This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/1197f2-7f8e-48e4-bda9-f5bb2b2d63be/1/ii4u4759dSXtdLeq4H6Srsr4STY.mft File: ii4u4759dSXtdLeq4H6Srsr4STY.mft (raw, json) Hash identifier: c9yExVWZF+i8PjJ156P4G7ht3wQPmwwGawrEZNeCm9Y= Subject key identifier: F4:F5:44:53:3D:E9:F0:44:A9:B6:72:A0:07:FD:1B:8A:54:C6:86:D7 Authority key identifier: 8A:2E:2E:E3:BE:7D:75:25:ED:74:B7:AA:E0:7E:92:AE:CA:F8:49:36 Certificate issuer: /CN=8a2e2ee3be7d7525ed74b7aae07e92aecaf84936 Certificate serial: 019B1C1786BF598EC03275B7B7D5B8F5ED10 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ii4u4759dSXtdLeq4H6Srsr4STY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/1197f2-7f8e-48e4-bda9-f5bb2b2d63be/1/ii4u4759dSXtdLeq4H6Srsr4STY.mft Manifest number: 0605 Signing time: Sun 14 Dec 2025 09:01:02 +0000 Manifest this update: Sun 14 Dec 2025 09:01:02 +0000 Manifest next update: Mon 15 Dec 2025 09:01:02 +0000 Files and hashes: 1: ETp4ram_5wDX-QYsHkSwfey16LY.roa (hash: fc9E3PvcS1jfb9J0ZMzkrwdWGh4l1nHW4cyDiTGJbiU=) 2: ii4u4759dSXtdLeq4H6Srsr4STY.crl (hash: ZKyc/WNVDirVIMzhterxVyLIcW407PmlNB/uSwbPTfY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/1197f2-7f8e-48e4-bda9-f5bb2b2d63be/1/ii4u4759dSXtdLeq4H6Srsr4STY.crl rsync://rpki.ripe.net/repository/DEFAULT/37/1197f2-7f8e-48e4-bda9-f5bb2b2d63be/1/ii4u4759dSXtdLeq4H6Srsr4STY.mft rsync://rpki.ripe.net/repository/DEFAULT/ii4u4759dSXtdLeq4H6Srsr4STY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 15 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:1c:17:86:bf:59:8e:c0:32:75:b7:b7:d5:b8:f5:ed:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8a2e2ee3be7d7525ed74b7aae07e92aecaf84936 Validity Not Before: Dec 14 09:01:02 2025 GMT Not After : Dec 15 09:01:02 2025 GMT Subject: CN=f4f544533de9f044a9b672a007fd1b8a54c686d7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:2d:48:ef:d6:e8:7b:34:98:45:99:83:86:cd: e0:d7:2c:ca:33:2d:4e:e8:da:a9:eb:bb:0a:fd:0a: 1f:49:02:fd:33:2a:22:90:f1:9f:1a:a8:be:d3:64: ab:2c:3b:7c:33:9d:77:77:4e:93:1a:aa:40:c7:d6: 16:8e:4a:b1:f9:1f:96:22:d2:d7:2e:22:50:e6:23: cd:96:00:a3:e4:b3:af:fa:5c:d0:2d:45:1b:44:4a: 49:28:7c:ad:3a:f3:cb:50:de:1c:e8:0b:b9:cb:d6: a9:41:71:3c:6b:37:4f:2a:75:d1:a7:30:01:8b:e2: 74:b7:a1:53:7f:90:b0:6b:00:3d:7b:a0:7a:55:93: b4:74:56:19:0b:e4:8c:43:bb:10:5a:11:4a:0e:54: cf:b0:f9:94:0a:44:df:44:a5:4c:b6:5f:fc:8e:cd: 39:72:1f:62:8f:61:a5:25:ff:e3:2c:81:b2:c6:9a: 6b:c8:18:29:52:fa:30:95:2c:fc:eb:83:b6:a2:f6: 12:fd:91:58:51:2d:36:22:71:27:11:bf:3a:5f:79: 2f:81:b9:d1:c3:82:91:01:9e:34:dd:de:44:8a:50: 9f:f4:67:1d:3d:51:10:1e:b4:d8:ae:f2:40:be:7c: 08:3c:02:f2:07:5b:b9:a6:57:75:fb:ad:8b:0f:07: 02:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:F5:44:53:3D:E9:F0:44:A9:B6:72:A0:07:FD:1B:8A:54:C6:86:D7 X509v3 Authority Key Identifier: keyid:8A:2E:2E:E3:BE:7D:75:25:ED:74:B7:AA:E0:7E:92:AE:CA:F8:49:36 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ii4u4759dSXtdLeq4H6Srsr4STY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/1197f2-7f8e-48e4-bda9-f5bb2b2d63be/1/ii4u4759dSXtdLeq4H6Srsr4STY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/37/1197f2-7f8e-48e4-bda9-f5bb2b2d63be/1/ii4u4759dSXtdLeq4H6Srsr4STY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 88:c6:2b:5d:1c:10:dc:7a:bd:cf:d3:23:f3:8d:17:c9:93:4e: 85:ba:f9:e5:80:30:65:f1:f8:54:03:b8:31:b1:0a:0a:ca:c3: 5e:a3:15:e7:1a:10:2e:55:04:52:fd:aa:50:f5:14:ad:1d:c6: 77:6e:10:31:f3:7e:46:46:2d:57:23:8e:5c:bc:82:0d:66:49: 85:d7:4f:fb:8d:09:ee:7f:68:cd:ce:34:4d:2d:dc:2d:71:df: e5:4c:73:e2:45:7b:bc:b0:bb:fe:7c:4b:dd:ac:0e:21:26:74: 96:89:2c:be:b4:8a:f8:95:36:e3:8f:0b:0e:19:50:ea:a0:db: 30:5b:08:e2:8a:b0:d6:c3:2c:2c:7a:c5:14:36:e2:03:d1:10: f9:58:0f:d7:64:42:37:f9:ec:9a:ba:75:43:13:16:c1:3f:e4: e0:4c:a0:ad:98:9b:72:d1:d4:fc:ff:72:19:06:65:9d:37:c0: 00:62:ca:42:d3:ae:07:c9:7a:c2:f2:c1:ed:8e:3e:c1:2e:0e: ca:8e:5f:62:4c:4b:65:71:f5:23:b4:39:b7:57:bc:73:fe:e0: 43:23:ae:9b:a6:3b:35:8b:f7:3c:94:42:61:94:d3:0f:7a:7b: 67:58:2a:98:c3:b2:57:20:f4:20:fa:1d:33:83:05:ba:8b:61: 1e:9f:69:83 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZscF4a/WY7AMnW3t9W49e0QMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhhMmUyZWUzYmU3ZDc1MjVlZDc0YjdhYWUwN2U5MmFlY2Fm ODQ5MzYwHhcNMjUxMjE0MDkwMTAyWhcNMjUxMjE1MDkwMTAyWjAzMTEwLwYDVQQD EyhmNGY1NDQ1MzNkZTlmMDQ0YTliNjcyYTAwN2ZkMWI4YTU0YzY4NmQ3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1y1I79boezSYRZmDhs3g1yzKMy1O 6Nqp67sK/QofSQL9MyoikPGfGqi+02SrLDt8M513d06TGqpAx9YWjkqx+R+WItLX LiJQ5iPNlgCj5LOv+lzQLUUbREpJKHytOvPLUN4c6Au5y9apQXE8azdPKnXRpzAB i+J0t6FTf5CwawA9e6B6VZO0dFYZC+SMQ7sQWhFKDlTPsPmUCkTfRKVMtl/8js05 ch9ij2GlJf/jLIGyxppryBgpUvowlSz864O2ovYS/ZFYUS02InEnEb86X3kvgbnR w4KRAZ403d5EilCf9GcdPVEQHrTYrvJAvnwIPALyB1u5pld1+62LDwcCCQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPT1RFM96fBEqbZyoAf9G4pUxobXMB8GA1UdIwQY MBaAFIouLuO+fXUl7XS3quB+kq7K+Ek2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaWk0dTQ3NTlkU1h0ZExlcTRINlNyc3I0U1RZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNy8xMTk3ZjItN2Y4ZS00OGU0LWJkYTkt ZjViYjJiMmQ2M2JlLzEvaWk0dTQ3NTlkU1h0ZExlcTRINlNyc3I0U1RZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNy8xMTk3ZjItN2Y4ZS00OGU0LWJkYTktZjViYjJiMmQ2M2Jl LzEvaWk0dTQ3NTlkU1h0ZExlcTRINlNyc3I0U1RZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiMYrXRwQ 3Hq9z9Mj840XyZNOhbr55YAwZfH4VAO4MbEKCsrDXqMV5xoQLlUEUv2qUPUUrR3G d24QMfN+RkYtVyOOXLyCDWZJhddP+40J7n9ozc40TS3cLXHf5Uxz4kV7vLC7/nxL 3awOISZ0loksvrSK+JU2448LDhlQ6qDbMFsI4oqw1sMsLHrFFDbiA9EQ+VgP12RC N/nsmrp1QxMWwT/k4EygrZibctHU/P9yGQZlnTfAAGLKQtOuB8l6wvLB7Y4+wS4O yo5fYkxLZXH1I7Q5t1e8c/7gQyOum6Y7NYv3PJRCYZTTD3p7Z1gqmMOyVyD0IPod M4MFuothHp9pgw== -----END CERTIFICATE-----Generated at Sun Dec 14 15:01:22 2025 by rpki-client