This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/28c3d1-8a90-4068-bb27-33abc53c0e79/1/iHpfBIaxiiRI8jWKJ0bBq9n7Ll4.mft File: iHpfBIaxiiRI8jWKJ0bBq9n7Ll4.mft (raw, json) Hash identifier: 4pWAT2fAZQpEPRZtrh3cibDsC67/rA7ozvF12cEEZW4= Subject key identifier: 44:80:D5:A4:F9:AB:91:5F:4E:0D:E8:26:45:8B:07:4B:49:C0:0A:15 Authority key identifier: 88:7A:5F:04:86:B1:8A:24:48:F2:35:8A:27:46:C1:AB:D9:FB:2E:5E Certificate issuer: /CN=887a5f0486b18a2448f2358a2746c1abd9fb2e5e Certificate serial: 019AF0BF13E54107F95FA9B9EF8A9C9210D8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iHpfBIaxiiRI8jWKJ0bBq9n7Ll4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/28c3d1-8a90-4068-bb27-33abc53c0e79/1/iHpfBIaxiiRI8jWKJ0bBq9n7Ll4.mft Manifest number: 0F10 Signing time: Fri 05 Dec 2025 23:00:45 +0000 Manifest this update: Fri 05 Dec 2025 23:00:45 +0000 Manifest next update: Sat 06 Dec 2025 23:00:45 +0000 Files and hashes: 1: RZ_4-lCargPhDnsOSk7--hEov_g.roa (hash: gD59YlfjEOMaA7jKCDG57LDieQBZUtUGKFnW719fGG8=) 2: abKcOp3qmm4ybUnw1tBA-G8yOrc.roa (hash: /klckxmc/giyHaniwWbEf+LlQIwRtUPvFDW14KDXips=) 3: iHpfBIaxiiRI8jWKJ0bBq9n7Ll4.crl (hash: je2kz0ja7jrntQB8LZFUHXRRB8zbu8aiSHET+hHQGxY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/28c3d1-8a90-4068-bb27-33abc53c0e79/1/iHpfBIaxiiRI8jWKJ0bBq9n7Ll4.crl rsync://rpki.ripe.net/repository/DEFAULT/2d/28c3d1-8a90-4068-bb27-33abc53c0e79/1/iHpfBIaxiiRI8jWKJ0bBq9n7Ll4.mft rsync://rpki.ripe.net/repository/DEFAULT/iHpfBIaxiiRI8jWKJ0bBq9n7Ll4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 23:00:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:bf:13:e5:41:07:f9:5f:a9:b9:ef:8a:9c:92:10:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=887a5f0486b18a2448f2358a2746c1abd9fb2e5e Validity Not Before: Dec 5 23:00:45 2025 GMT Not After : Dec 6 23:00:45 2025 GMT Subject: CN=4480d5a4f9ab915f4e0de826458b074b49c00a15 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:7c:a9:73:11:97:33:94:0a:dc:15:6c:59:99: 44:54:2f:6a:39:a3:88:cd:f2:13:cf:4d:f6:68:ad: 73:53:1d:66:ca:c8:13:e3:9e:d1:7c:63:61:b8:32: 67:74:c7:68:ed:ed:d3:34:a4:2d:9b:9f:94:0f:51: 65:d8:26:46:c8:81:db:3b:ed:e7:eb:de:26:b5:ac: 2b:ee:12:94:8f:b1:28:6c:d7:b2:6e:e3:9d:70:54: 6c:f4:c1:9c:32:2a:6c:80:22:19:bb:c6:77:bb:04: d1:6d:4e:47:35:84:ce:b5:f0:0c:63:d3:ae:6e:fe: b5:79:d0:c1:cc:f8:fc:bc:cd:31:63:7f:10:57:57: 19:b6:36:53:a5:e2:c4:89:17:ea:7e:44:7f:9b:ee: 4f:eb:63:ee:d3:7d:ac:0a:8f:a5:be:f4:d0:f6:ba: d8:82:d3:41:2b:e0:cc:fa:78:17:aa:99:16:a5:ea: 50:a7:22:87:29:ce:c3:8e:dd:bf:92:76:b8:99:5d: f5:36:80:f0:f1:d2:4e:13:90:e3:32:39:a4:b2:b9: 06:e4:32:9b:59:60:24:68:e3:27:31:7c:a0:92:60: e1:10:07:b7:6e:1a:f9:ef:4f:33:13:7e:0e:cf:fa: 28:99:33:b6:df:b0:01:cc:4d:c8:23:8e:c0:d7:79: 8f:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:80:D5:A4:F9:AB:91:5F:4E:0D:E8:26:45:8B:07:4B:49:C0:0A:15 X509v3 Authority Key Identifier: keyid:88:7A:5F:04:86:B1:8A:24:48:F2:35:8A:27:46:C1:AB:D9:FB:2E:5E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iHpfBIaxiiRI8jWKJ0bBq9n7Ll4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/28c3d1-8a90-4068-bb27-33abc53c0e79/1/iHpfBIaxiiRI8jWKJ0bBq9n7Ll4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/28c3d1-8a90-4068-bb27-33abc53c0e79/1/iHpfBIaxiiRI8jWKJ0bBq9n7Ll4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 77:f2:46:98:a4:c4:e8:88:44:13:13:14:ae:cb:f6:17:25:94: 1b:13:fe:07:f5:f2:0d:d5:f8:00:a8:f9:e4:15:e0:d5:54:a3: f8:8c:2a:d1:81:a1:b1:6e:0c:af:b9:46:fa:fc:ba:bf:66:52: cc:57:f6:3e:50:21:63:24:28:f1:bb:2b:84:8a:a5:fa:6b:a2: 2c:27:0a:01:16:8a:be:5e:e7:08:3e:77:48:b2:46:90:c0:98: fe:d0:97:42:40:02:b1:cb:71:f5:a7:18:e5:8a:11:a3:5f:40: b8:d3:e8:cb:ce:3a:a9:b7:4f:ef:3b:41:6b:3a:2a:32:39:85: 1b:7c:00:d4:6d:1f:95:16:14:00:ed:f4:6d:87:0e:63:0d:a7: d3:37:0e:bc:69:cd:dc:f1:bd:b3:af:b9:9a:1f:5f:6e:0f:78: 48:49:ee:d7:18:cb:46:ed:17:95:41:20:89:16:54:a1:a7:91: f4:6b:91:12:9d:30:36:c7:58:4f:7d:1a:26:b5:31:24:fb:66: 6a:f9:67:be:da:55:17:68:f8:15:74:7c:94:f7:58:88:ed:6c: e7:00:c4:ee:de:5c:ac:97:7c:2e:90:9e:30:34:82:f2:83:8f: f4:c0:a5:36:c0:b6:89:a3:82:81:fc:e3:10:0f:89:43:42:52: 92:77:02:66 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrwvxPlQQf5X6m574qckhDYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg4N2E1ZjA0ODZiMThhMjQ0OGYyMzU4YTI3NDZjMWFiZDlm YjJlNWUwHhcNMjUxMjA1MjMwMDQ1WhcNMjUxMjA2MjMwMDQ1WjAzMTEwLwYDVQQD Eyg0NDgwZDVhNGY5YWI5MTVmNGUwZGU4MjY0NThiMDc0YjQ5YzAwYTE1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwHypcxGXM5QK3BVsWZlEVC9qOaOI zfITz032aK1zUx1mysgT457RfGNhuDJndMdo7e3TNKQtm5+UD1Fl2CZGyIHbO+3n 694mtawr7hKUj7EobNeybuOdcFRs9MGcMipsgCIZu8Z3uwTRbU5HNYTOtfAMY9Ou bv61edDBzPj8vM0xY38QV1cZtjZTpeLEiRfqfkR/m+5P62Pu032sCo+lvvTQ9rrY gtNBK+DM+ngXqpkWpepQpyKHKc7Djt2/kna4mV31NoDw8dJOE5DjMjmksrkG5DKb WWAkaOMnMXygkmDhEAe3bhr5708zE34Oz/oomTO237ABzE3II47A13mPGwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFESA1aT5q5FfTg3oJkWLB0tJwAoVMB8GA1UdIwQY MBaAFIh6XwSGsYokSPI1iidGwavZ+y5eMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaUhwZkJJYXhpaVJJOGpXS0owYkJxOW43TGw0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZC8yOGMzZDEtOGE5MC00MDY4LWJiMjct MzNhYmM1M2MwZTc5LzEvaUhwZkJJYXhpaVJJOGpXS0owYkJxOW43TGw0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZC8yOGMzZDEtOGE5MC00MDY4LWJiMjctMzNhYmM1M2MwZTc5 LzEvaUhwZkJJYXhpaVJJOGpXS0owYkJxOW43TGw0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAd/JGmKTE 6IhEExMUrsv2FyWUGxP+B/XyDdX4AKj55BXg1VSj+Iwq0YGhsW4Mr7lG+vy6v2ZS zFf2PlAhYyQo8bsrhIql+muiLCcKARaKvl7nCD53SLJGkMCY/tCXQkACsctx9acY 5YoRo19AuNPoy846qbdP7ztBazoqMjmFG3wA1G0flRYUAO30bYcOYw2n0zcOvGnN 3PG9s6+5mh9fbg94SEnu1xjLRu0XlUEgiRZUoaeR9GuREp0wNsdYT30aJrUxJPtm avlnvtpVF2j4FXR8lPdYiO1s5wDE7t5crJd8LpCeMDSC8oOP9MClNsC2iaOCgfzj EA+JQ0JSkncCZg== -----END CERTIFICATE-----Generated at Sat Dec 6 07:49:07 2025 by rpki-client