This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/9b8d3b-0c03-4591-bd0f-87750d6f77a8/1/iHdQA_fZ6Obh70jbBnKOZo7Rh7w.mft File: iHdQA_fZ6Obh70jbBnKOZo7Rh7w.mft (raw, json) Hash identifier: YhaVQJtS70WQ4ckoBkGYAGGwDrnlAklElgWZE8llm60= Subject key identifier: B1:63:FF:70:20:60:1E:F9:D3:D1:5F:1A:57:F7:1C:98:11:70:F0:D9 Authority key identifier: 88:77:50:03:F7:D9:E8:E6:E1:EF:48:DB:06:72:8E:66:8E:D1:87:BC Certificate issuer: /CN=88775003f7d9e8e6e1ef48db06728e668ed187bc Certificate serial: 019B3D2393ADDE3FE1E1DA1A4A4689409586 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iHdQA_fZ6Obh70jbBnKOZo7Rh7w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/9b8d3b-0c03-4591-bd0f-87750d6f77a8/1/iHdQA_fZ6Obh70jbBnKOZo7Rh7w.mft Manifest number: 0E5A Signing time: Sat 20 Dec 2025 19:01:40 +0000 Manifest this update: Sat 20 Dec 2025 19:01:40 +0000 Manifest next update: Sun 21 Dec 2025 19:01:40 +0000 Files and hashes: 1: N-nPI1g49f7ETAzdIo5yjbOdZtM.roa (hash: qC00kLedLYSFjjH9iYQzP0HBmWb73ml/Yv/mqD1i4KU=) 2: S3WGMPY-OzezhDsk-gOqjIT9wqE.roa (hash: B0hQgvaTLIn8DwMEJturhomMZwtDUgE45NKruZhEvSo=) 3: fv0GFD_AZHwLWR5yvJcFyEMzZds.roa (hash: +P74mB+NlndUj38u1gR6So/MVR2zQW1aNy+V6Ba/PBg=) 4: iHdQA_fZ6Obh70jbBnKOZo7Rh7w.crl (hash: lMpv+WVgskfHYd/PSPQ8vO1ZUcEDW6uj6iKHeLm6JG8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/9b8d3b-0c03-4591-bd0f-87750d6f77a8/1/iHdQA_fZ6Obh70jbBnKOZo7Rh7w.crl rsync://rpki.ripe.net/repository/DEFAULT/db/9b8d3b-0c03-4591-bd0f-87750d6f77a8/1/iHdQA_fZ6Obh70jbBnKOZo7Rh7w.mft rsync://rpki.ripe.net/repository/DEFAULT/iHdQA_fZ6Obh70jbBnKOZo7Rh7w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:23:93:ad:de:3f:e1:e1:da:1a:4a:46:89:40:95:86 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=88775003f7d9e8e6e1ef48db06728e668ed187bc Validity Not Before: Dec 20 19:01:40 2025 GMT Not After : Dec 21 19:01:40 2025 GMT Subject: CN=b163ff7020601ef9d3d15f1a57f71c981170f0d9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:4a:cc:20:12:bc:07:3c:ca:72:4e:cf:87:c8: 69:a0:fe:05:55:e9:1c:95:98:8e:84:17:e1:96:13: 90:d8:7b:3c:5b:7c:da:06:38:55:5e:53:9d:d9:bb: 79:d3:94:c9:3f:46:25:67:24:14:03:05:de:77:f4: 1b:68:e0:8e:e6:90:18:15:ca:77:46:32:2e:5f:cf: 4d:ff:9c:ef:2f:42:b0:ac:5c:00:a4:b9:c3:8c:78: 03:05:ae:c7:12:a5:72:0b:9c:48:d4:c6:f7:d4:1c: d6:67:18:77:d3:8c:8c:2e:55:18:ee:d2:39:41:ae: a3:a8:0d:88:44:36:78:65:8b:a9:77:80:ec:7e:f5: 70:16:f9:90:9f:ce:7d:82:21:10:60:aa:71:71:d0: bd:22:9c:de:cd:32:7d:af:09:0d:5c:3b:27:91:56: 35:ed:99:20:b9:9b:e4:64:83:cb:01:e5:9e:9b:ea: 79:fe:f7:4c:f4:8e:3f:e6:8f:7f:6d:c1:f2:a7:44: ee:0d:b2:69:7b:ee:f5:b6:5c:7b:d1:88:d0:69:40: b6:55:48:2f:58:ae:eb:2f:ce:21:df:dc:58:ea:56: b8:c8:0e:b6:62:0d:ab:7f:7a:f8:b7:25:0b:dd:41: 11:bb:0b:fc:36:89:35:29:a8:d1:cf:ef:02:58:1f: 73:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:63:FF:70:20:60:1E:F9:D3:D1:5F:1A:57:F7:1C:98:11:70:F0:D9 X509v3 Authority Key Identifier: keyid:88:77:50:03:F7:D9:E8:E6:E1:EF:48:DB:06:72:8E:66:8E:D1:87:BC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iHdQA_fZ6Obh70jbBnKOZo7Rh7w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/9b8d3b-0c03-4591-bd0f-87750d6f77a8/1/iHdQA_fZ6Obh70jbBnKOZo7Rh7w.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/db/9b8d3b-0c03-4591-bd0f-87750d6f77a8/1/iHdQA_fZ6Obh70jbBnKOZo7Rh7w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2a:d2:1f:f1:35:b8:1e:83:2d:d0:df:5a:5c:8f:54:d5:a1:67: 24:b6:15:98:a8:7a:c8:59:3d:6a:ea:4e:2f:19:d5:68:ff:44: e3:e6:5c:e6:2a:b6:c0:ad:b1:2b:5f:e8:4b:c5:89:dd:31:05: c8:34:70:a2:44:88:78:3b:de:41:1a:7d:d8:cb:1c:82:0e:45: 75:4f:01:d4:f9:78:ee:19:7c:be:88:a7:48:d9:37:3b:32:2c: 23:13:e8:d7:a0:4c:ab:4b:ae:0b:a6:d8:8a:81:6e:c2:1a:24: cb:da:95:ca:24:e8:3e:e7:5b:79:be:6a:ad:e6:65:e9:95:23: 43:33:2a:75:c0:cd:4a:a5:9d:37:36:61:10:fe:b7:1f:73:46: f3:6a:13:6a:3c:55:60:db:b4:7f:94:3d:59:4f:98:f4:76:92: 6d:94:82:a7:90:25:c4:63:e3:4f:f1:1a:51:7b:9b:6b:9e:01: 64:07:1c:f1:64:c2:d9:46:24:0a:7a:61:c4:82:07:d5:cf:22: 29:ec:f6:5a:bc:d9:55:72:00:70:1a:ea:dd:f2:5c:02:0d:51: be:17:fb:f2:11:ae:5b:2d:f2:a4:89:ea:f9:d8:aa:2f:7e:9e: c8:28:41:2c:55:38:11:98:b2:19:d1:e0:1a:08:ab:40:9d:58: a1:0f:19:98 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9I5Ot3j/h4doaSkaJQJWGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg4Nzc1MDAzZjdkOWU4ZTZlMWVmNDhkYjA2NzI4ZTY2OGVk MTg3YmMwHhcNMjUxMjIwMTkwMTQwWhcNMjUxMjIxMTkwMTQwWjAzMTEwLwYDVQQD EyhiMTYzZmY3MDIwNjAxZWY5ZDNkMTVmMWE1N2Y3MWM5ODExNzBmMGQ5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA30rMIBK8BzzKck7Ph8hpoP4FVekc lZiOhBfhlhOQ2Hs8W3zaBjhVXlOd2bt505TJP0YlZyQUAwXed/QbaOCO5pAYFcp3 RjIuX89N/5zvL0KwrFwApLnDjHgDBa7HEqVyC5xI1Mb31BzWZxh304yMLlUY7tI5 Qa6jqA2IRDZ4ZYupd4DsfvVwFvmQn859giEQYKpxcdC9IpzezTJ9rwkNXDsnkVY1 7ZkguZvkZIPLAeWem+p5/vdM9I4/5o9/bcHyp0TuDbJpe+71tlx70YjQaUC2VUgv WK7rL84h39xY6la4yA62Yg2rf3r4tyUL3UERuwv8Nok1KajRz+8CWB9zeQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLFj/3AgYB7509FfGlf3HJgRcPDZMB8GA1UdIwQY MBaAFIh3UAP32ejm4e9I2wZyjmaO0Ye8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaUhkUUFfZlo2T2JoNzBqYkJuS09abzdSaDd3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi85YjhkM2ItMGMwMy00NTkxLWJkMGYt ODc3NTBkNmY3N2E4LzEvaUhkUUFfZlo2T2JoNzBqYkJuS09abzdSaDd3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYi85YjhkM2ItMGMwMy00NTkxLWJkMGYtODc3NTBkNmY3N2E4 LzEvaUhkUUFfZlo2T2JoNzBqYkJuS09abzdSaDd3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKtIf8TW4 HoMt0N9aXI9U1aFnJLYVmKh6yFk9aupOLxnVaP9E4+Zc5iq2wK2xK1/oS8WJ3TEF yDRwokSIeDveQRp92Mscgg5FdU8B1Pl47hl8voinSNk3OzIsIxPo16BMq0uuC6bY ioFuwhoky9qVyiToPudbeb5qreZl6ZUjQzMqdcDNSqWdNzZhEP63H3NG82oTajxV YNu0f5Q9WU+Y9HaSbZSCp5AlxGPjT/EaUXuba54BZAcc8WTC2UYkCnphxIIH1c8i Kez2WrzZVXIAcBrq3fJcAg1Rvhf78hGuWy3ypInq+diqL36eyChBLFU4EZiyGdHg GgirQJ1YoQ8ZmA== -----END CERTIFICATE-----Generated at Sat Dec 20 22:44:06 2025 by rpki-client