This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/922bcd-f1ad-4d63-8243-294b1aa14866/1/iVNk3Y_3MKkIsJtfmRPBU_wWqjw.mft File: iVNk3Y_3MKkIsJtfmRPBU_wWqjw.mft (raw, json) Hash identifier: aimbHCL7pNPSUBtqLdmO8Rwls4JWeHnn4xlWLvW7TVc= Subject key identifier: 07:2D:C7:0E:1F:E3:AA:7F:B3:55:A8:05:A2:A7:C8:19:13:52:14:05 Authority key identifier: 89:53:64:DD:8F:F7:30:A9:08:B0:9B:5F:99:13:C1:53:FC:16:AA:3C Certificate issuer: /CN=895364dd8ff730a908b09b5f9913c153fc16aa3c Certificate serial: 019B729124D1E9F1E6581CF799CDE11C278D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iVNk3Y_3MKkIsJtfmRPBU_wWqjw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/922bcd-f1ad-4d63-8243-294b1aa14866/1/iVNk3Y_3MKkIsJtfmRPBU_wWqjw.mft Manifest number: 17A7 Signing time: Wed 31 Dec 2025 04:01:13 +0000 Manifest this update: Wed 31 Dec 2025 04:01:13 +0000 Manifest next update: Thu 01 Jan 2026 04:01:13 +0000 Files and hashes: 1: iVNk3Y_3MKkIsJtfmRPBU_wWqjw.crl (hash: SXuWk1oN+Y+PMbjgIZyUov8+GBQgL0FCVJCtd7EM6Qk=) 2: vZncObou1n1Gou3XB_i7Ru4V5WA.roa (hash: iik1zhTFoCIgqbBLWbxX8UR2ffHIMvhG03bvL/Xp/YU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/922bcd-f1ad-4d63-8243-294b1aa14866/1/iVNk3Y_3MKkIsJtfmRPBU_wWqjw.crl rsync://rpki.ripe.net/repository/DEFAULT/b7/922bcd-f1ad-4d63-8243-294b1aa14866/1/iVNk3Y_3MKkIsJtfmRPBU_wWqjw.mft rsync://rpki.ripe.net/repository/DEFAULT/iVNk3Y_3MKkIsJtfmRPBU_wWqjw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 01 Jan 2026 00:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:72:91:24:d1:e9:f1:e6:58:1c:f7:99:cd:e1:1c:27:8d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=895364dd8ff730a908b09b5f9913c153fc16aa3c Validity Not Before: Dec 31 04:01:13 2025 GMT Not After : Jan 1 04:01:13 2026 GMT Subject: CN=072dc70e1fe3aa7fb355a805a2a7c81913521405 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:f3:bc:01:a2:14:58:7c:1a:24:c6:47:20:a4: b5:cb:9e:13:77:10:00:46:f6:13:fb:27:2e:27:e0: 2b:69:17:15:0f:94:eb:c5:37:f8:2c:c7:33:bc:d9: 1e:bf:e8:4c:fa:f4:c8:3e:24:b1:1d:e9:33:2d:a6: ad:48:49:5e:f9:c4:d6:f8:bd:2e:3d:f2:c4:47:46: 74:ba:52:c6:38:00:eb:ae:27:07:0d:c5:d2:4c:be: 1d:6a:2b:59:5c:04:1a:62:28:7a:31:ac:b4:07:a6: 02:f1:b5:f8:03:b9:4c:4a:29:79:49:83:53:e3:ed: d4:1c:86:46:74:5d:91:72:47:e5:ce:58:41:4f:7d: 70:ff:f7:ed:b3:ba:59:b3:82:67:d7:4d:a1:72:5f: 79:bf:9c:26:37:f1:ea:92:6c:b3:cd:dc:27:91:0a: 8d:f2:06:21:73:74:62:aa:6e:32:4c:12:33:78:ac: c4:ab:bd:a0:53:3f:f9:bf:24:4d:1d:b4:4f:e7:a6: 9a:7d:e0:ab:10:38:e3:e0:70:de:8e:f0:4f:71:21: 65:d2:1c:fb:e4:31:f9:03:bb:03:3e:1f:48:78:ad: 10:c6:03:d6:51:89:5a:89:6d:79:41:f5:1b:9b:3c: a3:b5:c9:54:27:9c:d5:5b:f0:1e:f5:75:65:bd:19: c1:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:2D:C7:0E:1F:E3:AA:7F:B3:55:A8:05:A2:A7:C8:19:13:52:14:05 X509v3 Authority Key Identifier: keyid:89:53:64:DD:8F:F7:30:A9:08:B0:9B:5F:99:13:C1:53:FC:16:AA:3C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iVNk3Y_3MKkIsJtfmRPBU_wWqjw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/922bcd-f1ad-4d63-8243-294b1aa14866/1/iVNk3Y_3MKkIsJtfmRPBU_wWqjw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/922bcd-f1ad-4d63-8243-294b1aa14866/1/iVNk3Y_3MKkIsJtfmRPBU_wWqjw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 67:e2:90:24:a1:8e:66:57:7a:e2:21:fb:c1:53:b1:9f:2d:3b: 89:b6:9d:af:2e:38:d2:db:76:9f:dc:2c:ce:8d:81:e6:42:c1: 36:5d:9b:e2:9d:f7:8c:86:80:2c:38:31:2a:05:da:d7:82:c9: 4e:41:6e:dc:47:9a:48:64:e9:91:0e:7f:3a:14:24:ee:d1:67: 37:80:c2:8e:c6:6d:da:49:e1:6d:95:e7:e5:88:75:a4:13:1d: 73:f2:d0:32:af:7e:74:d1:b8:cd:ea:35:8f:15:52:49:2f:62: 6a:68:3c:fa:7c:76:8f:11:bd:34:0b:a8:54:e7:6f:3c:5a:e7: 69:44:25:e7:4e:6b:1f:65:fb:93:bf:19:1d:7f:e3:81:e4:fc: 04:47:93:1a:49:ff:3b:6b:ae:d0:95:07:e8:ea:f5:37:a1:a4: ee:40:79:ae:02:8d:5c:75:2a:df:81:11:ac:52:32:c8:32:74: 52:9d:5b:73:6b:c8:1f:97:e2:48:17:38:68:5c:8b:57:1e:2b: fe:8e:b2:e4:58:8a:e1:74:87:7a:60:f5:44:a8:33:fe:7f:d6: 4a:fd:c2:ff:b8:ba:78:d3:5c:66:60:cd:74:77:27:06:9b:67: c1:94:db:00:66:97:7e:d5:1b:68:6f:00:b2:4b:c6:13:47:ac: a4:64:20:4a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtykSTR6fHmWBz3mc3hHCeNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg5NTM2NGRkOGZmNzMwYTkwOGIwOWI1Zjk5MTNjMTUzZmMx NmFhM2MwHhcNMjUxMjMxMDQwMTEzWhcNMjYwMTAxMDQwMTEzWjAzMTEwLwYDVQQD EygwNzJkYzcwZTFmZTNhYTdmYjM1NWE4MDVhMmE3YzgxOTEzNTIxNDA1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr/O8AaIUWHwaJMZHIKS1y54TdxAA RvYT+ycuJ+AraRcVD5TrxTf4LMczvNkev+hM+vTIPiSxHekzLaatSEle+cTW+L0u PfLER0Z0ulLGOADrricHDcXSTL4daitZXAQaYih6May0B6YC8bX4A7lMSil5SYNT 4+3UHIZGdF2RckflzlhBT31w//fts7pZs4Jn102hcl95v5wmN/HqkmyzzdwnkQqN 8gYhc3Riqm4yTBIzeKzEq72gUz/5vyRNHbRP56aafeCrEDjj4HDejvBPcSFl0hz7 5DH5A7sDPh9IeK0QxgPWUYlaiW15QfUbmzyjtclUJ5zVW/Ae9XVlvRnBOwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFActxw4f46p/s1WoBaKnyBkTUhQFMB8GA1UdIwQY MBaAFIlTZN2P9zCpCLCbX5kTwVP8Fqo8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaVZOazNZXzNNS2tJc0p0Zm1SUEJVX3dXcWp3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNy85MjJiY2QtZjFhZC00ZDYzLTgyNDMt Mjk0YjFhYTE0ODY2LzEvaVZOazNZXzNNS2tJc0p0Zm1SUEJVX3dXcWp3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNy85MjJiY2QtZjFhZC00ZDYzLTgyNDMtMjk0YjFhYTE0ODY2 LzEvaVZOazNZXzNNS2tJc0p0Zm1SUEJVX3dXcWp3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZ+KQJKGO Zld64iH7wVOxny07ibadry440tt2n9wszo2B5kLBNl2b4p33jIaALDgxKgXa14LJ TkFu3EeaSGTpkQ5/OhQk7tFnN4DCjsZt2knhbZXn5Yh1pBMdc/LQMq9+dNG4zeo1 jxVSSS9iamg8+nx2jxG9NAuoVOdvPFrnaUQl505rH2X7k78ZHX/jgeT8BEeTGkn/ O2uu0JUH6Or1N6Gk7kB5rgKNXHUq34ERrFIyyDJ0Up1bc2vIH5fiSBc4aFyLVx4r /o6y5FiK4XSHemD1RKgz/n/WSv3C/7i6eNNcZmDNdHcnBptnwZTbAGaXftUbaG8A skvGE0espGQgSg== -----END CERTIFICATE-----Generated at Wed Dec 31 09:16:12 2025 by rpki-client