This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/09db8c-6df0-4cee-ae07-a1e24aaf610f/1/iH-jc3HX1Fk7opDvRWaeoN4pN4I.mft File: iH-jc3HX1Fk7opDvRWaeoN4pN4I.mft (raw, json) Hash identifier: sa2fVbfd4/XoNFiF6eLz6+fZXKzcqTHAD6uWnKm5Onk= Subject key identifier: 1C:E8:23:4B:62:B1:3F:C0:51:D4:FF:59:DB:88:07:EC:02:CE:A4:75 Authority key identifier: 88:7F:A3:73:71:D7:D4:59:3B:A2:90:EF:45:66:9E:A0:DE:29:37:82 Certificate issuer: /CN=887fa37371d7d4593ba290ef45669ea0de293782 Certificate serial: 019B6AD8189A2836C84FA30A9B4E291C6E35 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iH-jc3HX1Fk7opDvRWaeoN4pN4I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/09db8c-6df0-4cee-ae07-a1e24aaf610f/1/iH-jc3HX1Fk7opDvRWaeoN4pN4I.mft Manifest number: 08C2 Signing time: Mon 29 Dec 2025 16:01:45 +0000 Manifest this update: Mon 29 Dec 2025 16:01:45 +0000 Manifest next update: Tue 30 Dec 2025 16:01:45 +0000 Files and hashes: 1: XWaEMNo4oCmJKw7xuT_lUqU1a9o.roa (hash: vlh1Ps1w/BBZ8U+fD5oVlO0yHpfRUnw+NHa2xAJ40qE=) 2: iH-jc3HX1Fk7opDvRWaeoN4pN4I.crl (hash: MXQrxMwCF35QoJU0KSkMxFMZy3eSr26mR/XFzK46E9U=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/09db8c-6df0-4cee-ae07-a1e24aaf610f/1/iH-jc3HX1Fk7opDvRWaeoN4pN4I.crl rsync://rpki.ripe.net/repository/DEFAULT/3b/09db8c-6df0-4cee-ae07-a1e24aaf610f/1/iH-jc3HX1Fk7opDvRWaeoN4pN4I.mft rsync://rpki.ripe.net/repository/DEFAULT/iH-jc3HX1Fk7opDvRWaeoN4pN4I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 30 Dec 2025 15:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:6a:d8:18:9a:28:36:c8:4f:a3:0a:9b:4e:29:1c:6e:35 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=887fa37371d7d4593ba290ef45669ea0de293782 Validity Not Before: Dec 29 16:01:45 2025 GMT Not After : Dec 30 16:01:45 2025 GMT Subject: CN=1ce8234b62b13fc051d4ff59db8807ec02cea475 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:74:64:07:93:36:c5:c6:f5:fa:2f:ec:f1:5b: db:28:08:fd:ec:d9:87:7a:8e:50:d5:f8:69:d4:fc: 55:51:6c:e1:92:8f:b8:af:1c:48:6d:94:74:7d:a0: 7d:ae:1e:8e:f1:54:dd:f3:68:2e:e1:ff:a3:5b:9e: 3c:b4:40:76:f7:55:7f:9f:5c:b0:a0:47:37:1c:5b: f0:59:16:31:b4:64:46:95:67:a4:f5:1a:78:71:23: 66:49:16:ba:ee:b7:4f:00:40:c2:82:6c:07:4f:ce: 27:11:8e:46:ac:83:00:ea:69:7d:4e:75:52:c9:e0: e4:e3:a6:79:61:51:08:b5:55:75:4a:a7:27:fb:a3: 2c:30:ea:4c:37:94:cb:54:1c:67:32:22:d9:e3:94: 21:a7:67:df:4f:33:a7:d5:71:9e:d6:73:2c:74:e9: 72:ee:de:0d:f9:25:eb:98:ab:f1:51:f7:ec:91:f6: 94:b3:f8:a4:e1:fd:e9:e2:8a:8c:4b:a5:7d:76:13: b0:5c:09:5b:81:51:2b:a3:c9:cf:1c:ec:77:d2:6e: bd:db:3e:df:f3:36:3f:d2:88:f7:76:8a:39:ae:a8: de:72:8b:6c:b3:1d:c1:47:6d:00:40:75:49:f0:4f: 86:8a:7f:74:68:2f:7d:4f:b1:86:ea:6e:b6:af:04: 8f:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:E8:23:4B:62:B1:3F:C0:51:D4:FF:59:DB:88:07:EC:02:CE:A4:75 X509v3 Authority Key Identifier: keyid:88:7F:A3:73:71:D7:D4:59:3B:A2:90:EF:45:66:9E:A0:DE:29:37:82 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iH-jc3HX1Fk7opDvRWaeoN4pN4I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/09db8c-6df0-4cee-ae07-a1e24aaf610f/1/iH-jc3HX1Fk7opDvRWaeoN4pN4I.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/09db8c-6df0-4cee-ae07-a1e24aaf610f/1/iH-jc3HX1Fk7opDvRWaeoN4pN4I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 76:71:2b:02:c7:03:25:33:8c:62:81:51:69:0a:3f:c8:1c:f6: 4f:56:85:9c:f8:85:70:1b:76:a6:41:cf:d7:a8:29:47:44:64: ac:ac:4d:16:a3:82:ae:76:37:3b:99:de:0f:2f:5d:ba:48:c8: 9b:e1:8c:6c:b4:e3:02:d5:8f:af:5e:a6:17:19:96:44:63:2f: bc:cd:47:42:ef:fa:82:6d:7b:40:98:da:9d:cc:a1:ce:ea:9c: fe:68:1b:49:a7:ab:3e:60:ce:66:8d:ef:89:28:60:3a:b1:d5: d3:d9:19:60:4b:e5:80:ce:e7:5e:cb:c4:10:21:1d:1f:82:fb: 5b:d0:b7:c9:9e:23:e6:57:ec:02:56:70:cb:58:41:c5:5e:75: dc:a1:9c:b8:c2:30:2a:98:4e:5c:21:f6:46:03:1e:03:4c:6a: 44:ea:ba:89:a6:73:82:9d:25:dd:44:14:78:2f:b3:43:d0:38: cc:39:a7:74:c1:78:70:6d:c8:aa:8f:f1:fe:ad:4f:e3:a9:b5: 86:00:fd:e4:4c:0e:93:54:6b:ad:56:fc:a0:2d:63:a8:ed:a7: b7:7b:79:90:bc:03:e0:9e:57:2c:de:c7:33:4b:ab:8a:2c:10: 81:9a:33:5f:cb:3b:9b:34:4e:fc:0a:60:7c:48:a8:fe:61:2c: 05:f4:c3:bf -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtq2BiaKDbIT6MKm04pHG41MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg4N2ZhMzczNzFkN2Q0NTkzYmEyOTBlZjQ1NjY5ZWEwZGUy OTM3ODIwHhcNMjUxMjI5MTYwMTQ1WhcNMjUxMjMwMTYwMTQ1WjAzMTEwLwYDVQQD EygxY2U4MjM0YjYyYjEzZmMwNTFkNGZmNTlkYjg4MDdlYzAyY2VhNDc1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiHRkB5M2xcb1+i/s8VvbKAj97NmH eo5Q1fhp1PxVUWzhko+4rxxIbZR0faB9rh6O8VTd82gu4f+jW548tEB291V/n1yw oEc3HFvwWRYxtGRGlWek9Rp4cSNmSRa67rdPAEDCgmwHT84nEY5GrIMA6ml9TnVS yeDk46Z5YVEItVV1Sqcn+6MsMOpMN5TLVBxnMiLZ45Qhp2ffTzOn1XGe1nMsdOly 7t4N+SXrmKvxUffskfaUs/ik4f3p4oqMS6V9dhOwXAlbgVEro8nPHOx30m692z7f 8zY/0oj3doo5rqjecotssx3BR20AQHVJ8E+Gin90aC99T7GG6m62rwSPfQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBzoI0tisT/AUdT/WduIB+wCzqR1MB8GA1UdIwQY MBaAFIh/o3Nx19RZO6KQ70VmnqDeKTeCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaUgtamMzSFgxRms3b3BEdlJXYWVvTjRwTjRJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYi8wOWRiOGMtNmRmMC00Y2VlLWFlMDct YTFlMjRhYWY2MTBmLzEvaUgtamMzSFgxRms3b3BEdlJXYWVvTjRwTjRJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYi8wOWRiOGMtNmRmMC00Y2VlLWFlMDctYTFlMjRhYWY2MTBm LzEvaUgtamMzSFgxRms3b3BEdlJXYWVvTjRwTjRJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdnErAscD JTOMYoFRaQo/yBz2T1aFnPiFcBt2pkHP16gpR0RkrKxNFqOCrnY3O5neDy9dukjI m+GMbLTjAtWPr16mFxmWRGMvvM1HQu/6gm17QJjancyhzuqc/mgbSaerPmDOZo3v iShgOrHV09kZYEvlgM7nXsvEECEdH4L7W9C3yZ4j5lfsAlZwy1hBxV513KGcuMIw KphOXCH2RgMeA0xqROq6iaZzgp0l3UQUeC+zQ9A4zDmndMF4cG3Iqo/x/q1P46m1 hgD95EwOk1RrrVb8oC1jqO2nt3t5kLwD4J5XLN7HM0uriiwQgZozX8s7mzRO/Apg fEio/mEsBfTDvw== -----END CERTIFICATE-----Generated at Mon Dec 29 17:42:34 2025 by rpki-client