This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/129a5b-b7f6-49d0-95c2-12f9cb0a2118/1/iDa9j605PlExoCNykxWzVgFOZjc.mft File: iDa9j605PlExoCNykxWzVgFOZjc.mft (raw, json) Hash identifier: 2uPGmnwGCo6KqrXHKYbHxpVXc4NyQgdYKMZb7brTNOE= Subject key identifier: A9:0F:95:C3:2A:54:4B:5C:7E:2E:FF:61:C9:EA:D6:E6:FE:E1:47:94 Authority key identifier: 88:36:BD:8F:AD:39:3E:51:31:A0:23:72:93:15:B3:56:01:4E:66:37 Certificate issuer: /CN=8836bd8fad393e5131a023729315b356014e6637 Certificate serial: 019B71B58DB8DA6EA7E4B3DAA08C3F9C04A9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iDa9j605PlExoCNykxWzVgFOZjc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/129a5b-b7f6-49d0-95c2-12f9cb0a2118/1/iDa9j605PlExoCNykxWzVgFOZjc.mft Manifest number: 17A3 Signing time: Wed 31 Dec 2025 00:01:22 +0000 Manifest this update: Wed 31 Dec 2025 00:01:22 +0000 Manifest next update: Thu 01 Jan 2026 00:01:22 +0000 Files and hashes: 1: UKX34TFCd0figIbF32wm6M0tdxE.roa (hash: BFLvjvBRECITaOdgL/U7OU6npGQVInzdalw4vhrK37A=) 2: iDa9j605PlExoCNykxWzVgFOZjc.crl (hash: 79xVK3jvCXN2F6fEBjJJSpWwmPQZppqdOEV2nDCdT2A=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/129a5b-b7f6-49d0-95c2-12f9cb0a2118/1/iDa9j605PlExoCNykxWzVgFOZjc.crl rsync://rpki.ripe.net/repository/DEFAULT/fb/129a5b-b7f6-49d0-95c2-12f9cb0a2118/1/iDa9j605PlExoCNykxWzVgFOZjc.mft rsync://rpki.ripe.net/repository/DEFAULT/iDa9j605PlExoCNykxWzVgFOZjc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 31 Dec 2025 23:41:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:71:b5:8d:b8:da:6e:a7:e4:b3:da:a0:8c:3f:9c:04:a9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8836bd8fad393e5131a023729315b356014e6637 Validity Not Before: Dec 31 00:01:22 2025 GMT Not After : Jan 1 00:01:22 2026 GMT Subject: CN=a90f95c32a544b5c7e2eff61c9ead6e6fee14794 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:c4:9b:59:ad:20:a3:6c:3e:c4:bc:c2:c3:d6: aa:fb:fa:13:35:10:0f:6d:00:b7:46:f8:02:4c:a9: 19:19:a0:40:0e:1a:27:ec:f7:ae:c9:44:1d:10:92: ca:f7:34:5f:8c:b6:9f:ea:fb:da:71:fe:10:ce:d6: b7:95:0e:9c:47:99:dd:a8:b4:b1:0f:60:07:09:99: 0d:8e:ae:af:f1:17:b7:09:6f:5d:74:8f:01:31:c4: 89:ad:75:5e:e8:1b:ad:d8:8d:e4:a8:e6:f6:f3:30: 7b:5b:50:35:3e:a5:2d:bc:fa:11:c6:d4:a0:8e:40: 45:82:da:bf:75:94:42:79:43:7a:70:6c:54:75:64: 01:48:ff:6a:88:12:cd:a6:6a:97:db:a3:be:dd:a7: 65:2f:b4:ec:c1:f3:78:7d:a5:c5:bb:57:7e:a9:32: 2f:e1:80:09:c2:3a:72:8c:1d:12:ad:ca:a5:fc:05: dc:b4:8b:98:cf:9f:3e:cf:4c:01:13:3b:9b:c9:9c: c6:3b:a5:c6:17:10:d4:75:75:27:44:77:0a:b1:1b: da:2f:57:d5:af:b0:25:bb:d5:dd:e2:07:1f:0e:51: 74:ab:6f:f7:1e:f1:d3:08:2f:cd:2a:c8:40:9a:e1: f1:8e:e6:22:d8:77:ab:df:4e:cf:00:e0:0a:57:86: 58:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:0F:95:C3:2A:54:4B:5C:7E:2E:FF:61:C9:EA:D6:E6:FE:E1:47:94 X509v3 Authority Key Identifier: keyid:88:36:BD:8F:AD:39:3E:51:31:A0:23:72:93:15:B3:56:01:4E:66:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iDa9j605PlExoCNykxWzVgFOZjc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/129a5b-b7f6-49d0-95c2-12f9cb0a2118/1/iDa9j605PlExoCNykxWzVgFOZjc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/129a5b-b7f6-49d0-95c2-12f9cb0a2118/1/iDa9j605PlExoCNykxWzVgFOZjc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 62:c8:5e:7f:db:2b:a2:26:19:df:e4:28:ca:c9:c2:cb:ec:a5: 9b:d7:51:14:d1:c2:40:9d:cf:ef:f0:a1:fd:12:f7:05:2e:80: fa:0f:e8:b0:2e:c5:11:f3:f8:09:cb:9e:e8:e7:36:3d:c4:a4: 4f:f3:a1:5b:30:80:64:8c:ae:55:d6:4a:02:45:6e:b7:e4:09: 79:bb:c0:37:d2:3b:87:18:8a:ac:49:29:7d:e6:7e:e0:d8:35: 6c:fd:a4:6b:81:57:c9:69:52:01:c2:46:91:ed:b9:78:b3:ce: 93:27:23:5c:6a:b4:7a:38:8b:00:24:44:f6:ac:86:dd:95:e9: b0:fa:0d:6e:99:8d:54:e8:1c:1f:d3:81:1d:b9:3c:c4:36:cf: 98:2d:6c:e8:6f:d8:9c:c9:87:31:1f:04:0c:9c:a9:0c:fd:46: e7:b8:72:9a:f1:2f:a9:2a:a6:0f:de:9b:a4:60:14:12:28:e1: 6a:a5:34:d7:d4:1b:2a:bd:25:a7:af:fe:79:09:0b:eb:85:e7: d6:d4:8b:b4:26:ee:ad:d9:5e:f9:13:75:c8:84:e9:48:1a:62: 7c:84:62:ee:b2:1f:53:6b:e6:bd:a4:f1:a1:b7:f2:d2:b4:e3: 63:9e:aa:30:03:ab:3a:96:ed:c4:6b:f2:ea:cc:de:35:af:e1: 7e:a7:34:12 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtxtY242m6n5LPaoIw/nASpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg4MzZiZDhmYWQzOTNlNTEzMWEwMjM3MjkzMTViMzU2MDE0 ZTY2MzcwHhcNMjUxMjMxMDAwMTIyWhcNMjYwMTAxMDAwMTIyWjAzMTEwLwYDVQQD EyhhOTBmOTVjMzJhNTQ0YjVjN2UyZWZmNjFjOWVhZDZlNmZlZTE0Nzk0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxMSbWa0go2w+xLzCw9aq+/oTNRAP bQC3RvgCTKkZGaBADhon7PeuyUQdEJLK9zRfjLaf6vvacf4Qzta3lQ6cR5ndqLSx D2AHCZkNjq6v8Re3CW9ddI8BMcSJrXVe6But2I3kqOb28zB7W1A1PqUtvPoRxtSg jkBFgtq/dZRCeUN6cGxUdWQBSP9qiBLNpmqX26O+3adlL7TswfN4faXFu1d+qTIv 4YAJwjpyjB0Srcql/AXctIuYz58+z0wBEzubyZzGO6XGFxDUdXUnRHcKsRvaL1fV r7Alu9Xd4gcfDlF0q2/3HvHTCC/NKshAmuHxjuYi2Her307PAOAKV4ZYbQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKkPlcMqVEtcfi7/Ycnq1ub+4UeUMB8GA1UdIwQY MBaAFIg2vY+tOT5RMaAjcpMVs1YBTmY3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaURhOWo2MDVQbEV4b0NOeWt4V3pWZ0ZPWmpjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYi8xMjlhNWItYjdmNi00OWQwLTk1YzIt MTJmOWNiMGEyMTE4LzEvaURhOWo2MDVQbEV4b0NOeWt4V3pWZ0ZPWmpjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYi8xMjlhNWItYjdmNi00OWQwLTk1YzItMTJmOWNiMGEyMTE4 LzEvaURhOWo2MDVQbEV4b0NOeWt4V3pWZ0ZPWmpjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYshef9sr oiYZ3+QoysnCy+ylm9dRFNHCQJ3P7/Ch/RL3BS6A+g/osC7FEfP4Ccue6Oc2PcSk T/OhWzCAZIyuVdZKAkVut+QJebvAN9I7hxiKrEkpfeZ+4Ng1bP2ka4FXyWlSAcJG ke25eLPOkycjXGq0ejiLACRE9qyG3ZXpsPoNbpmNVOgcH9OBHbk8xDbPmC1s6G/Y nMmHMR8EDJypDP1G57hymvEvqSqmD96bpGAUEijhaqU019QbKr0lp6/+eQkL64Xn 1tSLtCburdle+RN1yITpSBpifIRi7rIfU2vmvaTxobfy0rTjY56qMAOrOpbtxGvy 6szeNa/hfqc0Eg== -----END CERTIFICATE-----Generated at Wed Dec 31 05:07:04 2025 by rpki-client