This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/febb2e-f0da-4d74-b547-f7401b4e4b4a/1/iH0wEZNRUA8lmlfi_2hQeX0bTho.mft File: iH0wEZNRUA8lmlfi_2hQeX0bTho.mft (raw, json) Hash identifier: hTDSaTLhWTD4naIGtFhUpz4mj7lRYQiAVzLDh9i1hio= Subject key identifier: 62:9F:AA:7A:6A:87:B9:80:A5:71:98:2D:00:1D:E3:6F:C9:7E:69:C4 Authority key identifier: 88:7D:30:11:93:51:50:0F:25:9A:57:E2:FF:68:50:79:7D:1B:4E:1A Certificate issuer: /CN=887d30119351500f259a57e2ff6850797d1b4e1a Certificate serial: 019B424A18F8855C89D489694F75D4B43C43 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iH0wEZNRUA8lmlfi_2hQeX0bTho.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/febb2e-f0da-4d74-b547-f7401b4e4b4a/1/iH0wEZNRUA8lmlfi_2hQeX0bTho.mft Manifest number: 178D Signing time: Sun 21 Dec 2025 19:01:50 +0000 Manifest this update: Sun 21 Dec 2025 19:01:50 +0000 Manifest next update: Mon 22 Dec 2025 19:01:50 +0000 Files and hashes: 1: iH0wEZNRUA8lmlfi_2hQeX0bTho.crl (hash: mngvoAOEdqwYQ2kNdutmvFzJzjSwAHEZ8QBft5AGQYI=) 2: qABhsOLWjcCV2-NCnGtwC8QlYyU.roa (hash: md9z/89P3sn3nXo5h/larqHDUL4eXCPfvLewxfl/iTY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/febb2e-f0da-4d74-b547-f7401b4e4b4a/1/iH0wEZNRUA8lmlfi_2hQeX0bTho.crl rsync://rpki.ripe.net/repository/DEFAULT/68/febb2e-f0da-4d74-b547-f7401b4e4b4a/1/iH0wEZNRUA8lmlfi_2hQeX0bTho.mft rsync://rpki.ripe.net/repository/DEFAULT/iH0wEZNRUA8lmlfi_2hQeX0bTho.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 13:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:42:4a:18:f8:85:5c:89:d4:89:69:4f:75:d4:b4:3c:43 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=887d30119351500f259a57e2ff6850797d1b4e1a Validity Not Before: Dec 21 19:01:50 2025 GMT Not After : Dec 22 19:01:50 2025 GMT Subject: CN=629faa7a6a87b980a571982d001de36fc97e69c4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:0b:57:7d:e8:b8:db:93:a7:ed:0d:92:15:4b: 29:73:c4:39:42:e0:2c:c2:fb:a7:6e:97:83:a6:65: d2:3a:ed:7b:05:f8:7a:f0:7e:98:91:be:fb:56:26: 66:82:52:16:c0:ff:9f:92:84:9e:02:d6:d8:c0:d7: df:8b:4a:a3:a3:c1:e0:0d:23:4c:cb:93:3d:30:b7: b4:c3:21:f7:4f:fb:9f:e1:62:72:e5:8c:35:d9:a3: c0:6e:3c:8e:6a:2c:56:db:aa:f1:98:b5:66:1e:77: 2a:3c:09:ce:e5:eb:72:42:ae:5a:77:0a:53:6a:e0: 67:23:71:84:8e:13:58:69:89:c8:a1:65:52:69:25: 1b:f0:04:3b:e4:99:5b:d1:d9:84:75:c3:91:55:7a: 4c:1d:7b:ca:f4:d3:9a:c1:86:d2:c6:8a:b4:37:56: 24:58:79:69:de:39:a1:b3:2c:50:7b:78:aa:8e:4c: 20:5d:ae:98:af:d8:d9:bb:a3:7a:a3:ec:aa:46:fd: 25:33:30:86:79:ce:a8:f6:0a:c0:7b:ff:7b:51:28: 60:58:08:72:ed:ad:b8:1f:3a:7e:a0:ef:09:45:a4: e1:24:f3:5c:2b:a5:c8:ec:77:48:78:f8:73:ac:7a: 4e:63:65:e8:17:28:ec:34:03:d9:6a:d5:57:71:ca: 10:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:9F:AA:7A:6A:87:B9:80:A5:71:98:2D:00:1D:E3:6F:C9:7E:69:C4 X509v3 Authority Key Identifier: keyid:88:7D:30:11:93:51:50:0F:25:9A:57:E2:FF:68:50:79:7D:1B:4E:1A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iH0wEZNRUA8lmlfi_2hQeX0bTho.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/febb2e-f0da-4d74-b547-f7401b4e4b4a/1/iH0wEZNRUA8lmlfi_2hQeX0bTho.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/68/febb2e-f0da-4d74-b547-f7401b4e4b4a/1/iH0wEZNRUA8lmlfi_2hQeX0bTho.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3b:01:17:16:b6:7a:dc:be:d4:db:9a:e7:97:5d:21:10:e0:9b: 7c:59:c7:8f:63:19:73:ac:77:f0:02:ec:61:4c:0f:48:95:55: b2:cc:7e:1d:45:71:13:cc:21:9c:bf:c3:30:48:d4:49:f3:3e: 14:fe:d9:10:b2:3f:31:b3:32:b2:2e:97:b0:85:f2:fc:e6:05: 20:d3:37:64:1b:c8:0a:d4:1f:d5:0e:53:7f:db:38:6a:53:46: 84:a1:bf:6e:a6:3d:2e:99:22:1b:e5:74:42:57:56:5b:e7:55: 0a:cc:58:08:6b:eb:cf:87:53:00:c9:dd:85:c4:fe:d1:e9:d0: ac:75:6d:69:83:4b:f4:20:95:4c:e2:68:12:09:4b:1d:ed:b5: f6:56:68:2d:df:9e:a0:cf:cd:d1:ad:e0:38:6e:c0:5f:64:2e: 68:e4:54:dc:62:e4:de:b3:42:db:7a:c3:1b:2b:42:92:52:ed: 5f:02:4a:9b:08:92:5c:08:8f:38:f9:29:86:6e:98:37:fb:24: df:c3:d2:97:35:f0:a0:7a:c1:45:a2:3c:92:c7:aa:06:82:da: 38:97:fa:d3:50:20:9f:ec:8b:a0:d0:b2:70:bf:dc:3d:b2:33: 56:ac:a8:85:d3:96:36:99:71:a5:81:ba:f7:b1:48:f3:b6:0c: 3f:d0:fd:6e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtCShj4hVyJ1IlpT3XUtDxDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg4N2QzMDExOTM1MTUwMGYyNTlhNTdlMmZmNjg1MDc5N2Qx YjRlMWEwHhcNMjUxMjIxMTkwMTUwWhcNMjUxMjIyMTkwMTUwWjAzMTEwLwYDVQQD Eyg2MjlmYWE3YTZhODdiOTgwYTU3MTk4MmQwMDFkZTM2ZmM5N2U2OWM0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuAtXfei425On7Q2SFUspc8Q5QuAs wvunbpeDpmXSOu17Bfh68H6Ykb77ViZmglIWwP+fkoSeAtbYwNffi0qjo8HgDSNM y5M9MLe0wyH3T/uf4WJy5Yw12aPAbjyOaixW26rxmLVmHncqPAnO5etyQq5adwpT auBnI3GEjhNYaYnIoWVSaSUb8AQ75Jlb0dmEdcORVXpMHXvK9NOawYbSxoq0N1Yk WHlp3jmhsyxQe3iqjkwgXa6Yr9jZu6N6o+yqRv0lMzCGec6o9grAe/97UShgWAhy 7a24Hzp+oO8JRaThJPNcK6XI7HdIePhzrHpOY2XoFyjsNAPZatVXccoQuwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGKfqnpqh7mApXGYLQAd42/JfmnEMB8GA1UdIwQY MBaAFIh9MBGTUVAPJZpX4v9oUHl9G04aMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaUgwd0VaTlJVQThsbWxmaV8yaFFlWDBiVGhvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OC9mZWJiMmUtZjBkYS00ZDc0LWI1NDct Zjc0MDFiNGU0YjRhLzEvaUgwd0VaTlJVQThsbWxmaV8yaFFlWDBiVGhvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82OC9mZWJiMmUtZjBkYS00ZDc0LWI1NDctZjc0MDFiNGU0YjRh LzEvaUgwd0VaTlJVQThsbWxmaV8yaFFlWDBiVGhvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOwEXFrZ6 3L7U25rnl10hEOCbfFnHj2MZc6x38ALsYUwPSJVVssx+HUVxE8whnL/DMEjUSfM+ FP7ZELI/MbMysi6XsIXy/OYFINM3ZBvICtQf1Q5Tf9s4alNGhKG/bqY9LpkiG+V0 QldWW+dVCsxYCGvrz4dTAMndhcT+0enQrHVtaYNL9CCVTOJoEglLHe219lZoLd+e oM/N0a3gOG7AX2QuaORU3GLk3rNC23rDGytCklLtXwJKmwiSXAiPOPkphm6YN/sk 38PSlzXwoHrBRaI8kseqBoLaOJf601Agn+yLoNCycL/cPbIzVqyohdOWNplxpYG6 97FI87YMP9D9bg== -----END CERTIFICATE-----Generated at Sun Dec 21 22:05:23 2025 by rpki-client