This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/2a55a5-3304-4108-8d92-4d8e90e0333b/1/ia6mmISBzqS5W2UTHMSYhPPtDj8.mft File: ia6mmISBzqS5W2UTHMSYhPPtDj8.mft (raw, json) Hash identifier: u+e1UrJgYjPuwS/oLNqspkD1VhHHX+kP9WXUeuzQx44= Subject key identifier: 48:6D:F1:CF:59:E8:81:14:16:B3:CB:30:AF:0E:6B:9E:7A:8B:76:A0 Authority key identifier: 89:AE:A6:98:84:81:CE:A4:B9:5B:65:13:1C:C4:98:84:F3:ED:0E:3F Certificate issuer: /CN=89aea6988481cea4b95b65131cc49884f3ed0e3f Certificate serial: 019B3CB4A2D8C4D66525DC414E65E1754D67 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ia6mmISBzqS5W2UTHMSYhPPtDj8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/2a55a5-3304-4108-8d92-4d8e90e0333b/1/ia6mmISBzqS5W2UTHMSYhPPtDj8.mft Manifest number: 1788 Signing time: Sat 20 Dec 2025 17:00:29 +0000 Manifest this update: Sat 20 Dec 2025 17:00:29 +0000 Manifest next update: Sun 21 Dec 2025 17:00:29 +0000 Files and hashes: 1: Fl6pOlPLU-YJzCc-HkB3wwedcd0.roa (hash: jlDQ+VkQoTEiq8ZQ7EeJUmtKUn70x3pUuA4q7simdPM=) 2: ia6mmISBzqS5W2UTHMSYhPPtDj8.crl (hash: 6hAc4ELl/QjEd3WtirlVV1byodef/maKtkUWE+vk2JU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/2a55a5-3304-4108-8d92-4d8e90e0333b/1/ia6mmISBzqS5W2UTHMSYhPPtDj8.crl rsync://rpki.ripe.net/repository/DEFAULT/e4/2a55a5-3304-4108-8d92-4d8e90e0333b/1/ia6mmISBzqS5W2UTHMSYhPPtDj8.mft rsync://rpki.ripe.net/repository/DEFAULT/ia6mmISBzqS5W2UTHMSYhPPtDj8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:b4:a2:d8:c4:d6:65:25:dc:41:4e:65:e1:75:4d:67 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89aea6988481cea4b95b65131cc49884f3ed0e3f Validity Not Before: Dec 20 17:00:29 2025 GMT Not After : Dec 21 17:00:29 2025 GMT Subject: CN=486df1cf59e8811416b3cb30af0e6b9e7a8b76a0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:bb:b1:71:ec:ec:a5:53:3a:8a:38:5b:c4:8f: 20:f9:75:d3:cb:5b:79:e3:a3:5c:84:06:e2:8b:cf: 06:94:2a:b7:3a:cf:c1:ef:3e:7e:1b:ab:68:49:25: 65:03:48:e8:a9:c8:8e:ae:c6:b4:66:49:0c:9f:4d: a8:15:8f:3a:c5:3f:48:ff:e4:4a:90:7c:c1:6a:f9: de:34:ee:c8:87:52:49:9a:d5:ba:f8:4d:ae:74:76: d5:31:32:4e:91:e4:8b:b7:cb:9f:ad:ab:0f:56:1d: 5d:89:d6:62:9d:ce:54:ac:e0:f2:2c:a7:16:28:ff: 0f:4e:da:6c:ce:ee:2c:81:72:f3:66:2c:1b:4c:59: a9:03:bb:4c:6c:83:07:ca:68:e9:87:cc:92:1f:39: c0:bd:b4:5b:55:9c:95:b8:41:73:4b:66:05:80:76: a1:9c:2c:68:58:da:8b:03:d4:97:66:71:19:4c:ff: e9:2b:89:8a:3f:75:66:74:72:76:25:5e:c6:3f:4e: 7e:04:1b:f3:fa:39:fb:65:2c:a7:02:4a:3c:72:f8: 5c:e3:5b:6d:83:1f:96:5b:6c:b8:db:32:de:c2:ff: c7:c8:e2:82:7b:5f:3f:bf:ee:18:ab:e1:7d:9a:11: 42:b3:e2:c4:de:7e:c4:af:fc:02:e6:38:fc:58:a4: 6b:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:6D:F1:CF:59:E8:81:14:16:B3:CB:30:AF:0E:6B:9E:7A:8B:76:A0 X509v3 Authority Key Identifier: keyid:89:AE:A6:98:84:81:CE:A4:B9:5B:65:13:1C:C4:98:84:F3:ED:0E:3F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ia6mmISBzqS5W2UTHMSYhPPtDj8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/2a55a5-3304-4108-8d92-4d8e90e0333b/1/ia6mmISBzqS5W2UTHMSYhPPtDj8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/2a55a5-3304-4108-8d92-4d8e90e0333b/1/ia6mmISBzqS5W2UTHMSYhPPtDj8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a8:55:53:c0:1a:fc:78:11:4e:3a:0e:65:f1:d1:80:f3:36:0f: 7c:ae:30:b1:1c:b3:5a:ef:49:51:5d:5b:81:b8:17:05:89:12: db:4b:cd:b4:13:12:7e:78:3b:5d:73:bd:58:d0:17:a4:b9:ef: 49:55:ae:d8:75:9d:4c:07:3c:e9:34:a3:e7:51:bb:76:dd:b6: 11:87:bd:df:12:86:c1:80:6e:9a:73:be:65:4c:77:77:b7:ba: 75:73:16:83:31:fc:ec:7c:54:5d:ee:c8:07:67:ea:4e:9c:2b: 13:a0:e5:15:63:a7:d5:9c:27:f6:8c:9b:95:9b:ca:d3:49:4e: cb:30:03:33:de:07:12:cd:7c:57:72:21:20:60:3f:d6:a8:47: 2f:d1:b9:04:0f:e4:95:52:3c:a8:c0:cf:71:29:6e:60:7b:47: db:0d:f4:36:aa:30:91:02:a6:82:c4:de:08:13:29:8c:ab:20: aa:0e:25:33:83:4e:de:f3:ff:5d:00:00:ed:a3:29:d5:4c:17: fd:03:a4:1e:3d:7d:6d:30:f5:50:8d:80:65:65:48:6f:12:8c: e9:1f:7a:c8:ea:b0:94:96:31:91:a3:43:df:17:90:c2:33:bd: 1f:d1:36:c1:be:de:60:b1:1a:e7:a7:8a:7d:e6:11:dd:41:9c: 99:ab:bb:c4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs8tKLYxNZlJdxBTmXhdU1nMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg5YWVhNjk4ODQ4MWNlYTRiOTViNjUxMzFjYzQ5ODg0ZjNl ZDBlM2YwHhcNMjUxMjIwMTcwMDI5WhcNMjUxMjIxMTcwMDI5WjAzMTEwLwYDVQQD Eyg0ODZkZjFjZjU5ZTg4MTE0MTZiM2NiMzBhZjBlNmI5ZTdhOGI3NmEwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmbuxcezspVM6ijhbxI8g+XXTy1t5 46NchAbii88GlCq3Os/B7z5+G6toSSVlA0joqciOrsa0ZkkMn02oFY86xT9I/+RK kHzBavneNO7Ih1JJmtW6+E2udHbVMTJOkeSLt8ufrasPVh1didZinc5UrODyLKcW KP8PTtpszu4sgXLzZiwbTFmpA7tMbIMHymjph8ySHznAvbRbVZyVuEFzS2YFgHah nCxoWNqLA9SXZnEZTP/pK4mKP3VmdHJ2JV7GP05+BBvz+jn7ZSynAko8cvhc41tt gx+WW2y42zLewv/HyOKCe18/v+4Yq+F9mhFCs+LE3n7Er/wC5jj8WKRrqwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEht8c9Z6IEUFrPLMK8Oa556i3agMB8GA1UdIwQY MBaAFImuppiEgc6kuVtlExzEmITz7Q4/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaWE2bW1JU0J6cVM1VzJVVEhNU1loUFB0RGo4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNC8yYTU1YTUtMzMwNC00MTA4LThkOTIt NGQ4ZTkwZTAzMzNiLzEvaWE2bW1JU0J6cVM1VzJVVEhNU1loUFB0RGo4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNC8yYTU1YTUtMzMwNC00MTA4LThkOTItNGQ4ZTkwZTAzMzNi LzEvaWE2bW1JU0J6cVM1VzJVVEhNU1loUFB0RGo4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqFVTwBr8 eBFOOg5l8dGA8zYPfK4wsRyzWu9JUV1bgbgXBYkS20vNtBMSfng7XXO9WNAXpLnv SVWu2HWdTAc86TSj51G7dt22EYe93xKGwYBumnO+ZUx3d7e6dXMWgzH87HxUXe7I B2fqTpwrE6DlFWOn1Zwn9oyblZvK00lOyzADM94HEs18V3IhIGA/1qhHL9G5BA/k lVI8qMDPcSluYHtH2w30NqowkQKmgsTeCBMpjKsgqg4lM4NO3vP/XQAA7aMp1UwX /QOkHj19bTD1UI2AZWVIbxKM6R96yOqwlJYxkaND3xeQwjO9H9E2wb7eYLEa56eK feYR3UGcmau7xA== -----END CERTIFICATE-----Generated at Sat Dec 20 21:33:21 2025 by rpki-client