This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/251360-c5c5-4a40-af72-04427a99f1c5/1/irPpZch0fi-l3dEoV2c_BgQu-kM.mft File: irPpZch0fi-l3dEoV2c_BgQu-kM.mft (raw, json) Hash identifier: OGRzIFKhhuoYv5TZEADTY/N/jz6AcKgpAQnXxkf4TbU= Subject key identifier: 78:CD:71:A8:B0:16:E2:2C:22:98:8E:A5:7D:3D:70:8B:A4:99:2E:20 Authority key identifier: 8A:B3:E9:65:C8:74:7E:2F:A5:DD:D1:28:57:67:3F:06:04:2E:FA:43 Certificate issuer: /CN=8ab3e965c8747e2fa5ddd12857673f06042efa43 Certificate serial: 019B2664C63CB437C5413E150280BA1CA922 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/irPpZch0fi-l3dEoV2c_BgQu-kM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/251360-c5c5-4a40-af72-04427a99f1c5/1/irPpZch0fi-l3dEoV2c_BgQu-kM.mft Manifest number: 1710 Signing time: Tue 16 Dec 2025 09:01:37 +0000 Manifest this update: Tue 16 Dec 2025 09:01:37 +0000 Manifest next update: Wed 17 Dec 2025 09:01:37 +0000 Files and hashes: 1: 0R4cTom2N3Ffy-a36Ai0y_lwR7M.roa (hash: Nepk/Ut8yLvwSKOE+VPPTDkKY+eqYlx1ya61v2fExqo=) 2: DO5JxSipVW_jSyusVYE1KNyV5oM.roa (hash: fTaf/BSF7U37w4OYShE1QwyUlpAokZv3Xb6JIFlzFT0=) 3: MHydlao-1yBTTsCdp3bBe4bDnkc.roa (hash: OnwOrVTgc/R+eeJsST7imMdVV9F4opbfB++sLNDhiX8=) 4: irPpZch0fi-l3dEoV2c_BgQu-kM.crl (hash: I+rrr84DLD5MfDene6jqHYc7ZahR7Kl/V9FiLXNjtSI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/251360-c5c5-4a40-af72-04427a99f1c5/1/irPpZch0fi-l3dEoV2c_BgQu-kM.crl rsync://rpki.ripe.net/repository/DEFAULT/d7/251360-c5c5-4a40-af72-04427a99f1c5/1/irPpZch0fi-l3dEoV2c_BgQu-kM.mft rsync://rpki.ripe.net/repository/DEFAULT/irPpZch0fi-l3dEoV2c_BgQu-kM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 09:01:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:26:64:c6:3c:b4:37:c5:41:3e:15:02:80:ba:1c:a9:22 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8ab3e965c8747e2fa5ddd12857673f06042efa43 Validity Not Before: Dec 16 09:01:37 2025 GMT Not After : Dec 17 09:01:37 2025 GMT Subject: CN=78cd71a8b016e22c22988ea57d3d708ba4992e20 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:ea:14:6f:82:2d:a8:b9:74:d8:13:5d:7d:37: 7c:d3:0c:65:b9:49:b9:20:f0:da:cc:88:8f:ae:98: 21:bb:d7:51:49:dc:ea:e5:93:4c:34:63:ac:3c:08: 1b:c4:d2:d9:48:82:32:f7:92:73:cb:ad:65:30:27: 89:4b:df:79:12:b7:3b:29:f7:a0:87:6d:5e:87:d0: 4f:0c:fc:98:8d:fd:a3:b4:53:ce:75:39:2b:4e:b8: 75:7b:ea:61:d0:05:09:d7:f2:04:dd:41:3c:b0:95: c0:91:4f:c0:06:d7:bd:26:1c:77:4e:38:5b:a4:73: 1b:61:d8:9c:75:ac:1a:c9:41:b8:c9:b2:8a:ff:18: 43:8b:53:16:5e:e1:9f:70:3c:55:3f:cd:27:2f:1c: 8f:14:23:0f:59:c4:87:bc:c8:41:dd:30:81:22:06: 11:6c:f2:a1:97:38:81:de:83:0b:46:bc:18:c1:f7: 97:e8:10:c4:4a:20:e6:19:0f:21:a8:96:80:0b:be: 47:eb:44:e0:73:33:02:e9:23:9b:ff:fa:7a:1f:91: 2f:ca:ca:6a:0f:09:0b:d4:a9:5b:88:33:04:9c:b6: ff:72:6b:1b:0a:90:3a:b6:24:f3:a8:f2:ae:65:ca: 76:b3:1f:f8:14:03:7c:e0:88:fd:48:ea:ac:09:2b: fb:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:CD:71:A8:B0:16:E2:2C:22:98:8E:A5:7D:3D:70:8B:A4:99:2E:20 X509v3 Authority Key Identifier: keyid:8A:B3:E9:65:C8:74:7E:2F:A5:DD:D1:28:57:67:3F:06:04:2E:FA:43 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/irPpZch0fi-l3dEoV2c_BgQu-kM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/251360-c5c5-4a40-af72-04427a99f1c5/1/irPpZch0fi-l3dEoV2c_BgQu-kM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/251360-c5c5-4a40-af72-04427a99f1c5/1/irPpZch0fi-l3dEoV2c_BgQu-kM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 18:4d:4c:7f:fc:1f:a0:fd:d1:69:c1:36:81:e2:6f:e6:b3:31: 7c:1b:b6:bc:f8:bc:10:f0:24:c1:76:93:73:e3:2f:ea:97:ef: c9:0a:fb:d4:d2:ae:52:d4:db:99:4e:ba:45:2c:1f:e0:39:54: a7:4e:7b:75:5f:f5:9c:14:1f:79:6b:d3:c0:8a:84:f1:6b:90: 24:ea:85:15:ad:a0:68:d0:d2:de:a2:80:83:ce:00:9d:fa:f7: d2:10:21:bc:db:e3:4a:69:0b:49:86:e8:59:42:8b:dd:3a:90: 07:ce:ed:0c:56:4f:0b:d9:1a:d2:ba:a6:04:2e:50:e5:d1:45: bd:d1:57:d9:bb:36:f8:05:35:04:3a:eb:32:96:7e:b6:3d:7e: ca:4b:e0:3f:f5:cc:2a:b3:2b:80:97:96:38:0e:17:95:4b:06: 51:78:9d:63:6d:86:f2:93:89:27:72:ed:b8:25:e5:42:19:a5: 10:6c:01:dc:09:d1:5b:5e:68:e4:8e:7d:1b:2b:37:13:47:be: 0a:85:12:5b:28:53:4c:ff:65:92:73:1c:40:f5:b8:8e:20:de: 2b:e0:69:46:77:28:41:96:67:c2:64:59:2d:f5:7f:a1:2f:57: bb:f4:d0:70:4d:5d:0b:4b:18:86:c1:81:35:55:19:a7:a5:47: 46:bb:82:2c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsmZMY8tDfFQT4VAoC6HKkiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhhYjNlOTY1Yzg3NDdlMmZhNWRkZDEyODU3NjczZjA2MDQy ZWZhNDMwHhcNMjUxMjE2MDkwMTM3WhcNMjUxMjE3MDkwMTM3WjAzMTEwLwYDVQQD Eyg3OGNkNzFhOGIwMTZlMjJjMjI5ODhlYTU3ZDNkNzA4YmE0OTkyZTIwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyeoUb4ItqLl02BNdfTd80wxluUm5 IPDazIiPrpghu9dRSdzq5ZNMNGOsPAgbxNLZSIIy95Jzy61lMCeJS995Erc7Kfeg h21eh9BPDPyYjf2jtFPOdTkrTrh1e+ph0AUJ1/IE3UE8sJXAkU/ABte9Jhx3Tjhb pHMbYdicdawayUG4ybKK/xhDi1MWXuGfcDxVP80nLxyPFCMPWcSHvMhB3TCBIgYR bPKhlziB3oMLRrwYwfeX6BDESiDmGQ8hqJaAC75H60TgczMC6SOb//p6H5Evyspq DwkL1KlbiDMEnLb/cmsbCpA6tiTzqPKuZcp2sx/4FAN84Ij9SOqsCSv7JwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHjNcaiwFuIsIpiOpX09cIukmS4gMB8GA1UdIwQY MBaAFIqz6WXIdH4vpd3RKFdnPwYELvpDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaXJQcFpjaDBmaS1sM2RFb1YyY19CZ1F1LWtNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNy8yNTEzNjAtYzVjNS00YTQwLWFmNzIt MDQ0MjdhOTlmMWM1LzEvaXJQcFpjaDBmaS1sM2RFb1YyY19CZ1F1LWtNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNy8yNTEzNjAtYzVjNS00YTQwLWFmNzItMDQ0MjdhOTlmMWM1 LzEvaXJQcFpjaDBmaS1sM2RFb1YyY19CZ1F1LWtNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGE1Mf/wf oP3RacE2geJv5rMxfBu2vPi8EPAkwXaTc+Mv6pfvyQr71NKuUtTbmU66RSwf4DlU p057dV/1nBQfeWvTwIqE8WuQJOqFFa2gaNDS3qKAg84Anfr30hAhvNvjSmkLSYbo WUKL3TqQB87tDFZPC9ka0rqmBC5Q5dFFvdFX2bs2+AU1BDrrMpZ+tj1+ykvgP/XM KrMrgJeWOA4XlUsGUXidY22G8pOJJ3LtuCXlQhmlEGwB3AnRW15o5I59Gys3E0e+ CoUSWyhTTP9lknMcQPW4jiDeK+BpRncoQZZnwmRZLfV/oS9Xu/TQcE1dC0sYhsGB NVUZp6VHRruCLA== -----END CERTIFICATE-----Generated at Tue Dec 16 19:52:25 2025 by rpki-client