This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/1f2c8f-8ed9-4b7e-aa1e-d3c4f5dcbe4c/1/i4r2r1fd_Fx6qCjPIl-Y3OlZBKA.mft File: i4r2r1fd_Fx6qCjPIl-Y3OlZBKA.mft (raw, json) Hash identifier: AVE7zX9Klvklmyu1JWDaraNgJtq3D7VDPf+u2IeRFjk= Subject key identifier: 03:0E:A1:11:93:FC:D7:71:0C:79:44:E5:5A:9A:97:CE:33:5E:A5:7C Authority key identifier: 8B:8A:F6:AF:57:DD:FC:5C:7A:A8:28:CF:22:5F:98:DC:E9:59:04:A0 Certificate issuer: /CN=8b8af6af57ddfc5c7aa828cf225f98dce95904a0 Certificate serial: 019AF352C29ABDA38CCB44EE1451D70E80F0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i4r2r1fd_Fx6qCjPIl-Y3OlZBKA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/1f2c8f-8ed9-4b7e-aa1e-d3c4f5dcbe4c/1/i4r2r1fd_Fx6qCjPIl-Y3OlZBKA.mft Manifest number: 0A6A Signing time: Sat 06 Dec 2025 11:01:18 +0000 Manifest this update: Sat 06 Dec 2025 11:01:18 +0000 Manifest next update: Sun 07 Dec 2025 11:01:18 +0000 Files and hashes: 1: i4r2r1fd_Fx6qCjPIl-Y3OlZBKA.crl (hash: IRKmmkytU775tbIEUrJ70EFc1NlfQAR5nZtX8FeoRXI=) 2: stIrfyQj0_eTZw5LKQkMNxuFxgI.roa (hash: eqwBV8CXGai5haR4OF0T1dC++87tM0y7pi8XDxr8OrQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/1f2c8f-8ed9-4b7e-aa1e-d3c4f5dcbe4c/1/i4r2r1fd_Fx6qCjPIl-Y3OlZBKA.crl rsync://rpki.ripe.net/repository/DEFAULT/dd/1f2c8f-8ed9-4b7e-aa1e-d3c4f5dcbe4c/1/i4r2r1fd_Fx6qCjPIl-Y3OlZBKA.mft rsync://rpki.ripe.net/repository/DEFAULT/i4r2r1fd_Fx6qCjPIl-Y3OlZBKA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 11:01:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:52:c2:9a:bd:a3:8c:cb:44:ee:14:51:d7:0e:80:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8b8af6af57ddfc5c7aa828cf225f98dce95904a0 Validity Not Before: Dec 6 11:01:18 2025 GMT Not After : Dec 7 11:01:18 2025 GMT Subject: CN=030ea11193fcd7710c7944e55a9a97ce335ea57c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:f6:8c:e9:4e:0a:48:ec:ce:80:dd:45:49:af: c9:5e:72:ec:39:27:00:8d:3c:83:e1:bc:d7:77:58: 9b:3c:aa:54:0f:5a:4b:65:8e:3d:06:01:e5:66:21: 77:92:6b:06:ff:f3:dc:04:8c:7c:ea:d4:70:c5:dc: ae:91:cb:63:89:45:21:93:05:53:83:f2:4c:b2:6d: 3c:e9:c7:db:9b:97:f4:7d:2d:b7:28:10:e2:38:4f: a3:76:c2:df:91:fc:4f:0d:d9:4b:72:61:3c:f4:6d: 62:27:87:4c:70:af:fe:f2:db:97:d7:fb:34:43:ea: f1:5f:ac:c5:2e:fa:4a:60:77:af:15:e1:30:2f:16: a7:70:da:3f:f1:db:10:a9:73:97:58:34:a3:e7:73: 8c:5b:d7:2c:7f:61:e3:f0:44:8f:b9:fc:12:9d:02: 23:e7:ab:41:53:c6:eb:7c:ee:60:0f:4a:f0:4a:16: fb:42:85:c5:20:f5:69:68:27:40:ca:12:a4:da:d4: 5d:3f:dc:fc:9d:5a:80:25:44:06:4b:35:3a:27:8a: 61:ac:a2:49:ac:92:49:c3:71:4a:69:ba:32:7f:66: b3:77:64:0f:d0:fe:29:61:60:1d:e6:60:59:07:70: 7d:83:d9:49:c9:84:7b:1d:ff:91:6d:04:6d:18:e2: 32:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:0E:A1:11:93:FC:D7:71:0C:79:44:E5:5A:9A:97:CE:33:5E:A5:7C X509v3 Authority Key Identifier: keyid:8B:8A:F6:AF:57:DD:FC:5C:7A:A8:28:CF:22:5F:98:DC:E9:59:04:A0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i4r2r1fd_Fx6qCjPIl-Y3OlZBKA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/1f2c8f-8ed9-4b7e-aa1e-d3c4f5dcbe4c/1/i4r2r1fd_Fx6qCjPIl-Y3OlZBKA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/1f2c8f-8ed9-4b7e-aa1e-d3c4f5dcbe4c/1/i4r2r1fd_Fx6qCjPIl-Y3OlZBKA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 45:80:7e:b4:78:21:62:d3:c8:e6:e9:33:2d:01:3c:73:b3:71: 54:d6:c6:dc:a6:40:f7:66:86:46:30:a3:e8:0d:56:72:7d:9a: d5:71:b0:4a:af:ee:e0:6d:7c:f0:d7:e8:ad:fe:5c:af:2f:8c: 7a:f5:77:37:43:58:b3:9f:01:12:ad:1b:f7:7a:0a:cf:7f:2e: d4:7d:88:ad:97:fb:6e:ab:2c:c2:42:6b:aa:2d:99:29:3c:8b: 94:f7:00:93:99:a0:d5:f6:a0:c3:b0:cf:c0:38:7d:97:a0:0e: da:49:9d:7d:44:31:1e:7f:0d:c1:91:b2:fa:04:0d:0f:4b:d5: 25:89:d5:d7:17:1c:66:60:75:72:61:b7:b9:7c:b7:cf:19:6e: 83:4d:b5:93:dd:c2:b2:bc:1e:ce:c5:9b:87:5f:91:a6:68:a6: 15:d9:95:36:56:3a:ed:b5:50:dc:3d:4e:da:6b:46:3f:84:d7: 6d:1d:dd:30:66:d4:64:5c:f2:b9:7b:03:24:e1:d5:ab:06:5d: 60:bc:a9:fb:7f:69:40:21:9a:72:cd:12:6f:f6:46:c4:eb:c9: 56:82:50:6a:27:48:1a:a5:85:03:0e:8e:80:66:7e:96:ce:65: b1:fc:a1:3e:6f:2f:1c:33:37:1b:70:7c:5e:d6:ef:a8:f5:54: 46:6d:d8:13 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzUsKavaOMy0TuFFHXDoDwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhiOGFmNmFmNTdkZGZjNWM3YWE4MjhjZjIyNWY5OGRjZTk1 OTA0YTAwHhcNMjUxMjA2MTEwMTE4WhcNMjUxMjA3MTEwMTE4WjAzMTEwLwYDVQQD EygwMzBlYTExMTkzZmNkNzcxMGM3OTQ0ZTU1YTlhOTdjZTMzNWVhNTdjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv/aM6U4KSOzOgN1FSa/JXnLsOScA jTyD4bzXd1ibPKpUD1pLZY49BgHlZiF3kmsG//PcBIx86tRwxdyukctjiUUhkwVT g/JMsm086cfbm5f0fS23KBDiOE+jdsLfkfxPDdlLcmE89G1iJ4dMcK/+8tuX1/s0 Q+rxX6zFLvpKYHevFeEwLxancNo/8dsQqXOXWDSj53OMW9csf2Hj8ESPufwSnQIj 56tBU8brfO5gD0rwShb7QoXFIPVpaCdAyhKk2tRdP9z8nVqAJUQGSzU6J4phrKJJ rJJJw3FKaboyf2azd2QP0P4pYWAd5mBZB3B9g9lJyYR7Hf+RbQRtGOIygQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAMOoRGT/NdxDHlE5Vqal84zXqV8MB8GA1UdIwQY MBaAFIuK9q9X3fxceqgozyJfmNzpWQSgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaTRyMnIxZmRfRng2cUNqUElsLVkzT2xaQktBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZC8xZjJjOGYtOGVkOS00YjdlLWFhMWUt ZDNjNGY1ZGNiZTRjLzEvaTRyMnIxZmRfRng2cUNqUElsLVkzT2xaQktBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZC8xZjJjOGYtOGVkOS00YjdlLWFhMWUtZDNjNGY1ZGNiZTRj LzEvaTRyMnIxZmRfRng2cUNqUElsLVkzT2xaQktBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARYB+tHgh YtPI5ukzLQE8c7NxVNbG3KZA92aGRjCj6A1Wcn2a1XGwSq/u4G188Nforf5cry+M evV3N0NYs58BEq0b93oKz38u1H2IrZf7bqsswkJrqi2ZKTyLlPcAk5mg1fagw7DP wDh9l6AO2kmdfUQxHn8NwZGy+gQND0vVJYnV1xccZmB1cmG3uXy3zxlug021k93C srwezsWbh1+RpmimFdmVNlY67bVQ3D1O2mtGP4TXbR3dMGbUZFzyuXsDJOHVqwZd YLyp+39pQCGacs0Sb/ZGxOvJVoJQaidIGqWFAw6OgGZ+ls5lsfyhPm8vHDM3G3B8 XtbvqPVURm3YEw== -----END CERTIFICATE-----Generated at Sat Dec 6 21:38:14 2025 by rpki-client