This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/2fd20a-53ae-4bea-80c9-03f23a73941d/1/ih8K1VcrribjnIdAxoqPu0buSGQ.mft File: ih8K1VcrribjnIdAxoqPu0buSGQ.mft (raw, json) Hash identifier: HVZgHZ5vCPvT2NeRhkp0HUOdz6TZpc1SUY9KQHfBBNg= Subject key identifier: 49:90:FA:09:3B:F3:60:20:69:56:1F:66:8A:0D:CF:5E:3E:7B:02:F6 Authority key identifier: 8A:1F:0A:D5:57:2B:AE:26:E3:9C:87:40:C6:8A:8F:BB:46:EE:48:64 Certificate issuer: /CN=8a1f0ad5572bae26e39c8740c68a8fbb46ee4864 Certificate serial: 019AF49BF68D948DC7D576AEDD6DA53D49CA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ih8K1VcrribjnIdAxoqPu0buSGQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/2fd20a-53ae-4bea-80c9-03f23a73941d/1/ih8K1VcrribjnIdAxoqPu0buSGQ.mft Manifest number: 0AF4 Signing time: Sat 06 Dec 2025 17:00:52 +0000 Manifest this update: Sat 06 Dec 2025 17:00:52 +0000 Manifest next update: Sun 07 Dec 2025 17:00:52 +0000 Files and hashes: 1: eG2Sz-NBLwpAqaii4LbUZ-cWycY.roa (hash: uPzFHNSnB/27/j7jzNn6SSjG0qijsqzpue+Zsmabwu4=) 2: ih8K1VcrribjnIdAxoqPu0buSGQ.crl (hash: DIrfizu1gK77LMBpV+kqZkm59VRzo0HA4XnW13Uqjok=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/2fd20a-53ae-4bea-80c9-03f23a73941d/1/ih8K1VcrribjnIdAxoqPu0buSGQ.crl rsync://rpki.ripe.net/repository/DEFAULT/b1/2fd20a-53ae-4bea-80c9-03f23a73941d/1/ih8K1VcrribjnIdAxoqPu0buSGQ.mft rsync://rpki.ripe.net/repository/DEFAULT/ih8K1VcrribjnIdAxoqPu0buSGQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 17:00:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:9b:f6:8d:94:8d:c7:d5:76:ae:dd:6d:a5:3d:49:ca Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8a1f0ad5572bae26e39c8740c68a8fbb46ee4864 Validity Not Before: Dec 6 17:00:52 2025 GMT Not After : Dec 7 17:00:52 2025 GMT Subject: CN=4990fa093bf3602069561f668a0dcf5e3e7b02f6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:32:c3:78:83:24:ea:3c:6c:1a:86:7f:b7:47: b8:93:ab:03:4c:1e:a1:b8:7a:4f:48:7f:c6:f2:ca: 52:2c:c9:e7:0f:44:6a:0a:7e:21:e0:e0:ee:bb:d9: 93:75:a1:05:54:d9:b7:c7:b0:db:ca:86:e3:b1:89: 3d:80:c3:47:20:2f:08:1c:2d:ba:1f:58:6b:7e:ab: f1:07:a7:d1:97:ff:a5:f2:d2:e8:8c:ae:de:c6:a1: 6b:44:4a:e7:e2:a9:7f:45:0b:fe:05:24:cc:80:82: 3f:5e:02:51:ca:e1:40:1c:46:75:e6:00:2d:80:98: 2b:48:a3:3b:e8:e0:cd:5f:5e:07:cd:5b:4e:e8:99: 46:01:d7:b0:1e:6c:6d:60:22:d5:12:c7:a2:e3:68: 3c:0d:99:9b:d2:e0:3c:09:61:de:d7:22:64:9f:b8: 88:0b:d3:f1:bb:9d:74:15:e4:0b:81:0c:f1:37:81: 02:09:fd:40:28:3c:92:3c:90:c9:c3:e1:2b:b0:0d: 00:33:8a:a1:65:8b:08:43:e1:62:76:82:68:e8:6e: a7:8b:98:d7:2c:3b:21:5a:25:08:8d:cd:16:57:2d: 7f:26:09:fa:42:d3:8a:0d:23:73:4a:2f:ed:f3:2b: f1:6b:7b:fc:03:ce:5a:d5:a3:32:a4:68:95:ae:9e: a5:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:90:FA:09:3B:F3:60:20:69:56:1F:66:8A:0D:CF:5E:3E:7B:02:F6 X509v3 Authority Key Identifier: keyid:8A:1F:0A:D5:57:2B:AE:26:E3:9C:87:40:C6:8A:8F:BB:46:EE:48:64 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ih8K1VcrribjnIdAxoqPu0buSGQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/2fd20a-53ae-4bea-80c9-03f23a73941d/1/ih8K1VcrribjnIdAxoqPu0buSGQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/2fd20a-53ae-4bea-80c9-03f23a73941d/1/ih8K1VcrribjnIdAxoqPu0buSGQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ab:59:14:64:e8:d6:ec:dd:75:ce:b4:06:73:b4:0c:e0:a6:11: 74:d9:b8:52:30:d5:93:a8:bc:ff:3b:3e:3e:f2:de:50:73:5e: a0:13:af:14:67:e5:f6:63:75:29:60:26:75:be:67:4a:d7:18: 8b:b5:3c:e5:87:9a:fe:5e:2c:f9:6f:42:88:28:06:d3:04:25: 71:95:7e:1b:5b:9a:e1:80:df:06:0a:f8:31:ba:fa:5d:ad:73: 63:36:a0:b5:4a:64:c3:7e:dc:74:53:1d:ee:d9:d8:16:d4:20: e8:b1:b1:7a:b2:17:ac:a6:60:7f:f0:f9:b6:e0:aa:ef:4f:3c: 38:1d:2c:ee:01:c3:36:1c:0f:49:d6:13:a7:6b:56:13:bb:5e: 2e:c9:c6:09:8f:12:c2:6c:24:93:96:d7:c7:d6:a3:02:a4:fc: bd:e8:9d:43:a6:ef:6e:42:ed:77:6f:99:2d:5e:7b:f5:70:61: 8e:4a:18:89:c6:71:d5:99:50:6a:09:55:fd:6b:24:b0:02:c0: 1c:bc:8c:6c:e9:93:23:4c:12:da:df:7a:cf:15:a4:d8:74:c8: 84:07:bf:53:6d:d4:58:94:fb:0c:a6:71:79:70:ac:d5:5f:2f: b1:3a:35:64:f1:4e:53:0c:15:e8:43:68:6a:be:ca:db:ba:c2: c1:a8:6e:82 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr0m/aNlI3H1Xau3W2lPUnKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhhMWYwYWQ1NTcyYmFlMjZlMzljODc0MGM2OGE4ZmJiNDZl ZTQ4NjQwHhcNMjUxMjA2MTcwMDUyWhcNMjUxMjA3MTcwMDUyWjAzMTEwLwYDVQQD Eyg0OTkwZmEwOTNiZjM2MDIwNjk1NjFmNjY4YTBkY2Y1ZTNlN2IwMmY2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1jLDeIMk6jxsGoZ/t0e4k6sDTB6h uHpPSH/G8spSLMnnD0RqCn4h4ODuu9mTdaEFVNm3x7DbyobjsYk9gMNHIC8IHC26 H1hrfqvxB6fRl/+l8tLojK7exqFrRErn4ql/RQv+BSTMgII/XgJRyuFAHEZ15gAt gJgrSKM76ODNX14HzVtO6JlGAdewHmxtYCLVEsei42g8DZmb0uA8CWHe1yJkn7iI C9Pxu510FeQLgQzxN4ECCf1AKDySPJDJw+ErsA0AM4qhZYsIQ+FidoJo6G6ni5jX LDshWiUIjc0WVy1/Jgn6QtOKDSNzSi/t8yvxa3v8A85a1aMypGiVrp6lcQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEmQ+gk782AgaVYfZooNz14+ewL2MB8GA1UdIwQY MBaAFIofCtVXK64m45yHQMaKj7tG7khkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaWg4SzFWY3JyaWJqbklkQXhvcVB1MGJ1U0dRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS8yZmQyMGEtNTNhZS00YmVhLTgwYzkt MDNmMjNhNzM5NDFkLzEvaWg4SzFWY3JyaWJqbklkQXhvcVB1MGJ1U0dRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMS8yZmQyMGEtNTNhZS00YmVhLTgwYzktMDNmMjNhNzM5NDFk LzEvaWg4SzFWY3JyaWJqbklkQXhvcVB1MGJ1U0dRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAq1kUZOjW 7N11zrQGc7QM4KYRdNm4UjDVk6i8/zs+PvLeUHNeoBOvFGfl9mN1KWAmdb5nStcY i7U85Yea/l4s+W9CiCgG0wQlcZV+G1ua4YDfBgr4Mbr6Xa1zYzagtUpkw37cdFMd 7tnYFtQg6LGxerIXrKZgf/D5tuCq7088OB0s7gHDNhwPSdYTp2tWE7teLsnGCY8S wmwkk5bXx9ajAqT8veidQ6bvbkLtd2+ZLV579XBhjkoYicZx1ZlQaglV/WsksALA HLyMbOmTI0wS2t96zxWk2HTIhAe/U23UWJT7DKZxeXCs1V8vsTo1ZPFOUwwV6ENo ar7K27rCwahugg== -----END CERTIFICATE-----Generated at Sun Dec 7 01:41:16 2025 by rpki-client