This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/43afb6-0d21-4ff6-9863-bc517e121d54/1/ifTHhzt_6kn_brkNUCwdvDpfjDM.mft File: ifTHhzt_6kn_brkNUCwdvDpfjDM.mft (raw, json) Hash identifier: 3NPuEaPbiwew6uxmSjT44y2tbbnEj7D8lH2o9SZ9Gho= Subject key identifier: 74:A7:42:BF:C9:2A:BF:98:49:D6:13:A2:F2:30:CD:BF:94:17:D6:22 Authority key identifier: 89:F4:C7:87:3B:7F:EA:49:FF:6E:B9:0D:50:2C:1D:BC:3A:5F:8C:33 Certificate issuer: /CN=89f4c7873b7fea49ff6eb90d502c1dbc3a5f8c33 Certificate serial: 019B3FB5BB618BD57B2D1B870126716506E5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ifTHhzt_6kn_brkNUCwdvDpfjDM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/43afb6-0d21-4ff6-9863-bc517e121d54/1/ifTHhzt_6kn_brkNUCwdvDpfjDM.mft Manifest number: 176E Signing time: Sun 21 Dec 2025 07:00:32 +0000 Manifest this update: Sun 21 Dec 2025 07:00:32 +0000 Manifest next update: Mon 22 Dec 2025 07:00:32 +0000 Files and hashes: 1: 5dE_GC4RYmruYsEQCosEswqhvMw.roa (hash: PKjCYy3vCzlACHchkXt5SVZDwsnRqMCgtgL6CJOnCUg=) 2: ifTHhzt_6kn_brkNUCwdvDpfjDM.crl (hash: Aa1Gf7XgemnxWsaKowhXtbrsW5dxpzf+2Qy09Ru5kvA=) 3: wITBUH3fVii4QvavQf9IYQ9sIA4.roa (hash: sUVkY3RRTmkWlOCgQmin3wil/Gjs5wSpMGd2nMYWzJU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/43afb6-0d21-4ff6-9863-bc517e121d54/1/ifTHhzt_6kn_brkNUCwdvDpfjDM.crl rsync://rpki.ripe.net/repository/DEFAULT/f9/43afb6-0d21-4ff6-9863-bc517e121d54/1/ifTHhzt_6kn_brkNUCwdvDpfjDM.mft rsync://rpki.ripe.net/repository/DEFAULT/ifTHhzt_6kn_brkNUCwdvDpfjDM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 04:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3f:b5:bb:61:8b:d5:7b:2d:1b:87:01:26:71:65:06:e5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89f4c7873b7fea49ff6eb90d502c1dbc3a5f8c33 Validity Not Before: Dec 21 07:00:32 2025 GMT Not After : Dec 22 07:00:32 2025 GMT Subject: CN=74a742bfc92abf9849d613a2f230cdbf9417d622 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:15:41:87:66:dc:43:90:30:b0:e3:76:96:68: 20:78:30:0b:64:27:fc:20:fe:90:38:2f:90:26:4c: 6d:ce:40:ea:2c:33:e2:f6:72:a1:99:38:64:97:94: 86:de:0e:3d:b0:e6:77:57:24:c0:77:38:4f:c6:19: 8c:24:0b:8a:ad:4c:24:82:a3:bc:64:3e:6a:da:a7: 56:68:cb:3c:75:c7:4b:07:0f:e0:e5:f5:74:da:b6: c8:5c:0a:07:35:89:60:bf:1f:e6:f2:51:f7:59:a3: fe:4c:96:a1:51:55:9a:35:6b:b9:7f:fd:c6:7a:2f: fe:f4:04:f2:b2:5c:eb:f2:e9:43:53:53:be:c9:03: 4e:1a:04:74:08:b9:08:61:2b:a6:e9:05:bc:6b:08: d7:a9:66:b6:5e:62:f3:68:f4:7c:c4:01:f9:33:02: 27:f9:46:e7:2c:8b:de:27:85:c6:2e:52:d6:2f:a7: 04:c9:be:a0:6c:cd:a4:e2:7a:44:d8:73:de:97:e5: 73:3f:0b:af:7f:49:c4:d3:62:6d:58:3c:48:98:90: 50:f2:bb:3f:2f:98:ad:12:73:34:be:39:82:e2:24: 31:d7:e9:4c:6a:3e:1d:d7:9d:64:58:78:a9:a9:6f: 68:f9:d7:f2:80:c1:7f:06:0d:7b:a5:a4:e9:81:fe: 36:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:A7:42:BF:C9:2A:BF:98:49:D6:13:A2:F2:30:CD:BF:94:17:D6:22 X509v3 Authority Key Identifier: keyid:89:F4:C7:87:3B:7F:EA:49:FF:6E:B9:0D:50:2C:1D:BC:3A:5F:8C:33 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ifTHhzt_6kn_brkNUCwdvDpfjDM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/43afb6-0d21-4ff6-9863-bc517e121d54/1/ifTHhzt_6kn_brkNUCwdvDpfjDM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/43afb6-0d21-4ff6-9863-bc517e121d54/1/ifTHhzt_6kn_brkNUCwdvDpfjDM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4c:b0:7f:f9:b0:3b:00:fa:14:2a:47:83:04:7c:35:01:45:60: d1:c9:46:57:75:39:84:8c:91:1f:cd:78:fa:22:1c:25:3e:34: 73:20:21:f2:cc:9e:f4:da:ef:c4:f9:22:ce:10:16:60:82:dd: d8:98:26:b9:c1:59:2e:9b:94:a1:8b:fe:f0:05:00:0c:22:9d: c6:95:cd:0d:4b:c3:f3:b5:90:e0:e4:36:b2:5d:ff:5e:db:99: af:37:89:47:26:33:94:4c:9d:52:b3:c6:10:8a:1d:86:80:53: 12:fa:96:5c:38:f5:0d:df:72:72:be:8b:e4:64:99:68:00:10: 23:ad:bb:65:51:d7:dd:36:3d:aa:b8:72:ee:4f:d1:2e:e8:18: b1:a2:57:3c:c8:3f:51:5f:6d:85:46:37:81:27:4b:00:23:ce: 6b:6a:ad:41:25:42:69:78:3a:a6:c1:4f:08:0c:5b:16:96:12: 6b:c2:35:70:f4:38:02:f4:96:39:f2:3f:aa:a6:6c:43:ee:4d: b7:3b:b7:c1:5a:ff:01:ac:b9:f9:39:0c:85:62:81:86:04:ed: 5a:ee:e3:a6:bb:9b:c4:f9:a7:2c:dd:e0:32:70:0f:d4:33:a8: 3b:e0:de:cd:11:05:8c:10:c9:9d:d8:70:e5:cc:be:90:d6:25: e5:6a:e2:43 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs/tbthi9V7LRuHASZxZQblMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg5ZjRjNzg3M2I3ZmVhNDlmZjZlYjkwZDUwMmMxZGJjM2E1 ZjhjMzMwHhcNMjUxMjIxMDcwMDMyWhcNMjUxMjIyMDcwMDMyWjAzMTEwLwYDVQQD Eyg3NGE3NDJiZmM5MmFiZjk4NDlkNjEzYTJmMjMwY2RiZjk0MTdkNjIyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkRVBh2bcQ5AwsON2lmggeDALZCf8 IP6QOC+QJkxtzkDqLDPi9nKhmThkl5SG3g49sOZ3VyTAdzhPxhmMJAuKrUwkgqO8 ZD5q2qdWaMs8dcdLBw/g5fV02rbIXAoHNYlgvx/m8lH3WaP+TJahUVWaNWu5f/3G ei/+9ATyslzr8ulDU1O+yQNOGgR0CLkIYSum6QW8awjXqWa2XmLzaPR8xAH5MwIn +UbnLIveJ4XGLlLWL6cEyb6gbM2k4npE2HPel+VzPwuvf0nE02JtWDxImJBQ8rs/ L5itEnM0vjmC4iQx1+lMaj4d151kWHipqW9o+dfygMF/Bg17paTpgf42OwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHSnQr/JKr+YSdYTovIwzb+UF9YiMB8GA1UdIwQY MBaAFIn0x4c7f+pJ/265DVAsHbw6X4wzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaWZUSGh6dF82a25fYnJrTlVDd2R2RHBmakRNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOS80M2FmYjYtMGQyMS00ZmY2LTk4NjMt YmM1MTdlMTIxZDU0LzEvaWZUSGh6dF82a25fYnJrTlVDd2R2RHBmakRNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mOS80M2FmYjYtMGQyMS00ZmY2LTk4NjMtYmM1MTdlMTIxZDU0 LzEvaWZUSGh6dF82a25fYnJrTlVDd2R2RHBmakRNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATLB/+bA7 APoUKkeDBHw1AUVg0clGV3U5hIyRH814+iIcJT40cyAh8sye9NrvxPkizhAWYILd 2JgmucFZLpuUoYv+8AUADCKdxpXNDUvD87WQ4OQ2sl3/XtuZrzeJRyYzlEydUrPG EIodhoBTEvqWXDj1Dd9ycr6L5GSZaAAQI627ZVHX3TY9qrhy7k/RLugYsaJXPMg/ UV9thUY3gSdLACPOa2qtQSVCaXg6psFPCAxbFpYSa8I1cPQ4AvSWOfI/qqZsQ+5N tzu3wVr/Aay5+TkMhWKBhgTtWu7jprubxPmnLN3gMnAP1DOoO+DezREFjBDJndhw 5cy+kNYl5WriQw== -----END CERTIFICATE-----Generated at Sun Dec 21 10:51:40 2025 by rpki-client