This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/981816-8860-4c2e-adf6-0d0bf2b56d59/1/iXO4_LiuetyaeZnhNn25WphaweY.mft File: iXO4_LiuetyaeZnhNn25WphaweY.mft (raw, json) Hash identifier: MnVAAG2lBZHpbWroHvOSeWXpHnrbmSxmQto5W9ENUHs= Subject key identifier: F7:A4:43:B5:12:24:52:52:49:85:06:5B:5B:0C:5E:6B:08:94:F8:0A Authority key identifier: 89:73:B8:FC:B8:AE:7A:DC:9A:79:99:E1:36:7D:B9:5A:98:5A:C1:E6 Certificate issuer: /CN=8973b8fcb8ae7adc9a7999e1367db95a985ac1e6 Certificate serial: 019B3DC7F1A05EAF693C30A59D6B3F91E1A5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iXO4_LiuetyaeZnhNn25WphaweY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/981816-8860-4c2e-adf6-0d0bf2b56d59/1/iXO4_LiuetyaeZnhNn25WphaweY.mft Manifest number: 171A Signing time: Sat 20 Dec 2025 22:01:12 +0000 Manifest this update: Sat 20 Dec 2025 22:01:12 +0000 Manifest next update: Sun 21 Dec 2025 22:01:12 +0000 Files and hashes: 1: h4rlWsGQyp7l9eg6oqaTJSAFMT8.roa (hash: uarWJUMCX+17tjbtXPupyY/SCv5UIEMVh4slAsONpPQ=) 2: iXO4_LiuetyaeZnhNn25WphaweY.crl (hash: km/jvEOP3OZktpaFBwvSWSsfiEr86/rWhVBxcIxG7FI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/981816-8860-4c2e-adf6-0d0bf2b56d59/1/iXO4_LiuetyaeZnhNn25WphaweY.crl rsync://rpki.ripe.net/repository/DEFAULT/d0/981816-8860-4c2e-adf6-0d0bf2b56d59/1/iXO4_LiuetyaeZnhNn25WphaweY.mft rsync://rpki.ripe.net/repository/DEFAULT/iXO4_LiuetyaeZnhNn25WphaweY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 19:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:c7:f1:a0:5e:af:69:3c:30:a5:9d:6b:3f:91:e1:a5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8973b8fcb8ae7adc9a7999e1367db95a985ac1e6 Validity Not Before: Dec 20 22:01:12 2025 GMT Not After : Dec 21 22:01:12 2025 GMT Subject: CN=f7a443b5122452524985065b5b0c5e6b0894f80a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:f7:90:78:0b:9c:14:f9:fe:31:10:91:8a:f4: 33:e2:e2:81:a1:1a:c7:cc:41:66:71:ba:fc:8d:f3: 34:ec:59:53:54:2d:25:d6:b6:2f:90:2c:20:33:a5: cd:7c:72:dc:fa:86:39:04:2f:39:cd:83:56:9d:3c: 52:61:2f:9a:cd:c5:d7:62:bd:fc:85:29:61:b0:7e: 66:94:57:19:de:41:04:78:0b:d4:f8:04:5a:96:71: 4d:11:ad:12:4d:6c:c1:cf:61:ab:2a:07:9c:84:92: 97:5f:89:35:87:02:f7:ff:7c:35:b9:33:11:fd:81: 40:25:90:80:a6:f2:68:17:b9:5e:18:b2:e0:5f:1a: 50:1e:f6:26:a2:6e:1b:ca:67:e2:da:4a:43:55:e3: 44:5b:92:98:90:eb:cc:48:71:06:32:81:3b:d6:61: e8:06:34:16:24:2d:6a:cc:fe:cf:ea:69:6e:09:70: 4b:43:48:e1:6c:cf:e3:4f:cf:f1:77:4d:8b:64:de: b1:ce:9c:9a:95:36:4e:e3:a6:6f:b3:31:88:53:7c: 86:3f:40:7a:c0:14:4a:aa:ce:51:81:a1:8e:4c:72: 21:90:21:79:70:c9:fa:b2:13:51:43:96:d3:82:62: a2:3f:4b:0b:69:09:af:43:6b:38:65:1b:6d:58:d6: c7:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:A4:43:B5:12:24:52:52:49:85:06:5B:5B:0C:5E:6B:08:94:F8:0A X509v3 Authority Key Identifier: keyid:89:73:B8:FC:B8:AE:7A:DC:9A:79:99:E1:36:7D:B9:5A:98:5A:C1:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iXO4_LiuetyaeZnhNn25WphaweY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/981816-8860-4c2e-adf6-0d0bf2b56d59/1/iXO4_LiuetyaeZnhNn25WphaweY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/981816-8860-4c2e-adf6-0d0bf2b56d59/1/iXO4_LiuetyaeZnhNn25WphaweY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0c:8f:c3:fb:8f:2a:c0:2c:2a:ce:d9:61:a1:25:8f:f2:8b:3f: e1:19:22:f5:f1:e1:7d:a1:55:3f:68:9e:5c:4e:33:bf:f2:b0: a8:b3:c8:f8:32:34:d6:32:99:bd:a2:02:77:18:53:ad:eb:0d: 0f:81:d3:9a:c6:c3:58:c0:db:a5:be:3a:a7:58:30:0f:b5:06: 78:85:30:3c:11:72:78:15:2d:89:ce:1c:46:02:d7:bc:86:cc: 40:74:63:b8:2a:db:49:48:d2:19:7e:68:3c:6b:f4:65:76:5e: a9:4b:04:1e:f2:34:e4:3f:54:83:a4:22:a9:56:be:59:d3:49: bf:86:f9:8b:ba:30:83:25:7f:4c:8d:94:03:ab:d6:54:68:51: fd:55:2c:a2:c0:7f:07:68:7c:d4:3c:1f:f4:35:79:1d:15:c4: 5e:0b:66:d3:70:60:0e:0a:f0:1e:52:a3:0d:43:4d:d7:59:66: 6a:ab:1f:b3:88:ba:04:54:2c:01:cd:aa:ec:2d:8a:a1:18:52: e5:33:a3:61:3a:68:e8:a6:e3:f2:6f:e0:3f:16:20:b7:53:ed: d5:76:db:96:6f:ec:e1:ae:ae:ee:20:bd:6b:ff:df:ab:cc:ff: b5:62:23:d1:08:c5:c4:05:10:5d:96:eb:9f:67:2e:82:d6:4b: 83:bd:1c:48 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9x/GgXq9pPDClnWs/keGlMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg5NzNiOGZjYjhhZTdhZGM5YTc5OTllMTM2N2RiOTVhOTg1 YWMxZTYwHhcNMjUxMjIwMjIwMTEyWhcNMjUxMjIxMjIwMTEyWjAzMTEwLwYDVQQD EyhmN2E0NDNiNTEyMjQ1MjUyNDk4NTA2NWI1YjBjNWU2YjA4OTRmODBhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoveQeAucFPn+MRCRivQz4uKBoRrH zEFmcbr8jfM07FlTVC0l1rYvkCwgM6XNfHLc+oY5BC85zYNWnTxSYS+azcXXYr38 hSlhsH5mlFcZ3kEEeAvU+ARalnFNEa0STWzBz2GrKgechJKXX4k1hwL3/3w1uTMR /YFAJZCApvJoF7leGLLgXxpQHvYmom4bymfi2kpDVeNEW5KYkOvMSHEGMoE71mHo BjQWJC1qzP7P6mluCXBLQ0jhbM/jT8/xd02LZN6xzpyalTZO46ZvszGIU3yGP0B6 wBRKqs5RgaGOTHIhkCF5cMn6shNRQ5bTgmKiP0sLaQmvQ2s4ZRttWNbHPwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPekQ7USJFJSSYUGW1sMXmsIlPgKMB8GA1UdIwQY MBaAFIlzuPy4rnrcmnmZ4TZ9uVqYWsHmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaVhPNF9MaXVldHlhZVpuaE5uMjVXcGhhd2VZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC85ODE4MTYtODg2MC00YzJlLWFkZjYt MGQwYmYyYjU2ZDU5LzEvaVhPNF9MaXVldHlhZVpuaE5uMjVXcGhhd2VZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMC85ODE4MTYtODg2MC00YzJlLWFkZjYtMGQwYmYyYjU2ZDU5 LzEvaVhPNF9MaXVldHlhZVpuaE5uMjVXcGhhd2VZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADI/D+48q wCwqztlhoSWP8os/4Rki9fHhfaFVP2ieXE4zv/KwqLPI+DI01jKZvaICdxhTresN D4HTmsbDWMDbpb46p1gwD7UGeIUwPBFyeBUtic4cRgLXvIbMQHRjuCrbSUjSGX5o PGv0ZXZeqUsEHvI05D9Ug6QiqVa+WdNJv4b5i7owgyV/TI2UA6vWVGhR/VUsosB/ B2h81Dwf9DV5HRXEXgtm03BgDgrwHlKjDUNN11lmaqsfs4i6BFQsAc2q7C2KoRhS 5TOjYTpo6Kbj8m/gPxYgt1Pt1Xbblm/s4a6u7iC9a//fq8z/tWIj0QjFxAUQXZbr n2cugtZLg70cSA== -----END CERTIFICATE-----Generated at Sun Dec 21 03:17:40 2025 by rpki-client