This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/daf960-d060-49fc-af42-dee292ea87a3/1/ihzh0TW_LPjowT8z7BHIUjcD3HU.mft File: ihzh0TW_LPjowT8z7BHIUjcD3HU.mft (raw, json) Hash identifier: D08Mhgx5YMc3NbUMc6WHLz4lSKVObOsJkdiCMH8d94o= Subject key identifier: B1:D7:AF:8F:43:52:87:02:D2:B9:48:37:7F:DE:5A:CE:AD:3F:D3:FC Authority key identifier: 8A:1C:E1:D1:35:BF:2C:F8:E8:C1:3F:33:EC:11:C8:52:37:03:DC:75 Certificate issuer: /CN=8a1ce1d135bf2cf8e8c13f33ec11c8523703dc75 Certificate serial: 019B3F7ED855479270CDD49D7CD7AA15C54A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ihzh0TW_LPjowT8z7BHIUjcD3HU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/daf960-d060-49fc-af42-dee292ea87a3/1/ihzh0TW_LPjowT8z7BHIUjcD3HU.mft Manifest number: 1682 Signing time: Sun 21 Dec 2025 06:00:36 +0000 Manifest this update: Sun 21 Dec 2025 06:00:36 +0000 Manifest next update: Mon 22 Dec 2025 06:00:36 +0000 Files and hashes: 1: 2L9tST2xxsB46ZV-Wm7-7d0Z8Yc.roa (hash: 2H+U81Sea1KvCbnxcSszHg71YCfhD1GEm2cdKStIW6w=) 2: AEk4t1mqQHdHzuvnZ8F04P17d44.roa (hash: 7D43zZS2UD0q0VGySwNpiUk+9PmD8nPWUlHBvAE5epk=) 3: WRWq9c3b9kg8gQPomqG34r1Y5v0.asa (hash: ZoJ/LKA1w1XuBHscB30KCICWqihW2yVYKCpjACmrLmk=) 4: ihzh0TW_LPjowT8z7BHIUjcD3HU.crl (hash: rAqQqbuQQh696FCcpsc8JwwDmkW60Ju2BNW3H8TcaFA=) 5: o5m1uFw5rs_EeSEFk1hux3YAIU4.roa (hash: wTW4ivT11e40D7I5riMLJL+NO9rFHoJd/dKX+ZIDA6g=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/daf960-d060-49fc-af42-dee292ea87a3/1/ihzh0TW_LPjowT8z7BHIUjcD3HU.crl rsync://rpki.ripe.net/repository/DEFAULT/0c/daf960-d060-49fc-af42-dee292ea87a3/1/ihzh0TW_LPjowT8z7BHIUjcD3HU.mft rsync://rpki.ripe.net/repository/DEFAULT/ihzh0TW_LPjowT8z7BHIUjcD3HU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 04:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3f:7e:d8:55:47:92:70:cd:d4:9d:7c:d7:aa:15:c5:4a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8a1ce1d135bf2cf8e8c13f33ec11c8523703dc75 Validity Not Before: Dec 21 06:00:36 2025 GMT Not After : Dec 22 06:00:36 2025 GMT Subject: CN=b1d7af8f43528702d2b948377fde5acead3fd3fc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:d4:e1:f3:91:2a:2f:58:8d:1b:23:b2:f3:dc: db:9b:35:4b:5e:58:c0:cc:ee:60:68:bd:68:a5:5f: cd:1e:79:81:21:88:44:92:9c:0f:32:e2:a2:36:42: 56:4e:e1:8a:c3:8b:fa:83:59:00:b6:9c:56:63:65: 47:b7:f5:d6:11:76:1c:9f:c1:31:98:98:69:18:21: 2b:17:a3:e5:66:54:3f:6a:75:12:ee:3a:8f:c3:a0: d6:df:67:41:10:04:a7:ce:d4:be:7b:54:60:59:2c: bc:fa:0f:a7:37:90:1d:7d:9d:69:92:a8:dc:b6:b8: ff:d7:0d:0a:49:08:56:27:c5:b3:c3:8d:23:41:99: bf:60:af:d1:3d:cd:93:ce:8d:d2:03:9b:71:9f:9e: 46:5d:bc:35:77:63:77:0d:97:a1:eb:98:79:bb:cf: 22:23:1e:11:67:f7:75:c0:ad:b2:38:32:3d:a2:15: 2d:85:45:37:bb:0b:e1:b1:be:8e:7a:a7:60:6f:66: 6a:0e:05:fc:3d:13:c4:cc:ab:f2:c2:cd:45:2a:03: c2:9e:c5:10:9c:61:e8:17:2a:15:73:77:7b:57:55: d7:d7:6b:24:25:00:ca:b3:2d:27:a2:b8:7d:da:73: dc:03:42:07:d8:93:f9:c6:b6:21:65:ef:27:60:f4: 82:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:D7:AF:8F:43:52:87:02:D2:B9:48:37:7F:DE:5A:CE:AD:3F:D3:FC X509v3 Authority Key Identifier: keyid:8A:1C:E1:D1:35:BF:2C:F8:E8:C1:3F:33:EC:11:C8:52:37:03:DC:75 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ihzh0TW_LPjowT8z7BHIUjcD3HU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/daf960-d060-49fc-af42-dee292ea87a3/1/ihzh0TW_LPjowT8z7BHIUjcD3HU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/daf960-d060-49fc-af42-dee292ea87a3/1/ihzh0TW_LPjowT8z7BHIUjcD3HU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1d:21:1e:5a:5a:4b:44:e3:28:f0:93:5f:7f:c3:65:62:20:cd: ae:66:4b:fa:20:dc:17:b8:0f:85:8d:09:35:ee:ee:a6:b8:ed: 55:8d:9f:1e:c2:65:56:b0:cc:66:4c:fb:1c:9f:ce:ab:55:37: 51:7e:97:ed:26:50:01:d1:fa:2f:40:83:28:6b:b3:83:62:e9: 55:bc:02:b2:44:f5:ce:df:03:ff:e8:4b:bc:80:3f:1d:d8:51: 93:8f:d5:87:7a:af:5d:2c:a5:2c:8a:ab:98:6f:d8:c1:8f:55: 28:35:0f:74:de:90:2c:6b:64:0e:57:6a:c0:0a:8a:af:ac:1a: 01:cc:54:69:da:cc:8c:97:64:ad:d7:85:3d:36:c7:9d:93:9c: 50:44:61:84:d7:81:9b:b5:30:77:1b:5c:59:68:00:c1:a3:f8: 1f:80:aa:d9:0a:3f:88:b2:42:2d:24:33:c9:83:ee:56:1b:a5: 19:a7:ea:2e:c8:28:db:f5:41:2d:2b:54:bd:6c:c1:98:2b:31: d7:1a:4c:3b:fa:b1:48:b7:5e:0c:a5:ea:d6:81:f9:9c:65:e9: 24:77:69:ba:8a:15:1c:87:d8:c3:d8:f1:5e:9f:a7:88:67:32: 4b:bf:a6:9a:ee:78:08:8d:3b:d6:2d:eb:0c:96:ce:aa:8a:cf: 3b:b7:f5:85 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs/fthVR5JwzdSdfNeqFcVKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhhMWNlMWQxMzViZjJjZjhlOGMxM2YzM2VjMTFjODUyMzcw M2RjNzUwHhcNMjUxMjIxMDYwMDM2WhcNMjUxMjIyMDYwMDM2WjAzMTEwLwYDVQQD EyhiMWQ3YWY4ZjQzNTI4NzAyZDJiOTQ4Mzc3ZmRlNWFjZWFkM2ZkM2ZjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsdTh85EqL1iNGyOy89zbmzVLXljA zO5gaL1opV/NHnmBIYhEkpwPMuKiNkJWTuGKw4v6g1kAtpxWY2VHt/XWEXYcn8Ex mJhpGCErF6PlZlQ/anUS7jqPw6DW32dBEASnztS+e1RgWSy8+g+nN5AdfZ1pkqjc trj/1w0KSQhWJ8Wzw40jQZm/YK/RPc2Tzo3SA5txn55GXbw1d2N3DZeh65h5u88i Ix4RZ/d1wK2yODI9ohUthUU3uwvhsb6Oeqdgb2ZqDgX8PRPEzKvyws1FKgPCnsUQ nGHoFyoVc3d7V1XX12skJQDKsy0norh92nPcA0IH2JP5xrYhZe8nYPSCVQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLHXr49DUocC0rlIN3/eWs6tP9P8MB8GA1UdIwQY MBaAFIoc4dE1vyz46ME/M+wRyFI3A9x1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaWh6aDBUV19MUGpvd1Q4ejdCSElVamNEM0hVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy9kYWY5NjAtZDA2MC00OWZjLWFmNDIt ZGVlMjkyZWE4N2EzLzEvaWh6aDBUV19MUGpvd1Q4ejdCSElVamNEM0hVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYy9kYWY5NjAtZDA2MC00OWZjLWFmNDItZGVlMjkyZWE4N2Ez LzEvaWh6aDBUV19MUGpvd1Q4ejdCSElVamNEM0hVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHSEeWlpL ROMo8JNff8NlYiDNrmZL+iDcF7gPhY0JNe7uprjtVY2fHsJlVrDMZkz7HJ/Oq1U3 UX6X7SZQAdH6L0CDKGuzg2LpVbwCskT1zt8D/+hLvIA/HdhRk4/Vh3qvXSylLIqr mG/YwY9VKDUPdN6QLGtkDldqwAqKr6waAcxUadrMjJdkrdeFPTbHnZOcUERhhNeB m7UwdxtcWWgAwaP4H4Cq2Qo/iLJCLSQzyYPuVhulGafqLsgo2/VBLStUvWzBmCsx 1xpMO/qxSLdeDKXq1oH5nGXpJHdpuooVHIfYw9jxXp+niGcyS7+mmu54CI071i3r DJbOqorPO7f1hQ== -----END CERTIFICATE-----Generated at Sun Dec 21 11:05:29 2025 by rpki-client