This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/43afb6-0d21-4ff6-9863-bc517e121d54/1/ifTHhzt_6kn_brkNUCwdvDpfjDM.mft File: ifTHhzt_6kn_brkNUCwdvDpfjDM.mft (raw, json) Hash identifier: q+i+oiOK2UFsNIjqrfpRUk6GxgrFf8VH+vDorqJnjXg= Subject key identifier: EF:32:CA:DB:2A:53:79:B1:82:6E:74:67:F8:89:5A:FA:3B:6C:08:14 Authority key identifier: 89:F4:C7:87:3B:7F:EA:49:FF:6E:B9:0D:50:2C:1D:BC:3A:5F:8C:33 Certificate issuer: /CN=89f4c7873b7fea49ff6eb90d502c1dbc3a5f8c33 Certificate serial: 019AF276DB08FD80A948351B14A3893F6CB3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ifTHhzt_6kn_brkNUCwdvDpfjDM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/43afb6-0d21-4ff6-9863-bc517e121d54/1/ifTHhzt_6kn_brkNUCwdvDpfjDM.mft Manifest number: 1746 Signing time: Sat 06 Dec 2025 07:01:06 +0000 Manifest this update: Sat 06 Dec 2025 07:01:06 +0000 Manifest next update: Sun 07 Dec 2025 07:01:06 +0000 Files and hashes: 1: 5dE_GC4RYmruYsEQCosEswqhvMw.roa (hash: PKjCYy3vCzlACHchkXt5SVZDwsnRqMCgtgL6CJOnCUg=) 2: ifTHhzt_6kn_brkNUCwdvDpfjDM.crl (hash: Y78bNu9hZkmbNvTueYH7cj9+YGu0arb0w1PNaYoPuXY=) 3: wITBUH3fVii4QvavQf9IYQ9sIA4.roa (hash: sUVkY3RRTmkWlOCgQmin3wil/Gjs5wSpMGd2nMYWzJU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/43afb6-0d21-4ff6-9863-bc517e121d54/1/ifTHhzt_6kn_brkNUCwdvDpfjDM.crl rsync://rpki.ripe.net/repository/DEFAULT/f9/43afb6-0d21-4ff6-9863-bc517e121d54/1/ifTHhzt_6kn_brkNUCwdvDpfjDM.mft rsync://rpki.ripe.net/repository/DEFAULT/ifTHhzt_6kn_brkNUCwdvDpfjDM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:76:db:08:fd:80:a9:48:35:1b:14:a3:89:3f:6c:b3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89f4c7873b7fea49ff6eb90d502c1dbc3a5f8c33 Validity Not Before: Dec 6 07:01:06 2025 GMT Not After : Dec 7 07:01:06 2025 GMT Subject: CN=ef32cadb2a5379b1826e7467f8895afa3b6c0814 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:a2:ba:26:c8:a4:85:ae:b1:66:de:3f:f7:df: 1c:a7:02:03:c6:66:9f:26:39:7b:c4:ef:c9:3f:0c: 84:e0:04:e7:37:7e:1b:fe:9f:68:dc:51:8c:65:d9: 07:d4:85:dc:f1:16:d0:5b:c2:55:58:6f:7a:11:ac: eb:f9:e6:c8:37:70:43:47:3d:6a:ca:68:9a:37:63: e0:b2:7f:6a:81:20:a7:97:dd:16:9f:6d:10:ee:a1: 4f:21:8a:c3:e5:34:1a:ff:28:25:c5:f4:cc:d5:59: 0e:4f:83:eb:2b:2a:d4:9e:c0:f5:34:9e:f5:75:0d: be:f8:ce:d9:5a:15:32:4a:ed:15:84:7f:2f:36:9f: c4:68:ae:01:2a:de:9c:8a:95:d3:cb:ca:37:ea:e9: 39:3d:25:3a:e2:e9:1e:f9:28:17:1a:c4:32:ea:de: 92:64:db:df:9e:b2:c7:af:a4:b2:dd:a7:29:e0:ae: 1a:22:6d:61:fb:21:44:8c:18:0c:d1:d3:a1:fb:80: e5:37:eb:3f:1c:e7:1c:b8:16:60:c1:65:e6:22:ea: 6f:34:cc:9c:ed:19:42:e7:7a:ae:c9:39:f1:4f:f6: 22:30:4d:58:d5:1e:90:a3:30:58:12:84:95:2d:a2: 83:fc:30:e3:22:66:32:6f:44:51:e3:ff:28:41:3a: c0:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:32:CA:DB:2A:53:79:B1:82:6E:74:67:F8:89:5A:FA:3B:6C:08:14 X509v3 Authority Key Identifier: keyid:89:F4:C7:87:3B:7F:EA:49:FF:6E:B9:0D:50:2C:1D:BC:3A:5F:8C:33 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ifTHhzt_6kn_brkNUCwdvDpfjDM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/43afb6-0d21-4ff6-9863-bc517e121d54/1/ifTHhzt_6kn_brkNUCwdvDpfjDM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/43afb6-0d21-4ff6-9863-bc517e121d54/1/ifTHhzt_6kn_brkNUCwdvDpfjDM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 03:a8:06:5d:d2:4f:ed:ca:25:d2:0f:2e:fb:d7:67:1b:45:b7: 28:48:a9:c6:63:b0:10:72:c8:9b:25:27:e8:d6:c3:25:f4:e7: c5:5f:f1:0f:24:38:e2:b1:f4:f1:98:8b:8f:9a:6b:aa:9b:6d: 83:ff:98:b4:0b:cc:8d:70:40:78:b1:98:59:28:60:1f:fd:b9: a2:c7:fd:61:b9:f2:e8:5b:27:50:95:3b:6a:a9:ec:84:69:0f: 1b:fd:fc:d8:4b:58:fe:a5:7b:c4:9b:a1:d5:76:7b:e3:01:36: 69:75:ee:37:cb:33:aa:a2:f4:cf:86:62:c1:91:e5:99:a6:6b: 7d:1d:85:b5:bf:8f:a3:83:2c:1a:dd:27:9c:d7:4f:38:a2:31: d5:64:33:64:e5:30:83:b0:9c:c6:ed:11:b5:e7:53:2e:27:9b: ab:bb:16:3a:14:3f:ae:08:20:69:09:a0:76:42:de:22:e2:a1: ca:ca:f4:b4:61:c8:a1:43:41:c1:d0:76:27:99:8c:a7:e4:b1: 3c:71:e3:7b:ec:dc:2d:83:fc:1a:d8:fc:6d:91:4d:45:6d:e4: 5d:cf:4f:70:09:36:a9:35:7c:d1:79:d8:74:59:3c:8d:04:83: 8e:dc:08:14:a0:46:4a:bd:e2:4a:ab:5c:eb:1d:19:d1:19:e7: a3:36:58:66 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrydtsI/YCpSDUbFKOJP2yzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg5ZjRjNzg3M2I3ZmVhNDlmZjZlYjkwZDUwMmMxZGJjM2E1 ZjhjMzMwHhcNMjUxMjA2MDcwMTA2WhcNMjUxMjA3MDcwMTA2WjAzMTEwLwYDVQQD EyhlZjMyY2FkYjJhNTM3OWIxODI2ZTc0NjdmODg5NWFmYTNiNmMwODE0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtaK6Jsikha6xZt4/998cpwIDxmaf Jjl7xO/JPwyE4ATnN34b/p9o3FGMZdkH1IXc8RbQW8JVWG96Eazr+ebIN3BDRz1q ymiaN2Pgsn9qgSCnl90Wn20Q7qFPIYrD5TQa/yglxfTM1VkOT4PrKyrUnsD1NJ71 dQ2++M7ZWhUySu0VhH8vNp/EaK4BKt6cipXTy8o36uk5PSU64uke+SgXGsQy6t6S ZNvfnrLHr6Sy3acp4K4aIm1h+yFEjBgM0dOh+4DlN+s/HOccuBZgwWXmIupvNMyc 7RlC53quyTnxT/YiME1Y1R6QozBYEoSVLaKD/DDjImYyb0RR4/8oQTrAzQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFO8yytsqU3mxgm50Z/iJWvo7bAgUMB8GA1UdIwQY MBaAFIn0x4c7f+pJ/265DVAsHbw6X4wzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaWZUSGh6dF82a25fYnJrTlVDd2R2RHBmakRNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOS80M2FmYjYtMGQyMS00ZmY2LTk4NjMt YmM1MTdlMTIxZDU0LzEvaWZUSGh6dF82a25fYnJrTlVDd2R2RHBmakRNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mOS80M2FmYjYtMGQyMS00ZmY2LTk4NjMtYmM1MTdlMTIxZDU0 LzEvaWZUSGh6dF82a25fYnJrTlVDd2R2RHBmakRNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAA6gGXdJP 7col0g8u+9dnG0W3KEipxmOwEHLImyUn6NbDJfTnxV/xDyQ44rH08ZiLj5prqptt g/+YtAvMjXBAeLGYWShgH/25osf9Ybny6FsnUJU7aqnshGkPG/382EtY/qV7xJuh 1XZ74wE2aXXuN8szqqL0z4ZiwZHlmaZrfR2Ftb+Po4MsGt0nnNdPOKIx1WQzZOUw g7Ccxu0RtedTLiebq7sWOhQ/rgggaQmgdkLeIuKhysr0tGHIoUNBwdB2J5mMp+Sx PHHje+zcLYP8Gtj8bZFNRW3kXc9PcAk2qTV80XnYdFk8jQSDjtwIFKBGSr3iSqtc 6x0Z0RnnozZYZg== -----END CERTIFICATE-----Generated at Sat Dec 6 10:06:51 2025 by rpki-client