This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/24fd15-22a9-4bd6-a232-8b36e9d063a1/1/iPNC3REnxnrxEWqx-ZfifLTIhOg.mft File: iPNC3REnxnrxEWqx-ZfifLTIhOg.mft (raw, json) Hash identifier: eGXvFrR+9UmQnQxG3DKnonrSgVB4PyVLQ89lS3MoVSQ= Subject key identifier: 58:24:EE:97:68:C1:A0:DB:F7:F4:84:9F:36:ED:F8:BD:39:1F:03:14 Authority key identifier: 88:F3:42:DD:11:27:C6:7A:F1:11:6A:B1:F9:97:E2:7C:B4:C8:84:E8 Certificate issuer: /CN=88f342dd1127c67af1116ab1f997e27cb4c884e8 Certificate serial: 019B48B94AE0D6EF433CF5C30C7BADE3F638 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iPNC3REnxnrxEWqx-ZfifLTIhOg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/24fd15-22a9-4bd6-a232-8b36e9d063a1/1/iPNC3REnxnrxEWqx-ZfifLTIhOg.mft Manifest number: 178F Signing time: Tue 23 Dec 2025 01:01:01 +0000 Manifest this update: Tue 23 Dec 2025 01:01:01 +0000 Manifest next update: Wed 24 Dec 2025 01:01:01 +0000 Files and hashes: 1: 0tVPRt7zVqUIIvmXairhGKRXv0U.roa (hash: dhSo1lkIbUUIXrPA3/k2AFZiXI7dxBUbTf590V+gQts=) 2: iPNC3REnxnrxEWqx-ZfifLTIhOg.crl (hash: sccjDiWCz9e48PyhmmvhjlQTXth2Vellmpzz944CGIk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/24fd15-22a9-4bd6-a232-8b36e9d063a1/1/iPNC3REnxnrxEWqx-ZfifLTIhOg.crl rsync://rpki.ripe.net/repository/DEFAULT/2d/24fd15-22a9-4bd6-a232-8b36e9d063a1/1/iPNC3REnxnrxEWqx-ZfifLTIhOg.mft rsync://rpki.ripe.net/repository/DEFAULT/iPNC3REnxnrxEWqx-ZfifLTIhOg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 24 Dec 2025 01:01:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:48:b9:4a:e0:d6:ef:43:3c:f5:c3:0c:7b:ad:e3:f6:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=88f342dd1127c67af1116ab1f997e27cb4c884e8 Validity Not Before: Dec 23 01:01:01 2025 GMT Not After : Dec 24 01:01:01 2025 GMT Subject: CN=5824ee9768c1a0dbf7f4849f36edf8bd391f0314 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:62:03:c8:c7:f2:ba:3b:7d:5c:ef:16:f8:d4: 7b:ba:b7:e6:fa:bb:c3:94:ab:56:1b:3b:73:eb:83: 1a:b1:57:7f:65:bf:0a:ab:19:79:71:7c:3d:fd:4a: 39:0a:e4:bf:52:59:49:40:82:5c:86:45:14:79:38: 15:b5:3f:db:d2:b6:4a:ac:6e:fa:a2:9c:d5:7d:7d: c7:a9:5b:fb:1e:1a:4f:e8:62:d9:b3:51:89:bf:25: cf:71:74:af:84:aa:3e:ef:fc:be:ee:bb:b2:7e:18: 8a:80:47:a4:40:6f:60:bb:bb:2b:76:20:0a:ae:24: da:e4:10:b2:8f:be:ed:b2:58:bd:53:ee:b6:e2:0e: 68:58:3c:77:6e:41:8a:c7:e9:92:c2:d7:35:b7:a2: d9:d0:a7:3f:6b:a6:30:cf:65:88:d2:7f:20:5f:eb: 44:1f:82:f1:0c:4f:1a:0e:6c:2d:d7:06:66:48:0d: 08:07:c3:79:e5:85:6e:2b:d2:1a:03:43:47:31:15: ee:c9:ef:43:d6:84:61:f1:f4:f8:43:b0:bd:88:e8: f6:d2:e4:46:62:10:f5:3b:be:11:b7:88:9d:72:8e: 2b:6e:4e:fb:29:a1:26:82:c4:8a:92:33:cc:88:73: c7:35:e2:a5:25:d9:93:38:e9:75:bc:83:b3:8f:56: 20:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:24:EE:97:68:C1:A0:DB:F7:F4:84:9F:36:ED:F8:BD:39:1F:03:14 X509v3 Authority Key Identifier: keyid:88:F3:42:DD:11:27:C6:7A:F1:11:6A:B1:F9:97:E2:7C:B4:C8:84:E8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iPNC3REnxnrxEWqx-ZfifLTIhOg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/24fd15-22a9-4bd6-a232-8b36e9d063a1/1/iPNC3REnxnrxEWqx-ZfifLTIhOg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/24fd15-22a9-4bd6-a232-8b36e9d063a1/1/iPNC3REnxnrxEWqx-ZfifLTIhOg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1a:5d:4d:0d:c6:8d:84:af:2a:bf:ba:f1:6f:57:dc:eb:26:be: 74:fb:86:0b:72:b2:78:52:91:bf:60:47:2d:ad:f6:c8:68:24: 57:c9:fe:4c:3f:2f:39:fe:41:dc:ff:4b:5f:f6:cd:5d:70:af: 94:70:59:7d:18:97:5d:ab:27:d9:e1:28:ab:a8:95:6f:74:e8: 20:15:1a:35:4a:49:4b:c1:de:50:15:34:76:c8:ab:1d:b2:32: c9:51:b5:6a:b1:53:66:40:49:c4:59:f2:8e:06:5d:e4:dc:10: 0a:9b:db:da:29:35:41:07:4a:32:a3:ea:4a:3f:78:9f:56:3f: 21:10:fd:99:45:83:ec:b8:d6:bf:ac:79:83:40:02:f7:3b:38: 7c:4c:46:b2:fc:4f:1e:69:2b:a7:7c:3a:df:45:ce:70:23:b6: 55:91:22:a4:9e:b5:ec:38:d7:c9:06:e9:3f:a3:57:d5:40:6c: d5:36:6c:3e:8f:76:c7:22:3e:05:95:38:db:95:34:4c:2f:f6: e7:a7:b2:36:fe:01:d2:e1:1f:9b:6d:a0:e3:4b:84:48:4e:57: aa:8e:c7:b3:89:66:9c:76:a5:8b:d4:e4:95:21:92:ff:dd:fd: f9:a4:9a:f9:13:47:72:c4:d2:3e:48:d7:cb:c7:43:08:a6:32: 21:be:04:67 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtIuUrg1u9DPPXDDHut4/Y4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg4ZjM0MmRkMTEyN2M2N2FmMTExNmFiMWY5OTdlMjdjYjRj ODg0ZTgwHhcNMjUxMjIzMDEwMTAxWhcNMjUxMjI0MDEwMTAxWjAzMTEwLwYDVQQD Eyg1ODI0ZWU5NzY4YzFhMGRiZjdmNDg0OWYzNmVkZjhiZDM5MWYwMzE0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArmIDyMfyujt9XO8W+NR7urfm+rvD lKtWGztz64MasVd/Zb8Kqxl5cXw9/Uo5CuS/UllJQIJchkUUeTgVtT/b0rZKrG76 opzVfX3HqVv7HhpP6GLZs1GJvyXPcXSvhKo+7/y+7ruyfhiKgEekQG9gu7srdiAK riTa5BCyj77tsli9U+624g5oWDx3bkGKx+mSwtc1t6LZ0Kc/a6Ywz2WI0n8gX+tE H4LxDE8aDmwt1wZmSA0IB8N55YVuK9IaA0NHMRXuye9D1oRh8fT4Q7C9iOj20uRG YhD1O74Rt4idco4rbk77KaEmgsSKkjPMiHPHNeKlJdmTOOl1vIOzj1YgdwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFgk7pdowaDb9/SEnzbt+L05HwMUMB8GA1UdIwQY MBaAFIjzQt0RJ8Z68RFqsfmX4ny0yIToMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaVBOQzNSRW54bnJ4RVdxeC1aZmlmTFRJaE9nLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZC8yNGZkMTUtMjJhOS00YmQ2LWEyMzIt OGIzNmU5ZDA2M2ExLzEvaVBOQzNSRW54bnJ4RVdxeC1aZmlmTFRJaE9nLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZC8yNGZkMTUtMjJhOS00YmQ2LWEyMzItOGIzNmU5ZDA2M2Ex LzEvaVBOQzNSRW54bnJ4RVdxeC1aZmlmTFRJaE9nLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGl1NDcaN hK8qv7rxb1fc6ya+dPuGC3KyeFKRv2BHLa32yGgkV8n+TD8vOf5B3P9LX/bNXXCv lHBZfRiXXasn2eEoq6iVb3ToIBUaNUpJS8HeUBU0dsirHbIyyVG1arFTZkBJxFny jgZd5NwQCpvb2ik1QQdKMqPqSj94n1Y/IRD9mUWD7LjWv6x5g0AC9zs4fExGsvxP Hmkrp3w630XOcCO2VZEipJ617DjXyQbpP6NX1UBs1TZsPo92xyI+BZU425U0TC/2 56eyNv4B0uEfm22g40uESE5Xqo7Hs4lmnHali9TklSGS/939+aSa+RNHcsTSPkjX y8dDCKYyIb4EZw== -----END CERTIFICATE-----Generated at Tue Dec 23 10:46:52 2025 by rpki-client