This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/dffb19-d467-4ee5-8cf6-f63d20a78f75/1/i4GUQccJMDSp1GVqL202qyQDP-Q.mft File: i4GUQccJMDSp1GVqL202qyQDP-Q.mft (raw, json) Hash identifier: oXV2LT81MmNdXuPhYIqb1+e5NzSKgKnR2Wx/QBVXr4c= Subject key identifier: 5E:86:D3:01:AE:45:57:E3:74:4E:99:78:4E:62:06:36:2A:9C:DD:36 Authority key identifier: 8B:81:94:41:C7:09:30:34:A9:D4:65:6A:2F:6D:36:AB:24:03:3F:E4 Certificate issuer: /CN=8b819441c7093034a9d4656a2f6d36ab24033fe4 Certificate serial: 019B3D5A5E6EF61833CCEDB00426D2B079EE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i4GUQccJMDSp1GVqL202qyQDP-Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/dffb19-d467-4ee5-8cf6-f63d20a78f75/1/i4GUQccJMDSp1GVqL202qyQDP-Q.mft Manifest number: 01FE Signing time: Sat 20 Dec 2025 20:01:31 +0000 Manifest this update: Sat 20 Dec 2025 20:01:31 +0000 Manifest next update: Sun 21 Dec 2025 20:01:31 +0000 Files and hashes: 1: Dm667XnaRqtK2i3UfsThVeXTWc4.roa (hash: 8yEFF1MNlsRKs74/fi+3dMb5d+dLJ3drU0IwlTP+fus=) 2: i4GUQccJMDSp1GVqL202qyQDP-Q.crl (hash: dEa778x1aT/bRV/u3IHplD6LXS5WKqXJHIN0FvsO29M=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/dffb19-d467-4ee5-8cf6-f63d20a78f75/1/i4GUQccJMDSp1GVqL202qyQDP-Q.crl rsync://rpki.ripe.net/repository/DEFAULT/61/dffb19-d467-4ee5-8cf6-f63d20a78f75/1/i4GUQccJMDSp1GVqL202qyQDP-Q.mft rsync://rpki.ripe.net/repository/DEFAULT/i4GUQccJMDSp1GVqL202qyQDP-Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:5a:5e:6e:f6:18:33:cc:ed:b0:04:26:d2:b0:79:ee Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8b819441c7093034a9d4656a2f6d36ab24033fe4 Validity Not Before: Dec 20 20:01:31 2025 GMT Not After : Dec 21 20:01:31 2025 GMT Subject: CN=5e86d301ae4557e3744e99784e6206362a9cdd36 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:41:fe:9a:0c:6b:01:40:33:5f:8e:1d:a0:f2: ee:05:54:b2:a0:e1:39:17:b8:be:a7:2f:13:70:bf: 9a:14:cc:a0:c7:85:da:3c:de:60:0f:e3:67:90:18: d4:84:31:5c:41:cb:e8:10:d3:67:4a:60:5a:d0:8d: 4a:eb:aa:2e:81:19:01:86:71:06:44:84:2a:82:4e: e4:10:71:77:73:db:52:fd:02:39:41:96:b5:5b:3d: 9f:98:16:fc:9f:2b:99:2d:29:3f:82:80:d3:15:08: 90:10:a2:f8:4c:8d:90:fb:58:d3:39:f9:35:d0:7c: 51:2f:85:a5:48:5d:df:08:37:bf:35:ec:89:27:dd: 6f:f8:a0:ef:1c:ca:77:ff:04:f7:ce:03:0f:59:c3: f2:c8:3a:9f:b2:e6:a6:21:b6:6c:1d:c1:6f:7e:6f: 8b:cf:7b:c1:20:c6:12:ac:ed:4d:47:f1:77:e7:fc: 2c:fe:0f:19:75:e5:3b:6d:1f:aa:be:06:a7:64:c4: 44:d9:77:74:72:75:f1:64:74:12:2d:13:2c:c0:98: 08:b9:1e:27:7e:79:d6:a0:6e:c8:45:c4:63:a6:17: 91:07:aa:62:4a:b4:df:d2:80:40:32:f0:4b:9e:06: ba:a8:aa:79:34:b2:ea:e6:72:5c:32:14:85:56:11: 72:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:86:D3:01:AE:45:57:E3:74:4E:99:78:4E:62:06:36:2A:9C:DD:36 X509v3 Authority Key Identifier: keyid:8B:81:94:41:C7:09:30:34:A9:D4:65:6A:2F:6D:36:AB:24:03:3F:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i4GUQccJMDSp1GVqL202qyQDP-Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/dffb19-d467-4ee5-8cf6-f63d20a78f75/1/i4GUQccJMDSp1GVqL202qyQDP-Q.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/61/dffb19-d467-4ee5-8cf6-f63d20a78f75/1/i4GUQccJMDSp1GVqL202qyQDP-Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a4:2a:c4:d3:85:dc:de:6d:08:29:0a:19:2d:3b:d7:e4:63:2f: 9c:bd:4e:b6:69:44:4f:ff:1f:05:b2:8f:bb:62:a5:f7:23:99: 8b:f6:fa:3d:a5:ee:cc:7d:79:17:a3:3e:d9:de:5d:90:f6:a1: 48:09:9b:7f:15:ca:06:a9:3d:45:9d:1a:6f:06:cf:61:4b:6b: ff:7f:e8:b3:99:79:33:ed:ca:ba:3a:fe:ca:09:b2:af:ed:bf: 9b:11:36:11:30:6c:3b:c6:5e:94:0a:90:46:c5:9a:04:90:d7: 12:ec:58:cc:87:70:84:dc:0d:4a:22:db:99:3f:51:cf:2e:ba: 5e:ca:c9:31:fd:69:64:02:1f:60:dc:69:69:b4:22:89:4d:33: 0d:b1:c2:90:fe:b7:21:fd:96:cc:64:16:df:29:2b:f8:05:9c: bc:9b:46:a3:93:56:2b:81:06:30:9a:ed:7f:86:e6:c3:09:b9: 62:e7:98:eb:5a:57:60:d4:f2:97:0e:5e:f5:7e:37:42:88:a3: b1:c4:26:e9:ff:3d:84:b0:d3:06:8c:45:9a:c1:2a:7a:56:60: 08:9e:d7:46:2b:8e:8b:09:76:9d:9e:5d:1b:bb:e1:d6:81:f4: 27:de:8f:5e:32:6b:66:26:ca:4b:d1:ae:7b:75:7a:e3:34:d9: db:a4:78:0a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9Wl5u9hgzzO2wBCbSsHnuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhiODE5NDQxYzcwOTMwMzRhOWQ0NjU2YTJmNmQzNmFiMjQw MzNmZTQwHhcNMjUxMjIwMjAwMTMxWhcNMjUxMjIxMjAwMTMxWjAzMTEwLwYDVQQD Eyg1ZTg2ZDMwMWFlNDU1N2UzNzQ0ZTk5Nzg0ZTYyMDYzNjJhOWNkZDM2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1UH+mgxrAUAzX44doPLuBVSyoOE5 F7i+py8TcL+aFMygx4XaPN5gD+NnkBjUhDFcQcvoENNnSmBa0I1K66ougRkBhnEG RIQqgk7kEHF3c9tS/QI5QZa1Wz2fmBb8nyuZLSk/goDTFQiQEKL4TI2Q+1jTOfk1 0HxRL4WlSF3fCDe/NeyJJ91v+KDvHMp3/wT3zgMPWcPyyDqfsuamIbZsHcFvfm+L z3vBIMYSrO1NR/F35/ws/g8ZdeU7bR+qvganZMRE2Xd0cnXxZHQSLRMswJgIuR4n fnnWoG7IRcRjpheRB6piSrTf0oBAMvBLnga6qKp5NLLq5nJcMhSFVhFy1wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFF6G0wGuRVfjdE6ZeE5iBjYqnN02MB8GA1UdIwQY MBaAFIuBlEHHCTA0qdRlai9tNqskAz/kMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaTRHVVFjY0pNRFNwMUdWcUwyMDJxeVFEUC1RLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS9kZmZiMTktZDQ2Ny00ZWU1LThjZjYt ZjYzZDIwYTc4Zjc1LzEvaTRHVVFjY0pNRFNwMUdWcUwyMDJxeVFEUC1RLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82MS9kZmZiMTktZDQ2Ny00ZWU1LThjZjYtZjYzZDIwYTc4Zjc1 LzEvaTRHVVFjY0pNRFNwMUdWcUwyMDJxeVFEUC1RLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApCrE04Xc 3m0IKQoZLTvX5GMvnL1OtmlET/8fBbKPu2Kl9yOZi/b6PaXuzH15F6M+2d5dkPah SAmbfxXKBqk9RZ0abwbPYUtr/3/os5l5M+3Kujr+ygmyr+2/mxE2ETBsO8ZelAqQ RsWaBJDXEuxYzIdwhNwNSiLbmT9Rzy66XsrJMf1pZAIfYNxpabQiiU0zDbHCkP63 If2WzGQW3ykr+AWcvJtGo5NWK4EGMJrtf4bmwwm5YueY61pXYNTylw5e9X43Qoij scQm6f89hLDTBoxFmsEqelZgCJ7XRiuOiwl2nZ5dG7vh1oH0J96PXjJrZibKS9Gu e3V64zTZ26R4Cg== -----END CERTIFICATE-----Generated at Sat Dec 20 23:06:46 2025 by rpki-client