This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/e90f51-89aa-49eb-9ea6-fbe8bc5a29fa/1/ia7Sz_jOMbM0-DoLMF_u8B1x2nU.mft File: ia7Sz_jOMbM0-DoLMF_u8B1x2nU.mft (raw, json) Hash identifier: osT69EsiLQN5/ax2kR2mK2ADyPYQN0oQ3S+u3TCCvz0= Subject key identifier: A0:3C:7A:F1:42:20:D5:B1:18:B6:BF:BD:02:85:4E:2D:E9:48:56:22 Authority key identifier: 89:AE:D2:CF:F8:CE:31:B3:34:F8:3A:0B:30:5F:EE:F0:1D:71:DA:75 Certificate issuer: /CN=89aed2cff8ce31b334f83a0b305feef01d71da75 Certificate serial: 019B5D53AEF866A8EBD2B0821CF1AD326567 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ia7Sz_jOMbM0-DoLMF_u8B1x2nU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/e90f51-89aa-49eb-9ea6-fbe8bc5a29fa/1/ia7Sz_jOMbM0-DoLMF_u8B1x2nU.mft Manifest number: 1753 Signing time: Sat 27 Dec 2025 01:02:03 +0000 Manifest this update: Sat 27 Dec 2025 01:02:03 +0000 Manifest next update: Sun 28 Dec 2025 01:02:03 +0000 Files and hashes: 1: TuA6dq5RUfQK0g-nhGPwelxAp8s.roa (hash: A068hT4+Hwiukpw4NAI0ekcWki3f2qgAy0smH/qbl44=) 2: ia7Sz_jOMbM0-DoLMF_u8B1x2nU.crl (hash: IwoDMzbzOZN13RXTjaxifVLqq7Jlwobl13pwSzxxT88=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/e90f51-89aa-49eb-9ea6-fbe8bc5a29fa/1/ia7Sz_jOMbM0-DoLMF_u8B1x2nU.crl rsync://rpki.ripe.net/repository/DEFAULT/d2/e90f51-89aa-49eb-9ea6-fbe8bc5a29fa/1/ia7Sz_jOMbM0-DoLMF_u8B1x2nU.mft rsync://rpki.ripe.net/repository/DEFAULT/ia7Sz_jOMbM0-DoLMF_u8B1x2nU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 28 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5d:53:ae:f8:66:a8:eb:d2:b0:82:1c:f1:ad:32:65:67 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89aed2cff8ce31b334f83a0b305feef01d71da75 Validity Not Before: Dec 27 01:02:03 2025 GMT Not After : Dec 28 01:02:03 2025 GMT Subject: CN=a03c7af14220d5b118b6bfbd02854e2de9485622 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:ef:58:f0:29:13:4c:66:ba:51:06:16:ec:f9: 93:73:d2:f1:db:df:26:cf:c1:d7:41:e7:ca:e4:69: 67:a6:2c:a8:2c:69:cc:9b:e1:d2:36:52:1b:80:ab: 72:c8:f6:d3:37:39:a3:d5:6e:7d:53:5c:47:cf:b8: 6e:c2:59:f2:b9:44:b0:b9:3e:80:c5:d6:52:32:46: 8d:42:e6:b1:4a:84:04:38:87:37:c2:e8:cb:a0:6a: 7f:66:8c:a2:42:1e:61:b1:58:55:85:7e:73:75:28: 0d:a5:e4:9a:39:ed:1a:cf:72:ac:2b:3a:3d:66:53: 30:f2:31:c3:20:5e:3d:3c:33:76:06:31:de:df:6b: db:33:9d:8c:26:10:f2:7f:d8:49:a0:e1:ed:49:88: 11:9f:5c:8a:1e:44:49:bf:bf:22:18:a4:80:96:23: bc:e3:46:09:16:f1:11:11:b3:e7:a4:a8:59:76:ac: 6a:3a:81:c7:06:bf:20:3e:83:05:1c:c0:dc:42:9c: 00:06:bf:c6:0b:78:10:ea:f2:93:a3:66:e1:34:39: d3:7e:bc:36:ce:07:f3:17:28:9f:41:9d:07:d5:3c: b6:fe:23:3c:4f:96:83:67:8c:ce:b0:8a:fd:8b:c4: c7:f4:6e:b4:75:0d:4d:1f:c6:53:48:d8:5b:1d:8b: 43:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:3C:7A:F1:42:20:D5:B1:18:B6:BF:BD:02:85:4E:2D:E9:48:56:22 X509v3 Authority Key Identifier: keyid:89:AE:D2:CF:F8:CE:31:B3:34:F8:3A:0B:30:5F:EE:F0:1D:71:DA:75 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ia7Sz_jOMbM0-DoLMF_u8B1x2nU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/e90f51-89aa-49eb-9ea6-fbe8bc5a29fa/1/ia7Sz_jOMbM0-DoLMF_u8B1x2nU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/e90f51-89aa-49eb-9ea6-fbe8bc5a29fa/1/ia7Sz_jOMbM0-DoLMF_u8B1x2nU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 94:78:73:89:b0:2c:bb:46:ce:54:fb:24:a8:4b:91:23:a2:79: d7:86:b0:c8:ee:15:d8:1c:71:8e:07:56:fe:4b:22:db:72:f2: a6:61:c9:4a:97:2d:d3:1e:16:75:64:bd:6b:d0:ed:5f:95:ea: ed:6b:29:7d:4e:f1:44:e7:92:1c:1a:e8:14:35:e4:65:f4:71: cd:1c:0b:15:69:22:4e:87:9c:b8:f4:ec:c5:13:72:9b:3b:ff: 21:fe:ab:7e:72:8a:0e:f1:ce:1f:24:d9:0e:59:e3:e6:bd:fa: 37:63:e4:f0:46:d0:ed:94:07:28:d3:ee:91:29:76:fa:9a:40: 64:05:55:4f:bf:42:57:3c:6a:7f:aa:f3:ba:e6:0a:a7:f3:6a: 3a:45:5f:bb:9a:9f:bc:37:b4:a9:bd:c3:7c:82:6e:a5:6c:14: 1c:ec:bd:42:57:df:ab:fb:67:ee:0d:b0:02:75:fe:52:4c:a4: ea:4e:cf:c4:13:39:cb:14:8f:5e:41:6a:a2:02:65:d6:7e:52: c0:b7:89:2d:81:ea:37:35:d7:4a:65:5a:f7:8a:b5:ec:69:96: 7d:7a:01:1d:36:ee:5b:14:ce:99:8d:a0:1f:a3:65:30:da:1b: 41:ed:c0:8e:d9:e1:21:23:6c:b4:b7:d6:47:a8:da:94:46:37: 28:4e:12:45 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtdU674Zqjr0rCCHPGtMmVnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg5YWVkMmNmZjhjZTMxYjMzNGY4M2EwYjMwNWZlZWYwMWQ3 MWRhNzUwHhcNMjUxMjI3MDEwMjAzWhcNMjUxMjI4MDEwMjAzWjAzMTEwLwYDVQQD EyhhMDNjN2FmMTQyMjBkNWIxMThiNmJmYmQwMjg1NGUyZGU5NDg1NjIyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvu9Y8CkTTGa6UQYW7PmTc9Lx298m z8HXQefK5GlnpiyoLGnMm+HSNlIbgKtyyPbTNzmj1W59U1xHz7huwlnyuUSwuT6A xdZSMkaNQuaxSoQEOIc3wujLoGp/ZoyiQh5hsVhVhX5zdSgNpeSaOe0az3KsKzo9 ZlMw8jHDIF49PDN2BjHe32vbM52MJhDyf9hJoOHtSYgRn1yKHkRJv78iGKSAliO8 40YJFvEREbPnpKhZdqxqOoHHBr8gPoMFHMDcQpwABr/GC3gQ6vKTo2bhNDnTfrw2 zgfzFyifQZ0H1Ty2/iM8T5aDZ4zOsIr9i8TH9G60dQ1NH8ZTSNhbHYtDBQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKA8evFCINWxGLa/vQKFTi3pSFYiMB8GA1UdIwQY MBaAFImu0s/4zjGzNPg6CzBf7vAdcdp1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaWE3U3pfak9NYk0wLURvTE1GX3U4QjF4Mm5VLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMi9lOTBmNTEtODlhYS00OWViLTllYTYt ZmJlOGJjNWEyOWZhLzEvaWE3U3pfak9NYk0wLURvTE1GX3U4QjF4Mm5VLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMi9lOTBmNTEtODlhYS00OWViLTllYTYtZmJlOGJjNWEyOWZh LzEvaWE3U3pfak9NYk0wLURvTE1GX3U4QjF4Mm5VLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlHhzibAs u0bOVPskqEuRI6J514awyO4V2BxxjgdW/ksi23LypmHJSpct0x4WdWS9a9DtX5Xq 7WspfU7xROeSHBroFDXkZfRxzRwLFWkiToecuPTsxRNymzv/If6rfnKKDvHOHyTZ Dlnj5r36N2Pk8EbQ7ZQHKNPukSl2+ppAZAVVT79CVzxqf6rzuuYKp/NqOkVfu5qf vDe0qb3DfIJupWwUHOy9Qlffq/tn7g2wAnX+Ukyk6k7PxBM5yxSPXkFqogJl1n5S wLeJLYHqNzXXSmVa94q17GmWfXoBHTbuWxTOmY2gH6NlMNobQe3AjtnhISNstLfW R6jalEY3KE4SRQ== -----END CERTIFICATE-----Generated at Sat Dec 27 06:15:36 2025 by rpki-client