This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/075bc1-2b55-40b1-990e-23bb4203eb57/1/ieS_WYd6Oy7xT18SCmdQ3BSTnGs.mft File: ieS_WYd6Oy7xT18SCmdQ3BSTnGs.mft (raw, json) Hash identifier: Y0M/uYdbJSm+4V6PTupQAU4papeGbSXXvbQfQXyBrAY= Subject key identifier: 56:99:84:12:93:B0:6F:00:D7:ED:A4:1C:79:49:A2:82:E3:33:86:5C Authority key identifier: 89:E4:BF:59:87:7A:3B:2E:F1:4F:5F:12:0A:67:50:DC:14:93:9C:6B Certificate issuer: /CN=89e4bf59877a3b2ef14f5f120a6750dc14939c6b Certificate serial: 019B6F21A914B83A9128423C0E75737C4EF3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ieS_WYd6Oy7xT18SCmdQ3BSTnGs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/075bc1-2b55-40b1-990e-23bb4203eb57/1/ieS_WYd6Oy7xT18SCmdQ3BSTnGs.mft Manifest number: 122D Signing time: Tue 30 Dec 2025 12:00:35 +0000 Manifest this update: Tue 30 Dec 2025 12:00:35 +0000 Manifest next update: Wed 31 Dec 2025 12:00:35 +0000 Files and hashes: 1: 50v4LzlHhYMKbD4_ZkEJUgTdzZ8.roa (hash: 1zEQgnD6BlkobEHrpf54y5TDCgcpHnLxK3nKztK1TZQ=) 2: ieS_WYd6Oy7xT18SCmdQ3BSTnGs.crl (hash: XwmpnvG+1u4l8DrC0+h/2BOeueOUWueiruRzaA4+8TQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/075bc1-2b55-40b1-990e-23bb4203eb57/1/ieS_WYd6Oy7xT18SCmdQ3BSTnGs.crl rsync://rpki.ripe.net/repository/DEFAULT/2f/075bc1-2b55-40b1-990e-23bb4203eb57/1/ieS_WYd6Oy7xT18SCmdQ3BSTnGs.mft rsync://rpki.ripe.net/repository/DEFAULT/ieS_WYd6Oy7xT18SCmdQ3BSTnGs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 31 Dec 2025 12:00:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:6f:21:a9:14:b8:3a:91:28:42:3c:0e:75:73:7c:4e:f3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89e4bf59877a3b2ef14f5f120a6750dc14939c6b Validity Not Before: Dec 30 12:00:35 2025 GMT Not After : Dec 31 12:00:35 2025 GMT Subject: CN=5699841293b06f00d7eda41c7949a282e333865c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:40:8b:07:48:b5:90:2d:a1:00:af:73:2e:5a: 5e:f1:7e:eb:8e:10:c8:68:bb:ba:e7:94:09:bd:d7: 90:1f:3d:65:49:6d:6e:9d:02:50:1a:13:82:33:80: e6:e4:d5:50:2f:3a:29:19:9f:6c:54:5c:5b:c8:71: da:66:ff:c0:b9:87:8d:1c:0f:86:e4:81:19:62:bd: 94:0b:ff:9c:6e:d2:dd:3d:d5:cd:6e:15:c0:e4:d4: e7:43:82:de:bc:dd:c5:2c:ea:b3:8e:93:4e:a5:38: fb:3c:ee:a7:5e:5d:e1:4c:fc:0c:b0:68:d0:07:2a: c6:6c:c9:e9:09:7a:dd:17:8c:91:05:4c:98:79:e1: 35:d8:e9:66:43:60:4e:10:44:29:b5:de:21:87:3a: 07:e6:8b:6f:52:65:0f:28:17:cf:ea:9c:ee:1c:0e: 0a:d0:ac:d6:cb:e1:b7:89:50:71:41:b6:09:66:2b: fe:10:1b:e0:10:e0:bd:a3:36:ef:6e:d7:90:ca:13: 4c:03:e0:6b:df:8f:5f:4d:55:f4:a8:64:bc:85:f1: ba:29:40:71:2a:5f:81:d1:a0:b5:c3:2a:69:f8:67: b8:4b:cb:63:8e:0e:90:a0:6a:2e:38:8a:71:9f:eb: 9f:b1:af:d9:b5:61:91:54:c6:2f:b7:38:01:e6:cd: bb:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:99:84:12:93:B0:6F:00:D7:ED:A4:1C:79:49:A2:82:E3:33:86:5C X509v3 Authority Key Identifier: keyid:89:E4:BF:59:87:7A:3B:2E:F1:4F:5F:12:0A:67:50:DC:14:93:9C:6B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ieS_WYd6Oy7xT18SCmdQ3BSTnGs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/075bc1-2b55-40b1-990e-23bb4203eb57/1/ieS_WYd6Oy7xT18SCmdQ3BSTnGs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/075bc1-2b55-40b1-990e-23bb4203eb57/1/ieS_WYd6Oy7xT18SCmdQ3BSTnGs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 77:9b:84:48:37:cf:14:fc:aa:30:0f:61:85:20:4a:12:bd:a3: d8:18:20:75:1b:7d:25:8d:ed:1b:bd:51:5d:cf:0f:44:26:57: 16:11:89:16:df:76:35:15:f3:2c:29:1e:8c:77:38:88:c8:0f: a0:eb:70:f7:e3:ff:19:d7:2d:b2:91:c4:c3:aa:41:d9:e6:e2: 5b:3d:14:50:4c:fe:76:54:48:44:47:d2:47:0a:75:32:e5:b9: b1:b9:46:7e:b8:9a:bf:d5:86:18:e9:8e:68:2d:fe:bf:b2:36: da:98:2b:c7:f7:98:a0:2a:a5:bd:7c:db:f4:80:fb:9e:9d:b2: 8c:71:5d:d6:ce:47:e3:49:73:57:3d:e2:59:e1:19:b8:a1:fb: ea:b9:13:c4:e1:a3:69:ef:ee:32:36:4b:ce:a7:67:7e:4d:19: 30:52:33:54:63:d4:82:27:74:41:88:b6:f8:0c:e0:0f:8e:bc: 59:a4:9b:68:74:42:4a:0e:12:df:ad:64:a1:a5:e2:c8:15:aa: 99:2a:77:9b:26:b5:07:f1:92:11:d5:68:87:a9:55:d3:f6:cf: b6:82:5b:74:b1:b4:7c:9d:9f:47:aa:68:4c:5f:0a:0f:73:54: 5e:8b:3e:fe:0e:e6:da:63:74:3f:78:59:f4:62:20:73:7e:4f: d5:e9:fa:06 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtvIakUuDqRKEI8DnVzfE7zMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg5ZTRiZjU5ODc3YTNiMmVmMTRmNWYxMjBhNjc1MGRjMTQ5 MzljNmIwHhcNMjUxMjMwMTIwMDM1WhcNMjUxMjMxMTIwMDM1WjAzMTEwLwYDVQQD Eyg1Njk5ODQxMjkzYjA2ZjAwZDdlZGE0MWM3OTQ5YTI4MmUzMzM4NjVjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtECLB0i1kC2hAK9zLlpe8X7rjhDI aLu655QJvdeQHz1lSW1unQJQGhOCM4Dm5NVQLzopGZ9sVFxbyHHaZv/AuYeNHA+G 5IEZYr2UC/+cbtLdPdXNbhXA5NTnQ4LevN3FLOqzjpNOpTj7PO6nXl3hTPwMsGjQ ByrGbMnpCXrdF4yRBUyYeeE12OlmQ2BOEEQptd4hhzoH5otvUmUPKBfP6pzuHA4K 0KzWy+G3iVBxQbYJZiv+EBvgEOC9ozbvbteQyhNMA+Br349fTVX0qGS8hfG6KUBx Kl+B0aC1wypp+Ge4S8tjjg6QoGouOIpxn+ufsa/ZtWGRVMYvtzgB5s272QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFaZhBKTsG8A1+2kHHlJooLjM4ZcMB8GA1UdIwQY MBaAFInkv1mHejsu8U9fEgpnUNwUk5xrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaWVTX1dZZDZPeTd4VDE4U0NtZFEzQlNUbkdzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZi8wNzViYzEtMmI1NS00MGIxLTk5MGUt MjNiYjQyMDNlYjU3LzEvaWVTX1dZZDZPeTd4VDE4U0NtZFEzQlNUbkdzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZi8wNzViYzEtMmI1NS00MGIxLTk5MGUtMjNiYjQyMDNlYjU3 LzEvaWVTX1dZZDZPeTd4VDE4U0NtZFEzQlNUbkdzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAd5uESDfP FPyqMA9hhSBKEr2j2BggdRt9JY3tG71RXc8PRCZXFhGJFt92NRXzLCkejHc4iMgP oOtw9+P/GdctspHEw6pB2ebiWz0UUEz+dlRIREfSRwp1MuW5sblGfriav9WGGOmO aC3+v7I22pgrx/eYoCqlvXzb9ID7np2yjHFd1s5H40lzVz3iWeEZuKH76rkTxOGj ae/uMjZLzqdnfk0ZMFIzVGPUgid0QYi2+AzgD468WaSbaHRCSg4S361koaXiyBWq mSp3mya1B/GSEdVoh6lV0/bPtoJbdLG0fJ2fR6poTF8KD3NUXos+/g7m2mN0P3hZ 9GIgc35P1en6Bg== -----END CERTIFICATE-----Generated at Tue Dec 30 21:59:54 2025 by rpki-client