This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/b98b9f-b581-4e3e-ae8a-987d869566f6/1/IIIPeWSBrA6WN8liQUWXsf4ifCQ.mft File: IIIPeWSBrA6WN8liQUWXsf4ifCQ.mft (raw, json) Hash identifier: hX7tl7gWV1M7kc54yXVRxHqskFZHajstF7whPIWK6EE= Subject key identifier: 40:6C:AA:EE:7B:93:76:4C:20:F5:12:DB:7D:97:CB:32:F9:FA:A6:87 Authority key identifier: 20:82:0F:79:64:81:AC:0E:96:37:C9:62:41:45:97:B1:FE:22:7C:24 Certificate issuer: /CN=20820f796481ac0e9637c962414597b1fe227c24 Certificate serial: 019B4EF1E637F6DA592044361943F6E19210 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IIIPeWSBrA6WN8liQUWXsf4ifCQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/b98b9f-b581-4e3e-ae8a-987d869566f6/1/IIIPeWSBrA6WN8liQUWXsf4ifCQ.mft Manifest number: 02A5 Signing time: Wed 24 Dec 2025 06:00:34 +0000 Manifest this update: Wed 24 Dec 2025 06:00:34 +0000 Manifest next update: Thu 25 Dec 2025 06:00:34 +0000 Files and hashes: 1: IIIPeWSBrA6WN8liQUWXsf4ifCQ.crl (hash: O/46+l5SoLYZRGaGM61LcpqxkZ6QKdhLZJlVFzS106Y=) 2: _KyJrgx1hGK_hXMTclXxlPIPZn8.roa (hash: I4QZAN/FDUNiksKSSMZ5KyrS7bRdtRCczdlGK9iHX0c=) 3: iLANhbyVV3zbKcRa5e1j5ys5bQ8.roa (hash: HvIZEmUJodoCUOQJmSLlhYyGWehRd8s2eUB4GrSGatI=) 4: vXv88BHimThnafaryEHozjYrlDI.roa (hash: DV1U9+gs3m5mNc5xoVIc27oNoGuDOyBahRAnw8thlug=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/b98b9f-b581-4e3e-ae8a-987d869566f6/1/IIIPeWSBrA6WN8liQUWXsf4ifCQ.crl rsync://rpki.ripe.net/repository/DEFAULT/ef/b98b9f-b581-4e3e-ae8a-987d869566f6/1/IIIPeWSBrA6WN8liQUWXsf4ifCQ.mft rsync://rpki.ripe.net/repository/DEFAULT/IIIPeWSBrA6WN8liQUWXsf4ifCQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 06:00:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4e:f1:e6:37:f6:da:59:20:44:36:19:43:f6:e1:92:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=20820f796481ac0e9637c962414597b1fe227c24 Validity Not Before: Dec 24 06:00:34 2025 GMT Not After : Dec 25 06:00:34 2025 GMT Subject: CN=406caaee7b93764c20f512db7d97cb32f9faa687 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:74:fe:39:10:a3:bf:f7:24:ba:af:7c:68:9a: 80:8f:a4:7f:07:e5:36:9a:10:27:b4:ce:66:27:4b: 49:10:f1:49:74:cc:46:5c:c6:2a:31:2d:bd:d1:a5: 73:b4:cc:f0:f5:5e:3d:99:7b:8d:8c:89:9c:bd:ba: 6a:a3:fd:b9:a0:fd:e8:bb:b3:93:3e:25:77:09:e9: 55:de:88:04:be:8e:0f:31:fb:2e:c9:ee:69:fd:8c: 0b:f6:76:3c:86:0a:65:b0:6f:b2:da:40:c5:bb:6e: 23:b0:67:4b:ab:dc:97:1c:2e:bb:c0:b2:df:df:f9: 27:53:9c:f6:11:bd:6d:17:aa:7f:83:09:35:41:b3: 78:0c:4e:dd:3b:34:6b:4f:1e:f6:b5:9c:26:7f:e5: bd:06:0a:b0:54:a9:90:2e:ed:b0:99:af:bb:fc:dd: 8a:cf:c1:e8:f0:38:af:9d:35:53:94:20:0c:fa:f2: 76:94:fb:e1:5f:c5:a1:a6:f4:65:b9:94:2b:5d:8c: a5:0c:79:2e:72:93:ff:db:74:e9:00:91:16:1c:6b: 62:65:c1:bd:9c:1c:5f:be:70:30:6b:49:da:2d:24: e6:54:53:e2:e6:e2:13:44:2a:d4:9b:6b:1b:32:e1: c0:02:f8:60:02:4e:04:e0:45:76:f9:04:58:51:f4: d5:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:6C:AA:EE:7B:93:76:4C:20:F5:12:DB:7D:97:CB:32:F9:FA:A6:87 X509v3 Authority Key Identifier: keyid:20:82:0F:79:64:81:AC:0E:96:37:C9:62:41:45:97:B1:FE:22:7C:24 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IIIPeWSBrA6WN8liQUWXsf4ifCQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/b98b9f-b581-4e3e-ae8a-987d869566f6/1/IIIPeWSBrA6WN8liQUWXsf4ifCQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/b98b9f-b581-4e3e-ae8a-987d869566f6/1/IIIPeWSBrA6WN8liQUWXsf4ifCQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 52:0a:e1:a7:06:d4:1f:d5:42:15:f4:ff:8a:d9:68:9e:ae:86: d5:a4:a1:b3:9d:bf:4a:f8:9f:c5:d2:b3:77:77:60:c2:8a:09: 49:de:6b:1c:45:7d:a3:6b:73:3b:99:e0:bd:85:60:82:09:92: 2f:b8:5a:a1:9c:ee:a2:1b:74:8f:a3:2b:90:02:e1:dc:a1:5c: 60:92:92:2a:4f:c0:68:db:7b:e4:d4:16:fc:34:d4:7a:84:37: b1:6a:83:f0:c2:13:ee:b8:8d:d1:3a:58:65:4d:64:d6:39:25: 80:21:60:66:de:3c:3c:41:1c:3c:29:5e:9a:10:c5:46:bf:0f: 56:ae:93:d5:d0:60:e4:6f:3b:6f:ff:25:ac:c3:49:76:dc:f6: b7:57:ac:3e:3e:63:8c:d0:e3:3a:ba:25:a1:cd:1d:5a:39:c8: c8:10:9e:72:ee:bf:20:0a:58:b0:31:ad:7e:30:a2:98:84:03: 42:70:ae:e0:ba:4f:b7:08:f2:2a:ee:8f:97:04:48:39:34:bb: 20:66:30:d6:37:73:c8:21:bb:6d:63:7b:83:38:ae:1b:0d:d0: 46:3b:91:43:d2:5e:8a:cc:f1:7f:ca:00:76:b3:57:af:ca:32: 52:a6:46:ab:cd:e3:ed:8e:2c:95:a7:2f:89:d2:fa:19:b6:39: 51:82:50:c2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtO8eY39tpZIEQ2GUP24ZIQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIwODIwZjc5NjQ4MWFjMGU5NjM3Yzk2MjQxNDU5N2IxZmUy MjdjMjQwHhcNMjUxMjI0MDYwMDM0WhcNMjUxMjI1MDYwMDM0WjAzMTEwLwYDVQQD Eyg0MDZjYWFlZTdiOTM3NjRjMjBmNTEyZGI3ZDk3Y2IzMmY5ZmFhNjg3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxnT+ORCjv/ckuq98aJqAj6R/B+U2 mhAntM5mJ0tJEPFJdMxGXMYqMS290aVztMzw9V49mXuNjImcvbpqo/25oP3ou7OT PiV3CelV3ogEvo4PMfsuye5p/YwL9nY8hgplsG+y2kDFu24jsGdLq9yXHC67wLLf 3/knU5z2Eb1tF6p/gwk1QbN4DE7dOzRrTx72tZwmf+W9BgqwVKmQLu2wma+7/N2K z8Ho8DivnTVTlCAM+vJ2lPvhX8WhpvRluZQrXYylDHkucpP/23TpAJEWHGtiZcG9 nBxfvnAwa0naLSTmVFPi5uITRCrUm2sbMuHAAvhgAk4E4EV2+QRYUfTVvQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEBsqu57k3ZMIPUS232XyzL5+qaHMB8GA1UdIwQY MBaAFCCCD3lkgawOljfJYkFFl7H+InwkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSUlJUGVXU0JyQTZXTjhsaVFVV1hzZjRpZkNRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZi9iOThiOWYtYjU4MS00ZTNlLWFlOGEt OTg3ZDg2OTU2NmY2LzEvSUlJUGVXU0JyQTZXTjhsaVFVV1hzZjRpZkNRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZi9iOThiOWYtYjU4MS00ZTNlLWFlOGEtOTg3ZDg2OTU2NmY2 LzEvSUlJUGVXU0JyQTZXTjhsaVFVV1hzZjRpZkNRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUgrhpwbU H9VCFfT/itlonq6G1aShs52/SvifxdKzd3dgwooJSd5rHEV9o2tzO5ngvYVgggmS L7haoZzuoht0j6MrkALh3KFcYJKSKk/AaNt75NQW/DTUeoQ3sWqD8MIT7riN0TpY ZU1k1jklgCFgZt48PEEcPClemhDFRr8PVq6T1dBg5G87b/8lrMNJdtz2t1esPj5j jNDjOroloc0dWjnIyBCecu6/IApYsDGtfjCimIQDQnCu4LpPtwjyKu6PlwRIOTS7 IGYw1jdzyCG7bWN7gziuGw3QRjuRQ9Jeiszxf8oAdrNXr8oyUqZGq83j7Y4slacv idL6GbY5UYJQwg== -----END CERTIFICATE-----Generated at Wed Dec 24 11:57:31 2025 by rpki-client