This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/f23831-6eb5-4427-81b0-34d341c5eb61/1/iPhM2j8rn5Z9noqEhdmeaht_fG4.mft File: iPhM2j8rn5Z9noqEhdmeaht_fG4.mft (raw, json) Hash identifier: JUi3JgqFANO+xrfpQZRsGn+vx0CUWKMBzC8LpWIMXkM= Subject key identifier: D8:AA:C7:7B:6E:AF:53:7F:12:4F:1C:40:09:75:6C:6A:BD:28:77:51 Authority key identifier: 88:F8:4C:DA:3F:2B:9F:96:7D:9E:8A:84:85:D9:9E:6A:1B:7F:7C:6E Certificate issuer: /CN=88f84cda3f2b9f967d9e8a8485d99e6a1b7f7c6e Certificate serial: 019AF12CEA5853B67061633592CB8283A578 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iPhM2j8rn5Z9noqEhdmeaht_fG4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/f23831-6eb5-4427-81b0-34d341c5eb61/1/iPhM2j8rn5Z9noqEhdmeaht_fG4.mft Manifest number: 0447 Signing time: Sat 06 Dec 2025 01:00:43 +0000 Manifest this update: Sat 06 Dec 2025 01:00:43 +0000 Manifest next update: Sun 07 Dec 2025 01:00:43 +0000 Files and hashes: 1: iPhM2j8rn5Z9noqEhdmeaht_fG4.crl (hash: Qo5ieeZr1YudBJgh5ZKZUVheOCkLJohN+4y1ke7ivyA=) 2: txmFyUOnE8z2a-lXpSSWeNlZGdM.roa (hash: tHzEEY6u+Izo5THIfW02uc7TbpIzTWXGA5LdSe/FigM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/f23831-6eb5-4427-81b0-34d341c5eb61/1/iPhM2j8rn5Z9noqEhdmeaht_fG4.crl rsync://rpki.ripe.net/repository/DEFAULT/06/f23831-6eb5-4427-81b0-34d341c5eb61/1/iPhM2j8rn5Z9noqEhdmeaht_fG4.mft rsync://rpki.ripe.net/repository/DEFAULT/iPhM2j8rn5Z9noqEhdmeaht_fG4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:00:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2c:ea:58:53:b6:70:61:63:35:92:cb:82:83:a5:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=88f84cda3f2b9f967d9e8a8485d99e6a1b7f7c6e Validity Not Before: Dec 6 01:00:43 2025 GMT Not After : Dec 7 01:00:43 2025 GMT Subject: CN=d8aac77b6eaf537f124f1c4009756c6abd287751 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:ea:7d:23:45:20:52:e3:f6:37:19:c4:e1:bd: 88:c1:76:8a:68:eb:3c:e9:b3:6b:ef:00:a6:e9:a7: ed:a8:ba:f7:d9:08:93:76:04:e1:9a:46:7e:26:47: 7e:87:9e:f1:3f:da:6b:5e:ea:6f:e8:47:20:a9:26: aa:d7:f7:1b:56:a3:f3:61:be:f5:be:3d:2a:75:23: 83:98:91:6b:bd:87:1c:40:74:31:f2:6f:2c:fc:4c: 32:e2:0f:ee:2f:8d:1a:03:4e:50:ac:a3:b1:51:a0: 7f:4f:ac:93:50:da:ce:64:0f:56:b2:27:f4:54:bc: f8:9b:4f:e3:1c:da:c6:6e:47:94:3e:78:51:58:3c: 2f:5f:f7:d2:e0:b9:9c:de:f8:ad:ec:ad:14:fc:09: bf:5d:3a:1e:98:6a:c2:45:9b:80:65:fc:eb:78:2c: 97:9e:05:d8:e1:35:9b:b0:df:8e:e7:6a:8b:a9:ad: 71:71:42:c2:d8:3c:a0:ae:80:ae:8b:a6:1f:7c:68: 87:e6:48:1e:af:e5:3f:5f:d8:f9:0c:1d:d4:98:ab: 29:99:72:14:d5:d5:ec:a9:54:ad:de:cc:92:95:e2: 33:51:25:54:fa:7e:db:0b:6f:8f:d8:20:c4:15:22: c7:a3:b6:fc:33:18:1d:aa:71:5c:db:c9:f0:e6:2c: 3e:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:AA:C7:7B:6E:AF:53:7F:12:4F:1C:40:09:75:6C:6A:BD:28:77:51 X509v3 Authority Key Identifier: keyid:88:F8:4C:DA:3F:2B:9F:96:7D:9E:8A:84:85:D9:9E:6A:1B:7F:7C:6E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iPhM2j8rn5Z9noqEhdmeaht_fG4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/f23831-6eb5-4427-81b0-34d341c5eb61/1/iPhM2j8rn5Z9noqEhdmeaht_fG4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/06/f23831-6eb5-4427-81b0-34d341c5eb61/1/iPhM2j8rn5Z9noqEhdmeaht_fG4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1f:c4:81:e5:3a:f7:32:a4:cd:97:12:e1:d3:3f:d0:a4:ad:a0: 0e:26:52:7c:f9:ee:32:6c:03:d0:7a:c8:03:03:44:1b:4c:e1: 7a:c5:14:b6:ae:fc:f9:61:c5:d8:59:9d:a7:fc:07:7c:50:af: a7:71:9d:2f:a0:3b:d4:57:0c:6a:e9:1b:e3:7e:4f:65:47:e7: 4e:71:f1:d4:b7:73:68:d6:fe:27:7e:88:9b:d9:53:d8:18:7e: 37:cf:6c:b9:52:a7:ec:3d:c2:b4:bd:ae:e2:a5:59:b5:f7:3e: 00:de:07:29:bf:d2:90:7c:47:e9:bc:ee:e7:81:65:46:b9:45: 9d:47:47:7c:1d:b8:b5:5e:02:17:e3:b4:aa:2d:2c:6e:45:b2: 45:f8:ca:9b:2a:47:4b:32:91:c1:d2:31:39:17:f3:3e:b7:06: ae:20:0f:af:79:12:25:f0:4a:fc:fd:ee:16:d3:39:01:01:98: 4c:f0:b6:f5:f8:ce:00:b7:41:57:c5:92:b9:e6:ab:0b:a3:44: 15:09:81:82:33:f6:67:e3:27:65:e4:14:50:c2:e2:6f:9a:5d: da:72:44:d8:62:9f:b8:2d:c6:f6:c6:c8:ee:7b:49:1f:8b:43: da:b2:39:f0:b0:2d:0a:01:97:61:82:83:a1:de:31:d2:59:7b: 2f:7f:c6:3d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLOpYU7ZwYWM1ksuCg6V4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg4Zjg0Y2RhM2YyYjlmOTY3ZDllOGE4NDg1ZDk5ZTZhMWI3 ZjdjNmUwHhcNMjUxMjA2MDEwMDQzWhcNMjUxMjA3MDEwMDQzWjAzMTEwLwYDVQQD EyhkOGFhYzc3YjZlYWY1MzdmMTI0ZjFjNDAwOTc1NmM2YWJkMjg3NzUxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz+p9I0UgUuP2NxnE4b2IwXaKaOs8 6bNr7wCm6aftqLr32QiTdgThmkZ+Jkd+h57xP9prXupv6EcgqSaq1/cbVqPzYb71 vj0qdSODmJFrvYccQHQx8m8s/Ewy4g/uL40aA05QrKOxUaB/T6yTUNrOZA9Wsif0 VLz4m0/jHNrGbkeUPnhRWDwvX/fS4Lmc3vit7K0U/Am/XToemGrCRZuAZfzreCyX ngXY4TWbsN+O52qLqa1xcULC2DygroCui6YffGiH5kger+U/X9j5DB3UmKspmXIU 1dXsqVSt3sySleIzUSVU+n7bC2+P2CDEFSLHo7b8MxgdqnFc28nw5iw+FQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNiqx3tur1N/Ek8cQAl1bGq9KHdRMB8GA1UdIwQY MBaAFIj4TNo/K5+WfZ6KhIXZnmobf3xuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaVBoTTJqOHJuNVo5bm9xRWhkbWVhaHRfZkc0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNi9mMjM4MzEtNmViNS00NDI3LTgxYjAt MzRkMzQxYzVlYjYxLzEvaVBoTTJqOHJuNVo5bm9xRWhkbWVhaHRfZkc0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNi9mMjM4MzEtNmViNS00NDI3LTgxYjAtMzRkMzQxYzVlYjYx LzEvaVBoTTJqOHJuNVo5bm9xRWhkbWVhaHRfZkc0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAH8SB5Tr3 MqTNlxLh0z/QpK2gDiZSfPnuMmwD0HrIAwNEG0zhesUUtq78+WHF2Fmdp/wHfFCv p3GdL6A71FcMaukb435PZUfnTnHx1LdzaNb+J36Im9lT2Bh+N89suVKn7D3CtL2u 4qVZtfc+AN4HKb/SkHxH6bzu54FlRrlFnUdHfB24tV4CF+O0qi0sbkWyRfjKmypH SzKRwdIxORfzPrcGriAPr3kSJfBK/P3uFtM5AQGYTPC29fjOALdBV8WSuearC6NE FQmBgjP2Z+MnZeQUUMLib5pd2nJE2GKfuC3G9sbI7ntJH4tD2rI58LAtCgGXYYKD od4x0ll7L3/GPQ== -----END CERTIFICATE-----Generated at Sat Dec 6 06:59:05 2025 by rpki-client