This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/5e82d6-c611-40ad-958e-301e4654ddf6/1/ia-HaTOXA9o7DLXoMQI9O_Y_Ai4.mft File: ia-HaTOXA9o7DLXoMQI9O_Y_Ai4.mft (raw, json) Hash identifier: dA+k8fsown6bgybAUU48EiorG5lqs2F/qZ30IWFsehc= Subject key identifier: 22:26:B3:33:9E:7A:9F:A6:06:F0:51:A5:7B:8E:D8:39:C8:AB:D9:87 Authority key identifier: 89:AF:87:69:33:97:03:DA:3B:0C:B5:E8:31:02:3D:3B:F6:3F:02:2E Certificate issuer: /CN=89af8769339703da3b0cb5e831023d3bf63f022e Certificate serial: 019B4325545260C1C0D87FBC094B68FD9B17 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ia-HaTOXA9o7DLXoMQI9O_Y_Ai4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/5e82d6-c611-40ad-958e-301e4654ddf6/1/ia-HaTOXA9o7DLXoMQI9O_Y_Ai4.mft Manifest number: 1035 Signing time: Sun 21 Dec 2025 23:01:18 +0000 Manifest this update: Sun 21 Dec 2025 23:01:18 +0000 Manifest next update: Mon 22 Dec 2025 23:01:18 +0000 Files and hashes: 1: JBBfWvBvIPbMFEPW3wW2A3eZfMw.roa (hash: HPVfysoAPIIkBoYBVqV/VP2S0bfAf3Hk6zV6kpgHup8=) 2: ia-HaTOXA9o7DLXoMQI9O_Y_Ai4.crl (hash: zknHjJgjLKAqJdBUFTMZ4GRPzGrg33JM8wtLvL1BuHE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/5e82d6-c611-40ad-958e-301e4654ddf6/1/ia-HaTOXA9o7DLXoMQI9O_Y_Ai4.crl rsync://rpki.ripe.net/repository/DEFAULT/2d/5e82d6-c611-40ad-958e-301e4654ddf6/1/ia-HaTOXA9o7DLXoMQI9O_Y_Ai4.mft rsync://rpki.ripe.net/repository/DEFAULT/ia-HaTOXA9o7DLXoMQI9O_Y_Ai4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:43:25:54:52:60:c1:c0:d8:7f:bc:09:4b:68:fd:9b:17 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89af8769339703da3b0cb5e831023d3bf63f022e Validity Not Before: Dec 21 23:01:18 2025 GMT Not After : Dec 22 23:01:18 2025 GMT Subject: CN=2226b3339e7a9fa606f051a57b8ed839c8abd987 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:93:8b:32:4b:13:d8:a4:0c:49:84:55:20:43: 95:b4:52:60:07:cc:47:f1:aa:fe:98:e2:80:3d:20: aa:64:f9:01:5e:48:46:99:1f:82:cc:0d:ad:61:d0: cf:6d:a4:45:55:f3:34:e9:0d:64:c4:4b:3b:6a:51: 3f:51:63:50:47:89:e5:c3:ca:69:4d:14:36:fc:df: 52:a3:64:13:77:27:eb:1c:16:51:7a:fb:38:44:4e: 63:1a:ef:6f:5b:b1:ea:8f:ba:4d:93:cf:6b:e4:8a: a0:f8:21:73:15:08:12:d7:dc:89:8e:ae:d5:20:a0: 69:7e:07:93:5c:ff:be:64:60:be:d9:d0:0f:1e:a8: fb:55:c1:0f:97:49:1a:4e:33:27:84:0d:68:77:b4: d2:b7:63:78:ba:aa:c4:c3:cd:60:b6:7a:85:af:39: 75:15:01:63:92:fa:50:17:de:4d:5c:82:33:d5:f0: 35:55:0d:11:01:19:5c:87:d9:ed:1a:2f:45:77:17: 8c:ed:f9:c7:53:4a:3d:c4:f7:34:3e:4a:9b:4a:18: 23:52:65:f7:b1:2f:af:2b:e6:4d:54:9a:ad:c3:4f: c3:7f:24:f2:61:47:21:83:05:00:e2:6e:87:1e:5b: d9:6b:d8:b1:77:5a:cf:33:a6:b6:47:4d:92:26:90: f7:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:26:B3:33:9E:7A:9F:A6:06:F0:51:A5:7B:8E:D8:39:C8:AB:D9:87 X509v3 Authority Key Identifier: keyid:89:AF:87:69:33:97:03:DA:3B:0C:B5:E8:31:02:3D:3B:F6:3F:02:2E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ia-HaTOXA9o7DLXoMQI9O_Y_Ai4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/5e82d6-c611-40ad-958e-301e4654ddf6/1/ia-HaTOXA9o7DLXoMQI9O_Y_Ai4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/5e82d6-c611-40ad-958e-301e4654ddf6/1/ia-HaTOXA9o7DLXoMQI9O_Y_Ai4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 19:df:79:40:4c:fa:20:1d:b6:04:8d:09:77:1e:8d:97:85:39: b6:87:ba:bc:45:d9:b5:96:12:0f:77:57:fa:cc:06:ae:81:2e: ba:01:39:ba:f1:e6:cb:40:01:9e:bd:c4:4d:43:8a:35:e5:de: 2e:29:3a:d8:24:3b:01:cd:37:76:7b:14:c0:7e:14:99:46:c1: 85:54:ef:8e:63:6c:8c:65:8c:dc:4a:ec:ee:69:84:f0:13:4f: 07:6a:7c:2f:55:cc:a7:5e:33:82:a8:ba:79:86:e9:20:4f:a7: 3f:63:27:8e:ff:ee:2d:6b:27:35:25:35:c2:9a:2e:36:fb:3a: 11:33:e5:e2:23:1e:b7:c5:a0:a2:71:6a:76:21:a7:0a:92:6d: cb:2d:09:00:ae:47:d1:39:9a:b2:08:f6:66:20:10:8d:af:d6: 7b:12:dc:a5:08:fe:6c:75:eb:ab:d5:a6:db:eb:fb:67:97:81: 4d:7f:a2:55:19:d8:e4:e8:42:dd:3b:4d:54:d5:bd:a4:ce:bd: aa:9b:f4:66:94:b3:fa:63:75:82:f6:3d:b0:6d:b7:ea:e8:3b: 25:86:21:e3:b6:79:62:bb:5f:7a:d7:01:7b:cb:8b:ec:0b:69: 44:d7:ac:bd:98:bb:10:78:07:27:aa:f1:0b:4a:b5:27:98:e1: 6e:ed:7a:0b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtDJVRSYMHA2H+8CUto/ZsXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg5YWY4NzY5MzM5NzAzZGEzYjBjYjVlODMxMDIzZDNiZjYz ZjAyMmUwHhcNMjUxMjIxMjMwMTE4WhcNMjUxMjIyMjMwMTE4WjAzMTEwLwYDVQQD EygyMjI2YjMzMzllN2E5ZmE2MDZmMDUxYTU3YjhlZDgzOWM4YWJkOTg3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs5OLMksT2KQMSYRVIEOVtFJgB8xH 8ar+mOKAPSCqZPkBXkhGmR+CzA2tYdDPbaRFVfM06Q1kxEs7alE/UWNQR4nlw8pp TRQ2/N9So2QTdyfrHBZRevs4RE5jGu9vW7Hqj7pNk89r5Iqg+CFzFQgS19yJjq7V IKBpfgeTXP++ZGC+2dAPHqj7VcEPl0kaTjMnhA1od7TSt2N4uqrEw81gtnqFrzl1 FQFjkvpQF95NXIIz1fA1VQ0RARlch9ntGi9FdxeM7fnHU0o9xPc0PkqbShgjUmX3 sS+vK+ZNVJqtw0/DfyTyYUchgwUA4m6HHlvZa9ixd1rPM6a2R02SJpD3RwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCImszOeep+mBvBRpXuO2DnIq9mHMB8GA1UdIwQY MBaAFImvh2kzlwPaOwy16DECPTv2PwIuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaWEtSGFUT1hBOW83RExYb01RSTlPX1lfQWk0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZC81ZTgyZDYtYzYxMS00MGFkLTk1OGUt MzAxZTQ2NTRkZGY2LzEvaWEtSGFUT1hBOW83RExYb01RSTlPX1lfQWk0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZC81ZTgyZDYtYzYxMS00MGFkLTk1OGUtMzAxZTQ2NTRkZGY2 LzEvaWEtSGFUT1hBOW83RExYb01RSTlPX1lfQWk0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGd95QEz6 IB22BI0Jdx6Nl4U5toe6vEXZtZYSD3dX+swGroEuugE5uvHmy0ABnr3ETUOKNeXe Lik62CQ7Ac03dnsUwH4UmUbBhVTvjmNsjGWM3Ers7mmE8BNPB2p8L1XMp14zgqi6 eYbpIE+nP2Mnjv/uLWsnNSU1wpouNvs6ETPl4iMet8WgonFqdiGnCpJtyy0JAK5H 0Tmasgj2ZiAQja/WexLcpQj+bHXrq9Wm2+v7Z5eBTX+iVRnY5OhC3TtNVNW9pM69 qpv0ZpSz+mN1gvY9sG236ug7JYYh47Z5YrtfetcBe8uL7AtpRNesvZi7EHgHJ6rx C0q1J5jhbu16Cw== -----END CERTIFICATE-----Generated at Mon Dec 22 05:16:26 2025 by rpki-client