This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/f89b2e-53a3-4157-a960-42dafb4b51d2/1/lI1Fz-NIK49h2uAAsAekZ-zdTuY.mft File: lI1Fz-NIK49h2uAAsAekZ-zdTuY.mft (raw, json) Hash identifier: GkPMm4KbjLy2+3fpA7jcDxMbduXITq8eIrupkd9U0tk= Subject key identifier: 3B:EE:8A:C4:62:88:8F:C3:D9:01:FE:01:0C:26:A2:37:BF:E4:82:C5 Authority key identifier: 94:8D:45:CF:E3:48:2B:8F:61:DA:E0:00:B0:07:A4:67:EC:DD:4E:E6 Certificate issuer: /CN=948d45cfe3482b8f61dae000b007a467ecdd4ee6 Certificate serial: 019B228737C40BD42E7730EAA7CDF857F5A0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lI1Fz-NIK49h2uAAsAekZ-zdTuY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/f89b2e-53a3-4157-a960-42dafb4b51d2/1/lI1Fz-NIK49h2uAAsAekZ-zdTuY.mft Manifest number: 1780 Signing time: Mon 15 Dec 2025 15:00:45 +0000 Manifest this update: Mon 15 Dec 2025 15:00:45 +0000 Manifest next update: Tue 16 Dec 2025 15:00:45 +0000 Files and hashes: 1: 5UBdfwa59JnO3TC0RbPoMbXcwMI.roa (hash: BXAoKRzIsnGpyUD97PKhyGWEISH1mZLvzMgOl4ru7To=) 2: lI1Fz-NIK49h2uAAsAekZ-zdTuY.crl (hash: 7W81kBZXTWgqGGMRGhNX+03Uj/pm1QAPTBWfl1qqstM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/f89b2e-53a3-4157-a960-42dafb4b51d2/1/lI1Fz-NIK49h2uAAsAekZ-zdTuY.crl rsync://rpki.ripe.net/repository/DEFAULT/4a/f89b2e-53a3-4157-a960-42dafb4b51d2/1/lI1Fz-NIK49h2uAAsAekZ-zdTuY.mft rsync://rpki.ripe.net/repository/DEFAULT/lI1Fz-NIK49h2uAAsAekZ-zdTuY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 15:00:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:22:87:37:c4:0b:d4:2e:77:30:ea:a7:cd:f8:57:f5:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=948d45cfe3482b8f61dae000b007a467ecdd4ee6 Validity Not Before: Dec 15 15:00:45 2025 GMT Not After : Dec 16 15:00:45 2025 GMT Subject: CN=3bee8ac462888fc3d901fe010c26a237bfe482c5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:85:c5:5f:6c:3d:67:22:3d:e4:61:aa:8d:76: e7:88:a1:a0:3d:cc:cf:c0:a4:89:7e:6e:f3:af:7d: 42:02:01:1b:2f:ec:75:2c:cc:61:80:59:fe:9d:bd: 70:ef:d0:82:2d:09:c2:34:8c:f7:c2:44:26:a5:45: a4:64:46:0b:e3:53:bc:00:fe:c2:03:a8:7d:71:74: 29:0e:8f:7a:54:89:0e:ca:56:e5:f8:bc:c2:8d:67: 90:ef:74:c5:93:c3:c3:3e:50:d0:45:b7:8b:71:47: 91:11:8a:04:65:73:eb:9f:44:c4:4e:83:63:d8:7f: c4:76:b7:db:17:20:42:c6:27:8c:f9:cd:02:af:7b: 55:33:03:72:1b:17:b1:a1:be:3e:0e:7c:77:d5:21: 82:36:78:78:0a:2e:93:3d:37:c6:f5:e5:d2:22:f7: 24:f5:90:11:63:d4:88:98:f1:4a:59:5f:9c:81:fc: 2c:29:9d:28:7b:96:c8:82:34:cf:d5:c9:94:66:33: ba:62:f0:f1:70:25:0d:73:2f:7a:80:5a:0d:fc:ad: 51:94:88:f4:3c:9a:47:8d:c6:79:4c:5c:91:ef:bd: 21:e9:92:a5:66:d9:47:97:70:c0:7f:05:47:16:55: da:26:70:0e:0a:6b:44:40:f8:41:06:60:9f:ca:00: f3:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:EE:8A:C4:62:88:8F:C3:D9:01:FE:01:0C:26:A2:37:BF:E4:82:C5 X509v3 Authority Key Identifier: keyid:94:8D:45:CF:E3:48:2B:8F:61:DA:E0:00:B0:07:A4:67:EC:DD:4E:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lI1Fz-NIK49h2uAAsAekZ-zdTuY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/f89b2e-53a3-4157-a960-42dafb4b51d2/1/lI1Fz-NIK49h2uAAsAekZ-zdTuY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/f89b2e-53a3-4157-a960-42dafb4b51d2/1/lI1Fz-NIK49h2uAAsAekZ-zdTuY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 30:28:7d:21:57:10:1f:81:5b:39:ac:83:22:46:51:1e:f3:b2: c5:6c:90:f3:7c:b8:d9:78:62:b5:fd:ce:63:42:ef:6c:6f:52: 09:ad:38:45:21:d5:00:0a:ed:73:92:78:e0:87:ba:fb:f7:7d: 66:d7:4f:46:26:69:0a:5c:fc:1d:f1:8f:df:80:41:69:3d:61: 70:bb:72:bd:c0:b1:4d:c9:03:91:3c:71:12:f4:18:68:f1:ee: d9:9c:6d:07:62:b7:5a:b7:47:71:f0:3f:cd:0c:0c:64:85:8d: 02:73:8e:b2:90:e1:61:af:af:6c:2d:37:12:4a:48:8f:46:a6: 52:6d:9e:a3:83:2c:fd:d8:22:f5:89:11:45:61:28:03:58:b4: 5e:03:22:71:74:40:10:3b:46:1b:69:61:fc:e0:19:55:9b:25: ac:96:ba:22:24:a3:71:99:cd:d5:bc:84:1a:cf:ae:75:7d:19: 5a:e7:bd:3d:25:26:44:c4:b2:b0:89:fd:14:be:0b:46:c3:ab: 51:d4:cd:fb:0c:6e:44:d5:2e:11:2a:4f:3e:10:be:c6:d2:d6: d6:12:b2:52:b6:23:b1:af:c0:28:55:bd:37:1b:14:70:50:cc: e1:b6:d3:08:65:d3:f4:32:0a:92:0f:15:c6:0e:4f:44:aa:5c: e3:78:2a:c5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsihzfEC9QudzDqp834V/WgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk0OGQ0NWNmZTM0ODJiOGY2MWRhZTAwMGIwMDdhNDY3ZWNk ZDRlZTYwHhcNMjUxMjE1MTUwMDQ1WhcNMjUxMjE2MTUwMDQ1WjAzMTEwLwYDVQQD EygzYmVlOGFjNDYyODg4ZmMzZDkwMWZlMDEwYzI2YTIzN2JmZTQ4MmM1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhoXFX2w9ZyI95GGqjXbniKGgPczP wKSJfm7zr31CAgEbL+x1LMxhgFn+nb1w79CCLQnCNIz3wkQmpUWkZEYL41O8AP7C A6h9cXQpDo96VIkOylbl+LzCjWeQ73TFk8PDPlDQRbeLcUeREYoEZXPrn0TEToNj 2H/EdrfbFyBCxieM+c0Cr3tVMwNyGxexob4+Dnx31SGCNnh4Ci6TPTfG9eXSIvck 9ZARY9SImPFKWV+cgfwsKZ0oe5bIgjTP1cmUZjO6YvDxcCUNcy96gFoN/K1RlIj0 PJpHjcZ5TFyR770h6ZKlZtlHl3DAfwVHFlXaJnAOCmtEQPhBBmCfygDzewIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDvuisRiiI/D2QH+AQwmoje/5ILFMB8GA1UdIwQY MBaAFJSNRc/jSCuPYdrgALAHpGfs3U7mMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbEkxRnotTklLNDloMnVBQXNBZWtaLXpkVHVZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80YS9mODliMmUtNTNhMy00MTU3LWE5NjAt NDJkYWZiNGI1MWQyLzEvbEkxRnotTklLNDloMnVBQXNBZWtaLXpkVHVZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80YS9mODliMmUtNTNhMy00MTU3LWE5NjAtNDJkYWZiNGI1MWQy LzEvbEkxRnotTklLNDloMnVBQXNBZWtaLXpkVHVZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMCh9IVcQ H4FbOayDIkZRHvOyxWyQ83y42Xhitf3OY0LvbG9SCa04RSHVAArtc5J44Ie6+/d9 ZtdPRiZpClz8HfGP34BBaT1hcLtyvcCxTckDkTxxEvQYaPHu2ZxtB2K3WrdHcfA/ zQwMZIWNAnOOspDhYa+vbC03EkpIj0amUm2eo4Ms/dgi9YkRRWEoA1i0XgMicXRA EDtGG2lh/OAZVZslrJa6IiSjcZnN1byEGs+udX0ZWue9PSUmRMSysIn9FL4LRsOr UdTN+wxuRNUuESpPPhC+xtLW1hKyUrYjsa/AKFW9NxsUcFDM4bbTCGXT9DIKkg8V xg5PRKpc43gqxQ== -----END CERTIFICATE-----Generated at Tue Dec 16 00:33:42 2025 by rpki-client