This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/dffb19-d467-4ee5-8cf6-f63d20a78f75/1/i4GUQccJMDSp1GVqL202qyQDP-Q.mft File: i4GUQccJMDSp1GVqL202qyQDP-Q.mft (raw, json) Hash identifier: eOLPj5fibdOUIV0nUoO7878zmO+0TLO7aC+otHVcamA= Subject key identifier: 1B:C4:36:29:62:5D:29:B3:ED:BC:91:57:D1:E5:37:63:21:8B:AD:2D Authority key identifier: 8B:81:94:41:C7:09:30:34:A9:D4:65:6A:2F:6D:36:AB:24:03:3F:E4 Certificate issuer: /CN=8b819441c7093034a9d4656a2f6d36ab24033fe4 Certificate serial: 019AF209B18C1CD35EB784D7DF68BA76300B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i4GUQccJMDSp1GVqL202qyQDP-Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/dffb19-d467-4ee5-8cf6-f63d20a78f75/1/i4GUQccJMDSp1GVqL202qyQDP-Q.mft Manifest number: 01D7 Signing time: Sat 06 Dec 2025 05:01:52 +0000 Manifest this update: Sat 06 Dec 2025 05:01:52 +0000 Manifest next update: Sun 07 Dec 2025 05:01:52 +0000 Files and hashes: 1: Dm667XnaRqtK2i3UfsThVeXTWc4.roa (hash: 8yEFF1MNlsRKs74/fi+3dMb5d+dLJ3drU0IwlTP+fus=) 2: i4GUQccJMDSp1GVqL202qyQDP-Q.crl (hash: MrlAmTVgvgoxi5S8tAmdc3sYcc24gETf3LUtEn8hngs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/dffb19-d467-4ee5-8cf6-f63d20a78f75/1/i4GUQccJMDSp1GVqL202qyQDP-Q.crl rsync://rpki.ripe.net/repository/DEFAULT/61/dffb19-d467-4ee5-8cf6-f63d20a78f75/1/i4GUQccJMDSp1GVqL202qyQDP-Q.mft rsync://rpki.ripe.net/repository/DEFAULT/i4GUQccJMDSp1GVqL202qyQDP-Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:09:b1:8c:1c:d3:5e:b7:84:d7:df:68:ba:76:30:0b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8b819441c7093034a9d4656a2f6d36ab24033fe4 Validity Not Before: Dec 6 05:01:52 2025 GMT Not After : Dec 7 05:01:52 2025 GMT Subject: CN=1bc43629625d29b3edbc9157d1e53763218bad2d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:bd:10:5b:ec:f3:17:7a:18:8c:ba:37:24:ee: 4f:de:f7:0c:41:21:9e:37:ec:9c:d5:ca:13:8f:df: 8a:d8:f6:3d:41:be:7b:85:44:2b:fd:6c:a3:3f:25: a6:a8:df:d3:3f:68:db:33:80:d9:76:20:03:7c:47: 4c:34:20:0e:6d:54:3b:8e:8d:c0:87:70:17:7b:1c: d9:b1:7f:56:e0:5e:a4:36:ed:23:65:fb:46:e4:f2: 4c:95:37:5c:20:5c:bc:9f:ec:58:a9:1f:60:2e:f8: c3:cd:ac:4e:48:9a:c8:e7:e6:a0:51:1e:8d:c4:21: 41:a0:8f:ef:94:c4:9b:7d:e1:2d:aa:62:08:fc:9b: e8:bc:0a:71:83:2f:9b:4c:8e:d5:58:76:6d:0d:71: a7:01:8f:19:c7:7e:5c:25:e5:d1:09:04:57:f4:67: c4:a7:cb:7d:85:2f:eb:5f:32:45:96:0f:8b:67:85: 14:04:73:5e:6a:81:cf:bd:cc:43:02:3c:d3:38:f5: d7:f0:60:9b:62:a9:24:94:7f:43:db:b4:13:33:50: e3:5e:6c:dc:ac:44:3d:24:15:c4:3c:e5:8e:5e:c2: 9d:ce:6f:c5:1b:bc:db:80:7d:da:1e:b3:a2:a6:65: 51:57:c0:00:61:5e:4f:f7:29:b7:59:1d:3a:af:78: 90:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:C4:36:29:62:5D:29:B3:ED:BC:91:57:D1:E5:37:63:21:8B:AD:2D X509v3 Authority Key Identifier: keyid:8B:81:94:41:C7:09:30:34:A9:D4:65:6A:2F:6D:36:AB:24:03:3F:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i4GUQccJMDSp1GVqL202qyQDP-Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/dffb19-d467-4ee5-8cf6-f63d20a78f75/1/i4GUQccJMDSp1GVqL202qyQDP-Q.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/61/dffb19-d467-4ee5-8cf6-f63d20a78f75/1/i4GUQccJMDSp1GVqL202qyQDP-Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 25:57:45:cb:f1:65:57:bb:b0:86:d9:09:e8:8e:71:f9:4a:f0: 76:0f:f8:85:64:0b:06:dc:fa:94:71:7f:b1:22:8d:2c:5c:ed: fd:12:aa:fe:8c:af:c1:58:56:58:70:70:6e:bc:fc:42:34:cc: 5b:7d:16:fe:21:c6:e5:f3:93:93:80:1a:8b:e7:1a:8b:97:0f: 88:8a:25:67:36:24:44:dc:c6:67:f9:16:cd:54:63:ab:5d:0b: db:2b:8d:1e:da:c7:56:1f:3c:f9:3d:61:98:5a:76:16:5e:d7: 31:ba:cb:ee:2e:39:3a:83:31:44:8e:ed:95:a3:04:52:c3:5c: f4:c5:cd:56:5f:75:4e:e2:97:41:2b:e5:3f:4a:f2:70:18:30: ec:0c:17:75:ba:28:a9:80:1e:b8:e4:bc:48:87:a4:2b:16:10: ac:79:02:12:e9:54:df:38:36:6b:20:6c:ec:71:35:78:93:21: 10:65:31:76:c5:75:8d:e5:d8:63:c7:e0:27:2a:96:09:88:ad: c7:29:bd:5a:c4:ef:e8:e5:d7:39:4a:96:ac:66:ee:d0:df:e7: d1:57:6b:6c:f9:73:41:56:6e:2c:01:9e:5e:eb:4b:56:19:15: 19:1c:9d:2b:5f:70:aa:d3:b6:df:6b:7e:9c:81:83:2b:68:e6: f6:6b:bb:55 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCbGMHNNet4TX32i6djALMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhiODE5NDQxYzcwOTMwMzRhOWQ0NjU2YTJmNmQzNmFiMjQw MzNmZTQwHhcNMjUxMjA2MDUwMTUyWhcNMjUxMjA3MDUwMTUyWjAzMTEwLwYDVQQD EygxYmM0MzYyOTYyNWQyOWIzZWRiYzkxNTdkMWU1Mzc2MzIxOGJhZDJkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu70QW+zzF3oYjLo3JO5P3vcMQSGe N+yc1coTj9+K2PY9Qb57hUQr/WyjPyWmqN/TP2jbM4DZdiADfEdMNCAObVQ7jo3A h3AXexzZsX9W4F6kNu0jZftG5PJMlTdcIFy8n+xYqR9gLvjDzaxOSJrI5+agUR6N xCFBoI/vlMSbfeEtqmII/JvovApxgy+bTI7VWHZtDXGnAY8Zx35cJeXRCQRX9GfE p8t9hS/rXzJFlg+LZ4UUBHNeaoHPvcxDAjzTOPXX8GCbYqkklH9D27QTM1DjXmzc rEQ9JBXEPOWOXsKdzm/FG7zbgH3aHrOipmVRV8AAYV5P9ym3WR06r3iQDQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBvENiliXSmz7byRV9HlN2Mhi60tMB8GA1UdIwQY MBaAFIuBlEHHCTA0qdRlai9tNqskAz/kMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaTRHVVFjY0pNRFNwMUdWcUwyMDJxeVFEUC1RLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS9kZmZiMTktZDQ2Ny00ZWU1LThjZjYt ZjYzZDIwYTc4Zjc1LzEvaTRHVVFjY0pNRFNwMUdWcUwyMDJxeVFEUC1RLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82MS9kZmZiMTktZDQ2Ny00ZWU1LThjZjYtZjYzZDIwYTc4Zjc1 LzEvaTRHVVFjY0pNRFNwMUdWcUwyMDJxeVFEUC1RLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJVdFy/Fl V7uwhtkJ6I5x+Urwdg/4hWQLBtz6lHF/sSKNLFzt/RKq/oyvwVhWWHBwbrz8QjTM W30W/iHG5fOTk4Aai+cai5cPiIolZzYkRNzGZ/kWzVRjq10L2yuNHtrHVh88+T1h mFp2Fl7XMbrL7i45OoMxRI7tlaMEUsNc9MXNVl91TuKXQSvlP0rycBgw7AwXdboo qYAeuOS8SIekKxYQrHkCEulU3zg2ayBs7HE1eJMhEGUxdsV1jeXYY8fgJyqWCYit xym9WsTv6OXXOUqWrGbu0N/n0VdrbPlzQVZuLAGeXutLVhkVGRydK19wqtO232t+ nIGDK2jm9mu7VQ== -----END CERTIFICATE-----Generated at Sat Dec 6 08:19:01 2025 by rpki-client