This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/7da3a9-34df-48f8-8a1b-079e111edbf9/1/iDjoVrInLfF0ulpAqPx9XTAxyso.mft File: iDjoVrInLfF0ulpAqPx9XTAxyso.mft (raw, json) Hash identifier: mhiHqWB2Q+/eeYmpx8cO9lTuaCk77tE2yc35+f4CsZI= Subject key identifier: BC:86:62:F4:FC:8E:2F:76:26:95:A7:08:3D:BD:17:54:AE:06:E8:D5 Authority key identifier: 88:38:E8:56:B2:27:2D:F1:74:BA:5A:40:A8:FC:7D:5D:30:31:CA:CA Certificate issuer: /CN=8838e856b2272df174ba5a40a8fc7d5d3031caca Certificate serial: 019B484B6ABE0C45B0292F7029FE3D82A355 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iDjoVrInLfF0ulpAqPx9XTAxyso.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/7da3a9-34df-48f8-8a1b-079e111edbf9/1/iDjoVrInLfF0ulpAqPx9XTAxyso.mft Manifest number: 10F7 Signing time: Mon 22 Dec 2025 23:01:00 +0000 Manifest this update: Mon 22 Dec 2025 23:01:00 +0000 Manifest next update: Tue 23 Dec 2025 23:01:00 +0000 Files and hashes: 1: OZKug-HD4Xa2ZWdFBgCPcOgskwk.roa (hash: 3+egBPFrVIi/azwFyFARnF9adwzzIgSQuiDCKqIhA8c=) 2: iDjoVrInLfF0ulpAqPx9XTAxyso.crl (hash: TzVDng43PzlmqT/9T0iOYKDHXN4N36YQLASNat50hkU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/7da3a9-34df-48f8-8a1b-079e111edbf9/1/iDjoVrInLfF0ulpAqPx9XTAxyso.crl rsync://rpki.ripe.net/repository/DEFAULT/08/7da3a9-34df-48f8-8a1b-079e111edbf9/1/iDjoVrInLfF0ulpAqPx9XTAxyso.mft rsync://rpki.ripe.net/repository/DEFAULT/iDjoVrInLfF0ulpAqPx9XTAxyso.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 15:30:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:48:4b:6a:be:0c:45:b0:29:2f:70:29:fe:3d:82:a3:55 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8838e856b2272df174ba5a40a8fc7d5d3031caca Validity Not Before: Dec 22 23:01:00 2025 GMT Not After : Dec 23 23:01:00 2025 GMT Subject: CN=bc8662f4fc8e2f762695a7083dbd1754ae06e8d5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:cf:08:07:32:ab:ef:96:06:16:64:ad:7d:de: 78:ba:85:6f:8b:2e:62:c5:bf:51:40:02:38:60:b3: 06:03:de:c4:6f:81:ec:a1:72:9d:ae:06:c0:2e:2f: 89:70:c7:bb:fc:cd:21:b7:60:bd:d5:fd:10:09:18: 86:5e:d1:d4:80:08:2c:fb:a4:f1:13:90:f7:2f:c8: b7:b3:0e:12:cd:6c:d2:b7:b2:00:44:a3:59:84:37: 0b:ef:95:3d:ee:3b:e8:f6:42:a2:9c:b2:2b:3f:12: 68:d4:1b:b5:0c:c2:24:81:d7:2f:87:dd:bd:5e:8d: 49:b1:86:c6:a8:1e:eb:bb:b9:3c:41:32:29:ed:f7: c8:0d:b2:e8:87:ee:b2:5f:a8:4e:fe:65:04:2c:02: 09:7d:a3:5d:ec:0b:fc:73:c8:fb:ea:c7:d4:21:7c: d9:18:06:ac:fc:fe:df:0c:71:7c:42:e9:00:18:dc: 1c:bc:d1:0a:5b:ef:cd:b8:a3:9f:b0:38:6e:97:a5: d4:32:77:d1:be:37:22:80:21:50:54:09:41:f3:48: 1a:df:d8:d8:e4:47:6c:83:dd:8b:a0:16:eb:3a:5c: c8:02:6b:d9:3f:61:76:18:35:dd:a0:e9:cf:fb:df: ab:f7:0f:da:57:42:cc:c7:e3:1b:11:83:ad:6d:74: 0e:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:86:62:F4:FC:8E:2F:76:26:95:A7:08:3D:BD:17:54:AE:06:E8:D5 X509v3 Authority Key Identifier: keyid:88:38:E8:56:B2:27:2D:F1:74:BA:5A:40:A8:FC:7D:5D:30:31:CA:CA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iDjoVrInLfF0ulpAqPx9XTAxyso.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/7da3a9-34df-48f8-8a1b-079e111edbf9/1/iDjoVrInLfF0ulpAqPx9XTAxyso.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/08/7da3a9-34df-48f8-8a1b-079e111edbf9/1/iDjoVrInLfF0ulpAqPx9XTAxyso.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c8:61:83:8c:50:ac:13:1c:fe:69:4f:4b:1c:a4:94:74:2f:90: 42:7e:fc:5a:24:bf:9f:36:50:6f:40:c6:19:ec:06:34:9c:eb: 04:25:24:bd:28:8d:60:a6:72:00:25:1d:1a:21:4f:6b:82:11: a8:8b:72:76:d9:8f:32:d8:69:66:2c:23:ca:c0:a5:b5:ce:b9: 6a:78:dc:84:6b:a9:61:04:3e:38:02:a1:3d:5e:6b:94:2d:fd: 57:58:d3:83:50:84:4a:eb:23:4e:64:91:7b:cc:0c:92:1a:ad: 0c:e3:7e:05:49:29:78:05:b3:11:34:da:5c:f7:33:f4:c4:f6: 9c:57:e7:61:7a:ca:84:e2:a4:40:d0:2d:25:fd:6f:d5:fb:b9: 2e:21:ed:d1:ed:13:2c:18:9a:78:ec:d7:f4:0a:8a:4e:e8:b6: c3:b4:70:0d:b3:c4:ad:e0:b8:22:b8:58:c5:78:e6:1a:a1:16: 4e:e0:0e:8c:2d:fe:0d:08:04:da:78:00:d8:e7:00:64:a5:7c: 06:c2:95:df:77:f0:5b:ea:b5:f2:ce:ea:9e:46:38:ad:95:19: 94:c0:08:d1:b5:e0:5f:9f:fc:13:79:4f:7d:1d:e4:07:ea:af: c9:92:24:f7:1e:2d:10:7b:83:bc:a7:c1:97:d1:0e:ef:dd:75: 61:79:37:f4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtIS2q+DEWwKS9wKf49gqNVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg4MzhlODU2YjIyNzJkZjE3NGJhNWE0MGE4ZmM3ZDVkMzAz MWNhY2EwHhcNMjUxMjIyMjMwMTAwWhcNMjUxMjIzMjMwMTAwWjAzMTEwLwYDVQQD EyhiYzg2NjJmNGZjOGUyZjc2MjY5NWE3MDgzZGJkMTc1NGFlMDZlOGQ1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAus8IBzKr75YGFmStfd54uoVviy5i xb9RQAI4YLMGA97Eb4HsoXKdrgbALi+JcMe7/M0ht2C91f0QCRiGXtHUgAgs+6Tx E5D3L8i3sw4SzWzSt7IARKNZhDcL75U97jvo9kKinLIrPxJo1Bu1DMIkgdcvh929 Xo1JsYbGqB7ru7k8QTIp7ffIDbLoh+6yX6hO/mUELAIJfaNd7Av8c8j76sfUIXzZ GAas/P7fDHF8QukAGNwcvNEKW+/NuKOfsDhul6XUMnfRvjcigCFQVAlB80ga39jY 5Edsg92LoBbrOlzIAmvZP2F2GDXdoOnP+9+r9w/aV0LMx+MbEYOtbXQOHwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLyGYvT8ji92JpWnCD29F1SuBujVMB8GA1UdIwQY MBaAFIg46FayJy3xdLpaQKj8fV0wMcrKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaURqb1ZySW5MZkYwdWxwQXFQeDlYVEF4eXNvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOC83ZGEzYTktMzRkZi00OGY4LThhMWIt MDc5ZTExMWVkYmY5LzEvaURqb1ZySW5MZkYwdWxwQXFQeDlYVEF4eXNvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wOC83ZGEzYTktMzRkZi00OGY4LThhMWItMDc5ZTExMWVkYmY5 LzEvaURqb1ZySW5MZkYwdWxwQXFQeDlYVEF4eXNvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAyGGDjFCs Exz+aU9LHKSUdC+QQn78WiS/nzZQb0DGGewGNJzrBCUkvSiNYKZyACUdGiFPa4IR qItydtmPMthpZiwjysCltc65anjchGupYQQ+OAKhPV5rlC39V1jTg1CESusjTmSR e8wMkhqtDON+BUkpeAWzETTaXPcz9MT2nFfnYXrKhOKkQNAtJf1v1fu5LiHt0e0T LBiaeOzX9AqKTui2w7RwDbPEreC4IrhYxXjmGqEWTuAOjC3+DQgE2ngA2OcAZKV8 BsKV33fwW+q18s7qnkY4rZUZlMAI0bXgX5/8E3lPfR3kB+qvyZIk9x4tEHuDvKfB l9EO7911YXk39A== -----END CERTIFICATE-----Generated at Tue Dec 23 00:49:29 2025 by rpki-client