This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/e90f51-89aa-49eb-9ea6-fbe8bc5a29fa/1/ia7Sz_jOMbM0-DoLMF_u8B1x2nU.mft File: ia7Sz_jOMbM0-DoLMF_u8B1x2nU.mft (raw, json) Hash identifier: Mm9KkjIRYFy+qTqhesuJQaN6UmXTUzjm0AZ+2ioAYBk= Subject key identifier: 75:40:95:01:15:C7:21:65:9D:53:8A:E4:0D:0C:9B:06:86:EB:67:6B Authority key identifier: 89:AE:D2:CF:F8:CE:31:B3:34:F8:3A:0B:30:5F:EE:F0:1D:71:DA:75 Certificate issuer: /CN=89aed2cff8ce31b334f83a0b305feef01d71da75 Certificate serial: 019B405BE6C07C56C7205DF23F90EA78F44B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ia7Sz_jOMbM0-DoLMF_u8B1x2nU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/e90f51-89aa-49eb-9ea6-fbe8bc5a29fa/1/ia7Sz_jOMbM0-DoLMF_u8B1x2nU.mft Manifest number: 1744 Signing time: Sun 21 Dec 2025 10:02:03 +0000 Manifest this update: Sun 21 Dec 2025 10:02:03 +0000 Manifest next update: Mon 22 Dec 2025 10:02:03 +0000 Files and hashes: 1: TuA6dq5RUfQK0g-nhGPwelxAp8s.roa (hash: A068hT4+Hwiukpw4NAI0ekcWki3f2qgAy0smH/qbl44=) 2: ia7Sz_jOMbM0-DoLMF_u8B1x2nU.crl (hash: Rsiv1aWox21GeoKzRQoR9fGFkUjqTNFsFHL4oetmzzM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/e90f51-89aa-49eb-9ea6-fbe8bc5a29fa/1/ia7Sz_jOMbM0-DoLMF_u8B1x2nU.crl rsync://rpki.ripe.net/repository/DEFAULT/d2/e90f51-89aa-49eb-9ea6-fbe8bc5a29fa/1/ia7Sz_jOMbM0-DoLMF_u8B1x2nU.mft rsync://rpki.ripe.net/repository/DEFAULT/ia7Sz_jOMbM0-DoLMF_u8B1x2nU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 10:02:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:40:5b:e6:c0:7c:56:c7:20:5d:f2:3f:90:ea:78:f4:4b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89aed2cff8ce31b334f83a0b305feef01d71da75 Validity Not Before: Dec 21 10:02:03 2025 GMT Not After : Dec 22 10:02:03 2025 GMT Subject: CN=7540950115c721659d538ae40d0c9b0686eb676b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:10:af:c3:8e:d5:d4:de:92:80:4a:5d:f4:2c: 1a:24:4d:fc:c2:b1:65:24:f8:8e:0b:db:e8:65:a4: 0a:87:dc:e8:c2:dd:bf:65:13:ab:41:13:cc:e5:6d: ce:d0:2b:48:77:d4:0a:d0:63:84:46:3a:dc:d8:1d: e0:7f:27:29:7d:82:e0:b3:8d:cd:d0:9c:c2:5f:6d: 9f:83:7c:bf:8b:d8:e1:1c:77:39:6d:bc:6c:11:67: 00:5b:6f:11:8a:4c:3b:83:13:48:e0:f3:fd:58:8c: 72:28:d8:78:88:7c:92:1d:3a:89:cb:7c:91:3b:f8: b0:ba:1c:7e:35:62:c5:b6:26:27:f6:1a:f2:55:12: d6:10:b1:da:03:6c:83:70:1d:61:02:93:cf:ed:7a: 0a:12:2b:ae:cc:9d:34:9d:4d:b8:96:b4:d5:ff:ba: 5d:80:df:82:2a:76:58:97:7e:41:d5:82:3b:45:39: 97:18:7b:78:0d:81:90:61:d1:a5:c6:86:21:51:3d: 23:88:26:b5:31:ba:21:cf:63:7c:b7:8c:26:90:c5: 89:f2:2e:f2:37:85:18:63:fa:ca:4b:e8:ad:e2:87: dd:3e:92:76:10:c4:d9:c5:89:e5:00:98:72:84:85: 27:7f:ac:bd:a4:34:35:d3:e3:b4:4e:6e:e0:4e:23: d8:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:40:95:01:15:C7:21:65:9D:53:8A:E4:0D:0C:9B:06:86:EB:67:6B X509v3 Authority Key Identifier: keyid:89:AE:D2:CF:F8:CE:31:B3:34:F8:3A:0B:30:5F:EE:F0:1D:71:DA:75 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ia7Sz_jOMbM0-DoLMF_u8B1x2nU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/e90f51-89aa-49eb-9ea6-fbe8bc5a29fa/1/ia7Sz_jOMbM0-DoLMF_u8B1x2nU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/e90f51-89aa-49eb-9ea6-fbe8bc5a29fa/1/ia7Sz_jOMbM0-DoLMF_u8B1x2nU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 62:a2:98:56:8b:c0:92:1d:14:70:eb:a5:ed:c4:0e:43:d7:0e: 7b:ba:aa:57:ed:db:6e:ba:e6:33:26:97:cd:3d:09:94:14:fa: 6a:87:1b:ab:72:28:05:47:8e:c5:19:e0:13:7f:ec:6b:be:ab: d0:b8:9d:16:7d:8f:3e:e4:c4:6d:46:69:33:fc:b8:ce:53:07: 7e:67:f2:81:92:fa:a1:68:0c:c4:32:d8:47:de:dc:70:f7:16: 47:b6:db:fc:30:7d:6c:e9:ba:2f:88:34:cf:89:13:50:4e:67: 37:a6:83:ba:bb:1d:ed:b2:ef:b2:87:a1:55:3c:02:7c:c0:db: 71:4b:ef:a3:28:73:41:d6:60:e5:0d:f0:d0:3d:e7:97:58:94: 03:1c:67:d7:43:4d:cf:f6:a9:a4:b1:8f:95:2c:75:62:33:6d: 39:2b:9e:92:02:75:0c:c8:eb:90:dc:ba:5e:6e:fb:8b:44:75: a1:ee:18:6d:4b:8c:3d:d5:c5:5c:0d:78:1e:6f:5c:7d:c8:c7: d0:e3:05:5b:cd:d9:2f:28:23:be:7b:0e:fb:4e:af:a2:be:19: e2:3d:32:37:ac:27:2b:21:8f:5b:ec:f7:e4:d2:d7:55:05:4f: 23:47:ed:91:73:80:81:94:71:40:99:e2:ed:a5:2c:56:fe:bb: bd:ee:48:73 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtAW+bAfFbHIF3yP5DqePRLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg5YWVkMmNmZjhjZTMxYjMzNGY4M2EwYjMwNWZlZWYwMWQ3 MWRhNzUwHhcNMjUxMjIxMTAwMjAzWhcNMjUxMjIyMTAwMjAzWjAzMTEwLwYDVQQD Eyg3NTQwOTUwMTE1YzcyMTY1OWQ1MzhhZTQwZDBjOWIwNjg2ZWI2NzZiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlRCvw47V1N6SgEpd9CwaJE38wrFl JPiOC9voZaQKh9zowt2/ZROrQRPM5W3O0CtId9QK0GOERjrc2B3gfycpfYLgs43N 0JzCX22fg3y/i9jhHHc5bbxsEWcAW28Rikw7gxNI4PP9WIxyKNh4iHySHTqJy3yR O/iwuhx+NWLFtiYn9hryVRLWELHaA2yDcB1hApPP7XoKEiuuzJ00nU24lrTV/7pd gN+CKnZYl35B1YI7RTmXGHt4DYGQYdGlxoYhUT0jiCa1Mbohz2N8t4wmkMWJ8i7y N4UYY/rKS+it4ofdPpJ2EMTZxYnlAJhyhIUnf6y9pDQ10+O0Tm7gTiPY4QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHVAlQEVxyFlnVOK5A0MmwaG62drMB8GA1UdIwQY MBaAFImu0s/4zjGzNPg6CzBf7vAdcdp1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaWE3U3pfak9NYk0wLURvTE1GX3U4QjF4Mm5VLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMi9lOTBmNTEtODlhYS00OWViLTllYTYt ZmJlOGJjNWEyOWZhLzEvaWE3U3pfak9NYk0wLURvTE1GX3U4QjF4Mm5VLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMi9lOTBmNTEtODlhYS00OWViLTllYTYtZmJlOGJjNWEyOWZh LzEvaWE3U3pfak9NYk0wLURvTE1GX3U4QjF4Mm5VLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYqKYVovA kh0UcOul7cQOQ9cOe7qqV+3bbrrmMyaXzT0JlBT6aocbq3IoBUeOxRngE3/sa76r 0LidFn2PPuTEbUZpM/y4zlMHfmfygZL6oWgMxDLYR97ccPcWR7bb/DB9bOm6L4g0 z4kTUE5nN6aDursd7bLvsoehVTwCfMDbcUvvoyhzQdZg5Q3w0D3nl1iUAxxn10NN z/appLGPlSx1YjNtOSuekgJ1DMjrkNy6Xm77i0R1oe4YbUuMPdXFXA14Hm9cfcjH 0OMFW83ZLygjvnsO+06vor4Z4j0yN6wnKyGPW+z35NLXVQVPI0ftkXOAgZRxQJni 7aUsVv67ve5Icw== -----END CERTIFICATE-----Generated at Sun Dec 21 16:43:42 2025 by rpki-client