This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/21519e-b8dc-4240-aa78-8d218665027d/1/i992xUueaTXDCptMm6kwmsRw7AI.mft File: i992xUueaTXDCptMm6kwmsRw7AI.mft (raw, json) Hash identifier: HDne/8fVgqo9mCmErNeQ9cC7gzaZJJwLpTQbrzJf+vA= Subject key identifier: 53:03:08:9E:14:15:82:EA:3E:2A:EB:43:11:C0:7C:4B:9B:15:F5:1D Authority key identifier: 8B:DF:76:C5:4B:9E:69:35:C3:0A:9B:4C:9B:A9:30:9A:C4:70:EC:02 Certificate issuer: /CN=8bdf76c54b9e6935c30a9b4c9ba9309ac470ec02 Certificate serial: 019B39EB3CBFBC696A6F1B3D0292258B7AD9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i992xUueaTXDCptMm6kwmsRw7AI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/21519e-b8dc-4240-aa78-8d218665027d/1/i992xUueaTXDCptMm6kwmsRw7AI.mft Manifest number: 14C3 Signing time: Sat 20 Dec 2025 04:01:16 +0000 Manifest this update: Sat 20 Dec 2025 04:01:16 +0000 Manifest next update: Sun 21 Dec 2025 04:01:16 +0000 Files and hashes: 1: EyLJPLoc1mf1XKSvIsGtzo0HWV0.roa (hash: VgIFzU52fyCieiST8EuwqC7zFrwO10To39Vg1ZioEQ8=) 2: FpVk8TrExM7qh1EJO4WIiE3lVyE.roa (hash: WexubyfSWld4FcW4VTmRPdxVwZX9FjWbZF4QKeBNJNA=) 3: VmLWF2kLf7eTv8bwMXbk9b_Me2E.roa (hash: 1ItZnIffXoYbRBfY7mSWO6cvW2p6OOPwlCKSIhvogDA=) 4: i992xUueaTXDCptMm6kwmsRw7AI.crl (hash: 3xZ8UO34i8Nt++CzGflLxFV2fu5yS7RD3I7aUJJot3s=) 5: jhWC4VcKEFCcAy7tHeec7gAf82w.roa (hash: 7kjHvNbyfi414kEOc9U4Whd+kcEAvUzGwLY0UKhItcI=) 6: vtRikZxiMqZlac-W_YNJqMqHlm8.roa (hash: /xWSJ6cfywQEVV4RvpwuIXXt62aA58kIylH8Fa9/PsE=) 7: y33SBpnij0Kjvfz-rw1jNAzGe9M.roa (hash: +G4n27KUzm1afB/8sada6nItov0UFlI98LmgnjjGQ5c=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/21519e-b8dc-4240-aa78-8d218665027d/1/i992xUueaTXDCptMm6kwmsRw7AI.crl rsync://rpki.ripe.net/repository/DEFAULT/d9/21519e-b8dc-4240-aa78-8d218665027d/1/i992xUueaTXDCptMm6kwmsRw7AI.mft rsync://rpki.ripe.net/repository/DEFAULT/i992xUueaTXDCptMm6kwmsRw7AI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:39:eb:3c:bf:bc:69:6a:6f:1b:3d:02:92:25:8b:7a:d9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8bdf76c54b9e6935c30a9b4c9ba9309ac470ec02 Validity Not Before: Dec 20 04:01:16 2025 GMT Not After : Dec 21 04:01:16 2025 GMT Subject: CN=5303089e141582ea3e2aeb4311c07c4b9b15f51d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:27:d3:5c:9c:b0:e9:30:87:35:07:fb:75:22: 9e:64:61:3b:bd:8b:e0:ab:83:ca:6b:61:3d:ea:d1: e8:24:df:0a:04:f8:e0:ab:0a:6e:72:cb:64:c9:bf: 83:7a:64:fe:d6:4b:bf:b6:7a:35:02:5a:0a:61:6f: d2:7d:23:0e:24:82:0b:06:e2:27:2b:42:58:08:11: 1e:09:ad:fa:33:dd:2c:47:71:aa:5a:2b:ff:bb:62: 2f:6a:fb:f6:3d:41:0a:a9:e9:35:5e:a6:06:2f:d9: 31:23:45:a4:22:2d:47:64:92:ae:dd:89:c5:56:94: e4:18:23:62:d6:46:58:e9:e4:c7:0d:b1:c6:31:87: e9:bc:3a:c8:d5:c5:37:26:0f:46:aa:ae:a8:9b:b5: 9f:a8:7b:e1:8e:e9:0d:24:94:55:ad:b6:cb:5c:3c: 09:95:b0:f4:51:7f:26:5d:08:e6:cc:fe:70:c9:15: 65:c6:b9:96:78:11:0f:33:dc:db:69:3e:52:59:89: 88:da:16:40:a2:30:a7:9c:52:4e:48:b9:9f:6f:ba: 6e:fc:26:68:7b:e0:a2:ca:a4:30:2a:1f:c9:2d:c7: 37:1b:a3:8d:b6:a5:9c:f4:5b:1f:ec:83:7e:b6:5c: 14:85:7d:e4:50:a8:1d:9c:6a:1c:7a:d2:64:e9:9a: 71:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:03:08:9E:14:15:82:EA:3E:2A:EB:43:11:C0:7C:4B:9B:15:F5:1D X509v3 Authority Key Identifier: keyid:8B:DF:76:C5:4B:9E:69:35:C3:0A:9B:4C:9B:A9:30:9A:C4:70:EC:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i992xUueaTXDCptMm6kwmsRw7AI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/21519e-b8dc-4240-aa78-8d218665027d/1/i992xUueaTXDCptMm6kwmsRw7AI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/21519e-b8dc-4240-aa78-8d218665027d/1/i992xUueaTXDCptMm6kwmsRw7AI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 11:7b:36:a2:d1:dc:bf:e5:fe:9b:24:8f:7a:db:66:1e:c6:1e: fa:a6:a3:6c:db:88:29:cb:40:1f:68:3c:8c:70:da:da:b2:48: ef:f6:c0:a4:0b:d2:64:01:ca:7c:59:9c:91:a6:86:9d:a2:d6: ed:ac:42:37:5d:83:36:6b:d1:93:1d:96:82:ed:dd:63:cf:93: de:8b:8c:f4:7c:d2:be:fd:f5:79:92:b4:b4:40:ce:cb:95:eb: ee:86:b3:58:2c:4d:7a:7a:31:a0:a1:46:71:7a:f3:3a:4e:f5: 33:51:13:88:b0:cc:fb:50:77:21:05:12:ac:16:ef:86:87:5f: cf:d6:a4:5c:84:25:0c:5f:6c:e4:4e:fd:55:a1:bf:24:b7:c6: 7c:e5:c0:ab:41:e7:13:a2:5c:93:99:5d:11:6f:00:16:d6:3f: 4e:aa:c6:9c:94:3e:52:9f:2b:72:6c:3a:ec:81:93:46:45:29: 57:10:45:90:d4:52:66:7f:f9:c1:6c:23:f8:03:0a:5e:ac:0e: 01:ee:ec:72:7a:45:51:cb:66:cc:4d:98:96:10:6c:42:d2:14: eb:c2:d7:c8:91:1a:32:74:ef:c9:35:0e:c2:a9:6b:47:a9:77: 99:3a:4f:7d:b8:b8:6c:24:6c:27:5f:ac:d6:53:d8:e4:e8:c0: 6a:a1:0f:6d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs56zy/vGlqbxs9ApIli3rZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhiZGY3NmM1NGI5ZTY5MzVjMzBhOWI0YzliYTkzMDlhYzQ3 MGVjMDIwHhcNMjUxMjIwMDQwMTE2WhcNMjUxMjIxMDQwMTE2WjAzMTEwLwYDVQQD Eyg1MzAzMDg5ZTE0MTU4MmVhM2UyYWViNDMxMWMwN2M0YjliMTVmNTFkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAryfTXJyw6TCHNQf7dSKeZGE7vYvg q4PKa2E96tHoJN8KBPjgqwpucstkyb+DemT+1ku/tno1AloKYW/SfSMOJIILBuIn K0JYCBEeCa36M90sR3GqWiv/u2Ivavv2PUEKqek1XqYGL9kxI0WkIi1HZJKu3YnF VpTkGCNi1kZY6eTHDbHGMYfpvDrI1cU3Jg9Gqq6om7WfqHvhjukNJJRVrbbLXDwJ lbD0UX8mXQjmzP5wyRVlxrmWeBEPM9zbaT5SWYmI2hZAojCnnFJOSLmfb7pu/CZo e+CiyqQwKh/JLcc3G6ONtqWc9Fsf7IN+tlwUhX3kUKgdnGocetJk6ZpxEwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFMDCJ4UFYLqPirrQxHAfEubFfUdMB8GA1UdIwQY MBaAFIvfdsVLnmk1wwqbTJupMJrEcOwCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaTk5MnhVdWVhVFhEQ3B0TW02a3dtc1J3N0FJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS8yMTUxOWUtYjhkYy00MjQwLWFhNzgt OGQyMTg2NjUwMjdkLzEvaTk5MnhVdWVhVFhEQ3B0TW02a3dtc1J3N0FJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kOS8yMTUxOWUtYjhkYy00MjQwLWFhNzgtOGQyMTg2NjUwMjdk LzEvaTk5MnhVdWVhVFhEQ3B0TW02a3dtc1J3N0FJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEXs2otHc v+X+mySPettmHsYe+qajbNuIKctAH2g8jHDa2rJI7/bApAvSZAHKfFmckaaGnaLW 7axCN12DNmvRkx2Wgu3dY8+T3ouM9HzSvv31eZK0tEDOy5Xr7oazWCxNenoxoKFG cXrzOk71M1ETiLDM+1B3IQUSrBbvhodfz9akXIQlDF9s5E79VaG/JLfGfOXAq0Hn E6Jck5ldEW8AFtY/TqrGnJQ+Up8rcmw67IGTRkUpVxBFkNRSZn/5wWwj+AMKXqwO Ae7scnpFUctmzE2YlhBsQtIU68LXyJEaMnTvyTUOwqlrR6l3mTpPfbi4bCRsJ1+s 1lPY5OjAaqEPbQ== -----END CERTIFICATE-----Generated at Sat Dec 20 09:25:22 2025 by rpki-client