This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/dd42d9-ff88-4ca0-883c-317645cd7885/1/iET8SuEGSZ4Fdf88oVVtvA2bRlE.mft File: iET8SuEGSZ4Fdf88oVVtvA2bRlE.mft (raw, json) Hash identifier: tAzEeXphNmmgSIM0sUR8npTzI3RmTdRJJn2dbAJn5Uk= Subject key identifier: C3:4C:06:C7:AA:50:A9:D1:20:6B:D2:D6:EF:E2:73:C8:BA:20:2C:11 Authority key identifier: 88:44:FC:4A:E1:06:49:9E:05:75:FF:3C:A1:55:6D:BC:0D:9B:46:51 Certificate issuer: /CN=8844fc4ae106499e0575ff3ca1556dbc0d9b4651 Certificate serial: 019B6655815F490FAEDD6288ADC16919027D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iET8SuEGSZ4Fdf88oVVtvA2bRlE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/dd42d9-ff88-4ca0-883c-317645cd7885/1/iET8SuEGSZ4Fdf88oVVtvA2bRlE.mft Manifest number: 16F1 Signing time: Sun 28 Dec 2025 19:00:38 +0000 Manifest this update: Sun 28 Dec 2025 19:00:38 +0000 Manifest next update: Mon 29 Dec 2025 19:00:38 +0000 Files and hashes: 1: Qv6t4wP7j-uLsxcfTWHv2ZFQWD8.roa (hash: eR47NrGWjMdNEp9FBa07vBAWwdqKIDeSc8imYvJOwfI=) 2: iET8SuEGSZ4Fdf88oVVtvA2bRlE.crl (hash: V1ZS6VYgxPL13HJcb8qmd0Wnh76CgyUHhnc3YWEZmNk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/dd42d9-ff88-4ca0-883c-317645cd7885/1/iET8SuEGSZ4Fdf88oVVtvA2bRlE.crl rsync://rpki.ripe.net/repository/DEFAULT/32/dd42d9-ff88-4ca0-883c-317645cd7885/1/iET8SuEGSZ4Fdf88oVVtvA2bRlE.mft rsync://rpki.ripe.net/repository/DEFAULT/iET8SuEGSZ4Fdf88oVVtvA2bRlE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 29 Dec 2025 19:00:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:66:55:81:5f:49:0f:ae:dd:62:88:ad:c1:69:19:02:7d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8844fc4ae106499e0575ff3ca1556dbc0d9b4651 Validity Not Before: Dec 28 19:00:38 2025 GMT Not After : Dec 29 19:00:38 2025 GMT Subject: CN=c34c06c7aa50a9d1206bd2d6efe273c8ba202c11 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:52:7d:45:3b:14:f1:09:0a:9f:31:d0:62:3c: 22:c3:9c:f9:b8:6a:2d:40:1d:a9:f2:b5:7f:21:18: 53:aa:35:31:6d:10:dd:b5:4d:b6:e1:1a:c6:e9:c8: 67:a5:ff:96:fe:32:41:89:a4:7a:02:30:73:ff:d0: 1f:f7:de:3f:d2:34:85:7a:76:a3:2d:fb:e9:f6:0d: 0b:97:43:c9:d5:ea:9d:7c:4c:b6:b6:d4:53:ae:97: 80:1c:cf:99:d2:b8:b0:15:91:cc:f2:25:b7:e3:e6: 5b:3f:99:6a:5b:b0:d8:bf:19:fd:08:9e:02:19:87: f3:5d:73:ef:f8:92:c2:7b:1c:a4:6e:5a:05:e1:c7: 9b:3d:57:95:4b:7b:af:f5:7a:bf:06:0c:4e:ff:ee: 10:62:d3:ff:34:61:af:dd:35:ec:28:7e:22:49:93: 19:3d:05:45:51:8d:17:1e:4e:f1:e8:42:6f:33:32: 3b:8c:66:6b:b9:c9:03:04:5a:10:8f:df:e7:2e:61: bb:e0:25:db:1e:76:94:6c:62:e2:f7:cd:ce:46:6b: 9d:00:a1:48:38:c9:3e:81:87:fa:87:8f:18:2c:73: ce:22:2f:b8:5d:bb:ce:ce:86:f1:a6:c3:06:28:71: 9e:98:e8:32:a1:d0:8a:3f:ac:d1:d3:5e:16:5a:92: 42:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:4C:06:C7:AA:50:A9:D1:20:6B:D2:D6:EF:E2:73:C8:BA:20:2C:11 X509v3 Authority Key Identifier: keyid:88:44:FC:4A:E1:06:49:9E:05:75:FF:3C:A1:55:6D:BC:0D:9B:46:51 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iET8SuEGSZ4Fdf88oVVtvA2bRlE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/dd42d9-ff88-4ca0-883c-317645cd7885/1/iET8SuEGSZ4Fdf88oVVtvA2bRlE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/32/dd42d9-ff88-4ca0-883c-317645cd7885/1/iET8SuEGSZ4Fdf88oVVtvA2bRlE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 55:9a:6a:da:44:a4:70:dd:4b:8b:45:04:be:5b:88:f6:a2:e8: b6:09:03:41:ac:90:9e:c5:ae:c3:72:80:74:c1:b9:2f:20:4b: 14:e2:43:74:2e:fa:e6:97:12:4e:42:b3:ae:c5:e9:57:11:72: b8:b4:be:51:aa:c5:31:8e:48:cc:9a:84:89:51:af:9b:c1:85: 86:5e:e8:72:dd:d5:ec:f0:10:57:1d:0e:52:a3:f0:83:ae:6b: 87:45:89:c5:9a:cf:4a:d9:8d:b9:84:6c:82:ed:91:d3:e2:fb: 01:cc:42:a7:95:6a:1f:45:ad:48:19:13:dc:af:38:c5:20:2e: 8f:09:75:29:50:45:bd:be:a0:e3:d1:c4:92:dd:43:00:f9:77: d6:29:91:d7:43:4f:37:74:a9:8f:bf:4e:77:89:ca:04:bd:1a: 88:95:c5:8d:65:f1:4e:a1:c1:ec:17:ed:50:a7:8b:0f:b8:5c: e3:07:72:ff:9a:95:ac:0b:d9:20:5d:bf:5a:56:e1:b9:57:10: 3f:a4:dd:08:cc:8e:ba:38:8f:94:a3:4a:1f:c4:c7:50:f0:f2: 63:25:25:c8:00:d9:a1:fb:5a:17:36:cd:ee:01:0e:f4:af:cf: 6a:e7:e2:dd:30:f2:41:63:55:97:ea:13:81:cf:79:ec:9a:de: e4:57:13:76 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtmVYFfSQ+u3WKIrcFpGQJ9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg4NDRmYzRhZTEwNjQ5OWUwNTc1ZmYzY2ExNTU2ZGJjMGQ5 YjQ2NTEwHhcNMjUxMjI4MTkwMDM4WhcNMjUxMjI5MTkwMDM4WjAzMTEwLwYDVQQD EyhjMzRjMDZjN2FhNTBhOWQxMjA2YmQyZDZlZmUyNzNjOGJhMjAyYzExMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzVJ9RTsU8QkKnzHQYjwiw5z5uGot QB2p8rV/IRhTqjUxbRDdtU224RrG6chnpf+W/jJBiaR6AjBz/9Af994/0jSFenaj Lfvp9g0Ll0PJ1eqdfEy2ttRTrpeAHM+Z0riwFZHM8iW34+ZbP5lqW7DYvxn9CJ4C GYfzXXPv+JLCexykbloF4cebPVeVS3uv9Xq/BgxO/+4QYtP/NGGv3TXsKH4iSZMZ PQVFUY0XHk7x6EJvMzI7jGZruckDBFoQj9/nLmG74CXbHnaUbGLi983ORmudAKFI OMk+gYf6h48YLHPOIi+4XbvOzobxpsMGKHGemOgyodCKP6zR014WWpJCGwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMNMBseqUKnRIGvS1u/ic8i6ICwRMB8GA1UdIwQY MBaAFIhE/ErhBkmeBXX/PKFVbbwNm0ZRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaUVUOFN1RUdTWjRGZGY4OG9WVnR2QTJiUmxFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMi9kZDQyZDktZmY4OC00Y2EwLTg4M2Mt MzE3NjQ1Y2Q3ODg1LzEvaUVUOFN1RUdTWjRGZGY4OG9WVnR2QTJiUmxFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMi9kZDQyZDktZmY4OC00Y2EwLTg4M2MtMzE3NjQ1Y2Q3ODg1 LzEvaUVUOFN1RUdTWjRGZGY4OG9WVnR2QTJiUmxFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVZpq2kSk cN1Li0UEvluI9qLotgkDQayQnsWuw3KAdMG5LyBLFOJDdC765pcSTkKzrsXpVxFy uLS+UarFMY5IzJqEiVGvm8GFhl7oct3V7PAQVx0OUqPwg65rh0WJxZrPStmNuYRs gu2R0+L7AcxCp5VqH0WtSBkT3K84xSAujwl1KVBFvb6g49HEkt1DAPl31imR10NP N3Spj79Od4nKBL0aiJXFjWXxTqHB7BftUKeLD7hc4wdy/5qVrAvZIF2/WlbhuVcQ P6TdCMyOujiPlKNKH8THUPDyYyUlyADZoftaFzbN7gEO9K/Paufi3TDyQWNVl+oT gc957Jre5FcTdg== -----END CERTIFICATE-----Generated at Mon Dec 29 00:47:33 2025 by rpki-client