This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/dd42d9-ff88-4ca0-883c-317645cd7885/1/iET8SuEGSZ4Fdf88oVVtvA2bRlE.mft File: iET8SuEGSZ4Fdf88oVVtvA2bRlE.mft (raw, json) Hash identifier: xLLoD4YrhDD4zemTE4+jZg2LjRxOUdSl4sD0p+McTvM= Subject key identifier: BA:54:59:30:4D:EC:B4:88:31:CC:26:D4:F3:4D:FB:29:EB:0D:94:30 Authority key identifier: 88:44:FC:4A:E1:06:49:9E:05:75:FF:3C:A1:55:6D:BC:0D:9B:46:51 Certificate issuer: /CN=8844fc4ae106499e0575ff3ca1556dbc0d9b4651 Certificate serial: 019B3BD974AF366F67A1ABB196B7563C5EAD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iET8SuEGSZ4Fdf88oVVtvA2bRlE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/dd42d9-ff88-4ca0-883c-317645cd7885/1/iET8SuEGSZ4Fdf88oVVtvA2bRlE.mft Manifest number: 16DB Signing time: Sat 20 Dec 2025 13:01:05 +0000 Manifest this update: Sat 20 Dec 2025 13:01:05 +0000 Manifest next update: Sun 21 Dec 2025 13:01:05 +0000 Files and hashes: 1: Qv6t4wP7j-uLsxcfTWHv2ZFQWD8.roa (hash: eR47NrGWjMdNEp9FBa07vBAWwdqKIDeSc8imYvJOwfI=) 2: iET8SuEGSZ4Fdf88oVVtvA2bRlE.crl (hash: OEeS9zIkQUVIU3d07hnzUZlxHnHvfsezzuOplypRpFI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/dd42d9-ff88-4ca0-883c-317645cd7885/1/iET8SuEGSZ4Fdf88oVVtvA2bRlE.crl rsync://rpki.ripe.net/repository/DEFAULT/32/dd42d9-ff88-4ca0-883c-317645cd7885/1/iET8SuEGSZ4Fdf88oVVtvA2bRlE.mft rsync://rpki.ripe.net/repository/DEFAULT/iET8SuEGSZ4Fdf88oVVtvA2bRlE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 09:56:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3b:d9:74:af:36:6f:67:a1:ab:b1:96:b7:56:3c:5e:ad Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8844fc4ae106499e0575ff3ca1556dbc0d9b4651 Validity Not Before: Dec 20 13:01:05 2025 GMT Not After : Dec 21 13:01:05 2025 GMT Subject: CN=ba5459304decb48831cc26d4f34dfb29eb0d9430 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:39:bf:22:c0:01:21:aa:6c:c5:94:37:4b:7a: 7f:c4:ae:d1:0e:2a:18:21:47:49:d2:c4:ba:d2:df: d4:48:6f:e1:ed:db:ec:e6:0d:19:3c:61:74:3b:6f: 1e:40:ae:40:34:fb:32:f6:f5:88:c5:3a:bc:26:a8: 5d:1a:62:35:79:06:44:5c:9f:e5:21:bc:9a:c4:b4: f4:c3:70:f5:a9:9d:5c:14:98:1b:02:87:81:5d:ed: 49:1f:f6:b1:ee:eb:cf:cb:4c:74:ad:29:fc:14:ad: 3d:e9:02:44:cb:a4:09:c9:0e:5f:b9:c5:dc:e0:36: eb:dd:1b:84:40:62:8f:ff:74:80:2b:09:41:a1:35: 4f:cb:58:f2:cb:df:66:39:11:57:df:ba:08:cc:f5: cb:63:9e:cd:73:8c:18:2d:69:3c:ed:f6:0a:81:4d: 7a:c0:b9:dc:f5:31:8b:15:92:40:62:fd:67:9c:7a: 2b:06:5f:4e:e0:1a:1e:43:97:23:67:3d:f8:1b:95: ec:00:97:3f:9d:47:83:66:7d:64:e4:c1:de:23:a7: bb:b4:19:50:5c:27:24:8d:df:26:64:06:15:3e:b5: 41:35:47:4e:88:b7:59:e4:88:15:03:fe:a3:dd:9d: 5f:7c:3d:5a:86:25:27:ae:9d:f2:a1:72:57:5a:89: 98:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:54:59:30:4D:EC:B4:88:31:CC:26:D4:F3:4D:FB:29:EB:0D:94:30 X509v3 Authority Key Identifier: keyid:88:44:FC:4A:E1:06:49:9E:05:75:FF:3C:A1:55:6D:BC:0D:9B:46:51 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iET8SuEGSZ4Fdf88oVVtvA2bRlE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/dd42d9-ff88-4ca0-883c-317645cd7885/1/iET8SuEGSZ4Fdf88oVVtvA2bRlE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/32/dd42d9-ff88-4ca0-883c-317645cd7885/1/iET8SuEGSZ4Fdf88oVVtvA2bRlE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ae:c4:d6:23:21:72:52:a8:e4:4d:26:73:e9:ac:af:aa:d3:27: 03:62:c2:72:f8:1c:3b:bf:6a:45:65:8c:76:7e:98:da:50:76: 40:32:7f:05:50:3e:67:fe:dc:cc:23:c1:ec:71:9e:ce:fb:ca: cc:76:d0:c7:b9:05:bb:5b:1f:07:39:3b:4d:a7:04:58:23:b5: 7b:98:b7:22:1b:6c:9d:08:46:58:e6:5d:e8:dd:bb:90:2f:ce: 4c:9d:25:97:06:1d:36:a0:f5:c3:70:35:ff:00:8b:b5:d0:09: 76:8c:90:ec:59:74:de:2e:f6:5e:e8:28:d2:76:24:c5:ab:79: 83:e4:34:ea:7d:3a:14:fb:18:a7:59:06:ce:2f:05:12:2b:4c: c4:00:e2:62:4a:d5:67:28:62:6a:05:15:65:5e:b6:1a:69:3b: c7:a9:62:08:df:8f:ce:d5:33:e8:ec:b4:8c:5d:95:f5:cf:4d: 8b:d6:7b:44:1d:d8:22:e2:e0:d1:07:71:33:24:4a:ab:44:83: 15:b5:84:ef:9f:fd:bb:39:56:12:a7:4e:cc:dc:f1:0b:3d:11: 65:56:19:9d:70:11:90:d0:d3:81:fc:3e:66:be:dc:4d:b5:a6: 5a:4d:90:9a:7b:1e:31:d5:62:b6:a3:83:0b:86:24:5f:ea:49: b8:55:c7:ba -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs72XSvNm9noauxlrdWPF6tMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg4NDRmYzRhZTEwNjQ5OWUwNTc1ZmYzY2ExNTU2ZGJjMGQ5 YjQ2NTEwHhcNMjUxMjIwMTMwMTA1WhcNMjUxMjIxMTMwMTA1WjAzMTEwLwYDVQQD EyhiYTU0NTkzMDRkZWNiNDg4MzFjYzI2ZDRmMzRkZmIyOWViMGQ5NDMwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlDm/IsABIapsxZQ3S3p/xK7RDioY IUdJ0sS60t/USG/h7dvs5g0ZPGF0O28eQK5ANPsy9vWIxTq8JqhdGmI1eQZEXJ/l IbyaxLT0w3D1qZ1cFJgbAoeBXe1JH/ax7uvPy0x0rSn8FK096QJEy6QJyQ5fucXc 4Dbr3RuEQGKP/3SAKwlBoTVPy1jyy99mORFX37oIzPXLY57Nc4wYLWk87fYKgU16 wLnc9TGLFZJAYv1nnHorBl9O4BoeQ5cjZz34G5XsAJc/nUeDZn1k5MHeI6e7tBlQ XCckjd8mZAYVPrVBNUdOiLdZ5IgVA/6j3Z1ffD1ahiUnrp3yoXJXWomYFQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLpUWTBN7LSIMcwm1PNN+ynrDZQwMB8GA1UdIwQY MBaAFIhE/ErhBkmeBXX/PKFVbbwNm0ZRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaUVUOFN1RUdTWjRGZGY4OG9WVnR2QTJiUmxFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMi9kZDQyZDktZmY4OC00Y2EwLTg4M2Mt MzE3NjQ1Y2Q3ODg1LzEvaUVUOFN1RUdTWjRGZGY4OG9WVnR2QTJiUmxFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMi9kZDQyZDktZmY4OC00Y2EwLTg4M2MtMzE3NjQ1Y2Q3ODg1 LzEvaUVUOFN1RUdTWjRGZGY4OG9WVnR2QTJiUmxFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArsTWIyFy UqjkTSZz6ayvqtMnA2LCcvgcO79qRWWMdn6Y2lB2QDJ/BVA+Z/7czCPB7HGezvvK zHbQx7kFu1sfBzk7TacEWCO1e5i3IhtsnQhGWOZd6N27kC/OTJ0llwYdNqD1w3A1 /wCLtdAJdoyQ7Fl03i72Xugo0nYkxat5g+Q06n06FPsYp1kGzi8FEitMxADiYkrV ZyhiagUVZV62Gmk7x6liCN+PztUz6Oy0jF2V9c9Ni9Z7RB3YIuLg0QdxMyRKq0SD FbWE75/9uzlWEqdOzNzxCz0RZVYZnXARkNDTgfw+Zr7cTbWmWk2QmnseMdVitqOD C4YkX+pJuFXHug== -----END CERTIFICATE-----Generated at Sat Dec 20 14:11:17 2025 by rpki-client