This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/2e8347-d9c7-4e51-9b14-d02d96c36ca3/1/iXj_XaszxC2mX-Thq_vKTq-90qo.mft File: iXj_XaszxC2mX-Thq_vKTq-90qo.mft (raw, json) Hash identifier: 5paMQ3WfL0JudVdbvy01xGwF6Yng2n7HHThpfxFwJzI= Subject key identifier: 17:32:8F:8E:E3:50:F4:2F:2E:6B:D2:F6:83:4B:8B:BB:AC:2C:8A:BE Authority key identifier: 89:78:FF:5D:AB:33:C4:2D:A6:5F:E4:E1:AB:FB:CA:4E:AF:BD:D2:AA Certificate issuer: /CN=8978ff5dab33c42da65fe4e1abfbca4eafbdd2aa Certificate serial: 019B3AC6F470AB146968017099376AAAA475 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iXj_XaszxC2mX-Thq_vKTq-90qo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/2e8347-d9c7-4e51-9b14-d02d96c36ca3/1/iXj_XaszxC2mX-Thq_vKTq-90qo.mft Manifest number: 1330 Signing time: Sat 20 Dec 2025 08:01:15 +0000 Manifest this update: Sat 20 Dec 2025 08:01:15 +0000 Manifest next update: Sun 21 Dec 2025 08:01:15 +0000 Files and hashes: 1: 4nkxi3-lAvnol4KZpv_fbMO-o8Y.roa (hash: 7IJ8WtHdrV8cqGqjR8uILsd0Nv/W6isRILc3Ixuy+NU=) 2: 5-1oK7ZffFqStfo7QWXqKcGuZfk.roa (hash: ae86GvhPxW1Ea0shedYB3VtmcIvsIfxJLLLA1E/5h/A=) 3: iXj_XaszxC2mX-Thq_vKTq-90qo.crl (hash: cu7GYKlN1KHfjVIXgA06VZs0RG2HhbnmLdp8TWTNkzk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/2e8347-d9c7-4e51-9b14-d02d96c36ca3/1/iXj_XaszxC2mX-Thq_vKTq-90qo.crl rsync://rpki.ripe.net/repository/DEFAULT/e4/2e8347-d9c7-4e51-9b14-d02d96c36ca3/1/iXj_XaszxC2mX-Thq_vKTq-90qo.mft rsync://rpki.ripe.net/repository/DEFAULT/iXj_XaszxC2mX-Thq_vKTq-90qo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3a:c6:f4:70:ab:14:69:68:01:70:99:37:6a:aa:a4:75 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8978ff5dab33c42da65fe4e1abfbca4eafbdd2aa Validity Not Before: Dec 20 08:01:15 2025 GMT Not After : Dec 21 08:01:15 2025 GMT Subject: CN=17328f8ee350f42f2e6bd2f6834b8bbbac2c8abe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:16:29:9a:6f:94:fd:cc:0c:33:26:32:01:c8: 23:ba:d8:6a:45:c0:11:c1:83:ba:58:ea:4f:70:e4: 41:b1:35:cf:fb:f6:63:5f:d0:2e:49:cc:72:88:43: 99:64:38:b2:7e:ee:df:89:9c:22:eb:77:67:89:2c: 51:43:33:0d:a6:d1:b1:65:65:80:32:be:4b:2c:df: ac:99:77:74:59:41:cf:ae:3a:6b:2d:68:6b:97:c2: 74:42:45:9d:5e:c2:88:31:4a:03:25:3b:a4:97:1e: 73:fc:42:9a:51:5c:66:34:a0:14:81:b1:95:28:e7: b8:ca:53:7b:d4:7a:01:e5:17:96:3b:8f:cd:f7:3a: ea:3f:db:2f:7a:0a:86:dc:82:cd:c8:c2:92:50:c2: 9c:97:fe:e1:29:0f:9c:fd:f5:ce:c0:69:8e:10:0b: bb:d6:fb:0b:db:a1:9a:6c:1c:7d:20:80:3e:f1:48: 9e:8e:94:64:a1:bc:14:ef:5d:bc:be:ad:d1:4c:87: 25:a6:3e:4d:dd:c7:a0:41:83:a8:fe:a0:03:ed:43: 79:d6:94:53:3e:8c:4d:26:94:ba:35:a5:e2:af:77: 28:55:3c:5b:6c:45:ca:55:9a:ea:79:1c:b3:00:5a: d6:e5:c0:3c:1b:9f:c7:d6:08:e2:24:e7:2e:de:21: 26:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:32:8F:8E:E3:50:F4:2F:2E:6B:D2:F6:83:4B:8B:BB:AC:2C:8A:BE X509v3 Authority Key Identifier: keyid:89:78:FF:5D:AB:33:C4:2D:A6:5F:E4:E1:AB:FB:CA:4E:AF:BD:D2:AA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iXj_XaszxC2mX-Thq_vKTq-90qo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/2e8347-d9c7-4e51-9b14-d02d96c36ca3/1/iXj_XaszxC2mX-Thq_vKTq-90qo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/2e8347-d9c7-4e51-9b14-d02d96c36ca3/1/iXj_XaszxC2mX-Thq_vKTq-90qo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a5:f8:d4:54:74:78:19:8c:32:4b:19:a4:f3:69:05:f2:43:a4: 4d:55:d9:69:f5:c8:18:0e:5f:a1:d8:f3:be:10:bf:54:19:de: b3:87:76:54:0d:9f:aa:95:da:e5:16:b3:d8:4a:a2:23:26:d3: a9:d6:e3:ba:23:8b:e4:fa:b1:0c:0e:5f:d7:e4:dc:6f:0a:c0: 87:85:02:4f:6f:0a:af:27:b1:dd:6d:8b:d1:59:2e:b2:6b:6f: c3:3b:01:59:46:b8:08:98:14:61:cf:ce:0f:37:e7:69:2f:43: fb:fc:28:22:1f:b0:3f:b6:ca:e6:89:d7:a0:23:b5:20:02:de: 24:64:21:5e:14:8e:78:18:ee:3f:f5:e7:2f:79:6f:c0:a1:99: bc:fe:41:71:9f:c7:38:1c:fa:aa:66:87:5e:fa:39:ff:fd:c3: e7:0d:58:62:72:a4:a5:0b:39:97:8e:d1:d9:c2:f0:fc:72:6d: 6a:33:21:97:4b:bd:ba:22:13:3f:44:14:04:d8:72:6d:41:f4: b6:a9:f8:9e:99:00:84:46:f6:90:51:cf:58:23:17:30:91:f0: 47:f3:09:f4:ed:da:4a:f0:d6:8c:30:a3:56:c8:cf:dc:66:19: a6:bc:9d:fb:7c:71:05:ef:f4:99:c1:05:7d:28:f0:63:c7:af: 2d:35:55:d2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs6xvRwqxRpaAFwmTdqqqR1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg5NzhmZjVkYWIzM2M0MmRhNjVmZTRlMWFiZmJjYTRlYWZi ZGQyYWEwHhcNMjUxMjIwMDgwMTE1WhcNMjUxMjIxMDgwMTE1WjAzMTEwLwYDVQQD EygxNzMyOGY4ZWUzNTBmNDJmMmU2YmQyZjY4MzRiOGJiYmFjMmM4YWJlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmhYpmm+U/cwMMyYyAcgjuthqRcAR wYO6WOpPcORBsTXP+/ZjX9AuScxyiEOZZDiyfu7fiZwi63dniSxRQzMNptGxZWWA Mr5LLN+smXd0WUHPrjprLWhrl8J0QkWdXsKIMUoDJTuklx5z/EKaUVxmNKAUgbGV KOe4ylN71HoB5ReWO4/N9zrqP9svegqG3ILNyMKSUMKcl/7hKQ+c/fXOwGmOEAu7 1vsL26GabBx9IIA+8UiejpRkobwU7128vq3RTIclpj5N3cegQYOo/qAD7UN51pRT PoxNJpS6NaXir3coVTxbbEXKVZrqeRyzAFrW5cA8G5/H1gjiJOcu3iEmmwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBcyj47jUPQvLmvS9oNLi7usLIq+MB8GA1UdIwQY MBaAFIl4/12rM8Qtpl/k4av7yk6vvdKqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaVhqX1hhc3p4QzJtWC1UaHFfdktUcS05MHFvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNC8yZTgzNDctZDljNy00ZTUxLTliMTQt ZDAyZDk2YzM2Y2EzLzEvaVhqX1hhc3p4QzJtWC1UaHFfdktUcS05MHFvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNC8yZTgzNDctZDljNy00ZTUxLTliMTQtZDAyZDk2YzM2Y2Ez LzEvaVhqX1hhc3p4QzJtWC1UaHFfdktUcS05MHFvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApfjUVHR4 GYwySxmk82kF8kOkTVXZafXIGA5fodjzvhC/VBnes4d2VA2fqpXa5Raz2EqiIybT qdbjuiOL5PqxDA5f1+TcbwrAh4UCT28Kryex3W2L0VkusmtvwzsBWUa4CJgUYc/O DzfnaS9D+/woIh+wP7bK5onXoCO1IALeJGQhXhSOeBjuP/XnL3lvwKGZvP5BcZ/H OBz6qmaHXvo5//3D5w1YYnKkpQs5l47R2cLw/HJtajMhl0u9uiITP0QUBNhybUH0 tqn4npkAhEb2kFHPWCMXMJHwR/MJ9O3aSvDWjDCjVsjP3GYZpryd+3xxBe/0mcEF fSjwY8evLTVV0g== -----END CERTIFICATE-----Generated at Sat Dec 20 11:04:40 2025 by rpki-client