This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/936cbb-bac4-4fde-8def-febc1ed3ceba/1/ie36QUlE0BCsae5b-yJ3OySyfvs.mft File: ie36QUlE0BCsae5b-yJ3OySyfvs.mft (raw, json) Hash identifier: 6lNTYctGiCPBR0J3ECXehZgjDv8UdD9BMD8re6k7jOI= Subject key identifier: 33:07:2A:41:85:69:65:2A:0A:52:1A:05:15:14:C5:01:D8:80:46:09 Authority key identifier: 89:ED:FA:41:49:44:D0:10:AC:69:EE:5B:FB:22:77:3B:24:B2:7E:FB Certificate issuer: /CN=89edfa414944d010ac69ee5bfb22773b24b27efb Certificate serial: 019B3B34703EF2D1E42866F45A65CAFCE022 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ie36QUlE0BCsae5b-yJ3OySyfvs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/936cbb-bac4-4fde-8def-febc1ed3ceba/1/ie36QUlE0BCsae5b-yJ3OySyfvs.mft Manifest number: 0BFB Signing time: Sat 20 Dec 2025 10:00:50 +0000 Manifest this update: Sat 20 Dec 2025 10:00:50 +0000 Manifest next update: Sun 21 Dec 2025 10:00:50 +0000 Files and hashes: 1: 2j_QBpsrLBBxs622BISyOZtEgFA.roa (hash: 32mbR7LJ1AvTIHIxhitKhF6+X6cgHFfdsLG9qjMakhU=) 2: ie36QUlE0BCsae5b-yJ3OySyfvs.crl (hash: DzGK3+cpbopCyVR2IfgUX3hXufOpMfTzkpWgtg5IuPU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/936cbb-bac4-4fde-8def-febc1ed3ceba/1/ie36QUlE0BCsae5b-yJ3OySyfvs.crl rsync://rpki.ripe.net/repository/DEFAULT/50/936cbb-bac4-4fde-8def-febc1ed3ceba/1/ie36QUlE0BCsae5b-yJ3OySyfvs.mft rsync://rpki.ripe.net/repository/DEFAULT/ie36QUlE0BCsae5b-yJ3OySyfvs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 09:56:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3b:34:70:3e:f2:d1:e4:28:66:f4:5a:65:ca:fc:e0:22 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89edfa414944d010ac69ee5bfb22773b24b27efb Validity Not Before: Dec 20 10:00:50 2025 GMT Not After : Dec 21 10:00:50 2025 GMT Subject: CN=33072a418569652a0a521a051514c501d8804609 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:79:fd:c6:2c:97:5d:c6:82:af:cd:e5:27:93: 36:ea:48:82:63:00:78:af:b6:2e:13:70:16:48:44: 3f:8a:7f:c8:16:75:02:31:10:43:33:08:97:36:f9: 1c:f1:bf:e6:1b:a4:fa:b5:1f:19:4d:1d:e5:e6:7e: 25:e4:6f:a9:b7:b7:c5:97:aa:71:14:a2:f8:23:db: d5:a1:75:18:bf:bf:bc:b2:ad:01:d2:6f:7c:3c:fa: 47:8d:bc:3f:4d:ce:ea:0b:e5:07:3e:9f:1c:b1:e8: ae:9c:db:76:3b:22:eb:aa:3f:34:cc:da:1b:35:5e: c9:eb:70:7a:44:f8:63:40:f6:c7:42:03:de:37:f1: dd:47:ac:f6:8e:ee:dc:98:e1:cf:f9:9d:a4:58:e5: c5:42:d8:e9:f0:fd:02:39:27:9d:76:e7:8d:93:b8: a0:75:3a:b8:83:0b:ea:0f:f1:75:c1:87:62:ec:59: a2:85:a3:ba:1f:d7:67:d8:bf:e8:06:f6:14:6d:7f: 57:db:cb:2a:c4:c5:75:6f:72:de:c4:16:f7:a2:12: 1d:11:b6:51:c6:72:2f:06:d0:cd:61:95:df:67:77: 2d:58:a5:61:58:12:c6:e6:bd:3b:42:e6:43:43:8f: 20:75:6f:9c:3f:f8:00:a6:96:00:c6:85:9e:6e:ef: 45:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:07:2A:41:85:69:65:2A:0A:52:1A:05:15:14:C5:01:D8:80:46:09 X509v3 Authority Key Identifier: keyid:89:ED:FA:41:49:44:D0:10:AC:69:EE:5B:FB:22:77:3B:24:B2:7E:FB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ie36QUlE0BCsae5b-yJ3OySyfvs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/936cbb-bac4-4fde-8def-febc1ed3ceba/1/ie36QUlE0BCsae5b-yJ3OySyfvs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/50/936cbb-bac4-4fde-8def-febc1ed3ceba/1/ie36QUlE0BCsae5b-yJ3OySyfvs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 21:47:0d:51:55:bc:fc:ab:3f:fc:ec:5f:7f:f2:74:90:cb:3a: 58:09:f2:19:76:81:45:99:d0:b7:4c:8b:9a:1c:d0:9a:f7:a0: 3d:f7:64:19:f1:9a:1b:d2:40:17:33:c6:4c:de:36:4d:cd:8d: e2:26:34:03:18:2a:f3:1b:08:35:37:5d:ec:91:06:0f:de:99: 7b:29:1f:69:2f:0d:0c:fd:16:81:81:32:87:aa:75:80:70:e7: 38:94:f2:9d:cc:3a:06:48:49:f9:83:25:80:7a:52:1a:03:d7: 2e:7b:57:bd:42:42:11:89:52:97:2d:99:83:fa:38:7d:03:0e: 51:87:06:71:8c:88:f2:b9:18:ed:da:59:ba:32:3c:1c:e1:35: ae:6d:94:95:ce:e5:f1:69:67:38:80:85:80:b3:86:37:92:a3: ac:cc:a2:04:06:d6:e1:96:fd:a9:46:e0:43:48:06:3b:2f:b8: d5:9c:95:51:26:07:75:ea:3d:f7:86:3f:b8:15:e0:cc:9b:b3: c1:0b:f3:bd:3b:a4:e7:da:4f:72:84:05:90:06:65:3c:02:82: c7:31:0e:13:01:7f:9b:fb:7f:82:37:4b:25:90:38:5c:1a:5e: d1:f9:a6:5b:eb:08:12:32:c6:7e:2e:6d:b2:ca:a0:0e:7f:79: ee:ff:31:90 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs7NHA+8tHkKGb0WmXK/OAiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg5ZWRmYTQxNDk0NGQwMTBhYzY5ZWU1YmZiMjI3NzNiMjRi MjdlZmIwHhcNMjUxMjIwMTAwMDUwWhcNMjUxMjIxMTAwMDUwWjAzMTEwLwYDVQQD EygzMzA3MmE0MTg1Njk2NTJhMGE1MjFhMDUxNTE0YzUwMWQ4ODA0NjA5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3nn9xiyXXcaCr83lJ5M26kiCYwB4 r7YuE3AWSEQ/in/IFnUCMRBDMwiXNvkc8b/mG6T6tR8ZTR3l5n4l5G+pt7fFl6px FKL4I9vVoXUYv7+8sq0B0m98PPpHjbw/Tc7qC+UHPp8cseiunNt2OyLrqj80zNob NV7J63B6RPhjQPbHQgPeN/HdR6z2ju7cmOHP+Z2kWOXFQtjp8P0COSeddueNk7ig dTq4gwvqD/F1wYdi7FmihaO6H9dn2L/oBvYUbX9X28sqxMV1b3LexBb3ohIdEbZR xnIvBtDNYZXfZ3ctWKVhWBLG5r07QuZDQ48gdW+cP/gAppYAxoWebu9FTwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDMHKkGFaWUqClIaBRUUxQHYgEYJMB8GA1UdIwQY MBaAFInt+kFJRNAQrGnuW/sidzsksn77MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaWUzNlFVbEUwQkNzYWU1Yi15SjNPeVN5ZnZzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MC85MzZjYmItYmFjNC00ZmRlLThkZWYt ZmViYzFlZDNjZWJhLzEvaWUzNlFVbEUwQkNzYWU1Yi15SjNPeVN5ZnZzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MC85MzZjYmItYmFjNC00ZmRlLThkZWYtZmViYzFlZDNjZWJh LzEvaWUzNlFVbEUwQkNzYWU1Yi15SjNPeVN5ZnZzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIUcNUVW8 /Ks//Oxff/J0kMs6WAnyGXaBRZnQt0yLmhzQmvegPfdkGfGaG9JAFzPGTN42Tc2N 4iY0Axgq8xsINTdd7JEGD96ZeykfaS8NDP0WgYEyh6p1gHDnOJTyncw6BkhJ+YMl gHpSGgPXLntXvUJCEYlSly2Zg/o4fQMOUYcGcYyI8rkY7dpZujI8HOE1rm2Ulc7l 8WlnOICFgLOGN5KjrMyiBAbW4Zb9qUbgQ0gGOy+41ZyVUSYHdeo994Y/uBXgzJuz wQvzvTuk59pPcoQFkAZlPAKCxzEOEwF/m/t/gjdLJZA4XBpe0fmmW+sIEjLGfi5t ssqgDn957v8xkA== -----END CERTIFICATE-----Generated at Sat Dec 20 11:43:45 2025 by rpki-client