This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/55cf77-6394-4812-9fb5-291aaedd58cc/1/ihZhi3H_yA4cP0HtDfyJq16WP9I.mft File: ihZhi3H_yA4cP0HtDfyJq16WP9I.mft (raw, json) Hash identifier: NcF6Lm2ansyOQ7BQC2P1vCgRYjK6XjHqCePg+vkZ1Us= Subject key identifier: B1:E2:EB:1E:A7:AA:0D:54:DB:84:85:9F:67:22:BD:65:CC:0C:FE:4A Authority key identifier: 8A:16:61:8B:71:FF:C8:0E:1C:3F:41:ED:0D:FC:89:AB:5E:96:3F:D2 Certificate issuer: /CN=8a16618b71ffc80e1c3f41ed0dfc89ab5e963fd2 Certificate serial: 019AF42E7C747AE99195B48FF9021FC0F9B9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ihZhi3H_yA4cP0HtDfyJq16WP9I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/55cf77-6394-4812-9fb5-291aaedd58cc/1/ihZhi3H_yA4cP0HtDfyJq16WP9I.mft Manifest number: 1769 Signing time: Sat 06 Dec 2025 15:01:18 +0000 Manifest this update: Sat 06 Dec 2025 15:01:18 +0000 Manifest next update: Sun 07 Dec 2025 15:01:18 +0000 Files and hashes: 1: ExfUqNEW3Lyq9Nl7Jq22WcfJ1rw.roa (hash: 6SjZfPEMGV4QZNr6XzSlmm+VNkfjjPfYSSMSKKIpL5E=) 2: ihZhi3H_yA4cP0HtDfyJq16WP9I.crl (hash: G0wPCJrZ70Fb/T9lC+dMVghG/VzhF8UcjxFFpSnx6j0=) 3: vuckuXbmedLIJWITtJ1gJzQY8X0.roa (hash: BujWwxtiu31OcVkERDwp6qXjCF/qZpedTzNgbY+R4ug=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/55cf77-6394-4812-9fb5-291aaedd58cc/1/ihZhi3H_yA4cP0HtDfyJq16WP9I.crl rsync://rpki.ripe.net/repository/DEFAULT/d4/55cf77-6394-4812-9fb5-291aaedd58cc/1/ihZhi3H_yA4cP0HtDfyJq16WP9I.mft rsync://rpki.ripe.net/repository/DEFAULT/ihZhi3H_yA4cP0HtDfyJq16WP9I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:2e:7c:74:7a:e9:91:95:b4:8f:f9:02:1f:c0:f9:b9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8a16618b71ffc80e1c3f41ed0dfc89ab5e963fd2 Validity Not Before: Dec 6 15:01:18 2025 GMT Not After : Dec 7 15:01:18 2025 GMT Subject: CN=b1e2eb1ea7aa0d54db84859f6722bd65cc0cfe4a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:c7:92:d1:e6:d2:b7:29:b8:43:ef:73:5a:b5: 07:17:aa:40:ab:db:9a:f1:fd:26:b8:c5:a5:96:9a: 6a:5b:c3:c7:66:d7:14:a2:ed:e0:04:05:33:c4:48: eb:77:db:53:cc:bb:c7:90:04:f8:ae:ba:e7:49:84: a0:e7:b4:d6:3e:71:ce:22:a4:31:58:f9:f0:07:b0: 5b:de:4c:29:a7:b1:db:31:36:86:7b:0f:45:88:84: df:8d:47:40:a4:7b:b3:65:4d:6c:36:ad:84:ad:65: e2:f0:f3:f3:a8:67:83:b5:f6:f5:51:60:c3:88:32: 0b:1d:3b:fe:39:81:b0:51:22:b6:58:d5:b5:b9:8f: a6:da:5f:d2:d6:34:eb:a0:96:be:9b:91:8d:9e:0f: c7:72:af:51:6d:b0:f4:07:ac:b7:c1:d8:72:6a:6d: d4:45:3a:37:b7:ca:0c:95:3b:16:a4:01:36:f3:c2: 9c:44:62:74:99:63:3a:49:f8:c3:90:e8:79:b4:62: 6b:1b:f2:1f:6c:5c:70:07:b1:90:86:c1:31:bf:14: d0:ad:68:d6:ea:e5:4e:f2:a8:47:26:56:c9:dc:3e: 4b:47:4a:47:87:44:cc:3b:88:4d:96:82:ad:7c:ac: 70:30:62:9f:71:77:f3:ac:78:e4:38:82:72:2f:2a: d6:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:E2:EB:1E:A7:AA:0D:54:DB:84:85:9F:67:22:BD:65:CC:0C:FE:4A X509v3 Authority Key Identifier: keyid:8A:16:61:8B:71:FF:C8:0E:1C:3F:41:ED:0D:FC:89:AB:5E:96:3F:D2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ihZhi3H_yA4cP0HtDfyJq16WP9I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/55cf77-6394-4812-9fb5-291aaedd58cc/1/ihZhi3H_yA4cP0HtDfyJq16WP9I.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/55cf77-6394-4812-9fb5-291aaedd58cc/1/ihZhi3H_yA4cP0HtDfyJq16WP9I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption af:ab:c7:09:ea:a1:67:3e:8c:a0:c2:01:41:76:70:b7:87:77: c6:9c:f6:09:45:d7:66:76:ce:38:7d:dc:57:d2:33:16:62:24: 51:aa:bd:6f:1b:9d:c9:82:0f:0d:81:c8:45:d7:cf:3a:1d:7c: bc:ed:74:46:aa:ef:4a:a8:50:4d:6f:d7:db:d8:1d:af:57:ff: c0:d5:fc:9d:e6:ec:c8:9e:db:1e:15:35:f0:ba:a1:18:67:1b: 31:60:c3:13:e5:3b:19:0a:1b:a2:47:ab:03:65:03:14:02:48: 47:9f:30:96:99:6e:93:30:c0:41:36:b0:cc:cf:8b:a3:5d:77: b6:66:35:5b:41:f7:43:7d:59:cf:64:00:a3:d4:31:9e:9f:2e: 08:f3:7c:74:21:55:d2:52:1a:a4:e1:13:7b:fe:fc:be:ef:39: 87:7e:d0:31:1c:b1:e4:bf:8a:03:1d:22:84:4d:40:23:6e:4b: 68:5a:43:f6:fe:a9:fc:f0:cb:20:0c:c4:b6:02:c6:a2:13:ac: ba:9e:2e:6e:41:1d:c7:ff:d1:c3:54:b2:30:4a:ba:aa:68:e7: 8f:50:5b:f4:da:2b:43:12:53:4a:b7:06:77:5f:08:4a:df:2f: 43:7c:3a:ac:93:45:89:d8:44:dd:2e:e7:b6:4e:b0:7b:0a:7e: 5a:0d:ca:ea -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr0Lnx0eumRlbSP+QIfwPm5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhhMTY2MThiNzFmZmM4MGUxYzNmNDFlZDBkZmM4OWFiNWU5 NjNmZDIwHhcNMjUxMjA2MTUwMTE4WhcNMjUxMjA3MTUwMTE4WjAzMTEwLwYDVQQD EyhiMWUyZWIxZWE3YWEwZDU0ZGI4NDg1OWY2NzIyYmQ2NWNjMGNmZTRhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxceS0ebStym4Q+9zWrUHF6pAq9ua 8f0muMWllppqW8PHZtcUou3gBAUzxEjrd9tTzLvHkAT4rrrnSYSg57TWPnHOIqQx WPnwB7Bb3kwpp7HbMTaGew9FiITfjUdApHuzZU1sNq2ErWXi8PPzqGeDtfb1UWDD iDILHTv+OYGwUSK2WNW1uY+m2l/S1jTroJa+m5GNng/Hcq9RbbD0B6y3wdhyam3U RTo3t8oMlTsWpAE288KcRGJ0mWM6SfjDkOh5tGJrG/IfbFxwB7GQhsExvxTQrWjW 6uVO8qhHJlbJ3D5LR0pHh0TMO4hNloKtfKxwMGKfcXfzrHjkOIJyLyrWtwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLHi6x6nqg1U24SFn2civWXMDP5KMB8GA1UdIwQY MBaAFIoWYYtx/8gOHD9B7Q38iatelj/SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaWhaaGkzSF95QTRjUDBIdERmeUpxMTZXUDlJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNC81NWNmNzctNjM5NC00ODEyLTlmYjUt MjkxYWFlZGQ1OGNjLzEvaWhaaGkzSF95QTRjUDBIdERmeUpxMTZXUDlJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNC81NWNmNzctNjM5NC00ODEyLTlmYjUtMjkxYWFlZGQ1OGNj LzEvaWhaaGkzSF95QTRjUDBIdERmeUpxMTZXUDlJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAr6vHCeqh Zz6MoMIBQXZwt4d3xpz2CUXXZnbOOH3cV9IzFmIkUaq9bxudyYIPDYHIRdfPOh18 vO10RqrvSqhQTW/X29gdr1f/wNX8nebsyJ7bHhU18LqhGGcbMWDDE+U7GQoboker A2UDFAJIR58wlplukzDAQTawzM+Lo113tmY1W0H3Q31Zz2QAo9Qxnp8uCPN8dCFV 0lIapOETe/78vu85h37QMRyx5L+KAx0ihE1AI25LaFpD9v6p/PDLIAzEtgLGohOs up4ubkEdx//Rw1SyMEq6qmjnj1Bb9NorQxJTSrcGd18ISt8vQ3w6rJNFidhE3S7n tk6wewp+Wg3K6g== -----END CERTIFICATE-----Generated at Sat Dec 6 20:07:10 2025 by rpki-client