This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/b45b47-c2fd-42af-98bd-e0162401ff7a/1/iH6BuoQ0RZjGFGKDOq3zIE6uCHw.mft File: iH6BuoQ0RZjGFGKDOq3zIE6uCHw.mft (raw, json) Hash identifier: lSuX8UzlQHqd+uUs2qf13MWBFBbrPJRr/2BbTMqTJPY= Subject key identifier: C9:7B:FA:5D:5D:73:04:CD:93:93:8C:DE:3A:CB:5C:E8:BB:32:5E:8C Authority key identifier: 88:7E:81:BA:84:34:45:98:C6:14:62:83:3A:AD:F3:20:4E:AE:08:7C Certificate issuer: /CN=887e81ba84344598c61462833aadf3204eae087c Certificate serial: 019AF3894F99345F6FE9D8B99CD56008B890 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iH6BuoQ0RZjGFGKDOq3zIE6uCHw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/b45b47-c2fd-42af-98bd-e0162401ff7a/1/iH6BuoQ0RZjGFGKDOq3zIE6uCHw.mft Manifest number: 1768 Signing time: Sat 06 Dec 2025 12:00:53 +0000 Manifest this update: Sat 06 Dec 2025 12:00:53 +0000 Manifest next update: Sun 07 Dec 2025 12:00:53 +0000 Files and hashes: 1: G8pM4BO4SDFuG0O0aHGZFSHu0bY.roa (hash: z8nYleBnvbZLzPZcC36R6KcHw5MKTfcdnhsG0y6RlGM=) 2: iH6BuoQ0RZjGFGKDOq3zIE6uCHw.crl (hash: Hw3TEFIHLXstnaxMhiL5hyCR9XmRjvA3DHlG5vtHL8M=) 3: shLVoHyiaZbg7eg2YqA4ky_a-CU.roa (hash: eojzTxeSDWN8wwV7q5opIiiSFcYnrY9hg5to5e5Gp1s=) 4: xifnCCeMNH18n0eWMqga1pgyjCM.roa (hash: apTXD8raL3qZhnZiaGrtnxJWUf2/cGGa8lnT/pZJ1So=) 5: ywH8wQjufiysHP5OXijDjTOBrH4.roa (hash: Kuw4rCVLsz9XQ+KOtke/DWSrK02REb1j13WO/v4sxqI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/b45b47-c2fd-42af-98bd-e0162401ff7a/1/iH6BuoQ0RZjGFGKDOq3zIE6uCHw.crl rsync://rpki.ripe.net/repository/DEFAULT/8c/b45b47-c2fd-42af-98bd-e0162401ff7a/1/iH6BuoQ0RZjGFGKDOq3zIE6uCHw.mft rsync://rpki.ripe.net/repository/DEFAULT/iH6BuoQ0RZjGFGKDOq3zIE6uCHw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 12:00:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:89:4f:99:34:5f:6f:e9:d8:b9:9c:d5:60:08:b8:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=887e81ba84344598c61462833aadf3204eae087c Validity Not Before: Dec 6 12:00:53 2025 GMT Not After : Dec 7 12:00:53 2025 GMT Subject: CN=c97bfa5d5d7304cd93938cde3acb5ce8bb325e8c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:42:33:60:62:5a:e4:d2:74:b4:8a:f4:aa:52: a2:0d:21:8c:55:77:8b:31:84:cd:69:b9:96:37:a6: 2c:a8:d8:38:d0:f6:b6:30:16:d2:86:1b:bc:4e:2d: 82:e2:0d:da:d5:f3:ea:9e:f2:1a:dc:38:a6:02:c7: 3b:37:4f:f0:86:4f:82:b4:2d:f6:bb:55:6d:b0:a7: f3:70:ff:79:da:b0:4a:2e:f3:a1:3d:32:6e:16:ca: 9b:49:f3:d4:e9:92:13:d4:c1:cf:9d:a1:d1:57:e5: 96:33:32:2c:e1:85:77:9e:82:17:31:a7:77:ef:36: ba:3b:f1:c2:50:9c:e6:c5:80:af:70:ac:ac:90:ef: a0:3c:89:1d:34:ea:31:86:92:bb:8e:4b:0d:61:25: a6:aa:e5:c1:29:24:59:95:4d:50:3c:80:a1:d2:bd: fd:20:e8:28:75:f6:24:4d:a3:97:0e:7a:8b:36:26: 9f:04:b5:bc:1f:fc:e4:d6:80:0e:92:93:ea:83:3a: 8a:57:47:5e:32:b1:3e:e7:d2:28:cd:91:9f:94:ff: b9:5b:50:da:f0:04:4d:7d:9a:ee:ef:05:ef:dc:6a: e2:f2:47:60:18:aa:49:88:cf:28:01:ef:2b:af:4c: 4f:3c:f1:19:11:b6:cd:45:2a:9d:f1:a2:11:ea:9c: 0e:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:7B:FA:5D:5D:73:04:CD:93:93:8C:DE:3A:CB:5C:E8:BB:32:5E:8C X509v3 Authority Key Identifier: keyid:88:7E:81:BA:84:34:45:98:C6:14:62:83:3A:AD:F3:20:4E:AE:08:7C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iH6BuoQ0RZjGFGKDOq3zIE6uCHw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/b45b47-c2fd-42af-98bd-e0162401ff7a/1/iH6BuoQ0RZjGFGKDOq3zIE6uCHw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/b45b47-c2fd-42af-98bd-e0162401ff7a/1/iH6BuoQ0RZjGFGKDOq3zIE6uCHw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 11:34:bc:e1:26:1c:70:10:38:69:db:fa:63:f9:96:10:0f:30: 32:26:8c:e8:6c:59:e9:a1:d5:cf:59:72:b1:c2:6c:ee:25:d5: d5:49:96:4d:c9:c5:53:b4:85:54:ad:c5:f7:de:16:0c:6d:fc: 9d:33:4e:b5:ce:07:4c:89:5c:ed:99:ba:c4:ff:c1:d8:34:1e: 83:d4:d9:af:04:ea:18:0e:43:8b:da:61:fd:89:86:5c:a4:2a: 1f:b7:65:a3:25:da:ac:fe:ba:35:b1:9d:a2:5d:69:46:8b:ae: 43:77:48:f9:34:1d:9f:b4:b7:1a:5b:cc:ce:65:48:4b:ed:ab: 35:0e:19:f1:60:7d:83:b6:2b:a8:ff:c2:e1:e9:83:99:ea:53: d1:03:cc:52:58:bb:20:4e:80:a7:28:ba:48:57:ab:ca:d1:c7: 1a:3f:f8:39:19:8e:86:f6:e7:c0:20:6a:43:a1:db:62:cc:61: f2:31:e7:00:40:4f:67:c0:11:d2:25:0a:61:ec:57:95:64:36: 61:cf:9c:e9:85:ef:85:c1:01:87:24:a5:17:8b:52:a1:58:5f: 70:b2:ab:76:c1:2c:74:63:9e:ef:bb:79:04:0d:51:27:90:04: 45:5d:ea:1e:9c:f0:6e:67:bc:35:d2:8f:a7:90:39:c7:0e:7e: 56:f8:48:9a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrziU+ZNF9v6di5nNVgCLiQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg4N2U4MWJhODQzNDQ1OThjNjE0NjI4MzNhYWRmMzIwNGVh ZTA4N2MwHhcNMjUxMjA2MTIwMDUzWhcNMjUxMjA3MTIwMDUzWjAzMTEwLwYDVQQD EyhjOTdiZmE1ZDVkNzMwNGNkOTM5MzhjZGUzYWNiNWNlOGJiMzI1ZThjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7UIzYGJa5NJ0tIr0qlKiDSGMVXeL MYTNabmWN6YsqNg40Pa2MBbShhu8Ti2C4g3a1fPqnvIa3DimAsc7N0/whk+CtC32 u1VtsKfzcP952rBKLvOhPTJuFsqbSfPU6ZIT1MHPnaHRV+WWMzIs4YV3noIXMad3 7za6O/HCUJzmxYCvcKyskO+gPIkdNOoxhpK7jksNYSWmquXBKSRZlU1QPICh0r39 IOgodfYkTaOXDnqLNiafBLW8H/zk1oAOkpPqgzqKV0deMrE+59IozZGflP+5W1Da 8ARNfZru7wXv3Gri8kdgGKpJiM8oAe8rr0xPPPEZEbbNRSqd8aIR6pwO3QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMl7+l1dcwTNk5OM3jrLXOi7Ml6MMB8GA1UdIwQY MBaAFIh+gbqENEWYxhRigzqt8yBOrgh8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaUg2QnVvUTBSWmpHRkdLRE9xM3pJRTZ1Q0h3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yy9iNDViNDctYzJmZC00MmFmLTk4YmQt ZTAxNjI0MDFmZjdhLzEvaUg2QnVvUTBSWmpHRkdLRE9xM3pJRTZ1Q0h3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Yy9iNDViNDctYzJmZC00MmFmLTk4YmQtZTAxNjI0MDFmZjdh LzEvaUg2QnVvUTBSWmpHRkdLRE9xM3pJRTZ1Q0h3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAETS84SYc cBA4adv6Y/mWEA8wMiaM6GxZ6aHVz1lyscJs7iXV1UmWTcnFU7SFVK3F994WDG38 nTNOtc4HTIlc7Zm6xP/B2DQeg9TZrwTqGA5Di9ph/YmGXKQqH7dloyXarP66NbGd ol1pRouuQ3dI+TQdn7S3GlvMzmVIS+2rNQ4Z8WB9g7YrqP/C4emDmepT0QPMUli7 IE6Apyi6SFerytHHGj/4ORmOhvbnwCBqQ6HbYsxh8jHnAEBPZ8AR0iUKYexXlWQ2 Yc+c6YXvhcEBhySlF4tSoVhfcLKrdsEsdGOe77t5BA1RJ5AERV3qHpzwbme8NdKP p5A5xw5+VvhImg== -----END CERTIFICATE-----Generated at Sat Dec 6 20:15:28 2025 by rpki-client