This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/e85180-1910-4c42-a1f5-73202f0e1d03/1/1iMp2NflQZU-Eg_QX2bMbrqwaE0.mft File: 1iMp2NflQZU-Eg_QX2bMbrqwaE0.mft (raw, json) Hash identifier: TDPkW5N8oqUfKvpyUSFQFpQUR63JC+KxbkIkhQnftMs= Subject key identifier: 7B:83:E3:8D:99:27:E3:E3:09:B6:5D:A4:6A:3B:86:72:A3:DC:14:5A Authority key identifier: D6:23:29:D8:D7:E5:41:95:3E:12:0F:D0:5F:66:CC:6E:BA:B0:68:4D Certificate issuer: /CN=d62329d8d7e541953e120fd05f66cc6ebab0684d Certificate serial: 019B3D90D0E8A53FE55947654219CD74A403 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1iMp2NflQZU-Eg_QX2bMbrqwaE0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/e85180-1910-4c42-a1f5-73202f0e1d03/1/1iMp2NflQZU-Eg_QX2bMbrqwaE0.mft Manifest number: 178D Signing time: Sat 20 Dec 2025 21:00:59 +0000 Manifest this update: Sat 20 Dec 2025 21:00:59 +0000 Manifest next update: Sun 21 Dec 2025 21:00:59 +0000 Files and hashes: 1: 1iMp2NflQZU-Eg_QX2bMbrqwaE0.crl (hash: 82zUVEIC7pccguMlw8wE0teP/oD3ZXMnFlZSk9YRhHo=) 2: 4Al3Y1ZBZBCUxchwU91f_Xxn0AU.roa (hash: 0wR+Vye4jZb7FKOlhaY4DjYZccJb4NlRZOZozqrRK6g=) 3: 8WExy4twgMjUhhd6ZwwuMmQy8hc.roa (hash: DEuWlnE+ezZMUM7awLwZ5+QzOvWVXlr73rgH56B1SXs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/e85180-1910-4c42-a1f5-73202f0e1d03/1/1iMp2NflQZU-Eg_QX2bMbrqwaE0.crl rsync://rpki.ripe.net/repository/DEFAULT/a9/e85180-1910-4c42-a1f5-73202f0e1d03/1/1iMp2NflQZU-Eg_QX2bMbrqwaE0.mft rsync://rpki.ripe.net/repository/DEFAULT/1iMp2NflQZU-Eg_QX2bMbrqwaE0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 19:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:90:d0:e8:a5:3f:e5:59:47:65:42:19:cd:74:a4:03 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d62329d8d7e541953e120fd05f66cc6ebab0684d Validity Not Before: Dec 20 21:00:59 2025 GMT Not After : Dec 21 21:00:59 2025 GMT Subject: CN=7b83e38d9927e3e309b65da46a3b8672a3dc145a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:24:62:ae:0f:3f:73:09:98:cf:8b:6b:47:dd: d3:87:e7:82:c7:ee:47:c2:23:26:b0:78:c4:1a:03: a2:9b:bb:80:fb:41:25:a2:7f:44:e7:5a:52:55:27: 87:13:d2:d9:5e:41:92:87:fe:a1:f6:53:5c:98:3d: c5:d3:08:2d:ba:c0:7f:c9:dd:da:e6:21:8b:53:3d: 36:f1:da:68:ee:d7:4c:9d:d8:46:55:b2:2a:49:de: 5e:40:fa:69:36:0c:ed:c9:89:06:75:7a:c4:13:64: 63:a1:67:78:03:f2:d9:8f:78:ef:40:2d:b9:40:bf: 12:ac:6c:99:18:b4:48:a5:56:e5:3a:bc:7b:6e:cd: 24:8e:fb:07:d6:ae:04:cb:29:68:71:c7:de:9a:9c: 69:c0:1a:a9:8b:78:73:4f:1d:96:cb:c9:61:b2:bc: 16:6a:2f:68:23:6c:bf:f0:98:41:97:17:8e:7d:fe: a8:97:c8:bb:bf:55:5b:0b:03:a1:42:31:d9:1d:64: 52:ca:6d:34:e9:86:eb:ab:80:8b:cf:bb:05:e9:af: bb:83:76:03:46:59:1e:39:5d:fc:c7:70:7c:b9:20: 0f:50:fb:15:67:c8:e2:f8:00:b9:40:74:3d:bd:c2: d1:bb:99:f3:22:0f:60:e9:95:e6:4a:cd:4a:50:1d: ae:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:83:E3:8D:99:27:E3:E3:09:B6:5D:A4:6A:3B:86:72:A3:DC:14:5A X509v3 Authority Key Identifier: keyid:D6:23:29:D8:D7:E5:41:95:3E:12:0F:D0:5F:66:CC:6E:BA:B0:68:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1iMp2NflQZU-Eg_QX2bMbrqwaE0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/e85180-1910-4c42-a1f5-73202f0e1d03/1/1iMp2NflQZU-Eg_QX2bMbrqwaE0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/e85180-1910-4c42-a1f5-73202f0e1d03/1/1iMp2NflQZU-Eg_QX2bMbrqwaE0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 91:7c:e0:53:83:73:dd:5e:11:0e:81:48:d6:86:86:a6:b4:d9: 14:e2:b5:ad:9d:ec:b7:b8:43:67:29:5b:58:31:63:f3:2e:7b: 97:a1:95:26:2a:78:fd:f4:45:c0:e4:07:b4:4e:c0:f4:a2:3e: a6:7f:8b:b8:c4:7f:aa:4c:b9:f7:27:fd:20:61:d4:bd:d5:8d: b7:2d:b8:7b:aa:2f:30:ed:61:2e:55:f1:cb:25:d0:4e:e3:d8: 4a:46:eb:6b:3d:0b:2a:d6:04:ef:49:a8:7b:32:90:22:8a:01: 44:db:ed:6d:12:ab:31:1e:ea:f7:ea:6b:92:a0:dd:dd:d0:f0: cf:83:5a:ef:2b:92:31:65:e0:00:21:a6:bb:f6:2f:82:e8:99: e2:de:a9:69:14:d8:a6:c2:e4:9a:f3:58:b3:0a:99:8d:2b:dc: bc:fa:b7:65:64:84:e9:eb:e3:42:8f:70:20:aa:01:7f:10:4d: c4:c8:6f:29:72:ef:d3:5c:92:d8:8f:c1:cc:98:95:4a:6a:85: 54:51:59:7d:1f:4e:75:9a:9f:0c:70:c8:77:a4:35:cf:17:5f: bb:5d:f5:99:ab:5e:51:cf:d6:02:64:3f:a0:73:4d:8f:d5:23: e2:6d:f8:c5:72:89:29:85:31:d7:ee:73:49:9b:b1:bc:95:f6: 3f:16:30:fb -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9kNDopT/lWUdlQhnNdKQDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ2MjMyOWQ4ZDdlNTQxOTUzZTEyMGZkMDVmNjZjYzZlYmFi MDY4NGQwHhcNMjUxMjIwMjEwMDU5WhcNMjUxMjIxMjEwMDU5WjAzMTEwLwYDVQQD Eyg3YjgzZTM4ZDk5MjdlM2UzMDliNjVkYTQ2YTNiODY3MmEzZGMxNDVhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxyRirg8/cwmYz4trR93Th+eCx+5H wiMmsHjEGgOim7uA+0Elon9E51pSVSeHE9LZXkGSh/6h9lNcmD3F0wgtusB/yd3a 5iGLUz028dpo7tdMndhGVbIqSd5eQPppNgztyYkGdXrEE2RjoWd4A/LZj3jvQC25 QL8SrGyZGLRIpVblOrx7bs0kjvsH1q4EyyloccfempxpwBqpi3hzTx2Wy8lhsrwW ai9oI2y/8JhBlxeOff6ol8i7v1VbCwOhQjHZHWRSym006Ybrq4CLz7sF6a+7g3YD RlkeOV38x3B8uSAPUPsVZ8ji+AC5QHQ9vcLRu5nzIg9g6ZXmSs1KUB2u1wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHuD442ZJ+PjCbZdpGo7hnKj3BRaMB8GA1UdIwQY MBaAFNYjKdjX5UGVPhIP0F9mzG66sGhNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMWlNcDJOZmxRWlUtRWdfUVgyYk1icnF3YUUwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOS9lODUxODAtMTkxMC00YzQyLWExZjUt NzMyMDJmMGUxZDAzLzEvMWlNcDJOZmxRWlUtRWdfUVgyYk1icnF3YUUwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hOS9lODUxODAtMTkxMC00YzQyLWExZjUtNzMyMDJmMGUxZDAz LzEvMWlNcDJOZmxRWlUtRWdfUVgyYk1icnF3YUUwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkXzgU4Nz 3V4RDoFI1oaGprTZFOK1rZ3st7hDZylbWDFj8y57l6GVJip4/fRFwOQHtE7A9KI+ pn+LuMR/qky59yf9IGHUvdWNty24e6ovMO1hLlXxyyXQTuPYSkbraz0LKtYE70mo ezKQIooBRNvtbRKrMR7q9+prkqDd3dDwz4Na7yuSMWXgACGmu/YvguiZ4t6paRTY psLkmvNYswqZjSvcvPq3ZWSE6evjQo9wIKoBfxBNxMhvKXLv01yS2I/BzJiVSmqF VFFZfR9OdZqfDHDId6Q1zxdfu131mateUc/WAmQ/oHNNj9Uj4m34xXKJKYUx1+5z SZuxvJX2PxYw+w== -----END CERTIFICATE-----Generated at Sun Dec 21 03:01:13 2025 by rpki-client