This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/f9a3dd-5a61-4724-a5a3-5b0b05093e0c/1/0iMJPOFQh0AW15P0OfQ9LmRAw_I.mft File: 0iMJPOFQh0AW15P0OfQ9LmRAw_I.mft (raw, json) Hash identifier: AiYOGn3pdkzAc2X5jpMv/w8i1R5oBTElIlu16I24GUw= Subject key identifier: 42:4A:A6:B4:C0:E6:04:23:34:67:EA:2D:98:08:99:54:FB:50:65:E9 Authority key identifier: D2:23:09:3C:E1:50:87:40:16:D7:93:F4:39:F4:3D:2E:64:40:C3:F2 Certificate issuer: /CN=d223093ce150874016d793f439f43d2e6440c3f2 Certificate serial: 019B4EF24F83D2C339D023B1B9F86686FB1C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0iMJPOFQh0AW15P0OfQ9LmRAw_I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/f9a3dd-5a61-4724-a5a3-5b0b05093e0c/1/0iMJPOFQh0AW15P0OfQ9LmRAw_I.mft Manifest number: 178F Signing time: Wed 24 Dec 2025 06:01:01 +0000 Manifest this update: Wed 24 Dec 2025 06:01:01 +0000 Manifest next update: Thu 25 Dec 2025 06:01:01 +0000 Files and hashes: 1: 0iMJPOFQh0AW15P0OfQ9LmRAw_I.crl (hash: RVlKMr69SGC9disJuh6EpKAt5bZ08rMlS0ovkTp//m8=) 2: 8foZPawfC4Bge_VpnjQP50GOAg8.roa (hash: GRqVhwrx6ASLBDj77rYjcJvDM0QCQ1bVWMj8DIm3F+M=) 3: Qvc8RSbEXXaKTVJ-2F_YzL6RWqQ.roa (hash: a+7CPhduNeCdLfwErr+aJ4N+Kny/SpDPIbHNdyGUm+I=) 4: Yav_wTnthnhUJgVUNCqahhzwsSo.roa (hash: JhocbRWhMTwMsID+n4FCpeOKgy5OrWytCdlYeicraA4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/f9a3dd-5a61-4724-a5a3-5b0b05093e0c/1/0iMJPOFQh0AW15P0OfQ9LmRAw_I.crl rsync://rpki.ripe.net/repository/DEFAULT/bb/f9a3dd-5a61-4724-a5a3-5b0b05093e0c/1/0iMJPOFQh0AW15P0OfQ9LmRAw_I.mft rsync://rpki.ripe.net/repository/DEFAULT/0iMJPOFQh0AW15P0OfQ9LmRAw_I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 06:01:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4e:f2:4f:83:d2:c3:39:d0:23:b1:b9:f8:66:86:fb:1c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d223093ce150874016d793f439f43d2e6440c3f2 Validity Not Before: Dec 24 06:01:01 2025 GMT Not After : Dec 25 06:01:01 2025 GMT Subject: CN=424aa6b4c0e604233467ea2d98089954fb5065e9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:7e:5a:1b:42:19:90:2b:fb:56:44:6f:29:c3: 28:09:07:3e:87:a8:26:6c:c7:ec:a6:64:bb:01:d0: 63:b5:f6:2b:3e:9d:3c:f1:f6:fc:b2:e0:aa:0b:f7: 77:97:e3:4b:c1:a7:60:16:54:bc:7d:11:88:60:85: ce:95:69:19:28:92:96:17:54:1b:1c:da:69:50:bb: 76:cf:d4:79:31:33:0c:7c:88:da:07:1c:f7:e6:b8: fa:6b:26:46:6b:4a:c7:1f:e4:fa:0f:f3:fd:74:c7: 54:63:bd:a7:5a:d8:02:ed:79:88:c1:3d:66:ea:50: 02:1e:2c:e9:1a:e3:1d:f7:3d:a0:7e:99:7b:df:be: a3:8d:a6:32:42:2b:1e:64:e4:33:88:2b:a0:ec:fb: 49:e7:33:57:10:20:c7:77:f4:05:d1:11:19:31:c1: b0:16:7e:6c:28:81:39:19:b4:f6:bd:09:91:ae:08: f5:e6:e2:e9:ec:cb:f6:11:7c:52:c9:43:63:78:2f: 39:38:13:a2:ad:6f:b5:7f:a7:3a:1e:77:d2:ed:8e: a1:fc:4f:82:72:e7:73:a0:d0:76:bc:05:e3:f2:f9: f8:1f:22:69:14:15:0a:a1:33:49:18:51:d6:e9:ec: b0:8f:83:cf:90:dc:14:99:a0:4e:8e:be:a6:cc:83: 54:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:4A:A6:B4:C0:E6:04:23:34:67:EA:2D:98:08:99:54:FB:50:65:E9 X509v3 Authority Key Identifier: keyid:D2:23:09:3C:E1:50:87:40:16:D7:93:F4:39:F4:3D:2E:64:40:C3:F2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0iMJPOFQh0AW15P0OfQ9LmRAw_I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/f9a3dd-5a61-4724-a5a3-5b0b05093e0c/1/0iMJPOFQh0AW15P0OfQ9LmRAw_I.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/f9a3dd-5a61-4724-a5a3-5b0b05093e0c/1/0iMJPOFQh0AW15P0OfQ9LmRAw_I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9a:1b:86:3d:45:a0:d1:b3:fb:3c:a6:a0:2e:a9:d7:3e:9c:69: 5e:96:f6:5c:56:17:0a:cc:1e:48:46:10:f7:4a:e7:4c:88:0b: b2:10:e2:d8:39:3c:e1:87:ca:53:1e:db:33:84:05:02:b6:cf: 6f:9e:66:48:42:55:aa:6f:27:e2:e0:45:02:72:52:72:ae:44: b1:a5:54:60:68:b9:95:32:ed:15:00:78:47:4f:51:a7:99:01: c5:08:9c:42:67:60:ba:50:2e:9d:75:1d:3a:e6:c0:38:ef:11: f7:61:d1:c6:11:e7:34:fa:b3:04:85:7d:f9:41:44:1a:c6:88: 16:c4:60:1b:8a:74:d9:1e:bd:1b:83:ff:c0:a2:3d:8e:52:a0: 96:c6:e6:1a:3a:7e:6b:a6:9b:cf:71:22:9f:3c:8e:bf:41:5a: 73:5b:8a:c9:da:77:ba:1f:1f:9e:13:c8:2c:56:09:80:67:69: 1b:8b:4e:e4:04:f1:52:54:cb:42:c0:91:c2:d2:99:4a:09:ef: 05:54:b4:c7:3c:d6:97:66:fb:1d:76:6f:fc:8f:ed:cb:e7:ea: 43:71:81:c1:20:f6:38:cb:fb:3c:7e:7b:4a:2d:d8:8d:c1:1a: 30:77:93:48:2d:e6:a3:31:c4:83:3b:c9:6f:48:77:e9:b9:32: a8:6c:2f:6f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtO8k+D0sM50COxufhmhvscMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQyMjMwOTNjZTE1MDg3NDAxNmQ3OTNmNDM5ZjQzZDJlNjQ0 MGMzZjIwHhcNMjUxMjI0MDYwMTAxWhcNMjUxMjI1MDYwMTAxWjAzMTEwLwYDVQQD Eyg0MjRhYTZiNGMwZTYwNDIzMzQ2N2VhMmQ5ODA4OTk1NGZiNTA2NWU5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkH5aG0IZkCv7VkRvKcMoCQc+h6gm bMfspmS7AdBjtfYrPp088fb8suCqC/d3l+NLwadgFlS8fRGIYIXOlWkZKJKWF1Qb HNppULt2z9R5MTMMfIjaBxz35rj6ayZGa0rHH+T6D/P9dMdUY72nWtgC7XmIwT1m 6lACHizpGuMd9z2gfpl7376jjaYyQiseZOQziCug7PtJ5zNXECDHd/QF0REZMcGw Fn5sKIE5GbT2vQmRrgj15uLp7Mv2EXxSyUNjeC85OBOirW+1f6c6HnfS7Y6h/E+C cudzoNB2vAXj8vn4HyJpFBUKoTNJGFHW6eywj4PPkNwUmaBOjr6mzINUwwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEJKprTA5gQjNGfqLZgImVT7UGXpMB8GA1UdIwQY MBaAFNIjCTzhUIdAFteT9Dn0PS5kQMPyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMGlNSlBPRlFoMEFXMTVQME9mUTlMbVJBd19JLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYi9mOWEzZGQtNWE2MS00NzI0LWE1YTMt NWIwYjA1MDkzZTBjLzEvMGlNSlBPRlFoMEFXMTVQME9mUTlMbVJBd19JLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYi9mOWEzZGQtNWE2MS00NzI0LWE1YTMtNWIwYjA1MDkzZTBj LzEvMGlNSlBPRlFoMEFXMTVQME9mUTlMbVJBd19JLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmhuGPUWg 0bP7PKagLqnXPpxpXpb2XFYXCsweSEYQ90rnTIgLshDi2Dk84YfKUx7bM4QFArbP b55mSEJVqm8n4uBFAnJScq5EsaVUYGi5lTLtFQB4R09Rp5kBxQicQmdgulAunXUd OubAOO8R92HRxhHnNPqzBIV9+UFEGsaIFsRgG4p02R69G4P/wKI9jlKglsbmGjp+ a6abz3EinzyOv0Fac1uKydp3uh8fnhPILFYJgGdpG4tO5ATxUlTLQsCRwtKZSgnv BVS0xzzWl2b7HXZv/I/ty+fqQ3GBwSD2OMv7PH57Si3YjcEaMHeTSC3mozHEgzvJ b0h36bkyqGwvbw== -----END CERTIFICATE-----Generated at Wed Dec 24 15:46:14 2025 by rpki-client