71: f3:dc:98:66:a4:76:bb:12:fb:31:3c:10:68:94:28: 6f:5a:1b:fc:3e:48:99:3f:6a:a9:e2:e4:11:66:5e: ee:f0:e6:55:cd:f1:76:eb:7a:20:ae:32:18:b9:e2: 36:05:b2:f1:f0:65:2f:f4:dc:03:b0:4e:88:09:f4: 3b:b6:5b:89:53:eb:e5:2b:16:68:5d:b4:40:07:13: 0c:c8:2f:e2:eb:fd:94:cd:27:38:45:41:26:57:f1: 53:9e:7a:cc:e8:86:d0:4e:64:06:b8:7d:36:05:81: 08:db:1d:5c:b8:cb:5a:35:d8:73:1e:0f:26:c6:fb: 1a:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:F5:A0:57:58:66:FC:68:88:65:12:C3:DA:45:7C:19:57:91:D8:2E X509v3 Authority Key Identifier: keyid:89:16:AA:A5:D2:52:FD:90:14:5F:ED:AC:68:37:62:D6:E2:07:41:55 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iRaqpdJS_ZAUX-2saDdi1uIHQVU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/907409-5e61-4c66-94e6-d69ea93cbafb/1/iRaqpdJS_ZAUX-2saDdi1uIHQVU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/01/907409-5e61-4c66-94e6-d69ea93cbafb/1/iRaqpdJS_ZAUX-2saDdi1uIHQVU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 90:73:ea:58:a7:8b:65:f0:c2:d3:c4:f3:b3:87:ec:16:aa:d0: db:3c:a6:3b:0e:72:90:ff:f8:52:66:1e:d4:f9:7a:e9:50:4f: 91:ff:2a:e4:1f:54:f3:18:ad:51:00:c3:b4:97:86:3e:a5:8e: 45:0d:09:41:72:4b:3b:b5:57:aa:7f:12:31:3e:a8:d6:c0:54: d2:7b:2e:9a:38:1b:b3:6f:9c:e9:e8:d3:c3:5e:d0:db:50:12: 89:30:24:b0:fa:28:a4:e5:8c:72:99:6b:86:40:88:a4:e6:e3: 1b:18:cd:f7:a4:07:cd:b1:2a:f4:48:ae:d6:e9:f3:92:c5:2b: 05:89:5b:d5:f5:1e:ff:49:35:3e:e0:ca:78:80:65:2d:10:e6: 09:9d:ec:91:5e:fc:f9:7b:a7:16:44:46:74:a3:bb:42:92:74: eb:89:80:ae:95:17:ee:37:f7:ab:3b:b9:7e:e5:25:80:15:56: 31:c8:93:c1:47:c0:7c:57:8a:5a:1a:fa:8e:39:c7:dd:1f:a9: 6f:99:3e:b0:e2:44:01:d8:08:12:53:2d:85:35:91:82:82:af: c3:97:e2:64:d8:dd:28:70:6e:37:a9:e3:ac:63:02:d9:1c:1c: 69:dc:9b:5a:1e:f3:55:57:e3:f2:d2:f2:29:cb:61:61:cf:5c: 42:0c:72:bf -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs6IbKZYvOhfqAbmk0U31HCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg5MTZhYWE1ZDI1MmZkOTAxNDVmZWRhYzY4Mzc2MmQ2ZTIw NzQxNTUwHhcNMjUxMjIwMDUwMDQ1WhcNMjUxMjIxMDUwMDQ1WjAzMTEwLwYDVQQD EyhmZGY1YTA1NzU4NjZmYzY4ODg2NTEyYzNkYTQ1N2MxOTU3OTFkODJlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA03uA8zX/f6HTunFzIFO1WgwpkBHS pp/ZvEfs4qIcLFhOq15X5g1Z9MFTkcVzGzg5V4+HdMfEGtf/soYukCz04EGyCVm/ OxgKGutzjv/HF2Nx1ykD3F+Nap4191JOZQyBeVyHptRmlX9BZvna7zj4HClsQ9Tu yE3Tr6SBDLfTlRMRJ1Ny93Hz3JhmpHa7EvsxPBBolChvWhv8PkiZP2qp4uQRZl7u 8OZVzfF263ogrjIYueI2BbLx8GUv9NwDsE6ICfQ7tluJU+vlKxZoXbRABxMMyC/i 6/2UzSc4RUEmV/FTnnrM6IbQTmQGuH02BYEI2x1cuMtaNdhzHg8mxvsaIQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFP31oFdYZvxoiGUSw9pFfBlXkdguMB8GA1UdIwQY MBaAFIkWqqXSUv2QFF/trGg3YtbiB0FVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaVJhcXBkSlNfWkFVWC0yc2FEZGkxdUlIUVZVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMS85MDc0MDktNWU2MS00YzY2LTk0ZTYt ZDY5ZWE5M2NiYWZiLzEvaVJhcXBkSlNfWkFVWC0yc2FEZGkxdUlIUVZVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMS85MDc0MDktNWU2MS00YzY2LTk0ZTYtZDY5ZWE5M2NiYWZi LzEvaVJhcXBkSlNfWkFVWC0yc2FEZGkxdUlIUVZVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkHPqWKeL ZfDC08Tzs4fsFqrQ2zymOw5ykP/4UmYe1Pl66VBPkf8q5B9U8xitUQDDtJeGPqWO RQ0JQXJLO7VXqn8SMT6o1sBU0nsumjgbs2+c6ejTw17Q21ASiTAksPoopOWMcplr hkCIpObjGxjN96QHzbEq9Eiu1unzksUrBYlb1fUe/0k1PuDKeIBlLRDmCZ3skV78 +XunFkRGdKO7QpJ064mArpUX7jf3qzu5fuUlgBVWMciTwUfAfFeKWhr6jjnH3R+p b5k+sOJEAdgIElMthTWRgoKvw5fiZNjdKHBuN6njrGMC2RwcadybWh7zVVfj8tLy KcthYc9cQgxyvw== -----END CERTIFICATE-----Generated at Sat Dec 20 10:32:44 2025 by rpki-client