This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/31952a-608c-468e-a00e-d633aa70dd66/1/iP4ZBc16825jraY2bBR7Ydhcnys.mft File: iP4ZBc16825jraY2bBR7Ydhcnys.mft (raw, json) Hash identifier: d8C1Sa6blIKeXMoXu+gB8vmM+CkwwgQwAeTI7yIsr44= Subject key identifier: 4E:13:D4:48:00:BE:F3:F7:6E:9A:C1:84:FD:97:B1:6D:E3:E4:1A:23 Authority key identifier: 88:FE:19:05:CD:7A:F3:6E:63:AD:A6:36:6C:14:7B:61:D8:5C:9F:2B Certificate issuer: /CN=88fe1905cd7af36e63ada6366c147b61d85c9f2b Certificate serial: 019B51F324AD3EDF87483F19967666130BB7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iP4ZBc16825jraY2bBR7Ydhcnys.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/31952a-608c-468e-a00e-d633aa70dd66/1/iP4ZBc16825jraY2bBR7Ydhcnys.mft Manifest number: 08D5 Signing time: Wed 24 Dec 2025 20:00:47 +0000 Manifest this update: Wed 24 Dec 2025 20:00:47 +0000 Manifest next update: Thu 25 Dec 2025 20:00:47 +0000 Files and hashes: 1: DSjiByReVAFtGenTha4D-8dSQJA.roa (hash: LTaqsJLmNorNuR9w6MCAPY47C39e6eSxiN8KzBSficg=) 2: N3Ms1tO5Rc3q58ZodMbwcW3QRxA.roa (hash: QeEjLFu1bfyi8L5wOE2F/BxSn3Wihpq/1jEicr1OiIU=) 3: iP4ZBc16825jraY2bBR7Ydhcnys.crl (hash: 0b6itdY1EP+asOWPv7Y5QIDPGAJgy84HFvaNqHL5DjA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/31952a-608c-468e-a00e-d633aa70dd66/1/iP4ZBc16825jraY2bBR7Ydhcnys.crl rsync://rpki.ripe.net/repository/DEFAULT/f7/31952a-608c-468e-a00e-d633aa70dd66/1/iP4ZBc16825jraY2bBR7Ydhcnys.mft rsync://rpki.ripe.net/repository/DEFAULT/iP4ZBc16825jraY2bBR7Ydhcnys.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 20:00:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:51:f3:24:ad:3e:df:87:48:3f:19:96:76:66:13:0b:b7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=88fe1905cd7af36e63ada6366c147b61d85c9f2b Validity Not Before: Dec 24 20:00:47 2025 GMT Not After : Dec 25 20:00:47 2025 GMT Subject: CN=4e13d44800bef3f76e9ac184fd97b16de3e41a23 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:0d:70:c5:9a:f6:82:4b:51:4f:88:39:cc:73: 85:d1:f2:02:61:0c:0e:c1:e0:3d:e2:d5:ba:09:03: 64:93:68:54:fe:6d:6f:45:8c:3d:eb:b9:e6:95:d2: d5:d3:45:ac:65:dc:70:1f:fe:30:78:ca:c8:3e:52: d8:15:4f:3d:47:29:06:1a:e3:98:e5:98:47:1a:6b: e5:6d:d9:a8:1e:94:f9:fa:cc:67:c8:6d:5f:ab:08: d1:0c:30:e3:f9:02:01:ac:25:b4:c3:68:45:e1:69: 87:2b:bc:68:39:86:11:54:2b:7d:09:47:0e:fb:07: 8a:50:27:96:c7:e4:27:9f:cb:55:51:66:32:2f:77: d1:16:e2:41:18:e6:32:d8:a5:0f:be:86:f5:7a:ab: 4b:9e:1a:55:d8:f6:6c:9f:62:d8:ef:f3:e1:df:4f: d7:58:05:d3:be:05:fb:5a:5a:56:0c:7c:a3:ba:37: 3d:0b:f0:0f:74:ec:0f:96:c3:0d:73:a2:18:9e:fa: 52:5b:40:f8:6c:e9:3c:20:e1:1c:83:d9:ed:fd:a0: 6c:ad:7c:72:fc:a0:91:b6:79:4d:24:2a:60:42:b2: ce:41:cd:40:56:8e:73:7a:1f:38:36:29:bb:a1:35: ec:c9:01:d8:f4:43:6c:95:de:63:6e:19:9d:a2:93: fb:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:13:D4:48:00:BE:F3:F7:6E:9A:C1:84:FD:97:B1:6D:E3:E4:1A:23 X509v3 Authority Key Identifier: keyid:88:FE:19:05:CD:7A:F3:6E:63:AD:A6:36:6C:14:7B:61:D8:5C:9F:2B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iP4ZBc16825jraY2bBR7Ydhcnys.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/31952a-608c-468e-a00e-d633aa70dd66/1/iP4ZBc16825jraY2bBR7Ydhcnys.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/31952a-608c-468e-a00e-d633aa70dd66/1/iP4ZBc16825jraY2bBR7Ydhcnys.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b1:83:bb:89:cf:a9:6c:d5:05:3f:6c:60:07:5b:53:74:40:e9: a6:bd:4d:81:fc:33:3d:2e:96:a0:29:8b:73:01:3d:06:43:d8: 5b:3a:bf:c3:2b:2e:08:97:31:96:0f:58:f9:b2:e0:a6:d1:97: 35:ef:cd:a8:52:9e:73:61:7e:c8:78:f3:40:6a:04:1f:76:cc: ac:1c:ee:e8:d2:c2:1e:59:6d:50:c0:d9:7a:5a:fc:fa:3b:56: 87:dd:4c:01:b5:2b:5a:05:eb:59:84:e4:cf:e3:78:eb:04:26: 26:ad:7e:04:85:40:b6:31:46:c8:bd:8d:8b:8f:4a:a4:a5:74: c7:ab:8b:77:f0:95:4f:d6:64:33:0f:3b:b7:11:01:27:7c:58: 9b:ad:62:69:d4:50:96:0b:90:3d:d2:2b:24:ca:f1:44:c9:7a: b2:89:e5:17:3f:bd:0c:2b:4a:b7:35:67:74:39:22:00:58:6e: 58:9f:ab:57:bf:ff:0b:34:bc:fe:d4:8c:06:d5:92:b7:65:86: 9a:ef:e0:5b:d9:94:ea:26:83:2c:6e:c5:5a:a1:85:20:a8:a0: 13:ef:03:2d:fc:82:5f:19:43:ea:39:a4:43:a4:7c:8b:5a:24: fd:fd:f4:e1:85:7d:5f:f6:8f:c2:cc:12:f6:d0:90:40:3a:cf: 33:98:4c:8e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtR8yStPt+HSD8ZlnZmEwu3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg4ZmUxOTA1Y2Q3YWYzNmU2M2FkYTYzNjZjMTQ3YjYxZDg1 YzlmMmIwHhcNMjUxMjI0MjAwMDQ3WhcNMjUxMjI1MjAwMDQ3WjAzMTEwLwYDVQQD Eyg0ZTEzZDQ0ODAwYmVmM2Y3NmU5YWMxODRmZDk3YjE2ZGUzZTQxYTIzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxQ1wxZr2gktRT4g5zHOF0fICYQwO weA94tW6CQNkk2hU/m1vRYw967nmldLV00WsZdxwH/4weMrIPlLYFU89RykGGuOY 5ZhHGmvlbdmoHpT5+sxnyG1fqwjRDDDj+QIBrCW0w2hF4WmHK7xoOYYRVCt9CUcO +weKUCeWx+Qnn8tVUWYyL3fRFuJBGOYy2KUPvob1eqtLnhpV2PZsn2LY7/Ph30/X WAXTvgX7WlpWDHyjujc9C/APdOwPlsMNc6IYnvpSW0D4bOk8IOEcg9nt/aBsrXxy /KCRtnlNJCpgQrLOQc1AVo5zeh84Nim7oTXsyQHY9ENsld5jbhmdopP71QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFE4T1EgAvvP3bprBhP2XsW3j5BojMB8GA1UdIwQY MBaAFIj+GQXNevNuY62mNmwUe2HYXJ8rMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaVA0WkJjMTY4MjVqcmFZMmJCUjdZZGhjbnlzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNy8zMTk1MmEtNjA4Yy00NjhlLWEwMGUt ZDYzM2FhNzBkZDY2LzEvaVA0WkJjMTY4MjVqcmFZMmJCUjdZZGhjbnlzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNy8zMTk1MmEtNjA4Yy00NjhlLWEwMGUtZDYzM2FhNzBkZDY2 LzEvaVA0WkJjMTY4MjVqcmFZMmJCUjdZZGhjbnlzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsYO7ic+p bNUFP2xgB1tTdEDppr1NgfwzPS6WoCmLcwE9BkPYWzq/wysuCJcxlg9Y+bLgptGX Ne/NqFKec2F+yHjzQGoEH3bMrBzu6NLCHlltUMDZelr8+jtWh91MAbUrWgXrWYTk z+N46wQmJq1+BIVAtjFGyL2Ni49KpKV0x6uLd/CVT9ZkMw87txEBJ3xYm61iadRQ lguQPdIrJMrxRMl6sonlFz+9DCtKtzVndDkiAFhuWJ+rV7//CzS8/tSMBtWSt2WG mu/gW9mU6iaDLG7FWqGFIKigE+8DLfyCXxlD6jmkQ6R8i1ok/f304YV9X/aPwswS 9tCQQDrPM5hMjg== -----END CERTIFICATE-----Generated at Thu Dec 25 05:31:58 2025 by rpki-client