This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/445a66-b76b-4b48-a02d-bc289a931b4b/1/iAsPesuH0TTDhZ1y0NGmHkdRusA.mft File: iAsPesuH0TTDhZ1y0NGmHkdRusA.mft (raw, json) Hash identifier: RlQHoHIwwk5zc2U2RbA6x4nz5w2yeLZNzR17ylRBzEQ= Subject key identifier: 73:9C:E6:71:1D:02:CB:8B:B6:CA:CA:E9:FD:9A:55:AB:DA:61:A7:77 Authority key identifier: 88:0B:0F:7A:CB:87:D1:34:C3:85:9D:72:D0:D1:A6:1E:47:51:BA:C0 Certificate issuer: /CN=880b0f7acb87d134c3859d72d0d1a61e4751bac0 Certificate serial: 019B529806374E8D3F495312C8998B023C3A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iAsPesuH0TTDhZ1y0NGmHkdRusA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/445a66-b76b-4b48-a02d-bc289a931b4b/1/iAsPesuH0TTDhZ1y0NGmHkdRusA.mft Manifest number: 0E3E Signing time: Wed 24 Dec 2025 23:00:53 +0000 Manifest this update: Wed 24 Dec 2025 23:00:53 +0000 Manifest next update: Thu 25 Dec 2025 23:00:53 +0000 Files and hashes: 1: UubezK0uH4JLqxbhgPEY0N-6nSw.roa (hash: Oagl7z5x1jSe2CWCzxXuth3kqDf2dweMIxQL2+jadVg=) 2: iAsPesuH0TTDhZ1y0NGmHkdRusA.crl (hash: 70CaMpsxkGpuYsvvSJeYRAPDBFtrd0E4HHYTZARUTYw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/445a66-b76b-4b48-a02d-bc289a931b4b/1/iAsPesuH0TTDhZ1y0NGmHkdRusA.crl rsync://rpki.ripe.net/repository/DEFAULT/16/445a66-b76b-4b48-a02d-bc289a931b4b/1/iAsPesuH0TTDhZ1y0NGmHkdRusA.mft rsync://rpki.ripe.net/repository/DEFAULT/iAsPesuH0TTDhZ1y0NGmHkdRusA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 23:00:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:52:98:06:37:4e:8d:3f:49:53:12:c8:99:8b:02:3c:3a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=880b0f7acb87d134c3859d72d0d1a61e4751bac0 Validity Not Before: Dec 24 23:00:53 2025 GMT Not After : Dec 25 23:00:53 2025 GMT Subject: CN=739ce6711d02cb8bb6cacae9fd9a55abda61a777 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:60:2a:7e:b5:5d:a6:3b:cb:8b:6f:d6:2f:0a: 00:8e:80:1e:f7:4b:33:ba:93:61:e6:11:2e:bf:b6: 8d:f8:d4:a8:83:e2:c5:b5:9f:61:23:8d:45:ef:34: eb:ce:45:68:cd:a9:17:fd:70:a2:4e:17:ab:78:e1: 66:9d:91:a8:bc:3b:9a:f0:ff:a5:df:2f:d7:b6:82: d0:10:8c:2c:13:07:5d:b0:07:b0:1e:73:df:ac:d8: 93:f6:79:bf:b6:91:f2:95:84:9d:49:67:03:4c:bf: 4b:fd:63:de:33:8a:2e:0e:a9:4f:67:4e:7f:85:11: 62:6b:4d:65:62:34:ad:78:e9:09:04:68:0e:fe:76: 30:8a:8d:fa:68:61:b0:1d:65:e2:7a:2d:bd:0f:88: 26:37:fd:0d:74:8e:0c:da:02:74:5a:50:1e:ff:1f: 63:66:fd:b9:dc:b1:60:72:65:16:3b:fa:82:d1:0c: b9:f3:67:1d:02:86:11:be:26:fb:ef:ec:01:25:0e: f5:58:f6:83:6c:3b:3a:3f:a4:e8:25:43:17:10:7c: 86:b7:3d:ca:d1:ce:8d:0d:0c:8d:c7:9b:3f:31:b1: b6:bd:d3:01:9f:cc:ae:60:fc:a3:4c:63:81:2c:f6: 7c:ab:37:e6:52:17:5a:5f:ad:1f:51:d0:c4:4b:b2: 90:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:9C:E6:71:1D:02:CB:8B:B6:CA:CA:E9:FD:9A:55:AB:DA:61:A7:77 X509v3 Authority Key Identifier: keyid:88:0B:0F:7A:CB:87:D1:34:C3:85:9D:72:D0:D1:A6:1E:47:51:BA:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iAsPesuH0TTDhZ1y0NGmHkdRusA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/445a66-b76b-4b48-a02d-bc289a931b4b/1/iAsPesuH0TTDhZ1y0NGmHkdRusA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/16/445a66-b76b-4b48-a02d-bc289a931b4b/1/iAsPesuH0TTDhZ1y0NGmHkdRusA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 06:ee:c6:dc:c4:c4:0e:be:e4:db:71:b7:60:2c:db:ff:2f:f5: 22:81:b7:f0:c6:86:6f:17:38:2e:48:3e:d1:40:a9:9f:ac:53: 4c:90:cb:ce:ef:97:49:41:89:45:b1:8a:56:7d:a3:dd:e3:5a: d1:ff:48:ea:b8:2d:7f:a1:3c:b9:cd:17:84:f6:f1:f3:cf:96: f4:8c:e7:97:5c:42:91:ba:d3:4b:25:4e:0e:6c:89:25:f6:d5: 01:f3:7f:73:f6:a7:51:71:e8:f1:5e:72:28:9c:1a:aa:8e:0f: f6:44:ed:92:96:2f:57:40:51:e2:86:41:4f:4a:cb:83:1a:08: 1c:af:37:c9:4a:4f:10:e4:20:40:cb:f7:53:51:55:9b:4a:c4: e6:77:05:95:fe:e0:89:b5:d4:46:9c:46:43:20:61:87:d9:5f: 8c:39:75:73:e0:f4:06:df:e2:24:0f:16:ce:14:52:bd:98:37: ad:63:62:27:b8:20:77:d0:bf:e5:9f:dd:90:bb:0a:b7:a2:80: 41:aa:50:10:c6:d5:c1:4c:bb:1a:bd:09:5c:b2:25:a6:f9:d1: e7:41:9a:e5:5a:9e:99:5b:cc:2a:58:40:fa:51:e4:56:ef:75: 49:68:42:18:7c:a7:c6:52:70:c6:c7:e2:ff:89:b8:d9:e5:1d: 90:64:60:20 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtSmAY3To0/SVMSyJmLAjw6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg4MGIwZjdhY2I4N2QxMzRjMzg1OWQ3MmQwZDFhNjFlNDc1 MWJhYzAwHhcNMjUxMjI0MjMwMDUzWhcNMjUxMjI1MjMwMDUzWjAzMTEwLwYDVQQD Eyg3MzljZTY3MTFkMDJjYjhiYjZjYWNhZTlmZDlhNTVhYmRhNjFhNzc3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr2AqfrVdpjvLi2/WLwoAjoAe90sz upNh5hEuv7aN+NSog+LFtZ9hI41F7zTrzkVozakX/XCiThereOFmnZGovDua8P+l 3y/XtoLQEIwsEwddsAewHnPfrNiT9nm/tpHylYSdSWcDTL9L/WPeM4ouDqlPZ05/ hRFia01lYjSteOkJBGgO/nYwio36aGGwHWXiei29D4gmN/0NdI4M2gJ0WlAe/x9j Zv253LFgcmUWO/qC0Qy582cdAoYRvib77+wBJQ71WPaDbDs6P6ToJUMXEHyGtz3K 0c6NDQyNx5s/MbG2vdMBn8yuYPyjTGOBLPZ8qzfmUhdaX60fUdDES7KQbwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHOc5nEdAsuLtsrK6f2aVavaYad3MB8GA1UdIwQY MBaAFIgLD3rLh9E0w4WdctDRph5HUbrAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaUFzUGVzdUgwVFREaFoxeTBOR21Ia2RSdXNBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi80NDVhNjYtYjc2Yi00YjQ4LWEwMmQt YmMyODlhOTMxYjRiLzEvaUFzUGVzdUgwVFREaFoxeTBOR21Ia2RSdXNBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNi80NDVhNjYtYjc2Yi00YjQ4LWEwMmQtYmMyODlhOTMxYjRi LzEvaUFzUGVzdUgwVFREaFoxeTBOR21Ia2RSdXNBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABu7G3MTE Dr7k23G3YCzb/y/1IoG38MaGbxc4Lkg+0UCpn6xTTJDLzu+XSUGJRbGKVn2j3eNa 0f9I6rgtf6E8uc0XhPbx88+W9Iznl1xCkbrTSyVODmyJJfbVAfN/c/anUXHo8V5y KJwaqo4P9kTtkpYvV0BR4oZBT0rLgxoIHK83yUpPEOQgQMv3U1FVm0rE5ncFlf7g ibXURpxGQyBhh9lfjDl1c+D0Bt/iJA8WzhRSvZg3rWNiJ7ggd9C/5Z/dkLsKt6KA QapQEMbVwUy7Gr0JXLIlpvnR50Ga5VqemVvMKlhA+lHkVu91SWhCGHynxlJwxsfi /4m42eUdkGRgIA== -----END CERTIFICATE-----Generated at Thu Dec 25 06:21:21 2025 by rpki-client