This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/fdf296-75e5-4635-9546-cea75d0cd671/1/iEeqkbBtjGuHKE8_RaIdwoH3ulU.mft File: iEeqkbBtjGuHKE8_RaIdwoH3ulU.mft (raw, json) Hash identifier: +DrIS9NNgBPuy/Z4T1Sg4AXgN8WVkdzyYje2n87V7n8= Subject key identifier: 14:FC:37:F2:D4:FC:CD:48:BC:D2:BD:B1:9F:E6:A3:AE:96:C0:5F:A2 Authority key identifier: 88:47:AA:91:B0:6D:8C:6B:87:28:4F:3F:45:A2:1D:C2:81:F7:BA:55 Certificate issuer: /CN=8847aa91b06d8c6b87284f3f45a21dc281f7ba55 Certificate serial: 019B3AC6602965646EAB76D279ADD35924FC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iEeqkbBtjGuHKE8_RaIdwoH3ulU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/fdf296-75e5-4635-9546-cea75d0cd671/1/iEeqkbBtjGuHKE8_RaIdwoH3ulU.mft Manifest number: 1835 Signing time: Sat 20 Dec 2025 08:00:37 +0000 Manifest this update: Sat 20 Dec 2025 08:00:37 +0000 Manifest next update: Sun 21 Dec 2025 08:00:37 +0000 Files and hashes: 1: 5jyvM7zUsDe1Lex0DtFpG8BBbZo.roa (hash: PCMtayIHrF6LrkVGhI1nprpYM2aF/ClvU/EhrY1JrmQ=) 2: Dv5aKJ2pDNq6PQejY9KYLcZgexI.roa (hash: LTTZywdBBEaru6D3i2kCVgDeRzQz8voiBDF73OfU/U0=) 3: WeiKZlrZMWBmHmFyIba_qVs-J6c.roa (hash: QeA2Crhl6GOiBpaxxnH+m2YNQAEe2rgEWLu15CjW2Bs=) 4: iEeqkbBtjGuHKE8_RaIdwoH3ulU.crl (hash: hX606Zyb8nWtHoFP4HDhgNS8iWZdfLH3d3/hYoYHgsY=) 5: pd06xiSADpx6OPCHaHoDbZicX-c.roa (hash: 7rPwvwkbz2GM/1gSKgNiQpZdIpeLCjqX9IgRZrEoaZ4=) 6: twVpvlgGcn2wMFxLET5jabKj7lE.roa (hash: 6O74RoMA1Bml+kLutB1Hui+CE3ATKHf//KCCsZVvIEI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/fdf296-75e5-4635-9546-cea75d0cd671/1/iEeqkbBtjGuHKE8_RaIdwoH3ulU.crl rsync://rpki.ripe.net/repository/DEFAULT/b8/fdf296-75e5-4635-9546-cea75d0cd671/1/iEeqkbBtjGuHKE8_RaIdwoH3ulU.mft rsync://rpki.ripe.net/repository/DEFAULT/iEeqkbBtjGuHKE8_RaIdwoH3ulU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 08:00:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3a:c6:60:29:65:64:6e:ab:76:d2:79:ad:d3:59:24:fc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8847aa91b06d8c6b87284f3f45a21dc281f7ba55 Validity Not Before: Dec 20 08:00:37 2025 GMT Not After : Dec 21 08:00:37 2025 GMT Subject: CN=14fc37f2d4fccd48bcd2bdb19fe6a3ae96c05fa2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:af:8a:1c:a4:a8:2a:ac:22:03:15:c6:e6:00: fc:d7:4e:a5:ee:06:39:57:97:62:89:a0:eb:61:24: bc:4a:68:73:fc:88:c1:0f:e4:c8:aa:2b:10:09:5b: de:3b:c7:30:81:3e:cc:20:13:8b:d8:84:f9:47:61: 86:bc:70:f8:36:6f:2e:d2:2b:52:b8:86:84:1f:37: 9b:b8:9c:1f:bc:8d:fd:8f:06:02:0a:d1:74:05:93: 0b:86:0d:e2:ba:34:67:7c:cf:1d:a3:b8:2e:84:c6: 87:97:9a:f0:20:50:26:95:77:7a:ac:9e:39:4b:e1: 60:4d:7a:50:dd:e4:6c:c2:5d:7c:a1:7f:ea:ad:a1: 27:83:8b:b2:75:a2:b3:4e:e2:37:d6:97:3c:a1:6c: 2f:6e:a5:26:17:88:2e:b2:82:5f:e9:25:4e:b6:19: 5d:91:12:a5:ac:f4:0e:9e:02:6b:b2:e4:55:2b:82: 1f:7c:e9:dc:b6:17:f9:6c:06:3a:1b:cd:b0:81:96: 61:6b:76:97:18:cf:63:c3:a0:62:c4:cc:e4:b4:8b: 41:46:b1:f3:32:ea:fc:6a:72:d0:19:a8:d1:cc:9c: 99:e3:28:cf:22:7c:6c:c8:d7:42:42:aa:f0:74:ea: 40:3f:93:a1:20:26:bb:bd:62:4e:02:bf:c4:b4:1d: e7:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:FC:37:F2:D4:FC:CD:48:BC:D2:BD:B1:9F:E6:A3:AE:96:C0:5F:A2 X509v3 Authority Key Identifier: keyid:88:47:AA:91:B0:6D:8C:6B:87:28:4F:3F:45:A2:1D:C2:81:F7:BA:55 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iEeqkbBtjGuHKE8_RaIdwoH3ulU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/fdf296-75e5-4635-9546-cea75d0cd671/1/iEeqkbBtjGuHKE8_RaIdwoH3ulU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/fdf296-75e5-4635-9546-cea75d0cd671/1/iEeqkbBtjGuHKE8_RaIdwoH3ulU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2c:96:54:ad:c1:01:08:d8:d6:44:fd:19:a9:cd:9c:d5:f3:5a: d6:d1:ea:66:61:09:ce:ed:4c:52:b7:83:45:f2:9b:75:e3:5d: 9b:37:8f:81:27:13:cd:fa:23:a7:03:e9:ac:fa:2c:ff:05:29: 97:36:4f:27:6a:69:7f:4c:41:d4:af:f9:be:13:f5:68:24:7d: cb:35:2b:92:13:2f:4f:4f:62:a1:34:57:34:2a:30:ae:5a:12: 67:22:fa:06:f5:ff:21:ea:ee:98:65:0a:e9:38:2b:75:ef:ee: 28:ed:d5:33:df:b9:c5:8b:b3:ff:27:ef:96:d4:4a:aa:8b:7f: d3:4a:a0:5e:8e:68:66:86:f0:89:85:10:b7:fc:7c:1c:8b:d2: b4:5d:09:1d:79:87:9f:db:3e:b6:ec:db:d3:bf:9e:b1:cd:59: ed:ce:72:0a:3f:26:58:0a:36:e4:62:cf:5a:e4:13:a1:96:59: 14:bb:9c:94:b3:53:f9:e9:05:79:1f:c8:89:57:01:24:c9:71: df:cb:14:ed:29:6b:1d:c8:ca:91:2c:9a:fe:70:4d:b4:80:c7: f1:49:65:d1:50:bc:e1:ad:cc:41:f0:1b:91:5f:94:4a:ed:6b: a6:d8:c9:b8:e5:96:53:2e:ef:a7:69:da:bc:4a:a1:96:13:77: 20:4f:f5:e4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs6xmApZWRuq3bSea3TWST8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg4NDdhYTkxYjA2ZDhjNmI4NzI4NGYzZjQ1YTIxZGMyODFm N2JhNTUwHhcNMjUxMjIwMDgwMDM3WhcNMjUxMjIxMDgwMDM3WjAzMTEwLwYDVQQD EygxNGZjMzdmMmQ0ZmNjZDQ4YmNkMmJkYjE5ZmU2YTNhZTk2YzA1ZmEyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqa+KHKSoKqwiAxXG5gD8106l7gY5 V5diiaDrYSS8Smhz/IjBD+TIqisQCVveO8cwgT7MIBOL2IT5R2GGvHD4Nm8u0itS uIaEHzebuJwfvI39jwYCCtF0BZMLhg3iujRnfM8do7guhMaHl5rwIFAmlXd6rJ45 S+FgTXpQ3eRswl18oX/qraEng4uydaKzTuI31pc8oWwvbqUmF4gusoJf6SVOthld kRKlrPQOngJrsuRVK4IffOncthf5bAY6G82wgZZha3aXGM9jw6BixMzktItBRrHz Mur8anLQGajRzJyZ4yjPInxsyNdCQqrwdOpAP5OhICa7vWJOAr/EtB3nhQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBT8N/LU/M1IvNK9sZ/mo66WwF+iMB8GA1UdIwQY MBaAFIhHqpGwbYxrhyhPP0WiHcKB97pVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaUVlcWtiQnRqR3VIS0U4X1JhSWR3b0gzdWxVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOC9mZGYyOTYtNzVlNS00NjM1LTk1NDYt Y2VhNzVkMGNkNjcxLzEvaUVlcWtiQnRqR3VIS0U4X1JhSWR3b0gzdWxVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iOC9mZGYyOTYtNzVlNS00NjM1LTk1NDYtY2VhNzVkMGNkNjcx LzEvaUVlcWtiQnRqR3VIS0U4X1JhSWR3b0gzdWxVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALJZUrcEB CNjWRP0Zqc2c1fNa1tHqZmEJzu1MUreDRfKbdeNdmzePgScTzfojpwPprPos/wUp lzZPJ2ppf0xB1K/5vhP1aCR9yzUrkhMvT09ioTRXNCowrloSZyL6BvX/IerumGUK 6Tgrde/uKO3VM9+5xYuz/yfvltRKqot/00qgXo5oZobwiYUQt/x8HIvStF0JHXmH n9s+tuzb07+esc1Z7c5yCj8mWAo25GLPWuQToZZZFLuclLNT+ekFeR/IiVcBJMlx 38sU7SlrHcjKkSya/nBNtIDH8Ull0VC84a3MQfAbkV+USu1rptjJuOWWUy7vp2na vEqhlhN3IE/15A== -----END CERTIFICATE-----Generated at Sat Dec 20 12:27:07 2025 by rpki-client