This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/3e2077-bc10-4621-ab0b-dba4c9b8706b/1/iVVHgNslskPAotNhl5sTCn8Txg0.mft File: iVVHgNslskPAotNhl5sTCn8Txg0.mft (raw, json) Hash identifier: PAaNTmHO1ctgDAlTYiI28J+INgD/RlPTsWi3z+nf4js= Subject key identifier: 28:09:11:F5:3F:8B:23:E4:22:6B:05:E5:09:D9:96:CE:1F:78:0C:11 Authority key identifier: 89:55:47:80:DB:25:B2:43:C0:A2:D3:61:97:9B:13:0A:7F:13:C6:0D Certificate issuer: /CN=89554780db25b243c0a2d361979b130a7f13c60d Certificate serial: 019B3F1131259CDB9FA20059D9D0EBDC4704 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iVVHgNslskPAotNhl5sTCn8Txg0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/3e2077-bc10-4621-ab0b-dba4c9b8706b/1/iVVHgNslskPAotNhl5sTCn8Txg0.mft Manifest number: 0CB2 Signing time: Sun 21 Dec 2025 04:00:49 +0000 Manifest this update: Sun 21 Dec 2025 04:00:49 +0000 Manifest next update: Mon 22 Dec 2025 04:00:49 +0000 Files and hashes: 1: Io8_rALEkRmJyvwQSYZoU_nTQg0.roa (hash: IdvBLL1znSmthNlumpub/fXZwL7C6UNAlVvYWPg9Tzc=) 2: fp-LIMQ80k5YBVtTaX91n-J89eo.roa (hash: ItqEQhJ82EwpqjGgmH+0CXCKGMVgFNbNle1pM5dmqlE=) 3: iVVHgNslskPAotNhl5sTCn8Txg0.crl (hash: ks2z0BEz8yXjxB6EZHuDFS2p6r9Eis4d9UVmEWzfhP0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/3e2077-bc10-4621-ab0b-dba4c9b8706b/1/iVVHgNslskPAotNhl5sTCn8Txg0.crl rsync://rpki.ripe.net/repository/DEFAULT/ea/3e2077-bc10-4621-ab0b-dba4c9b8706b/1/iVVHgNslskPAotNhl5sTCn8Txg0.mft rsync://rpki.ripe.net/repository/DEFAULT/iVVHgNslskPAotNhl5sTCn8Txg0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 04:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3f:11:31:25:9c:db:9f:a2:00:59:d9:d0:eb:dc:47:04 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89554780db25b243c0a2d361979b130a7f13c60d Validity Not Before: Dec 21 04:00:49 2025 GMT Not After : Dec 22 04:00:49 2025 GMT Subject: CN=280911f53f8b23e4226b05e509d996ce1f780c11 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:e7:80:90:09:20:54:31:c1:96:2c:e8:3b:df: d7:b1:1e:b1:1a:61:24:b4:1b:11:85:51:47:b9:1f: cc:d0:b6:3e:78:e4:bd:3e:51:09:dc:ab:60:2f:82: 2c:2b:cb:68:b5:70:d2:76:56:b0:88:e9:3b:43:f8: 0b:af:f6:d6:63:aa:2a:80:c1:1c:30:b1:cc:a2:16: d4:c7:f9:00:0d:b3:d8:1c:e8:ed:33:e2:9c:82:73: 86:b5:85:fb:47:6b:48:e8:05:49:57:02:a8:b6:5f: 99:7b:88:36:d8:1c:7c:30:cf:d2:f7:b5:c1:7c:7e: e6:25:b7:d9:6a:5d:cb:98:76:24:0a:c0:ed:9c:2b: 14:c9:c9:3f:2a:5b:ab:9b:1d:2c:37:c5:57:3e:93: fa:1f:11:67:35:a4:20:ef:16:5a:86:5a:84:21:46: 11:06:47:0c:fe:d7:7c:77:95:4f:0a:3a:2b:53:be: 7b:4b:eb:fa:be:59:dc:1f:a4:46:3c:5d:4c:a2:a3: 98:ef:1f:4b:20:24:5e:93:1a:8d:d6:d6:af:5b:34: 7e:27:15:c6:65:1a:17:74:07:71:8c:fe:42:14:13: a1:ff:a3:90:32:31:51:1e:5a:6e:d7:c4:07:3e:36: 42:b6:1c:b5:cb:d9:c5:99:ae:14:8e:cf:ce:9e:14: 4b:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:09:11:F5:3F:8B:23:E4:22:6B:05:E5:09:D9:96:CE:1F:78:0C:11 X509v3 Authority Key Identifier: keyid:89:55:47:80:DB:25:B2:43:C0:A2:D3:61:97:9B:13:0A:7F:13:C6:0D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iVVHgNslskPAotNhl5sTCn8Txg0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/3e2077-bc10-4621-ab0b-dba4c9b8706b/1/iVVHgNslskPAotNhl5sTCn8Txg0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/3e2077-bc10-4621-ab0b-dba4c9b8706b/1/iVVHgNslskPAotNhl5sTCn8Txg0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2b:2e:fa:e7:ab:8c:a3:d9:dc:d0:6a:34:0d:f1:d2:ed:02:70: 76:e5:14:4e:23:25:3c:fb:03:97:d3:92:bb:0b:dc:92:d0:ed: 17:43:a7:86:e1:03:91:94:53:33:26:30:f2:5b:97:a0:54:07: 70:eb:1f:51:2c:54:d9:d3:55:e8:32:4e:30:94:8e:de:84:92: 3d:26:f7:20:65:43:40:3d:f1:be:04:72:a5:01:a1:f7:5f:e4: af:d8:15:53:74:20:89:51:65:d2:3b:92:9e:13:3a:53:2b:bc: d3:0e:fe:65:3f:c0:ec:71:2c:6c:71:66:f5:c4:69:6a:56:1c: 16:b1:9e:ba:0c:7f:1c:21:be:f6:fd:08:d8:c8:16:c4:90:13: 16:ba:33:01:15:b8:1e:6a:e2:0e:ae:dc:ca:d5:49:33:1b:de: 56:98:b2:e4:4f:17:b2:6d:94:80:ce:81:60:04:5d:65:8a:eb: 9a:16:d7:b0:8b:87:ef:6c:d2:d3:8c:f9:50:d7:f4:1c:b1:c2: 31:d3:cf:0c:41:6e:74:bf:c4:38:56:14:a0:73:e1:e0:4b:9e: b6:6a:a6:cb:95:94:11:99:b7:b1:c5:0a:c2:c5:15:55:d7:61: 92:95:13:6d:13:79:58:34:6f:b2:e2:a7:b9:0c:89:05:ef:1d: 71:8a:48:31 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs/ETElnNufogBZ2dDr3EcEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg5NTU0NzgwZGIyNWIyNDNjMGEyZDM2MTk3OWIxMzBhN2Yx M2M2MGQwHhcNMjUxMjIxMDQwMDQ5WhcNMjUxMjIyMDQwMDQ5WjAzMTEwLwYDVQQD EygyODA5MTFmNTNmOGIyM2U0MjI2YjA1ZTUwOWQ5OTZjZTFmNzgwYzExMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp+eAkAkgVDHBlizoO9/XsR6xGmEk tBsRhVFHuR/M0LY+eOS9PlEJ3KtgL4IsK8totXDSdlawiOk7Q/gLr/bWY6oqgMEc MLHMohbUx/kADbPYHOjtM+KcgnOGtYX7R2tI6AVJVwKotl+Ze4g22Bx8MM/S97XB fH7mJbfZal3LmHYkCsDtnCsUyck/Klurmx0sN8VXPpP6HxFnNaQg7xZahlqEIUYR BkcM/td8d5VPCjorU757S+v6vlncH6RGPF1MoqOY7x9LICRekxqN1tavWzR+JxXG ZRoXdAdxjP5CFBOh/6OQMjFRHlpu18QHPjZCthy1y9nFma4Ujs/OnhRLMQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCgJEfU/iyPkImsF5QnZls4feAwRMB8GA1UdIwQY MBaAFIlVR4DbJbJDwKLTYZebEwp/E8YNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaVZWSGdOc2xza1BBb3ROaGw1c1RDbjhUeGcwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYS8zZTIwNzctYmMxMC00NjIxLWFiMGIt ZGJhNGM5Yjg3MDZiLzEvaVZWSGdOc2xza1BBb3ROaGw1c1RDbjhUeGcwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYS8zZTIwNzctYmMxMC00NjIxLWFiMGItZGJhNGM5Yjg3MDZi LzEvaVZWSGdOc2xza1BBb3ROaGw1c1RDbjhUeGcwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKy7656uM o9nc0Go0DfHS7QJwduUUTiMlPPsDl9OSuwvcktDtF0OnhuEDkZRTMyYw8luXoFQH cOsfUSxU2dNV6DJOMJSO3oSSPSb3IGVDQD3xvgRypQGh91/kr9gVU3QgiVFl0juS nhM6Uyu80w7+ZT/A7HEsbHFm9cRpalYcFrGeugx/HCG+9v0I2MgWxJATFrozARW4 HmriDq7cytVJMxveVpiy5E8Xsm2UgM6BYARdZYrrmhbXsIuH72zS04z5UNf0HLHC MdPPDEFudL/EOFYUoHPh4Euetmqmy5WUEZm3scUKwsUVVddhkpUTbRN5WDRvsuKn uQyJBe8dcYpIMQ== -----END CERTIFICATE-----Generated at Sun Dec 21 11:39:14 2025 by rpki-client