This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/07b7f7-c41d-4917-b978-ef2d53b5a34d/1/iEteFkkLmmjQn7y0VXQ1AAAUmvo.mft File: iEteFkkLmmjQn7y0VXQ1AAAUmvo.mft (raw, json) Hash identifier: APjzjKhP8nBgh8C8RfG1zzi0AbN1ajoQJSwWxiYDI7c= Subject key identifier: 1F:3C:CD:6D:B0:11:53:7E:D7:4D:F9:2B:99:40:9B:7F:50:C7:85:13 Authority key identifier: 88:4B:5E:16:49:0B:9A:68:D0:9F:BC:B4:55:74:35:00:00:14:9A:FA Certificate issuer: /CN=884b5e16490b9a68d09fbcb45574350000149afa Certificate serial: 019B4A046E0B75300BD62737D6C2185F957E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iEteFkkLmmjQn7y0VXQ1AAAUmvo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/07b7f7-c41d-4917-b978-ef2d53b5a34d/1/iEteFkkLmmjQn7y0VXQ1AAAUmvo.mft Manifest number: 178D Signing time: Tue 23 Dec 2025 07:02:42 +0000 Manifest this update: Tue 23 Dec 2025 07:02:42 +0000 Manifest next update: Wed 24 Dec 2025 07:02:42 +0000 Files and hashes: 1: EFku_9VXqbesZmjqxLjBcuB7CJQ.roa (hash: NldkodBx9XHI5VbEYIs7dZXK6yR3WU54I+HEv9PZwY0=) 2: iEteFkkLmmjQn7y0VXQ1AAAUmvo.crl (hash: NpcY5fzb9NB9GnGuqhTB00guBON3wcsOFnvwGeU+7Bg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/07b7f7-c41d-4917-b978-ef2d53b5a34d/1/iEteFkkLmmjQn7y0VXQ1AAAUmvo.crl rsync://rpki.ripe.net/repository/DEFAULT/fa/07b7f7-c41d-4917-b978-ef2d53b5a34d/1/iEteFkkLmmjQn7y0VXQ1AAAUmvo.mft rsync://rpki.ripe.net/repository/DEFAULT/iEteFkkLmmjQn7y0VXQ1AAAUmvo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 24 Dec 2025 07:02:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4a:04:6e:0b:75:30:0b:d6:27:37:d6:c2:18:5f:95:7e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=884b5e16490b9a68d09fbcb45574350000149afa Validity Not Before: Dec 23 07:02:42 2025 GMT Not After : Dec 24 07:02:42 2025 GMT Subject: CN=1f3ccd6db011537ed74df92b99409b7f50c78513 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:a3:64:31:0d:b2:84:0b:df:cb:84:e2:92:00: 1a:cb:40:12:68:50:ae:17:bb:17:94:67:22:c8:3b: d0:5d:34:a6:bc:75:80:38:4b:09:6a:84:05:73:0c: dd:88:81:c3:9d:38:17:8f:e2:ff:d7:82:7b:e7:25: 80:50:cd:79:7f:26:fa:ea:bf:ea:5f:a2:11:5a:f4: 29:ae:8e:83:bc:fe:c3:7a:55:4f:d6:78:cb:db:d2: 72:65:33:fa:5e:88:55:f3:73:ee:af:3c:16:78:52: 36:c3:11:4a:e1:f5:f5:ad:a1:51:08:a2:21:de:b3: a3:b3:56:8b:8b:53:35:d2:2a:e1:05:79:44:3b:a3: 03:ac:db:41:08:42:9c:2d:ae:3e:01:56:c9:b1:af: 93:e8:4e:2e:ed:1c:52:79:a7:1e:22:3c:ff:c9:91: e8:42:71:36:9a:3c:8d:a5:aa:41:df:e9:f8:09:f1: 6d:c4:92:74:8e:74:8d:3b:51:1e:9f:88:7e:95:fa: 67:3a:69:a0:81:57:cc:6c:bc:f6:32:3b:fc:f8:a2: 09:f2:c0:b9:6c:18:48:e1:d6:3c:92:3b:25:72:71: b5:f8:68:45:c6:b8:74:c6:92:c5:46:10:ec:86:c8: b6:da:de:99:84:e2:bc:a3:dd:0a:14:37:4c:2c:e5: 8f:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:3C:CD:6D:B0:11:53:7E:D7:4D:F9:2B:99:40:9B:7F:50:C7:85:13 X509v3 Authority Key Identifier: keyid:88:4B:5E:16:49:0B:9A:68:D0:9F:BC:B4:55:74:35:00:00:14:9A:FA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iEteFkkLmmjQn7y0VXQ1AAAUmvo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/07b7f7-c41d-4917-b978-ef2d53b5a34d/1/iEteFkkLmmjQn7y0VXQ1AAAUmvo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/07b7f7-c41d-4917-b978-ef2d53b5a34d/1/iEteFkkLmmjQn7y0VXQ1AAAUmvo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 22:af:90:c7:3e:4b:8d:95:bf:86:de:bd:4e:83:9b:5e:00:f5: 0d:f1:ca:f1:be:bf:d1:0e:16:5b:5b:f9:52:83:fe:dc:f6:29: 0c:79:c4:2f:08:21:0f:ea:96:a5:da:6e:a7:87:18:bb:a7:d7: 1f:3c:3e:b2:0d:98:7f:76:81:cb:a3:a8:0d:72:c2:b8:9d:bc: 6f:b8:d7:c9:a2:d9:1e:6a:86:48:38:23:54:02:59:58:82:0f: 6a:f7:56:70:ba:67:c4:b0:9f:23:c5:e2:bf:a3:f4:3f:bf:ed: 25:a9:90:a8:fb:30:af:af:72:6c:55:81:46:a6:43:c5:36:a3: d6:df:7e:29:7b:3a:0b:b0:57:70:61:50:35:57:f6:db:d2:f7: a0:f8:77:66:4f:1f:c4:6d:3f:0b:7d:6c:6b:ab:00:e2:3e:a1: ad:a6:c5:06:aa:e1:c4:5e:c7:c0:b8:68:1a:69:ce:e0:3b:ed: fe:65:c9:89:26:64:d1:88:ce:94:0a:bc:28:c8:04:37:74:f0: 73:94:28:9e:70:7a:a1:7f:93:38:4e:66:0d:53:43:2b:17:16: c3:0b:13:6d:1a:8d:e5:a0:79:ac:d7:d7:8c:f0:c0:19:84:2f: e4:41:28:82:52:1a:5b:58:dd:0b:69:b1:c2:95:5b:52:0d:8c: dd:c4:9f:22 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtKBG4LdTAL1ic31sIYX5V+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg4NGI1ZTE2NDkwYjlhNjhkMDlmYmNiNDU1NzQzNTAwMDAx NDlhZmEwHhcNMjUxMjIzMDcwMjQyWhcNMjUxMjI0MDcwMjQyWjAzMTEwLwYDVQQD EygxZjNjY2Q2ZGIwMTE1MzdlZDc0ZGY5MmI5OTQwOWI3ZjUwYzc4NTEzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzKNkMQ2yhAvfy4TikgAay0ASaFCu F7sXlGciyDvQXTSmvHWAOEsJaoQFcwzdiIHDnTgXj+L/14J75yWAUM15fyb66r/q X6IRWvQpro6DvP7DelVP1njL29JyZTP6XohV83PurzwWeFI2wxFK4fX1raFRCKIh 3rOjs1aLi1M10irhBXlEO6MDrNtBCEKcLa4+AVbJsa+T6E4u7RxSeaceIjz/yZHo QnE2mjyNpapB3+n4CfFtxJJ0jnSNO1Een4h+lfpnOmmggVfMbLz2Mjv8+KIJ8sC5 bBhI4dY8kjslcnG1+GhFxrh0xpLFRhDshsi22t6ZhOK8o90KFDdMLOWPhwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFB88zW2wEVN+1035K5lAm39Qx4UTMB8GA1UdIwQY MBaAFIhLXhZJC5po0J+8tFV0NQAAFJr6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaUV0ZUZra0xtbWpRbjd5MFZYUTFBQUFVbXZvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS8wN2I3ZjctYzQxZC00OTE3LWI5Nzgt ZWYyZDUzYjVhMzRkLzEvaUV0ZUZra0xtbWpRbjd5MFZYUTFBQUFVbXZvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYS8wN2I3ZjctYzQxZC00OTE3LWI5NzgtZWYyZDUzYjVhMzRk LzEvaUV0ZUZra0xtbWpRbjd5MFZYUTFBQUFVbXZvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIq+Qxz5L jZW/ht69ToObXgD1DfHK8b6/0Q4WW1v5UoP+3PYpDHnELwghD+qWpdpup4cYu6fX Hzw+sg2Yf3aBy6OoDXLCuJ28b7jXyaLZHmqGSDgjVAJZWIIPavdWcLpnxLCfI8Xi v6P0P7/tJamQqPswr69ybFWBRqZDxTaj1t9+KXs6C7BXcGFQNVf229L3oPh3Zk8f xG0/C31sa6sA4j6hrabFBqrhxF7HwLhoGmnO4Dvt/mXJiSZk0YjOlAq8KMgEN3Tw c5QonnB6oX+TOE5mDVNDKxcWwwsTbRqN5aB5rNfXjPDAGYQv5EEoglIaW1jdC2mx wpVbUg2M3cSfIg== -----END CERTIFICATE-----Generated at Tue Dec 23 11:39:05 2025 by rpki-client