This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/eb4fc7-b414-4798-b756-1a0e5048632a/1/ikisPvcnnA9rw5CPJ-2wkbWmWsU.mft File: ikisPvcnnA9rw5CPJ-2wkbWmWsU.mft (raw, json) Hash identifier: tvFEPmsp0KN4EPrr3goTuU5oF/i3PFj2p0pFkotda3c= Subject key identifier: 41:75:C6:7B:2C:AE:75:10:41:7A:57:7E:DF:64:56:E4:33:42:CB:26 Authority key identifier: 8A:48:AC:3E:F7:27:9C:0F:6B:C3:90:8F:27:ED:B0:91:B5:A6:5A:C5 Certificate issuer: /CN=8a48ac3ef7279c0f6bc3908f27edb091b5a65ac5 Certificate serial: 019B3C7DF1C34B03FF2AB9371D1780C89D74 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ikisPvcnnA9rw5CPJ-2wkbWmWsU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/eb4fc7-b414-4798-b756-1a0e5048632a/1/ikisPvcnnA9rw5CPJ-2wkbWmWsU.mft Manifest number: 1788 Signing time: Sat 20 Dec 2025 16:00:45 +0000 Manifest this update: Sat 20 Dec 2025 16:00:45 +0000 Manifest next update: Sun 21 Dec 2025 16:00:45 +0000 Files and hashes: 1: Y5SHLkym5EnCD8MfwTIMclhP_Hk.roa (hash: 4DOa2lF9/Fyb4YOZbeBJmTOtFtNcdwU9BIHDAS+IUPA=) 2: ZyyMUpD8BracjmDLdZi2eYsV3GA.roa (hash: kndWXz3QPBLyWguASqaNYsH4u94S2FJubqWiONIhSqU=) 3: ikisPvcnnA9rw5CPJ-2wkbWmWsU.crl (hash: vnhkBGyPhmZfYWOfXIMNTk57owlVpTvG5E/CxiPIYdY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/eb4fc7-b414-4798-b756-1a0e5048632a/1/ikisPvcnnA9rw5CPJ-2wkbWmWsU.crl rsync://rpki.ripe.net/repository/DEFAULT/fb/eb4fc7-b414-4798-b756-1a0e5048632a/1/ikisPvcnnA9rw5CPJ-2wkbWmWsU.mft rsync://rpki.ripe.net/repository/DEFAULT/ikisPvcnnA9rw5CPJ-2wkbWmWsU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:7d:f1:c3:4b:03:ff:2a:b9:37:1d:17:80:c8:9d:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8a48ac3ef7279c0f6bc3908f27edb091b5a65ac5 Validity Not Before: Dec 20 16:00:45 2025 GMT Not After : Dec 21 16:00:45 2025 GMT Subject: CN=4175c67b2cae7510417a577edf6456e43342cb26 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:e1:6b:57:b1:4e:51:22:dc:64:5a:38:12:15: 4c:aa:c2:ee:96:57:97:d0:52:bd:78:c5:52:d0:e3: 4d:ca:de:58:96:2b:fa:d7:67:d7:6c:a6:9f:b5:bc: 5e:9c:fc:c2:9c:9d:32:f2:70:09:23:d3:b3:9b:c1: fb:0a:e3:ad:66:ea:65:26:92:4d:01:ae:90:59:f2: 61:8f:24:74:35:ba:41:24:8f:5b:8a:1d:a6:e9:f3: 5a:64:b7:95:44:98:b3:41:28:d0:7c:8e:96:5d:0f: e0:6e:3c:83:15:89:cf:2b:f4:b7:ce:b1:e9:f0:d4: 2f:4b:15:e1:62:77:b8:01:68:7c:24:e6:3b:ea:5a: 49:75:c8:9c:5c:4c:cc:60:fc:94:cd:71:91:be:b3: 8a:10:2a:e9:26:76:a0:87:c9:ca:7b:c5:b3:ec:77: b7:6a:e4:49:ff:5a:fc:a4:8a:3a:11:b8:a4:b1:3a: fd:84:56:e2:fc:14:5f:0c:66:0b:7b:8f:a2:2e:09: a1:c4:f0:7b:48:b6:f6:b5:68:0c:ec:95:e3:60:20: 44:fa:00:b3:ff:ea:60:49:5c:e4:04:46:39:b0:aa: 91:31:32:2b:ab:67:21:9c:13:a2:10:31:56:cf:7e: ef:cf:c0:7f:1d:61:98:80:42:88:52:9f:fd:7d:8d: 0d:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:75:C6:7B:2C:AE:75:10:41:7A:57:7E:DF:64:56:E4:33:42:CB:26 X509v3 Authority Key Identifier: keyid:8A:48:AC:3E:F7:27:9C:0F:6B:C3:90:8F:27:ED:B0:91:B5:A6:5A:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ikisPvcnnA9rw5CPJ-2wkbWmWsU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/eb4fc7-b414-4798-b756-1a0e5048632a/1/ikisPvcnnA9rw5CPJ-2wkbWmWsU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/eb4fc7-b414-4798-b756-1a0e5048632a/1/ikisPvcnnA9rw5CPJ-2wkbWmWsU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4e:ce:ae:0a:99:9c:1c:01:73:d8:47:09:93:91:6e:1c:dd:8e: 26:e0:dd:48:e6:7c:ec:9b:90:71:1a:ee:6c:e2:30:dc:60:fc: 6a:40:fe:bc:de:e4:55:98:58:76:b1:db:13:e3:77:88:0c:41: f1:97:34:bd:04:78:a6:21:1d:de:8e:5f:bd:29:7c:54:9a:1d: 25:6d:a8:d7:a9:21:78:60:03:94:65:65:d5:6f:9d:ef:79:9c: 83:50:db:43:5a:fb:c0:24:8a:f0:a8:ec:58:8d:9c:11:51:42: e4:58:00:b6:b1:a1:26:d1:78:d6:2a:3f:64:de:6a:be:15:9c: 58:9b:fb:1e:19:8d:b9:0e:07:d7:19:3d:fc:36:39:6c:39:81: 34:b1:9a:d5:22:f9:74:c7:55:0a:f1:60:66:54:8c:f1:37:e1: 42:92:81:ae:a7:9e:2f:65:82:f7:65:5f:ac:ef:b1:55:fe:ae: 37:0c:92:76:c6:be:c2:36:93:25:92:cf:6c:92:b7:48:71:49: 8d:4a:7c:18:a8:f3:c6:7c:ac:13:c3:5f:bb:c0:08:ba:f6:e3: 70:52:c2:f1:0c:a9:15:1f:61:14:37:35:a3:de:8f:f0:2e:c5: 39:f8:b9:16:17:00:b1:e8:07:71:61:55:2c:78:0a:f6:2c:d0: 75:6f:76:f1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs8ffHDSwP/Krk3HReAyJ10MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhhNDhhYzNlZjcyNzljMGY2YmMzOTA4ZjI3ZWRiMDkxYjVh NjVhYzUwHhcNMjUxMjIwMTYwMDQ1WhcNMjUxMjIxMTYwMDQ1WjAzMTEwLwYDVQQD Eyg0MTc1YzY3YjJjYWU3NTEwNDE3YTU3N2VkZjY0NTZlNDMzNDJjYjI2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1+FrV7FOUSLcZFo4EhVMqsLulleX 0FK9eMVS0ONNyt5Yliv612fXbKaftbxenPzCnJ0y8nAJI9Ozm8H7CuOtZuplJpJN Aa6QWfJhjyR0NbpBJI9bih2m6fNaZLeVRJizQSjQfI6WXQ/gbjyDFYnPK/S3zrHp 8NQvSxXhYne4AWh8JOY76lpJdcicXEzMYPyUzXGRvrOKECrpJnagh8nKe8Wz7He3 auRJ/1r8pIo6EbiksTr9hFbi/BRfDGYLe4+iLgmhxPB7SLb2tWgM7JXjYCBE+gCz /+pgSVzkBEY5sKqRMTIrq2chnBOiEDFWz37vz8B/HWGYgEKIUp/9fY0NKwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEF1xnssrnUQQXpXft9kVuQzQssmMB8GA1UdIwQY MBaAFIpIrD73J5wPa8OQjyftsJG1plrFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaWtpc1B2Y25uQTlydzVDUEotMndrYldtV3NVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYi9lYjRmYzctYjQxNC00Nzk4LWI3NTYt MWEwZTUwNDg2MzJhLzEvaWtpc1B2Y25uQTlydzVDUEotMndrYldtV3NVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYi9lYjRmYzctYjQxNC00Nzk4LWI3NTYtMWEwZTUwNDg2MzJh LzEvaWtpc1B2Y25uQTlydzVDUEotMndrYldtV3NVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATs6uCpmc HAFz2EcJk5FuHN2OJuDdSOZ87JuQcRrubOIw3GD8akD+vN7kVZhYdrHbE+N3iAxB 8Zc0vQR4piEd3o5fvSl8VJodJW2o16kheGADlGVl1W+d73mcg1DbQ1r7wCSK8Kjs WI2cEVFC5FgAtrGhJtF41io/ZN5qvhWcWJv7HhmNuQ4H1xk9/DY5bDmBNLGa1SL5 dMdVCvFgZlSM8TfhQpKBrqeeL2WC92VfrO+xVf6uNwySdsa+wjaTJZLPbJK3SHFJ jUp8GKjzxnysE8Nfu8AIuvbjcFLC8QypFR9hFDc1o96P8C7FOfi5FhcAsegHcWFV LHgK9izQdW928Q== -----END CERTIFICATE-----Generated at Sat Dec 20 23:10:02 2025 by rpki-client