This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/b182bc-bc32-4e2f-bad7-ca51fb408901/1/IHi67mtuxUJaFrH8AMUsMO2Vo_A.mft File: IHi67mtuxUJaFrH8AMUsMO2Vo_A.mft (raw, json) Hash identifier: VfqZfu3RLySGFDpLNwl8jcloPFkqsRTglhol1zlaYVM= Subject key identifier: C7:92:83:A5:9E:8B:5B:C7:EB:54:34:DF:A2:D3:A8:98:B6:C0:3E:9B Authority key identifier: 20:78:BA:EE:6B:6E:C5:42:5A:16:B1:FC:00:C5:2C:30:ED:95:A3:F0 Certificate issuer: /CN=2078baee6b6ec5425a16b1fc00c52c30ed95a3f0 Certificate serial: 019AF2AD49A52B44C0A88E38357F9DA8E65B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IHi67mtuxUJaFrH8AMUsMO2Vo_A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/b182bc-bc32-4e2f-bad7-ca51fb408901/1/IHi67mtuxUJaFrH8AMUsMO2Vo_A.mft Manifest number: 14D3 Signing time: Sat 06 Dec 2025 08:00:34 +0000 Manifest this update: Sat 06 Dec 2025 08:00:34 +0000 Manifest next update: Sun 07 Dec 2025 08:00:34 +0000 Files and hashes: 1: IHi67mtuxUJaFrH8AMUsMO2Vo_A.crl (hash: vHQLtmZnBv9+Ni5U01iy8Ef5WGFahhJuXPDsz5UtdUs=) 2: Tj1VT7s8ilnWaRH5FDEx4ErgOfw.roa (hash: EAnVAxYXeZnLn3O7V7JRGZpaiw9YJLofd+adf3s7hWw=) 3: z8gJT3mWJvoCjNtGavez3w-sptI.roa (hash: rAtA37xRZ8BRiEnR3BviWDsE+vEFga17zSGIolCXdPw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/b182bc-bc32-4e2f-bad7-ca51fb408901/1/IHi67mtuxUJaFrH8AMUsMO2Vo_A.crl rsync://rpki.ripe.net/repository/DEFAULT/ff/b182bc-bc32-4e2f-bad7-ca51fb408901/1/IHi67mtuxUJaFrH8AMUsMO2Vo_A.mft rsync://rpki.ripe.net/repository/DEFAULT/IHi67mtuxUJaFrH8AMUsMO2Vo_A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:ad:49:a5:2b:44:c0:a8:8e:38:35:7f:9d:a8:e6:5b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2078baee6b6ec5425a16b1fc00c52c30ed95a3f0 Validity Not Before: Dec 6 08:00:34 2025 GMT Not After : Dec 7 08:00:34 2025 GMT Subject: CN=c79283a59e8b5bc7eb5434dfa2d3a898b6c03e9b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:8f:5a:1c:27:05:cc:6d:e6:9d:6d:83:35:9c: a8:23:54:22:86:c4:1c:a4:9e:f7:6f:cd:66:78:ab: 23:5c:dd:7c:29:ac:af:e4:66:1e:59:38:60:63:59: aa:e4:9b:ed:23:d2:fa:83:03:80:ac:e1:70:86:fe: ad:2a:59:53:97:38:e5:1f:0f:06:26:a8:8b:80:89: 9a:50:ad:14:52:c7:92:6b:fb:41:da:4b:db:b2:cb: 85:6a:63:f8:63:9d:86:60:cf:60:8f:b3:57:26:7d: 01:85:7a:ae:df:0e:5d:c9:cd:c5:78:4a:2f:7b:7c: 6c:67:12:6c:81:d6:e9:85:b6:79:c4:ec:55:2b:16: f7:09:2e:70:21:37:d5:09:94:ef:d5:cd:85:c5:a1: 4b:7a:36:c3:7c:bc:15:aa:52:2a:f2:79:92:6f:b1: 05:6e:87:53:48:41:fe:f8:29:cc:45:36:71:71:d4: ae:bb:7b:73:d1:be:7a:2a:93:36:7a:ad:6b:2d:e4: 4b:0b:8c:ed:d4:f0:b1:83:6e:48:12:9d:63:f8:ed: 07:19:88:cd:3b:54:a4:bb:27:ec:b8:48:1c:5c:44: f4:67:fb:4b:43:4b:87:65:c9:2e:b0:82:91:91:72: 5c:c8:b7:46:24:13:54:10:76:f4:a5:e6:89:1b:fd: 93:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:92:83:A5:9E:8B:5B:C7:EB:54:34:DF:A2:D3:A8:98:B6:C0:3E:9B X509v3 Authority Key Identifier: keyid:20:78:BA:EE:6B:6E:C5:42:5A:16:B1:FC:00:C5:2C:30:ED:95:A3:F0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IHi67mtuxUJaFrH8AMUsMO2Vo_A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/b182bc-bc32-4e2f-bad7-ca51fb408901/1/IHi67mtuxUJaFrH8AMUsMO2Vo_A.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/b182bc-bc32-4e2f-bad7-ca51fb408901/1/IHi67mtuxUJaFrH8AMUsMO2Vo_A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 05:b0:0b:0c:3a:8c:3d:05:c8:34:f3:48:e9:f3:9b:bf:b4:62: 63:5e:49:24:96:d4:43:da:c4:f8:07:31:2c:3e:d0:e2:ed:4c: d4:ad:aa:62:53:37:64:48:91:08:e4:0f:85:3c:b0:2f:fa:41: 0a:7e:f2:4f:5e:fa:0d:16:b8:ff:06:29:fb:e9:e3:6d:af:0d: a2:f6:9d:b7:51:e4:1c:5d:4f:9d:75:02:08:0a:52:49:09:8b: 77:22:ad:eb:b6:ae:18:b3:73:b2:89:8f:b7:96:02:dc:8f:fb: 34:d3:fd:bd:5d:74:e1:aa:77:a7:81:69:8a:52:24:d6:ca:46: fa:3e:26:e3:8a:39:9a:ac:87:ab:c4:d1:a9:51:fb:11:78:2d: 51:43:b8:81:5a:5b:18:64:6a:7d:58:7c:5e:e8:65:c0:b4:07: 48:a6:09:9d:af:ef:d1:9a:9c:9f:10:ef:c3:c8:47:3e:8c:cd: cf:13:86:de:ab:b7:25:4b:91:4f:69:9b:23:32:40:fb:d7:32: b3:97:11:f1:ac:5d:62:53:b3:12:b4:2b:75:f8:8d:60:17:25: 5c:db:84:c5:90:73:06:e8:c7:81:38:82:bb:69:a6:4d:1e:9f: f2:92:8d:22:28:25:68:da:71:15:09:d0:2c:ba:9a:0a:e3:f6: 7d:58:3e:8d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryrUmlK0TAqI44NX+dqOZbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIwNzhiYWVlNmI2ZWM1NDI1YTE2YjFmYzAwYzUyYzMwZWQ5 NWEzZjAwHhcNMjUxMjA2MDgwMDM0WhcNMjUxMjA3MDgwMDM0WjAzMTEwLwYDVQQD EyhjNzkyODNhNTllOGI1YmM3ZWI1NDM0ZGZhMmQzYTg5OGI2YzAzZTliMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk49aHCcFzG3mnW2DNZyoI1QihsQc pJ73b81meKsjXN18Kayv5GYeWThgY1mq5JvtI9L6gwOArOFwhv6tKllTlzjlHw8G JqiLgImaUK0UUseSa/tB2kvbssuFamP4Y52GYM9gj7NXJn0BhXqu3w5dyc3FeEov e3xsZxJsgdbphbZ5xOxVKxb3CS5wITfVCZTv1c2FxaFLejbDfLwVqlIq8nmSb7EF bodTSEH++CnMRTZxcdSuu3tz0b56KpM2eq1rLeRLC4zt1PCxg25IEp1j+O0HGYjN O1SkuyfsuEgcXET0Z/tLQ0uHZckusIKRkXJcyLdGJBNUEHb0peaJG/2T6QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMeSg6Wei1vH61Q036LTqJi2wD6bMB8GA1UdIwQY MBaAFCB4uu5rbsVCWhax/ADFLDDtlaPwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSUhpNjdtdHV4VUphRnJIOEFNVXNNTzJWb19BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZi9iMTgyYmMtYmMzMi00ZTJmLWJhZDct Y2E1MWZiNDA4OTAxLzEvSUhpNjdtdHV4VUphRnJIOEFNVXNNTzJWb19BLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZi9iMTgyYmMtYmMzMi00ZTJmLWJhZDctY2E1MWZiNDA4OTAx LzEvSUhpNjdtdHV4VUphRnJIOEFNVXNNTzJWb19BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABbALDDqM PQXINPNI6fObv7RiY15JJJbUQ9rE+AcxLD7Q4u1M1K2qYlM3ZEiRCOQPhTywL/pB Cn7yT176DRa4/wYp++njba8Novadt1HkHF1PnXUCCApSSQmLdyKt67auGLNzsomP t5YC3I/7NNP9vV104ap3p4FpilIk1spG+j4m44o5mqyHq8TRqVH7EXgtUUO4gVpb GGRqfVh8XuhlwLQHSKYJna/v0ZqcnxDvw8hHPozNzxOG3qu3JUuRT2mbIzJA+9cy s5cR8axdYlOzErQrdfiNYBclXNuExZBzBujHgTiCu2mmTR6f8pKNIiglaNpxFQnQ LLqaCuP2fVg+jQ== -----END CERTIFICATE-----Generated at Sat Dec 6 11:31:12 2025 by rpki-client