This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/1f2c8f-8ed9-4b7e-aa1e-d3c4f5dcbe4c/1/i4r2r1fd_Fx6qCjPIl-Y3OlZBKA.mft File: i4r2r1fd_Fx6qCjPIl-Y3OlZBKA.mft (raw, json) Hash identifier: uHJcvcao42U8VjmC3EvaFeKpROsGqY60hC0FA8MRC9w= Subject key identifier: BD:03:90:0A:F1:55:F8:1F:F4:85:84:F7:6D:75:2C:99:87:26:D7:7E Authority key identifier: 8B:8A:F6:AF:57:DD:FC:5C:7A:A8:28:CF:22:5F:98:DC:E9:59:04:A0 Certificate issuer: /CN=8b8af6af57ddfc5c7aa828cf225f98dce95904a0 Certificate serial: 019B330D64F1F0F28B134B608011C37EBEE4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i4r2r1fd_Fx6qCjPIl-Y3OlZBKA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/1f2c8f-8ed9-4b7e-aa1e-d3c4f5dcbe4c/1/i4r2r1fd_Fx6qCjPIl-Y3OlZBKA.mft Manifest number: 0A8B Signing time: Thu 18 Dec 2025 20:01:14 +0000 Manifest this update: Thu 18 Dec 2025 20:01:14 +0000 Manifest next update: Fri 19 Dec 2025 20:01:14 +0000 Files and hashes: 1: i4r2r1fd_Fx6qCjPIl-Y3OlZBKA.crl (hash: G5jKUOFrnK5W0UBAZLn5GgJt6mCiyoAzDp1jm8HDjsc=) 2: stIrfyQj0_eTZw5LKQkMNxuFxgI.roa (hash: eqwBV8CXGai5haR4OF0T1dC++87tM0y7pi8XDxr8OrQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/1f2c8f-8ed9-4b7e-aa1e-d3c4f5dcbe4c/1/i4r2r1fd_Fx6qCjPIl-Y3OlZBKA.crl rsync://rpki.ripe.net/repository/DEFAULT/dd/1f2c8f-8ed9-4b7e-aa1e-d3c4f5dcbe4c/1/i4r2r1fd_Fx6qCjPIl-Y3OlZBKA.mft rsync://rpki.ripe.net/repository/DEFAULT/i4r2r1fd_Fx6qCjPIl-Y3OlZBKA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 20:01:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:33:0d:64:f1:f0:f2:8b:13:4b:60:80:11:c3:7e:be:e4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8b8af6af57ddfc5c7aa828cf225f98dce95904a0 Validity Not Before: Dec 18 20:01:14 2025 GMT Not After : Dec 19 20:01:14 2025 GMT Subject: CN=bd03900af155f81ff48584f76d752c998726d77e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:01:1a:0f:66:f0:ab:ec:b4:33:5f:a6:2e:a1: d4:2b:1c:2e:d3:d1:e2:d2:e4:86:18:98:b3:6e:78: 50:64:fe:c2:f7:38:90:26:af:be:0b:16:27:35:50: de:4f:65:6c:3e:b7:15:e5:d6:5c:c3:ff:17:30:df: a4:fc:bb:58:8b:9b:bd:9e:af:75:a2:6d:0f:a9:5a: 90:a7:cb:40:94:28:96:d9:d1:4b:67:e0:da:ab:b5: ab:d8:4a:ea:7b:30:e8:d2:f2:fc:9b:af:e4:84:71: 35:46:ac:4e:04:ed:77:88:b0:47:2b:e0:db:8a:e8: ea:c5:f5:9c:da:dd:fc:02:b1:f4:5c:51:83:0a:99: f0:2d:97:ad:74:e7:da:ed:43:5b:4c:de:85:46:34: 53:04:ee:93:10:b7:6c:3e:fd:70:6c:9a:ca:83:b4: 9f:41:2a:5b:2d:4a:28:66:14:36:85:2f:65:ef:a3: d8:f2:b3:79:e6:c2:4b:74:7f:7d:b9:7b:57:8d:9e: 82:a7:06:f9:d5:5c:c0:f5:d8:8a:27:5c:07:3e:5e: c2:05:aa:6c:ff:ab:cc:1e:4b:bb:e6:16:cf:25:aa: 2f:9b:81:39:20:64:60:d3:df:29:9f:76:0e:ec:d6: 87:32:b8:82:db:a7:da:4a:4f:e0:1a:52:3a:1b:c2: 86:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:03:90:0A:F1:55:F8:1F:F4:85:84:F7:6D:75:2C:99:87:26:D7:7E X509v3 Authority Key Identifier: keyid:8B:8A:F6:AF:57:DD:FC:5C:7A:A8:28:CF:22:5F:98:DC:E9:59:04:A0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i4r2r1fd_Fx6qCjPIl-Y3OlZBKA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/1f2c8f-8ed9-4b7e-aa1e-d3c4f5dcbe4c/1/i4r2r1fd_Fx6qCjPIl-Y3OlZBKA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/1f2c8f-8ed9-4b7e-aa1e-d3c4f5dcbe4c/1/i4r2r1fd_Fx6qCjPIl-Y3OlZBKA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3e:82:75:6f:bf:3a:25:84:b8:39:59:44:c1:5e:ed:14:c8:d8: 2a:a8:0d:ba:f6:0f:90:73:d0:21:e5:9c:86:a9:4f:07:2f:e6: 8a:28:20:c0:b6:3c:a8:27:99:87:5a:bf:0b:ca:1a:d5:66:ce: 4f:53:8b:cf:f4:5b:60:eb:b5:67:51:d9:0b:20:a5:a0:2d:7a: c0:d7:24:08:75:3c:54:d1:1d:f8:a1:9d:9f:08:b8:ed:e9:fb: c2:72:6a:c6:fe:17:fa:6e:b7:a4:44:7a:99:a5:ef:08:ef:fe: b7:61:60:45:c3:e3:01:90:d5:49:bd:9b:d8:bc:e7:68:b4:1e: cc:05:3d:c0:6a:70:c6:ee:ec:eb:e1:c1:66:ff:10:f3:2f:26: 90:48:d1:24:a8:80:7e:ae:13:8c:84:cd:5d:e5:13:09:3d:f9: 5d:6a:be:88:76:f7:c4:5c:1d:5b:f0:d1:89:da:40:90:57:b1: 12:81:43:81:78:68:fe:7b:4d:39:0a:c1:0c:3d:26:4d:3e:c0: 80:e2:dd:af:97:5a:e2:86:b6:88:6f:d9:80:55:9c:ee:fc:da: 8f:90:63:9c:62:4b:05:2c:61:3f:56:dc:6f:aa:c6:04:44:a9: 65:ac:9b:5d:c6:ce:8c:da:78:55:f7:99:92:b5:ab:ca:14:f5: 79:14:3c:06 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZszDWTx8PKLE0tggBHDfr7kMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhiOGFmNmFmNTdkZGZjNWM3YWE4MjhjZjIyNWY5OGRjZTk1 OTA0YTAwHhcNMjUxMjE4MjAwMTE0WhcNMjUxMjE5MjAwMTE0WjAzMTEwLwYDVQQD EyhiZDAzOTAwYWYxNTVmODFmZjQ4NTg0Zjc2ZDc1MmM5OTg3MjZkNzdlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyAEaD2bwq+y0M1+mLqHUKxwu09Hi 0uSGGJizbnhQZP7C9ziQJq++CxYnNVDeT2VsPrcV5dZcw/8XMN+k/LtYi5u9nq91 om0PqVqQp8tAlCiW2dFLZ+Daq7Wr2ErqezDo0vL8m6/khHE1RqxOBO13iLBHK+Db iujqxfWc2t38ArH0XFGDCpnwLZetdOfa7UNbTN6FRjRTBO6TELdsPv1wbJrKg7Sf QSpbLUooZhQ2hS9l76PY8rN55sJLdH99uXtXjZ6Cpwb51VzA9diKJ1wHPl7CBaps /6vMHku75hbPJaovm4E5IGRg098pn3YO7NaHMriC26faSk/gGlI6G8KG7QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFL0DkArxVfgf9IWE9211LJmHJtd+MB8GA1UdIwQY MBaAFIuK9q9X3fxceqgozyJfmNzpWQSgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaTRyMnIxZmRfRng2cUNqUElsLVkzT2xaQktBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZC8xZjJjOGYtOGVkOS00YjdlLWFhMWUt ZDNjNGY1ZGNiZTRjLzEvaTRyMnIxZmRfRng2cUNqUElsLVkzT2xaQktBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZC8xZjJjOGYtOGVkOS00YjdlLWFhMWUtZDNjNGY1ZGNiZTRj LzEvaTRyMnIxZmRfRng2cUNqUElsLVkzT2xaQktBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPoJ1b786 JYS4OVlEwV7tFMjYKqgNuvYPkHPQIeWchqlPBy/miiggwLY8qCeZh1q/C8oa1WbO T1OLz/RbYOu1Z1HZCyCloC16wNckCHU8VNEd+KGdnwi47en7wnJqxv4X+m63pER6 maXvCO/+t2FgRcPjAZDVSb2b2LznaLQezAU9wGpwxu7s6+HBZv8Q8y8mkEjRJKiA fq4TjITNXeUTCT35XWq+iHb3xFwdW/DRidpAkFexEoFDgXho/ntNOQrBDD0mTT7A gOLdr5da4oa2iG/ZgFWc7vzaj5BjnGJLBSxhP1bcb6rGBESpZaybXcbOjNp4VfeZ krWryhT1eRQ8Bg== -----END CERTIFICATE-----Generated at Fri Dec 19 01:27:28 2025 by rpki-client