This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/9af78b-41c4-47b7-af95-37b0a2ab3cd6/1/iiJ8Nfko2ci4_3wlch79R6kNy2c.mft File: iiJ8Nfko2ci4_3wlch79R6kNy2c.mft (raw, json) Hash identifier: CNTe+MsVoEbS4roBzOE2SRXNZ192XMiWj30Yn/+qpFc= Subject key identifier: 53:1F:AE:D2:C1:8A:9B:BB:39:69:DB:97:43:9D:43:E5:81:42:8D:97 Authority key identifier: 8A:22:7C:35:F9:28:D9:C8:B8:FF:7C:25:72:1E:FD:47:A9:0D:CB:67 Certificate issuer: /CN=8a227c35f928d9c8b8ff7c25721efd47a90dcb67 Certificate serial: 019B5ABF3BB0749E8431290C5BAD04274689 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iiJ8Nfko2ci4_3wlch79R6kNy2c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/9af78b-41c4-47b7-af95-37b0a2ab3cd6/1/iiJ8Nfko2ci4_3wlch79R6kNy2c.mft Manifest number: 149F Signing time: Fri 26 Dec 2025 13:00:40 +0000 Manifest this update: Fri 26 Dec 2025 13:00:40 +0000 Manifest next update: Sat 27 Dec 2025 13:00:40 +0000 Files and hashes: 1: K7N-hRXidANMpYlZJ_rYSwLoLCk.roa (hash: tqDwe1a97FYihn4sdeIxy/I7wKkMHB8gK4badlQZXTs=) 2: iiJ8Nfko2ci4_3wlch79R6kNy2c.crl (hash: EzaVIYCvgJTzkVW4u7EK3hZkOLlHdEKbWZK9MsRu3nk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/9af78b-41c4-47b7-af95-37b0a2ab3cd6/1/iiJ8Nfko2ci4_3wlch79R6kNy2c.crl rsync://rpki.ripe.net/repository/DEFAULT/1b/9af78b-41c4-47b7-af95-37b0a2ab3cd6/1/iiJ8Nfko2ci4_3wlch79R6kNy2c.mft rsync://rpki.ripe.net/repository/DEFAULT/iiJ8Nfko2ci4_3wlch79R6kNy2c.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5a:bf:3b:b0:74:9e:84:31:29:0c:5b:ad:04:27:46:89 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8a227c35f928d9c8b8ff7c25721efd47a90dcb67 Validity Not Before: Dec 26 13:00:40 2025 GMT Not After : Dec 27 13:00:40 2025 GMT Subject: CN=531faed2c18a9bbb3969db97439d43e581428d97 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:0e:a8:65:d4:74:b0:8a:fb:81:cc:48:fc:bf: 5d:9b:3d:a2:93:69:c6:ca:a8:fc:27:b7:ba:c5:7e: 68:23:4b:46:0c:76:5b:4e:61:04:00:8b:84:7b:d7: ac:eb:5a:91:93:34:50:68:ca:37:5b:0e:37:99:d0: d2:4d:76:17:0a:b0:89:49:ce:e2:36:03:e6:ed:6f: 4b:d4:a1:62:92:36:f5:9b:73:63:b1:1c:4b:12:d9: 66:26:85:58:04:66:a9:88:ef:7f:4d:71:3e:bf:d4: e5:ac:22:97:65:b0:d2:90:19:24:a1:42:0c:48:2c: e8:89:7d:00:87:df:a4:6d:cd:b7:ba:d5:29:9b:9e: b9:2f:5e:66:57:62:b0:e7:2c:e1:2b:e2:74:93:22: a6:48:80:ed:85:c7:de:d5:b6:93:90:42:81:b5:4b: 0b:18:fe:42:3f:a7:2a:2b:98:0e:b0:1b:de:48:99: 37:03:da:de:3a:9e:45:f3:37:c6:54:20:f5:47:c0: 6c:5a:3f:a5:da:36:35:a7:77:b0:27:fa:de:81:90: 22:de:c8:57:b0:98:dc:67:4e:3d:92:06:30:5b:8d: b7:2a:38:64:e6:06:da:14:b7:c4:c2:ba:46:77:5b: d1:57:0f:53:68:c8:28:c0:5b:f7:10:3d:78:d8:0a: 26:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:1F:AE:D2:C1:8A:9B:BB:39:69:DB:97:43:9D:43:E5:81:42:8D:97 X509v3 Authority Key Identifier: keyid:8A:22:7C:35:F9:28:D9:C8:B8:FF:7C:25:72:1E:FD:47:A9:0D:CB:67 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iiJ8Nfko2ci4_3wlch79R6kNy2c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/9af78b-41c4-47b7-af95-37b0a2ab3cd6/1/iiJ8Nfko2ci4_3wlch79R6kNy2c.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/9af78b-41c4-47b7-af95-37b0a2ab3cd6/1/iiJ8Nfko2ci4_3wlch79R6kNy2c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 53:8c:1c:08:26:67:61:a8:58:6c:2a:67:db:aa:99:01:02:c3: 1b:4d:fb:c2:67:f6:db:85:d9:f4:d7:d9:51:c9:f6:7a:9c:bc: 01:31:03:20:09:33:86:80:39:0e:6f:4a:c2:c5:dc:d7:61:f0: 1c:87:39:92:6f:be:21:30:29:59:82:ab:b8:53:14:27:83:97: 98:5f:5c:4d:61:94:1b:27:eb:56:53:66:4a:52:c7:1a:19:c0: 4c:16:1f:3a:9a:57:d1:91:87:97:c6:63:a2:07:f2:7b:f1:d1: 59:96:d3:b9:27:b9:ec:a0:d9:46:8d:3f:f9:b5:6a:a4:b5:b5: ea:45:1a:f4:1f:b8:92:dc:9a:e9:4e:01:58:0a:d4:4e:fd:62: 2c:bb:c9:ad:f7:7e:a5:08:64:73:0b:68:83:c0:83:08:45:e8: 7e:48:d8:8b:fa:d1:c8:a5:17:f8:d2:b0:d5:52:24:6b:9d:26: 20:43:35:6a:13:1b:a0:ef:ba:8f:05:9d:58:0d:d0:9b:6b:77: 68:cc:80:ba:10:23:53:e2:f5:3d:81:08:b8:62:bf:e8:0f:7a: 2c:23:2b:a0:1c:b0:38:56:c3:e0:c2:ca:57:67:f1:5f:34:a1: ad:62:57:07:6d:c7:ec:4d:93:14:ac:45:b0:88:49:49:e8:28: 64:7f:93:68 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtavzuwdJ6EMSkMW60EJ0aJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhhMjI3YzM1ZjkyOGQ5YzhiOGZmN2MyNTcyMWVmZDQ3YTkw ZGNiNjcwHhcNMjUxMjI2MTMwMDQwWhcNMjUxMjI3MTMwMDQwWjAzMTEwLwYDVQQD Eyg1MzFmYWVkMmMxOGE5YmJiMzk2OWRiOTc0MzlkNDNlNTgxNDI4ZDk3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3Q6oZdR0sIr7gcxI/L9dmz2ik2nG yqj8J7e6xX5oI0tGDHZbTmEEAIuEe9es61qRkzRQaMo3Ww43mdDSTXYXCrCJSc7i NgPm7W9L1KFikjb1m3NjsRxLEtlmJoVYBGapiO9/TXE+v9TlrCKXZbDSkBkkoUIM SCzoiX0Ah9+kbc23utUpm565L15mV2Kw5yzhK+J0kyKmSIDthcfe1baTkEKBtUsL GP5CP6cqK5gOsBveSJk3A9reOp5F8zfGVCD1R8BsWj+l2jY1p3ewJ/regZAi3shX sJjcZ049kgYwW423Kjhk5gbaFLfEwrpGd1vRVw9TaMgowFv3ED142AomPQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFMfrtLBipu7OWnbl0OdQ+WBQo2XMB8GA1UdIwQY MBaAFIoifDX5KNnIuP98JXIe/UepDctnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaWlKOE5ma28yY2k0XzN3bGNoNzlSNmtOeTJjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYi85YWY3OGItNDFjNC00N2I3LWFmOTUt MzdiMGEyYWIzY2Q2LzEvaWlKOE5ma28yY2k0XzN3bGNoNzlSNmtOeTJjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYi85YWY3OGItNDFjNC00N2I3LWFmOTUtMzdiMGEyYWIzY2Q2 LzEvaWlKOE5ma28yY2k0XzN3bGNoNzlSNmtOeTJjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAU4wcCCZn YahYbCpn26qZAQLDG037wmf224XZ9NfZUcn2epy8ATEDIAkzhoA5Dm9KwsXc12Hw HIc5km++ITApWYKruFMUJ4OXmF9cTWGUGyfrVlNmSlLHGhnATBYfOppX0ZGHl8Zj ogfye/HRWZbTuSe57KDZRo0/+bVqpLW16kUa9B+4ktya6U4BWArUTv1iLLvJrfd+ pQhkcwtog8CDCEXofkjYi/rRyKUX+NKw1VIka50mIEM1ahMboO+6jwWdWA3Qm2t3 aMyAuhAjU+L1PYEIuGK/6A96LCMroBywOFbD4MLKV2fxXzShrWJXB23H7E2TFKxF sIhJSegoZH+TaA== -----END CERTIFICATE-----Generated at Fri Dec 26 15:47:26 2025 by rpki-client