This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/1197f2-7f8e-48e4-bda9-f5bb2b2d63be/1/ii4u4759dSXtdLeq4H6Srsr4STY.mft File: ii4u4759dSXtdLeq4H6Srsr4STY.mft (raw, json) Hash identifier: ziBfLlT8hNyW1h3JK9JK6oU1NObH6XlOSVsAx8EQfkk= Subject key identifier: BC:61:43:5E:D4:53:2A:E4:95:D6:66:BD:87:28:00:35:C9:01:56:F8 Authority key identifier: 8A:2E:2E:E3:BE:7D:75:25:ED:74:B7:AA:E0:7E:92:AE:CA:F8:49:36 Certificate issuer: /CN=8a2e2ee3be7d7525ed74b7aae07e92aecaf84936 Certificate serial: 019B3EDB0250BDD3A99F7FD622912C02A842 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ii4u4759dSXtdLeq4H6Srsr4STY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/1197f2-7f8e-48e4-bda9-f5bb2b2d63be/1/ii4u4759dSXtdLeq4H6Srsr4STY.mft Manifest number: 0617 Signing time: Sun 21 Dec 2025 03:01:38 +0000 Manifest this update: Sun 21 Dec 2025 03:01:38 +0000 Manifest next update: Mon 22 Dec 2025 03:01:38 +0000 Files and hashes: 1: ETp4ram_5wDX-QYsHkSwfey16LY.roa (hash: fc9E3PvcS1jfb9J0ZMzkrwdWGh4l1nHW4cyDiTGJbiU=) 2: ii4u4759dSXtdLeq4H6Srsr4STY.crl (hash: vSIN8zl/+UZXoB2hPCnev2Wz/jM2jd/IVKXG0DW9KS0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/1197f2-7f8e-48e4-bda9-f5bb2b2d63be/1/ii4u4759dSXtdLeq4H6Srsr4STY.crl rsync://rpki.ripe.net/repository/DEFAULT/37/1197f2-7f8e-48e4-bda9-f5bb2b2d63be/1/ii4u4759dSXtdLeq4H6Srsr4STY.mft rsync://rpki.ripe.net/repository/DEFAULT/ii4u4759dSXtdLeq4H6Srsr4STY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3e:db:02:50:bd:d3:a9:9f:7f:d6:22:91:2c:02:a8:42 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8a2e2ee3be7d7525ed74b7aae07e92aecaf84936 Validity Not Before: Dec 21 03:01:38 2025 GMT Not After : Dec 22 03:01:38 2025 GMT Subject: CN=bc61435ed4532ae495d666bd87280035c90156f8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:55:ce:db:d3:93:6e:46:9a:dc:49:c9:d3:67: 69:03:0e:fd:18:f1:e9:0c:9e:65:fe:d7:68:8a:a3: e3:cb:d3:66:03:71:3d:62:d6:b8:57:06:dc:63:32: 5f:5d:f8:be:ef:f6:eb:cc:ac:ff:b1:6a:7e:d0:36: e7:a1:c2:33:a5:3b:aa:11:0a:6f:cb:47:1c:3c:20: fb:6c:b8:ce:70:e5:24:da:8c:7c:38:17:0e:7d:f9: 99:ad:91:15:5e:e4:be:3e:55:36:87:28:a8:e8:7f: fb:ba:f5:02:ab:f4:c7:99:08:01:03:9d:7e:6b:b3: 2a:4b:1f:e4:3d:ad:43:09:04:97:a1:e7:4e:41:1a: 09:2d:f1:c8:51:c1:27:a3:35:af:7f:3a:dc:14:ac: e4:cf:b2:83:59:32:47:03:b1:c7:1e:cd:a2:a2:3c: 6c:d5:3a:7a:62:4b:bd:4e:42:cb:16:4b:be:60:4f: 57:40:10:e6:a8:86:0f:95:57:25:17:55:a7:3e:36: 0f:00:c0:a5:e0:f6:48:dc:7e:ba:27:c2:68:d0:f4: a7:a0:3c:00:13:a6:21:18:75:49:d6:0b:b2:ea:69: af:b2:43:b8:06:12:df:3d:15:93:77:27:2a:46:bd: 3b:e6:e2:97:58:55:ca:d9:c5:9e:2a:4e:54:87:49: a4:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:61:43:5E:D4:53:2A:E4:95:D6:66:BD:87:28:00:35:C9:01:56:F8 X509v3 Authority Key Identifier: keyid:8A:2E:2E:E3:BE:7D:75:25:ED:74:B7:AA:E0:7E:92:AE:CA:F8:49:36 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ii4u4759dSXtdLeq4H6Srsr4STY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/1197f2-7f8e-48e4-bda9-f5bb2b2d63be/1/ii4u4759dSXtdLeq4H6Srsr4STY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/37/1197f2-7f8e-48e4-bda9-f5bb2b2d63be/1/ii4u4759dSXtdLeq4H6Srsr4STY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2b:55:1d:45:b0:52:18:d2:e3:f9:0f:3f:ac:2a:f2:9f:bc:e3: 66:d1:af:36:c1:6e:5e:6f:0b:37:db:ab:48:2f:48:80:b7:68: 3a:6d:0f:0d:6c:1b:d3:4d:bc:f6:16:4e:ec:34:87:fe:ea:79: c7:66:14:4c:67:39:e6:cd:1f:42:b6:fe:4c:03:0f:23:00:44: 0e:05:e1:d5:a9:e7:09:e2:58:25:ee:a5:ac:64:58:a2:9c:bb: 3a:0a:f4:33:23:82:f5:fd:99:d3:f9:3c:f2:dc:38:33:fd:f3: 87:46:f3:c0:a9:d8:51:64:00:63:43:50:02:fe:53:9a:97:a1: b3:d6:33:d3:d4:fc:b1:41:17:cf:43:50:e1:b8:09:b6:67:91: 89:2a:4c:86:e3:01:17:9a:c3:9c:e0:c1:95:60:6c:67:df:64: 57:11:73:34:64:30:8e:65:b9:ff:79:cb:53:5b:5e:c7:ef:3e: 34:8e:23:a8:df:7c:5e:22:27:ae:9f:16:e7:f0:d8:a0:5c:ec: a3:66:fb:40:bd:e1:fe:78:01:23:1a:fe:a3:44:6d:33:3d:2c: 67:5b:c9:ee:46:03:3a:42:8a:54:39:2d:73:73:ab:bc:f5:31: 4b:9f:41:d8:9d:7a:16:b1:3c:83:48:0d:b5:41:53:d1:74:26: 6e:82:ca:fc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs+2wJQvdOpn3/WIpEsAqhCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhhMmUyZWUzYmU3ZDc1MjVlZDc0YjdhYWUwN2U5MmFlY2Fm ODQ5MzYwHhcNMjUxMjIxMDMwMTM4WhcNMjUxMjIyMDMwMTM4WjAzMTEwLwYDVQQD EyhiYzYxNDM1ZWQ0NTMyYWU0OTVkNjY2YmQ4NzI4MDAzNWM5MDE1NmY4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjlXO29OTbkaa3EnJ02dpAw79GPHp DJ5l/tdoiqPjy9NmA3E9Yta4VwbcYzJfXfi+7/brzKz/sWp+0DbnocIzpTuqEQpv y0ccPCD7bLjOcOUk2ox8OBcOffmZrZEVXuS+PlU2hyio6H/7uvUCq/THmQgBA51+ a7MqSx/kPa1DCQSXoedOQRoJLfHIUcEnozWvfzrcFKzkz7KDWTJHA7HHHs2iojxs 1Tp6Yku9TkLLFku+YE9XQBDmqIYPlVclF1WnPjYPAMCl4PZI3H66J8Jo0PSnoDwA E6YhGHVJ1guy6mmvskO4BhLfPRWTdycqRr075uKXWFXK2cWeKk5Uh0mkdQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLxhQ17UUyrkldZmvYcoADXJAVb4MB8GA1UdIwQY MBaAFIouLuO+fXUl7XS3quB+kq7K+Ek2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaWk0dTQ3NTlkU1h0ZExlcTRINlNyc3I0U1RZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNy8xMTk3ZjItN2Y4ZS00OGU0LWJkYTkt ZjViYjJiMmQ2M2JlLzEvaWk0dTQ3NTlkU1h0ZExlcTRINlNyc3I0U1RZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNy8xMTk3ZjItN2Y4ZS00OGU0LWJkYTktZjViYjJiMmQ2M2Jl LzEvaWk0dTQ3NTlkU1h0ZExlcTRINlNyc3I0U1RZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAK1UdRbBS GNLj+Q8/rCryn7zjZtGvNsFuXm8LN9urSC9IgLdoOm0PDWwb00289hZO7DSH/up5 x2YUTGc55s0fQrb+TAMPIwBEDgXh1annCeJYJe6lrGRYopy7Ogr0MyOC9f2Z0/k8 8tw4M/3zh0bzwKnYUWQAY0NQAv5Tmpehs9Yz09T8sUEXz0NQ4bgJtmeRiSpMhuMB F5rDnODBlWBsZ99kVxFzNGQwjmW5/3nLU1tex+8+NI4jqN98XiInrp8W5/DYoFzs o2b7QL3h/ngBIxr+o0RtMz0sZ1vJ7kYDOkKKVDktc3OrvPUxS59B2J16FrE8g0gN tUFT0XQmboLK/A== -----END CERTIFICATE-----Generated at Sun Dec 21 07:00:56 2025 by rpki-client