This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/60e376-993c-4baf-b590-6e6481e5765c/1/IFDfUfDlvIHbSwX0SfdDCNf8-i4.mft File: IFDfUfDlvIHbSwX0SfdDCNf8-i4.mft (raw, json) Hash identifier: fyeRaVA5Wn3UqO29Wt0Mk3odLz2tXJZBE5AWedBNJIo= Subject key identifier: 4B:55:55:82:39:AB:9D:BB:E9:2C:11:26:97:73:E1:84:27:24:2A:24 Authority key identifier: 20:50:DF:51:F0:E5:BC:81:DB:4B:05:F4:49:F7:43:08:D7:FC:FA:2E Certificate issuer: /CN=2050df51f0e5bc81db4b05f449f74308d7fcfa2e Certificate serial: 019B3AFE4CC1E7EF8451F96F79B3D5591CA6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IFDfUfDlvIHbSwX0SfdDCNf8-i4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/60e376-993c-4baf-b590-6e6481e5765c/1/IFDfUfDlvIHbSwX0SfdDCNf8-i4.mft Manifest number: 170F Signing time: Sat 20 Dec 2025 09:01:42 +0000 Manifest this update: Sat 20 Dec 2025 09:01:42 +0000 Manifest next update: Sun 21 Dec 2025 09:01:42 +0000 Files and hashes: 1: 5TmF660osVLf2yedLZYIouqKzCQ.roa (hash: svEuw+A3XrP85kyKwdSMhC87V3nCBDwlLWE+iKrkH+s=) 2: IFDfUfDlvIHbSwX0SfdDCNf8-i4.crl (hash: m0Sh0gYutEmjlQLq9koZYYRwPiShFARhZDp3n3envO0=) 3: QbfQw6PQWXMnUYTcNMeoW813ttw.roa (hash: g9TBhQ7bZYV+JTfg685xMP7NzWGbPIajKmZ/OPgHv/k=) 4: SqW3-Pav388bYoCFb9onFjXDUEM.roa (hash: rQ+0p4O5Q843ntXsLKc+VAqP1ejZ7AJIeWPPGt1vzco=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/60e376-993c-4baf-b590-6e6481e5765c/1/IFDfUfDlvIHbSwX0SfdDCNf8-i4.crl rsync://rpki.ripe.net/repository/DEFAULT/ca/60e376-993c-4baf-b590-6e6481e5765c/1/IFDfUfDlvIHbSwX0SfdDCNf8-i4.mft rsync://rpki.ripe.net/repository/DEFAULT/IFDfUfDlvIHbSwX0SfdDCNf8-i4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 09:01:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3a:fe:4c:c1:e7:ef:84:51:f9:6f:79:b3:d5:59:1c:a6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2050df51f0e5bc81db4b05f449f74308d7fcfa2e Validity Not Before: Dec 20 09:01:42 2025 GMT Not After : Dec 21 09:01:42 2025 GMT Subject: CN=4b55558239ab9dbbe92c11269773e18427242a24 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:5b:7d:c6:ed:53:07:c1:6d:e0:1c:c2:53:05: 3d:61:e9:ed:a4:b9:61:d7:7e:2f:a1:77:d5:7d:b6: 69:7e:13:05:5f:5d:fd:15:ec:c4:1e:06:f4:13:97: 6a:dd:ab:38:55:39:68:ec:7b:32:c5:ca:92:9d:23: 6f:74:98:61:30:a0:35:be:0d:c6:c1:9d:a7:b0:89: 87:06:70:b6:fa:73:2a:df:52:b9:a7:bd:2e:7c:49: b5:f7:43:b5:5f:e0:8a:86:58:b8:6e:7f:9b:12:09: 2f:c0:b2:6e:9b:9b:e8:30:35:39:83:44:08:c9:45: 23:11:35:10:49:47:70:54:cf:b4:fd:87:5e:7c:91: 89:ee:71:ac:83:3a:ef:88:04:c3:c2:0c:39:cb:f9: ed:2c:6a:51:cc:cc:d4:6b:ee:bf:2a:fb:2a:a3:6c: ad:23:d2:c0:c6:32:ee:cf:39:d4:ad:09:10:13:03: 08:69:5e:bf:73:de:be:a4:41:69:9e:70:93:5f:4e: ab:4b:ec:e8:99:74:47:dc:75:6b:94:6c:9a:f4:c6: 8a:ac:40:17:5a:b1:99:cb:37:90:8d:34:2d:5f:6d: f6:f1:11:d6:54:17:ad:55:82:d1:fb:8d:1e:4a:e5: 6b:7d:a5:db:79:0c:90:6f:11:2d:6a:fb:24:97:3d: bf:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:55:55:82:39:AB:9D:BB:E9:2C:11:26:97:73:E1:84:27:24:2A:24 X509v3 Authority Key Identifier: keyid:20:50:DF:51:F0:E5:BC:81:DB:4B:05:F4:49:F7:43:08:D7:FC:FA:2E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IFDfUfDlvIHbSwX0SfdDCNf8-i4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/60e376-993c-4baf-b590-6e6481e5765c/1/IFDfUfDlvIHbSwX0SfdDCNf8-i4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/60e376-993c-4baf-b590-6e6481e5765c/1/IFDfUfDlvIHbSwX0SfdDCNf8-i4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 35:18:9d:43:1d:cd:f7:92:1f:1c:07:de:10:9d:b4:75:01:b6: 9e:f9:68:69:01:e4:00:0f:3b:6f:b7:a3:37:1a:a8:33:1e:7e: 00:8d:52:35:6f:b3:48:59:63:b6:d4:d0:06:aa:a6:6a:b4:8d: 50:6d:78:32:66:ee:1d:a2:5c:e5:f2:04:bd:6d:f1:c1:b2:6b: 07:b5:01:cc:53:36:9c:87:89:90:c4:78:83:57:f4:da:1f:43: 22:48:3b:7c:65:75:ca:ba:1d:e7:de:20:b4:32:e9:50:84:2e: a9:01:dd:10:24:9b:84:b6:b9:46:e4:54:68:be:89:77:d4:db: c3:86:83:91:76:18:e8:f3:92:bf:d1:07:e8:dc:f0:2e:e9:30: 54:4e:79:59:f3:d4:61:03:f8:28:a8:a5:f3:c9:14:65:62:ac: 35:1b:44:d2:05:3c:b6:85:c8:c5:33:e6:4b:9a:3c:e4:16:98: 27:8a:2f:43:12:4d:84:ff:f3:9a:ec:5e:3d:aa:86:40:a3:cc: 4d:78:f3:a0:96:53:05:3b:f9:62:4a:c1:50:6b:b3:c5:b9:2f: 69:ac:18:c3:5b:bc:4a:df:0c:db:b7:f3:0e:90:24:88:a6:59: 5a:72:60:46:e1:4f:d7:47:75:b8:98:30:0f:e7:92:51:4f:fb: 0f:11:4a:19 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs6/kzB5++EUflvebPVWRymMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIwNTBkZjUxZjBlNWJjODFkYjRiMDVmNDQ5Zjc0MzA4ZDdm Y2ZhMmUwHhcNMjUxMjIwMDkwMTQyWhcNMjUxMjIxMDkwMTQyWjAzMTEwLwYDVQQD Eyg0YjU1NTU4MjM5YWI5ZGJiZTkyYzExMjY5NzczZTE4NDI3MjQyYTI0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAolt9xu1TB8Ft4BzCUwU9YentpLlh 134voXfVfbZpfhMFX139FezEHgb0E5dq3as4VTlo7HsyxcqSnSNvdJhhMKA1vg3G wZ2nsImHBnC2+nMq31K5p70ufEm190O1X+CKhli4bn+bEgkvwLJum5voMDU5g0QI yUUjETUQSUdwVM+0/YdefJGJ7nGsgzrviATDwgw5y/ntLGpRzMzUa+6/Kvsqo2yt I9LAxjLuzznUrQkQEwMIaV6/c96+pEFpnnCTX06rS+zomXRH3HVrlGya9MaKrEAX WrGZyzeQjTQtX2328RHWVBetVYLR+40eSuVrfaXbeQyQbxEtavsklz2/awIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEtVVYI5q5276SwRJpdz4YQnJCokMB8GA1UdIwQY MBaAFCBQ31Hw5byB20sF9En3QwjX/PouMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSUZEZlVmRGx2SUhiU3dYMFNmZERDTmY4LWk0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYS82MGUzNzYtOTkzYy00YmFmLWI1OTAt NmU2NDgxZTU3NjVjLzEvSUZEZlVmRGx2SUhiU3dYMFNmZERDTmY4LWk0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYS82MGUzNzYtOTkzYy00YmFmLWI1OTAtNmU2NDgxZTU3NjVj LzEvSUZEZlVmRGx2SUhiU3dYMFNmZERDTmY4LWk0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANRidQx3N 95IfHAfeEJ20dQG2nvloaQHkAA87b7ejNxqoMx5+AI1SNW+zSFljttTQBqqmarSN UG14MmbuHaJc5fIEvW3xwbJrB7UBzFM2nIeJkMR4g1f02h9DIkg7fGV1yrod594g tDLpUIQuqQHdECSbhLa5RuRUaL6Jd9Tbw4aDkXYY6POSv9EH6NzwLukwVE55WfPU YQP4KKil88kUZWKsNRtE0gU8toXIxTPmS5o85BaYJ4ovQxJNhP/zmuxePaqGQKPM TXjzoJZTBTv5YkrBUGuzxbkvaawYw1u8St8M27fzDpAkiKZZWnJgRuFP10d1uJgw D+eSUU/7DxFKGQ== -----END CERTIFICATE-----Generated at Sat Dec 20 18:41:42 2025 by rpki-client