This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/94927f-7e08-4f21-9bba-0f876abd1e30/1/I4hXZg3H-mCEb3ZblMtpV2JVrbY.mft File: I4hXZg3H-mCEb3ZblMtpV2JVrbY.mft (raw, json) Hash identifier: dupMbKMNUlWYK0K3hrzMgCXa8PdPnZkyxDM4jgFW69w= Subject key identifier: 1F:DD:E0:F3:E8:65:F7:8F:A0:AF:87:2D:A0:FA:4F:89:A9:B6:16:40 Authority key identifier: 23:88:57:66:0D:C7:FA:60:84:6F:76:5B:94:CB:69:57:62:55:AD:B6 Certificate issuer: /CN=238857660dc7fa60846f765b94cb69576255adb6 Certificate serial: 019B3EDA5D085CA368211D25A1EB4FED9264 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I4hXZg3H-mCEb3ZblMtpV2JVrbY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/94927f-7e08-4f21-9bba-0f876abd1e30/1/I4hXZg3H-mCEb3ZblMtpV2JVrbY.mft Manifest number: 178D Signing time: Sun 21 Dec 2025 03:00:56 +0000 Manifest this update: Sun 21 Dec 2025 03:00:56 +0000 Manifest next update: Mon 22 Dec 2025 03:00:56 +0000 Files and hashes: 1: I4hXZg3H-mCEb3ZblMtpV2JVrbY.crl (hash: gFtTkJNvUCKoqHiNjdrf+wPcuQjbGhVHn0IXxrLQt0I=) 2: XHfhEGwfsHA5Cy6rVzKyCX0VS7I.roa (hash: r0CY6B9tn8PTb3kJeN+vQ/cBCfQUrTHL37aoDlJepRA=) 3: tcPEvHuX8bqS2YKyM4C5K4tHwxk.roa (hash: rKNoYxngd5L4bRt06ua2/XaA1SqXHMSPI/cKc0JvWoY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/94927f-7e08-4f21-9bba-0f876abd1e30/1/I4hXZg3H-mCEb3ZblMtpV2JVrbY.crl rsync://rpki.ripe.net/repository/DEFAULT/32/94927f-7e08-4f21-9bba-0f876abd1e30/1/I4hXZg3H-mCEb3ZblMtpV2JVrbY.mft rsync://rpki.ripe.net/repository/DEFAULT/I4hXZg3H-mCEb3ZblMtpV2JVrbY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3e:da:5d:08:5c:a3:68:21:1d:25:a1:eb:4f:ed:92:64 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=238857660dc7fa60846f765b94cb69576255adb6 Validity Not Before: Dec 21 03:00:56 2025 GMT Not After : Dec 22 03:00:56 2025 GMT Subject: CN=1fdde0f3e865f78fa0af872da0fa4f89a9b61640 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:dc:ee:0c:48:d0:09:d7:4d:9f:f9:7b:02:9d: 39:1c:3d:7a:8e:a7:d1:5a:af:fc:7a:79:cb:5f:ab: 14:9b:98:66:d5:15:00:ae:b4:57:e8:50:58:86:f4: 53:68:12:15:0a:ab:9a:28:63:e1:f1:6f:e2:82:3f: d6:16:64:52:56:83:4d:8e:2b:aa:36:ad:33:44:dd: 3f:a7:0f:15:d0:9f:1c:1d:b3:da:60:96:55:6c:a7: f7:c0:42:47:92:7f:4c:70:91:fb:33:33:64:e8:a0: 0a:86:6e:35:c0:ea:bc:48:4c:06:d6:8c:9f:c7:c0: bf:2e:11:09:5e:d6:14:c9:9c:7e:cf:77:4b:cb:20: 97:d0:c8:d9:82:74:94:36:29:3d:c5:cd:14:6e:5d: e1:8c:c5:eb:1f:e8:5f:58:82:cd:21:c2:8e:d5:0d: de:77:7c:27:1e:79:46:8a:25:a5:a7:2d:45:55:2d: 46:88:d4:d3:80:48:53:f3:e2:bd:e1:4b:b2:4f:72: 42:71:47:cc:f1:b9:63:1e:bf:f8:1e:2b:ef:25:1e: 14:fe:be:e2:6c:36:4c:fc:cc:18:ef:4c:4a:d2:a3: ed:de:d2:b2:c5:18:01:3a:4d:be:1d:28:39:d8:f4: 0b:a4:d1:d0:c2:a9:1e:81:47:f6:9b:b3:6a:72:6d: 51:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:DD:E0:F3:E8:65:F7:8F:A0:AF:87:2D:A0:FA:4F:89:A9:B6:16:40 X509v3 Authority Key Identifier: keyid:23:88:57:66:0D:C7:FA:60:84:6F:76:5B:94:CB:69:57:62:55:AD:B6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I4hXZg3H-mCEb3ZblMtpV2JVrbY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/94927f-7e08-4f21-9bba-0f876abd1e30/1/I4hXZg3H-mCEb3ZblMtpV2JVrbY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/32/94927f-7e08-4f21-9bba-0f876abd1e30/1/I4hXZg3H-mCEb3ZblMtpV2JVrbY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 54:e4:12:24:b0:ef:a4:82:a3:be:91:e1:60:93:cd:0b:45:42: 1c:65:a6:06:eb:29:8f:d7:97:1a:dd:2f:01:02:7d:bc:13:13: 8c:ef:35:89:1a:10:5c:e5:03:71:3a:70:4b:2b:31:80:61:bd: a6:35:dc:5b:46:80:6e:53:f2:ed:c5:b5:c0:c6:c0:1a:d5:69: 96:4e:ea:e3:e3:b5:ec:98:15:5b:e4:24:75:db:ac:96:f1:2b: 1f:dc:0c:c5:6f:4b:c3:05:df:b6:c7:3a:90:25:d9:72:a4:6b: 93:07:19:f3:ac:c7:ff:a5:f3:78:ec:c8:3f:33:54:5b:d0:be: c8:a3:a8:26:5d:c2:40:32:c5:5f:77:92:df:25:23:f6:7e:16: 85:6e:9b:1c:d5:4c:51:b2:5f:58:13:ab:0d:94:f8:36:86:1c: 2a:56:2c:a4:64:a0:09:d0:00:ab:14:b7:0c:00:54:9e:37:d9: 28:e6:b1:85:5b:2e:5a:42:be:59:05:96:8f:8c:22:58:fb:63: 52:e9:6d:ff:78:26:63:67:94:f4:4b:45:51:b6:e6:bc:bb:e7: ff:da:32:b8:19:84:dc:81:de:35:e9:ca:2c:4a:f3:8d:81:e1: 14:ed:0a:57:e9:9b:85:1c:5a:2a:3b:9d:b9:3d:49:74:a7:75: 80:2c:84:7c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs+2l0IXKNoIR0loetP7ZJkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIzODg1NzY2MGRjN2ZhNjA4NDZmNzY1Yjk0Y2I2OTU3NjI1 NWFkYjYwHhcNMjUxMjIxMDMwMDU2WhcNMjUxMjIyMDMwMDU2WjAzMTEwLwYDVQQD EygxZmRkZTBmM2U4NjVmNzhmYTBhZjg3MmRhMGZhNGY4OWE5YjYxNjQwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjNzuDEjQCddNn/l7Ap05HD16jqfR Wq/8ennLX6sUm5hm1RUArrRX6FBYhvRTaBIVCquaKGPh8W/igj/WFmRSVoNNjiuq Nq0zRN0/pw8V0J8cHbPaYJZVbKf3wEJHkn9McJH7MzNk6KAKhm41wOq8SEwG1oyf x8C/LhEJXtYUyZx+z3dLyyCX0MjZgnSUNik9xc0Ubl3hjMXrH+hfWILNIcKO1Q3e d3wnHnlGiiWlpy1FVS1GiNTTgEhT8+K94UuyT3JCcUfM8bljHr/4HivvJR4U/r7i bDZM/MwY70xK0qPt3tKyxRgBOk2+HSg52PQLpNHQwqkegUf2m7Nqcm1RJwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFB/d4PPoZfePoK+HLaD6T4mpthZAMB8GA1UdIwQY MBaAFCOIV2YNx/pghG92W5TLaVdiVa22MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSTRoWFpnM0gtbUNFYjNaYmxNdHBWMkpWcmJZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMi85NDkyN2YtN2UwOC00ZjIxLTliYmEt MGY4NzZhYmQxZTMwLzEvSTRoWFpnM0gtbUNFYjNaYmxNdHBWMkpWcmJZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMi85NDkyN2YtN2UwOC00ZjIxLTliYmEtMGY4NzZhYmQxZTMw LzEvSTRoWFpnM0gtbUNFYjNaYmxNdHBWMkpWcmJZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVOQSJLDv pIKjvpHhYJPNC0VCHGWmBuspj9eXGt0vAQJ9vBMTjO81iRoQXOUDcTpwSysxgGG9 pjXcW0aAblPy7cW1wMbAGtVplk7q4+O17JgVW+QkdduslvErH9wMxW9LwwXftsc6 kCXZcqRrkwcZ86zH/6XzeOzIPzNUW9C+yKOoJl3CQDLFX3eS3yUj9n4WhW6bHNVM UbJfWBOrDZT4NoYcKlYspGSgCdAAqxS3DABUnjfZKOaxhVsuWkK+WQWWj4wiWPtj Uult/3gmY2eU9EtFUbbmvLvn/9oyuBmE3IHeNenKLErzjYHhFO0KV+mbhRxaKjud uT1JdKd1gCyEfA== -----END CERTIFICATE-----Generated at Sun Dec 21 06:43:15 2025 by rpki-client