This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/b89704-4fd2-4e07-a039-66f56ef9ce26/1/iKeAc4uFOs_7q9sjkUxQ42Qh93M.mft File: iKeAc4uFOs_7q9sjkUxQ42Qh93M.mft (raw, json) Hash identifier: xBABEOge8pYpaWqkVUWYA1IsugxynMwfN0OaRgogkLI= Subject key identifier: 9D:AF:3E:3B:95:1A:E7:38:C8:C7:E3:2D:E7:3E:5F:5E:A0:AC:D5:05 Authority key identifier: 88:A7:80:73:8B:85:3A:CF:FB:AB:DB:23:91:4C:50:E3:64:21:F7:73 Certificate issuer: /CN=88a780738b853acffbabdb23914c50e36421f773 Certificate serial: 019B6DA0FF1ECF3F7C632E26DB8C7A6C754A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iKeAc4uFOs_7q9sjkUxQ42Qh93M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/b89704-4fd2-4e07-a039-66f56ef9ce26/1/iKeAc4uFOs_7q9sjkUxQ42Qh93M.mft Manifest number: 17A3 Signing time: Tue 30 Dec 2025 05:00:26 +0000 Manifest this update: Tue 30 Dec 2025 05:00:26 +0000 Manifest next update: Wed 31 Dec 2025 05:00:26 +0000 Files and hashes: 1: 0JBSKBByojNYZjOoZlphUB11hQs.roa (hash: 9bDpXvSUlNPWWMoYaJSQ0SO0EuZKnPkwfl5l8GKFytk=) 2: aKf7cpyzNQSyfw8b7-Pr38WCYnc.roa (hash: oRGD5ClevpyjAOYjV/aBq4YhQP42jPwVRjMhzooXQlg=) 3: iKeAc4uFOs_7q9sjkUxQ42Qh93M.crl (hash: /LKq26gaU11SdxUZLE0smQcEg3b+lpVAHCH9D8UBorM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/b89704-4fd2-4e07-a039-66f56ef9ce26/1/iKeAc4uFOs_7q9sjkUxQ42Qh93M.crl rsync://rpki.ripe.net/repository/DEFAULT/0d/b89704-4fd2-4e07-a039-66f56ef9ce26/1/iKeAc4uFOs_7q9sjkUxQ42Qh93M.mft rsync://rpki.ripe.net/repository/DEFAULT/iKeAc4uFOs_7q9sjkUxQ42Qh93M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 31 Dec 2025 00:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:6d:a0:ff:1e:cf:3f:7c:63:2e:26:db:8c:7a:6c:75:4a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=88a780738b853acffbabdb23914c50e36421f773 Validity Not Before: Dec 30 05:00:26 2025 GMT Not After : Dec 31 05:00:26 2025 GMT Subject: CN=9daf3e3b951ae738c8c7e32de73e5f5ea0acd505 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:57:50:31:c5:37:d4:67:0d:a4:66:ca:6e:f0: 91:1f:fc:6a:fd:53:39:0e:0a:21:ed:e3:b7:23:fa: 73:d2:cc:cb:9d:e0:a3:e4:74:ee:96:1a:4d:f4:b6: 8d:5c:29:9f:e6:f9:e5:6a:56:e4:a5:fc:c8:75:5f: 20:de:59:b6:0d:cc:44:55:29:46:2f:4e:57:4d:1e: 98:22:2d:ec:86:81:0a:2c:b3:39:8f:05:a7:73:4f: a4:e1:79:8a:6a:b9:e7:67:cb:9a:7c:02:58:10:43: 3e:4f:e1:e0:20:9c:f0:78:d3:c4:be:8a:93:91:ff: 6e:d2:a1:56:03:63:55:cb:28:2a:49:9a:15:11:3c: f4:81:2a:82:00:fe:bf:c1:e7:e5:0a:cb:45:db:7e: 66:7f:19:05:98:b4:f5:2d:3c:3d:4c:83:aa:9a:80: 69:4c:4b:1b:48:c8:95:79:34:c7:eb:2e:8e:e9:94: 65:4f:70:ab:34:4e:29:d8:10:df:d6:21:80:1e:65: 5e:84:ac:34:67:66:30:20:12:6f:33:ef:41:aa:13: 2d:22:ce:ea:43:dd:53:91:3b:db:56:3a:b3:d5:a3: de:79:49:4d:6d:10:15:f5:df:7f:ec:4d:8c:4f:2d: 29:48:da:9f:8d:c5:36:4d:2b:f8:4d:97:7e:27:df: 9e:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:AF:3E:3B:95:1A:E7:38:C8:C7:E3:2D:E7:3E:5F:5E:A0:AC:D5:05 X509v3 Authority Key Identifier: keyid:88:A7:80:73:8B:85:3A:CF:FB:AB:DB:23:91:4C:50:E3:64:21:F7:73 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iKeAc4uFOs_7q9sjkUxQ42Qh93M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/b89704-4fd2-4e07-a039-66f56ef9ce26/1/iKeAc4uFOs_7q9sjkUxQ42Qh93M.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/b89704-4fd2-4e07-a039-66f56ef9ce26/1/iKeAc4uFOs_7q9sjkUxQ42Qh93M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4f:64:84:f0:81:12:92:18:69:81:69:39:ca:a7:a7:d3:bc:4c: 45:d5:c6:bc:40:6e:48:db:d0:8e:55:9d:ed:9e:f2:e9:8e:92: d1:dc:36:c1:63:ce:ff:68:6c:1e:ff:f7:ff:a8:6e:4e:4e:b0: 72:5d:c4:0a:83:b0:a3:9c:fe:f3:c8:57:8a:fa:7a:b8:f2:78: 15:88:b7:0b:72:0d:0b:8f:2c:86:6e:4e:c6:53:83:5f:50:d6: 93:4c:71:4c:47:03:bc:b9:86:32:2e:9e:67:9a:53:47:ba:59: a9:23:65:7b:6c:4e:d3:00:0d:9b:40:96:38:00:c4:a6:1f:0b: 54:d8:94:57:fb:a1:73:24:9f:38:94:e4:0e:71:91:e6:05:8b: 0b:85:ce:f0:bb:ee:1c:94:55:15:97:bb:2d:5d:49:ea:59:39: 00:c5:30:fc:e3:1e:e3:07:0e:48:65:92:b7:4e:9a:18:f9:b0: 3f:1b:f9:f5:2e:45:11:ad:94:c4:27:db:5b:6a:9c:65:cb:15: f5:f9:cb:d7:f4:48:6c:6b:14:13:d2:df:cc:a1:7b:88:13:00: 92:a1:d9:1f:cd:7e:d0:4c:1c:5c:1f:40:b6:7e:51:e1:86:36: 43:c7:16:34:ba:81:be:ae:bb:e0:bf:93:13:aa:b7:88:60:7e: 57:09:8a:9f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZttoP8ezz98Yy4m24x6bHVKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg4YTc4MDczOGI4NTNhY2ZmYmFiZGIyMzkxNGM1MGUzNjQy MWY3NzMwHhcNMjUxMjMwMDUwMDI2WhcNMjUxMjMxMDUwMDI2WjAzMTEwLwYDVQQD Eyg5ZGFmM2UzYjk1MWFlNzM4YzhjN2UzMmRlNzNlNWY1ZWEwYWNkNTA1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu1dQMcU31GcNpGbKbvCRH/xq/VM5 Dgoh7eO3I/pz0szLneCj5HTulhpN9LaNXCmf5vnlalbkpfzIdV8g3lm2DcxEVSlG L05XTR6YIi3shoEKLLM5jwWnc0+k4XmKarnnZ8uafAJYEEM+T+HgIJzweNPEvoqT kf9u0qFWA2NVyygqSZoVETz0gSqCAP6/weflCstF235mfxkFmLT1LTw9TIOqmoBp TEsbSMiVeTTH6y6O6ZRlT3CrNE4p2BDf1iGAHmVehKw0Z2YwIBJvM+9BqhMtIs7q Q91TkTvbVjqz1aPeeUlNbRAV9d9/7E2MTy0pSNqfjcU2TSv4TZd+J9+eOQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJ2vPjuVGuc4yMfjLec+X16grNUFMB8GA1UdIwQY MBaAFIingHOLhTrP+6vbI5FMUONkIfdzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaUtlQWM0dUZPc183cTlzamtVeFE0MlFoOTNNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZC9iODk3MDQtNGZkMi00ZTA3LWEwMzkt NjZmNTZlZjljZTI2LzEvaUtlQWM0dUZPc183cTlzamtVeFE0MlFoOTNNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZC9iODk3MDQtNGZkMi00ZTA3LWEwMzktNjZmNTZlZjljZTI2 LzEvaUtlQWM0dUZPc183cTlzamtVeFE0MlFoOTNNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAT2SE8IES khhpgWk5yqen07xMRdXGvEBuSNvQjlWd7Z7y6Y6S0dw2wWPO/2hsHv/3/6huTk6w cl3ECoOwo5z+88hXivp6uPJ4FYi3C3INC48shm5OxlODX1DWk0xxTEcDvLmGMi6e Z5pTR7pZqSNle2xO0wANm0CWOADEph8LVNiUV/uhcySfOJTkDnGR5gWLC4XO8Lvu HJRVFZe7LV1J6lk5AMUw/OMe4wcOSGWSt06aGPmwPxv59S5FEa2UxCfbW2qcZcsV 9fnL1/RIbGsUE9LfzKF7iBMAkqHZH81+0EwcXB9Atn5R4YY2Q8cWNLqBvq674L+T E6q3iGB+VwmKnw== -----END CERTIFICATE-----Generated at Tue Dec 30 10:32:16 2025 by rpki-client