This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/7e18f0-af1d-47c1-8db5-5a5233dc0ce0/1/iTr8bv5imQomky9A4VCyfu1TnEs.mft File: iTr8bv5imQomky9A4VCyfu1TnEs.mft (raw, json) Hash identifier: a4REF4S1qD6VF5o32l4aBcm5Kmx3p0Sw4cWlJlMPRog= Subject key identifier: 48:65:3C:8C:EA:AC:D6:C5:53:59:26:56:5A:F8:21:20:3D:3B:60:21 Authority key identifier: 89:3A:FC:6E:FE:62:99:0A:26:93:2F:40:E1:50:B2:7E:ED:53:9C:4B Certificate issuer: /CN=893afc6efe62990a26932f40e150b27eed539c4b Certificate serial: 019B511751FF8C259BA25AC39C4D2FBA0D64 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iTr8bv5imQomky9A4VCyfu1TnEs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/7e18f0-af1d-47c1-8db5-5a5233dc0ce0/1/iTr8bv5imQomky9A4VCyfu1TnEs.mft Manifest number: 1790 Signing time: Wed 24 Dec 2025 16:00:41 +0000 Manifest this update: Wed 24 Dec 2025 16:00:41 +0000 Manifest next update: Thu 25 Dec 2025 16:00:41 +0000 Files and hashes: 1: UvkgBounMtuI2EY4VakFPmSVVf8.roa (hash: B8b+cAv47Fq4zMohD+Ikbfg+w/maMgI605v1qgGvxbU=) 2: aMP60-6kIcycfPRX1mrnGq3rKu4.roa (hash: 3JfLcJd1nqn3CbGO/VzxfaF4cayveMgFQoD5eZc253E=) 3: iTr8bv5imQomky9A4VCyfu1TnEs.crl (hash: AcF9gbzuqPHG0wFAv0fUzmBmpxbeXyuSyL2Bevcny20=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/7e18f0-af1d-47c1-8db5-5a5233dc0ce0/1/iTr8bv5imQomky9A4VCyfu1TnEs.crl rsync://rpki.ripe.net/repository/DEFAULT/ff/7e18f0-af1d-47c1-8db5-5a5233dc0ce0/1/iTr8bv5imQomky9A4VCyfu1TnEs.mft rsync://rpki.ripe.net/repository/DEFAULT/iTr8bv5imQomky9A4VCyfu1TnEs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 16:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:51:17:51:ff:8c:25:9b:a2:5a:c3:9c:4d:2f:ba:0d:64 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=893afc6efe62990a26932f40e150b27eed539c4b Validity Not Before: Dec 24 16:00:41 2025 GMT Not After : Dec 25 16:00:41 2025 GMT Subject: CN=48653c8ceaacd6c5535926565af821203d3b6021 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:51:78:ef:cf:a3:3a:a8:dd:b2:2d:cc:1d:20: 89:2c:e8:e4:a8:9f:c9:35:6d:d0:a1:06:b4:29:a2: 10:d5:99:e6:39:e1:87:ff:4f:08:89:7a:e3:b6:02: cb:c0:ae:34:7c:c9:71:7a:40:47:7e:e0:e0:02:98: 5b:e2:e9:37:d6:f5:f0:19:80:fd:87:f8:52:64:66: 87:57:9d:36:f6:72:69:8a:d2:8b:f2:20:3f:ef:c3: 0e:81:7a:37:b3:70:0b:d4:7b:29:bd:24:2b:50:30: a5:5b:ef:bb:1c:c7:5e:58:74:d4:97:74:2b:63:f7: 49:46:ad:91:8f:4c:d3:09:5b:f9:10:67:c7:04:49: 2a:e1:3f:86:b1:b5:18:1c:c5:82:7c:91:b7:03:ca: ce:3c:0b:09:30:91:4a:9e:61:f2:dc:2a:45:22:ee: f3:d4:e5:51:c1:0f:c3:e8:34:c1:83:91:f4:5a:a4: bd:4c:5d:1a:50:9e:a7:a3:47:fb:ea:1c:89:a3:01: 20:37:be:05:d4:15:df:d0:ac:ab:31:e8:b5:5a:c4: e2:a6:51:8f:1f:50:38:21:41:87:a9:00:59:01:42: e9:23:bc:87:30:d6:46:88:ea:9b:b1:00:f2:dc:07: 1e:22:59:e5:7e:f2:c6:0e:d7:87:f6:d7:06:c7:ca: 3a:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:65:3C:8C:EA:AC:D6:C5:53:59:26:56:5A:F8:21:20:3D:3B:60:21 X509v3 Authority Key Identifier: keyid:89:3A:FC:6E:FE:62:99:0A:26:93:2F:40:E1:50:B2:7E:ED:53:9C:4B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iTr8bv5imQomky9A4VCyfu1TnEs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/7e18f0-af1d-47c1-8db5-5a5233dc0ce0/1/iTr8bv5imQomky9A4VCyfu1TnEs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/7e18f0-af1d-47c1-8db5-5a5233dc0ce0/1/iTr8bv5imQomky9A4VCyfu1TnEs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 02:5a:30:9b:e7:20:d2:3e:49:81:7c:ee:2b:f3:a8:95:d7:82: ab:3e:57:b3:8f:e1:44:d2:00:4f:26:21:d0:17:94:ca:90:b1: 1c:ad:73:61:f6:fd:f0:cb:31:af:b7:8c:8a:f5:a5:bf:e4:cf: 97:a3:5c:5e:2f:06:b6:da:71:ec:2a:23:50:a8:82:73:72:54: 4f:ed:19:aa:d3:fc:68:9f:48:00:f9:55:e8:d5:cc:1e:e0:32: 09:6d:be:37:25:72:63:12:b4:61:a3:e6:75:ab:48:04:02:ec: 33:07:f6:ec:62:8d:2a:f9:a3:32:f1:a1:83:f1:0a:11:2c:b7: 74:41:a9:22:85:d5:9b:87:ca:27:5f:64:99:44:19:8e:81:3d: fa:7d:92:e8:cf:12:e3:51:85:0b:38:8a:25:81:f9:0f:60:c5: 06:92:e8:62:0e:5f:30:4c:0b:56:be:40:98:f9:ce:6e:24:13: 9a:fb:b6:e7:0a:9b:0c:0f:82:32:55:f0:c5:43:d0:bc:a6:c3: 99:fd:8e:b3:e1:5f:55:29:33:89:16:8f:43:f7:42:5f:55:37: 62:82:c7:d5:a4:f1:00:f2:18:71:16:26:96:df:eb:e4:63:2c: 80:73:19:65:b7:50:b9:81:3d:9f:40:2b:c0:fd:63:f4:e1:90: dd:9a:17:fa -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtRF1H/jCWbolrDnE0vug1kMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg5M2FmYzZlZmU2Mjk5MGEyNjkzMmY0MGUxNTBiMjdlZWQ1 MzljNGIwHhcNMjUxMjI0MTYwMDQxWhcNMjUxMjI1MTYwMDQxWjAzMTEwLwYDVQQD Eyg0ODY1M2M4Y2VhYWNkNmM1NTM1OTI2NTY1YWY4MjEyMDNkM2I2MDIxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnlF478+jOqjdsi3MHSCJLOjkqJ/J NW3QoQa0KaIQ1ZnmOeGH/08IiXrjtgLLwK40fMlxekBHfuDgAphb4uk31vXwGYD9 h/hSZGaHV5029nJpitKL8iA/78MOgXo3s3AL1HspvSQrUDClW++7HMdeWHTUl3Qr Y/dJRq2Rj0zTCVv5EGfHBEkq4T+GsbUYHMWCfJG3A8rOPAsJMJFKnmHy3CpFIu7z 1OVRwQ/D6DTBg5H0WqS9TF0aUJ6no0f76hyJowEgN74F1BXf0KyrMei1WsTiplGP H1A4IUGHqQBZAULpI7yHMNZGiOqbsQDy3AceIlnlfvLGDteH9tcGx8o6CwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEhlPIzqrNbFU1kmVlr4ISA9O2AhMB8GA1UdIwQY MBaAFIk6/G7+YpkKJpMvQOFQsn7tU5xLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaVRyOGJ2NWltUW9ta3k5QTRWQ3lmdTFUbkVzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZi83ZTE4ZjAtYWYxZC00N2MxLThkYjUt NWE1MjMzZGMwY2UwLzEvaVRyOGJ2NWltUW9ta3k5QTRWQ3lmdTFUbkVzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZi83ZTE4ZjAtYWYxZC00N2MxLThkYjUtNWE1MjMzZGMwY2Uw LzEvaVRyOGJ2NWltUW9ta3k5QTRWQ3lmdTFUbkVzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAlowm+cg 0j5JgXzuK/OoldeCqz5Xs4/hRNIATyYh0BeUypCxHK1zYfb98Msxr7eMivWlv+TP l6NcXi8Gttpx7CojUKiCc3JUT+0ZqtP8aJ9IAPlV6NXMHuAyCW2+NyVyYxK0YaPm datIBALsMwf27GKNKvmjMvGhg/EKESy3dEGpIoXVm4fKJ19kmUQZjoE9+n2S6M8S 41GFCziKJYH5D2DFBpLoYg5fMEwLVr5AmPnObiQTmvu25wqbDA+CMlXwxUPQvKbD mf2Os+FfVSkziRaPQ/dCX1U3YoLH1aTxAPIYcRYmlt/r5GMsgHMZZbdQuYE9n0Ar wP1j9OGQ3ZoX+g== -----END CERTIFICATE-----Generated at Thu Dec 25 00:55:23 2025 by rpki-client