This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/9af78b-41c4-47b7-af95-37b0a2ab3cd6/1/iiJ8Nfko2ci4_3wlch79R6kNy2c.mft File: iiJ8Nfko2ci4_3wlch79R6kNy2c.mft (raw, json) Hash identifier: 9dzDv0LY1b40kB30k6cCEFCSE8pUfb0taxKxe1MdjFI= Subject key identifier: 28:D3:5C:8F:38:3B:92:12:F3:03:DC:FF:91:EC:92:68:F0:D6:70:86 Authority key identifier: 8A:22:7C:35:F9:28:D9:C8:B8:FF:7C:25:72:1E:FD:47:A9:0D:CB:67 Certificate issuer: /CN=8a227c35f928d9c8b8ff7c25721efd47a90dcb67 Certificate serial: 019B3231701513C7A95D71206EC021CA7CE0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iiJ8Nfko2ci4_3wlch79R6kNy2c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/9af78b-41c4-47b7-af95-37b0a2ab3cd6/1/iiJ8Nfko2ci4_3wlch79R6kNy2c.mft Manifest number: 148A Signing time: Thu 18 Dec 2025 16:00:59 +0000 Manifest this update: Thu 18 Dec 2025 16:00:59 +0000 Manifest next update: Fri 19 Dec 2025 16:00:59 +0000 Files and hashes: 1: K7N-hRXidANMpYlZJ_rYSwLoLCk.roa (hash: tqDwe1a97FYihn4sdeIxy/I7wKkMHB8gK4badlQZXTs=) 2: iiJ8Nfko2ci4_3wlch79R6kNy2c.crl (hash: bw+mGhX6Ie1cdmoxPKcKlZvy6qAeXfpJVyiKmJgcmwQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/9af78b-41c4-47b7-af95-37b0a2ab3cd6/1/iiJ8Nfko2ci4_3wlch79R6kNy2c.crl rsync://rpki.ripe.net/repository/DEFAULT/1b/9af78b-41c4-47b7-af95-37b0a2ab3cd6/1/iiJ8Nfko2ci4_3wlch79R6kNy2c.mft rsync://rpki.ripe.net/repository/DEFAULT/iiJ8Nfko2ci4_3wlch79R6kNy2c.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 16:00:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:32:31:70:15:13:c7:a9:5d:71:20:6e:c0:21:ca:7c:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8a227c35f928d9c8b8ff7c25721efd47a90dcb67 Validity Not Before: Dec 18 16:00:59 2025 GMT Not After : Dec 19 16:00:59 2025 GMT Subject: CN=28d35c8f383b9212f303dcff91ec9268f0d67086 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:25:ed:8f:0c:94:79:b4:cb:f5:60:16:66:c7: ea:67:ee:cb:75:f4:5d:3f:e0:ad:24:c0:2a:ab:a6: 7b:79:5c:33:08:41:78:c1:d4:cc:74:3b:9a:bf:9d: ee:f1:7d:2b:8e:07:9f:22:e8:2d:51:8b:b6:f0:d4: a4:40:76:0f:79:9c:91:bf:6d:39:26:c8:39:b3:6d: ab:4b:66:6f:b5:3b:ea:70:08:68:6b:a9:18:da:d6: f2:12:85:94:01:7f:b3:4b:c7:70:19:75:1c:e9:26: 31:9a:e0:2b:18:ed:1d:95:cd:36:0c:c9:87:0a:5c: 4c:30:78:58:4d:04:12:aa:0d:c5:da:79:e1:3b:1b: 7c:32:f4:5d:6d:6d:06:8f:07:11:da:06:ea:26:f6: 09:e3:4a:da:12:24:d2:20:66:1c:87:0e:78:a9:1b: 8d:55:86:67:65:5e:35:f0:01:9e:5a:b0:2d:d8:81: 02:6f:29:38:0c:6c:af:03:0d:ab:96:9b:e9:8f:2c: db:c3:69:30:dd:86:01:9f:9d:b4:10:f5:0b:db:83: 3d:07:9d:fa:f9:2b:8a:c0:51:6e:28:1c:ca:6b:a1: 9a:94:dc:ee:8c:6b:dc:9d:28:53:83:e4:9f:86:ab: 89:8a:b3:fb:97:66:b5:2f:a8:3e:c7:cb:1d:6f:c7: dd:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:D3:5C:8F:38:3B:92:12:F3:03:DC:FF:91:EC:92:68:F0:D6:70:86 X509v3 Authority Key Identifier: keyid:8A:22:7C:35:F9:28:D9:C8:B8:FF:7C:25:72:1E:FD:47:A9:0D:CB:67 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iiJ8Nfko2ci4_3wlch79R6kNy2c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/9af78b-41c4-47b7-af95-37b0a2ab3cd6/1/iiJ8Nfko2ci4_3wlch79R6kNy2c.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/9af78b-41c4-47b7-af95-37b0a2ab3cd6/1/iiJ8Nfko2ci4_3wlch79R6kNy2c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 78:f8:96:0c:14:7f:25:9a:c4:9e:95:e4:55:51:6f:e7:c7:dc: cc:f7:93:59:1a:5c:d2:7f:f7:59:1a:8c:5e:58:62:ef:2d:e9: 8e:70:31:f2:58:08:d7:a8:42:0e:a2:4d:c2:7a:5a:e3:20:20: ab:0d:87:77:77:d6:4b:e7:29:a8:82:c1:8c:1d:0a:f3:30:89: 98:a9:fc:0a:12:aa:28:15:bf:4d:71:f3:e8:90:6d:1a:2d:d3: 3b:13:62:b1:33:5f:ba:fd:40:de:1b:f6:b9:0f:41:20:97:bb: 6f:b9:b2:bc:d4:13:d3:7a:0d:fe:8e:30:88:7d:9f:32:62:e6: f5:81:06:a4:57:6f:2e:c9:bb:8e:89:28:42:89:0b:5f:8f:b2: f5:5e:8d:a7:3d:59:23:86:6c:29:b7:9c:7d:b7:47:6d:ca:84: 55:54:bd:1f:f4:03:bd:c1:e4:4a:e9:41:f2:9a:20:b2:17:3d: d2:28:3f:ab:40:ee:8a:56:c9:b7:fa:a7:40:1f:29:88:e1:d8: 8e:77:88:f2:aa:33:ae:6a:31:5e:52:69:52:56:b9:b8:e1:d3: 45:b2:35:22:ce:c3:34:e0:2f:3d:c0:8d:1b:54:75:fd:32:8a: ec:cd:35:95:e5:16:32:0e:2b:db:6f:ea:2d:7b:9e:cd:3b:ed: ec:ee:b0:b8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsyMXAVE8epXXEgbsAhynzgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhhMjI3YzM1ZjkyOGQ5YzhiOGZmN2MyNTcyMWVmZDQ3YTkw ZGNiNjcwHhcNMjUxMjE4MTYwMDU5WhcNMjUxMjE5MTYwMDU5WjAzMTEwLwYDVQQD EygyOGQzNWM4ZjM4M2I5MjEyZjMwM2RjZmY5MWVjOTI2OGYwZDY3MDg2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtiXtjwyUebTL9WAWZsfqZ+7LdfRd P+CtJMAqq6Z7eVwzCEF4wdTMdDuav53u8X0rjgefIugtUYu28NSkQHYPeZyRv205 Jsg5s22rS2ZvtTvqcAhoa6kY2tbyEoWUAX+zS8dwGXUc6SYxmuArGO0dlc02DMmH ClxMMHhYTQQSqg3F2nnhOxt8MvRdbW0GjwcR2gbqJvYJ40raEiTSIGYchw54qRuN VYZnZV418AGeWrAt2IECbyk4DGyvAw2rlpvpjyzbw2kw3YYBn520EPUL24M9B536 +SuKwFFuKBzKa6GalNzujGvcnShTg+SfhquJirP7l2a1L6g+x8sdb8fdtwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCjTXI84O5IS8wPc/5Hskmjw1nCGMB8GA1UdIwQY MBaAFIoifDX5KNnIuP98JXIe/UepDctnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaWlKOE5ma28yY2k0XzN3bGNoNzlSNmtOeTJjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYi85YWY3OGItNDFjNC00N2I3LWFmOTUt MzdiMGEyYWIzY2Q2LzEvaWlKOE5ma28yY2k0XzN3bGNoNzlSNmtOeTJjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYi85YWY3OGItNDFjNC00N2I3LWFmOTUtMzdiMGEyYWIzY2Q2 LzEvaWlKOE5ma28yY2k0XzN3bGNoNzlSNmtOeTJjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAePiWDBR/ JZrEnpXkVVFv58fczPeTWRpc0n/3WRqMXlhi7y3pjnAx8lgI16hCDqJNwnpa4yAg qw2Hd3fWS+cpqILBjB0K8zCJmKn8ChKqKBW/TXHz6JBtGi3TOxNisTNfuv1A3hv2 uQ9BIJe7b7myvNQT03oN/o4wiH2fMmLm9YEGpFdvLsm7jokoQokLX4+y9V6Npz1Z I4ZsKbecfbdHbcqEVVS9H/QDvcHkSulB8pogshc90ig/q0DuilbJt/qnQB8piOHY jneI8qozrmoxXlJpUla5uOHTRbI1Is7DNOAvPcCNG1R1/TKK7M01leUWMg4r22/q LXuezTvt7O6wuA== -----END CERTIFICATE-----Generated at Fri Dec 19 00:08:55 2025 by rpki-client