This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/daf960-d060-49fc-af42-dee292ea87a3/1/ihzh0TW_LPjowT8z7BHIUjcD3HU.mft File: ihzh0TW_LPjowT8z7BHIUjcD3HU.mft (raw, json) Hash identifier: Pxt4tSKlDD8qRUEfXZ2mcS2s0bEGMCQDR8NZAatb3NQ= Subject key identifier: 9F:29:F1:E7:F4:15:1D:0A:08:19:69:44:C4:90:66:62:1C:C8:CF:6F Authority key identifier: 8A:1C:E1:D1:35:BF:2C:F8:E8:C1:3F:33:EC:11:C8:52:37:03:DC:75 Certificate issuer: /CN=8a1ce1d135bf2cf8e8c13f33ec11c8523703dc75 Certificate serial: 019B33E88F0D8FD1C53562D54018EED5AAB2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ihzh0TW_LPjowT8z7BHIUjcD3HU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/daf960-d060-49fc-af42-dee292ea87a3/1/ihzh0TW_LPjowT8z7BHIUjcD3HU.mft Manifest number: 167C Signing time: Fri 19 Dec 2025 00:00:37 +0000 Manifest this update: Fri 19 Dec 2025 00:00:37 +0000 Manifest next update: Sat 20 Dec 2025 00:00:37 +0000 Files and hashes: 1: 2L9tST2xxsB46ZV-Wm7-7d0Z8Yc.roa (hash: 2H+U81Sea1KvCbnxcSszHg71YCfhD1GEm2cdKStIW6w=) 2: AEk4t1mqQHdHzuvnZ8F04P17d44.roa (hash: 7D43zZS2UD0q0VGySwNpiUk+9PmD8nPWUlHBvAE5epk=) 3: WRWq9c3b9kg8gQPomqG34r1Y5v0.asa (hash: ZoJ/LKA1w1XuBHscB30KCICWqihW2yVYKCpjACmrLmk=) 4: ihzh0TW_LPjowT8z7BHIUjcD3HU.crl (hash: DwCr62w2E5yHLogNZp8DSeOWrVgFIlgdaVpGrxnVm4k=) 5: o5m1uFw5rs_EeSEFk1hux3YAIU4.roa (hash: wTW4ivT11e40D7I5riMLJL+NO9rFHoJd/dKX+ZIDA6g=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/daf960-d060-49fc-af42-dee292ea87a3/1/ihzh0TW_LPjowT8z7BHIUjcD3HU.crl rsync://rpki.ripe.net/repository/DEFAULT/0c/daf960-d060-49fc-af42-dee292ea87a3/1/ihzh0TW_LPjowT8z7BHIUjcD3HU.mft rsync://rpki.ripe.net/repository/DEFAULT/ihzh0TW_LPjowT8z7BHIUjcD3HU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:33:e8:8f:0d:8f:d1:c5:35:62:d5:40:18:ee:d5:aa:b2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8a1ce1d135bf2cf8e8c13f33ec11c8523703dc75 Validity Not Before: Dec 19 00:00:37 2025 GMT Not After : Dec 20 00:00:37 2025 GMT Subject: CN=9f29f1e7f4151d0a08196944c49066621cc8cf6f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:5d:dd:1e:08:00:37:b1:3a:b8:0b:b3:a6:96: b4:41:68:b4:bc:25:1e:00:52:de:9d:9e:a7:13:55: 1a:ad:00:0b:80:9b:24:94:19:a0:e1:7c:bf:0f:a4: b6:1a:91:11:c2:8e:a7:08:e2:70:44:d1:3a:1e:83: ca:23:c1:fb:8d:44:0d:b2:74:c9:9e:6d:33:3c:71: eb:fc:ff:30:24:76:96:29:b3:9b:c4:69:73:0b:86: 77:e9:92:9f:80:6b:84:1b:03:61:29:d7:54:32:85: 30:12:46:bb:72:e4:89:fb:08:b8:4b:c6:1f:ed:f9: 2f:cd:7f:43:1a:fe:47:23:79:3e:be:35:9f:75:61: 2b:8c:25:8f:6b:21:86:00:f1:b7:75:6a:b6:70:38: f1:a4:9a:34:a5:b0:f0:83:e3:f2:22:78:07:96:1f: 10:5c:99:4c:dd:5c:0e:cd:f2:61:24:e1:7c:72:90: 64:6e:ca:0f:94:38:be:ff:d5:18:aa:9d:68:f4:9a: 0c:d9:9c:32:3f:f7:ca:da:2a:d7:6e:c8:ae:41:56: ab:08:9d:b1:e3:b3:59:79:4a:04:53:00:2f:f0:90: 85:ed:b4:86:43:8b:24:c2:f8:d9:b4:bb:f9:c6:82: 78:f7:f6:ed:29:e4:d7:7a:4a:0f:02:ca:59:17:99: 73:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:29:F1:E7:F4:15:1D:0A:08:19:69:44:C4:90:66:62:1C:C8:CF:6F X509v3 Authority Key Identifier: keyid:8A:1C:E1:D1:35:BF:2C:F8:E8:C1:3F:33:EC:11:C8:52:37:03:DC:75 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ihzh0TW_LPjowT8z7BHIUjcD3HU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/daf960-d060-49fc-af42-dee292ea87a3/1/ihzh0TW_LPjowT8z7BHIUjcD3HU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/daf960-d060-49fc-af42-dee292ea87a3/1/ihzh0TW_LPjowT8z7BHIUjcD3HU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 77:7f:15:7e:34:77:17:d5:30:1b:85:a2:7f:36:b0:1d:a6:f1: 6e:af:07:79:1e:80:73:5e:e8:64:02:39:09:7b:04:90:48:96: 1b:4e:58:de:63:26:15:d1:a7:9f:99:aa:72:55:06:eb:e3:33: e4:ce:cb:58:c3:ae:81:26:b6:c3:8d:91:dc:02:30:07:a5:a4: 3f:f5:ca:02:9b:69:a7:35:65:d6:97:48:b6:a8:ea:80:c8:81: d0:44:c2:06:74:e0:a5:b2:f5:a8:85:c9:91:4e:84:26:c3:19: d8:62:f2:d2:b0:07:15:40:f3:94:7e:b7:99:61:98:18:58:ca: 16:8e:75:15:15:f5:37:80:8e:f0:cc:9c:c2:e0:b3:60:f1:9f: d5:7d:0a:a7:27:8a:fd:68:eb:1c:1d:19:f7:cd:a2:12:f4:64: 1c:5a:90:37:19:3d:86:52:ae:88:ce:ab:fc:82:25:93:3e:eb: 8b:b2:80:2b:24:31:f2:66:f0:93:df:31:50:40:95:56:de:99: 9f:9e:be:83:54:85:ce:97:b7:5c:57:66:31:b9:b8:01:9d:64: 10:78:7f:83:ce:c0:a5:43:5f:85:cd:6e:d7:cf:ef:91:c7:31: db:12:61:72:06:e3:12:29:b1:3f:d2:3b:6e:7e:16:af:bd:24: 2f:ef:18:14 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsz6I8Nj9HFNWLVQBju1aqyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhhMWNlMWQxMzViZjJjZjhlOGMxM2YzM2VjMTFjODUyMzcw M2RjNzUwHhcNMjUxMjE5MDAwMDM3WhcNMjUxMjIwMDAwMDM3WjAzMTEwLwYDVQQD Eyg5ZjI5ZjFlN2Y0MTUxZDBhMDgxOTY5NDRjNDkwNjY2MjFjYzhjZjZmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyV3dHggAN7E6uAuzppa0QWi0vCUe AFLenZ6nE1UarQALgJsklBmg4Xy/D6S2GpERwo6nCOJwRNE6HoPKI8H7jUQNsnTJ nm0zPHHr/P8wJHaWKbObxGlzC4Z36ZKfgGuEGwNhKddUMoUwEka7cuSJ+wi4S8Yf 7fkvzX9DGv5HI3k+vjWfdWErjCWPayGGAPG3dWq2cDjxpJo0pbDwg+PyIngHlh8Q XJlM3VwOzfJhJOF8cpBkbsoPlDi+/9UYqp1o9JoM2ZwyP/fK2irXbsiuQVarCJ2x 47NZeUoEUwAv8JCF7bSGQ4skwvjZtLv5xoJ49/btKeTXekoPAspZF5lzxQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJ8p8ef0FR0KCBlpRMSQZmIcyM9vMB8GA1UdIwQY MBaAFIoc4dE1vyz46ME/M+wRyFI3A9x1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaWh6aDBUV19MUGpvd1Q4ejdCSElVamNEM0hVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy9kYWY5NjAtZDA2MC00OWZjLWFmNDIt ZGVlMjkyZWE4N2EzLzEvaWh6aDBUV19MUGpvd1Q4ejdCSElVamNEM0hVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYy9kYWY5NjAtZDA2MC00OWZjLWFmNDItZGVlMjkyZWE4N2Ez LzEvaWh6aDBUV19MUGpvd1Q4ejdCSElVamNEM0hVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAd38VfjR3 F9UwG4WifzawHabxbq8HeR6Ac17oZAI5CXsEkEiWG05Y3mMmFdGnn5mqclUG6+Mz 5M7LWMOugSa2w42R3AIwB6WkP/XKAptppzVl1pdItqjqgMiB0ETCBnTgpbL1qIXJ kU6EJsMZ2GLy0rAHFUDzlH63mWGYGFjKFo51FRX1N4CO8MycwuCzYPGf1X0KpyeK /WjrHB0Z982iEvRkHFqQNxk9hlKuiM6r/IIlkz7ri7KAKyQx8mbwk98xUECVVt6Z n56+g1SFzpe3XFdmMbm4AZ1kEHh/g87ApUNfhc1u18/vkccx2xJhcgbjEimxP9I7 bn4Wr70kL+8YFA== -----END CERTIFICATE-----Generated at Fri Dec 19 05:47:22 2025 by rpki-client