This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/3bb3a8-1c3e-4154-90a9-006de0fa5342/1/Ihm1ncLp80slUjDlYqPMph2usVU.mft File: Ihm1ncLp80slUjDlYqPMph2usVU.mft (raw, json) Hash identifier: WJzpmZQe7hQKXI2jTs3lbG/WGFk3U5DHsCiGmcl6UR0= Subject key identifier: B3:88:D8:CC:18:7A:A8:DE:05:E6:E9:41:7C:91:7F:76:A8:FB:AF:B7 Authority key identifier: 22:19:B5:9D:C2:E9:F3:4B:25:52:30:E5:62:A3:CC:A6:1D:AE:B1:55 Certificate issuer: /CN=2219b59dc2e9f34b255230e562a3cca61daeb155 Certificate serial: 019AF27679A7691CDAB8FB0BA3DA0E4CCCCC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ihm1ncLp80slUjDlYqPMph2usVU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/3bb3a8-1c3e-4154-90a9-006de0fa5342/1/Ihm1ncLp80slUjDlYqPMph2usVU.mft Manifest number: 1433 Signing time: Sat 06 Dec 2025 07:00:41 +0000 Manifest this update: Sat 06 Dec 2025 07:00:41 +0000 Manifest next update: Sun 07 Dec 2025 07:00:41 +0000 Files and hashes: 1: Ihm1ncLp80slUjDlYqPMph2usVU.crl (hash: LqEr8niIo7K3rmHOBhLXFqQ3XcWzEzF2tAuHFgRanCQ=) 2: Nk1hjqrpzwcKxMs_ejWJ395qXXo.roa (hash: uRWV+NR8DLzCaelMu4ig9EBtvA2PkzEXB7bjRzj91IU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/3bb3a8-1c3e-4154-90a9-006de0fa5342/1/Ihm1ncLp80slUjDlYqPMph2usVU.crl rsync://rpki.ripe.net/repository/DEFAULT/88/3bb3a8-1c3e-4154-90a9-006de0fa5342/1/Ihm1ncLp80slUjDlYqPMph2usVU.mft rsync://rpki.ripe.net/repository/DEFAULT/Ihm1ncLp80slUjDlYqPMph2usVU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 07:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:76:79:a7:69:1c:da:b8:fb:0b:a3:da:0e:4c:cc:cc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2219b59dc2e9f34b255230e562a3cca61daeb155 Validity Not Before: Dec 6 07:00:41 2025 GMT Not After : Dec 7 07:00:41 2025 GMT Subject: CN=b388d8cc187aa8de05e6e9417c917f76a8fbafb7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:ab:e4:26:8e:37:5d:61:1a:53:b9:31:07:51: f9:ba:3c:67:ff:fe:c7:2c:3e:d5:47:47:a0:8a:d9: 8d:cc:a5:62:33:ae:ec:fb:25:3e:80:a5:13:80:a9: fb:8d:09:39:9d:f0:82:a9:b8:a6:c0:aa:cb:97:40: e1:89:ce:56:7d:7f:82:bd:86:85:02:b5:4c:d0:09: 49:6d:5d:27:78:92:0d:b3:df:20:57:3c:21:0b:76: bd:c9:f5:4d:4a:5c:11:dc:7d:6e:08:88:75:b7:55: 84:1c:6f:0c:31:74:39:c6:65:19:c4:f5:12:36:ec: ed:9a:b8:32:c7:87:43:3f:36:92:d2:ea:79:ee:75: dc:3c:02:2f:04:53:65:2f:98:9c:b1:37:4b:e8:7d: 2b:2e:e2:66:74:04:f8:75:01:72:06:1c:4e:43:b0: 0b:9d:5a:3e:d1:f0:cd:83:58:24:1e:fa:98:79:36: d9:06:df:ea:b8:0e:cc:0b:68:e7:94:f5:d8:6b:10: c8:71:00:6e:7f:3c:fb:a0:2a:09:06:e0:c8:7a:54: 49:9e:13:6d:82:42:cb:2c:c8:63:a7:b8:7a:2e:4e: c7:16:03:f3:86:f1:62:4c:93:65:fe:b0:f0:8b:fb: 2b:72:fc:1e:65:ac:0b:7f:76:39:b3:22:49:78:d0: ab:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:88:D8:CC:18:7A:A8:DE:05:E6:E9:41:7C:91:7F:76:A8:FB:AF:B7 X509v3 Authority Key Identifier: keyid:22:19:B5:9D:C2:E9:F3:4B:25:52:30:E5:62:A3:CC:A6:1D:AE:B1:55 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ihm1ncLp80slUjDlYqPMph2usVU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/3bb3a8-1c3e-4154-90a9-006de0fa5342/1/Ihm1ncLp80slUjDlYqPMph2usVU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/88/3bb3a8-1c3e-4154-90a9-006de0fa5342/1/Ihm1ncLp80slUjDlYqPMph2usVU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9f:cb:ab:63:09:da:17:fc:55:fc:4a:32:43:c5:78:b7:3b:84: df:e6:8d:31:41:97:f3:d1:c5:7c:3d:ea:d4:c0:11:51:ef:01: 12:98:b0:1d:b0:9b:6e:70:86:6d:04:9d:a0:5a:0c:f7:c9:88: 1d:6b:32:cb:47:40:39:ea:1a:92:f4:68:4d:93:2f:eb:f1:ee: 22:35:5c:64:fc:fd:f1:a0:f3:47:22:a1:9e:a2:f9:9c:b5:c9: 2e:31:e8:27:e6:dc:23:88:4e:df:49:a9:11:8a:c1:69:a1:7a: 4a:87:61:48:da:13:df:54:d6:72:d8:0a:73:38:57:9c:14:71: 8d:04:b0:fb:17:ea:15:68:24:b7:d6:32:b9:6c:6e:b9:d7:59: 1f:db:3d:48:2f:7b:7f:7e:0b:8d:97:9a:5c:14:69:b0:35:76: 2f:c4:3f:10:9c:2b:9c:bc:70:b8:cf:63:a5:3d:26:c1:3b:04: 83:88:42:b1:0e:86:f7:a5:6e:e4:d8:74:5c:2a:24:b5:15:fd: 10:9a:c9:74:f2:21:46:f4:46:ee:dc:a0:18:59:1e:24:08:5e: 36:4c:7b:8d:99:20:cd:a2:9b:75:d2:bf:1e:5f:c7:e3:0c:5b: b9:6e:36:6c:b8:30:5e:26:04:d0:88:60:92:27:60:7c:73:85: d9:3d:80:8d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrydnmnaRzauPsLo9oOTMzMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIyMTliNTlkYzJlOWYzNGIyNTUyMzBlNTYyYTNjY2E2MWRh ZWIxNTUwHhcNMjUxMjA2MDcwMDQxWhcNMjUxMjA3MDcwMDQxWjAzMTEwLwYDVQQD EyhiMzg4ZDhjYzE4N2FhOGRlMDVlNmU5NDE3YzkxN2Y3NmE4ZmJhZmI3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnqvkJo43XWEaU7kxB1H5ujxn//7H LD7VR0egitmNzKViM67s+yU+gKUTgKn7jQk5nfCCqbimwKrLl0Dhic5WfX+CvYaF ArVM0AlJbV0neJINs98gVzwhC3a9yfVNSlwR3H1uCIh1t1WEHG8MMXQ5xmUZxPUS Nuztmrgyx4dDPzaS0up57nXcPAIvBFNlL5icsTdL6H0rLuJmdAT4dQFyBhxOQ7AL nVo+0fDNg1gkHvqYeTbZBt/quA7MC2jnlPXYaxDIcQBufzz7oCoJBuDIelRJnhNt gkLLLMhjp7h6Lk7HFgPzhvFiTJNl/rDwi/srcvweZawLf3Y5syJJeNCrwwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLOI2MwYeqjeBebpQXyRf3ao+6+3MB8GA1UdIwQY MBaAFCIZtZ3C6fNLJVIw5WKjzKYdrrFVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSWhtMW5jTHA4MHNsVWpEbFlxUE1waDJ1c1ZVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OC8zYmIzYTgtMWMzZS00MTU0LTkwYTkt MDA2ZGUwZmE1MzQyLzEvSWhtMW5jTHA4MHNsVWpEbFlxUE1waDJ1c1ZVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84OC8zYmIzYTgtMWMzZS00MTU0LTkwYTktMDA2ZGUwZmE1MzQy LzEvSWhtMW5jTHA4MHNsVWpEbFlxUE1waDJ1c1ZVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAn8urYwna F/xV/EoyQ8V4tzuE3+aNMUGX89HFfD3q1MARUe8BEpiwHbCbbnCGbQSdoFoM98mI HWsyy0dAOeoakvRoTZMv6/HuIjVcZPz98aDzRyKhnqL5nLXJLjHoJ+bcI4hO30mp EYrBaaF6SodhSNoT31TWctgKczhXnBRxjQSw+xfqFWgkt9YyuWxuuddZH9s9SC97 f34LjZeaXBRpsDV2L8Q/EJwrnLxwuM9jpT0mwTsEg4hCsQ6G96Vu5Nh0XCoktRX9 EJrJdPIhRvRG7tygGFkeJAheNkx7jZkgzaKbddK/Hl/H4wxbuW42bLgwXiYE0Ihg kidgfHOF2T2AjQ== -----END CERTIFICATE-----Generated at Sat Dec 6 17:13:28 2025 by rpki-client