This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/dfbfc4-cc3f-477c-8d76-a8c576224ba2/1/i5HgoQS1s93x9dCOessreeDVZvk.mft File: i5HgoQS1s93x9dCOessreeDVZvk.mft (raw, json) Hash identifier: imviezq6b88ccPW8IgW1oX2onWI9NvD4lgPOKFkW4Nw= Subject key identifier: A7:5B:1A:93:59:37:AF:0C:81:F6:DA:3B:FC:9D:D8:9E:59:A6:72:D2 Authority key identifier: 8B:91:E0:A1:04:B5:B3:DD:F1:F5:D0:8E:7A:CB:2B:79:E0:D5:66:F9 Certificate issuer: /CN=8b91e0a104b5b3ddf1f5d08e7acb2b79e0d566f9 Certificate serial: 019B27405040E6E01359FEFEC8E280B16126 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i5HgoQS1s93x9dCOessreeDVZvk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/dfbfc4-cc3f-477c-8d76-a8c576224ba2/1/i5HgoQS1s93x9dCOessreeDVZvk.mft Manifest number: 1188 Signing time: Tue 16 Dec 2025 13:01:24 +0000 Manifest this update: Tue 16 Dec 2025 13:01:24 +0000 Manifest next update: Wed 17 Dec 2025 13:01:24 +0000 Files and hashes: 1: KwomHtAHnCM0D-yGdW_0Sf3mopc.roa (hash: nJuUP0j6H239g1R7GMJyKq0zviXnK+AhK7Q4U43dyg4=) 2: ZYlcf7X6lFUqPdlZgjx7h6pY7f0.roa (hash: Z91lhusvfId6xXTKVa6gm5qmkQJNcO8M7YoIqY37LFU=) 3: i5HgoQS1s93x9dCOessreeDVZvk.crl (hash: 4C8Y+S5YoBcDRwEex/8PtkfK0z7Ig3jSdsA44NvuzC8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/dfbfc4-cc3f-477c-8d76-a8c576224ba2/1/i5HgoQS1s93x9dCOessreeDVZvk.crl rsync://rpki.ripe.net/repository/DEFAULT/43/dfbfc4-cc3f-477c-8d76-a8c576224ba2/1/i5HgoQS1s93x9dCOessreeDVZvk.mft rsync://rpki.ripe.net/repository/DEFAULT/i5HgoQS1s93x9dCOessreeDVZvk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 13:01:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:27:40:50:40:e6:e0:13:59:fe:fe:c8:e2:80:b1:61:26 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8b91e0a104b5b3ddf1f5d08e7acb2b79e0d566f9 Validity Not Before: Dec 16 13:01:24 2025 GMT Not After : Dec 17 13:01:24 2025 GMT Subject: CN=a75b1a935937af0c81f6da3bfc9dd89e59a672d2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:b8:1a:b5:e8:dd:cd:33:21:0c:85:5c:cb:e4: 88:1f:1c:b5:f1:32:b7:7e:79:c2:51:41:e8:c4:91: 72:6c:bb:56:ac:78:14:55:c1:b6:b2:64:1f:c1:91: 9f:bf:f0:78:95:85:0d:81:e0:84:17:5a:0a:11:c5: d8:50:02:cf:e5:f2:fe:f8:96:a9:77:3a:b8:ef:04: d3:c8:26:8e:af:c9:ff:14:a3:b4:2b:aa:5b:50:b3: 10:5a:c7:08:39:ea:37:e7:9e:de:bb:22:9d:3f:a2: d1:b9:51:62:36:f1:28:81:c1:f2:97:8a:e7:60:c1: 49:28:28:23:ce:e9:5b:72:d7:ca:f2:9f:0d:cb:3a: 7c:1d:20:7d:d9:c6:81:0b:8d:95:79:94:b5:5b:34: 07:7a:72:0c:81:6c:5c:a9:7e:71:94:b5:34:33:df: 5d:7c:46:32:54:01:1f:a6:94:eb:dd:6d:e2:4b:14: 34:dc:88:a2:06:70:4a:41:fd:b5:a7:32:14:6d:1d: 0c:c3:f1:64:4b:03:c3:b2:e1:e6:0e:89:27:3d:11: 3d:b9:b2:90:5e:66:e1:41:07:38:6b:25:ae:79:f1: db:5c:bf:2f:7d:1c:d7:57:a0:b7:78:6e:cc:ea:b9: bd:06:96:22:40:09:7b:93:ad:b7:44:03:32:1e:83: 75:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:5B:1A:93:59:37:AF:0C:81:F6:DA:3B:FC:9D:D8:9E:59:A6:72:D2 X509v3 Authority Key Identifier: keyid:8B:91:E0:A1:04:B5:B3:DD:F1:F5:D0:8E:7A:CB:2B:79:E0:D5:66:F9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i5HgoQS1s93x9dCOessreeDVZvk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/dfbfc4-cc3f-477c-8d76-a8c576224ba2/1/i5HgoQS1s93x9dCOessreeDVZvk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/43/dfbfc4-cc3f-477c-8d76-a8c576224ba2/1/i5HgoQS1s93x9dCOessreeDVZvk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption da:f1:44:fb:06:24:33:56:e3:03:7a:b9:52:40:72:56:a7:ab: 5f:98:30:eb:e2:60:04:6a:13:8b:48:51:5c:c2:fd:01:19:d2: 0c:40:e4:6e:f7:2e:07:f8:4b:c8:4e:a4:2b:6f:ef:2c:30:fe: 88:d5:9f:80:77:67:c1:b6:d1:a6:0c:50:e5:18:bb:85:25:42: 19:26:9b:47:21:f2:7d:6f:24:10:9d:35:a1:5d:24:6c:9c:aa: d9:26:0b:ae:13:a1:74:88:eb:01:4f:05:bf:4b:c2:b1:26:01: af:3d:3a:77:56:a3:9d:e8:ee:61:8d:71:97:72:5c:56:00:37: f6:94:03:54:64:cd:84:96:9b:f3:8b:48:18:8c:7d:c6:13:f1: 93:1d:d9:2e:c3:47:e8:af:33:f8:9a:80:ee:4e:28:95:e7:60: d4:89:b5:0f:d1:47:60:d7:a6:52:74:67:4e:b5:6a:34:a5:e7: 60:b9:8f:7a:49:0b:94:cc:72:4f:54:02:56:a9:83:32:af:74: 1f:ec:08:da:71:b2:ae:4c:09:27:84:39:d8:c3:7b:a8:26:4b: 79:16:7e:5b:f6:55:14:32:c8:e5:68:2d:11:ed:39:88:38:e4: d3:af:04:aa:05:6d:bc:cb:7d:5e:ac:e4:c5:f2:f6:52:0d:7b: 5c:cd:f6:90 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsnQFBA5uATWf7+yOKAsWEmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhiOTFlMGExMDRiNWIzZGRmMWY1ZDA4ZTdhY2IyYjc5ZTBk NTY2ZjkwHhcNMjUxMjE2MTMwMTI0WhcNMjUxMjE3MTMwMTI0WjAzMTEwLwYDVQQD EyhhNzViMWE5MzU5MzdhZjBjODFmNmRhM2JmYzlkZDg5ZTU5YTY3MmQyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv7gatejdzTMhDIVcy+SIHxy18TK3 fnnCUUHoxJFybLtWrHgUVcG2smQfwZGfv/B4lYUNgeCEF1oKEcXYUALP5fL++Jap dzq47wTTyCaOr8n/FKO0K6pbULMQWscIOeo3557euyKdP6LRuVFiNvEogcHyl4rn YMFJKCgjzulbctfK8p8Nyzp8HSB92caBC42VeZS1WzQHenIMgWxcqX5xlLU0M99d fEYyVAEfppTr3W3iSxQ03IiiBnBKQf21pzIUbR0Mw/FkSwPDsuHmDoknPRE9ubKQ XmbhQQc4ayWuefHbXL8vfRzXV6C3eG7M6rm9BpYiQAl7k623RAMyHoN1cQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKdbGpNZN68MgfbaO/yd2J5ZpnLSMB8GA1UdIwQY MBaAFIuR4KEEtbPd8fXQjnrLK3ng1Wb5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaTVIZ29RUzFzOTN4OWRDT2Vzc3JlZURWWnZrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80My9kZmJmYzQtY2MzZi00NzdjLThkNzYt YThjNTc2MjI0YmEyLzEvaTVIZ29RUzFzOTN4OWRDT2Vzc3JlZURWWnZrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80My9kZmJmYzQtY2MzZi00NzdjLThkNzYtYThjNTc2MjI0YmEy LzEvaTVIZ29RUzFzOTN4OWRDT2Vzc3JlZURWWnZrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA2vFE+wYk M1bjA3q5UkByVqerX5gw6+JgBGoTi0hRXML9ARnSDEDkbvcuB/hLyE6kK2/vLDD+ iNWfgHdnwbbRpgxQ5Ri7hSVCGSabRyHyfW8kEJ01oV0kbJyq2SYLrhOhdIjrAU8F v0vCsSYBrz06d1ajnejuYY1xl3JcVgA39pQDVGTNhJab84tIGIx9xhPxkx3ZLsNH 6K8z+JqA7k4oledg1Im1D9FHYNemUnRnTrVqNKXnYLmPekkLlMxyT1QCVqmDMq90 H+wI2nGyrkwJJ4Q52MN7qCZLeRZ+W/ZVFDLI5WgtEe05iDjk068EqgVtvMt9Xqzk xfL2Ug17XM32kA== -----END CERTIFICATE-----Generated at Tue Dec 16 17:21:38 2025 by rpki-client