This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/6eb54e-e709-4b7a-ade9-a9aeb485d592/1/IwqhYKbohsED2tvkSyPCd3YFc5E.mft File: IwqhYKbohsED2tvkSyPCd3YFc5E.mft (raw, json) Hash identifier: G02HriSBzp2LuLbgZmYPMqsllBm1lRzK1INqiCubdUc= Subject key identifier: A0:71:DD:79:7D:DE:79:F7:60:30:6F:57:E3:69:9B:AC:40:6D:2A:51 Authority key identifier: 23:0A:A1:60:A6:E8:86:C1:03:DA:DB:E4:4B:23:C2:77:76:05:73:91 Certificate issuer: /CN=230aa160a6e886c103dadbe44b23c27776057391 Certificate serial: 019B2AAEED9F82E25E25F24AF2F93EA242B8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IwqhYKbohsED2tvkSyPCd3YFc5E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/6eb54e-e709-4b7a-ade9-a9aeb485d592/1/IwqhYKbohsED2tvkSyPCd3YFc5E.mft Manifest number: 0F1E Signing time: Wed 17 Dec 2025 05:01:05 +0000 Manifest this update: Wed 17 Dec 2025 05:01:05 +0000 Manifest next update: Thu 18 Dec 2025 05:01:05 +0000 Files and hashes: 1: 1H3wr9EMEu_9kf6Zl38WrkoAkBU.roa (hash: FprWo0wu1rkhWTeCTL4oYKvIo6iA1oIZ1p0P+xAQYGs=) 2: IwqhYKbohsED2tvkSyPCd3YFc5E.crl (hash: g9PWkpHM/AFFQfHOBdO6fxQx9d9jHtzLktn0G2HDcdw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/6eb54e-e709-4b7a-ade9-a9aeb485d592/1/IwqhYKbohsED2tvkSyPCd3YFc5E.crl rsync://rpki.ripe.net/repository/DEFAULT/15/6eb54e-e709-4b7a-ade9-a9aeb485d592/1/IwqhYKbohsED2tvkSyPCd3YFc5E.mft rsync://rpki.ripe.net/repository/DEFAULT/IwqhYKbohsED2tvkSyPCd3YFc5E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 05:01:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2a:ae:ed:9f:82:e2:5e:25:f2:4a:f2:f9:3e:a2:42:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=230aa160a6e886c103dadbe44b23c27776057391 Validity Not Before: Dec 17 05:01:05 2025 GMT Not After : Dec 18 05:01:05 2025 GMT Subject: CN=a071dd797dde79f760306f57e3699bac406d2a51 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:5a:28:d9:d7:ef:d2:56:da:64:69:9c:80:e6: cf:af:36:78:17:03:6d:17:d3:ce:28:98:0d:8e:7b: 21:22:52:cd:35:16:a3:5a:41:70:b9:8c:89:d5:4b: 3d:c4:06:79:06:2c:cb:d9:a5:75:b0:59:47:c3:fb: ce:c7:f4:50:37:94:78:25:dd:47:d1:0c:95:5e:0c: ae:a5:24:fe:08:43:60:49:6d:6d:3f:fd:ad:42:5a: 7a:1b:28:5a:93:83:49:28:c6:6a:21:42:8d:17:69: 26:fb:9d:e8:32:4c:7d:39:a4:38:f3:5c:49:9e:50: 26:39:66:f0:e1:b3:0b:60:fe:96:a7:bf:1e:d0:78: a6:e8:8a:65:98:62:33:de:9a:38:63:2a:9f:d2:bf: b2:bc:34:9d:7e:e9:05:f5:ac:43:94:36:d1:e7:fb: b9:84:73:16:85:97:55:9d:48:81:3e:0f:e9:ff:c5: c5:48:e4:1d:eb:51:cd:d4:ea:47:0f:b3:11:7c:d0: 3f:ef:d0:e9:ac:1d:58:ec:58:0d:8f:d7:c4:43:f1: 58:c0:41:fb:cb:cd:dc:ce:56:03:b7:72:a9:b9:af: 3d:eb:9a:76:d0:1d:1f:0c:60:fe:46:22:6a:92:64: 64:61:e8:75:dc:60:2b:78:8f:46:87:b6:04:95:b7: 62:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:71:DD:79:7D:DE:79:F7:60:30:6F:57:E3:69:9B:AC:40:6D:2A:51 X509v3 Authority Key Identifier: keyid:23:0A:A1:60:A6:E8:86:C1:03:DA:DB:E4:4B:23:C2:77:76:05:73:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IwqhYKbohsED2tvkSyPCd3YFc5E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/6eb54e-e709-4b7a-ade9-a9aeb485d592/1/IwqhYKbohsED2tvkSyPCd3YFc5E.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/15/6eb54e-e709-4b7a-ade9-a9aeb485d592/1/IwqhYKbohsED2tvkSyPCd3YFc5E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9d:73:cb:d5:57:7f:75:5a:34:cc:47:f0:d1:4e:f4:cb:12:62: 68:ef:18:12:7c:db:f3:32:88:8c:ed:38:79:6f:04:f6:48:80: e8:f0:96:78:db:26:36:25:70:3a:9f:d2:9b:ad:27:4b:3d:5f: 2d:9f:a1:94:b3:98:9c:76:96:81:bf:cf:32:cd:0f:56:cc:bb: a1:c2:b2:ca:0f:96:3d:af:02:0d:34:5a:1c:07:5e:71:f1:0f: b7:4a:4b:a3:fa:7f:d9:f9:46:75:ac:8b:34:68:cf:a5:2d:e2: ac:ac:ca:e8:ed:f0:e2:dd:c5:a2:79:f4:48:88:d3:2c:7c:3d: 5c:3e:05:fa:86:4c:0e:a8:a5:32:8c:5d:3f:8b:cb:7f:bd:49: 10:01:6b:7f:3c:d2:0d:21:05:bd:a4:06:a6:f7:6d:60:99:f2: 08:f7:59:dd:77:57:06:f7:80:78:e1:a6:bd:97:f0:52:5d:24: d8:4d:3c:98:33:88:af:15:3a:42:49:6e:3b:28:54:b7:ef:3d: e3:11:ff:10:ca:37:12:16:bc:7e:c0:38:93:02:6f:78:4b:70: 47:91:99:d6:71:3f:8a:4a:59:5c:9f:63:25:b0:90:d2:ce:03: 97:5e:6a:81:58:9d:69:b2:5e:41:12:f3:67:9b:eb:9d:99:94: 7b:22:3d:bf -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsqru2fguJeJfJK8vk+okK4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIzMGFhMTYwYTZlODg2YzEwM2RhZGJlNDRiMjNjMjc3NzYw NTczOTEwHhcNMjUxMjE3MDUwMTA1WhcNMjUxMjE4MDUwMTA1WjAzMTEwLwYDVQQD EyhhMDcxZGQ3OTdkZGU3OWY3NjAzMDZmNTdlMzY5OWJhYzQwNmQyYTUxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv1oo2dfv0lbaZGmcgObPrzZ4FwNt F9POKJgNjnshIlLNNRajWkFwuYyJ1Us9xAZ5BizL2aV1sFlHw/vOx/RQN5R4Jd1H 0QyVXgyupST+CENgSW1tP/2tQlp6Gyhak4NJKMZqIUKNF2km+53oMkx9OaQ481xJ nlAmOWbw4bMLYP6Wp78e0Him6IplmGIz3po4Yyqf0r+yvDSdfukF9axDlDbR5/u5 hHMWhZdVnUiBPg/p/8XFSOQd61HN1OpHD7MRfNA/79DprB1Y7FgNj9fEQ/FYwEH7 y83czlYDt3Kpua8965p20B0fDGD+RiJqkmRkYeh13GAreI9Gh7YElbdiTQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKBx3Xl93nn3YDBvV+Npm6xAbSpRMB8GA1UdIwQY MBaAFCMKoWCm6IbBA9rb5Esjwnd2BXORMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSXdxaFlLYm9oc0VEMnR2a1N5UENkM1lGYzVFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNS82ZWI1NGUtZTcwOS00YjdhLWFkZTkt YTlhZWI0ODVkNTkyLzEvSXdxaFlLYm9oc0VEMnR2a1N5UENkM1lGYzVFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNS82ZWI1NGUtZTcwOS00YjdhLWFkZTktYTlhZWI0ODVkNTky LzEvSXdxaFlLYm9oc0VEMnR2a1N5UENkM1lGYzVFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnXPL1Vd/ dVo0zEfw0U70yxJiaO8YEnzb8zKIjO04eW8E9kiA6PCWeNsmNiVwOp/Sm60nSz1f LZ+hlLOYnHaWgb/PMs0PVsy7ocKyyg+WPa8CDTRaHAdecfEPt0pLo/p/2flGdayL NGjPpS3irKzK6O3w4t3Fonn0SIjTLHw9XD4F+oZMDqilMoxdP4vLf71JEAFrfzzS DSEFvaQGpvdtYJnyCPdZ3XdXBveAeOGmvZfwUl0k2E08mDOIrxU6QkluOyhUt+89 4xH/EMo3Eha8fsA4kwJveEtwR5GZ1nE/ikpZXJ9jJbCQ0s4Dl15qgVidabJeQRLz Z5vrnZmUeyI9vw== -----END CERTIFICATE-----Generated at Wed Dec 17 15:11:49 2025 by rpki-client