This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/a92eb2-b2ba-4efd-bd09-6abb1ccb6153/1/k--iv5CiNyiFJyfxJu3mUobDymc.mft File: k--iv5CiNyiFJyfxJu3mUobDymc.mft (raw, json) Hash identifier: Uo23ak8/Z9DY9ikr1TopeKzBsL3XrlQm6hMcBOLKzdo= Subject key identifier: AE:28:7C:B4:7A:12:B1:2F:F0:A5:C4:91:66:FE:BF:F1:7A:53:F2:B3 Authority key identifier: 93:EF:A2:BF:90:A2:37:28:85:27:27:F1:26:ED:E6:52:86:C3:CA:67 Certificate issuer: /CN=93efa2bf90a23728852727f126ede65286c3ca67 Certificate serial: 019B3DFEBA96E058DE0906C3529995FFC08E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k--iv5CiNyiFJyfxJu3mUobDymc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/a92eb2-b2ba-4efd-bd09-6abb1ccb6153/1/k--iv5CiNyiFJyfxJu3mUobDymc.mft Manifest number: 0555 Signing time: Sat 20 Dec 2025 23:01:02 +0000 Manifest this update: Sat 20 Dec 2025 23:01:02 +0000 Manifest next update: Sun 21 Dec 2025 23:01:02 +0000 Files and hashes: 1: 4s48aLOiVD4PAJlQi3evZjtsYHM.roa (hash: +jROjw0Y1Zl0VbxjrP2tZzucpLOm1pI3G+f+iJEafys=) 2: NfNAqOER9wuwQxKBNjji8NI0Rzg.roa (hash: 2u3dViZZEapET44foaIhQWMMbpM15mq1lfjKgtwOpEg=) 3: ZBxfDXEpCG0ayZxuToVasoI1ik8.roa (hash: B1VklKE9rrrVpqvXpbmoyfKWWVu36iKetX1MZELROAo=) 4: k--iv5CiNyiFJyfxJu3mUobDymc.crl (hash: fco/XAqU297bq5BrViMbKRbetEKX5CHjmsreFTRWpkM=) 5: qxvHfNjR31d0glTSIY-mgfrIS_A.roa (hash: xq+U0zDak1nk6R/C5yECXTx597LdOEIOL8DRV04FkGM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/a92eb2-b2ba-4efd-bd09-6abb1ccb6153/1/k--iv5CiNyiFJyfxJu3mUobDymc.crl rsync://rpki.ripe.net/repository/DEFAULT/f2/a92eb2-b2ba-4efd-bd09-6abb1ccb6153/1/k--iv5CiNyiFJyfxJu3mUobDymc.mft rsync://rpki.ripe.net/repository/DEFAULT/k--iv5CiNyiFJyfxJu3mUobDymc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:fe:ba:96:e0:58:de:09:06:c3:52:99:95:ff:c0:8e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=93efa2bf90a23728852727f126ede65286c3ca67 Validity Not Before: Dec 20 23:01:02 2025 GMT Not After : Dec 21 23:01:02 2025 GMT Subject: CN=ae287cb47a12b12ff0a5c49166febff17a53f2b3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:90:67:7a:fe:ad:c0:d6:e3:5f:93:e2:0b:b8: 5b:d7:dd:5e:c7:7c:94:c4:aa:98:5c:55:c3:7e:ef: 7a:87:3a:9d:f3:05:f8:29:6f:10:a9:e4:c7:ce:89: 2c:0f:0e:6a:5b:6b:b5:5b:10:1e:ea:39:a2:a9:0e: 1d:64:28:38:d9:92:ab:1c:ae:67:83:ce:b1:70:2c: 3c:e6:e9:dd:89:cd:05:06:2d:0c:2b:a4:eb:f5:20: 9e:d1:38:c2:24:47:85:73:dd:d8:bb:9b:3d:ca:75: 33:b1:a9:63:b6:cc:b4:7c:6e:d3:42:61:4b:6c:4e: 25:13:b6:52:3f:bb:5a:ea:86:7c:62:90:5e:81:c1: 27:9e:df:97:5b:9e:6f:56:8b:2f:72:d9:88:a7:cf: aa:c7:08:68:07:6b:04:c7:b4:8e:e8:58:05:de:b7: 64:87:fb:95:5b:e3:8c:f1:2e:70:be:f7:c8:9f:85: c2:04:7b:27:8f:7d:49:9f:41:14:7b:28:b1:79:b5: 2b:c0:20:44:e1:db:8b:6f:53:43:62:64:fa:39:58: 41:b9:34:53:2e:60:e3:4e:d2:fe:b3:91:2d:9a:a1: 0b:72:58:e3:13:7c:bf:ac:b4:33:22:cf:33:79:7c: c9:7b:de:17:e2:91:d6:c2:07:ba:68:a4:53:cf:44: 54:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:28:7C:B4:7A:12:B1:2F:F0:A5:C4:91:66:FE:BF:F1:7A:53:F2:B3 X509v3 Authority Key Identifier: keyid:93:EF:A2:BF:90:A2:37:28:85:27:27:F1:26:ED:E6:52:86:C3:CA:67 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k--iv5CiNyiFJyfxJu3mUobDymc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/a92eb2-b2ba-4efd-bd09-6abb1ccb6153/1/k--iv5CiNyiFJyfxJu3mUobDymc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/a92eb2-b2ba-4efd-bd09-6abb1ccb6153/1/k--iv5CiNyiFJyfxJu3mUobDymc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5c:89:72:fd:1c:e6:1e:c6:d7:a6:f9:ec:ae:f4:2d:88:17:38: 9e:ad:a3:7f:dc:44:76:b5:46:f2:df:98:df:e5:00:96:08:f7: 58:7a:4e:cc:30:25:6d:33:e7:18:d4:87:a3:80:47:0f:c7:5b: 55:4f:21:eb:ee:48:8e:55:1e:fb:76:76:bd:65:aa:4c:fa:9f: 1f:06:71:5f:4c:d8:e2:bc:93:ab:52:19:bf:14:44:15:0b:5f: f2:e6:4f:55:28:49:85:ad:40:3f:c8:ff:8a:7a:e6:76:47:b7: ed:51:59:cf:a5:3d:47:44:29:d6:46:96:a5:c2:7c:90:83:d3: 0f:c4:e8:08:bb:3c:d7:73:fd:ef:ca:04:57:b5:28:53:79:9e: 2d:9f:29:80:b1:96:47:73:d9:70:a1:bd:60:4a:38:d1:d7:3a: 17:a7:78:19:3f:00:1b:e9:40:f9:5a:b1:5b:c3:8f:0a:49:73: 69:47:31:90:b0:47:5f:96:5f:0a:45:a5:d0:88:f8:b1:e3:3a: 6f:c5:7d:a8:b0:c7:1b:37:ee:9e:5f:5c:a5:36:ef:87:8a:6a: 40:d4:e2:e3:a0:73:b4:76:23:dd:36:9a:f5:4b:b3:cb:42:82: bc:12:f9:16:3f:20:dc:64:c0:ea:f7:c3:04:b6:1f:4c:4f:27: dd:43:ed:39 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9/rqW4FjeCQbDUpmV/8COMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkzZWZhMmJmOTBhMjM3Mjg4NTI3MjdmMTI2ZWRlNjUyODZj M2NhNjcwHhcNMjUxMjIwMjMwMTAyWhcNMjUxMjIxMjMwMTAyWjAzMTEwLwYDVQQD EyhhZTI4N2NiNDdhMTJiMTJmZjBhNWM0OTE2NmZlYmZmMTdhNTNmMmIzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqJBnev6twNbjX5PiC7hb191ex3yU xKqYXFXDfu96hzqd8wX4KW8QqeTHzoksDw5qW2u1WxAe6jmiqQ4dZCg42ZKrHK5n g86xcCw85undic0FBi0MK6Tr9SCe0TjCJEeFc93Yu5s9ynUzsaljtsy0fG7TQmFL bE4lE7ZSP7ta6oZ8YpBegcEnnt+XW55vVosvctmIp8+qxwhoB2sEx7SO6FgF3rdk h/uVW+OM8S5wvvfIn4XCBHsnj31Jn0EUeyixebUrwCBE4duLb1NDYmT6OVhBuTRT LmDjTtL+s5EtmqELcljjE3y/rLQzIs8zeXzJe94X4pHWwge6aKRTz0RUCwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFK4ofLR6ErEv8KXEkWb+v/F6U/KzMB8GA1UdIwQY MBaAFJPvor+QojcohScn8Sbt5lKGw8pnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvay0taXY1Q2lOeWlGSnlmeEp1M21Vb2JEeW1jLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMi9hOTJlYjItYjJiYS00ZWZkLWJkMDkt NmFiYjFjY2I2MTUzLzEvay0taXY1Q2lOeWlGSnlmeEp1M21Vb2JEeW1jLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMi9hOTJlYjItYjJiYS00ZWZkLWJkMDktNmFiYjFjY2I2MTUz LzEvay0taXY1Q2lOeWlGSnlmeEp1M21Vb2JEeW1jLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXIly/Rzm HsbXpvnsrvQtiBc4nq2jf9xEdrVG8t+Y3+UAlgj3WHpOzDAlbTPnGNSHo4BHD8db VU8h6+5IjlUe+3Z2vWWqTPqfHwZxX0zY4ryTq1IZvxREFQtf8uZPVShJha1AP8j/ inrmdke37VFZz6U9R0Qp1kaWpcJ8kIPTD8ToCLs813P978oEV7UoU3meLZ8pgLGW R3PZcKG9YEo40dc6F6d4GT8AG+lA+VqxW8OPCklzaUcxkLBHX5ZfCkWl0Ij4seM6 b8V9qLDHGzfunl9cpTbvh4pqQNTi46BztHYj3Taa9Uuzy0KCvBL5Fj8g3GTA6vfD BLYfTE8n3UPtOQ== -----END CERTIFICATE-----Generated at Sun Dec 21 00:55:14 2025 by rpki-client