This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/2fb486-79a0-4396-833b-6c6f0e319ca1/1/IwUSFfbxvSJ9t_QN90jWTBBvhKM.mft File: IwUSFfbxvSJ9t_QN90jWTBBvhKM.mft (raw, json) Hash identifier: 0MZ2/xNPgNKwEHbwmWqoCxHv0Cy0XXL/vRUD3FiMV6s= Subject key identifier: 34:28:0A:5E:75:53:26:BC:5C:A2:9F:6A:04:1B:A9:60:5E:62:8D:6B Authority key identifier: 23:05:12:15:F6:F1:BD:22:7D:B7:F4:0D:F7:48:D6:4C:10:6F:84:A3 Certificate issuer: /CN=23051215f6f1bd227db7f40df748d64c106f84a3 Certificate serial: 019B3F48B2A76DBAEE089374B79E95ED0BA4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IwUSFfbxvSJ9t_QN90jWTBBvhKM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/2fb486-79a0-4396-833b-6c6f0e319ca1/1/IwUSFfbxvSJ9t_QN90jWTBBvhKM.mft Manifest number: 04C6 Signing time: Sun 21 Dec 2025 05:01:27 +0000 Manifest this update: Sun 21 Dec 2025 05:01:27 +0000 Manifest next update: Mon 22 Dec 2025 05:01:27 +0000 Files and hashes: 1: EuYflw2vpOToo9K8lFetTYAhWyo.roa (hash: SUT2OfNUp9WFMOp/u/f5+vrQyr/WoDJgwv8+U/p5Afw=) 2: IwUSFfbxvSJ9t_QN90jWTBBvhKM.crl (hash: 2cMDfcGC1+QU3hjLnKWHbTcpV+8LBZFHkT2jgEb/DGA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/2fb486-79a0-4396-833b-6c6f0e319ca1/1/IwUSFfbxvSJ9t_QN90jWTBBvhKM.crl rsync://rpki.ripe.net/repository/DEFAULT/23/2fb486-79a0-4396-833b-6c6f0e319ca1/1/IwUSFfbxvSJ9t_QN90jWTBBvhKM.mft rsync://rpki.ripe.net/repository/DEFAULT/IwUSFfbxvSJ9t_QN90jWTBBvhKM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3f:48:b2:a7:6d:ba:ee:08:93:74:b7:9e:95:ed:0b:a4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=23051215f6f1bd227db7f40df748d64c106f84a3 Validity Not Before: Dec 21 05:01:27 2025 GMT Not After : Dec 22 05:01:27 2025 GMT Subject: CN=34280a5e755326bc5ca29f6a041ba9605e628d6b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:e3:5b:fb:9f:b2:1f:85:d4:8b:2e:2f:fd:01: 92:76:f4:dd:07:5a:f0:da:76:46:01:98:5e:24:59: a4:22:43:54:01:5c:67:35:93:ec:d1:48:37:f6:00: 2c:0c:81:56:af:be:86:35:c5:03:c3:86:9d:e4:45: 7b:30:f8:9f:ca:cf:50:fd:8d:b4:82:ba:b2:6e:e7: 4a:81:cd:b1:9c:d9:a4:83:cb:4e:b9:ab:20:f3:c3: 38:d0:40:c9:6c:5d:0a:4e:7b:54:c3:d4:e4:5a:46: 10:49:79:fd:15:34:ec:d9:09:78:04:f9:3f:b8:73: b6:94:cc:ec:43:75:26:a6:2c:24:77:9b:9d:f9:8e: e2:49:23:c1:c7:84:27:35:fb:11:92:7f:e4:23:15: db:b3:91:e9:97:a6:22:79:49:2c:b5:cc:af:f9:5b: 6d:79:4d:a4:0a:ed:79:b2:bd:63:7b:8a:1f:0a:a7: 78:21:5d:c9:1b:fb:06:fb:10:1e:a8:80:c4:9d:0b: 25:89:84:2e:57:56:d7:3d:1e:77:6b:93:39:78:8a: 0a:3b:5f:c2:a4:2b:64:2e:6a:b5:0c:8b:7d:8d:9c: 9d:f7:44:83:44:1a:69:b6:a3:b5:a3:6d:b8:80:c2: 2c:b0:d1:d7:d0:0c:8a:5f:dd:50:25:a3:ad:f2:87: b3:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:28:0A:5E:75:53:26:BC:5C:A2:9F:6A:04:1B:A9:60:5E:62:8D:6B X509v3 Authority Key Identifier: keyid:23:05:12:15:F6:F1:BD:22:7D:B7:F4:0D:F7:48:D6:4C:10:6F:84:A3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IwUSFfbxvSJ9t_QN90jWTBBvhKM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/2fb486-79a0-4396-833b-6c6f0e319ca1/1/IwUSFfbxvSJ9t_QN90jWTBBvhKM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/23/2fb486-79a0-4396-833b-6c6f0e319ca1/1/IwUSFfbxvSJ9t_QN90jWTBBvhKM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 12:84:9b:55:aa:38:c2:ec:cf:15:f6:f1:6e:9c:48:67:39:d7: cc:50:97:60:8a:37:4b:3b:09:2d:01:4c:b0:a4:f5:1f:6a:42: fc:f7:d8:f6:28:7a:ce:41:95:28:a4:3a:89:6f:9a:0c:47:4c: b7:11:54:db:b7:ca:45:1e:eb:79:ac:f7:32:ba:9e:c8:2c:b0: d3:07:3d:73:f8:60:14:9f:40:cd:81:e9:f7:d8:ba:19:a1:b2: bd:8b:16:02:03:ed:cc:a4:26:2c:42:8a:b2:7e:5e:23:a2:1c: 51:48:87:51:72:d5:93:45:45:27:60:46:43:71:68:6f:62:72: db:3f:b9:34:61:04:19:a6:08:03:da:69:c2:f5:0e:5a:cb:2e: c0:b2:89:83:06:a6:7b:3f:a9:bd:31:51:a5:31:2e:2a:34:4e: 44:ec:7f:a7:6a:77:b5:e5:93:ab:c1:27:e0:c5:cd:2d:fb:aa: 52:bf:c5:5e:21:8e:ae:bb:7c:08:52:be:8a:23:a7:7f:5c:e4: ee:32:be:52:c8:ea:3b:1f:14:8c:9d:79:9c:8d:da:da:97:ac: 37:dc:98:67:4f:dd:0c:2f:ab:a1:c6:09:db:99:a8:4a:90:85: 39:5f:21:ca:b1:44:04:ff:75:1b:61:3b:96:52:0c:a8:15:d1: bb:f8:44:74 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs/SLKnbbruCJN0t56V7QukMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIzMDUxMjE1ZjZmMWJkMjI3ZGI3ZjQwZGY3NDhkNjRjMTA2 Zjg0YTMwHhcNMjUxMjIxMDUwMTI3WhcNMjUxMjIyMDUwMTI3WjAzMTEwLwYDVQQD EygzNDI4MGE1ZTc1NTMyNmJjNWNhMjlmNmEwNDFiYTk2MDVlNjI4ZDZiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAouNb+5+yH4XUiy4v/QGSdvTdB1rw 2nZGAZheJFmkIkNUAVxnNZPs0Ug39gAsDIFWr76GNcUDw4ad5EV7MPifys9Q/Y20 grqybudKgc2xnNmkg8tOuasg88M40EDJbF0KTntUw9TkWkYQSXn9FTTs2Ql4BPk/ uHO2lMzsQ3Umpiwkd5ud+Y7iSSPBx4QnNfsRkn/kIxXbs5Hpl6YieUkstcyv+Vtt eU2kCu15sr1je4ofCqd4IV3JG/sG+xAeqIDEnQsliYQuV1bXPR53a5M5eIoKO1/C pCtkLmq1DIt9jZyd90SDRBpptqO1o224gMIssNHX0AyKX91QJaOt8oezrwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDQoCl51Uya8XKKfagQbqWBeYo1rMB8GA1UdIwQY MBaAFCMFEhX28b0ifbf0DfdI1kwQb4SjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSXdVU0ZmYnh2U0o5dF9RTjkwaldUQkJ2aEtNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMy8yZmI0ODYtNzlhMC00Mzk2LTgzM2It NmM2ZjBlMzE5Y2ExLzEvSXdVU0ZmYnh2U0o5dF9RTjkwaldUQkJ2aEtNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMy8yZmI0ODYtNzlhMC00Mzk2LTgzM2ItNmM2ZjBlMzE5Y2Ex LzEvSXdVU0ZmYnh2U0o5dF9RTjkwaldUQkJ2aEtNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEoSbVao4 wuzPFfbxbpxIZznXzFCXYIo3SzsJLQFMsKT1H2pC/PfY9ih6zkGVKKQ6iW+aDEdM txFU27fKRR7reaz3MrqeyCyw0wc9c/hgFJ9AzYHp99i6GaGyvYsWAgPtzKQmLEKK sn5eI6IcUUiHUXLVk0VFJ2BGQ3Fob2Jy2z+5NGEEGaYIA9ppwvUOWssuwLKJgwam ez+pvTFRpTEuKjROROx/p2p3teWTq8En4MXNLfuqUr/FXiGOrrt8CFK+iiOnf1zk 7jK+UsjqOx8UjJ15nI3a2pesN9yYZ0/dDC+rocYJ25moSpCFOV8hyrFEBP91G2E7 llIMqBXRu/hEdA== -----END CERTIFICATE-----Generated at Sun Dec 21 09:45:11 2025 by rpki-client