This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/04c4ce-b9f3-4c6a-a3e9-91bf61dd853f/1/iJh-1Oc9BAdIPMIkzPRa7fSWndU.mft File: iJh-1Oc9BAdIPMIkzPRa7fSWndU.mft (raw, json) Hash identifier: ZXz03VunyxYdXENqSMl7aQrizy0GYMV5XknpcNZ3CEw= Subject key identifier: BC:45:69:4A:F5:2D:7B:AC:E7:7F:A4:64:77:64:87:0E:30:8F:23:6A Authority key identifier: 88:98:7E:D4:E7:3D:04:07:48:3C:C2:24:CC:F4:5A:ED:F4:96:9D:D5 Certificate issuer: /CN=88987ed4e73d0407483cc224ccf45aedf4969dd5 Certificate serial: 019AF3F75C24328A0BF4ECEBE315AB5C9A0A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iJh-1Oc9BAdIPMIkzPRa7fSWndU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/04c4ce-b9f3-4c6a-a3e9-91bf61dd853f/1/iJh-1Oc9BAdIPMIkzPRa7fSWndU.mft Manifest number: 16F8 Signing time: Sat 06 Dec 2025 14:01:05 +0000 Manifest this update: Sat 06 Dec 2025 14:01:05 +0000 Manifest next update: Sun 07 Dec 2025 14:01:05 +0000 Files and hashes: 1: iJh-1Oc9BAdIPMIkzPRa7fSWndU.crl (hash: JyQFfcn7spUbWuw7akzdaqjEM++vOjah7DML4Ok47v0=) 2: ja_rBF-mVB6I6AG5Sq3U_cQoltk.roa (hash: nVfwFtdg/ueuXQpAAMHTHZq3sXCbrECHNWhALLqW2Vo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/04c4ce-b9f3-4c6a-a3e9-91bf61dd853f/1/iJh-1Oc9BAdIPMIkzPRa7fSWndU.crl rsync://rpki.ripe.net/repository/DEFAULT/54/04c4ce-b9f3-4c6a-a3e9-91bf61dd853f/1/iJh-1Oc9BAdIPMIkzPRa7fSWndU.mft rsync://rpki.ripe.net/repository/DEFAULT/iJh-1Oc9BAdIPMIkzPRa7fSWndU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:f7:5c:24:32:8a:0b:f4:ec:eb:e3:15:ab:5c:9a:0a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=88987ed4e73d0407483cc224ccf45aedf4969dd5 Validity Not Before: Dec 6 14:01:05 2025 GMT Not After : Dec 7 14:01:05 2025 GMT Subject: CN=bc45694af52d7bace77fa4647764870e308f236a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:d0:6f:7b:12:65:d8:ca:67:72:a7:e0:49:87: a4:84:50:d6:ee:ca:a6:15:07:7a:52:b2:38:81:69: 1e:40:a3:ef:2b:86:aa:69:d9:fe:82:2d:62:3c:1b: a5:dc:52:0c:bb:91:22:17:29:13:01:0b:13:06:b8: a5:68:4e:e4:95:e9:22:54:2a:29:89:28:8c:90:48: 0a:cc:ff:76:55:77:c1:66:87:d5:8f:ae:36:7d:24: ff:31:13:44:d5:09:d7:13:34:22:4a:98:94:e9:d4: b3:67:21:3a:13:a6:82:4a:22:69:51:26:9e:3e:00: 55:cb:97:37:b8:25:4e:8d:91:0c:35:4c:10:b5:30: f4:1d:2a:a8:d7:9f:08:b3:5d:94:be:26:11:ca:6f: bf:e8:27:fb:aa:c7:8c:52:d4:bd:65:c4:49:6d:a8: ec:38:14:66:c0:64:1e:22:a3:91:81:c0:83:23:99: af:74:96:e2:37:af:65:23:60:8c:92:de:7b:d5:d2: ac:a3:90:1f:d9:11:71:da:93:1d:e3:ff:16:9a:90: ee:f9:f5:99:cb:7c:0d:b6:52:59:e3:a9:05:3d:80: 8a:35:fc:ab:52:8e:59:d8:3f:66:80:64:79:23:ff: 29:c9:5a:e2:c5:bc:b5:6d:74:36:1e:71:4a:17:21: 1b:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:45:69:4A:F5:2D:7B:AC:E7:7F:A4:64:77:64:87:0E:30:8F:23:6A X509v3 Authority Key Identifier: keyid:88:98:7E:D4:E7:3D:04:07:48:3C:C2:24:CC:F4:5A:ED:F4:96:9D:D5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iJh-1Oc9BAdIPMIkzPRa7fSWndU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/04c4ce-b9f3-4c6a-a3e9-91bf61dd853f/1/iJh-1Oc9BAdIPMIkzPRa7fSWndU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/54/04c4ce-b9f3-4c6a-a3e9-91bf61dd853f/1/iJh-1Oc9BAdIPMIkzPRa7fSWndU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 35:19:b9:92:19:78:91:14:67:65:59:f6:7a:d5:c3:1b:b6:c2: b1:ea:ee:92:70:75:84:35:ef:37:c2:6b:b9:78:f3:58:c1:e0: 39:4d:01:0d:13:c4:16:c9:da:ef:dd:21:44:64:7f:66:03:10: 83:d0:d1:02:e1:96:e6:4b:d9:2c:5e:a3:79:c7:07:02:4f:10: 7b:b1:63:84:d5:fd:5f:21:08:e5:6f:ce:2c:fe:32:fe:5e:a2: 0f:29:5b:8c:70:9b:5d:76:c3:5c:05:32:05:b3:4f:fe:00:47: 24:80:bc:4a:b8:c6:d0:48:98:31:5c:bb:f3:17:3b:3b:a9:ff: 0f:63:42:35:25:e3:cc:cf:7b:5e:65:5a:68:ff:d2:d8:1c:31: 08:5a:f9:a5:50:f8:a8:97:3d:ba:e4:71:53:5e:29:52:a1:d1: fa:db:86:10:e5:7d:63:d9:8f:ce:8c:14:ae:2e:ff:42:3e:68: 50:1a:52:64:77:b9:7e:7b:53:08:90:5c:bc:62:45:83:54:2e: 52:bf:a2:12:32:02:e4:2d:14:bf:53:2c:0e:82:9d:f9:df:a2: 42:9b:9f:da:8e:72:a4:31:7d:f7:49:d5:26:f6:31:ed:16:69: 58:94:a7:7c:95:a3:cf:77:bc:36:54:19:91:5a:f4:20:60:7d: 56:8b:a8:5f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrz91wkMooL9Ozr4xWrXJoKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg4OTg3ZWQ0ZTczZDA0MDc0ODNjYzIyNGNjZjQ1YWVkZjQ5 NjlkZDUwHhcNMjUxMjA2MTQwMTA1WhcNMjUxMjA3MTQwMTA1WjAzMTEwLwYDVQQD EyhiYzQ1Njk0YWY1MmQ3YmFjZTc3ZmE0NjQ3NzY0ODcwZTMwOGYyMzZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1dBvexJl2MpncqfgSYekhFDW7sqm FQd6UrI4gWkeQKPvK4aqadn+gi1iPBul3FIMu5EiFykTAQsTBrilaE7klekiVCop iSiMkEgKzP92VXfBZofVj642fST/MRNE1QnXEzQiSpiU6dSzZyE6E6aCSiJpUSae PgBVy5c3uCVOjZEMNUwQtTD0HSqo158Is12UviYRym+/6Cf7qseMUtS9ZcRJbajs OBRmwGQeIqORgcCDI5mvdJbiN69lI2CMkt571dKso5Af2RFx2pMd4/8WmpDu+fWZ y3wNtlJZ46kFPYCKNfyrUo5Z2D9mgGR5I/8pyVrixby1bXQ2HnFKFyEb/wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLxFaUr1LXus53+kZHdkhw4wjyNqMB8GA1UdIwQY MBaAFIiYftTnPQQHSDzCJMz0Wu30lp3VMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaUpoLTFPYzlCQWRJUE1Ja3pQUmE3ZlNXbmRVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NC8wNGM0Y2UtYjlmMy00YzZhLWEzZTkt OTFiZjYxZGQ4NTNmLzEvaUpoLTFPYzlCQWRJUE1Ja3pQUmE3ZlNXbmRVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81NC8wNGM0Y2UtYjlmMy00YzZhLWEzZTktOTFiZjYxZGQ4NTNm LzEvaUpoLTFPYzlCQWRJUE1Ja3pQUmE3ZlNXbmRVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANRm5khl4 kRRnZVn2etXDG7bCseruknB1hDXvN8JruXjzWMHgOU0BDRPEFsna790hRGR/ZgMQ g9DRAuGW5kvZLF6jeccHAk8Qe7FjhNX9XyEI5W/OLP4y/l6iDylbjHCbXXbDXAUy BbNP/gBHJIC8SrjG0EiYMVy78xc7O6n/D2NCNSXjzM97XmVaaP/S2BwxCFr5pVD4 qJc9uuRxU14pUqHR+tuGEOV9Y9mPzowUri7/Qj5oUBpSZHe5fntTCJBcvGJFg1Qu Ur+iEjIC5C0Uv1MsDoKd+d+iQpuf2o5ypDF990nVJvYx7RZpWJSnfJWjz3e8NlQZ kVr0IGB9VouoXw== -----END CERTIFICATE-----Generated at Sat Dec 6 17:13:33 2025 by rpki-client