This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/265769-354e-4a8b-9542-94f97b3a2ce2/1/iu8WONCRG6mIZOl5yEJrpPQaJy4.mft File: iu8WONCRG6mIZOl5yEJrpPQaJy4.mft (raw, json) Hash identifier: 91iJ0GqjJoqZvbG+FqWTdmCkkoleLM3bh1Wp85gC0Js= Subject key identifier: 71:FD:CD:9E:4D:1D:F8:2B:0B:8D:33:17:CF:B3:1C:DE:BF:19:75:70 Authority key identifier: 8A:EF:16:38:D0:91:1B:A9:88:64:E9:79:C8:42:6B:A4:F4:1A:27:2E Certificate issuer: /CN=8aef1638d0911ba98864e979c8426ba4f41a272e Certificate serial: 019B70A3A32EBD43C33E125B81285F5642E1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iu8WONCRG6mIZOl5yEJrpPQaJy4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/265769-354e-4a8b-9542-94f97b3a2ce2/1/iu8WONCRG6mIZOl5yEJrpPQaJy4.mft Manifest number: 17A4 Signing time: Tue 30 Dec 2025 19:02:10 +0000 Manifest this update: Tue 30 Dec 2025 19:02:10 +0000 Manifest next update: Wed 31 Dec 2025 19:02:10 +0000 Files and hashes: 1: if3KaihHpbg1Z08V6cXxVYQmFhk.roa (hash: 4GJMU1mopT3EhZuM0ayjHedY3bbBO8iZn11kZBRbuts=) 2: iu8WONCRG6mIZOl5yEJrpPQaJy4.crl (hash: yuxXhv3XMqvuKLbXSUalkc6dnhIe4lVc+FvxVuuZpRw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/265769-354e-4a8b-9542-94f97b3a2ce2/1/iu8WONCRG6mIZOl5yEJrpPQaJy4.crl rsync://rpki.ripe.net/repository/DEFAULT/53/265769-354e-4a8b-9542-94f97b3a2ce2/1/iu8WONCRG6mIZOl5yEJrpPQaJy4.mft rsync://rpki.ripe.net/repository/DEFAULT/iu8WONCRG6mIZOl5yEJrpPQaJy4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 31 Dec 2025 15:21:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:70:a3:a3:2e:bd:43:c3:3e:12:5b:81:28:5f:56:42:e1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8aef1638d0911ba98864e979c8426ba4f41a272e Validity Not Before: Dec 30 19:02:10 2025 GMT Not After : Dec 31 19:02:10 2025 GMT Subject: CN=71fdcd9e4d1df82b0b8d3317cfb31cdebf197570 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:a5:27:37:1d:62:15:c1:13:55:d3:61:e8:2a: a3:3a:0d:6b:35:0e:f8:36:54:c4:ed:44:f0:54:9e: b7:1e:8f:79:46:b6:90:d2:b6:aa:be:88:d7:ac:7f: 34:56:71:61:d8:6a:84:32:74:66:af:7b:29:37:4c: 60:60:0a:0d:7d:51:36:40:0b:80:a7:76:24:b5:a5: 08:25:c6:45:86:b8:88:66:16:e3:d0:7b:8e:65:fd: bd:d8:eb:ba:ae:e1:32:f4:cc:bd:f4:45:41:ad:72: c1:8d:4a:0b:fc:8e:67:59:d3:cd:06:53:26:5b:71: a6:6c:77:4d:31:f4:f5:98:52:4c:94:73:5f:06:bf: d6:68:ea:a8:96:46:e5:a8:cb:2b:c2:dd:fe:78:29: 65:8e:ba:42:93:05:55:02:02:0c:0c:ed:95:bb:7b: 28:bc:44:3e:23:65:f5:b0:8d:a1:ef:7c:39:00:6d: 7d:fb:37:ac:d7:dc:d3:99:0d:24:29:c4:98:03:c6: 34:1f:34:bb:21:14:6e:c3:40:10:57:6c:ee:83:86: 3d:be:0a:f1:61:02:b4:4a:5c:60:6a:17:0e:90:11: 17:6e:da:79:5f:59:1d:43:ca:50:ad:c9:cb:a0:4a: d7:77:c2:2b:ec:af:ea:a8:74:ad:05:8d:a0:f2:88: 26:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:FD:CD:9E:4D:1D:F8:2B:0B:8D:33:17:CF:B3:1C:DE:BF:19:75:70 X509v3 Authority Key Identifier: keyid:8A:EF:16:38:D0:91:1B:A9:88:64:E9:79:C8:42:6B:A4:F4:1A:27:2E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iu8WONCRG6mIZOl5yEJrpPQaJy4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/265769-354e-4a8b-9542-94f97b3a2ce2/1/iu8WONCRG6mIZOl5yEJrpPQaJy4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/53/265769-354e-4a8b-9542-94f97b3a2ce2/1/iu8WONCRG6mIZOl5yEJrpPQaJy4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption af:97:07:fc:5d:75:de:a6:51:4b:7d:0f:a3:8c:70:6c:20:b5: 88:75:f3:a6:a1:66:06:e3:6c:c0:42:01:fd:22:96:f1:77:50: 86:ba:16:de:d0:a1:d6:1b:94:a7:b7:0a:ae:2d:53:13:30:ff: 38:47:61:aa:28:70:aa:c3:62:d0:7a:6c:4a:a8:f4:d2:e8:82: 0f:65:22:41:ed:c5:eb:b9:d7:1c:a3:47:94:83:47:a6:bd:b0: 6b:95:79:b7:30:2d:06:80:d5:49:70:94:a2:5d:54:d3:af:d8: a1:2d:8e:09:90:53:00:32:2c:8d:99:47:05:db:fa:ec:ac:db: a7:63:42:66:5e:03:60:d1:c2:c6:82:8b:27:0c:60:51:0d:cc: 92:0c:05:d9:4d:5d:3e:c2:b4:c6:e5:8c:5e:63:21:73:49:e9: 3e:0f:8d:cd:78:c2:21:78:a2:c7:36:ec:18:6d:c9:13:a1:ab: c2:18:64:f6:ce:b6:79:ba:95:19:7f:1d:5f:89:e4:86:81:71: a5:5d:41:62:2e:e5:37:c4:02:08:e6:b2:83:c1:4f:72:62:26: 75:b0:c2:07:99:e2:c1:80:12:d3:1a:4e:cf:26:15:c1:1b:9a: fb:e2:c5:ec:8c:ed:31:dd:5d:7f:55:7c:08:a5:d0:79:f7:7e: 1e:d8:da:f2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtwo6MuvUPDPhJbgShfVkLhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhhZWYxNjM4ZDA5MTFiYTk4ODY0ZTk3OWM4NDI2YmE0ZjQx YTI3MmUwHhcNMjUxMjMwMTkwMjEwWhcNMjUxMjMxMTkwMjEwWjAzMTEwLwYDVQQD Eyg3MWZkY2Q5ZTRkMWRmODJiMGI4ZDMzMTdjZmIzMWNkZWJmMTk3NTcwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoqUnNx1iFcETVdNh6CqjOg1rNQ74 NlTE7UTwVJ63Ho95RraQ0raqvojXrH80VnFh2GqEMnRmr3spN0xgYAoNfVE2QAuA p3YktaUIJcZFhriIZhbj0HuOZf292Ou6ruEy9My99EVBrXLBjUoL/I5nWdPNBlMm W3GmbHdNMfT1mFJMlHNfBr/WaOqolkblqMsrwt3+eClljrpCkwVVAgIMDO2Vu3so vEQ+I2X1sI2h73w5AG19+zes19zTmQ0kKcSYA8Y0HzS7IRRuw0AQV2zug4Y9vgrx YQK0SlxgahcOkBEXbtp5X1kdQ8pQrcnLoErXd8Ir7K/qqHStBY2g8ogm7wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHH9zZ5NHfgrC40zF8+zHN6/GXVwMB8GA1UdIwQY MBaAFIrvFjjQkRupiGTpechCa6T0GicuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaXU4V09OQ1JHNm1JWk9sNXlFSnJwUFFhSnk0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81My8yNjU3NjktMzU0ZS00YThiLTk1NDIt OTRmOTdiM2EyY2UyLzEvaXU4V09OQ1JHNm1JWk9sNXlFSnJwUFFhSnk0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81My8yNjU3NjktMzU0ZS00YThiLTk1NDItOTRmOTdiM2EyY2Uy LzEvaXU4V09OQ1JHNm1JWk9sNXlFSnJwUFFhSnk0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAr5cH/F11 3qZRS30Po4xwbCC1iHXzpqFmBuNswEIB/SKW8XdQhroW3tCh1huUp7cKri1TEzD/ OEdhqihwqsNi0HpsSqj00uiCD2UiQe3F67nXHKNHlINHpr2wa5V5tzAtBoDVSXCU ol1U06/YoS2OCZBTADIsjZlHBdv67Kzbp2NCZl4DYNHCxoKLJwxgUQ3MkgwF2U1d PsK0xuWMXmMhc0npPg+NzXjCIXiixzbsGG3JE6Grwhhk9s62ebqVGX8dX4nkhoFx pV1BYi7lN8QCCOayg8FPcmImdbDCB5niwYAS0xpOzyYVwRua++LF7IztMd1df1V8 CKXQefd+Htja8g== -----END CERTIFICATE-----Generated at Tue Dec 30 21:59:50 2025 by rpki-client