This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/cba186-e4d2-45e1-a938-0e4ab2637bed/1/_ieWxamFRTLp7WONHDmlQcLYlSw.mft File: _ieWxamFRTLp7WONHDmlQcLYlSw.mft (raw, json) Hash identifier: UrpDsvrmlGtfXRV0ygKBwyDcWzZ4NgRXF4YFE4Jjd5g= Subject key identifier: 80:9C:CD:A5:85:83:22:F0:16:F9:2B:58:BE:E8:91:28:97:15:2A:65 Authority key identifier: FE:27:96:C5:A9:85:45:32:E9:ED:63:8D:1C:39:A5:41:C2:D8:95:2C Certificate issuer: /CN=fe2796c5a9854532e9ed638d1c39a541c2d8952c Certificate serial: 019B40C878C57552D8D58D1B737B648A0DE6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_ieWxamFRTLp7WONHDmlQcLYlSw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/cba186-e4d2-45e1-a938-0e4ab2637bed/1/_ieWxamFRTLp7WONHDmlQcLYlSw.mft Manifest number: 1788 Signing time: Sun 21 Dec 2025 12:00:38 +0000 Manifest this update: Sun 21 Dec 2025 12:00:38 +0000 Manifest next update: Mon 22 Dec 2025 12:00:38 +0000 Files and hashes: 1: _ieWxamFRTLp7WONHDmlQcLYlSw.crl (hash: AFTcndxTStNe6BoZiQB6+O2asaIuGSfw95ihSV9yxl8=) 2: lVgaXBqK9ipwWOL2JmWoEWoiLBY.roa (hash: Oh3cZzMySDT+Ikxg+sUYVfiZZ5GP7qV/BWdrXyebTLU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/cba186-e4d2-45e1-a938-0e4ab2637bed/1/_ieWxamFRTLp7WONHDmlQcLYlSw.crl rsync://rpki.ripe.net/repository/DEFAULT/1a/cba186-e4d2-45e1-a938-0e4ab2637bed/1/_ieWxamFRTLp7WONHDmlQcLYlSw.mft rsync://rpki.ripe.net/repository/DEFAULT/_ieWxamFRTLp7WONHDmlQcLYlSw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 04:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:40:c8:78:c5:75:52:d8:d5:8d:1b:73:7b:64:8a:0d:e6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fe2796c5a9854532e9ed638d1c39a541c2d8952c Validity Not Before: Dec 21 12:00:38 2025 GMT Not After : Dec 22 12:00:38 2025 GMT Subject: CN=809ccda5858322f016f92b58bee8912897152a65 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:8b:1a:3e:25:46:dd:9a:6d:89:0a:30:5d:67: c0:e8:7f:9c:b3:34:52:2b:39:cd:54:78:f1:67:ba: 15:47:87:e2:32:f7:a2:97:18:20:f7:7b:8d:71:29: cb:1f:4d:4e:7c:24:b7:c7:df:88:80:49:c8:ff:a8: 4e:b2:cc:1a:8a:79:d3:08:5d:ee:3c:d4:93:84:d4: f7:d5:2d:dd:aa:0c:b2:1c:35:b9:6f:9e:7d:98:9a: 79:d7:d9:26:4b:17:ea:67:15:8a:9b:59:91:4b:e7: 1e:c6:47:99:b6:c2:a5:ce:ab:0f:85:ba:7d:95:cd: 2e:c5:84:09:77:e3:e4:cd:9a:17:99:0d:4e:e1:e3: a6:9d:00:67:14:1f:cd:40:5e:44:8c:9f:a1:49:55: 84:4b:d5:d6:32:cd:29:39:d3:57:da:3a:c4:6e:63: 91:64:d5:39:05:06:77:51:84:17:f0:71:ed:9c:d1: bf:70:67:bc:69:98:f2:ae:5d:b8:2d:cb:3d:3e:ec: b1:c5:99:bc:72:cf:68:9c:05:17:c3:19:16:4f:bb: ba:de:30:92:35:7b:41:28:f8:d1:4e:99:05:b7:92: 8d:80:79:fc:75:8c:42:6d:c6:8e:52:aa:3a:a0:40: 04:ee:c4:ba:01:fe:98:cc:89:c5:39:4f:3f:ce:2f: a4:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:9C:CD:A5:85:83:22:F0:16:F9:2B:58:BE:E8:91:28:97:15:2A:65 X509v3 Authority Key Identifier: keyid:FE:27:96:C5:A9:85:45:32:E9:ED:63:8D:1C:39:A5:41:C2:D8:95:2C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_ieWxamFRTLp7WONHDmlQcLYlSw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/cba186-e4d2-45e1-a938-0e4ab2637bed/1/_ieWxamFRTLp7WONHDmlQcLYlSw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/cba186-e4d2-45e1-a938-0e4ab2637bed/1/_ieWxamFRTLp7WONHDmlQcLYlSw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2b:0b:16:a4:13:d1:b4:2a:1f:fd:e3:c8:56:90:bd:c8:25:fb: 20:d9:0d:43:3d:5e:fd:36:75:00:fe:f4:11:73:b5:99:42:c0: 86:a6:e5:1a:89:67:f4:d4:cd:20:7e:78:e7:e5:20:81:6c:b1: 18:e2:15:6f:f9:a1:d9:04:df:85:9c:43:a4:c1:d4:91:56:48: 70:b2:f1:27:33:4b:af:de:a7:81:2b:61:2e:3a:5e:51:0a:96: 2c:06:ed:f5:99:05:2a:ae:05:0d:46:2b:c2:8c:b6:24:48:ea: ef:24:d0:69:4a:f5:95:bc:04:ff:91:05:e0:44:64:aa:1a:ee: ee:28:9b:1f:a6:ac:2b:e6:7c:fb:a4:c4:d3:21:80:22:a1:3d: 44:75:b7:35:63:de:85:04:67:b0:ee:41:6f:55:a1:4d:ce:16: ee:91:30:dc:55:fc:eb:ae:e3:6e:ab:18:37:fc:c4:9e:35:d2: 32:5e:2d:34:27:ed:ae:ce:71:bc:e8:da:59:9e:9b:49:24:36: 3d:f3:26:72:09:ac:37:46:cd:22:66:c5:7b:b3:2a:8a:ce:29: ea:36:5e:19:3d:5c:a5:e7:f6:60:19:01:0e:84:91:2f:62:63: 53:b8:0f:1b:bb:9c:7e:db:62:4e:84:d1:25:5f:2a:21:fa:63: ab:b0:fa:e7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtAyHjFdVLY1Y0bc3tkig3mMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZlMjc5NmM1YTk4NTQ1MzJlOWVkNjM4ZDFjMzlhNTQxYzJk ODk1MmMwHhcNMjUxMjIxMTIwMDM4WhcNMjUxMjIyMTIwMDM4WjAzMTEwLwYDVQQD Eyg4MDljY2RhNTg1ODMyMmYwMTZmOTJiNThiZWU4OTEyODk3MTUyYTY1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArosaPiVG3ZptiQowXWfA6H+cszRS KznNVHjxZ7oVR4fiMveilxgg93uNcSnLH01OfCS3x9+IgEnI/6hOsswainnTCF3u PNSThNT31S3dqgyyHDW5b559mJp519kmSxfqZxWKm1mRS+cexkeZtsKlzqsPhbp9 lc0uxYQJd+PkzZoXmQ1O4eOmnQBnFB/NQF5EjJ+hSVWES9XWMs0pOdNX2jrEbmOR ZNU5BQZ3UYQX8HHtnNG/cGe8aZjyrl24Lcs9PuyxxZm8cs9onAUXwxkWT7u63jCS NXtBKPjRTpkFt5KNgHn8dYxCbcaOUqo6oEAE7sS6Af6YzInFOU8/zi+kZwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFICczaWFgyLwFvkrWL7okSiXFSplMB8GA1UdIwQY MBaAFP4nlsWphUUy6e1jjRw5pUHC2JUsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX2llV3hhbUZSVExwN1dPTkhEbWxRY0xZbFN3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYS9jYmExODYtZTRkMi00NWUxLWE5Mzgt MGU0YWIyNjM3YmVkLzEvX2llV3hhbUZSVExwN1dPTkhEbWxRY0xZbFN3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYS9jYmExODYtZTRkMi00NWUxLWE5MzgtMGU0YWIyNjM3YmVk LzEvX2llV3hhbUZSVExwN1dPTkhEbWxRY0xZbFN3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKwsWpBPR tCof/ePIVpC9yCX7INkNQz1e/TZ1AP70EXO1mULAhqblGoln9NTNIH545+UggWyx GOIVb/mh2QTfhZxDpMHUkVZIcLLxJzNLr96ngSthLjpeUQqWLAbt9ZkFKq4FDUYr woy2JEjq7yTQaUr1lbwE/5EF4ERkqhru7iibH6asK+Z8+6TE0yGAIqE9RHW3NWPe hQRnsO5Bb1WhTc4W7pEw3FX8667jbqsYN/zEnjXSMl4tNCftrs5xvOjaWZ6bSSQ2 PfMmcgmsN0bNImbFe7Mqis4p6jZeGT1cpef2YBkBDoSRL2JjU7gPG7ucfttiToTR JV8qIfpjq7D65w== -----END CERTIFICATE-----Generated at Sun Dec 21 13:52:42 2025 by rpki-client