This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/5e82d6-c611-40ad-958e-301e4654ddf6/1/ia-HaTOXA9o7DLXoMQI9O_Y_Ai4.mft File: ia-HaTOXA9o7DLXoMQI9O_Y_Ai4.mft (raw, json) Hash identifier: cPg34/9gJvwnqs/ihPGJFQQM1C5uHtMRqT94EcHzfsE= Subject key identifier: 21:FF:2F:AE:B8:F3:58:3A:01:A2:14:F7:9A:3F:1C:07:BA:1C:84:B4 Authority key identifier: 89:AF:87:69:33:97:03:DA:3B:0C:B5:E8:31:02:3D:3B:F6:3F:02:2E Certificate issuer: /CN=89af8769339703da3b0cb5e831023d3bf63f022e Certificate serial: 019B4CCD62DB545805048FEA41CC5BA79896 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ia-HaTOXA9o7DLXoMQI9O_Y_Ai4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/5e82d6-c611-40ad-958e-301e4654ddf6/1/ia-HaTOXA9o7DLXoMQI9O_Y_Ai4.mft Manifest number: 103A Signing time: Tue 23 Dec 2025 20:01:27 +0000 Manifest this update: Tue 23 Dec 2025 20:01:27 +0000 Manifest next update: Wed 24 Dec 2025 20:01:27 +0000 Files and hashes: 1: JBBfWvBvIPbMFEPW3wW2A3eZfMw.roa (hash: HPVfysoAPIIkBoYBVqV/VP2S0bfAf3Hk6zV6kpgHup8=) 2: ia-HaTOXA9o7DLXoMQI9O_Y_Ai4.crl (hash: tLADbXsGcfnXliVX+pXSzu0IuNo3jl01J2ZspCAi0BA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/5e82d6-c611-40ad-958e-301e4654ddf6/1/ia-HaTOXA9o7DLXoMQI9O_Y_Ai4.crl rsync://rpki.ripe.net/repository/DEFAULT/2d/5e82d6-c611-40ad-958e-301e4654ddf6/1/ia-HaTOXA9o7DLXoMQI9O_Y_Ai4.mft rsync://rpki.ripe.net/repository/DEFAULT/ia-HaTOXA9o7DLXoMQI9O_Y_Ai4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 24 Dec 2025 19:01:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4c:cd:62:db:54:58:05:04:8f:ea:41:cc:5b:a7:98:96 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89af8769339703da3b0cb5e831023d3bf63f022e Validity Not Before: Dec 23 20:01:27 2025 GMT Not After : Dec 24 20:01:27 2025 GMT Subject: CN=21ff2faeb8f3583a01a214f79a3f1c07ba1c84b4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:c2:2c:f8:d1:8d:e3:05:26:a9:b4:4e:a6:36: a7:78:0c:4c:91:0d:f6:84:d2:29:0e:e7:17:13:ee: f4:e7:4c:97:0b:70:14:ba:64:99:77:81:35:39:55: 24:cf:64:38:e4:39:ac:9e:7b:06:84:90:9b:ab:3d: f7:d1:c6:a7:22:34:6d:bf:fe:dd:13:fd:1b:6c:7b: 7b:e6:85:f1:4f:2f:3b:10:40:b0:e9:76:64:0c:28: 96:28:cb:f7:e2:51:30:47:7b:bc:45:f0:b9:f2:fe: 0e:c9:40:74:31:13:9b:b6:f5:7b:d7:70:9d:1f:a0: 24:31:7d:66:6d:78:43:68:5b:fd:fc:d2:b5:9f:ca: 8a:e5:ce:5c:5a:bc:73:d3:86:31:d7:6f:0c:91:bc: f7:63:cf:47:57:4b:bb:94:13:be:b2:cc:44:60:8d: 01:1d:ca:20:08:e8:e3:80:64:db:83:a3:b2:42:11: ab:da:39:98:d5:0f:d5:9d:75:d0:f8:94:4d:f1:a9: 64:a6:25:00:1f:8d:e1:9f:9d:4b:f0:73:81:f1:e5: ea:5f:ed:2d:c3:f4:62:10:2a:b3:e3:8e:d4:53:b6: 29:21:6d:cd:10:e9:6c:e5:23:90:f8:63:c5:09:dc: 30:14:f8:87:f4:3c:44:fa:83:86:ee:f7:9c:06:e2: ea:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:FF:2F:AE:B8:F3:58:3A:01:A2:14:F7:9A:3F:1C:07:BA:1C:84:B4 X509v3 Authority Key Identifier: keyid:89:AF:87:69:33:97:03:DA:3B:0C:B5:E8:31:02:3D:3B:F6:3F:02:2E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ia-HaTOXA9o7DLXoMQI9O_Y_Ai4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/5e82d6-c611-40ad-958e-301e4654ddf6/1/ia-HaTOXA9o7DLXoMQI9O_Y_Ai4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/5e82d6-c611-40ad-958e-301e4654ddf6/1/ia-HaTOXA9o7DLXoMQI9O_Y_Ai4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 09:76:33:ca:a2:52:a0:8a:36:07:6f:c3:a3:37:5b:53:80:4c: 52:b9:4e:62:69:f2:52:66:9d:21:0b:49:07:18:58:09:85:de: f8:a8:19:17:b4:18:1b:14:64:19:1d:17:2a:35:83:2f:7c:30: b6:1c:f7:9c:38:7a:3f:50:ba:2a:81:dc:11:bd:1e:a4:ae:8b: 80:26:b6:ed:8e:b8:0d:e0:61:0a:91:a6:23:48:08:bb:52:79: 9e:ee:11:d7:b7:9d:b4:c1:9d:5a:1c:1f:4f:fa:0e:b0:a0:56: e9:27:3b:9a:e5:c4:ee:e7:0c:23:42:2b:16:23:69:b3:e2:51: 62:07:77:90:16:f7:2e:a3:a2:7f:5e:3f:40:21:93:2d:6a:c9: 2b:12:7b:0c:be:96:bd:c7:eb:ef:be:18:75:f2:3d:e1:a0:3c: 45:6a:ea:56:7c:70:26:7b:98:fb:60:ef:35:b3:0f:35:5f:b9: ec:b7:0c:ec:f1:77:03:67:fd:4f:45:41:c2:a3:ca:1c:63:aa: ec:4f:91:01:93:d9:86:7d:c5:23:48:3c:29:2b:fe:e0:58:b0: d2:8d:2e:25:fb:97:4b:6f:cb:ca:ea:8c:3a:81:7a:6c:0d:96: ee:ea:af:b4:f0:09:25:44:dc:80:5d:c3:f5:a5:67:4a:b2:3b: 4c:50:8d:bd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtMzWLbVFgFBI/qQcxbp5iWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg5YWY4NzY5MzM5NzAzZGEzYjBjYjVlODMxMDIzZDNiZjYz ZjAyMmUwHhcNMjUxMjIzMjAwMTI3WhcNMjUxMjI0MjAwMTI3WjAzMTEwLwYDVQQD EygyMWZmMmZhZWI4ZjM1ODNhMDFhMjE0Zjc5YTNmMWMwN2JhMWM4NGI0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAosIs+NGN4wUmqbROpjaneAxMkQ32 hNIpDucXE+7050yXC3AUumSZd4E1OVUkz2Q45DmsnnsGhJCbqz330canIjRtv/7d E/0bbHt75oXxTy87EECw6XZkDCiWKMv34lEwR3u8RfC58v4OyUB0MRObtvV713Cd H6AkMX1mbXhDaFv9/NK1n8qK5c5cWrxz04Yx128Mkbz3Y89HV0u7lBO+ssxEYI0B HcogCOjjgGTbg6OyQhGr2jmY1Q/VnXXQ+JRN8alkpiUAH43hn51L8HOB8eXqX+0t w/RiECqz447UU7YpIW3NEOls5SOQ+GPFCdwwFPiH9DxE+oOG7vecBuLqIwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCH/L66481g6AaIU95o/HAe6HIS0MB8GA1UdIwQY MBaAFImvh2kzlwPaOwy16DECPTv2PwIuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaWEtSGFUT1hBOW83RExYb01RSTlPX1lfQWk0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZC81ZTgyZDYtYzYxMS00MGFkLTk1OGUt MzAxZTQ2NTRkZGY2LzEvaWEtSGFUT1hBOW83RExYb01RSTlPX1lfQWk0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZC81ZTgyZDYtYzYxMS00MGFkLTk1OGUtMzAxZTQ2NTRkZGY2 LzEvaWEtSGFUT1hBOW83RExYb01RSTlPX1lfQWk0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACXYzyqJS oIo2B2/DozdbU4BMUrlOYmnyUmadIQtJBxhYCYXe+KgZF7QYGxRkGR0XKjWDL3ww thz3nDh6P1C6KoHcEb0epK6LgCa27Y64DeBhCpGmI0gIu1J5nu4R17edtMGdWhwf T/oOsKBW6Sc7muXE7ucMI0IrFiNps+JRYgd3kBb3LqOif14/QCGTLWrJKxJ7DL6W vcfr774YdfI94aA8RWrqVnxwJnuY+2DvNbMPNV+57LcM7PF3A2f9T0VBwqPKHGOq 7E+RAZPZhn3FI0g8KSv+4Fiw0o0uJfuXS2/LyuqMOoF6bA2W7uqvtPAJJUTcgF3D 9aVnSrI7TFCNvQ== -----END CERTIFICATE-----Generated at Wed Dec 24 04:45:04 2025 by rpki-client