This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/9af78b-41c4-47b7-af95-37b0a2ab3cd6/1/iiJ8Nfko2ci4_3wlch79R6kNy2c.mft File: iiJ8Nfko2ci4_3wlch79R6kNy2c.mft (raw, json) Hash identifier: K8v4BZZzwhlr7ZED+E6Xv/DzAJgKD6J+h63hZluFzrA= Subject key identifier: E2:D3:90:67:3C:36:3B:02:54:56:88:A5:36:7E:C9:70:8E:0D:25:71 Authority key identifier: 8A:22:7C:35:F9:28:D9:C8:B8:FF:7C:25:72:1E:FD:47:A9:0D:CB:67 Certificate issuer: /CN=8a227c35f928d9c8b8ff7c25721efd47a90dcb67 Certificate serial: 019B360EA4FB56414210A0149DF78A0DDE56 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iiJ8Nfko2ci4_3wlch79R6kNy2c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/9af78b-41c4-47b7-af95-37b0a2ab3cd6/1/iiJ8Nfko2ci4_3wlch79R6kNy2c.mft Manifest number: 148C Signing time: Fri 19 Dec 2025 10:01:27 +0000 Manifest this update: Fri 19 Dec 2025 10:01:27 +0000 Manifest next update: Sat 20 Dec 2025 10:01:27 +0000 Files and hashes: 1: K7N-hRXidANMpYlZJ_rYSwLoLCk.roa (hash: tqDwe1a97FYihn4sdeIxy/I7wKkMHB8gK4badlQZXTs=) 2: iiJ8Nfko2ci4_3wlch79R6kNy2c.crl (hash: XIkOrmXmcvyB8Bwr8kR8PEU7fOnXCw3hWqF6lbb/j4w=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/9af78b-41c4-47b7-af95-37b0a2ab3cd6/1/iiJ8Nfko2ci4_3wlch79R6kNy2c.crl rsync://rpki.ripe.net/repository/DEFAULT/1b/9af78b-41c4-47b7-af95-37b0a2ab3cd6/1/iiJ8Nfko2ci4_3wlch79R6kNy2c.mft rsync://rpki.ripe.net/repository/DEFAULT/iiJ8Nfko2ci4_3wlch79R6kNy2c.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 07:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:36:0e:a4:fb:56:41:42:10:a0:14:9d:f7:8a:0d:de:56 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8a227c35f928d9c8b8ff7c25721efd47a90dcb67 Validity Not Before: Dec 19 10:01:27 2025 GMT Not After : Dec 20 10:01:27 2025 GMT Subject: CN=e2d390673c363b02545688a5367ec9708e0d2571 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:df:2f:9f:f1:fd:5c:66:b2:d1:82:41:57:3f: e2:9d:78:af:5f:8e:9e:7d:18:e1:d4:8e:7f:ae:1a: e8:ee:62:50:32:ee:3e:e1:1a:f0:3b:8b:73:04:13: e7:f8:b2:df:bf:79:5b:5e:6f:ef:62:04:6e:61:68: dc:88:02:ac:e6:fb:6e:41:7f:7a:0c:22:ac:dd:99: db:d2:e4:d2:87:88:6c:79:36:48:7e:d1:50:5a:4a: 9e:90:81:26:64:87:41:8a:ea:89:f7:d0:c3:ab:9d: c6:2c:63:4e:c2:43:8c:e2:7a:8e:6f:48:e8:fe:63: 3f:93:8b:c1:e4:7c:a9:d7:eb:b6:16:ef:62:b3:52: 18:a1:72:2b:9d:d4:c2:97:50:f9:9a:f6:8a:81:6b: 2d:b0:ba:f4:84:4b:bc:e2:c2:53:c9:77:52:b8:da: e1:4a:18:54:c6:76:b5:2e:5d:c8:2d:5e:59:11:68: 92:56:c7:2f:bb:08:c3:1b:c7:ee:af:ac:2c:ca:85: 42:6d:96:13:2f:aa:46:d3:0f:73:83:8d:a0:1b:ed: 26:99:35:09:17:05:33:e7:2e:8e:af:e1:53:09:1d: 9a:41:0c:7a:59:b1:07:ac:93:e2:ae:41:a5:f8:18: f3:2c:f5:9b:9b:6a:ca:cf:29:b6:04:b5:f2:87:cc: a8:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:D3:90:67:3C:36:3B:02:54:56:88:A5:36:7E:C9:70:8E:0D:25:71 X509v3 Authority Key Identifier: keyid:8A:22:7C:35:F9:28:D9:C8:B8:FF:7C:25:72:1E:FD:47:A9:0D:CB:67 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iiJ8Nfko2ci4_3wlch79R6kNy2c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/9af78b-41c4-47b7-af95-37b0a2ab3cd6/1/iiJ8Nfko2ci4_3wlch79R6kNy2c.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/9af78b-41c4-47b7-af95-37b0a2ab3cd6/1/iiJ8Nfko2ci4_3wlch79R6kNy2c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0b:fb:e2:c3:a2:0d:ce:ae:40:b9:55:98:8f:bc:c2:0e:af:e9: 52:d7:24:b1:19:db:5d:49:4b:82:1f:2a:a4:c5:6c:c2:e3:42: 60:79:b5:eb:d3:67:29:75:56:5b:63:65:47:bd:07:d9:ef:bf: d6:b8:e2:c4:f6:5f:60:40:c3:67:02:94:6a:52:47:07:75:24: d8:78:29:5f:1a:09:9e:55:3a:db:56:73:86:d7:86:e7:17:92: d8:ee:4f:39:45:b2:49:11:4b:e7:b9:13:ed:8f:99:af:b8:fd: 16:54:28:7f:e0:c4:4d:77:86:66:92:c2:c6:03:75:d3:be:f5: a4:9b:53:32:70:bb:38:40:3c:02:55:9e:33:82:6b:dc:f4:39: 8f:0c:ef:4c:29:e5:a7:cb:67:42:52:67:16:1f:65:bf:73:fb: c1:7a:b1:02:e3:2e:bc:02:07:d8:71:fa:70:2e:8e:66:e2:97: 90:1f:dc:0e:fc:92:79:cf:4d:6a:66:8e:2f:a9:b9:38:33:63: 7b:89:af:b6:71:b7:39:e3:c9:94:10:e4:fe:d6:b3:34:c8:e8: 5b:06:7a:7c:bf:e4:eb:d2:49:9c:06:01:ee:b4:6e:00:e8:ef: 7d:81:c9:04:4c:e9:cb:1e:1d:04:6e:9a:55:26:45:7d:8f:50: 43:f0:51:14 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs2DqT7VkFCEKAUnfeKDd5WMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhhMjI3YzM1ZjkyOGQ5YzhiOGZmN2MyNTcyMWVmZDQ3YTkw ZGNiNjcwHhcNMjUxMjE5MTAwMTI3WhcNMjUxMjIwMTAwMTI3WjAzMTEwLwYDVQQD EyhlMmQzOTA2NzNjMzYzYjAyNTQ1Njg4YTUzNjdlYzk3MDhlMGQyNTcxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzN8vn/H9XGay0YJBVz/inXivX46e fRjh1I5/rhro7mJQMu4+4RrwO4tzBBPn+LLfv3lbXm/vYgRuYWjciAKs5vtuQX96 DCKs3Znb0uTSh4hseTZIftFQWkqekIEmZIdBiuqJ99DDq53GLGNOwkOM4nqOb0jo /mM/k4vB5Hyp1+u2Fu9is1IYoXIrndTCl1D5mvaKgWstsLr0hEu84sJTyXdSuNrh ShhUxna1Ll3ILV5ZEWiSVscvuwjDG8fur6wsyoVCbZYTL6pG0w9zg42gG+0mmTUJ FwUz5y6Or+FTCR2aQQx6WbEHrJPirkGl+BjzLPWbm2rKzym2BLXyh8yoGQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOLTkGc8NjsCVFaIpTZ+yXCODSVxMB8GA1UdIwQY MBaAFIoifDX5KNnIuP98JXIe/UepDctnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaWlKOE5ma28yY2k0XzN3bGNoNzlSNmtOeTJjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYi85YWY3OGItNDFjNC00N2I3LWFmOTUt MzdiMGEyYWIzY2Q2LzEvaWlKOE5ma28yY2k0XzN3bGNoNzlSNmtOeTJjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYi85YWY3OGItNDFjNC00N2I3LWFmOTUtMzdiMGEyYWIzY2Q2 LzEvaWlKOE5ma28yY2k0XzN3bGNoNzlSNmtOeTJjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAC/viw6IN zq5AuVWYj7zCDq/pUtcksRnbXUlLgh8qpMVswuNCYHm169NnKXVWW2NlR70H2e+/ 1rjixPZfYEDDZwKUalJHB3Uk2HgpXxoJnlU621ZzhteG5xeS2O5POUWySRFL57kT 7Y+Zr7j9FlQof+DETXeGZpLCxgN10771pJtTMnC7OEA8AlWeM4Jr3PQ5jwzvTCnl p8tnQlJnFh9lv3P7wXqxAuMuvAIH2HH6cC6OZuKXkB/cDvySec9NamaOL6m5ODNj e4mvtnG3OePJlBDk/tazNMjoWwZ6fL/k69JJnAYB7rRuAOjvfYHJBEzpyx4dBG6a VSZFfY9QQ/BRFA== -----END CERTIFICATE-----Generated at Fri Dec 19 16:20:20 2025 by rpki-client