This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/b75b92-f1c7-4b56-9a9f-9a2f796c9477/1/iNXICzWHMs8ezuzy9b3Iqz3Bga4.mft File: iNXICzWHMs8ezuzy9b3Iqz3Bga4.mft (raw, json) Hash identifier: 47Ezp3LcQaOwAC+A/ma1olk+v6YjjSrlwDU3XT49MzU= Subject key identifier: 18:B7:E0:10:E1:02:EA:5C:D7:7A:02:C6:8D:35:41:A3:F6:DC:94:F5 Authority key identifier: 88:D5:C8:0B:35:87:32:CF:1E:CE:EC:F2:F5:BD:C8:AB:3D:C1:81:AE Certificate issuer: /CN=88d5c80b358732cf1eceecf2f5bdc8ab3dc181ae Certificate serial: 019B3CEBE790D88671EC618978345399FC13 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iNXICzWHMs8ezuzy9b3Iqz3Bga4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/b75b92-f1c7-4b56-9a9f-9a2f796c9477/1/iNXICzWHMs8ezuzy9b3Iqz3Bga4.mft Manifest number: 06F6 Signing time: Sat 20 Dec 2025 18:00:51 +0000 Manifest this update: Sat 20 Dec 2025 18:00:51 +0000 Manifest next update: Sun 21 Dec 2025 18:00:51 +0000 Files and hashes: 1: NOTlqU2dG5SZUtFWrRvKPCIYT_I.roa (hash: fMBaaIac4pSZ5FYQhcUdq0rjdRPBorC9IDyKulvOrp0=) 2: iNXICzWHMs8ezuzy9b3Iqz3Bga4.crl (hash: E3Bz/5M3pyP7s4NXHWNYrpQe/HCumKaBqn7jzqFQhmY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/b75b92-f1c7-4b56-9a9f-9a2f796c9477/1/iNXICzWHMs8ezuzy9b3Iqz3Bga4.crl rsync://rpki.ripe.net/repository/DEFAULT/d8/b75b92-f1c7-4b56-9a9f-9a2f796c9477/1/iNXICzWHMs8ezuzy9b3Iqz3Bga4.mft rsync://rpki.ripe.net/repository/DEFAULT/iNXICzWHMs8ezuzy9b3Iqz3Bga4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 18:00:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:eb:e7:90:d8:86:71:ec:61:89:78:34:53:99:fc:13 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=88d5c80b358732cf1eceecf2f5bdc8ab3dc181ae Validity Not Before: Dec 20 18:00:51 2025 GMT Not After : Dec 21 18:00:51 2025 GMT Subject: CN=18b7e010e102ea5cd77a02c68d3541a3f6dc94f5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:fe:74:90:9c:5c:1d:47:5f:9c:5b:ce:e1:c7: 7b:c9:9b:a0:0d:0d:7f:09:27:b6:9c:c7:c4:8e:33: 99:9b:1f:d8:0f:5c:60:11:ce:69:d6:2c:d6:21:99: 04:ad:ed:f8:c4:73:91:67:f6:91:01:a9:e4:97:38: 56:15:24:92:20:53:d2:0c:7a:61:9c:b4:13:78:ae: 4f:77:1c:c6:ba:ad:44:0f:3d:91:6a:61:23:da:9e: 80:94:d6:e7:bd:88:a3:46:00:dd:b6:ae:d7:21:c2: d6:c5:e1:35:6e:c6:79:58:de:70:4a:61:4d:a5:55: a9:09:c5:42:76:98:0d:82:75:7c:33:98:ed:f1:4a: 6a:da:09:d0:b9:31:62:63:97:7f:da:2f:76:ad:94: 0b:3a:1d:6c:66:a9:2f:14:90:41:23:6e:cc:44:e6: 7b:0c:ac:2c:6c:c6:1a:b8:d5:eb:2f:70:9f:dc:30: e9:98:75:99:ac:8c:fe:ce:0f:e4:d2:78:ab:d3:89: 2a:1a:24:87:62:0c:c5:b5:61:f6:70:c3:00:87:27: 4a:cd:e4:40:ac:0b:53:35:6f:24:13:dd:51:22:63: 90:a9:cf:d0:ea:a5:b4:f6:69:72:14:1e:fd:b6:d4: 24:47:72:da:c8:3e:f4:10:60:b5:a7:2e:67:bf:3d: 20:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:B7:E0:10:E1:02:EA:5C:D7:7A:02:C6:8D:35:41:A3:F6:DC:94:F5 X509v3 Authority Key Identifier: keyid:88:D5:C8:0B:35:87:32:CF:1E:CE:EC:F2:F5:BD:C8:AB:3D:C1:81:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iNXICzWHMs8ezuzy9b3Iqz3Bga4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/b75b92-f1c7-4b56-9a9f-9a2f796c9477/1/iNXICzWHMs8ezuzy9b3Iqz3Bga4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/b75b92-f1c7-4b56-9a9f-9a2f796c9477/1/iNXICzWHMs8ezuzy9b3Iqz3Bga4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 04:bc:0f:3f:6b:68:1b:3f:f2:54:02:57:30:20:6b:99:2a:9e: 46:c4:d4:f4:48:e0:7e:5e:5b:5a:0f:ca:35:bf:3e:dc:e0:51: a6:40:42:53:33:f2:be:57:2c:35:a8:90:b4:1d:a1:0d:24:17: 87:07:86:a3:fb:d0:4d:7b:e8:34:be:e1:9e:f7:e1:b6:cb:d8: b3:a3:c2:38:af:35:49:64:36:27:ef:f5:aa:3e:a5:e5:27:fc: 4c:75:c7:80:ce:de:33:2b:08:d5:32:97:dd:29:b5:e8:9a:33: ca:9a:15:f1:90:4c:10:7e:f8:2b:52:ca:01:e1:b4:33:16:82: 14:cb:3d:35:b7:6d:03:8b:cc:93:5d:9c:e8:72:03:8f:c0:dd: e8:bf:de:3a:bd:ff:4e:f6:80:68:8c:61:8a:32:08:2f:6d:a2: 15:d7:96:66:79:4a:ea:49:5e:17:a0:9e:ce:bb:34:c0:34:f1: 1e:e2:0e:f1:08:a5:07:2e:cd:92:80:eb:6b:b4:cf:f9:5e:e9: 22:f2:a2:7d:84:70:88:b7:17:4b:bd:69:51:aa:fe:b4:6c:04: eb:01:45:0a:8a:d7:2f:04:6d:1d:6c:f3:f3:eb:42:6e:67:ae: 73:56:d7:f2:40:50:35:d1:d4:71:3b:61:8b:26:3b:81:41:1b: 00:1e:39:d1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs86+eQ2IZx7GGJeDRTmfwTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg4ZDVjODBiMzU4NzMyY2YxZWNlZWNmMmY1YmRjOGFiM2Rj MTgxYWUwHhcNMjUxMjIwMTgwMDUxWhcNMjUxMjIxMTgwMDUxWjAzMTEwLwYDVQQD EygxOGI3ZTAxMGUxMDJlYTVjZDc3YTAyYzY4ZDM1NDFhM2Y2ZGM5NGY1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6v50kJxcHUdfnFvO4cd7yZugDQ1/ CSe2nMfEjjOZmx/YD1xgEc5p1izWIZkEre34xHORZ/aRAanklzhWFSSSIFPSDHph nLQTeK5PdxzGuq1EDz2RamEj2p6AlNbnvYijRgDdtq7XIcLWxeE1bsZ5WN5wSmFN pVWpCcVCdpgNgnV8M5jt8Upq2gnQuTFiY5d/2i92rZQLOh1sZqkvFJBBI27MROZ7 DKwsbMYauNXrL3Cf3DDpmHWZrIz+zg/k0nir04kqGiSHYgzFtWH2cMMAhydKzeRA rAtTNW8kE91RImOQqc/Q6qW09mlyFB79ttQkR3LayD70EGC1py5nvz0gwwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBi34BDhAupc13oCxo01QaP23JT1MB8GA1UdIwQY MBaAFIjVyAs1hzLPHs7s8vW9yKs9wYGuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaU5YSUN6V0hNczhlenV6eTliM0lxejNCZ2E0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOC9iNzViOTItZjFjNy00YjU2LTlhOWYt OWEyZjc5NmM5NDc3LzEvaU5YSUN6V0hNczhlenV6eTliM0lxejNCZ2E0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kOC9iNzViOTItZjFjNy00YjU2LTlhOWYtOWEyZjc5NmM5NDc3 LzEvaU5YSUN6V0hNczhlenV6eTliM0lxejNCZ2E0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABLwPP2to Gz/yVAJXMCBrmSqeRsTU9Ejgfl5bWg/KNb8+3OBRpkBCUzPyvlcsNaiQtB2hDSQX hweGo/vQTXvoNL7hnvfhtsvYs6PCOK81SWQ2J+/1qj6l5Sf8THXHgM7eMysI1TKX 3Sm16JozypoV8ZBMEH74K1LKAeG0MxaCFMs9NbdtA4vMk12c6HIDj8Dd6L/eOr3/ TvaAaIxhijIIL22iFdeWZnlK6kleF6Cezrs0wDTxHuIO8QilBy7NkoDra7TP+V7p IvKifYRwiLcXS71pUar+tGwE6wFFCorXLwRtHWzz8+tCbmeuc1bX8kBQNdHUcTth iyY7gUEbAB450Q== -----END CERTIFICATE-----Generated at Sun Dec 21 04:05:52 2025 by rpki-client