This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/2a55a5-3304-4108-8d92-4d8e90e0333b/1/ia6mmISBzqS5W2UTHMSYhPPtDj8.mft File: ia6mmISBzqS5W2UTHMSYhPPtDj8.mft (raw, json) Hash identifier: ir/mUtF6jCBMgEcB7qWCNmb9ipwPAi0NKaEfYg8PD5g= Subject key identifier: B5:7D:FC:39:96:67:B3:53:6F:AC:BF:A8:97:11:43:30:C3:25:3C:9E Authority key identifier: 89:AE:A6:98:84:81:CE:A4:B9:5B:65:13:1C:C4:98:84:F3:ED:0E:3F Certificate issuer: /CN=89aea6988481cea4b95b65131cc49884f3ed0e3f Certificate serial: 019B446E2E7988BFC6F76E8B8F8BE5A219E4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ia6mmISBzqS5W2UTHMSYhPPtDj8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/2a55a5-3304-4108-8d92-4d8e90e0333b/1/ia6mmISBzqS5W2UTHMSYhPPtDj8.mft Manifest number: 178C Signing time: Mon 22 Dec 2025 05:00:30 +0000 Manifest this update: Mon 22 Dec 2025 05:00:30 +0000 Manifest next update: Tue 23 Dec 2025 05:00:30 +0000 Files and hashes: 1: Fl6pOlPLU-YJzCc-HkB3wwedcd0.roa (hash: jlDQ+VkQoTEiq8ZQ7EeJUmtKUn70x3pUuA4q7simdPM=) 2: ia6mmISBzqS5W2UTHMSYhPPtDj8.crl (hash: YyO5CpVt0tTP9Uta0WxHIj87YwGl61j/bBoS5MGTmy0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/2a55a5-3304-4108-8d92-4d8e90e0333b/1/ia6mmISBzqS5W2UTHMSYhPPtDj8.crl rsync://rpki.ripe.net/repository/DEFAULT/e4/2a55a5-3304-4108-8d92-4d8e90e0333b/1/ia6mmISBzqS5W2UTHMSYhPPtDj8.mft rsync://rpki.ripe.net/repository/DEFAULT/ia6mmISBzqS5W2UTHMSYhPPtDj8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 05:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:44:6e:2e:79:88:bf:c6:f7:6e:8b:8f:8b:e5:a2:19:e4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89aea6988481cea4b95b65131cc49884f3ed0e3f Validity Not Before: Dec 22 05:00:30 2025 GMT Not After : Dec 23 05:00:30 2025 GMT Subject: CN=b57dfc399667b3536facbfa897114330c3253c9e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:23:b3:18:8e:8f:e4:f6:0f:e2:ae:e5:cc:a8: ce:a3:1d:89:d3:46:fd:6b:74:a4:b7:6b:3e:50:a5: 77:0c:2b:0d:33:27:47:db:ac:90:c2:88:49:87:ea: a4:2a:6a:55:66:6c:56:cd:73:c3:c9:b5:81:b5:16: 41:78:df:a7:da:42:b8:d1:a1:24:22:8e:b0:9b:a4: 83:b4:11:f6:3c:6f:8e:6a:aa:7e:d3:91:9a:36:a6: 9f:9f:23:11:67:8f:9e:60:3b:7c:bd:71:e5:90:b1: e6:cd:08:11:db:5a:0b:69:6a:c4:47:fc:75:85:61: 9f:73:14:bc:fe:81:74:d6:a7:84:de:9d:06:4d:8e: ea:87:27:9f:12:e3:2c:37:9c:d3:a1:88:02:eb:18: 97:84:2f:01:68:77:d3:b2:36:88:c2:00:d3:92:1d: b3:b2:08:5e:97:17:d8:60:e5:67:20:2b:29:a3:b9: 18:af:a1:60:b9:a1:7a:d5:78:57:ca:1d:7c:a6:9f: 79:c4:94:c5:a0:aa:57:af:d2:87:fd:a8:95:e7:9f: 63:d7:95:94:11:5e:e7:83:a4:a3:bb:c2:86:72:5f: 49:8d:4e:a2:8b:b7:7e:ae:8a:22:f0:5c:48:85:97: 5e:52:60:6f:22:84:7f:21:e5:cc:06:9e:e8:e1:bf: 76:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:7D:FC:39:96:67:B3:53:6F:AC:BF:A8:97:11:43:30:C3:25:3C:9E X509v3 Authority Key Identifier: keyid:89:AE:A6:98:84:81:CE:A4:B9:5B:65:13:1C:C4:98:84:F3:ED:0E:3F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ia6mmISBzqS5W2UTHMSYhPPtDj8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/2a55a5-3304-4108-8d92-4d8e90e0333b/1/ia6mmISBzqS5W2UTHMSYhPPtDj8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/2a55a5-3304-4108-8d92-4d8e90e0333b/1/ia6mmISBzqS5W2UTHMSYhPPtDj8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7c:07:60:20:02:88:13:a5:88:13:99:7b:53:c1:e7:93:7e:d6: 4f:bb:f5:f5:8f:5e:d9:f0:25:d0:9b:f3:4d:5b:33:2a:f2:2d: 07:59:14:e5:a5:19:33:01:f7:15:e2:05:5e:af:e3:d2:11:31: 8c:b6:75:49:c1:e7:52:c4:9c:34:94:04:e8:f0:4a:d7:4f:f4: 89:5a:fb:59:28:79:f4:bb:02:16:5e:ef:cb:03:ef:78:14:2e: e8:76:32:a7:db:56:28:ed:fa:c3:76:56:29:1f:68:db:f3:e7: cc:56:b2:65:48:57:79:8f:f2:55:cc:e7:87:89:ce:d2:ee:93: 50:b4:6c:ee:4c:40:38:38:15:0a:9f:5a:02:c2:ce:6b:13:23: d5:ee:6d:9c:d7:f9:62:cc:17:26:bf:7d:41:af:d9:85:6f:db: 4f:0b:c8:f2:07:b8:e3:92:84:9a:d7:0b:44:cb:74:cf:1f:8c: 08:c5:73:16:c7:b3:ad:cb:a2:2c:17:a8:f8:be:79:d1:4b:be: e9:97:be:dc:d9:ba:4a:9f:b3:bc:78:36:35:67:ac:a7:32:55: 69:91:0d:9e:1d:33:0e:00:74:6c:e9:66:f1:b5:ed:e0:ff:f6: f1:72:12:82:b3:ee:c8:60:44:30:3f:31:03:50:f3:c0:bc:6b: da:2f:46:94 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtEbi55iL/G926Lj4vlohnkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg5YWVhNjk4ODQ4MWNlYTRiOTViNjUxMzFjYzQ5ODg0ZjNl ZDBlM2YwHhcNMjUxMjIyMDUwMDMwWhcNMjUxMjIzMDUwMDMwWjAzMTEwLwYDVQQD EyhiNTdkZmMzOTk2NjdiMzUzNmZhY2JmYTg5NzExNDMzMGMzMjUzYzllMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlCOzGI6P5PYP4q7lzKjOox2J00b9 a3Skt2s+UKV3DCsNMydH26yQwohJh+qkKmpVZmxWzXPDybWBtRZBeN+n2kK40aEk Io6wm6SDtBH2PG+Oaqp+05GaNqafnyMRZ4+eYDt8vXHlkLHmzQgR21oLaWrER/x1 hWGfcxS8/oF01qeE3p0GTY7qhyefEuMsN5zToYgC6xiXhC8BaHfTsjaIwgDTkh2z sghelxfYYOVnICspo7kYr6FguaF61XhXyh18pp95xJTFoKpXr9KH/aiV559j15WU EV7ng6Sju8KGcl9JjU6ii7d+rooi8FxIhZdeUmBvIoR/IeXMBp7o4b92cQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLV9/DmWZ7NTb6y/qJcRQzDDJTyeMB8GA1UdIwQY MBaAFImuppiEgc6kuVtlExzEmITz7Q4/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaWE2bW1JU0J6cVM1VzJVVEhNU1loUFB0RGo4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNC8yYTU1YTUtMzMwNC00MTA4LThkOTIt NGQ4ZTkwZTAzMzNiLzEvaWE2bW1JU0J6cVM1VzJVVEhNU1loUFB0RGo4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNC8yYTU1YTUtMzMwNC00MTA4LThkOTItNGQ4ZTkwZTAzMzNi LzEvaWE2bW1JU0J6cVM1VzJVVEhNU1loUFB0RGo4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfAdgIAKI E6WIE5l7U8Hnk37WT7v19Y9e2fAl0JvzTVszKvItB1kU5aUZMwH3FeIFXq/j0hEx jLZ1ScHnUsScNJQE6PBK10/0iVr7WSh59LsCFl7vywPveBQu6HYyp9tWKO36w3ZW KR9o2/PnzFayZUhXeY/yVcznh4nO0u6TULRs7kxAODgVCp9aAsLOaxMj1e5tnNf5 YswXJr99Qa/ZhW/bTwvI8ge445KEmtcLRMt0zx+MCMVzFsezrcuiLBeo+L550Uu+ 6Ze+3Nm6Sp+zvHg2NWespzJVaZENnh0zDgB0bOlm8bXt4P/28XISgrPuyGBEMD8x A1DzwLxr2i9GlA== -----END CERTIFICATE-----Generated at Mon Dec 22 10:36:11 2025 by rpki-client