This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/28c3d1-8a90-4068-bb27-33abc53c0e79/1/iHpfBIaxiiRI8jWKJ0bBq9n7Ll4.mft File: iHpfBIaxiiRI8jWKJ0bBq9n7Ll4.mft (raw, json) Hash identifier: ZY0OOqBstKVy8fFpVo8n70aA5q3eUxbEhvVbeyWxifY= Subject key identifier: 83:B4:AC:36:82:10:A7:2C:CA:74:7A:4E:D6:54:38:E9:D9:DC:26:88 Authority key identifier: 88:7A:5F:04:86:B1:8A:24:48:F2:35:8A:27:46:C1:AB:D9:FB:2E:5E Certificate issuer: /CN=887a5f0486b18a2448f2358a2746c1abd9fb2e5e Certificate serial: 019B175F8B9B2EB90B44541C7FC9FF8D32ED Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iHpfBIaxiiRI8jWKJ0bBq9n7Ll4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/28c3d1-8a90-4068-bb27-33abc53c0e79/1/iHpfBIaxiiRI8jWKJ0bBq9n7Ll4.mft Manifest number: 0F24 Signing time: Sat 13 Dec 2025 11:01:36 +0000 Manifest this update: Sat 13 Dec 2025 11:01:36 +0000 Manifest next update: Sun 14 Dec 2025 11:01:36 +0000 Files and hashes: 1: RZ_4-lCargPhDnsOSk7--hEov_g.roa (hash: gD59YlfjEOMaA7jKCDG57LDieQBZUtUGKFnW719fGG8=) 2: abKcOp3qmm4ybUnw1tBA-G8yOrc.roa (hash: /klckxmc/giyHaniwWbEf+LlQIwRtUPvFDW14KDXips=) 3: iHpfBIaxiiRI8jWKJ0bBq9n7Ll4.crl (hash: 0uRIR/8rFVzeTwtx22Hj63jakBo68dzWnVzPDN0/CxM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/28c3d1-8a90-4068-bb27-33abc53c0e79/1/iHpfBIaxiiRI8jWKJ0bBq9n7Ll4.crl rsync://rpki.ripe.net/repository/DEFAULT/2d/28c3d1-8a90-4068-bb27-33abc53c0e79/1/iHpfBIaxiiRI8jWKJ0bBq9n7Ll4.mft rsync://rpki.ripe.net/repository/DEFAULT/iHpfBIaxiiRI8jWKJ0bBq9n7Ll4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Dec 2025 11:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:17:5f:8b:9b:2e:b9:0b:44:54:1c:7f:c9:ff:8d:32:ed Signature Algorithm: sha256WithRSAEncryption Issuer: CN=887a5f0486b18a2448f2358a2746c1abd9fb2e5e Validity Not Before: Dec 13 11:01:36 2025 GMT Not After : Dec 14 11:01:36 2025 GMT Subject: CN=83b4ac368210a72cca747a4ed65438e9d9dc2688 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:a1:68:41:63:13:25:bd:21:bc:de:c2:4d:1e: b3:61:9e:36:15:79:b1:ad:11:0b:88:07:68:49:76: 3d:8c:70:f0:5a:6a:46:fb:a8:c8:de:72:d0:9d:90: 75:ba:cd:03:e5:fd:e0:7a:f0:22:ac:7d:fa:30:ce: cd:76:da:f1:ba:3b:35:0f:16:67:6f:73:30:b8:7d: de:c1:58:92:89:60:21:67:cc:9c:93:be:25:12:63: 79:a2:d3:e0:df:a3:6e:8a:9a:2f:d4:7e:6d:e8:dd: c1:8f:26:55:00:57:11:81:40:d4:fa:17:d3:4d:17: 53:c8:03:bd:ce:e6:43:6c:14:b8:42:97:1c:de:86: 50:5a:a2:c8:1a:dc:7a:a2:fc:80:d3:12:49:4e:20: 82:b4:2c:54:84:05:bc:4b:29:60:0c:ea:79:c8:32: e3:e4:be:77:87:58:2e:9e:cb:6e:e2:e7:99:e5:2f: 61:13:7e:e6:4d:b1:4f:6a:a6:94:66:02:6c:16:18: 0a:0d:ac:93:4e:0e:60:e3:62:1a:91:10:e4:92:1c: b3:c4:be:1c:83:8d:96:e7:c8:24:4e:c9:15:3e:f4: f6:b1:4a:1f:5e:4f:98:85:0a:2f:8e:54:7d:e7:51: 29:df:57:d3:ce:f1:32:18:1f:32:ec:c4:6d:dd:0e: fd:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:B4:AC:36:82:10:A7:2C:CA:74:7A:4E:D6:54:38:E9:D9:DC:26:88 X509v3 Authority Key Identifier: keyid:88:7A:5F:04:86:B1:8A:24:48:F2:35:8A:27:46:C1:AB:D9:FB:2E:5E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iHpfBIaxiiRI8jWKJ0bBq9n7Ll4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/28c3d1-8a90-4068-bb27-33abc53c0e79/1/iHpfBIaxiiRI8jWKJ0bBq9n7Ll4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/28c3d1-8a90-4068-bb27-33abc53c0e79/1/iHpfBIaxiiRI8jWKJ0bBq9n7Ll4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1f:3e:df:7f:56:39:34:8a:3c:81:de:a7:f0:78:a6:77:b1:34: 91:ce:dc:16:f5:53:13:1f:2c:f0:58:8f:9e:0d:86:76:72:6b: fc:fd:10:7a:65:2e:13:e3:93:00:bc:51:bd:7c:7e:ab:ad:cc: 43:b6:32:c8:db:be:e7:a2:69:57:2f:0c:97:fe:2d:34:13:c8: e3:a8:6e:05:89:6d:32:5c:06:7e:1e:b6:c4:c8:06:be:75:15: 45:3a:47:04:2b:e4:8b:67:b6:d7:ed:80:42:97:99:ce:4a:ed: 13:8e:94:c1:a7:9c:6a:df:d5:3d:68:d3:09:4a:18:76:bc:76: 11:e6:97:03:91:8b:f8:44:5e:25:3b:a7:17:33:f0:2d:91:19: fc:89:a6:25:2f:02:98:26:43:d7:88:a2:9d:6a:a8:45:fc:ec: db:06:06:fa:28:4f:1c:04:f2:6e:e7:26:b0:96:7d:45:4c:de: 29:17:b1:eb:c8:86:8e:a1:ae:0e:95:19:fb:ea:7e:84:62:93: e6:26:2b:05:70:f8:d2:5e:e4:74:1b:7e:63:4a:6d:58:a0:2e: 90:43:c0:47:7f:27:0b:15:d7:73:85:b2:34:31:86:da:45:6d: bc:99:40:d2:aa:f0:d4:56:78:9d:28:39:ac:56:da:18:a8:3c: 69:4f:81:04 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsXX4ubLrkLRFQcf8n/jTLtMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg4N2E1ZjA0ODZiMThhMjQ0OGYyMzU4YTI3NDZjMWFiZDlm YjJlNWUwHhcNMjUxMjEzMTEwMTM2WhcNMjUxMjE0MTEwMTM2WjAzMTEwLwYDVQQD Eyg4M2I0YWMzNjgyMTBhNzJjY2E3NDdhNGVkNjU0MzhlOWQ5ZGMyNjg4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy6FoQWMTJb0hvN7CTR6zYZ42FXmx rRELiAdoSXY9jHDwWmpG+6jI3nLQnZB1us0D5f3gevAirH36MM7Ndtrxujs1DxZn b3MwuH3ewViSiWAhZ8yck74lEmN5otPg36Nuipov1H5t6N3BjyZVAFcRgUDU+hfT TRdTyAO9zuZDbBS4Qpcc3oZQWqLIGtx6ovyA0xJJTiCCtCxUhAW8SylgDOp5yDLj 5L53h1gunstu4ueZ5S9hE37mTbFPaqaUZgJsFhgKDayTTg5g42IakRDkkhyzxL4c g42W58gkTskVPvT2sUofXk+YhQovjlR951Ep31fTzvEyGB8y7MRt3Q79iQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIO0rDaCEKcsynR6TtZUOOnZ3CaIMB8GA1UdIwQY MBaAFIh6XwSGsYokSPI1iidGwavZ+y5eMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaUhwZkJJYXhpaVJJOGpXS0owYkJxOW43TGw0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZC8yOGMzZDEtOGE5MC00MDY4LWJiMjct MzNhYmM1M2MwZTc5LzEvaUhwZkJJYXhpaVJJOGpXS0owYkJxOW43TGw0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZC8yOGMzZDEtOGE5MC00MDY4LWJiMjctMzNhYmM1M2MwZTc5 LzEvaUhwZkJJYXhpaVJJOGpXS0owYkJxOW43TGw0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHz7ff1Y5 NIo8gd6n8Himd7E0kc7cFvVTEx8s8FiPng2GdnJr/P0QemUuE+OTALxRvXx+q63M Q7YyyNu+56JpVy8Ml/4tNBPI46huBYltMlwGfh62xMgGvnUVRTpHBCvki2e21+2A QpeZzkrtE46Uwaecat/VPWjTCUoYdrx2EeaXA5GL+EReJTunFzPwLZEZ/ImmJS8C mCZD14iinWqoRfzs2wYG+ihPHATybucmsJZ9RUzeKRex68iGjqGuDpUZ++p+hGKT 5iYrBXD40l7kdBt+Y0ptWKAukEPAR38nCxXXc4WyNDGG2kVtvJlA0qrw1FZ4nSg5 rFbaGKg8aU+BBA== -----END CERTIFICATE-----Generated at Sat Dec 13 13:52:58 2025 by rpki-client