This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/b182bc-bc32-4e2f-bad7-ca51fb408901/1/IHi67mtuxUJaFrH8AMUsMO2Vo_A.mft File: IHi67mtuxUJaFrH8AMUsMO2Vo_A.mft (raw, json) Hash identifier: NwzGnOvp9xmgMEd2TN3q/RiCO4K3aDcSopFNsHDybMo= Subject key identifier: 23:95:91:F1:4E:E6:62:A2:6B:7E:53:93:7D:0F:F8:25:EE:C4:29:14 Authority key identifier: 20:78:BA:EE:6B:6E:C5:42:5A:16:B1:FC:00:C5:2C:30:ED:95:A3:F0 Certificate issuer: /CN=2078baee6b6ec5425a16b1fc00c52c30ed95a3f0 Certificate serial: 019B3C0FD8389FF2DE51ACE3C0D4E084E4F1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IHi67mtuxUJaFrH8AMUsMO2Vo_A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/b182bc-bc32-4e2f-bad7-ca51fb408901/1/IHi67mtuxUJaFrH8AMUsMO2Vo_A.mft Manifest number: 14F9 Signing time: Sat 20 Dec 2025 14:00:29 +0000 Manifest this update: Sat 20 Dec 2025 14:00:29 +0000 Manifest next update: Sun 21 Dec 2025 14:00:29 +0000 Files and hashes: 1: IHi67mtuxUJaFrH8AMUsMO2Vo_A.crl (hash: ETvtwL6gufCfL+3oTRhjAznh/Y4Oo0QagNNbq9FVQ1c=) 2: Tj1VT7s8ilnWaRH5FDEx4ErgOfw.roa (hash: EAnVAxYXeZnLn3O7V7JRGZpaiw9YJLofd+adf3s7hWw=) 3: z8gJT3mWJvoCjNtGavez3w-sptI.roa (hash: rAtA37xRZ8BRiEnR3BviWDsE+vEFga17zSGIolCXdPw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/b182bc-bc32-4e2f-bad7-ca51fb408901/1/IHi67mtuxUJaFrH8AMUsMO2Vo_A.crl rsync://rpki.ripe.net/repository/DEFAULT/ff/b182bc-bc32-4e2f-bad7-ca51fb408901/1/IHi67mtuxUJaFrH8AMUsMO2Vo_A.mft rsync://rpki.ripe.net/repository/DEFAULT/IHi67mtuxUJaFrH8AMUsMO2Vo_A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 09:56:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:0f:d8:38:9f:f2:de:51:ac:e3:c0:d4:e0:84:e4:f1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2078baee6b6ec5425a16b1fc00c52c30ed95a3f0 Validity Not Before: Dec 20 14:00:29 2025 GMT Not After : Dec 21 14:00:29 2025 GMT Subject: CN=239591f14ee662a26b7e53937d0ff825eec42914 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:f1:52:15:f1:ec:55:a2:b6:1e:4c:a3:14:df: 6c:c2:59:54:e2:70:37:62:d7:fe:50:b7:4f:9e:d7: 33:45:53:b5:8b:10:d8:c4:0d:1d:88:db:99:64:cd: 44:10:8e:f0:04:27:cc:60:ed:92:15:81:d9:3e:e6: 2c:15:dd:cc:64:bb:09:06:24:b3:5b:42:2a:9d:1e: bd:b6:10:c6:3a:ac:20:d2:23:74:bd:ed:d1:38:01: dd:10:e7:31:6c:8d:8f:ac:a2:f8:ba:22:c4:98:28: e4:d3:48:a0:74:c2:33:22:09:6a:23:2d:29:6f:75: a8:25:8e:ca:f7:5c:f5:8f:22:83:40:fe:68:2f:67: 1a:37:96:95:d0:66:fa:d4:49:4e:d2:02:59:f4:fa: ce:75:77:7f:16:97:6c:c9:cd:be:31:c8:d4:6c:f6: d1:09:75:bd:26:81:07:db:f6:c9:c5:f1:a4:50:a5: 32:a8:0d:8f:8b:a8:ea:a7:e3:92:52:16:f2:2f:5f: 02:06:96:41:49:12:30:a4:0c:b3:7a:6d:35:13:92: 48:27:96:ee:e4:6f:51:e4:36:19:dd:0c:26:94:26: 6a:51:00:63:bb:e4:f6:ca:da:d2:0e:20:a2:4b:83: d1:fe:7b:2c:e2:a9:6a:0b:77:db:54:5f:3f:d1:dd: dd:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:95:91:F1:4E:E6:62:A2:6B:7E:53:93:7D:0F:F8:25:EE:C4:29:14 X509v3 Authority Key Identifier: keyid:20:78:BA:EE:6B:6E:C5:42:5A:16:B1:FC:00:C5:2C:30:ED:95:A3:F0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IHi67mtuxUJaFrH8AMUsMO2Vo_A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/b182bc-bc32-4e2f-bad7-ca51fb408901/1/IHi67mtuxUJaFrH8AMUsMO2Vo_A.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/b182bc-bc32-4e2f-bad7-ca51fb408901/1/IHi67mtuxUJaFrH8AMUsMO2Vo_A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 52:d5:da:a5:01:ee:8e:6d:e6:f0:4d:e8:a6:76:84:91:63:86: b6:75:d5:64:94:45:6c:59:40:5d:a6:48:dd:12:cc:1a:eb:ea: 4e:d7:f1:2a:de:71:db:10:07:58:ca:60:d0:7d:9b:ec:70:de: 0e:54:66:c4:d6:82:c0:3c:4e:fb:a6:8f:fd:97:e0:7b:8f:44: 1e:a6:b5:2e:07:88:ba:a0:1e:2a:94:87:64:9e:32:29:8a:e4: d4:b1:40:77:cf:e6:57:09:38:02:56:b9:d3:f3:33:c8:dc:22: 9f:d4:5f:77:39:3b:fb:ed:1e:2c:33:8c:df:88:7e:bf:44:a2: c5:f4:e2:e4:38:96:7e:e2:2f:8c:b9:d7:85:aa:df:ce:76:cc: 10:0b:66:93:ba:ab:07:67:f7:5c:0a:63:4b:a2:03:2c:8b:e6: 92:00:53:84:61:6f:b2:c7:a3:a9:19:e6:4b:43:65:06:91:06: cd:4c:4d:20:23:db:98:f4:02:c0:7e:c7:f3:b7:e2:6d:a9:3c: 07:49:39:1b:d8:cc:7e:f3:65:fa:16:81:40:47:88:6f:1b:0e: fe:8e:6c:20:7e:24:11:d5:75:a2:59:a4:a6:11:8d:5e:65:a2: 40:5f:43:f8:85:b7:8f:13:41:da:9a:87:ed:20:13:45:f8:dc: f1:1f:41:8c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs8D9g4n/LeUazjwNTghOTxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIwNzhiYWVlNmI2ZWM1NDI1YTE2YjFmYzAwYzUyYzMwZWQ5 NWEzZjAwHhcNMjUxMjIwMTQwMDI5WhcNMjUxMjIxMTQwMDI5WjAzMTEwLwYDVQQD EygyMzk1OTFmMTRlZTY2MmEyNmI3ZTUzOTM3ZDBmZjgyNWVlYzQyOTE0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsvFSFfHsVaK2HkyjFN9swllU4nA3 Ytf+ULdPntczRVO1ixDYxA0diNuZZM1EEI7wBCfMYO2SFYHZPuYsFd3MZLsJBiSz W0IqnR69thDGOqwg0iN0ve3ROAHdEOcxbI2PrKL4uiLEmCjk00igdMIzIglqIy0p b3WoJY7K91z1jyKDQP5oL2caN5aV0Gb61ElO0gJZ9PrOdXd/Fpdsyc2+McjUbPbR CXW9JoEH2/bJxfGkUKUyqA2Pi6jqp+OSUhbyL18CBpZBSRIwpAyzem01E5JIJ5bu 5G9R5DYZ3QwmlCZqUQBju+T2ytrSDiCiS4PR/nss4qlqC3fbVF8/0d3dSwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCOVkfFO5mKia35Tk30P+CXuxCkUMB8GA1UdIwQY MBaAFCB4uu5rbsVCWhax/ADFLDDtlaPwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSUhpNjdtdHV4VUphRnJIOEFNVXNNTzJWb19BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZi9iMTgyYmMtYmMzMi00ZTJmLWJhZDct Y2E1MWZiNDA4OTAxLzEvSUhpNjdtdHV4VUphRnJIOEFNVXNNTzJWb19BLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZi9iMTgyYmMtYmMzMi00ZTJmLWJhZDctY2E1MWZiNDA4OTAx LzEvSUhpNjdtdHV4VUphRnJIOEFNVXNNTzJWb19BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUtXapQHu jm3m8E3opnaEkWOGtnXVZJRFbFlAXaZI3RLMGuvqTtfxKt5x2xAHWMpg0H2b7HDe DlRmxNaCwDxO+6aP/Zfge49EHqa1LgeIuqAeKpSHZJ4yKYrk1LFAd8/mVwk4Ala5 0/MzyNwin9Rfdzk7++0eLDOM34h+v0SixfTi5DiWfuIvjLnXharfznbMEAtmk7qr B2f3XApjS6IDLIvmkgBThGFvssejqRnmS0NlBpEGzUxNICPbmPQCwH7H87fibak8 B0k5G9jMfvNl+haBQEeIbxsO/o5sIH4kEdV1olmkphGNXmWiQF9D+IW3jxNB2pqH 7SATRfjc8R9BjA== -----END CERTIFICATE-----Generated at Sat Dec 20 16:03:10 2025 by rpki-client