This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/251360-c5c5-4a40-af72-04427a99f1c5/1/irPpZch0fi-l3dEoV2c_BgQu-kM.mft File: irPpZch0fi-l3dEoV2c_BgQu-kM.mft (raw, json) Hash identifier: UOyzg/S070S/NBx1iWwFTOAgv6FILNmqNIvjyBv41y4= Subject key identifier: 76:A5:D1:1F:1A:F2:E8:55:A3:09:80:A4:CE:AC:06:7A:19:77:64:F1 Authority key identifier: 8A:B3:E9:65:C8:74:7E:2F:A5:DD:D1:28:57:67:3F:06:04:2E:FA:43 Certificate issuer: /CN=8ab3e965c8747e2fa5ddd12857673f06042efa43 Certificate serial: 019B37C5EA8FB1ED3B3B191D1C75DEF9507A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/irPpZch0fi-l3dEoV2c_BgQu-kM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/251360-c5c5-4a40-af72-04427a99f1c5/1/irPpZch0fi-l3dEoV2c_BgQu-kM.mft Manifest number: 1719 Signing time: Fri 19 Dec 2025 18:01:15 +0000 Manifest this update: Fri 19 Dec 2025 18:01:15 +0000 Manifest next update: Sat 20 Dec 2025 18:01:15 +0000 Files and hashes: 1: 0R4cTom2N3Ffy-a36Ai0y_lwR7M.roa (hash: Nepk/Ut8yLvwSKOE+VPPTDkKY+eqYlx1ya61v2fExqo=) 2: DO5JxSipVW_jSyusVYE1KNyV5oM.roa (hash: fTaf/BSF7U37w4OYShE1QwyUlpAokZv3Xb6JIFlzFT0=) 3: MHydlao-1yBTTsCdp3bBe4bDnkc.roa (hash: OnwOrVTgc/R+eeJsST7imMdVV9F4opbfB++sLNDhiX8=) 4: irPpZch0fi-l3dEoV2c_BgQu-kM.crl (hash: N7+LCqBuwhbp1Y576LmSAtn1Gwv1UYg/C8DtMxoSdlI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/251360-c5c5-4a40-af72-04427a99f1c5/1/irPpZch0fi-l3dEoV2c_BgQu-kM.crl rsync://rpki.ripe.net/repository/DEFAULT/d7/251360-c5c5-4a40-af72-04427a99f1c5/1/irPpZch0fi-l3dEoV2c_BgQu-kM.mft rsync://rpki.ripe.net/repository/DEFAULT/irPpZch0fi-l3dEoV2c_BgQu-kM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 17:13:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:37:c5:ea:8f:b1:ed:3b:3b:19:1d:1c:75:de:f9:50:7a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8ab3e965c8747e2fa5ddd12857673f06042efa43 Validity Not Before: Dec 19 18:01:15 2025 GMT Not After : Dec 20 18:01:15 2025 GMT Subject: CN=76a5d11f1af2e855a30980a4ceac067a197764f1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:a7:52:5c:e8:bd:a5:a4:f5:6f:14:a8:d4:f5: fc:48:99:9c:2c:35:67:29:62:f1:86:89:0f:be:87: 77:da:d8:c4:de:9b:ec:f1:f8:0a:44:7b:96:8b:f4: 28:c7:e6:91:58:c8:a3:dc:6c:ae:6b:f9:42:1d:b4: ce:d5:14:98:83:21:c0:47:cf:c7:be:ea:fb:f1:40: 35:1a:0b:19:1d:94:fc:cb:ab:85:9c:28:f1:6a:c8: 46:88:18:37:77:7f:0d:89:fc:d8:8e:39:3e:68:25: b2:80:c3:03:db:70:0d:ed:c9:41:7a:e2:2a:f7:93: 0e:67:70:dd:39:ef:6c:e8:3a:9e:74:2c:9c:3f:1e: ad:8b:ef:d7:7c:ef:e7:76:e6:be:1e:72:85:7c:f5: bc:4e:1e:8b:c5:20:22:27:46:c6:77:00:9f:e2:30: 27:ad:ad:ab:28:38:80:9f:d4:54:f7:56:89:58:17: 37:14:58:59:c8:29:39:f0:ab:8c:ca:4c:1a:36:6a: 59:90:cc:52:ea:23:91:dc:2e:ea:82:05:59:51:1e: 15:b6:6a:18:a8:e2:b1:87:8b:c7:1d:ed:d3:65:61: 95:49:04:58:48:99:7a:af:db:a5:12:d7:22:8c:bd: 82:87:9d:7f:e6:24:6f:f2:38:98:2f:8c:ee:08:89: cc:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:A5:D1:1F:1A:F2:E8:55:A3:09:80:A4:CE:AC:06:7A:19:77:64:F1 X509v3 Authority Key Identifier: keyid:8A:B3:E9:65:C8:74:7E:2F:A5:DD:D1:28:57:67:3F:06:04:2E:FA:43 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/irPpZch0fi-l3dEoV2c_BgQu-kM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/251360-c5c5-4a40-af72-04427a99f1c5/1/irPpZch0fi-l3dEoV2c_BgQu-kM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/251360-c5c5-4a40-af72-04427a99f1c5/1/irPpZch0fi-l3dEoV2c_BgQu-kM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 55:78:35:52:8d:84:09:c2:03:b3:a6:53:31:c0:49:7d:7e:7d: 77:62:c4:62:83:5a:21:6d:47:d7:3e:68:55:33:27:62:0c:15: 02:18:b5:08:87:a9:d6:b3:73:ac:66:48:cb:b5:e8:0f:b5:cf: 2e:1d:ba:10:be:7a:87:c8:ef:2f:a3:a6:35:12:d2:9f:d5:ef: 82:07:7b:d3:b6:b9:b4:04:09:5e:47:df:ba:e1:fc:de:3e:90: 27:79:8d:33:fb:29:8f:38:f3:c2:d3:e5:c2:93:90:30:65:dc: 5e:0a:75:31:3c:88:e3:78:6d:26:ed:10:0c:bc:c5:de:5f:87: fb:b8:ad:be:00:6d:67:fe:01:f0:3e:fd:3c:a7:45:94:39:ec: 73:4b:b8:8e:b3:62:34:dd:23:3c:08:4d:07:5b:24:6e:cf:ed: c4:1f:d7:de:ce:b0:38:6c:47:df:07:0c:b5:97:9a:3f:7b:27: d1:15:1c:0f:fd:31:7a:cb:29:45:e1:ef:f8:3b:58:db:b7:a8: ac:10:5b:90:46:c7:a8:e8:ba:a5:80:61:08:ba:d9:32:66:c9: 13:11:bb:b6:fb:cb:1c:ad:62:11:75:17:4c:0f:e1:9e:95:36: ac:cc:1a:36:4e:99:94:0f:62:75:80:dd:69:3b:09:f5:e1:66: b9:ed:7b:ed -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs3xeqPse07OxkdHHXe+VB6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhhYjNlOTY1Yzg3NDdlMmZhNWRkZDEyODU3NjczZjA2MDQy ZWZhNDMwHhcNMjUxMjE5MTgwMTE1WhcNMjUxMjIwMTgwMTE1WjAzMTEwLwYDVQQD Eyg3NmE1ZDExZjFhZjJlODU1YTMwOTgwYTRjZWFjMDY3YTE5Nzc2NGYxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA26dSXOi9paT1bxSo1PX8SJmcLDVn KWLxhokPvod32tjE3pvs8fgKRHuWi/Qox+aRWMij3Gyua/lCHbTO1RSYgyHAR8/H vur78UA1GgsZHZT8y6uFnCjxashGiBg3d38NifzYjjk+aCWygMMD23AN7clBeuIq 95MOZ3DdOe9s6DqedCycPx6ti+/XfO/ndua+HnKFfPW8Th6LxSAiJ0bGdwCf4jAn ra2rKDiAn9RU91aJWBc3FFhZyCk58KuMykwaNmpZkMxS6iOR3C7qggVZUR4VtmoY qOKxh4vHHe3TZWGVSQRYSJl6r9ulEtcijL2Ch51/5iRv8jiYL4zuCInM2QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHal0R8a8uhVowmApM6sBnoZd2TxMB8GA1UdIwQY MBaAFIqz6WXIdH4vpd3RKFdnPwYELvpDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaXJQcFpjaDBmaS1sM2RFb1YyY19CZ1F1LWtNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNy8yNTEzNjAtYzVjNS00YTQwLWFmNzIt MDQ0MjdhOTlmMWM1LzEvaXJQcFpjaDBmaS1sM2RFb1YyY19CZ1F1LWtNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNy8yNTEzNjAtYzVjNS00YTQwLWFmNzItMDQ0MjdhOTlmMWM1 LzEvaXJQcFpjaDBmaS1sM2RFb1YyY19CZ1F1LWtNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVXg1Uo2E CcIDs6ZTMcBJfX59d2LEYoNaIW1H1z5oVTMnYgwVAhi1CIep1rNzrGZIy7XoD7XP Lh26EL56h8jvL6OmNRLSn9Xvggd707a5tAQJXkffuuH83j6QJ3mNM/spjzjzwtPl wpOQMGXcXgp1MTyI43htJu0QDLzF3l+H+7itvgBtZ/4B8D79PKdFlDnsc0u4jrNi NN0jPAhNB1skbs/txB/X3s6wOGxH3wcMtZeaP3sn0RUcD/0xesspReHv+DtY27eo rBBbkEbHqOi6pYBhCLrZMmbJExG7tvvLHK1iEXUXTA/hnpU2rMwaNk6ZlA9idYDd aTsJ9eFmue177Q== -----END CERTIFICATE-----Generated at Sat Dec 20 02:51:42 2025 by rpki-client