This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/cb9c66-f7cc-4de1-bdc1-2f5f4c55262f/1/iHfaPUgwJ6Ae3c0OQ16ChfGxu54.mft File: iHfaPUgwJ6Ae3c0OQ16ChfGxu54.mft (raw, json) Hash identifier: ncGF4JXE20DN+xgF+Hi+q51Jg68yxpjZndf5BGGdxsc= Subject key identifier: 98:2D:62:18:5E:5F:1B:DB:62:3E:F7:D4:1F:25:78:69:5C:93:52:A1 Authority key identifier: 88:77:DA:3D:48:30:27:A0:1E:DD:CD:0E:43:5E:82:85:F1:B1:BB:9E Certificate issuer: /CN=8877da3d483027a01eddcd0e435e8285f1b1bb9e Certificate serial: 019AF6F8992155A8BBFB9C1FC337F3836787 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iHfaPUgwJ6Ae3c0OQ16ChfGxu54.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/cb9c66-f7cc-4de1-bdc1-2f5f4c55262f/1/iHfaPUgwJ6Ae3c0OQ16ChfGxu54.mft Manifest number: 1766 Signing time: Sun 07 Dec 2025 04:01:18 +0000 Manifest this update: Sun 07 Dec 2025 04:01:18 +0000 Manifest next update: Mon 08 Dec 2025 04:01:18 +0000 Files and hashes: 1: YOyr4rKnnzDrXdmtMOktrTLMhdg.roa (hash: 9XaoEGH44aifrIE9gnosDm/sLWWt90nSBonwPhD6BKU=) 2: iHfaPUgwJ6Ae3c0OQ16ChfGxu54.crl (hash: kbitXA8IEsw3QLxpI+dpdoC+Jnvd4GYfUqh1q4oN9y4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/cb9c66-f7cc-4de1-bdc1-2f5f4c55262f/1/iHfaPUgwJ6Ae3c0OQ16ChfGxu54.crl rsync://rpki.ripe.net/repository/DEFAULT/3c/cb9c66-f7cc-4de1-bdc1-2f5f4c55262f/1/iHfaPUgwJ6Ae3c0OQ16ChfGxu54.mft rsync://rpki.ripe.net/repository/DEFAULT/iHfaPUgwJ6Ae3c0OQ16ChfGxu54.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 08 Dec 2025 04:01:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f6:f8:99:21:55:a8:bb:fb:9c:1f:c3:37:f3:83:67:87 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8877da3d483027a01eddcd0e435e8285f1b1bb9e Validity Not Before: Dec 7 04:01:18 2025 GMT Not After : Dec 8 04:01:18 2025 GMT Subject: CN=982d62185e5f1bdb623ef7d41f2578695c9352a1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:b1:11:f5:e5:b4:b7:16:f4:f2:9c:d0:bb:b8: ee:9b:51:1c:37:d9:65:5a:71:ed:a6:36:9b:79:21: 41:44:91:f6:75:1e:4a:d8:43:ec:f2:e2:12:6a:bd: d0:9d:4f:a5:1c:19:31:d4:e9:99:13:ac:27:d1:7b: 97:40:08:40:21:ff:19:43:d6:78:d6:f1:3e:86:67: 96:bd:5c:f7:fd:5a:b6:bf:e1:fd:70:68:88:39:42: db:91:fc:01:c0:22:79:37:e1:ff:73:aa:30:cb:ea: 51:11:07:b7:03:b0:29:2f:ad:24:64:ba:28:53:c1: ea:b2:99:04:61:32:38:46:b2:85:a7:91:60:84:2f: dd:74:11:58:40:ae:fc:8c:fc:47:87:3d:e9:34:ef: a7:00:fa:99:a2:66:1f:7e:9b:bf:05:00:8a:06:9f: 20:f5:7a:88:f3:a6:0a:72:10:3d:f5:77:24:61:c8: 6b:a0:12:85:00:c9:f9:76:97:d6:46:ea:11:fd:67: 67:e3:40:32:b5:7f:b0:51:d7:5b:76:eb:53:ff:24: 80:13:2d:38:32:bf:ad:e6:26:3e:a9:50:0e:be:a6: 01:c4:53:e8:41:bf:7d:22:19:bb:5d:43:04:b0:4b: ba:da:4c:f3:0b:b3:5a:0f:e9:18:27:ce:e8:6e:a7: 01:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:2D:62:18:5E:5F:1B:DB:62:3E:F7:D4:1F:25:78:69:5C:93:52:A1 X509v3 Authority Key Identifier: keyid:88:77:DA:3D:48:30:27:A0:1E:DD:CD:0E:43:5E:82:85:F1:B1:BB:9E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iHfaPUgwJ6Ae3c0OQ16ChfGxu54.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/cb9c66-f7cc-4de1-bdc1-2f5f4c55262f/1/iHfaPUgwJ6Ae3c0OQ16ChfGxu54.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/cb9c66-f7cc-4de1-bdc1-2f5f4c55262f/1/iHfaPUgwJ6Ae3c0OQ16ChfGxu54.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4f:2f:2e:48:0e:b3:6d:ff:c5:5c:31:37:39:33:80:8b:03:de: 12:31:18:62:b0:6b:e0:49:e7:f3:d8:49:bc:b9:72:08:9a:80: 84:50:3d:dd:8a:5d:d0:84:db:78:e9:05:80:14:c7:8c:b5:ce: d4:a2:22:53:f5:14:18:f2:38:39:3b:7d:ba:20:c4:a8:5e:30: 22:94:f0:54:87:1e:e8:d9:7d:95:a2:b5:43:a1:45:ad:61:db: 4e:3d:9b:94:b2:fb:ed:61:39:33:b8:22:67:b9:58:4b:ca:9d: 7f:6d:c5:a9:53:09:26:3d:64:dd:0f:db:d6:a5:68:73:89:73: 63:1e:62:f6:60:46:46:08:0d:1a:9f:25:26:1e:03:e0:56:29: 0b:80:e2:7b:d8:fb:cf:c4:8a:78:b3:df:54:58:d7:d7:e4:6e: b9:09:76:23:ca:fa:23:db:97:e6:a3:12:fe:a3:06:15:8c:6c: 64:56:64:8e:2c:2b:17:7a:8a:85:88:d9:b0:8b:f6:39:b2:5c: fc:43:a2:96:8b:30:19:07:91:2a:b5:57:c8:37:8e:ec:70:1e: a4:bb:0f:08:bd:26:4c:3d:40:31:2d:ba:74:7e:1a:75:57:5c: 02:91:3e:50:d1:2b:f1:3c:9a:42:fe:9e:4c:fd:cc:8f:5c:7b: 75:3c:f3:90 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr2+JkhVai7+5wfwzfzg2eHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg4NzdkYTNkNDgzMDI3YTAxZWRkY2QwZTQzNWU4Mjg1ZjFi MWJiOWUwHhcNMjUxMjA3MDQwMTE4WhcNMjUxMjA4MDQwMTE4WjAzMTEwLwYDVQQD Eyg5ODJkNjIxODVlNWYxYmRiNjIzZWY3ZDQxZjI1Nzg2OTVjOTM1MmExMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv7ER9eW0txb08pzQu7jum1EcN9ll WnHtpjabeSFBRJH2dR5K2EPs8uISar3QnU+lHBkx1OmZE6wn0XuXQAhAIf8ZQ9Z4 1vE+hmeWvVz3/Vq2v+H9cGiIOULbkfwBwCJ5N+H/c6owy+pREQe3A7ApL60kZLoo U8HqspkEYTI4RrKFp5FghC/ddBFYQK78jPxHhz3pNO+nAPqZomYffpu/BQCKBp8g 9XqI86YKchA99XckYchroBKFAMn5dpfWRuoR/Wdn40AytX+wUddbdutT/ySAEy04 Mr+t5iY+qVAOvqYBxFPoQb99Ihm7XUMEsEu62kzzC7NaD+kYJ87obqcB4QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJgtYhheXxvbYj731B8leGlck1KhMB8GA1UdIwQY MBaAFIh32j1IMCegHt3NDkNegoXxsbueMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaUhmYVBVZ3dKNkFlM2MwT1ExNkNoZkd4dTU0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYy9jYjljNjYtZjdjYy00ZGUxLWJkYzEt MmY1ZjRjNTUyNjJmLzEvaUhmYVBVZ3dKNkFlM2MwT1ExNkNoZkd4dTU0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYy9jYjljNjYtZjdjYy00ZGUxLWJkYzEtMmY1ZjRjNTUyNjJm LzEvaUhmYVBVZ3dKNkFlM2MwT1ExNkNoZkd4dTU0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATy8uSA6z bf/FXDE3OTOAiwPeEjEYYrBr4Enn89hJvLlyCJqAhFA93Ypd0ITbeOkFgBTHjLXO 1KIiU/UUGPI4OTt9uiDEqF4wIpTwVIce6Nl9laK1Q6FFrWHbTj2blLL77WE5M7gi Z7lYS8qdf23FqVMJJj1k3Q/b1qVoc4lzYx5i9mBGRggNGp8lJh4D4FYpC4Die9j7 z8SKeLPfVFjX1+RuuQl2I8r6I9uX5qMS/qMGFYxsZFZkjiwrF3qKhYjZsIv2ObJc /EOiloswGQeRKrVXyDeO7HAepLsPCL0mTD1AMS26dH4adVdcApE+UNEr8TyaQv6e TP3Mj1x7dTzzkA== -----END CERTIFICATE-----Generated at Sun Dec 7 10:48:33 2025 by rpki-client