This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/28c3d1-8a90-4068-bb27-33abc53c0e79/1/iHpfBIaxiiRI8jWKJ0bBq9n7Ll4.mft File: iHpfBIaxiiRI8jWKJ0bBq9n7Ll4.mft (raw, json) Hash identifier: rDnbcSPOkILrSP5l0nC9CJZxvxPnd4wRN2HDXgME5ag= Subject key identifier: 64:BD:54:47:E4:82:F7:C8:6C:FB:FD:EE:B5:2F:BB:82:19:6D:EA:38 Authority key identifier: 88:7A:5F:04:86:B1:8A:24:48:F2:35:8A:27:46:C1:AB:D9:FB:2E:5E Certificate issuer: /CN=887a5f0486b18a2448f2358a2746c1abd9fb2e5e Certificate serial: 019B3456B46640ED9DFDA37D6CDD6CA30EA0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iHpfBIaxiiRI8jWKJ0bBq9n7Ll4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/28c3d1-8a90-4068-bb27-33abc53c0e79/1/iHpfBIaxiiRI8jWKJ0bBq9n7Ll4.mft Manifest number: 0F33 Signing time: Fri 19 Dec 2025 02:00:55 +0000 Manifest this update: Fri 19 Dec 2025 02:00:55 +0000 Manifest next update: Sat 20 Dec 2025 02:00:55 +0000 Files and hashes: 1: RZ_4-lCargPhDnsOSk7--hEov_g.roa (hash: gD59YlfjEOMaA7jKCDG57LDieQBZUtUGKFnW719fGG8=) 2: abKcOp3qmm4ybUnw1tBA-G8yOrc.roa (hash: /klckxmc/giyHaniwWbEf+LlQIwRtUPvFDW14KDXips=) 3: iHpfBIaxiiRI8jWKJ0bBq9n7Ll4.crl (hash: m20/4VQyepZdj9rE+30Qy5mJGGxXeZoVZAHKPMBbBIg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/28c3d1-8a90-4068-bb27-33abc53c0e79/1/iHpfBIaxiiRI8jWKJ0bBq9n7Ll4.crl rsync://rpki.ripe.net/repository/DEFAULT/2d/28c3d1-8a90-4068-bb27-33abc53c0e79/1/iHpfBIaxiiRI8jWKJ0bBq9n7Ll4.mft rsync://rpki.ripe.net/repository/DEFAULT/iHpfBIaxiiRI8jWKJ0bBq9n7Ll4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:34:56:b4:66:40:ed:9d:fd:a3:7d:6c:dd:6c:a3:0e:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=887a5f0486b18a2448f2358a2746c1abd9fb2e5e Validity Not Before: Dec 19 02:00:55 2025 GMT Not After : Dec 20 02:00:55 2025 GMT Subject: CN=64bd5447e482f7c86cfbfdeeb52fbb82196dea38 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:4f:87:84:c4:12:fa:c0:d6:ab:ed:f9:b6:fa: 94:58:50:01:14:69:de:34:bd:f2:00:79:ec:b5:a8: 1c:3d:09:e6:48:62:e6:8d:1c:de:d3:bc:89:21:e0: 24:31:e2:a3:f2:aa:97:b7:10:56:50:c4:1e:34:59: fc:b0:34:cf:79:1b:9d:e9:80:81:ff:8b:3d:4a:50: e3:e5:43:b3:47:20:75:b6:42:e8:8c:94:2f:76:a3: 86:e4:19:91:a9:fa:60:8f:fe:31:5c:47:cf:2b:7d: 8b:db:89:86:2f:92:f6:aa:95:45:24:29:fd:0c:6f: aa:33:05:0d:c7:d3:09:fb:01:15:52:8a:69:7c:cc: d6:ff:c9:cc:af:cb:49:87:1b:b5:c2:75:34:a7:29: dd:ed:5b:4b:64:cc:8e:f0:2c:17:84:3f:c4:7d:fe: 4d:f5:c0:93:e7:95:2a:9e:4e:1b:e7:16:1a:fb:53: ae:e6:bc:a3:3f:cf:63:05:53:a0:08:3c:d1:29:d2: 2b:c3:42:89:4d:a7:79:ae:a0:2d:61:08:7a:00:05: b2:e7:3e:a6:12:4e:44:ba:c4:9e:20:85:9e:18:b7: de:fa:73:d4:38:ec:27:3c:e4:b5:d6:bc:ab:ae:29: 53:d9:2f:8e:39:59:16:2c:9c:a2:dc:51:b3:aa:43: 3e:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:BD:54:47:E4:82:F7:C8:6C:FB:FD:EE:B5:2F:BB:82:19:6D:EA:38 X509v3 Authority Key Identifier: keyid:88:7A:5F:04:86:B1:8A:24:48:F2:35:8A:27:46:C1:AB:D9:FB:2E:5E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iHpfBIaxiiRI8jWKJ0bBq9n7Ll4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/28c3d1-8a90-4068-bb27-33abc53c0e79/1/iHpfBIaxiiRI8jWKJ0bBq9n7Ll4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/28c3d1-8a90-4068-bb27-33abc53c0e79/1/iHpfBIaxiiRI8jWKJ0bBq9n7Ll4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 39:6f:52:b7:84:37:60:e9:59:91:85:dc:03:09:00:25:b0:e3: 10:0b:5f:91:fd:0f:ff:57:46:7f:58:e0:e4:55:e8:14:f3:05: 0b:95:9b:f8:6f:da:8e:13:7b:43:ac:99:5f:8e:58:59:6f:18: 74:2e:b0:92:15:e9:c1:c1:de:07:d0:5d:aa:11:9e:77:ae:c2: 10:ff:82:f8:3f:c0:87:98:d6:50:53:7d:51:b3:33:f4:2e:b5: ec:e3:e8:d0:f4:a0:c6:1c:46:24:de:c6:0b:20:34:25:9a:20: 7a:c2:4a:6f:a6:30:75:10:c0:45:61:a9:0c:ea:fa:1b:88:5e: 04:5c:41:75:e6:e0:4d:f6:66:32:78:cc:92:d6:65:c5:9d:31: ce:89:68:4e:89:cf:b5:af:e6:c1:65:f4:6f:3f:f8:89:37:13: bd:9b:5c:ed:90:eb:44:c0:a9:3b:00:5e:9c:62:d5:32:09:52: f4:5c:c4:90:09:06:23:08:0b:a1:67:65:4b:be:8b:60:18:7d: 71:0a:90:be:ff:1b:53:35:11:6d:1b:2d:32:b9:2f:f2:31:81: 12:41:b1:4d:f3:d3:ce:ae:ec:da:12:60:b3:aa:65:1d:84:99: b7:a6:d1:40:86:e2:f6:b4:35:49:55:2a:f6:80:2e:16:97:14: 80:8b:39:c0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs0VrRmQO2d/aN9bN1sow6gMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg4N2E1ZjA0ODZiMThhMjQ0OGYyMzU4YTI3NDZjMWFiZDlm YjJlNWUwHhcNMjUxMjE5MDIwMDU1WhcNMjUxMjIwMDIwMDU1WjAzMTEwLwYDVQQD Eyg2NGJkNTQ0N2U0ODJmN2M4NmNmYmZkZWViNTJmYmI4MjE5NmRlYTM4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsk+HhMQS+sDWq+35tvqUWFABFGne NL3yAHnstagcPQnmSGLmjRze07yJIeAkMeKj8qqXtxBWUMQeNFn8sDTPeRud6YCB /4s9SlDj5UOzRyB1tkLojJQvdqOG5BmRqfpgj/4xXEfPK32L24mGL5L2qpVFJCn9 DG+qMwUNx9MJ+wEVUoppfMzW/8nMr8tJhxu1wnU0pynd7VtLZMyO8CwXhD/Eff5N 9cCT55Uqnk4b5xYa+1Ou5ryjP89jBVOgCDzRKdIrw0KJTad5rqAtYQh6AAWy5z6m Ek5EusSeIIWeGLfe+nPUOOwnPOS11ryrrilT2S+OOVkWLJyi3FGzqkM+5wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGS9VEfkgvfIbPv97rUvu4IZbeo4MB8GA1UdIwQY MBaAFIh6XwSGsYokSPI1iidGwavZ+y5eMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaUhwZkJJYXhpaVJJOGpXS0owYkJxOW43TGw0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZC8yOGMzZDEtOGE5MC00MDY4LWJiMjct MzNhYmM1M2MwZTc5LzEvaUhwZkJJYXhpaVJJOGpXS0owYkJxOW43TGw0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZC8yOGMzZDEtOGE5MC00MDY4LWJiMjctMzNhYmM1M2MwZTc5 LzEvaUhwZkJJYXhpaVJJOGpXS0owYkJxOW43TGw0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOW9St4Q3 YOlZkYXcAwkAJbDjEAtfkf0P/1dGf1jg5FXoFPMFC5Wb+G/ajhN7Q6yZX45YWW8Y dC6wkhXpwcHeB9BdqhGed67CEP+C+D/Ah5jWUFN9UbMz9C617OPo0PSgxhxGJN7G CyA0JZogesJKb6YwdRDARWGpDOr6G4heBFxBdebgTfZmMnjMktZlxZ0xzoloTonP ta/mwWX0bz/4iTcTvZtc7ZDrRMCpOwBenGLVMglS9FzEkAkGIwgLoWdlS76LYBh9 cQqQvv8bUzURbRstMrkv8jGBEkGxTfPTzq7s2hJgs6plHYSZt6bRQIbi9rQ1SVUq 9oAuFpcUgIs5wA== -----END CERTIFICATE-----Generated at Fri Dec 19 04:50:04 2025 by rpki-client