This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/94927f-7e08-4f21-9bba-0f876abd1e30/1/I4hXZg3H-mCEb3ZblMtpV2JVrbY.mft File: I4hXZg3H-mCEb3ZblMtpV2JVrbY.mft (raw, json) Hash identifier: 9Jd9Vez8qxBdQp3K8RDZxAmTOaARe4urxyJ5RQiuYfg= Subject key identifier: 6A:B2:58:F7:54:A4:ED:33:4B:90:47:98:03:BE:5F:B7:B2:8D:23:A8 Authority key identifier: 23:88:57:66:0D:C7:FA:60:84:6F:76:5B:94:CB:69:57:62:55:AD:B6 Certificate issuer: /CN=238857660dc7fa60846f765b94cb69576255adb6 Certificate serial: 019B2B8AA22505182E657DB1DA3E505DD74B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I4hXZg3H-mCEb3ZblMtpV2JVrbY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/94927f-7e08-4f21-9bba-0f876abd1e30/1/I4hXZg3H-mCEb3ZblMtpV2JVrbY.mft Manifest number: 1783 Signing time: Wed 17 Dec 2025 09:01:04 +0000 Manifest this update: Wed 17 Dec 2025 09:01:04 +0000 Manifest next update: Thu 18 Dec 2025 09:01:04 +0000 Files and hashes: 1: I4hXZg3H-mCEb3ZblMtpV2JVrbY.crl (hash: UAuafAaUq36OyjvxdNIffr38DninBF2sNF5tUCjrGVY=) 2: XHfhEGwfsHA5Cy6rVzKyCX0VS7I.roa (hash: r0CY6B9tn8PTb3kJeN+vQ/cBCfQUrTHL37aoDlJepRA=) 3: tcPEvHuX8bqS2YKyM4C5K4tHwxk.roa (hash: rKNoYxngd5L4bRt06ua2/XaA1SqXHMSPI/cKc0JvWoY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/94927f-7e08-4f21-9bba-0f876abd1e30/1/I4hXZg3H-mCEb3ZblMtpV2JVrbY.crl rsync://rpki.ripe.net/repository/DEFAULT/32/94927f-7e08-4f21-9bba-0f876abd1e30/1/I4hXZg3H-mCEb3ZblMtpV2JVrbY.mft rsync://rpki.ripe.net/repository/DEFAULT/I4hXZg3H-mCEb3ZblMtpV2JVrbY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 09:01:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2b:8a:a2:25:05:18:2e:65:7d:b1:da:3e:50:5d:d7:4b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=238857660dc7fa60846f765b94cb69576255adb6 Validity Not Before: Dec 17 09:01:04 2025 GMT Not After : Dec 18 09:01:04 2025 GMT Subject: CN=6ab258f754a4ed334b90479803be5fb7b28d23a8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:d5:b6:41:f6:6c:cb:b6:bb:c9:fa:99:71:c5: 1e:36:e5:21:7d:d1:57:64:a6:13:7e:69:1c:14:9e: ca:77:9d:20:ef:a0:ea:d7:ed:95:f5:a9:b2:1e:80: a9:cf:f2:61:bc:12:a5:c3:e9:e3:48:7c:e7:ce:39: 9b:6b:9b:32:c5:73:09:52:4b:58:5f:28:43:9d:41: c2:63:89:e7:de:ff:a9:89:a5:25:89:b8:d6:94:5d: de:3f:e1:78:5c:0d:f2:32:cc:de:61:7e:63:30:83: 95:0d:34:6e:b3:79:6c:8a:8e:b4:76:66:03:97:cf: 0d:51:33:a3:dd:5e:66:9b:c7:ae:d9:75:b3:dd:56: 9a:0a:e9:53:78:9a:46:5f:94:92:5c:bf:b6:71:17: 81:e4:98:21:f0:0a:46:ff:59:11:a6:e7:45:13:f2: e8:e5:3f:ad:3d:43:55:f2:35:31:aa:12:e0:60:53: 6f:51:b2:5a:f9:5b:71:8e:c9:fd:fe:10:b8:b5:2e: 41:47:d4:15:45:ca:1b:f1:48:ce:95:5e:18:60:a3: 39:0d:a0:e0:11:63:65:be:f3:f8:12:3f:d1:76:04: 04:e5:09:29:51:3e:06:56:d1:03:b9:f6:bf:b8:44: 04:99:bc:d7:2e:f0:9d:78:72:c0:83:29:bd:bb:46: 83:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:B2:58:F7:54:A4:ED:33:4B:90:47:98:03:BE:5F:B7:B2:8D:23:A8 X509v3 Authority Key Identifier: keyid:23:88:57:66:0D:C7:FA:60:84:6F:76:5B:94:CB:69:57:62:55:AD:B6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I4hXZg3H-mCEb3ZblMtpV2JVrbY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/94927f-7e08-4f21-9bba-0f876abd1e30/1/I4hXZg3H-mCEb3ZblMtpV2JVrbY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/32/94927f-7e08-4f21-9bba-0f876abd1e30/1/I4hXZg3H-mCEb3ZblMtpV2JVrbY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 41:ce:fe:c2:16:c2:6e:54:81:d0:d5:26:8f:75:92:ab:0f:6a: d5:90:0d:15:17:02:1d:b8:b2:60:3c:45:06:bc:91:4f:a9:99: 6e:59:8e:d6:7b:20:c1:70:bd:d7:4a:b2:18:a4:8d:d1:71:e4: e1:17:27:eb:50:15:5b:43:25:66:80:d8:38:d2:57:ae:58:d2: 55:c4:fe:37:b7:cd:f4:3d:06:f5:23:26:44:11:12:a9:25:6a: f7:cf:83:42:6e:92:1d:85:0f:26:c8:c0:95:f1:fc:c7:bc:31: c7:ba:c1:9b:0a:e4:38:af:ba:fb:f3:41:ad:99:80:de:7f:bd: d0:dc:25:57:3f:f5:cd:9a:dc:30:35:32:e2:41:57:aa:9b:24: 94:46:e4:1f:c5:8b:34:26:5f:13:64:b3:ea:39:36:2d:0e:d0: d1:6f:7a:9f:fa:6d:77:fa:e8:4c:16:6f:db:8b:49:d9:db:83: 12:8d:3d:b4:55:85:f4:71:f5:a6:24:7c:0b:3a:1d:e5:5b:04: fe:ab:09:4f:89:45:c1:0f:c2:22:90:ea:ed:7e:b1:f2:71:11: 95:be:02:6a:f7:80:3e:50:05:67:6a:de:c7:ef:20:35:d3:89: 99:43:76:1b:c8:4d:01:b0:58:6a:fd:fb:27:05:8a:a1:43:35: 5b:fb:8c:3a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsriqIlBRguZX2x2j5QXddLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIzODg1NzY2MGRjN2ZhNjA4NDZmNzY1Yjk0Y2I2OTU3NjI1 NWFkYjYwHhcNMjUxMjE3MDkwMTA0WhcNMjUxMjE4MDkwMTA0WjAzMTEwLwYDVQQD Eyg2YWIyNThmNzU0YTRlZDMzNGI5MDQ3OTgwM2JlNWZiN2IyOGQyM2E4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAntW2QfZsy7a7yfqZccUeNuUhfdFX ZKYTfmkcFJ7Kd50g76Dq1+2V9amyHoCpz/JhvBKlw+njSHznzjmba5syxXMJUktY XyhDnUHCY4nn3v+piaUlibjWlF3eP+F4XA3yMszeYX5jMIOVDTRus3lsio60dmYD l88NUTOj3V5mm8eu2XWz3VaaCulTeJpGX5SSXL+2cReB5Jgh8ApG/1kRpudFE/Lo 5T+tPUNV8jUxqhLgYFNvUbJa+Vtxjsn9/hC4tS5BR9QVRcob8UjOlV4YYKM5DaDg EWNlvvP4Ej/RdgQE5QkpUT4GVtEDufa/uEQEmbzXLvCdeHLAgym9u0aDXQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGqyWPdUpO0zS5BHmAO+X7eyjSOoMB8GA1UdIwQY MBaAFCOIV2YNx/pghG92W5TLaVdiVa22MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSTRoWFpnM0gtbUNFYjNaYmxNdHBWMkpWcmJZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMi85NDkyN2YtN2UwOC00ZjIxLTliYmEt MGY4NzZhYmQxZTMwLzEvSTRoWFpnM0gtbUNFYjNaYmxNdHBWMkpWcmJZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMi85NDkyN2YtN2UwOC00ZjIxLTliYmEtMGY4NzZhYmQxZTMw LzEvSTRoWFpnM0gtbUNFYjNaYmxNdHBWMkpWcmJZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQc7+whbC blSB0NUmj3WSqw9q1ZANFRcCHbiyYDxFBryRT6mZblmO1nsgwXC910qyGKSN0XHk 4Rcn61AVW0MlZoDYONJXrljSVcT+N7fN9D0G9SMmRBESqSVq98+DQm6SHYUPJsjA lfH8x7wxx7rBmwrkOK+6+/NBrZmA3n+90NwlVz/1zZrcMDUy4kFXqpsklEbkH8WL NCZfE2Sz6jk2LQ7Q0W96n/ptd/roTBZv24tJ2duDEo09tFWF9HH1piR8Czod5VsE /qsJT4lFwQ/CIpDq7X6x8nERlb4CaveAPlAFZ2rex+8gNdOJmUN2G8hNAbBYav37 JwWKoUM1W/uMOg== -----END CERTIFICATE-----Generated at Wed Dec 17 19:05:12 2025 by rpki-client