This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/2e8347-d9c7-4e51-9b14-d02d96c36ca3/1/iXj_XaszxC2mX-Thq_vKTq-90qo.mft File: iXj_XaszxC2mX-Thq_vKTq-90qo.mft (raw, json) Hash identifier: 4P8FVUcM3v0tq9WntPXHsr3nUL8wx/yL85zVdqlF6KY= Subject key identifier: C1:C0:3A:D3:A9:B3:A2:D4:73:F2:63:42:3B:ED:4F:F7:F7:25:FF:FC Authority key identifier: 89:78:FF:5D:AB:33:C4:2D:A6:5F:E4:E1:AB:FB:CA:4E:AF:BD:D2:AA Certificate issuer: /CN=8978ff5dab33c42da65fe4e1abfbca4eafbdd2aa Certificate serial: 019B3CB4D2FF470E726D688F45C32AF930C6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iXj_XaszxC2mX-Thq_vKTq-90qo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/2e8347-d9c7-4e51-9b14-d02d96c36ca3/1/iXj_XaszxC2mX-Thq_vKTq-90qo.mft Manifest number: 1331 Signing time: Sat 20 Dec 2025 17:00:41 +0000 Manifest this update: Sat 20 Dec 2025 17:00:41 +0000 Manifest next update: Sun 21 Dec 2025 17:00:41 +0000 Files and hashes: 1: 4nkxi3-lAvnol4KZpv_fbMO-o8Y.roa (hash: 7IJ8WtHdrV8cqGqjR8uILsd0Nv/W6isRILc3Ixuy+NU=) 2: 5-1oK7ZffFqStfo7QWXqKcGuZfk.roa (hash: ae86GvhPxW1Ea0shedYB3VtmcIvsIfxJLLLA1E/5h/A=) 3: iXj_XaszxC2mX-Thq_vKTq-90qo.crl (hash: qtW6Bz2/u2afrqoLLqCVFRbqDIdA0IigXuUDDWtVr3M=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/2e8347-d9c7-4e51-9b14-d02d96c36ca3/1/iXj_XaszxC2mX-Thq_vKTq-90qo.crl rsync://rpki.ripe.net/repository/DEFAULT/e4/2e8347-d9c7-4e51-9b14-d02d96c36ca3/1/iXj_XaszxC2mX-Thq_vKTq-90qo.mft rsync://rpki.ripe.net/repository/DEFAULT/iXj_XaszxC2mX-Thq_vKTq-90qo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:b4:d2:ff:47:0e:72:6d:68:8f:45:c3:2a:f9:30:c6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8978ff5dab33c42da65fe4e1abfbca4eafbdd2aa Validity Not Before: Dec 20 17:00:41 2025 GMT Not After : Dec 21 17:00:41 2025 GMT Subject: CN=c1c03ad3a9b3a2d473f263423bed4ff7f725fffc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:50:83:06:44:de:93:95:42:d4:ff:fd:97:0c: f1:23:51:28:43:6c:db:c6:cb:01:a6:71:88:7b:2e: e9:43:2f:2e:af:4a:9b:e5:b3:84:a5:69:43:12:0e: 65:92:99:bd:09:f2:a5:0f:9f:63:3b:5b:cd:a9:cc: 0a:2f:6d:b1:f7:d1:e2:ae:f2:de:88:72:45:63:bb: ca:e7:e8:38:e2:21:2a:6c:ac:87:c1:32:6a:2a:d2: d2:36:09:17:8d:77:b5:d4:48:58:83:b5:d7:3b:30: 76:26:66:f4:60:95:69:51:d0:a6:6c:5a:3e:25:1d: aa:93:0e:49:b7:7d:8b:ad:1c:a2:b1:b5:ab:88:46: 01:34:94:10:9a:09:85:2c:41:35:63:08:0d:db:e0: de:56:90:cc:ef:f5:51:9b:bf:e6:ed:37:84:51:3e: 89:81:4b:a2:ae:f1:e6:3e:66:f0:23:c8:85:d3:3f: 78:60:99:b4:b2:5b:0d:af:15:c4:0e:e1:55:74:96: 64:9e:16:a1:e7:1d:6b:31:0a:dd:8a:c6:e9:8a:e2: ec:93:ac:39:ea:c8:de:61:10:c0:06:07:ad:ff:f2: 66:f8:72:15:40:16:8c:2e:b3:29:02:95:02:8b:95: 11:2b:1e:e0:54:b0:7c:58:d5:83:73:a2:4d:6e:8a: 82:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:C0:3A:D3:A9:B3:A2:D4:73:F2:63:42:3B:ED:4F:F7:F7:25:FF:FC X509v3 Authority Key Identifier: keyid:89:78:FF:5D:AB:33:C4:2D:A6:5F:E4:E1:AB:FB:CA:4E:AF:BD:D2:AA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iXj_XaszxC2mX-Thq_vKTq-90qo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/2e8347-d9c7-4e51-9b14-d02d96c36ca3/1/iXj_XaszxC2mX-Thq_vKTq-90qo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/2e8347-d9c7-4e51-9b14-d02d96c36ca3/1/iXj_XaszxC2mX-Thq_vKTq-90qo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 44:16:47:10:ba:88:f9:06:4d:01:29:4c:45:06:0b:2c:09:aa: 0b:d3:80:d1:ff:b0:59:81:07:e1:e0:53:7f:ee:c1:cc:f2:15: 77:0d:8d:3d:e3:23:a4:6c:0b:e0:7f:85:fe:d6:b9:04:b7:b2: 51:61:67:03:97:6d:24:87:72:35:4b:3c:79:6f:7c:f1:06:cc: 65:94:ac:6e:9d:82:3b:54:eb:f7:7c:e7:55:61:af:99:4f:6b: 4f:93:bf:27:2f:95:12:f0:c5:72:23:64:3d:00:6a:af:46:ef: a0:a9:f8:9b:c7:df:ae:2b:76:ab:ef:cd:37:b2:15:c6:45:de: 8f:18:f4:ba:cb:06:5d:f9:5f:57:60:cb:2b:13:c4:6a:44:84: 72:cb:ec:d5:3d:07:8c:f4:06:26:e0:5f:3b:b3:72:b6:26:b2: a3:34:31:f4:c3:1d:af:75:9d:29:91:75:f3:96:f6:5b:07:9b: 08:42:e0:9d:f0:30:ad:b6:8c:75:8d:06:3d:50:79:be:02:8f: b3:0e:59:18:4d:d2:a9:af:2f:58:a7:ad:bf:a9:73:18:f0:e0: cd:ec:ee:92:b5:36:a3:58:30:56:ac:1a:98:87:0d:c9:89:31: ab:b9:80:db:c2:ab:82:5d:bc:23:f7:92:03:6d:c4:41:4c:59: a1:f6:9f:32 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs8tNL/Rw5ybWiPRcMq+TDGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg5NzhmZjVkYWIzM2M0MmRhNjVmZTRlMWFiZmJjYTRlYWZi ZGQyYWEwHhcNMjUxMjIwMTcwMDQxWhcNMjUxMjIxMTcwMDQxWjAzMTEwLwYDVQQD EyhjMWMwM2FkM2E5YjNhMmQ0NzNmMjYzNDIzYmVkNGZmN2Y3MjVmZmZjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2FCDBkTek5VC1P/9lwzxI1EoQ2zb xssBpnGIey7pQy8ur0qb5bOEpWlDEg5lkpm9CfKlD59jO1vNqcwKL22x99HirvLe iHJFY7vK5+g44iEqbKyHwTJqKtLSNgkXjXe11EhYg7XXOzB2Jmb0YJVpUdCmbFo+ JR2qkw5Jt32LrRyisbWriEYBNJQQmgmFLEE1YwgN2+DeVpDM7/VRm7/m7TeEUT6J gUuirvHmPmbwI8iF0z94YJm0slsNrxXEDuFVdJZknhah5x1rMQrdisbpiuLsk6w5 6sjeYRDABget//Jm+HIVQBaMLrMpApUCi5URKx7gVLB8WNWDc6JNboqCgQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMHAOtOps6LUc/JjQjvtT/f3Jf/8MB8GA1UdIwQY MBaAFIl4/12rM8Qtpl/k4av7yk6vvdKqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaVhqX1hhc3p4QzJtWC1UaHFfdktUcS05MHFvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNC8yZTgzNDctZDljNy00ZTUxLTliMTQt ZDAyZDk2YzM2Y2EzLzEvaVhqX1hhc3p4QzJtWC1UaHFfdktUcS05MHFvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNC8yZTgzNDctZDljNy00ZTUxLTliMTQtZDAyZDk2YzM2Y2Ez LzEvaVhqX1hhc3p4QzJtWC1UaHFfdktUcS05MHFvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARBZHELqI +QZNASlMRQYLLAmqC9OA0f+wWYEH4eBTf+7BzPIVdw2NPeMjpGwL4H+F/ta5BLey UWFnA5dtJIdyNUs8eW988QbMZZSsbp2CO1Tr93znVWGvmU9rT5O/Jy+VEvDFciNk PQBqr0bvoKn4m8ffrit2q+/NN7IVxkXejxj0ussGXflfV2DLKxPEakSEcsvs1T0H jPQGJuBfO7NytiayozQx9MMdr3WdKZF185b2WwebCELgnfAwrbaMdY0GPVB5vgKP sw5ZGE3Sqa8vWKetv6lzGPDgzezukrU2o1gwVqwamIcNyYkxq7mA28Krgl28I/eS A23EQUxZofafMg== -----END CERTIFICATE-----Generated at Sat Dec 20 22:05:06 2025 by rpki-client