This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/68cd10-e5cc-4f47-84a9-15a0207d4609/1/iKWrZp-r5y3sLoN4R2p-kVwk7c8.mft File: iKWrZp-r5y3sLoN4R2p-kVwk7c8.mft (raw, json) Hash identifier: OScx2CVec0fvEQMOdYu2263XbGAfxsxuZ2Hs7yPhirQ= Subject key identifier: 67:50:4B:87:31:6B:BF:10:EF:A7:2D:1B:2E:29:7C:32:A4:1E:28:57 Authority key identifier: 88:A5:AB:66:9F:AB:E7:2D:EC:2E:83:78:47:6A:7E:91:5C:24:ED:CF Certificate issuer: /CN=88a5ab669fabe72dec2e8378476a7e915c24edcf Certificate serial: 019B3C7E59CB478E0614565A38CAEAB5F903 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iKWrZp-r5y3sLoN4R2p-kVwk7c8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/68cd10-e5cc-4f47-84a9-15a0207d4609/1/iKWrZp-r5y3sLoN4R2p-kVwk7c8.mft Manifest number: 0DF5 Signing time: Sat 20 Dec 2025 16:01:12 +0000 Manifest this update: Sat 20 Dec 2025 16:01:12 +0000 Manifest next update: Sun 21 Dec 2025 16:01:12 +0000 Files and hashes: 1: 8l1JGPKaxK0LdzidLYE5O7KO7uc.roa (hash: iLVJNEHjRSQZgufW9Xco39laNybFCSoPb4TytjD2nas=) 2: ZaUvqR58Anq8vLQipN0wr5eky28.roa (hash: SPNO6fIwJVYF/onFgsSackS0wfwUe38bLzIxAklnkrs=) 3: dXGr5BqS128mRLd0J3At49a2qzg.roa (hash: wuoQDj1SJzE/S7y91rkdzuUmyIzNX+hGJtJoYwKPBvU=) 4: iKWrZp-r5y3sLoN4R2p-kVwk7c8.crl (hash: Ws7VV+XmFukDfqilKIZlKW6jKdzy829vRU5grg4YLeU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/68cd10-e5cc-4f47-84a9-15a0207d4609/1/iKWrZp-r5y3sLoN4R2p-kVwk7c8.crl rsync://rpki.ripe.net/repository/DEFAULT/3c/68cd10-e5cc-4f47-84a9-15a0207d4609/1/iKWrZp-r5y3sLoN4R2p-kVwk7c8.mft rsync://rpki.ripe.net/repository/DEFAULT/iKWrZp-r5y3sLoN4R2p-kVwk7c8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:7e:59:cb:47:8e:06:14:56:5a:38:ca:ea:b5:f9:03 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=88a5ab669fabe72dec2e8378476a7e915c24edcf Validity Not Before: Dec 20 16:01:12 2025 GMT Not After : Dec 21 16:01:12 2025 GMT Subject: CN=67504b87316bbf10efa72d1b2e297c32a41e2857 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:03:52:ec:b7:90:42:f5:81:1a:4d:98:d1:e8: a8:2a:e1:3a:33:82:b0:b3:33:93:35:30:22:18:33: 67:49:e8:c0:ff:03:84:1b:64:9f:5f:9b:55:b4:9a: c8:95:96:2e:9b:d7:24:61:c1:c8:b0:a5:33:39:0e: a6:8d:55:a4:6a:eb:56:c5:7d:da:b6:fa:f5:40:7b: 82:f9:85:31:ea:2a:85:7c:6c:49:e4:25:fa:02:d2: 2a:cf:08:98:e8:6e:6e:0a:02:6c:01:01:d0:2e:f5: 99:fe:14:93:4b:56:97:02:9f:ba:d6:7e:31:5c:83: 44:de:f0:6d:0d:2a:42:a5:cb:6d:da:ea:d4:88:4d: 94:39:40:06:15:21:c4:f3:21:53:21:c4:b3:05:f4: e6:9a:d9:26:7c:8c:bb:c7:6b:82:bb:d5:4d:c6:23: 49:bc:36:13:6e:04:03:c4:be:69:46:68:6b:66:e8: 0c:fb:a9:c8:0a:53:1b:f6:98:98:4b:2a:76:bc:47: 41:23:6e:e3:62:b5:2f:f3:e8:73:98:88:d5:2c:a4: 35:94:89:8e:ba:82:af:92:fb:2d:f3:10:ca:c3:fa: 11:09:39:50:d3:a1:88:4a:a1:70:20:f5:73:1a:f9: 65:3c:6e:80:fe:70:9f:af:17:2e:57:1b:e3:f3:8e: ba:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:50:4B:87:31:6B:BF:10:EF:A7:2D:1B:2E:29:7C:32:A4:1E:28:57 X509v3 Authority Key Identifier: keyid:88:A5:AB:66:9F:AB:E7:2D:EC:2E:83:78:47:6A:7E:91:5C:24:ED:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iKWrZp-r5y3sLoN4R2p-kVwk7c8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/68cd10-e5cc-4f47-84a9-15a0207d4609/1/iKWrZp-r5y3sLoN4R2p-kVwk7c8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/68cd10-e5cc-4f47-84a9-15a0207d4609/1/iKWrZp-r5y3sLoN4R2p-kVwk7c8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2a:7f:27:a7:36:2f:80:6a:c9:f3:0a:02:a8:2e:4e:47:fd:27: 05:d9:45:9b:16:3f:34:5d:12:f2:c4:ae:de:c5:cf:67:a4:bb: af:1e:7c:81:eb:95:28:d8:33:2e:d9:65:93:78:58:55:db:b8: d8:85:be:f8:0b:61:a7:ee:f8:ff:99:f8:49:65:7c:48:da:e0: 20:38:ee:be:ae:81:57:a5:49:04:d2:39:31:bc:33:31:c0:17: 93:14:5e:3e:14:a6:ae:c0:a4:35:fc:38:fb:10:20:7c:86:58: b2:36:d8:c2:92:0d:75:e3:d3:d5:91:56:13:cd:3d:09:18:1e: a0:35:1d:c6:6f:9b:2a:f6:85:85:96:63:2d:85:a4:38:99:28: 7e:3d:a4:a3:72:22:7e:ba:74:b4:36:c6:47:81:bb:f4:07:3f: 1c:15:0d:54:d9:cb:84:d9:bf:b4:e1:8f:37:2d:e1:39:e9:24: c8:6e:5b:5a:6f:26:9c:06:38:82:2d:07:1d:f7:8d:ad:10:0b: 6d:b8:fd:3c:64:e6:fe:ba:e4:0d:c2:b0:c5:32:dd:64:f5:f4: 68:2b:b6:60:33:21:60:5d:d4:4f:20:c9:50:d2:21:74:e8:85: 5c:c2:e8:ad:31:b6:da:ec:d8:cb:a8:5e:f1:d5:07:71:68:e2: 8e:a8:a7:dc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs8flnLR44GFFZaOMrqtfkDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg4YTVhYjY2OWZhYmU3MmRlYzJlODM3ODQ3NmE3ZTkxNWMy NGVkY2YwHhcNMjUxMjIwMTYwMTEyWhcNMjUxMjIxMTYwMTEyWjAzMTEwLwYDVQQD Eyg2NzUwNGI4NzMxNmJiZjEwZWZhNzJkMWIyZTI5N2MzMmE0MWUyODU3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAygNS7LeQQvWBGk2Y0eioKuE6M4Kw szOTNTAiGDNnSejA/wOEG2SfX5tVtJrIlZYum9ckYcHIsKUzOQ6mjVWkautWxX3a tvr1QHuC+YUx6iqFfGxJ5CX6AtIqzwiY6G5uCgJsAQHQLvWZ/hSTS1aXAp+61n4x XINE3vBtDSpCpctt2urUiE2UOUAGFSHE8yFTIcSzBfTmmtkmfIy7x2uCu9VNxiNJ vDYTbgQDxL5pRmhrZugM+6nIClMb9piYSyp2vEdBI27jYrUv8+hzmIjVLKQ1lImO uoKvkvst8xDKw/oRCTlQ06GISqFwIPVzGvllPG6A/nCfrxcuVxvj8466QQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGdQS4cxa78Q76ctGy4pfDKkHihXMB8GA1UdIwQY MBaAFIilq2afq+ct7C6DeEdqfpFcJO3PMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaUtXclpwLXI1eTNzTG9ONFIycC1rVndrN2M4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYy82OGNkMTAtZTVjYy00ZjQ3LTg0YTkt MTVhMDIwN2Q0NjA5LzEvaUtXclpwLXI1eTNzTG9ONFIycC1rVndrN2M4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYy82OGNkMTAtZTVjYy00ZjQ3LTg0YTktMTVhMDIwN2Q0NjA5 LzEvaUtXclpwLXI1eTNzTG9ONFIycC1rVndrN2M4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKn8npzYv gGrJ8woCqC5OR/0nBdlFmxY/NF0S8sSu3sXPZ6S7rx58geuVKNgzLtllk3hYVdu4 2IW++Athp+74/5n4SWV8SNrgIDjuvq6BV6VJBNI5MbwzMcAXkxRePhSmrsCkNfw4 +xAgfIZYsjbYwpINdePT1ZFWE809CRgeoDUdxm+bKvaFhZZjLYWkOJkofj2ko3Ii frp0tDbGR4G79Ac/HBUNVNnLhNm/tOGPNy3hOekkyG5bWm8mnAY4gi0HHfeNrRAL bbj9PGTm/rrkDcKwxTLdZPX0aCu2YDMhYF3UTyDJUNIhdOiFXMLorTG22uzYy6he 8dUHcWjijqin3A== -----END CERTIFICATE-----Generated at Sat Dec 20 22:31:33 2025 by rpki-client