This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/28c3d1-8a90-4068-bb27-33abc53c0e79/1/iHpfBIaxiiRI8jWKJ0bBq9n7Ll4.mft File: iHpfBIaxiiRI8jWKJ0bBq9n7Ll4.mft (raw, json) Hash identifier: //ZV+REeWo06dhB7IMqeGi71/sXFr7xUcX09gPhQEYI= Subject key identifier: 64:3F:C6:09:98:47:88:38:A4:AF:0D:39:26:C0:EA:68:CF:D2:94:A5 Authority key identifier: 88:7A:5F:04:86:B1:8A:24:48:F2:35:8A:27:46:C1:AB:D9:FB:2E:5E Certificate issuer: /CN=887a5f0486b18a2448f2358a2746c1abd9fb2e5e Certificate serial: 019B3DFEE0F3671CCF7322B44936E0974379 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iHpfBIaxiiRI8jWKJ0bBq9n7Ll4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/28c3d1-8a90-4068-bb27-33abc53c0e79/1/iHpfBIaxiiRI8jWKJ0bBq9n7Ll4.mft Manifest number: 0F38 Signing time: Sat 20 Dec 2025 23:01:12 +0000 Manifest this update: Sat 20 Dec 2025 23:01:12 +0000 Manifest next update: Sun 21 Dec 2025 23:01:12 +0000 Files and hashes: 1: RZ_4-lCargPhDnsOSk7--hEov_g.roa (hash: gD59YlfjEOMaA7jKCDG57LDieQBZUtUGKFnW719fGG8=) 2: abKcOp3qmm4ybUnw1tBA-G8yOrc.roa (hash: /klckxmc/giyHaniwWbEf+LlQIwRtUPvFDW14KDXips=) 3: iHpfBIaxiiRI8jWKJ0bBq9n7Ll4.crl (hash: rvaXeFNHfBE7I53h9nG/2tW2qciQmSJVZWtHZf4hbN4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/28c3d1-8a90-4068-bb27-33abc53c0e79/1/iHpfBIaxiiRI8jWKJ0bBq9n7Ll4.crl rsync://rpki.ripe.net/repository/DEFAULT/2d/28c3d1-8a90-4068-bb27-33abc53c0e79/1/iHpfBIaxiiRI8jWKJ0bBq9n7Ll4.mft rsync://rpki.ripe.net/repository/DEFAULT/iHpfBIaxiiRI8jWKJ0bBq9n7Ll4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 19:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:fe:e0:f3:67:1c:cf:73:22:b4:49:36:e0:97:43:79 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=887a5f0486b18a2448f2358a2746c1abd9fb2e5e Validity Not Before: Dec 20 23:01:12 2025 GMT Not After : Dec 21 23:01:12 2025 GMT Subject: CN=643fc60998478838a4af0d3926c0ea68cfd294a5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:88:47:10:57:3c:97:74:4a:64:cd:f1:10:c4: 1a:80:3a:e6:dc:ce:c2:4d:87:d6:55:88:98:19:a0: c2:0d:3f:83:8f:43:f6:84:52:d8:f6:a2:8e:33:b4: e4:ec:f9:53:2e:af:8a:dc:bd:d2:47:3a:22:5f:e8: 52:05:0d:8e:6a:62:52:d2:d1:c4:7b:d9:17:eb:9a: 2a:9f:91:3c:e2:0a:d9:a7:9b:2b:c8:18:b7:e3:86: 82:08:7a:c1:ea:a9:47:31:d9:b4:d2:25:73:f2:24: 2d:13:9f:d5:f2:10:18:c4:d3:0d:54:66:3d:7d:a9: 65:cb:c7:3c:d6:07:f7:80:71:32:cd:33:2c:6b:f0: 07:c5:af:2c:68:6f:93:3c:34:19:fc:d4:d8:f0:09: 3f:4f:a3:a6:64:3a:b6:af:f6:d4:c0:92:08:6d:10: 2a:3c:04:79:46:9c:5e:52:ad:75:35:df:eb:b6:74: 1a:30:ff:37:b7:9f:6f:76:ba:c1:00:c1:40:35:51: ea:e9:17:0c:03:cd:18:00:15:e1:d4:c5:5b:d3:bd: 37:34:8f:c4:9c:13:6c:24:d3:88:36:c8:d4:fa:f8: 8d:ee:54:ed:ba:ff:92:5e:ae:60:c1:5a:41:67:3c: 09:69:33:39:eb:0c:06:c3:12:4c:7d:56:e8:ef:ff: 7c:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:3F:C6:09:98:47:88:38:A4:AF:0D:39:26:C0:EA:68:CF:D2:94:A5 X509v3 Authority Key Identifier: keyid:88:7A:5F:04:86:B1:8A:24:48:F2:35:8A:27:46:C1:AB:D9:FB:2E:5E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iHpfBIaxiiRI8jWKJ0bBq9n7Ll4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/28c3d1-8a90-4068-bb27-33abc53c0e79/1/iHpfBIaxiiRI8jWKJ0bBq9n7Ll4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/28c3d1-8a90-4068-bb27-33abc53c0e79/1/iHpfBIaxiiRI8jWKJ0bBq9n7Ll4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6e:2d:af:08:53:02:7e:fc:f7:5d:ff:af:e0:33:64:47:6a:99: dd:a2:2c:a3:88:59:8c:de:81:cc:f0:62:8f:b5:58:b8:4f:3b: a3:9b:70:f7:ef:b3:f5:f1:1c:96:e0:48:15:fb:88:cf:5d:fa: 55:92:2d:23:f1:15:9d:24:db:ad:a4:d0:81:8f:1d:82:f0:d3: 72:16:04:8e:b8:bd:b5:a5:7a:85:42:4a:43:81:fa:6b:b0:d8: 8c:da:40:c9:8e:6c:4b:81:c6:30:16:a2:97:16:a6:55:7f:1c: d1:bd:b8:f6:4e:ad:09:db:c8:8c:5b:59:b0:f7:8a:40:14:fd: 75:86:2a:1a:d3:e3:64:b7:1b:a9:2b:09:1c:50:a0:b2:e2:44: 86:ef:c5:3d:c8:16:53:ce:14:23:f0:ed:8c:1c:32:71:00:21: 49:11:d3:e7:e9:e6:5d:dc:43:59:40:1a:ee:16:2a:46:c1:a6: 36:0b:14:12:82:50:12:1e:7b:9c:2d:20:f6:7c:98:53:3c:51: ad:da:43:6b:05:28:a9:0e:c8:89:06:18:e5:0d:6a:62:8a:c7: cd:2b:3e:8c:f8:31:0a:06:72:92:20:7a:af:00:b3:f2:75:f6: c4:79:ea:03:df:2a:34:c9:73:c5:68:af:ee:c2:90:b2:d6:06: ad:ff:c8:8d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9/uDzZxzPcyK0STbgl0N5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg4N2E1ZjA0ODZiMThhMjQ0OGYyMzU4YTI3NDZjMWFiZDlm YjJlNWUwHhcNMjUxMjIwMjMwMTEyWhcNMjUxMjIxMjMwMTEyWjAzMTEwLwYDVQQD Eyg2NDNmYzYwOTk4NDc4ODM4YTRhZjBkMzkyNmMwZWE2OGNmZDI5NGE1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0ohHEFc8l3RKZM3xEMQagDrm3M7C TYfWVYiYGaDCDT+Dj0P2hFLY9qKOM7Tk7PlTLq+K3L3SRzoiX+hSBQ2OamJS0tHE e9kX65oqn5E84grZp5sryBi344aCCHrB6qlHMdm00iVz8iQtE5/V8hAYxNMNVGY9 fally8c81gf3gHEyzTMsa/AHxa8saG+TPDQZ/NTY8Ak/T6OmZDq2r/bUwJIIbRAq PAR5RpxeUq11Nd/rtnQaMP83t59vdrrBAMFANVHq6RcMA80YABXh1MVb0703NI/E nBNsJNOINsjU+viN7lTtuv+SXq5gwVpBZzwJaTM56wwGwxJMfVbo7/98wwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGQ/xgmYR4g4pK8NOSbA6mjP0pSlMB8GA1UdIwQY MBaAFIh6XwSGsYokSPI1iidGwavZ+y5eMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaUhwZkJJYXhpaVJJOGpXS0owYkJxOW43TGw0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZC8yOGMzZDEtOGE5MC00MDY4LWJiMjct MzNhYmM1M2MwZTc5LzEvaUhwZkJJYXhpaVJJOGpXS0owYkJxOW43TGw0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZC8yOGMzZDEtOGE5MC00MDY4LWJiMjctMzNhYmM1M2MwZTc5 LzEvaUhwZkJJYXhpaVJJOGpXS0owYkJxOW43TGw0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbi2vCFMC fvz3Xf+v4DNkR2qZ3aIso4hZjN6BzPBij7VYuE87o5tw9++z9fEcluBIFfuIz136 VZItI/EVnSTbraTQgY8dgvDTchYEjri9taV6hUJKQ4H6a7DYjNpAyY5sS4HGMBai lxamVX8c0b249k6tCdvIjFtZsPeKQBT9dYYqGtPjZLcbqSsJHFCgsuJEhu/FPcgW U84UI/DtjBwycQAhSRHT5+nmXdxDWUAa7hYqRsGmNgsUEoJQEh57nC0g9nyYUzxR rdpDawUoqQ7IiQYY5Q1qYorHzSs+jPgxCgZykiB6rwCz8nX2xHnqA98qNMlzxWiv 7sKQstYGrf/IjQ== -----END CERTIFICATE-----Generated at Sun Dec 21 04:24:59 2025 by rpki-client