This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/d0c38d-9f02-418b-96b2-fb3111dbd1ca/1/i29IgAONVauY18tm38-ol7e6Eeg.mft File: i29IgAONVauY18tm38-ol7e6Eeg.mft (raw, json) Hash identifier: 5uh94KW8WFOt9EG1ZytXCMOIc4E4WNtFA2MzF55ojE0= Subject key identifier: 69:02:C0:A3:47:84:16:62:73:64:66:16:BD:CC:73:32:AB:13:45:E9 Authority key identifier: 8B:6F:48:80:03:8D:55:AB:98:D7:CB:66:DF:CF:A8:97:B7:BA:11:E8 Certificate issuer: /CN=8b6f4880038d55ab98d7cb66dfcfa897b7ba11e8 Certificate serial: 019B3231A07658E6D2769A08B89706450F22 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i29IgAONVauY18tm38-ol7e6Eeg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/d0c38d-9f02-418b-96b2-fb3111dbd1ca/1/i29IgAONVauY18tm38-ol7e6Eeg.mft Manifest number: 05FB Signing time: Thu 18 Dec 2025 16:01:11 +0000 Manifest this update: Thu 18 Dec 2025 16:01:11 +0000 Manifest next update: Fri 19 Dec 2025 16:01:11 +0000 Files and hashes: 1: i29IgAONVauY18tm38-ol7e6Eeg.crl (hash: pRLV83619t96ZtcTVtQi0e7W+xWsUikcep47Kv2xqEQ=) 2: uJrupPlV0TuAxsM7Yezc0lvFtvQ.roa (hash: zjqfplB2jtSi/5nKhDu31J1mMkLaG/4MZV1txaGrR6E=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/d0c38d-9f02-418b-96b2-fb3111dbd1ca/1/i29IgAONVauY18tm38-ol7e6Eeg.crl rsync://rpki.ripe.net/repository/DEFAULT/f4/d0c38d-9f02-418b-96b2-fb3111dbd1ca/1/i29IgAONVauY18tm38-ol7e6Eeg.mft rsync://rpki.ripe.net/repository/DEFAULT/i29IgAONVauY18tm38-ol7e6Eeg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 16:01:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:32:31:a0:76:58:e6:d2:76:9a:08:b8:97:06:45:0f:22 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8b6f4880038d55ab98d7cb66dfcfa897b7ba11e8 Validity Not Before: Dec 18 16:01:11 2025 GMT Not After : Dec 19 16:01:11 2025 GMT Subject: CN=6902c0a34784166273646616bdcc7332ab1345e9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:ea:12:14:6d:82:aa:0e:f4:23:91:f5:bf:95: db:37:f5:a0:76:b7:36:d6:76:17:09:53:76:f0:11: a0:fb:e4:0f:2f:23:a0:35:87:86:43:97:94:aa:2c: 28:e3:04:57:e7:6c:73:78:aa:65:b6:99:9a:82:8b: d3:f2:07:94:6e:a6:c7:a6:48:7e:f8:4e:c4:b7:0f: 46:2b:a7:9d:9e:95:95:14:de:02:46:98:2b:2a:80: f1:6f:8d:67:ba:02:b7:36:24:88:fb:68:4b:b5:26: 3b:08:39:7c:3a:b5:c1:49:f6:07:57:17:d6:80:b6: 95:5a:77:0f:1e:83:93:1e:60:e2:c1:3c:47:34:a4: ee:e2:b5:c9:9d:c9:b4:12:9c:29:c3:2f:fb:e5:b8: 98:33:99:91:61:6c:d0:44:45:76:90:55:9e:fb:78: c8:c8:84:f6:27:59:27:37:3c:d1:21:3c:c2:3f:b9: 35:8b:28:3b:b6:23:a2:a7:51:cc:9c:7d:f9:d8:6d: e9:0e:5d:95:65:2f:6f:df:a6:9c:f5:b1:d7:c6:03: 25:ff:d2:35:2f:4a:aa:71:a0:9f:24:5e:b7:e1:49: 47:d5:3a:2c:0f:f3:c4:3f:fc:10:f9:b3:c5:7b:06: 2d:f5:a7:fb:48:a2:be:16:d6:6f:ac:2e:15:79:bc: 42:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:02:C0:A3:47:84:16:62:73:64:66:16:BD:CC:73:32:AB:13:45:E9 X509v3 Authority Key Identifier: keyid:8B:6F:48:80:03:8D:55:AB:98:D7:CB:66:DF:CF:A8:97:B7:BA:11:E8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i29IgAONVauY18tm38-ol7e6Eeg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/d0c38d-9f02-418b-96b2-fb3111dbd1ca/1/i29IgAONVauY18tm38-ol7e6Eeg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/d0c38d-9f02-418b-96b2-fb3111dbd1ca/1/i29IgAONVauY18tm38-ol7e6Eeg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2c:db:58:11:70:28:08:07:01:90:73:23:5b:f4:fb:3f:35:27: 82:63:cf:4a:83:e7:28:f1:41:2a:4e:2a:b4:5a:fb:51:20:52: 7a:e1:76:cd:4b:42:04:9e:a0:b2:9f:a5:19:0a:15:45:f1:a9: aa:d2:89:1a:c4:09:f2:14:2f:88:80:8f:19:88:3c:c7:7f:47: cd:26:34:7a:51:9d:e6:a9:6d:39:df:2e:13:ae:76:d3:01:db: 80:7f:8a:3e:45:56:91:90:c1:7c:01:65:7e:9c:f1:7b:e8:54: 3c:49:7f:76:5b:0a:b0:a5:f0:7b:7b:27:76:ca:7e:b7:e7:44: 86:ba:e3:a4:47:7d:1a:bd:94:3d:ef:5d:60:6a:da:a5:4d:8c: 6f:d1:2f:32:8f:c6:0e:58:2f:2c:e4:a1:bf:a5:3a:55:75:8d: d5:d7:56:8f:2f:e0:9e:50:b9:6f:09:2c:5a:9a:87:08:9b:fc: 46:8e:6d:5e:07:39:3b:b1:bb:38:4d:ab:60:fd:2e:25:b3:46: a5:78:28:33:6a:55:c2:56:c0:e1:95:86:f6:2c:3e:c3:49:6a: b9:26:b0:e3:3b:80:f1:5c:dc:ee:25:b1:d7:b9:2c:9c:61:b8: a0:1f:f7:77:28:48:2d:14:90:d4:d5:e6:60:70:ae:66:54:f9: cf:a9:7b:65 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsyMaB2WObSdpoIuJcGRQ8iMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhiNmY0ODgwMDM4ZDU1YWI5OGQ3Y2I2NmRmY2ZhODk3Yjdi YTExZTgwHhcNMjUxMjE4MTYwMTExWhcNMjUxMjE5MTYwMTExWjAzMTEwLwYDVQQD Eyg2OTAyYzBhMzQ3ODQxNjYyNzM2NDY2MTZiZGNjNzMzMmFiMTM0NWU5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyeoSFG2Cqg70I5H1v5XbN/Wgdrc2 1nYXCVN28BGg++QPLyOgNYeGQ5eUqiwo4wRX52xzeKpltpmagovT8geUbqbHpkh+ +E7Etw9GK6ednpWVFN4CRpgrKoDxb41nugK3NiSI+2hLtSY7CDl8OrXBSfYHVxfW gLaVWncPHoOTHmDiwTxHNKTu4rXJncm0Epwpwy/75biYM5mRYWzQREV2kFWe+3jI yIT2J1knNzzRITzCP7k1iyg7tiOip1HMnH352G3pDl2VZS9v36ac9bHXxgMl/9I1 L0qqcaCfJF634UlH1TosD/PEP/wQ+bPFewYt9af7SKK+FtZvrC4VebxCCwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGkCwKNHhBZic2RmFr3MczKrE0XpMB8GA1UdIwQY MBaAFItvSIADjVWrmNfLZt/PqJe3uhHoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaTI5SWdBT05WYXVZMTh0bTM4LW9sN2U2RWVnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNC9kMGMzOGQtOWYwMi00MThiLTk2YjIt ZmIzMTExZGJkMWNhLzEvaTI5SWdBT05WYXVZMTh0bTM4LW9sN2U2RWVnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNC9kMGMzOGQtOWYwMi00MThiLTk2YjItZmIzMTExZGJkMWNh LzEvaTI5SWdBT05WYXVZMTh0bTM4LW9sN2U2RWVnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALNtYEXAo CAcBkHMjW/T7PzUngmPPSoPnKPFBKk4qtFr7USBSeuF2zUtCBJ6gsp+lGQoVRfGp qtKJGsQJ8hQviICPGYg8x39HzSY0elGd5qltOd8uE6520wHbgH+KPkVWkZDBfAFl fpzxe+hUPEl/dlsKsKXwe3sndsp+t+dEhrrjpEd9Gr2UPe9dYGrapU2Mb9EvMo/G DlgvLOShv6U6VXWN1ddWjy/gnlC5bwksWpqHCJv8Ro5tXgc5O7G7OE2rYP0uJbNG pXgoM2pVwlbA4ZWG9iw+w0lquSaw4zuA8Vzc7iWx17ksnGG4oB/3dyhILRSQ1NXm YHCuZlT5z6l7ZQ== -----END CERTIFICATE-----Generated at Fri Dec 19 00:08:51 2025 by rpki-client