This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/b45b47-c2fd-42af-98bd-e0162401ff7a/1/iH6BuoQ0RZjGFGKDOq3zIE6uCHw.mft File: iH6BuoQ0RZjGFGKDOq3zIE6uCHw.mft (raw, json) Hash identifier: VBc9z0HbKKuWu+GDmQwi3w7224+cEPMKfJkh+4x6+8E= Subject key identifier: 12:A2:95:53:E4:EE:41:12:E7:1D:B6:AC:5A:1B:41:3F:46:61:38:6A Authority key identifier: 88:7E:81:BA:84:34:45:98:C6:14:62:83:3A:AD:F3:20:4E:AE:08:7C Certificate issuer: /CN=887e81ba84344598c61462833aadf3204eae087c Certificate serial: 019B33447986BC8DBBEC9550166526AB0C8E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iH6BuoQ0RZjGFGKDOq3zIE6uCHw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/b45b47-c2fd-42af-98bd-e0162401ff7a/1/iH6BuoQ0RZjGFGKDOq3zIE6uCHw.mft Manifest number: 1789 Signing time: Thu 18 Dec 2025 21:01:24 +0000 Manifest this update: Thu 18 Dec 2025 21:01:24 +0000 Manifest next update: Fri 19 Dec 2025 21:01:24 +0000 Files and hashes: 1: G8pM4BO4SDFuG0O0aHGZFSHu0bY.roa (hash: z8nYleBnvbZLzPZcC36R6KcHw5MKTfcdnhsG0y6RlGM=) 2: iH6BuoQ0RZjGFGKDOq3zIE6uCHw.crl (hash: UWfhqGsjaHlxKIAGbQiC1Z7qRv4XZJ637XLh2rVYut0=) 3: shLVoHyiaZbg7eg2YqA4ky_a-CU.roa (hash: eojzTxeSDWN8wwV7q5opIiiSFcYnrY9hg5to5e5Gp1s=) 4: xifnCCeMNH18n0eWMqga1pgyjCM.roa (hash: apTXD8raL3qZhnZiaGrtnxJWUf2/cGGa8lnT/pZJ1So=) 5: ywH8wQjufiysHP5OXijDjTOBrH4.roa (hash: Kuw4rCVLsz9XQ+KOtke/DWSrK02REb1j13WO/v4sxqI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/b45b47-c2fd-42af-98bd-e0162401ff7a/1/iH6BuoQ0RZjGFGKDOq3zIE6uCHw.crl rsync://rpki.ripe.net/repository/DEFAULT/8c/b45b47-c2fd-42af-98bd-e0162401ff7a/1/iH6BuoQ0RZjGFGKDOq3zIE6uCHw.mft rsync://rpki.ripe.net/repository/DEFAULT/iH6BuoQ0RZjGFGKDOq3zIE6uCHw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 13:00:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:33:44:79:86:bc:8d:bb:ec:95:50:16:65:26:ab:0c:8e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=887e81ba84344598c61462833aadf3204eae087c Validity Not Before: Dec 18 21:01:24 2025 GMT Not After : Dec 19 21:01:24 2025 GMT Subject: CN=12a29553e4ee4112e71db6ac5a1b413f4661386a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:43:9f:ec:65:94:c6:48:71:86:43:a9:29:e6: ec:dd:09:d0:e2:49:2b:57:12:f6:30:e0:7c:50:f3: bf:3c:cc:08:84:78:96:3b:1c:ac:4c:bb:d2:7d:d9: dc:b1:ee:ab:47:fd:5c:12:0f:50:09:e7:82:da:42: 8c:58:49:c4:6a:f7:3f:fc:df:a3:8b:02:90:18:e6: 4a:4a:50:de:eb:02:e3:c9:8d:b9:c6:14:14:88:9f: 62:3c:f2:4a:d4:ec:4c:e2:69:09:a6:5a:02:76:8d: 09:63:0e:06:21:25:d4:31:fd:6b:1b:d6:44:cf:09: e3:75:54:03:61:98:1e:56:b8:3d:7e:1e:10:e2:8f: 8b:39:80:4d:c3:ce:17:4e:d0:3c:40:34:b6:ba:71: c8:7d:70:65:3a:0e:81:b6:f5:bf:0b:a5:ec:fe:84: ec:35:60:83:93:56:61:a4:13:90:1c:6f:36:8f:2d: c1:cb:73:85:da:09:76:54:91:a5:d3:d8:45:b5:08: c9:ab:4a:1d:7f:02:82:11:2d:55:03:ed:c4:cf:f7: fa:fb:b6:6d:f2:e5:75:5c:80:7c:38:0d:1d:c1:bb: 87:29:e0:1d:c3:91:b6:8d:9b:43:eb:97:3f:fa:27: 1b:3f:dc:7a:26:33:b8:6f:cb:0f:67:3a:3f:5d:08: e8:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:A2:95:53:E4:EE:41:12:E7:1D:B6:AC:5A:1B:41:3F:46:61:38:6A X509v3 Authority Key Identifier: keyid:88:7E:81:BA:84:34:45:98:C6:14:62:83:3A:AD:F3:20:4E:AE:08:7C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iH6BuoQ0RZjGFGKDOq3zIE6uCHw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/b45b47-c2fd-42af-98bd-e0162401ff7a/1/iH6BuoQ0RZjGFGKDOq3zIE6uCHw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/b45b47-c2fd-42af-98bd-e0162401ff7a/1/iH6BuoQ0RZjGFGKDOq3zIE6uCHw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 45:bd:40:b6:20:ff:a9:09:f0:b6:91:5f:05:cd:f8:e6:74:ce: a6:ed:31:9d:fb:c1:49:fe:28:01:64:53:4c:d5:17:87:aa:b9: 93:17:87:5b:6a:df:ff:67:ec:d9:7d:d8:8b:18:5d:8b:1f:de: 7c:b7:91:60:94:e5:d2:0e:c2:c6:2b:91:cf:7d:84:c0:79:47: f1:51:b4:5e:75:31:ac:48:e8:89:fb:10:3b:cb:cb:35:aa:05: d8:f1:6c:be:c0:76:3e:f5:b4:9c:0f:79:18:d9:2e:e4:40:02: eb:23:19:45:19:46:36:c9:a0:91:c3:88:4d:e0:76:a3:9a:24: 12:ca:a8:03:e2:5b:70:f3:be:dd:37:4c:2b:19:37:ca:af:6d: e4:45:43:8c:8e:6b:bf:11:67:19:f8:7a:bb:8a:02:36:18:bb: 83:ac:e2:ea:df:1c:5d:72:fc:8b:f1:87:9b:d0:d2:31:10:76: 24:b3:4c:6e:c0:b8:04:ac:ba:e7:e1:a5:cb:a0:0f:ab:c6:d4: 23:7a:a2:ca:bf:4a:aa:17:0c:74:c0:bf:e6:f1:13:9f:e8:d1: 08:74:7d:3d:2b:ec:8b:d1:58:72:cd:8b:e3:4e:3f:55:96:dd: d5:8b:3b:af:1c:3d:ef:67:f9:d3:c1:e0:f3:bd:39:02:c8:59: a1:a6:de:e3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZszRHmGvI277JVQFmUmqwyOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg4N2U4MWJhODQzNDQ1OThjNjE0NjI4MzNhYWRmMzIwNGVh ZTA4N2MwHhcNMjUxMjE4MjEwMTI0WhcNMjUxMjE5MjEwMTI0WjAzMTEwLwYDVQQD EygxMmEyOTU1M2U0ZWU0MTEyZTcxZGI2YWM1YTFiNDEzZjQ2NjEzODZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1UOf7GWUxkhxhkOpKebs3QnQ4kkr VxL2MOB8UPO/PMwIhHiWOxysTLvSfdncse6rR/1cEg9QCeeC2kKMWEnEavc//N+j iwKQGOZKSlDe6wLjyY25xhQUiJ9iPPJK1OxM4mkJploCdo0JYw4GISXUMf1rG9ZE zwnjdVQDYZgeVrg9fh4Q4o+LOYBNw84XTtA8QDS2unHIfXBlOg6BtvW/C6Xs/oTs NWCDk1ZhpBOQHG82jy3By3OF2gl2VJGl09hFtQjJq0odfwKCES1VA+3Ez/f6+7Zt 8uV1XIB8OA0dwbuHKeAdw5G2jZtD65c/+icbP9x6JjO4b8sPZzo/XQjomwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBKilVPk7kES5x22rFobQT9GYThqMB8GA1UdIwQY MBaAFIh+gbqENEWYxhRigzqt8yBOrgh8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaUg2QnVvUTBSWmpHRkdLRE9xM3pJRTZ1Q0h3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yy9iNDViNDctYzJmZC00MmFmLTk4YmQt ZTAxNjI0MDFmZjdhLzEvaUg2QnVvUTBSWmpHRkdLRE9xM3pJRTZ1Q0h3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Yy9iNDViNDctYzJmZC00MmFmLTk4YmQtZTAxNjI0MDFmZjdh LzEvaUg2QnVvUTBSWmpHRkdLRE9xM3pJRTZ1Q0h3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARb1AtiD/ qQnwtpFfBc345nTOpu0xnfvBSf4oAWRTTNUXh6q5kxeHW2rf/2fs2X3Yixhdix/e fLeRYJTl0g7CxiuRz32EwHlH8VG0XnUxrEjoifsQO8vLNaoF2PFsvsB2PvW0nA95 GNku5EAC6yMZRRlGNsmgkcOITeB2o5okEsqoA+JbcPO+3TdMKxk3yq9t5EVDjI5r vxFnGfh6u4oCNhi7g6zi6t8cXXL8i/GHm9DSMRB2JLNMbsC4BKy65+Gly6APq8bU I3qiyr9KqhcMdMC/5vETn+jRCHR9PSvsi9FYcs2L404/VZbd1Ys7rxw972f508Hg 8705AshZoabe4w== -----END CERTIFICATE-----Generated at Thu Dec 18 23:05:46 2025 by rpki-client