This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/dbe446-9da3-4854-b5d3-25a38a246fa2/1/i0LHUqmwmDEos9KV5F6hazPuffk.mft File: i0LHUqmwmDEos9KV5F6hazPuffk.mft (raw, json) Hash identifier: MvyBFfEpgVRoWnHAaD/lErRH2jmYE6htlTDnA1mItpc= Subject key identifier: 8E:9A:59:65:90:A8:24:9C:AD:7C:14:30:19:E7:38:01:8C:2C:6A:70 Authority key identifier: 8B:42:C7:52:A9:B0:98:31:28:B3:D2:95:E4:5E:A1:6B:33:EE:7D:F9 Certificate issuer: /CN=8b42c752a9b0983128b3d295e45ea16b33ee7df9 Certificate serial: 019B311F005767BF230036CAFB6924E7FF20 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i0LHUqmwmDEos9KV5F6hazPuffk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/dbe446-9da3-4854-b5d3-25a38a246fa2/1/i0LHUqmwmDEos9KV5F6hazPuffk.mft Manifest number: 1783 Signing time: Thu 18 Dec 2025 11:01:13 +0000 Manifest this update: Thu 18 Dec 2025 11:01:13 +0000 Manifest next update: Fri 19 Dec 2025 11:01:13 +0000 Files and hashes: 1: deCTZwf8Lo4tPBt2V0GwD8QTdjQ.roa (hash: FyKYzrCJB3LXbVhWQRcS/ZI/wI5zOqLIDpvmKLMGaw0=) 2: i0LHUqmwmDEos9KV5F6hazPuffk.crl (hash: VrRMbAbDKcEqvxzI6Z0xflyBQIVZhAAc318r/smcmVU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/dbe446-9da3-4854-b5d3-25a38a246fa2/1/i0LHUqmwmDEos9KV5F6hazPuffk.crl rsync://rpki.ripe.net/repository/DEFAULT/f6/dbe446-9da3-4854-b5d3-25a38a246fa2/1/i0LHUqmwmDEos9KV5F6hazPuffk.mft rsync://rpki.ripe.net/repository/DEFAULT/i0LHUqmwmDEos9KV5F6hazPuffk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 04:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:31:1f:00:57:67:bf:23:00:36:ca:fb:69:24:e7:ff:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8b42c752a9b0983128b3d295e45ea16b33ee7df9 Validity Not Before: Dec 18 11:01:13 2025 GMT Not After : Dec 19 11:01:13 2025 GMT Subject: CN=8e9a596590a8249cad7c143019e738018c2c6a70 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:cd:fe:6a:40:29:19:77:fc:81:44:d9:49:bf: d7:15:2b:3c:0e:e1:08:30:dc:b7:67:9a:f4:32:1c: a7:75:b5:53:b9:95:4f:0d:1f:ce:cf:07:dd:74:85: 0a:d0:f4:81:5e:f1:65:48:59:03:36:e8:c2:56:c3: 77:48:4b:d5:80:d5:46:64:e7:fb:52:55:b9:cb:71: e3:78:0d:73:2e:3b:bd:f8:a7:7d:d4:02:e0:90:39: 91:c7:e5:0b:3c:ba:55:fb:26:f7:e7:a6:ba:9d:b5: 1f:bd:a5:83:71:74:58:1e:3f:f1:81:14:d7:05:d6: c4:8d:f9:56:21:a4:76:30:b3:ea:92:8e:37:f1:ef: d8:c4:6c:92:33:5f:d5:2f:9c:46:10:0f:ca:7d:fc: 71:1b:03:81:2a:b7:43:ab:25:39:d9:05:37:eb:e4: a1:ce:72:e1:9c:79:08:e3:e4:1a:ab:60:a9:ad:51: 36:d9:56:76:00:34:4c:46:a2:2e:83:ef:cc:0c:bc: 9b:90:47:21:f7:83:de:fe:49:1b:a0:3f:e7:9a:88: c6:9c:ee:8e:51:e9:d5:bf:04:42:d3:20:57:89:0e: a2:c0:fd:f7:a3:15:1b:40:9f:7b:78:df:09:e5:19: df:69:6f:2a:d5:4e:45:5b:00:9f:bc:60:d6:8e:4a: 00:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:9A:59:65:90:A8:24:9C:AD:7C:14:30:19:E7:38:01:8C:2C:6A:70 X509v3 Authority Key Identifier: keyid:8B:42:C7:52:A9:B0:98:31:28:B3:D2:95:E4:5E:A1:6B:33:EE:7D:F9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i0LHUqmwmDEos9KV5F6hazPuffk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/dbe446-9da3-4854-b5d3-25a38a246fa2/1/i0LHUqmwmDEos9KV5F6hazPuffk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/dbe446-9da3-4854-b5d3-25a38a246fa2/1/i0LHUqmwmDEos9KV5F6hazPuffk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b3:a6:13:ef:42:40:80:42:f9:fd:b2:08:dd:d1:52:4f:ae:9b: 7f:9e:a2:93:fc:fa:36:9a:be:f4:cc:ee:5c:4a:28:e2:33:88: ca:3a:6d:04:17:f2:91:ff:d5:bc:b7:08:18:0b:c2:26:73:51: 20:21:f5:2d:a1:34:99:ae:2a:59:d4:81:cb:67:3f:3f:2b:57: 13:e9:12:25:be:e4:27:51:4d:ba:be:58:3f:41:0a:20:ed:b7: be:af:c9:ad:e1:44:5a:9a:e5:95:f9:1f:4d:08:b4:44:f3:aa: b5:fa:d0:91:88:83:26:5a:c3:d8:ec:12:0f:11:5b:92:35:ef: a2:53:f4:cc:4f:b8:99:35:79:70:9d:07:1b:9e:50:1b:28:dd: e9:26:0f:4d:2a:a9:06:dd:8e:d1:f1:cc:a5:df:3e:2a:f7:01: f6:96:ec:e7:0d:ae:52:f4:08:c6:b9:19:87:42:33:7a:4c:dd: 4f:dc:07:d1:c9:8a:ba:81:6e:68:f5:8a:db:57:90:12:99:14: 6b:58:d0:57:76:a9:13:a9:dd:83:98:73:9c:a3:cd:c9:5b:ca: 0f:bb:6e:72:ce:1a:be:d0:23:7b:74:91:7f:ef:94:d3:c4:1e: c3:38:04:29:90:0c:c2:b9:6f:82:12:a2:7e:a4:a9:ed:30:56: 29:a7:8f:2f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsxHwBXZ78jADbK+2kk5/8gMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhiNDJjNzUyYTliMDk4MzEyOGIzZDI5NWU0NWVhMTZiMzNl ZTdkZjkwHhcNMjUxMjE4MTEwMTEzWhcNMjUxMjE5MTEwMTEzWjAzMTEwLwYDVQQD Eyg4ZTlhNTk2NTkwYTgyNDljYWQ3YzE0MzAxOWU3MzgwMThjMmM2YTcwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArs3+akApGXf8gUTZSb/XFSs8DuEI MNy3Z5r0MhyndbVTuZVPDR/OzwfddIUK0PSBXvFlSFkDNujCVsN3SEvVgNVGZOf7 UlW5y3HjeA1zLju9+Kd91ALgkDmRx+ULPLpV+yb356a6nbUfvaWDcXRYHj/xgRTX BdbEjflWIaR2MLPqko438e/YxGySM1/VL5xGEA/KffxxGwOBKrdDqyU52QU36+Sh znLhnHkI4+Qaq2CprVE22VZ2ADRMRqIug+/MDLybkEch94Pe/kkboD/nmojGnO6O UenVvwRC0yBXiQ6iwP33oxUbQJ97eN8J5RnfaW8q1U5FWwCfvGDWjkoAdQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFI6aWWWQqCScrXwUMBnnOAGMLGpwMB8GA1UdIwQY MBaAFItCx1KpsJgxKLPSleReoWsz7n35MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaTBMSFVxbXdtREVvczlLVjVGNmhhelB1ZmZrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNi9kYmU0NDYtOWRhMy00ODU0LWI1ZDMt MjVhMzhhMjQ2ZmEyLzEvaTBMSFVxbXdtREVvczlLVjVGNmhhelB1ZmZrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNi9kYmU0NDYtOWRhMy00ODU0LWI1ZDMtMjVhMzhhMjQ2ZmEy LzEvaTBMSFVxbXdtREVvczlLVjVGNmhhelB1ZmZrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAs6YT70JA gEL5/bII3dFST66bf56ik/z6Npq+9MzuXEoo4jOIyjptBBfykf/VvLcIGAvCJnNR ICH1LaE0ma4qWdSBy2c/PytXE+kSJb7kJ1FNur5YP0EKIO23vq/JreFEWprllfkf TQi0RPOqtfrQkYiDJlrD2OwSDxFbkjXvolP0zE+4mTV5cJ0HG55QGyjd6SYPTSqp Bt2O0fHMpd8+KvcB9pbs5w2uUvQIxrkZh0IzekzdT9wH0cmKuoFuaPWK21eQEpkU a1jQV3apE6ndg5hznKPNyVvKD7tucs4avtAje3SRf++U08QewzgEKZAMwrlvghKi fqSp7TBWKaePLw== -----END CERTIFICATE-----Generated at Thu Dec 18 13:07:38 2025 by rpki-client