This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/1197f2-7f8e-48e4-bda9-f5bb2b2d63be/1/ii4u4759dSXtdLeq4H6Srsr4STY.mft File: ii4u4759dSXtdLeq4H6Srsr4STY.mft (raw, json) Hash identifier: df123TMXV1sqaSaQDRofkPc4WCp2bN4edLzq2FrgeNY= Subject key identifier: 88:86:2B:CA:64:5B:18:E5:71:58:ED:92:F7:18:CF:F8:D9:9B:04:71 Authority key identifier: 8A:2E:2E:E3:BE:7D:75:25:ED:74:B7:AA:E0:7E:92:AE:CA:F8:49:36 Certificate issuer: /CN=8a2e2ee3be7d7525ed74b7aae07e92aecaf84936 Certificate serial: 019B2F67E9518FB2B3C7C8C2F6309CF86E6F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ii4u4759dSXtdLeq4H6Srsr4STY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/1197f2-7f8e-48e4-bda9-f5bb2b2d63be/1/ii4u4759dSXtdLeq4H6Srsr4STY.mft Manifest number: 060F Signing time: Thu 18 Dec 2025 03:01:37 +0000 Manifest this update: Thu 18 Dec 2025 03:01:37 +0000 Manifest next update: Fri 19 Dec 2025 03:01:37 +0000 Files and hashes: 1: ETp4ram_5wDX-QYsHkSwfey16LY.roa (hash: fc9E3PvcS1jfb9J0ZMzkrwdWGh4l1nHW4cyDiTGJbiU=) 2: ii4u4759dSXtdLeq4H6Srsr4STY.crl (hash: kdGZRQ8H//tU7rZPT4SdajDyhBUFLo0mstBQcUf9le0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/1197f2-7f8e-48e4-bda9-f5bb2b2d63be/1/ii4u4759dSXtdLeq4H6Srsr4STY.crl rsync://rpki.ripe.net/repository/DEFAULT/37/1197f2-7f8e-48e4-bda9-f5bb2b2d63be/1/ii4u4759dSXtdLeq4H6Srsr4STY.mft rsync://rpki.ripe.net/repository/DEFAULT/ii4u4759dSXtdLeq4H6Srsr4STY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 03:01:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2f:67:e9:51:8f:b2:b3:c7:c8:c2:f6:30:9c:f8:6e:6f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8a2e2ee3be7d7525ed74b7aae07e92aecaf84936 Validity Not Before: Dec 18 03:01:37 2025 GMT Not After : Dec 19 03:01:37 2025 GMT Subject: CN=88862bca645b18e57158ed92f718cff8d99b0471 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:fe:0c:60:e8:f4:bc:2d:41:56:c0:f6:1e:02: aa:5a:ea:99:4b:ba:7d:17:17:ed:5f:be:af:70:8f: b1:9c:da:9c:3c:a5:f4:67:46:a7:c5:84:c8:4d:24: 83:00:05:c9:b7:6d:de:0c:f0:ec:bc:fc:cb:f1:89: 9a:7a:96:3f:81:49:77:73:f7:ca:2c:a0:d3:55:98: b1:dd:df:ea:c6:7b:03:b7:4a:18:3e:5b:08:5c:42: 95:43:a4:ac:83:f5:1d:78:12:fc:81:d1:76:60:1a: 9d:74:f5:09:6c:56:e3:20:42:58:7b:81:46:6b:d4: 8b:60:07:1d:6a:83:28:a1:8a:4c:18:01:0b:e2:18: c9:3e:9c:c8:7b:59:61:3f:a3:b9:78:02:ee:e9:fe: b2:c0:18:d7:4e:2e:27:f4:a0:f5:57:38:0e:56:03: 0c:27:c2:fe:4c:68:57:9e:6a:fe:01:a5:a7:55:ae: 26:bc:60:f2:27:d8:67:2d:02:45:57:c9:e6:85:fb: c7:be:98:2a:d2:0a:f1:12:59:7a:d5:05:98:b2:ce: d3:64:e2:5c:9c:ec:23:53:e7:e0:fc:57:db:8c:cb: e2:53:f4:ef:21:54:c1:36:4d:19:21:7d:d6:e8:34: 9d:fb:fd:47:f5:19:e5:3a:5d:69:3c:01:1d:bb:12: fa:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:86:2B:CA:64:5B:18:E5:71:58:ED:92:F7:18:CF:F8:D9:9B:04:71 X509v3 Authority Key Identifier: keyid:8A:2E:2E:E3:BE:7D:75:25:ED:74:B7:AA:E0:7E:92:AE:CA:F8:49:36 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ii4u4759dSXtdLeq4H6Srsr4STY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/1197f2-7f8e-48e4-bda9-f5bb2b2d63be/1/ii4u4759dSXtdLeq4H6Srsr4STY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/37/1197f2-7f8e-48e4-bda9-f5bb2b2d63be/1/ii4u4759dSXtdLeq4H6Srsr4STY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3c:7c:50:ad:fd:e5:73:4b:04:53:86:34:8b:08:ea:d9:4e:5c: d4:97:95:30:0f:f4:c5:b7:f6:df:b1:fc:36:3c:9f:3e:3f:bd: 3b:b0:07:ce:59:87:49:a8:a9:22:4c:74:d7:ef:81:12:0b:6f: 20:9e:5f:b6:1a:09:cf:96:85:ac:bd:0f:b7:53:3d:e7:10:64: 2e:c7:92:91:ae:22:68:eb:7c:ee:b0:59:de:65:f4:42:24:0e: 3c:06:69:d5:3c:1b:64:25:4b:e8:42:8a:2f:42:ad:0d:d0:92: ba:8c:e3:f4:d8:96:b8:f2:ac:18:ff:c4:39:42:2f:1b:3f:37: 3c:7b:5e:eb:37:74:8e:e0:3c:14:36:ea:70:fc:eb:11:ec:4b: 9d:ec:1d:d2:56:39:49:ab:70:c8:c4:bd:40:16:97:10:00:29: 0e:5f:b6:bd:b8:ad:43:a5:49:3e:01:df:46:00:38:95:7c:1e: f0:2b:cf:af:61:bf:56:25:9a:ca:be:fa:b7:3e:21:ad:88:85: d1:ca:59:98:1d:52:e9:87:59:7f:46:b6:39:12:68:d4:d2:a4: b1:b9:d2:5f:83:6c:0a:31:95:cf:da:13:4c:20:e8:c6:4f:09: a0:cb:d4:6a:25:78:fb:17:bc:60:01:b3:77:1f:82:1c:63:a7: b9:80:d9:c0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsvZ+lRj7Kzx8jC9jCc+G5vMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhhMmUyZWUzYmU3ZDc1MjVlZDc0YjdhYWUwN2U5MmFlY2Fm ODQ5MzYwHhcNMjUxMjE4MDMwMTM3WhcNMjUxMjE5MDMwMTM3WjAzMTEwLwYDVQQD Eyg4ODg2MmJjYTY0NWIxOGU1NzE1OGVkOTJmNzE4Y2ZmOGQ5OWIwNDcxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo/4MYOj0vC1BVsD2HgKqWuqZS7p9 FxftX76vcI+xnNqcPKX0Z0anxYTITSSDAAXJt23eDPDsvPzL8YmaepY/gUl3c/fK LKDTVZix3d/qxnsDt0oYPlsIXEKVQ6Ssg/UdeBL8gdF2YBqddPUJbFbjIEJYe4FG a9SLYAcdaoMooYpMGAEL4hjJPpzIe1lhP6O5eALu6f6ywBjXTi4n9KD1VzgOVgMM J8L+TGhXnmr+AaWnVa4mvGDyJ9hnLQJFV8nmhfvHvpgq0grxEll61QWYss7TZOJc nOwjU+fg/FfbjMviU/TvIVTBNk0ZIX3W6DSd+/1H9RnlOl1pPAEduxL6swIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIiGK8pkWxjlcVjtkvcYz/jZmwRxMB8GA1UdIwQY MBaAFIouLuO+fXUl7XS3quB+kq7K+Ek2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaWk0dTQ3NTlkU1h0ZExlcTRINlNyc3I0U1RZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNy8xMTk3ZjItN2Y4ZS00OGU0LWJkYTkt ZjViYjJiMmQ2M2JlLzEvaWk0dTQ3NTlkU1h0ZExlcTRINlNyc3I0U1RZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNy8xMTk3ZjItN2Y4ZS00OGU0LWJkYTktZjViYjJiMmQ2M2Jl LzEvaWk0dTQ3NTlkU1h0ZExlcTRINlNyc3I0U1RZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPHxQrf3l c0sEU4Y0iwjq2U5c1JeVMA/0xbf237H8NjyfPj+9O7AHzlmHSaipIkx01++BEgtv IJ5fthoJz5aFrL0Pt1M95xBkLseSka4iaOt87rBZ3mX0QiQOPAZp1TwbZCVL6EKK L0KtDdCSuozj9NiWuPKsGP/EOUIvGz83PHte6zd0juA8FDbqcPzrEexLnewd0lY5 SatwyMS9QBaXEAApDl+2vbitQ6VJPgHfRgA4lXwe8CvPr2G/ViWayr76tz4hrYiF 0cpZmB1S6YdZf0a2ORJo1NKksbnSX4NsCjGVz9oTTCDoxk8JoMvUaiV4+xe8YAGz dx+CHGOnuYDZwA== -----END CERTIFICATE-----Generated at Thu Dec 18 09:24:08 2025 by rpki-client