This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/387136-3c70-4619-8321-3d93fe6d20aa/1/hI2YANad664Rt_gWHDzogYH957Q.mft File: hI2YANad664Rt_gWHDzogYH957Q.mft (raw, json) Hash identifier: lbzXq9w48S5gICT9i+gWPZ6OLq5NY2mu4Cdwbw07gxQ= Subject key identifier: E3:3D:06:08:B4:A2:FB:8A:19:CC:31:D9:CA:DD:AB:92:C2:A1:E5:D5 Authority key identifier: 84:8D:98:00:D6:9D:EB:AE:11:B7:F8:16:1C:3C:E8:81:81:FD:E7:B4 Certificate issuer: /CN=848d9800d69debae11b7f8161c3ce88181fde7b4 Certificate serial: 019B3B6BC2D127DE1CCF3A5A9E31E26630F9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hI2YANad664Rt_gWHDzogYH957Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/387136-3c70-4619-8321-3d93fe6d20aa/1/hI2YANad664Rt_gWHDzogYH957Q.mft Manifest number: 0B80 Signing time: Sat 20 Dec 2025 11:01:16 +0000 Manifest this update: Sat 20 Dec 2025 11:01:16 +0000 Manifest next update: Sun 21 Dec 2025 11:01:16 +0000 Files and hashes: 1: Pi13Jn_f8QNwlYweA6cENA4uaSs.roa (hash: UZD7c+7NUs2opXS6uWJEcxhLpAXCSZYdWwe68q1uABI=) 2: hI2YANad664Rt_gWHDzogYH957Q.crl (hash: i8m1kgJ2SBAvt0kidUa75sgbZgjVeiPBwTrFkjjgzEg=) 3: kSeV1NXuoW2kMAhRuEJXNL0G3J8.roa (hash: BCpFIjkEeCfOQHY9iAYyAPzCmQqEp82NEt+xGk7yxzQ=) 4: sXoE76O0g9HbvTQdsrTuLQ6BEGY.roa (hash: 2c9XhIaXdBcwGvuorQuJKcEG+b0v5OcuRLvlracJLGY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/387136-3c70-4619-8321-3d93fe6d20aa/1/hI2YANad664Rt_gWHDzogYH957Q.crl rsync://rpki.ripe.net/repository/DEFAULT/bb/387136-3c70-4619-8321-3d93fe6d20aa/1/hI2YANad664Rt_gWHDzogYH957Q.mft rsync://rpki.ripe.net/repository/DEFAULT/hI2YANad664Rt_gWHDzogYH957Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 10:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3b:6b:c2:d1:27:de:1c:cf:3a:5a:9e:31:e2:66:30:f9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=848d9800d69debae11b7f8161c3ce88181fde7b4 Validity Not Before: Dec 20 11:01:16 2025 GMT Not After : Dec 21 11:01:16 2025 GMT Subject: CN=e33d0608b4a2fb8a19cc31d9caddab92c2a1e5d5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:95:9b:ea:1f:fd:0c:22:fb:37:a1:17:20:ab: e9:d9:0e:12:1d:a1:6e:99:96:c3:31:56:33:a5:f0: ca:69:46:35:0d:6a:ab:e5:e2:89:f4:3d:af:f7:cc: ca:e1:44:40:1d:45:5f:bb:49:92:85:94:81:79:eb: ca:d8:87:c0:fe:75:80:dd:06:48:d9:b0:9a:8e:24: 3d:67:f2:5c:f9:78:7d:7f:cf:52:74:37:eb:1b:fb: e7:db:2f:98:ed:6d:ef:af:9e:f1:2b:a3:c4:15:aa: 58:a1:05:db:e9:fd:6e:dd:53:4e:9b:0a:79:e9:10: ad:39:b3:ae:42:9b:09:cd:01:51:6e:7e:de:81:98: 9b:80:30:9b:95:d7:4a:85:5a:a8:9f:5b:f8:61:6c: 6a:3a:95:f6:56:0a:4c:c4:fa:1b:10:de:a9:9c:2e: 79:a5:96:ac:a6:f9:c5:ce:84:86:19:23:9a:1a:1d: 05:0f:08:86:c9:df:fe:2f:0e:dc:41:9c:a6:96:8c: 25:21:91:28:63:6c:0a:b2:a4:e4:c6:83:19:5e:e4: 42:47:58:b9:fc:96:69:d3:0e:e9:ba:90:8d:f5:6a: 94:b0:e1:63:60:7c:21:23:a2:b4:30:b1:a8:4a:76: cf:64:94:45:2a:ef:51:67:ef:8f:5e:4c:9e:72:23: 56:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:3D:06:08:B4:A2:FB:8A:19:CC:31:D9:CA:DD:AB:92:C2:A1:E5:D5 X509v3 Authority Key Identifier: keyid:84:8D:98:00:D6:9D:EB:AE:11:B7:F8:16:1C:3C:E8:81:81:FD:E7:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hI2YANad664Rt_gWHDzogYH957Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/387136-3c70-4619-8321-3d93fe6d20aa/1/hI2YANad664Rt_gWHDzogYH957Q.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/387136-3c70-4619-8321-3d93fe6d20aa/1/hI2YANad664Rt_gWHDzogYH957Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a6:0b:5d:e2:9a:a1:b6:fb:d3:5e:a7:6f:e6:9e:f9:0a:19:b8: 9d:7c:b4:e9:32:f5:6c:11:99:43:9f:ac:a9:bb:0d:d5:3b:ca: 2f:28:c3:9e:77:60:e2:d1:2d:06:21:30:ef:66:9e:27:dd:dd: 23:b5:0d:ed:62:dc:0b:03:76:9f:fa:c1:88:5c:22:e6:59:d4: c5:f3:02:27:6a:2a:77:68:3d:8c:b7:76:71:38:ac:3c:f6:92: f4:54:1b:e0:9f:6e:e6:27:4c:94:70:47:e7:4f:e8:aa:4a:d2: 87:9c:a8:05:75:a9:40:d2:eb:00:51:b9:59:c2:be:e0:2d:85: e2:e0:9a:eb:72:cf:b5:af:f2:44:88:07:32:59:ee:c8:7d:be: c3:c4:06:26:96:8b:a8:4e:0b:07:95:af:45:82:a6:ec:d1:96: b2:bd:7f:b3:de:0c:b4:50:92:36:80:fa:25:64:d9:d2:d3:4b: 96:1b:63:56:e5:f0:1e:f8:a2:76:c5:73:12:38:33:20:ae:53: f1:2b:de:e6:62:b4:24:2f:ed:d4:c6:08:3e:1a:22:f6:aa:e1: 75:ab:d8:30:47:ef:75:43:7c:db:c2:56:37:7b:fa:db:9b:a9: 7e:9b:5f:b5:04:e7:fc:4c:cc:99:61:9a:36:a9:90:a3:bd:5c: 8b:18:c3:5d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs7a8LRJ94czzpanjHiZjD5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg0OGQ5ODAwZDY5ZGViYWUxMWI3ZjgxNjFjM2NlODgxODFm ZGU3YjQwHhcNMjUxMjIwMTEwMTE2WhcNMjUxMjIxMTEwMTE2WjAzMTEwLwYDVQQD EyhlMzNkMDYwOGI0YTJmYjhhMTljYzMxZDljYWRkYWI5MmMyYTFlNWQ1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwJWb6h/9DCL7N6EXIKvp2Q4SHaFu mZbDMVYzpfDKaUY1DWqr5eKJ9D2v98zK4URAHUVfu0mShZSBeevK2IfA/nWA3QZI 2bCajiQ9Z/Jc+Xh9f89SdDfrG/vn2y+Y7W3vr57xK6PEFapYoQXb6f1u3VNOmwp5 6RCtObOuQpsJzQFRbn7egZibgDCblddKhVqon1v4YWxqOpX2VgpMxPobEN6pnC55 pZaspvnFzoSGGSOaGh0FDwiGyd/+Lw7cQZymlowlIZEoY2wKsqTkxoMZXuRCR1i5 /JZp0w7pupCN9WqUsOFjYHwhI6K0MLGoSnbPZJRFKu9RZ++PXkyeciNWnQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOM9Bgi0ovuKGcwx2crdq5LCoeXVMB8GA1UdIwQY MBaAFISNmADWneuuEbf4Fhw86IGB/ee0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaEkyWUFOYWQ2NjRSdF9nV0hEem9nWUg5NTdRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYi8zODcxMzYtM2M3MC00NjE5LTgzMjEt M2Q5M2ZlNmQyMGFhLzEvaEkyWUFOYWQ2NjRSdF9nV0hEem9nWUg5NTdRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYi8zODcxMzYtM2M3MC00NjE5LTgzMjEtM2Q5M2ZlNmQyMGFh LzEvaEkyWUFOYWQ2NjRSdF9nV0hEem9nWUg5NTdRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApgtd4pqh tvvTXqdv5p75Chm4nXy06TL1bBGZQ5+sqbsN1TvKLyjDnndg4tEtBiEw72aeJ93d I7UN7WLcCwN2n/rBiFwi5lnUxfMCJ2oqd2g9jLd2cTisPPaS9FQb4J9u5idMlHBH 50/oqkrSh5yoBXWpQNLrAFG5WcK+4C2F4uCa63LPta/yRIgHMlnuyH2+w8QGJpaL qE4LB5WvRYKm7NGWsr1/s94MtFCSNoD6JWTZ0tNLlhtjVuXwHviidsVzEjgzIK5T 8Sve5mK0JC/t1MYIPhoi9qrhdavYMEfvdUN828JWN3v625upfptftQTn/EzMmWGa NqmQo71cixjDXQ== -----END CERTIFICATE-----Generated at Sat Dec 20 18:07:39 2025 by rpki-client