This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/55cf77-6394-4812-9fb5-291aaedd58cc/1/ihZhi3H_yA4cP0HtDfyJq16WP9I.mft File: ihZhi3H_yA4cP0HtDfyJq16WP9I.mft (raw, json) Hash identifier: kZhJoT7nJmXdGRAMEiOIxmCKHgwskKUPuNVSYFyFAvY= Subject key identifier: 7F:44:3C:09:DB:78:B9:23:83:D8:05:60:CA:0D:9A:A0:52:38:A5:FD Authority key identifier: 8A:16:61:8B:71:FF:C8:0E:1C:3F:41:ED:0D:FC:89:AB:5E:96:3F:D2 Certificate issuer: /CN=8a16618b71ffc80e1c3f41ed0dfc89ab5e963fd2 Certificate serial: 019B3D911D392D32A15DE91B25CDE53398D0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ihZhi3H_yA4cP0HtDfyJq16WP9I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/55cf77-6394-4812-9fb5-291aaedd58cc/1/ihZhi3H_yA4cP0HtDfyJq16WP9I.mft Manifest number: 178F Signing time: Sat 20 Dec 2025 21:01:18 +0000 Manifest this update: Sat 20 Dec 2025 21:01:18 +0000 Manifest next update: Sun 21 Dec 2025 21:01:18 +0000 Files and hashes: 1: ExfUqNEW3Lyq9Nl7Jq22WcfJ1rw.roa (hash: 6SjZfPEMGV4QZNr6XzSlmm+VNkfjjPfYSSMSKKIpL5E=) 2: ihZhi3H_yA4cP0HtDfyJq16WP9I.crl (hash: CODh442O0cPIEvMUhrTSnYqQvAmAaYIBuMvB18ryVoU=) 3: vuckuXbmedLIJWITtJ1gJzQY8X0.roa (hash: BujWwxtiu31OcVkERDwp6qXjCF/qZpedTzNgbY+R4ug=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/55cf77-6394-4812-9fb5-291aaedd58cc/1/ihZhi3H_yA4cP0HtDfyJq16WP9I.crl rsync://rpki.ripe.net/repository/DEFAULT/d4/55cf77-6394-4812-9fb5-291aaedd58cc/1/ihZhi3H_yA4cP0HtDfyJq16WP9I.mft rsync://rpki.ripe.net/repository/DEFAULT/ihZhi3H_yA4cP0HtDfyJq16WP9I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:91:1d:39:2d:32:a1:5d:e9:1b:25:cd:e5:33:98:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8a16618b71ffc80e1c3f41ed0dfc89ab5e963fd2 Validity Not Before: Dec 20 21:01:18 2025 GMT Not After : Dec 21 21:01:18 2025 GMT Subject: CN=7f443c09db78b92383d80560ca0d9aa05238a5fd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:bd:d9:9a:db:72:aa:fd:4c:90:07:8d:48:47: 42:23:4e:c9:2c:68:d9:04:ba:03:5b:7a:47:03:48: f0:76:82:31:63:2c:12:ef:ea:84:e1:62:ff:a4:12: 32:28:83:ea:2f:16:30:42:a7:e9:01:fb:b7:4b:43: 45:fd:f4:2c:62:3c:f2:d8:27:bc:86:3f:5c:14:21: 5a:66:0c:d6:0e:21:5a:2d:4d:a5:2b:b9:42:50:43: 5c:5d:d0:95:17:f0:fe:51:8c:94:6a:a2:e7:75:22: 7a:89:a9:85:8b:70:7c:c2:22:16:96:21:b9:4a:97: af:fb:9c:a8:c1:fa:2e:cd:b9:70:ed:bc:2e:93:30: e7:32:91:eb:61:8c:91:3b:54:fd:51:d6:17:82:c6: 9d:82:7c:fc:6c:51:c4:5e:4c:86:9a:4e:cb:8e:8a: 8f:0a:24:79:25:88:e0:d5:14:69:ca:7b:b5:3b:7d: 62:25:c6:c6:45:66:46:44:69:d5:62:91:7f:61:31: 9d:c8:b9:92:94:5f:81:fa:89:9e:dd:23:01:76:a9: e6:24:29:03:e0:57:22:0d:9f:e9:c1:6d:c3:e3:d5: a1:c3:8f:21:e3:5d:1f:2f:ac:ce:6f:1d:8b:4b:be: b0:52:88:b4:6e:95:fc:2a:8b:fd:a3:fe:79:00:5a: 25:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:44:3C:09:DB:78:B9:23:83:D8:05:60:CA:0D:9A:A0:52:38:A5:FD X509v3 Authority Key Identifier: keyid:8A:16:61:8B:71:FF:C8:0E:1C:3F:41:ED:0D:FC:89:AB:5E:96:3F:D2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ihZhi3H_yA4cP0HtDfyJq16WP9I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/55cf77-6394-4812-9fb5-291aaedd58cc/1/ihZhi3H_yA4cP0HtDfyJq16WP9I.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/55cf77-6394-4812-9fb5-291aaedd58cc/1/ihZhi3H_yA4cP0HtDfyJq16WP9I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9a:12:fa:c1:b1:d9:b1:95:54:8d:cc:6b:df:f4:0d:36:dc:6f: d1:f8:bf:52:7c:ad:72:49:73:5f:35:83:5a:ea:6b:a5:5d:48: 73:c2:de:06:80:0a:78:7d:08:08:96:8b:39:6b:57:67:18:6a: 77:08:75:ce:63:d3:32:7b:1b:51:0c:40:62:0c:0f:2f:17:68: bf:b2:25:d4:b1:d5:bf:1a:48:f7:88:a0:0c:ea:21:8d:a0:1c: 80:15:3e:dd:bf:a3:e2:9b:2f:1b:80:d6:87:b4:f3:49:cf:d0: 8d:2a:c6:92:cc:2c:47:89:4d:ad:ca:4e:73:4a:c9:1e:ee:39: 2c:a4:cc:52:4e:cc:14:fa:40:ab:3f:55:f0:ec:1e:dd:2b:a9: 27:d3:03:cf:11:eb:07:e9:01:c0:98:fb:ea:6c:84:aa:b4:f2: c5:3c:b6:77:90:30:fb:25:20:99:4c:1d:5e:0e:e1:3e:90:6d: 52:94:3b:09:66:5d:28:92:7a:f7:f9:2b:88:2e:28:db:1d:0a: 09:c2:d9:2b:e7:fd:c8:96:df:1b:db:21:e0:a7:c1:4a:ee:7f: 58:f4:74:3d:92:bc:1c:50:71:cb:c6:a2:c4:a7:c6:63:7d:25: d6:a0:a1:1d:e3:1c:d6:3e:c5:86:9b:6e:2e:7b:f6:d7:f0:d5: 40:05:04:dd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9kR05LTKhXekbJc3lM5jQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhhMTY2MThiNzFmZmM4MGUxYzNmNDFlZDBkZmM4OWFiNWU5 NjNmZDIwHhcNMjUxMjIwMjEwMTE4WhcNMjUxMjIxMjEwMTE4WjAzMTEwLwYDVQQD Eyg3ZjQ0M2MwOWRiNzhiOTIzODNkODA1NjBjYTBkOWFhMDUyMzhhNWZkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh73Zmttyqv1MkAeNSEdCI07JLGjZ BLoDW3pHA0jwdoIxYywS7+qE4WL/pBIyKIPqLxYwQqfpAfu3S0NF/fQsYjzy2Ce8 hj9cFCFaZgzWDiFaLU2lK7lCUENcXdCVF/D+UYyUaqLndSJ6iamFi3B8wiIWliG5 Spev+5yowfouzblw7bwukzDnMpHrYYyRO1T9UdYXgsadgnz8bFHEXkyGmk7LjoqP CiR5JYjg1RRpynu1O31iJcbGRWZGRGnVYpF/YTGdyLmSlF+B+ome3SMBdqnmJCkD 4FciDZ/pwW3D49Whw48h410fL6zObx2LS76wUoi0bpX8Kov9o/55AFolxwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFH9EPAnbeLkjg9gFYMoNmqBSOKX9MB8GA1UdIwQY MBaAFIoWYYtx/8gOHD9B7Q38iatelj/SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaWhaaGkzSF95QTRjUDBIdERmeUpxMTZXUDlJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNC81NWNmNzctNjM5NC00ODEyLTlmYjUt MjkxYWFlZGQ1OGNjLzEvaWhaaGkzSF95QTRjUDBIdERmeUpxMTZXUDlJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNC81NWNmNzctNjM5NC00ODEyLTlmYjUtMjkxYWFlZGQ1OGNj LzEvaWhaaGkzSF95QTRjUDBIdERmeUpxMTZXUDlJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmhL6wbHZ sZVUjcxr3/QNNtxv0fi/UnytcklzXzWDWuprpV1Ic8LeBoAKeH0ICJaLOWtXZxhq dwh1zmPTMnsbUQxAYgwPLxdov7Il1LHVvxpI94igDOohjaAcgBU+3b+j4psvG4DW h7TzSc/QjSrGkswsR4lNrcpOc0rJHu45LKTMUk7MFPpAqz9V8Owe3SupJ9MDzxHr B+kBwJj76myEqrTyxTy2d5Aw+yUgmUwdXg7hPpBtUpQ7CWZdKJJ69/kriC4o2x0K CcLZK+f9yJbfG9sh4KfBSu5/WPR0PZK8HFBxy8aixKfGY30l1qChHeMc1j7Fhptu Lnv21/DVQAUE3Q== -----END CERTIFICATE-----Generated at Sat Dec 20 22:51:04 2025 by rpki-client