This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/9355b9-73d4-4c4c-9601-f01a2f58ef88/1/itR7qpqm4KIK2ZWnnCqN5gT5qjc.mft File: itR7qpqm4KIK2ZWnnCqN5gT5qjc.mft (raw, json) Hash identifier: HTRBZmOUr8MZOU13Q/Z6DpMkyf1sNYJ9FGbGJXgz2G4= Subject key identifier: E3:3D:E1:D7:B2:57:34:8E:D4:BC:32:F5:06:F2:3D:11:30:04:FF:68 Authority key identifier: 8A:D4:7B:AA:9A:A6:E0:A2:0A:D9:95:A7:9C:2A:8D:E6:04:F9:AA:37 Certificate issuer: /CN=8ad47baa9aa6e0a20ad995a79c2a8de604f9aa37 Certificate serial: 019B2B8AA0626A6284D485C8F60E87F2E49C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/itR7qpqm4KIK2ZWnnCqN5gT5qjc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/9355b9-73d4-4c4c-9601-f01a2f58ef88/1/itR7qpqm4KIK2ZWnnCqN5gT5qjc.mft Manifest number: 16C5 Signing time: Wed 17 Dec 2025 09:01:03 +0000 Manifest this update: Wed 17 Dec 2025 09:01:03 +0000 Manifest next update: Thu 18 Dec 2025 09:01:03 +0000 Files and hashes: 1: 6LoGTUsxl6ngR0px_QWDZqMrDqY.roa (hash: +ceUAHPEc+ox8TyB65QxlBTF9+xyruiKTwNKbUkFhfY=) 2: itR7qpqm4KIK2ZWnnCqN5gT5qjc.crl (hash: tEZfnCQ/vKZKnShvnecS2pF7UXBK58HMHTejg7wVToE=) 3: kOrxmXRMoh0iVhgCI3h3ap9gzjY.roa (hash: UuZBkN7yMoGzAAanQfroluxDy9hZk4vWUEry2ogeBOM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/9355b9-73d4-4c4c-9601-f01a2f58ef88/1/itR7qpqm4KIK2ZWnnCqN5gT5qjc.crl rsync://rpki.ripe.net/repository/DEFAULT/b1/9355b9-73d4-4c4c-9601-f01a2f58ef88/1/itR7qpqm4KIK2ZWnnCqN5gT5qjc.mft rsync://rpki.ripe.net/repository/DEFAULT/itR7qpqm4KIK2ZWnnCqN5gT5qjc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 09:01:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2b:8a:a0:62:6a:62:84:d4:85:c8:f6:0e:87:f2:e4:9c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8ad47baa9aa6e0a20ad995a79c2a8de604f9aa37 Validity Not Before: Dec 17 09:01:03 2025 GMT Not After : Dec 18 09:01:03 2025 GMT Subject: CN=e33de1d7b257348ed4bc32f506f23d113004ff68 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:5a:8e:ac:ac:31:f8:82:cd:a7:ae:34:ea:11: 64:61:e9:4f:93:8f:ac:28:61:67:aa:47:e3:60:d0: b0:71:56:e6:d5:ac:6a:12:e0:2d:13:bd:bd:82:7e: 54:39:3c:b6:52:b8:a2:03:f6:34:ed:06:da:e2:0a: 71:59:31:aa:d5:ca:55:69:03:77:2d:a9:0a:e2:0f: cd:0e:f9:91:cf:a6:57:cc:5c:79:06:ea:f8:d1:6e: e9:44:0a:00:ed:80:da:09:93:c9:1f:cf:a9:ff:8c: 5e:da:3e:eb:0a:7c:85:46:c6:65:1b:07:e7:c5:1e: 0b:94:f5:ee:45:90:54:08:00:f1:d2:f9:83:ca:f1: 66:50:23:f7:0e:aa:ee:fa:ab:c0:16:f8:f1:66:42: f6:fc:39:56:34:6d:77:0f:36:82:b2:09:d2:4f:d6: 1e:81:51:00:7d:7c:cf:a9:83:51:30:cb:5a:44:81: e7:4c:3a:e0:cd:9d:94:81:32:c8:72:b6:2b:dd:1f: e3:f9:1d:18:c4:76:39:dc:be:a0:62:59:30:7d:1f: 4c:0b:8b:81:93:03:c4:73:9b:8c:f2:42:c7:d4:05: ae:53:a4:77:dc:f8:4d:3b:4e:69:fc:c5:4f:b8:65: 28:e0:e6:71:b9:91:08:1c:1c:2d:95:4b:c5:99:b4: bd:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:3D:E1:D7:B2:57:34:8E:D4:BC:32:F5:06:F2:3D:11:30:04:FF:68 X509v3 Authority Key Identifier: keyid:8A:D4:7B:AA:9A:A6:E0:A2:0A:D9:95:A7:9C:2A:8D:E6:04:F9:AA:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/itR7qpqm4KIK2ZWnnCqN5gT5qjc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/9355b9-73d4-4c4c-9601-f01a2f58ef88/1/itR7qpqm4KIK2ZWnnCqN5gT5qjc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/9355b9-73d4-4c4c-9601-f01a2f58ef88/1/itR7qpqm4KIK2ZWnnCqN5gT5qjc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 85:2d:08:f9:df:cf:6b:ad:a7:d4:a7:eb:c9:7c:82:06:36:5b: 9a:81:93:20:57:2d:70:d6:97:3f:da:89:fe:25:a2:01:e7:b9: 30:ac:d5:b6:0b:9b:3e:a9:01:05:36:b5:e7:89:98:48:38:04: fb:d6:92:23:74:42:51:a3:52:86:cb:f3:38:17:8f:83:96:2c: b3:b9:ca:c0:e4:c3:2c:79:c5:8f:b4:c7:66:c5:65:61:0c:e6: 81:d9:3e:d9:2a:11:2d:76:ce:64:6c:26:63:49:71:af:ab:62: d5:66:4a:2d:2f:23:1c:2e:f5:15:f9:96:27:23:8f:44:9e:e1: 42:34:c8:53:91:ac:f9:33:3f:95:b2:89:5e:6a:70:25:e3:10: ae:84:14:ce:bf:e1:45:a7:b5:45:02:c6:76:c6:68:4b:57:14: 9d:d4:3c:75:56:0c:1d:38:a1:52:df:41:74:79:c0:ea:78:33: 74:8c:85:0c:95:5b:cd:c9:22:3e:07:6e:cb:b2:04:42:40:e2: ce:c0:28:ae:eb:72:3e:12:5b:36:98:dd:86:bb:4d:c8:90:1f: c2:03:3a:e1:69:59:bd:f9:e8:91:ca:83:43:85:16:12:b0:1b: 40:52:0f:17:1b:cf:38:12:ce:07:51:5f:38:dc:3c:a9:0c:cb: 9a:ab:fa:72 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsriqBiamKE1IXI9g6H8uScMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhhZDQ3YmFhOWFhNmUwYTIwYWQ5OTVhNzljMmE4ZGU2MDRm OWFhMzcwHhcNMjUxMjE3MDkwMTAzWhcNMjUxMjE4MDkwMTAzWjAzMTEwLwYDVQQD EyhlMzNkZTFkN2IyNTczNDhlZDRiYzMyZjUwNmYyM2QxMTMwMDRmZjY4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApFqOrKwx+ILNp6406hFkYelPk4+s KGFnqkfjYNCwcVbm1axqEuAtE729gn5UOTy2UriiA/Y07Qba4gpxWTGq1cpVaQN3 LakK4g/NDvmRz6ZXzFx5Bur40W7pRAoA7YDaCZPJH8+p/4xe2j7rCnyFRsZlGwfn xR4LlPXuRZBUCADx0vmDyvFmUCP3Dqru+qvAFvjxZkL2/DlWNG13DzaCsgnST9Ye gVEAfXzPqYNRMMtaRIHnTDrgzZ2UgTLIcrYr3R/j+R0YxHY53L6gYlkwfR9MC4uB kwPEc5uM8kLH1AWuU6R33PhNO05p/MVPuGUo4OZxuZEIHBwtlUvFmbS9MwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOM94deyVzSO1Lwy9QbyPREwBP9oMB8GA1UdIwQY MBaAFIrUe6qapuCiCtmVp5wqjeYE+ao3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaXRSN3FwcW00S0lLMlpXbm5DcU41Z1Q1cWpjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS85MzU1YjktNzNkNC00YzRjLTk2MDEt ZjAxYTJmNThlZjg4LzEvaXRSN3FwcW00S0lLMlpXbm5DcU41Z1Q1cWpjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMS85MzU1YjktNzNkNC00YzRjLTk2MDEtZjAxYTJmNThlZjg4 LzEvaXRSN3FwcW00S0lLMlpXbm5DcU41Z1Q1cWpjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhS0I+d/P a62n1KfryXyCBjZbmoGTIFctcNaXP9qJ/iWiAee5MKzVtgubPqkBBTa154mYSDgE +9aSI3RCUaNShsvzOBePg5Yss7nKwOTDLHnFj7THZsVlYQzmgdk+2SoRLXbOZGwm Y0lxr6ti1WZKLS8jHC71FfmWJyOPRJ7hQjTIU5Gs+TM/lbKJXmpwJeMQroQUzr/h Rae1RQLGdsZoS1cUndQ8dVYMHTihUt9BdHnA6ngzdIyFDJVbzckiPgduy7IEQkDi zsAorutyPhJbNpjdhrtNyJAfwgM64WlZvfnokcqDQ4UWErAbQFIPFxvPOBLOB1Ff ONw8qQzLmqv6cg== -----END CERTIFICATE-----Generated at Wed Dec 17 18:33:37 2025 by rpki-client