This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/1a2f03-1d7b-4e04-951d-25c11b796982/1/ih4_jS-ULY_BFu-OV1m8N2f7CwY.mft File: ih4_jS-ULY_BFu-OV1m8N2f7CwY.mft (raw, json) Hash identifier: Y+WiZ3TUPsZnfeFOU0OCW+lwnapAf1gkpM5mv/DB9LI= Subject key identifier: 98:2E:53:DD:80:BF:EC:DB:E7:4C:4D:55:0D:B9:7B:F4:EF:B8:27:0C Authority key identifier: 8A:1E:3F:8D:2F:94:2D:8F:C1:16:EF:8E:57:59:BC:37:67:FB:0B:06 Certificate issuer: /CN=8a1e3f8d2f942d8fc116ef8e5759bc3767fb0b06 Certificate serial: 019AF31D090DEFAB2239A50751941EC5AD96 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ih4_jS-ULY_BFu-OV1m8N2f7CwY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/1a2f03-1d7b-4e04-951d-25c11b796982/1/ih4_jS-ULY_BFu-OV1m8N2f7CwY.mft Manifest number: 108F Signing time: Sat 06 Dec 2025 10:02:37 +0000 Manifest this update: Sat 06 Dec 2025 10:02:37 +0000 Manifest next update: Sun 07 Dec 2025 10:02:37 +0000 Files and hashes: 1: ih4_jS-ULY_BFu-OV1m8N2f7CwY.crl (hash: 1xzzXneN/9WaHG1KT21EUyUbUT5a3e8gI38KnMUWdww=) 2: iwkNh3UdWwUz0vScU_NmxlT_kd8.roa (hash: qTLgYZEDj5/iSNL5ILw19yNSQMcWNUWUNm12d5bZdjQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/1a2f03-1d7b-4e04-951d-25c11b796982/1/ih4_jS-ULY_BFu-OV1m8N2f7CwY.crl rsync://rpki.ripe.net/repository/DEFAULT/50/1a2f03-1d7b-4e04-951d-25c11b796982/1/ih4_jS-ULY_BFu-OV1m8N2f7CwY.mft rsync://rpki.ripe.net/repository/DEFAULT/ih4_jS-ULY_BFu-OV1m8N2f7CwY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 10:02:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1d:09:0d:ef:ab:22:39:a5:07:51:94:1e:c5:ad:96 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8a1e3f8d2f942d8fc116ef8e5759bc3767fb0b06 Validity Not Before: Dec 6 10:02:37 2025 GMT Not After : Dec 7 10:02:37 2025 GMT Subject: CN=982e53dd80bfecdbe74c4d550db97bf4efb8270c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:f7:e7:8c:46:ea:bc:11:d1:b6:c3:6a:1b:de: 31:cd:69:b3:0c:9b:68:cd:56:a9:b2:4a:1a:36:2a: 46:2b:cc:7d:14:43:05:a0:3f:1f:b3:5d:59:16:d5: 1b:4c:af:f2:3e:fb:6a:18:27:b6:34:a4:db:eb:a9: 93:0e:95:f3:5a:ab:b4:e4:9d:12:2d:d9:c7:f4:af: 2a:37:30:8e:f0:6d:cf:7a:3d:89:ef:f1:59:bd:5f: 29:c2:a7:93:b9:70:f5:43:41:45:a8:69:cd:be:df: a5:7d:8d:b5:79:58:85:fa:9f:20:2d:a6:5c:c7:f4: a0:e3:ed:df:80:7f:f3:c8:5c:22:a3:cf:b4:d3:e7: 0d:41:6e:2d:74:4e:6d:7e:4e:82:e9:53:2c:28:37: 5d:45:54:7f:49:77:f2:46:23:c4:f1:16:65:99:dc: e8:c3:75:f3:83:9d:6c:b3:6a:47:e1:e6:d0:4b:be: 85:e7:37:ce:62:4c:8d:56:dd:83:3d:8e:13:c4:29: 78:bb:e5:e2:87:64:d3:23:55:e3:08:1f:6c:54:46: e7:60:31:56:e1:06:76:02:75:88:6c:d9:38:be:6d: f1:b1:c7:a0:f3:60:63:56:3e:f1:3a:25:d7:bc:ee: 17:4d:8a:b9:f8:42:46:04:07:eb:ed:ac:bc:52:99: 01:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:2E:53:DD:80:BF:EC:DB:E7:4C:4D:55:0D:B9:7B:F4:EF:B8:27:0C X509v3 Authority Key Identifier: keyid:8A:1E:3F:8D:2F:94:2D:8F:C1:16:EF:8E:57:59:BC:37:67:FB:0B:06 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ih4_jS-ULY_BFu-OV1m8N2f7CwY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/1a2f03-1d7b-4e04-951d-25c11b796982/1/ih4_jS-ULY_BFu-OV1m8N2f7CwY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/50/1a2f03-1d7b-4e04-951d-25c11b796982/1/ih4_jS-ULY_BFu-OV1m8N2f7CwY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 33:e4:d5:d6:7f:40:8e:7b:af:43:e8:4e:45:f6:b9:e7:89:b1: cb:9c:4e:e6:45:84:ac:82:bf:fc:ba:64:ed:31:b9:81:6a:35: ef:fd:88:01:fb:88:8d:e9:8d:7a:0e:4b:17:b4:ac:08:d4:dd: 78:52:98:36:7c:52:7e:57:7b:a2:33:78:17:e2:43:4d:4c:6c: 38:39:92:d0:5d:f4:3b:4a:b5:8c:e3:5b:ff:5a:c6:b2:cc:4d: 77:ae:80:93:b8:4a:3d:e6:ca:96:bc:85:76:f9:31:02:aa:f8: ab:a5:3b:d3:67:16:71:ba:cd:44:19:ac:bc:8c:b9:3c:2e:58: fe:fe:f2:64:02:58:e4:c5:91:d5:e7:3f:26:8b:cd:2d:8c:14: 4d:4e:1d:ad:0c:2f:e9:16:74:be:7c:02:fc:f5:92:32:3a:80: b6:c7:56:00:45:ab:e9:96:ce:e7:3c:3d:59:17:7f:78:8f:d7: c4:6f:af:09:4a:a9:98:cc:b4:b9:17:03:09:45:a4:a6:df:e7: 9e:42:35:41:d8:2a:04:c5:2b:c1:d9:91:b6:0a:15:52:b9:e6: 0e:c8:e5:6a:33:33:ac:39:d2:87:42:bf:5f:86:af:1c:49:3e: a9:67:89:31:60:e5:aa:bd:ad:df:55:32:29:64:52:2b:1e:48: 2b:51:2f:f1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzHQkN76siOaUHUZQexa2WMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhhMWUzZjhkMmY5NDJkOGZjMTE2ZWY4ZTU3NTliYzM3Njdm YjBiMDYwHhcNMjUxMjA2MTAwMjM3WhcNMjUxMjA3MTAwMjM3WjAzMTEwLwYDVQQD Eyg5ODJlNTNkZDgwYmZlY2RiZTc0YzRkNTUwZGI5N2JmNGVmYjgyNzBjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoffnjEbqvBHRtsNqG94xzWmzDJto zVapskoaNipGK8x9FEMFoD8fs11ZFtUbTK/yPvtqGCe2NKTb66mTDpXzWqu05J0S LdnH9K8qNzCO8G3Pej2J7/FZvV8pwqeTuXD1Q0FFqGnNvt+lfY21eViF+p8gLaZc x/Sg4+3fgH/zyFwio8+00+cNQW4tdE5tfk6C6VMsKDddRVR/SXfyRiPE8RZlmdzo w3Xzg51ss2pH4ebQS76F5zfOYkyNVt2DPY4TxCl4u+Xih2TTI1XjCB9sVEbnYDFW 4QZ2AnWIbNk4vm3xsceg82BjVj7xOiXXvO4XTYq5+EJGBAfr7ay8UpkBfQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJguU92Av+zb50xNVQ25e/TvuCcMMB8GA1UdIwQY MBaAFIoeP40vlC2PwRbvjldZvDdn+wsGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaWg0X2pTLVVMWV9CRnUtT1YxbThOMmY3Q3dZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MC8xYTJmMDMtMWQ3Yi00ZTA0LTk1MWQt MjVjMTFiNzk2OTgyLzEvaWg0X2pTLVVMWV9CRnUtT1YxbThOMmY3Q3dZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MC8xYTJmMDMtMWQ3Yi00ZTA0LTk1MWQtMjVjMTFiNzk2OTgy LzEvaWg0X2pTLVVMWV9CRnUtT1YxbThOMmY3Q3dZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAM+TV1n9A jnuvQ+hORfa554mxy5xO5kWErIK//Lpk7TG5gWo17/2IAfuIjemNeg5LF7SsCNTd eFKYNnxSfld7ojN4F+JDTUxsODmS0F30O0q1jONb/1rGssxNd66Ak7hKPebKlryF dvkxAqr4q6U702cWcbrNRBmsvIy5PC5Y/v7yZAJY5MWR1ec/JovNLYwUTU4drQwv 6RZ0vnwC/PWSMjqAtsdWAEWr6ZbO5zw9WRd/eI/XxG+vCUqpmMy0uRcDCUWkpt/n nkI1QdgqBMUrwdmRtgoVUrnmDsjlajMzrDnSh0K/X4avHEk+qWeJMWDlqr2t31Uy KWRSKx5IK1Ev8Q== -----END CERTIFICATE-----Generated at Sat Dec 6 20:02:07 2025 by rpki-client